Skip to content

Foundations · Lesson 2 of 9

Why states regulate (and the feds, sometimes)

The split between state and federal oversight, why one activity can trigger both, and what that means for paperwork.

About 3 minutes to read

Builds on

What you'll learn

  • The general split between state-licensed and federally-licensed activities
  • Where the two overlap and why the paperwork stacks
  • What primary versus concurrent oversight typically looks like

State first, federal sometimes

The default in the United States is that the states regulate business activity inside their borders. Federal oversight layers on top in specific industries: banking, securities, certain types of consumer finance, money transmission with cross-border movement.

For most licensable activities, the state is the primary regulator and the place where the day-to-day paperwork lives.

Where they overlap

Two patterns show up over and over:

Dual oversight. A company is examined by a state agency for its state activities and by a federal regulator for the federal piece. The exams happen on different schedules, the document requests are different, and the same business has two separate compliance teams in mind.

Passporting. In some industries a federal registration or qualification gives a company a head start on the state filings, but typically does not replace them. The state still wants the application, the fee, and the renewal.

What this means in practice

Most operators new to a regulated industry are surprised by how much of the work is state-level, not federal. A multi-state operator typically has more individual state interactions in a year than federal ones.

How we'd handle it

Mapping activity-by-activity, state-by-state, to the right license type is the kind of thing that's easy to underestimate, especially as products evolve. Cornerstone Licensing runs that mapping for you and then handles the applications and renewals so the calendar stays current.

FAQ

Questions operators ask about this lesson

Does a federal license cover the states?

Almost never on its own. Federal qualifications usually narrow what the states ask for, not what they require entirely.

Live Regulatory Feed

Recent Regulatory Activity

Rule changes and agency updates we're tracking across all states for this topic. Most operators run in more than one state, so we show what's moving everywhere.

  • ActionCalifornia DFPICANov 14, 2026

    California DFPI Recovery for Scam Victims

    The California DFPI announced recovering over $4. 8 million for victims of the CoinFlip scam, which involved significant fraud against consumers.

  • ActionMinnesota Department of CommerceMNNov 14, 2026

    Minnesota NMLS Compliance Transition for Kiosk Operators

    Minnesota initiated its NMLS compliance transition for virtual currency kiosk operators starting November 1, 2026. This requires operators to follow standard NMLS renewal processes to remain compliant.

  • ActionCalifornia DFPICANov 14, 2026

    California DFPI Enforcement Action: Western Union Acquisition

    The California Department of Financial Protection and Innovation imposed conditions on Western Union's proposed acquisition of Intermex, focusing on consumer choice and anti-money-laundering controls. This action reflects the DFPI's rigorous oversight of financial acquisitions to protect consumers.

  • ActionFTCNov 14, 2026

    FTC Enforcement Action: Phantom Debt Collection

    The FTC secured a temporary restraining order against McDonnell & Associates LLC for engaging in phantom debt collection practices, which involved misleading consumers about debts they allegedly owed. This enforcement action underscores the ongoing regulatory scrutiny on debt collection practices.