California has added a significant new tool to its fight against cryptocurrency-enabled scams and money laundering.
Governor Gavin Newsom signed Senate Bill 1208 into law on September 27, 2026. The legislation expands California’s money laundering statute to expressly address digital assets and creates a new framework for freezing, seizing, forfeiting, and ultimately returning certain digital assets to victims.
The 10-day freeze request included in the law will likely attract considerable attention. But focusing on that provision alone understates the scope and significance of SB 1208.
The legislation establishes an end-to-end process that can begin with tracing digital assets connected to criminal activity, proceed through a temporary freeze and judicially authorized seizure, continue through forfeiture and competing ownership claims, and ultimately result in assets being distributed to victims.
For cryptocurrency exchanges, custodians, issuers, compliance teams, legal departments, blockchain investigators, prosecutors, and law enforcement agencies, SB 1208 introduces important operational questions.
Perhaps the most important words in the law, however, are relatively simple:
“capable of complying.”
That qualification recognizes something fundamental about digital assets. Not every participant in the ecosystem has custody or control of the assets that pass through or interact with its technology.
Understanding that distinction will be critical to effective implementation.
The Legislature was explicit about the problem it was attempting to address.
Digital assets can move rapidly across wallets, platforms, and international borders. At the same time, many sophisticated online scam operations targeting U.S. victims are conducted by transnational criminal organizations operating outside the country.
California lawmakers specifically cited the challenges law enforcement faces when perpetrators operate from jurisdictions where identifying, extraditing, and prosecuting the individuals responsible may be extremely difficult.
Traditional asset forfeiture processes can therefore encounter a practical problem: investigators may be able to identify and trace proceeds of fraud on a blockchain even when they cannot readily locate or prosecute the person controlling them.
SB 1208 attempts to narrow that gap.
Its stated legislative intent includes enabling state and local law enforcement to return seized cryptocurrency to victims, deprive perpetrators and criminal organizations of cryptocurrency, and disrupt the use of digital assets for money laundering.
That last point is particularly important. The legislation is not solely about prosecution. It is also about disruption and victim recovery.
SB 1208 amends California Penal Code Section 186.10 to expressly incorporate digital assets into the state’s money laundering framework.
The law defines a “digital asset” broadly as a digital representation of value recorded on a cryptographically secured distributed ledger or similar technology.
Under the amended statute, the existing monetary thresholds continue to play an important role. The law generally addresses covered transactions or attempted transactions exceeding $5,000 during a seven-day period or $25,000 during a 30-day period when the required criminal intent or knowledge is present.
Importantly, SB 1208 does not make ordinary cryptocurrency transactions money laundering.
The underlying criminal elements still matter. Among other things, the statute addresses transactions conducted with the specific intent to promote or facilitate criminal activity or with knowledge that the digital asset represents, or is derived directly or indirectly from, proceeds of criminal activity.
For compliance professionals, the significance is nevertheless substantial: California criminal law now expressly accounts for digital assets within its money laundering framework.
SB 1208 adds Penal Code Section 186.13, establishing a process through which law enforcement or a prosecuting agency may seek a search warrant to seize digital assets.
A warrant may be sought upon a showing of probable cause where covered digital assets contain or have contained proceeds of specified crimes, are traceable to those crimes, have been used to facilitate covered criminal activity, or are involved in money laundering.
The warrant application must identify the locations from which the assets will be seized. The statute expressly contemplates centralized exchanges, digital asset custodians, blockchain addresses, and other locations.
It also requires the affidavit to describe how the warrant will be served, including the possibility of using an established law enforcement portal maintained by a digital asset business.
This is a noteworthy operational detail.
For regulated and custodial digital asset businesses, receiving and responding to legal process is increasingly becoming a core component of the compliance infrastructure.
One of SB 1208’s most consequential provisions allows a law enforcement officer or prosecuting agency to send a written request to freeze digital assets while authorities pursue a search warrant.
The freeze lasts for 10 calendar days from receipt of the request.
The concept is straightforward.
Digital assets can move quickly. If law enforcement identifies assets associated with suspected criminal activity but must first obtain judicial authorization to seize them, those assets could potentially move before the warrant process is completed.
The temporary freeze is intended to preserve the status quo while authorities seek that warrant.
For exchanges and custodians, this creates an obvious operational imperative: a freeze request cannot sit unattended in a general compliance inbox.
Firms that have the ability to freeze digital assets should consider whether their procedures clearly establish:
In practice, a 10-day legal requirement can become a matter of hours for the compliance team receiving the request.
The final legislation contains an important qualification.
A person or group receiving a freeze request must freeze the relevant digital assets for 10 calendar days if the recipient is capable of complying with the request.
Those words matter enormously.
The digital asset ecosystem contains very different technological and business models.
A centralized exchange maintaining custody of customer assets may have the technical ability to restrict transfers from an account.
A qualified custodian may similarly control the private keys or systems necessary to prevent movement.
