If you're a US-based crypto user, the rules around what you can do, where you can do it, and how you report it have shifted more in the last two years than in the previous decade. The headlines have been chaotic. The actual day-to-day impact for a normal user is narrower than it sounds.

Here's where things landed.

What stayed the same

  • You can still buy, sell, and hold crypto on regulated US exchanges. Coinbase, Kraken, Gemini, and a handful of others continue to operate normally.
  • You still owe capital gains tax on every sale, swap, or use of crypto. Every realized gain is a taxable event. Your exchange now sends a 1099 form to the IRS automatically. Pretending you didn't owe is no longer viable.
  • Self-custody is still legal. You can hold your own keys, run your own wallet, send transactions to whoever you want. This was never seriously threatened legally, despite what social media said.

What changed

A few real shifts:

Stablecoins now have a federal framework. USDC, USDT, and similar dollar-backed tokens are explicitly recognized as a regulated category. Issuers must hold matching dollar reserves and submit to audits. This is a net positive for users — the implicit guarantee of "1 dollar in, 1 dollar out" is now an explicit one.

Spot crypto ETFs are normal financial products now. You can buy bitcoin or ether exposure inside a regular brokerage account (Fidelity, Schwab, Vanguard) the same way you'd buy an S&P 500 ETF. For people who don't want to deal with wallets, this is the easiest legal path.

The line between "security" and "commodity" has been drawn more clearly. Most major cryptos that operate without a central company controlling them — bitcoin, ether, some others — are commodities and fall under the CFTC. Tokens that more closely resemble a startup raising money still fall under the SEC. This used to be ambiguous; it's now mostly settled.

DeFi front ends have to do basic compliance. Web interfaces that let US users access DeFi protocols are increasingly geo-blocking or asking for KYC information. The protocols themselves (the underlying smart contracts) are permissionless. The websites that let normal people interact with them are not.

What's still messy

  • State-level rules vary. New York has its own BitLicense regime. Texas, Wyoming, and Florida are notably more permissive. Most users feel this only when they try to open an account on a specific exchange.
  • Yield products are restricted. Some staking and lending products that were available a few years ago aren't available to US users anymore. The asset is fine; the wrapper around it isn't.
  • The "broker" definition for tax reporting is still being argued. This mostly affects miners, validators, and some DeFi participants.

What you should actually do

Three things cover 90% of normal users:

  1. Use a regulated US exchange for buying and selling. It's not optional anymore for documented activity.
  2. Track your basis. Every buy creates a cost basis. Every sell or swap closes a position. Use a tool (Koinly, CoinTracker, TokenTax) or a careful spreadsheet. The IRS does have your data; reconciling it is your job.
  3. Don't move large balances onto unfamiliar offshore exchanges to chase yield. The regulatory ground has moved. The compliance overhead is now sitting on the operators, not on you, as long as you use the operators that comply.

Takeaway

The US crypto landscape in 2026 is more boring and more clear than it was. That's mostly good news for normal users. Day-to-day, the biggest change is that taxes are now automatic and unavoidable, and the path to legal exposure (ETFs, regulated exchanges, stablecoins) is wider than it's ever been.

This is general information, not tax or legal advice. If you have a complicated situation, talk to a professional who knows crypto.