Protocol and law act on different layers
A full node accepts a block according to consensus rules, not a national registry. One country's statute does not by itself change issuance or create a valid signature for an owner. The network may continue across other nodes and jurisdictions while sufficient connectivity and economic participation remain.
Users, miners, developers and companies are physical or legal persons. They may face licensing, tax, sanctions, record-keeping, court orders, energy rules and consumer law. Saying Bitcoin cannot be regulated confuses protocol resilience with immunity for its participants.
Gateways and custodians are easiest to regulate
A centralised exchange has accounts, employees, servers and banking relationships. A regulator can require customer identification, asset safeguards, reporting, service restrictions or a licence. A bank can reject a transfer, and a mining facility can face energy or land-use conditions.
Direct key ownership and a peer-to-peer transfer have no single intermediary that can receive one command. They are not invisible or automatically lawful. The public ledger, network traffic, a physical user and later contact with a regulated service all create potential enforcement points.
The European Union illustrates asset versus service
MiCA created a common framework mainly for crypto-asset issuers and service providers. Decentralised Bitcoin has no issuer promising redemption, but exchanges and custodians handling BTC may be regulated services. The precise treatment depends on the activity, member state and transitional arrangements.
EU Regulation 2023/1113 extends information requirements to crypto-asset transfers involving service providers. For transfers to or from a self-hosted address, a provider may have to collect data and, in specified circumstances, assess ownership or control of the address. A self-hosted wallet remains possible, but contact with a regulated service can involve checks.
- the protocol verifies technical validity
- law assigns duties to people and firms
- specific rules change across place and time
Rules address risks and also impose costs
Aims may include countering money laundering, sanctions evasion and fraud, safeguarding client assets, tax reporting and market integrity. Rules can reduce some abuse and improve recourse against a custodian. They can also add cost, collect personal data, create entry barriers and exclude legitimate users.
FATF recommends a risk-based approach for virtual assets and service providers, but a recommendation is not identical to each country's law. Practical decisions require current local rules and service terms. This article explains regulatory layers; it is not legal or tax advice.