But a non-custodial wallet provider, validator, node operator, software developer, or other infrastructure participant may have no ability whatsoever to freeze a user’s assets.
Possessing information about a transaction is not the same thing as possessing the assets.
Providing software is not the same thing as exercising custody.
Observing activity on a blockchain is not the same thing as controlling the private keys necessary to move the assets.
SB 1208’s capability language recognizes this distinction.
That is important for industry, but it is equally important for law enforcement.
A freeze request or seizure order directed to an entity that cannot technically control the assets consumes valuable investigative time without preserving anything. In fast-moving fraud investigations, identifying the party that actually has custody or control can be critical.
The practical question therefore should not simply be:
Who interacted with this transaction?
It should also be:
Who, if anyone, actually has the technical ability to prevent these assets from moving?
For businesses operating non-custodial or hybrid models, SB 1208 presents a different compliance challenge.
The organization may conclude that it cannot comply with a particular freeze request because it does not control the relevant assets. That conclusion should not be treated casually.
Firms should be prepared to explain their technical architecture clearly.
That may include documenting:
This distinction can become especially important for businesses offering multiple products.
A company might be capable of freezing assets in one service while having no technical ability to do so in another.
Accordingly, “we are non-custodial” should not substitute for a product-level analysis of actual technical capability.
The freeze request is temporary.
Seizure requires judicial process.
SB 1208 permits a court to issue a search warrant where jurisdiction exists and probable cause is established. The warrant must specify the digital assets to be seized and where they are located.
Depending on the circumstances, the warrant may authorize seizure of digital assets involved in money laundering or traceable to such property, assets corresponding to criminal proceeds or assets used to facilitate crime, and certain substitute digital assets when the target no longer controls the original property.
The statute also contemplates assets associated with victims and crimes outside California when jurisdiction tied to a California crime has been established.
That provision reflects the inherently interstate and international nature of blockchain-based financial crime.
A wallet does not recognize state borders.
An investigation increasingly must.
Another important distinction in SB 1208 is between seizure and forfeiture.
After digital assets are seized, the statute establishes a separate process through which a prosecuting agency may seek forfeiture.
Generally, the prosecuting agency has 180 days following seizure to initiate the proceeding, subject to a court extension for good cause. If no proceeding is initiated within that period and another law does not prohibit return of the property, the assets may be returned to the party from whom they were seized.
The law also establishes procedures intended to identify potential owners and parties holding security interests in the assets.
This matters because blockchain tracing can identify the movement of assets, but tracing alone does not necessarily resolve every legal question concerning ownership.
SB 1208 establishes a claims process for individuals asserting an interest in seized digital assets.
Potential owners who receive notice generally have 30 days from service to file a verified claim.
The claim must be made under penalty of perjury and supported by admissible evidence. The claimant bears the burden of demonstrating, by a preponderance of the evidence, that the digital assets belong to the claimant and were obtained through legitimate means.
This creates an evidentiary process for resolving competing claims before final forfeiture.
From an investigative standpoint, blockchain analytics may provide important evidence regarding the provenance and movement of assets.
But blockchain data may need to be combined with off-chain evidence, including account records, transaction records, communications, identity information, source-of-funds documentation, and other evidence demonstrating legitimate ownership.
Perhaps the most consequential part of SB 1208 for scam victims comes at the end of the process.
After claims are resolved and a court enters a final judgment of forfeiture, the remaining assets can be distributed to victims.
The statute directs that forfeited digital assets be used to compensate victims of the crimes or fraud schemes underlying the action, generally on a pro rata basis up to the amount of their actual losses.
Prosecuting agencies may also establish a process for identifying additional victims of the same or related schemes.
That is significant.
Cryptocurrency fraud schemes frequently involve many victims across multiple jurisdictions. Blockchain analysis can sometimes reveal common destination wallets, laundering patterns, infrastructure, or criminal organizations linking cases that initially appear unrelated.
SB 1208 therefore creates the possibility that asset recovery can extend beyond a single complainant or investigation.
For victims, that does not guarantee recovery.
It does, however, create a state-level mechanism designed specifically around the realities of traceable digital assets and multi-victim fraud schemes.
SB 1208 also addresses forfeited assets that remain after the victim distribution process.
Assets not distributed to victims may remain in government custody for up to three years. After that period, remaining forfeited assets are directed to California’s Restitution Fund for victim services.
This reinforces an important feature of the legislation: the framework is structured around victim compensation rather than simply the seizure of cryptocurrency by government.
SB 1208 also illustrates why blockchain analytics has become increasingly important to financial crime investigations.
The legislation repeatedly relies on concepts such as assets being “traceable” to criminal activity.
That makes transaction tracing central to the process.
For law enforcement, investigators may need to demonstrate how assets moved from a victim through intermediary addresses, exchanges, bridges, or other infrastructure to the location identified in a warrant.
For digital asset businesses, blockchain analytics may help determine whether assets identified in legal process correspond with customer activity, internal transaction monitoring alerts, previously identified suspicious activity, or exposure to known illicit wallets.
