BIS Targets Crypto Exchanges With Bank-Style Rules

The number that should be on every crypto exchange board deck this quarter is $6 to $8 trillion, the estimated recent quarterly trading volume for spot markets, matched by a similar range for bitcoin futures. That is the size at which the Bank for International Settlements has stopped treating large exchanges as fintech curiosities and started treating them as systemically relevant institutions. The policy direction is clear, and the capital implications for any platform running earn products are the kind of thing that rearranges a five-year roadmap.

The Numbers

The Financial Stability Institute, the arm of the BIS that sets the intellectual agenda for national regulators, has published a report analyzing cryptoasset service providers and focusing on what it calls multifunction cryptoasset intermediaries, or MCIs. As Ledger Insights reported, the paper names Binance, Bybit, Coinbase, Crypto.com, Kraken, MEXC and OKX as the reference set. That list matters. It draws a regulatory bright line between diversified exchange conglomerates and narrower single-service venues, and it puts seven companies in the same prudential bucket regardless of where they are domiciled.

The $6 to $8 trillion quarterly figure for spot covers the full basket of cryptoassets. The same range for futures is bitcoin-only, which is a conservative framing. Industry figures suggest the broader crypto derivative market, across all assets, could exceed $24 trillion a quarter. To put that in context, that is the scale at which traditional derivatives venues get multiple onsite examiners, capital buffers indexed to open interest, and living wills. A CFO staring at those numbers should be asking what the prudential capital charge looks like if their venue is classified as deposit-taking, because the BIS paper is pointing squarely at that reclassification.

The authors found that several MCIs provide bank-like activities, specifically maturity transformation and credit transformation. Those are not throwaway terms. Maturity transformation means funding long-duration positions with short-duration liabilities. Credit transformation means intermediating between counterparties with different risk profiles. These are the exact functions that justify bank capital regimes in the first place. The policy recommendation is prudential requirements adapted to the specific activities of each entity, which in regulator-speak means proportional but binding. This is not a voluntary code of conduct.

What's Actually New

Plenty of regulators have taken swings at crypto exchanges since 2022. The SEC has fought a multi-year battle over securities classification, MiCA has standardized token issuance rules across the EU, and national regulators have picked off individual products. What is different in this paper is the framing. The BIS is not asking whether tokens are securities. It is asking whether the balance sheet of a large exchange behaves like a bank's balance sheet. That is a far more dangerous question for the industry, because the answer in several cases is yes.

The specific activity the authors flagged as raising the greatest concern is earn programs. In an earn program, a client transfers ownership of assets to the exchange, and the exchange has significant discretion over how those assets are used. They can fund loans. They can back margin lending to other customers. They can capitalize proprietary trading desks. They can sit on the corporate balance sheet as working capital. The authors characterize this as deposit-like behavior, and note the inconvenient fact that it does not require a banking license in most jurisdictions.

For a platform engineering team, this matters more than another token listing debate. If earn liabilities get treated as deposits, the architectural requirements change. Segregation of customer assets stops being a marketing feature and becomes a regulatory trigger. Real-time attestations of reserve composition become table stakes. Internal ledgers need to produce bank-grade reporting, which is not what most exchange platforms were built to do. I would argue the cycle of Proof-of-Reserves snapshots we saw after 2022 was the opening move. The next move is continuous supervisory data feeds of the sort that regulated banks already provide.

What's Priced In for Crypto and DeFi

Some of this the market has seen coming. Coinbase has spent years building out its compliance and custody infrastructure with the explicit bet that bank-style oversight is the end state, and the stock price partly reflects that. Kraken has been moving in the same direction. For those venues, prudential treatment is a moat, not a threat. They will absorb the compliance cost because their competitors cannot.

What is not priced in is the impact on the offshore or lightly regulated tier. Bybit, MEXC and OKX operate with cost structures that assume a lighter compliance overhead. If national regulators in major markets adopt the BIS framing, the cost to serve customers in those jurisdictions goes up materially. Either these venues withdraw from regulated markets, which concentrates flow in a handful of licensed players, or they build out bank-grade controls that compress their margins toward those of the compliant incumbents. Neither outcome is what current market share assumes.

The DeFi implication cuts the other way and is worth watching. If centralized earn products come under deposit-style capital requirements, the yield spread that CeFi platforms can offer shrinks. Non-custodial lending protocols on Ethereum and other chains do not transfer ownership in the same legal sense, so they sit outside the deposit analogy. Expect renewed capital flow toward on-chain yield venues that can credibly distinguish themselves from the custodial earn model the BIS has targeted.

Contrarian View

The consensus read is that bank-style regulation kills the exchange business model. I am not convinced. The more interesting possibility is that it entrenches the largest MCIs permanently. Bank regulation is expensive, and that expense is a fixed cost. Once a venue is paying for prudential capital, supervisory reporting and regulated custody, the marginal cost of each additional product line is low. The firms that survive the transition end up with regulatory capture, and the barrier to entry against new exchanges goes from difficult to effectively impossible.

The General Counsel at any MCI on that list of seven should be asking their CFO this week a very specific question: what is our pro forma capital ratio under a Basel-style charge applied to earn liabilities, and at what threshold does our business become unviable versus simply lower margin? That number determines whether the firm is a winner or a casualty of the coming rule cycle, and it is a number every serious platform should already have modeled.

There is also a scenario where the paper gets reinterpreted downward by national regulators who do not want to own the political risk of applying bank law to crypto. The BIS produces the intellectual framework. Implementation is a national decision, and the gap between policy paper and enforceable rule is typically three to five years. That is plenty of time for a well-capitalized venue to restructure its earn product into something that looks less like a deposit and more like a regulated investment vehicle.

Key Takeaways

• The BIS is shifting the regulatory frame from securities classification to prudential treatment. That targets the balance sheet, not the token, and it is a harder problem for exchanges to architect around.
• Earn programs are the single largest exposure. Any platform whose yield product transfers ownership to the house is now defending a deposit-taking activity without a banking license.
• The seven named MCIs are effectively a regulatory cohort now. Expect coordinated supervisory attention across jurisdictions rather than piecemeal enforcement.
• Teams evaluating build-versus-buy for custody, reserves reporting and margin systems should now be asking whether their vendors can produce bank-grade supervisory data, not just customer-facing dashboards.
• The likely winners are the already-compliant venues. The likely losers are mid-tier offshore exchanges whose margin structures assume a lighter regulatory load.