Global Crypto Regulation: Compliance and Enforcement Outlook for Accounting Firms and CFOs

Regulatory pressure on digital assets is no longer theoretical. Across the US, EU, UK, Japan, and South Korea, enforcement agencies have moved from passive observation to active intervention, and the firms that have not yet stress-tested their stablecoin accounting, DeFi accounting, and VASP compliance frameworks are running out of runway. BDO's digital assets leader, Javier Alvarez, recently mapped this landscape in an interview with Financier Worldwide, and the picture that emerges is both clear and urgent for accounting professionals and CFOs operating at the intersection of traditional finance and crypto markets.

How the Regulatory Landscape Shifted: From Passive to Proactive

The crypto market's trajectory over the past few years tracks a familiar arc: innovation, euphoria, collapse, and then regulatory reckoning. The failure of a major cryptocurrency exchange exposed serious mismanagement and a near-total absence of transparency. Algorithmic stablecoin protocols collapsed without adequate backstops. Crypto lending platforms went bankrupt, leaving customer funds unprotected and creditors fighting for scraps in courts ill-equipped for the asset class.

These episodes did not just damage investors. They forced regulatory bodies globally to accelerate frameworks that had been moving at a cautious pace. The posture shift Alvarez describes, from passive to proactive, is the defining characteristic of the current enforcement environment. Firms that treat crypto compliance as a back-office afterthought are misreading the moment.

The Core Regulatory Challenges

Three structural tensions drive most of the compliance complexity that accounting firms and CFOs face right now:

• Definition gaps. Whether a digital asset is a security, a commodity, a payment instrument, or something else entirely is still contested in most jurisdictions. The answer determines which regulator has oversight, which disclosure rules apply, and how the asset sits on a balance sheet.
• Jurisdictional arbitrage. Because crypto transactions are borderless, entities can structure themselves to operate from less regulated jurisdictions. This complicates enforcement and creates genuine exposure for counterparties in tightly regulated markets who transact with those entities.
• Technology outpacing rules. Layer 2 networks, DeFi protocols, and NFT platforms evolve faster than regulatory guidance. Compliance teams are routinely asked to assess risk for products that have no clear regulatory analogue.

Jurisdiction-by-Jurisdiction: What Is Actually Happening

Alvarez's analysis covers the major regulatory blocs, and each one is at a different stage of the compliance cycle. Understanding where each jurisdiction sits matters directly for stablecoin accounting treatment, DeFi accounting classification, and audit risk assessment.

United States

The SEC has intensified enforcement on unregistered securities offerings, unregistered trading platforms, and securities fraud involving digital assets. A central debate remains the classification of specific cryptocurrencies as securities under the Howey test, a question that carries enormous accounting consequences: securities-classified assets carry different recognition, measurement, and disclosure requirements than commodities or foreign currency equivalents.

Under the current administration, BDO notes a potential pivot away from broad "regulation by enforcement" at the SEC. Future investigations are expected to concentrate on demonstrable market manipulation, DeFi protocol abuse, NFT fraud, algorithmic stablecoin risks, staked asset treatment, and smart contract vulnerabilities. For CFOs, this means the compliance goalposts are shifting but not disappearing. The focus narrows to fraud and asset security rather than expansive securities classification disputes, but the accountability bar for internal controls remains high.

Separately, congressional activity around digital asset legislation continues to evolve, with potential implications for how assets are taxed and reported. Firms should track legislative developments alongside SEC guidance rather than assuming any single instrument will resolve classification uncertainty.

European Union

MiCA (Markets in Crypto-Assets Regulation) represents the most comprehensive attempt globally to create a unified crypto regulatory framework across multiple jurisdictions. By standardising rules for crypto-asset service providers (CASPs) across EU member states, MiCA directly affects how firms structure their VASP relationships, conduct stablecoin accounting for e-money tokens and asset-referenced tokens, and meet disclosure obligations. For accounting firms with EU clients, MiCA is not a future consideration. It is operational now, and the ESMA CASP register is being actively populated.

