DFAL “Completed Application” Requirement Explained for California Crypto License and The Current Penalties
Since California’s Digital Financial Assets Law (DFAL) went into full effect on July 1, 2026, and if you have not yet applied for the license before that date, California expects you to halt business activity until you obtain a license. A new DFAL completed application requires new steps to avoid penalties.
The Transition Rule, in Plain Terms
DFAL is administered by the Department of Financial Protection and Innovation (DFPI), and the licensing requirement, originally set for July 1, 2025, was pushed to July 1, 2026 under AB 1934. DFPI started accepting applications through the NMLS portal on March 9, 2026, giving companies some time to apply.
Under Financial Code § 3201(b), a business can keep operating past the licensing deadline if it has submitted a completed application, as defined by statute. DFPI’s proposed regulations (PRO 02-23) speak to this directly.
On June 30, 2026, Governor Newsom signed SB 97, which further clarified the transition period, expanded stablecoin-related oversight, and sharpened the scope of what counts as covered activity, all details that feed directly into what “completed” means in practice.
Why “Completed” Is Important
A DFAL application isn’t a form you fill out and forget. It requires detailed disclosures about your business structure, financial condition, policies and procedures, and, depending on your activities, potentially stablecoin-specific representations.
An application that’s missing required elements, inconsistent, or thin on policy documentation isn’t “completed” in the sense the statute means, even if it’s been sitting in the NMLS queue for months.
That gap matters because the consequence of an incomplete application isn’t a follow-up email from DFPI. It’s the loss of transition protection altogether, which puts a business back in “unlicensed activity” territory, with civil penalty exposure running up to $100,000 per day.
DFPI has already shown it’s willing to use that authority: a $300,000 penalty against Bitcoin ATM operator Coinme in 2025, and a $500,000 penalty against Nexo Capital in January 2026, both before the full licensing mandate even took effect.
Questions Worth Asking About Your Own Filing
- Does the application reflect your current business activity, or an earlier, narrower version of it?
- Have your policies and procedures been updated to match what DFPI’s proposed rules (PRO 02-23) and SB 97’s clarified scope actually require?
- If you offer bundled services, say, both custody and exchange functionality, does your filing account for the layered obligations that can be triggered?
- Has anything changed since you filed (new product line, new state of incorporation, new stablecoin activity) that should have been reflected in an amendment?
If you’re not confident in the answers, that uncertainty is itself the risk, not because DFPI will necessarily come knocking tomorrow, but because the daily penalty clock starts running retroactively to the point activity became unlicensed, not to the point it’s discovered.
Where Hodder Law Can Help
We’re currently working two DFAL applications through to completion for clients, and we’ve spent the past several months in the weeds of what DFPI actually wants to see versus what a bare-minimum filing includes.
If you want a second set of eyes on an application you’ve already submitted, or you’re still deciding whether to file at all, we’re a good place to start that conversation.
Statutes & Legislation
- Financial Code § 3201 (the completed-application/transition rule): https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=FIN§ionNum=3201
- AB 1934 (2024 — pushed the licensing deadline from July 1, 2025 to July 1, 2026): https://leginfo.legislature.ca.gov/faces/billTextClient.xhtml?bill_id=202320240AB1934
- SB 97 (signed June 30, 2026 — repealed DFAL’s stablecoin chapter and formally wrote the “completed application” standard into the statute): https://leginfo.legislature.ca.gov/faces/billNavClient.xhtml?bill_id=202520260SB97
Regulatory
- DFPI proposed regulations (PRO 02-23) full text: https://dfpi.ca.gov/wp-content/uploads/2025/04/TEXT.pdf
- DFAL program page (already linked in your post): https://dfpi.ca.gov/regulated-industries/digital-financial-assets/
Enforcement actions
- Coinme consent order / $300,000 penalty: https://dfpi.ca.gov/press_release/dfpi-fines-coinme-300000-related-to-crypto-kiosk-violations-secures-51700-in-restitution-for-victims/
- Nexo Capital consent order (signed PDF, $500,000 penalty): https://dfpi.ca.gov/wp-content/uploads/2026/01/Consent-Order-Nexo-Capital-Inc.pdf
This post is for general informational purposes and does not constitute legal advice. Whether your application meets the statutory definition of “completed” depends on the specific facts of your business. Connect with Hodder Law today to help navigate this process.