The strongest investigations will often combine on-chain and off-chain evidence.
SB 1208 should prompt more than a Legal Department memo.
Businesses that custody or otherwise control digital assets should consider conducting an operational readiness exercise before receiving their first request.
A practical implementation review should examine at least five areas.
Confirm that law enforcement agencies have a reliable method of contacting the company and that requests are monitored continuously enough to support time-sensitive matters.
Establish procedures for validating that a purported law enforcement request is legitimate before restricting customer assets or disclosing information.
Document which products, wallets, networks, accounts, and services the company can freeze and which it cannot.
Identify who can authorize and technically execute a freeze and establish backup personnel for nights, weekends, holidays, and other periods when a 10-calendar-day clock could begin.
Maintain a clear record of when the request was received, how it was authenticated, what assets were identified, whether the company was capable of complying, what actions were taken, when the freeze began, and what subsequent legal process was received.
Tabletop exercises may be particularly valuable.
A written policy that has never been operationally tested may reveal significant weaknesses when a real request arrives involving multiple wallets, networks, customers, or jurisdictions.
Non-custodial companies should not assume SB 1208 is irrelevant simply because they do not hold customer funds.
Instead, they should be prepared to demonstrate what they can and cannot do.
That means Legal, Compliance, Product, and Engineering should share a common understanding of the company’s architecture and control environment.
If a law enforcement agency sends a freeze request to the wrong participant, a prompt and technically precise response explaining the company’s limitations may help investigators redirect the request to the entity that actually controls the assets.
That benefits both law enforcement and industry.
SB 1208 provides additional authority, but successful implementation will depend heavily on understanding the technology.
Before directing a freeze request or warrant to a company, investigators should identify the role that entity actually plays.
Is it an exchange?
A custodian?
A wallet interface?
An issuer?
A node operator?
A software provider?
Does it control private keys?
Can it prevent a transaction?
Can it freeze the asset itself, or merely restrict access to a user interface?
These distinctions can determine whether a freeze request preserves assets or simply consumes time.
Relationships between law enforcement and digital asset businesses will therefore remain important. Established law enforcement portals, points of contact, training, and industry engagement can materially improve response times when a real victim’s assets are moving.
SB 1208’s digital asset provisions are not permanent.
The relevant statutory changes remain in effect until January 1, 2032, at which point the digital-asset-specific provisions sunset unless the Legislature acts again.
The law also creates reporting requirements intended to provide policymakers with information about how the new framework is being used. Beginning in 2029, the California Department of Justice is required to report specified information to the Legislature and publish it publicly, including information concerning warrants, seizures, claims, criminal cases, and victim compensation.
That creates an important feedback mechanism.
Over the next several years, California should accumulate actual data showing how frequently these powers are used, how often claims succeed, how much property is seized, and, critically, how effectively recovered assets make their way back to victims.
SB 1208 reflects a broader shift occurring across digital asset regulation and enforcement.
For years, much of cryptocurrency compliance focused on preventing illicit funds from entering or moving through regulated businesses.
Increasingly, the conversation also involves what happens after illicit activity is identified.
Can the assets be traced?
Who controls them?
Can they be frozen?
What legal process is required?
Can ownership be established?
Can the assets be seized?
And ultimately, can they be returned to victims?
SB 1208 attempts to connect those stages into a single framework.
For digital asset businesses, that means law enforcement response procedures should increasingly be viewed as part of the broader financial crime compliance architecture, alongside KYC, transaction monitoring, blockchain analytics, sanctions screening, suspicious activity reporting, fraud prevention, and investigations.
For law enforcement, the law provides new tools, but those tools will be most effective when requests are directed to entities that actually possess the technical ability to act.
For victims, the most meaningful measure of success will be simpler: whether traceable stolen assets can actually make their way home.
SB 1208 is more than a cryptocurrency seizure law.
It expands California’s money laundering framework to expressly encompass digital assets, creates a process for temporarily freezing assets while a warrant is pursued, establishes procedures for judicial seizure and forfeiture, provides a mechanism for resolving ownership claims, and places victim restitution at the center of the process.
But implementation will determine whether those tools work as intended.
For industry, the priority should be understanding technical capability, establishing rapid and reliable law enforcement response procedures, and documenting decisions.
For non-custodial businesses, the priority should be clearly demonstrating where technical control begins and ends.
For law enforcement, the priority should be identifying the right entity, following the assets, and moving quickly while preserving appropriate legal process.
And for everyone involved, three words in the statute should remain front of mind:
“capable of complying.”
In digital asset investigations, knowing where the money went is only part of the equation.
Knowing who can actually stop it from moving may be just as important.
Europe’s latest move on crypto regulation offers a constructive story about how a growing digital asset market can develop a more consistent foundation. On October
Blockchain Analytics vs. Traditional AML Tools: Where Each One Fails The cryptocurrency industry has spent years investing in compliance technology, yet one misconception continues to
California’s new meme coin law presents a larger compliance lesson for the digital asset industry: knowing what you list is becoming just as important as