The sanctions dimension adds another layer. EU restrictions on specific exchanges and Russia-linked crypto platforms create screening obligations that touch transaction monitoring, counterparty due diligence, and balance sheet exposure classification.

United Kingdom

The FCA is advancing its own regulatory perimeter for crypto, with stablecoins as a specific focus area. Cross-border payment use cases for stablecoins are receiving particular attention. Accounting firms advising UK-based clients need to track FCA authorisation requirements for fiat-backed stablecoins and the disclosure obligations that accompany them, especially as institutional adoption of stablecoin payment rails accelerates.

Japan and South Korea

Both countries have revised their digital asset regulatory frameworks in response to past market failures, with a specific emphasis on customer protection. South Korea is moving toward a consolidated digital asset law, while Japan continues to refine its existing registration-based regime. For accounting firms with clients in Asia-Pacific, the regulatory posture in these markets is maturing quickly, and compliance programmes built for Western frameworks may need significant adaptation.

Stablecoin Accounting: Where Classification Meets Compliance

Stablecoin accounting sits at the intersection of every major regulatory and accounting challenge in the current environment. Whether the instrument in question is a fiat-backed token like USDC, an algorithmic stablecoin, or an asset-referenced token under MiCA, the accounting treatment depends on a classification decision that most standard-setters are still finalising.

USDC Accounting and Fiat-Backed Tokens

For USDC accounting specifically, the key questions centre on whether the token qualifies as a cash equivalent, a financial asset, or an intangible. Under both IFRS and US GAAP, the answer affects liquidity ratios, fair value disclosures, and audit evidence requirements. The BDO analysis reinforces that firms cannot treat stablecoin positions as accounting-neutral simply because the token is pegged to a fiat currency. Reserve composition, redemption terms, and the legal status of the issuer all feed into the classification.

Algorithmic Stablecoins: Heightened Scrutiny

The collapse of algorithmic stablecoin protocols has made regulators across every jurisdiction covered in BDO's analysis acutely sensitive to these instruments. Enforcement focus on algorithmic stablecoins is explicitly named as a US priority going forward. From an accounting perspective, these assets carry impairment risk that fiat-backed tokens do not, and any client or fund holding algorithmic stablecoins should have those positions subject to rigorous fair value assessment and disclosure.

DeFi Accounting and NFT Accounting: The Frontier Challenges

DeFi accounting presents arguably the hardest classification and recognition problems in the current landscape. BDO's analysis flags DeFi protocols as a specific enforcement target in the US, and international bodies including FATF have separately highlighted the regulatory gaps that decentralised protocols create. When a client provides liquidity to a DeFi protocol, the accounting treatment of the liquidity position, any governance tokens received, and the impermanent loss exposure requires judgement calls that most existing standards do not address directly.

For a deeper technical review of how regulators are approaching DeFi compliance gaps, see our coverage of the FATF DeFi regulatory challenges report, which maps the specific supervisory blind spots that accounting firms need to factor into client risk assessments.

NFT Accounting Complexity

NFT accounting is similarly unresolved at the standards level. US enforcement attention is shifting toward NFT fraud rather than NFT classification per se, but the accounting implications are real: are NFTs inventory, intangible assets, or financial instruments? The answer varies by the nature of the NFT, the rights it confers, and the business model of the holder. Firms advising clients with material NFT positions need written accounting policy positions, not informal judgements.

Five Compliance Imperatives for Accounting Firms and CFOs

BDO's practical framework for navigating this environment translates into five operational priorities. These are not aspirational; they reflect the minimum defensible standard given current enforcement activity.

1. Align Compliance Programmes with Applicable Law

This means integrating KYC, AML, sanctions screening, and transaction monitoring into digital asset operations in the same way those controls operate for traditional financial instruments. Firms that treat crypto as a separate, lighter-touch compliance environment are exposed. Regulators are explicitly closing that gap.

2. Identify and Remediate Operational Vulnerabilities

Internal controls over crypto assets need to address fraud risk, misconduct risk, and data security risk. Smart contract vulnerabilities are named specifically in BDO's forward-looking enforcement forecast. For accounting firms conducting audits of entities with DeFi or staking exposure, this means assessing whether clients have adequate controls over private key custody, protocol interaction authorisations, and on-chain transaction reconciliation.

3. Maintain Regulatory Awareness and Staff Training

The regulatory landscape across the US, EU, UK, Japan, and South Korea is moving simultaneously. No single compliance policy written in 2023 or 2024 is current across all these jurisdictions today. Firms need structured regulatory monitoring and periodic policy refresh cycles, not ad hoc updates when a headline breaks.

4. Engage Specialist Legal and Compliance Expertise

Generalist legal counsel is insufficient for digital asset compliance at this stage. The intersection of securities law, AML regulation, accounting standards, and international sanctions creates a complexity that requires specialised advice. This is particularly true for firms advising on DeFi accounting positions or stablecoin treasury management.

5. Build a Culture of Transparency and Reporting

Boards overseeing entities with material crypto exposure need to establish independent committee structures capable of investigating potential compliance failures. BDO specifically notes that these investigations must be independent, properly scoped, and structured to demonstrate clear remediation. Encouraging internal reporting of suspicious activities and building whistleblower-safe channels are part of this infrastructure.

Accounting Standards: The Unresolved Foundation

Underpinning all of the above is an accounting standards environment that is still catching up. The divergence between IFRS and FASB approaches to crypto asset measurement creates real complexity for firms with cross-border clients or entities that report under both frameworks. For a detailed breakdown of where IFRS and FASB currently stand and what that means for financial statement preparation and audit, see our analysis of IFRS crypto assets versus FASB fair value treatment.

The convergence of regulatory enforcement pressure, evolving accounting standards, and expanding institutional adoption means that firms which invest in robust digital asset accounting software and well-documented compliance frameworks now are building a durable competitive advantage. Those that wait for full regulatory clarity before acting are likely to find themselves playing catch-up under enforcement pressure rather than ahead of it.

Frequently Asked Questions

What is the current enforcement focus for crypto assets in the US?

The SEC continues to pursue cases involving unregistered securities offerings, unregistered trading platforms, and securities fraud. Going forward, BDO's analysis indicates that enforcement attention is expected to concentrate on market manipulation, DeFi protocol abuse, NFT fraud, algorithmic stablecoin risks, staked asset treatment, and smart contract vulnerabilities rather than broad securities classification enforcement.

How does MiCA affect stablecoin accounting for EU-facing firms?

MiCA creates specific regulatory categories for e-money tokens and asset-referenced tokens, each carrying distinct issuance, reserve, and disclosure requirements. Accounting firms advising issuers or holders of these instruments need to map MiCA's classification to the applicable IFRS or local GAAP treatment, particularly for reserve asset recognition and redemption liability measurement.

What are the main DeFi accounting challenges for auditors?

The primary challenges include classifying liquidity provision positions (are they financial assets, joint arrangements, or something else?), recognising and measuring governance token receipts, accounting for impermanent loss, and obtaining sufficient audit evidence from on-chain data. No current standard directly addresses these scenarios, so auditors must rely on interpretive guidance and documented accounting policies.

Why does jurisdictional arbitrage create compliance risk for accounting firms?

When clients transact with VASPs or counterparties domiciled in less regulated jurisdictions, those relationships carry counterparty risk, sanctions exposure, and potentially unregistered securities exposure that must be assessed and disclosed. Accounting firms have a responsibility to flag these risks during audit planning and to ensure clients' transaction monitoring programmes cover cross-border flows.

What internal governance structures should boards adopt for crypto compliance?

BDO recommends that boards with material crypto exposure establish independent special committee investigations capable of assessing compliance failures with clear scope, privilege protections, and documented remediation plans. Alongside this, firms should maintain ongoing staff training programmes, specialist legal relationships, and structured regulatory monitoring covering all jurisdictions in which they or their clients operate.

Source: BDO Insights