The CFTC Just Proposed the First Federal Rules for Leveraged Retail Crypto Trading. Here's What Reg CTX and Reg CAM Mean for You.

TL;DR

• On October 5, 2026, the CFTC released an ANPRM proposing two new rules: Reg CTX (defining when leveraged retail crypto transactions fall under CFTC jurisdiction) and Reg CAM (creating a new exchange registration category for crypto asset markets).
• The core jurisdictional hook: any retail transaction involving leverage, margin, or financing where the platform — not the customer — holds the private keys beyond 28 days triggers CFTC oversight under CEA Section 2(c)(2)(D).
• Spot exchanges where customers immediately hold their own wallets are generally outside scope. Margin products, lending overlays, and custodied yield strategies are in the crosshairs.
• The 60-day comment period is the industry’s best window to shape the “actual delivery” definition before it’s final.

For years, the question of which federal regulator owns leveraged retail crypto trading has been answered with a shrug and a pointing of fingers. The SEC argued some tokens are securities. The CFTC argued leverage brings anything into commodities territory. Crypto platforms largely operated in the gap, hoping neither would move first.

On October 5, 2026, the CFTC moved first.

The Commission published Release No. 9307-26, an Advance Notice of Proposed Rulemaking proposing two companion regulatory frameworks: Regulation CTX (Retail Commodity Transactions) and Regulation CAM (Crypto Asset Markets). Together, they represent the first attempt by any federal agency to build a comprehensive, purpose-built registration and conduct framework specifically for leveraged retail crypto trading.

This isn’t the final rule. It’s not even a proposed rule yet. But the ANPRM stage is where the definitional choices get made — and the definitional choices here will determine who needs to register, who doesn’t, and what products have to change.

Why the CFTC Has Jurisdiction at All

To understand what Reg CTX does, you need to understand the legal hook it’s working from: CEA Section 2(c)(2)(D), which was added by the Dodd-Frank Act to extend CFTC jurisdiction to leveraged or financed retail transactions in commodities — originally aimed at forex, later extended to metals and other commodities.

The CFTC has long argued that digital assets traded with leverage fall under this provision. What’s been missing is a regulation that defines, with precision, the terms that make Section 2(c)(2)(D) apply. Specifically: what counts as “actual delivery” — the safe harbor that exempts a transaction from CFTC oversight if the commodity is actually delivered to the buyer within 28 days.

Every enforcement case against a crypto platform in this space — BitFinex, BITMEX, a dozen others — has turned on whether the platform met the actual delivery test. The CFTC has argued it didn’t, because the platforms controlled the private keys. The platforms have argued otherwise. There’s no regulation saying who’s right; there are only enforcement orders and court decisions.

Reg CTX would fix that by codifying the standard.

What Reg CTX Actually Proposes

Under the proposed Reg CTX framework, a retail commodity transaction involving a digital asset triggers CFTC jurisdiction unless actual delivery occurs within 28 days. And actual delivery, as defined in the ANPRM, requires that:

1. The customer holds the private keys to a wallet containing the purchased digital asset.
2. The transaction is settled on-chain in a way the customer can verify.
3. The platform relinquishes all legal and operational control over the asset.

The platform holding keys on behalf of the customer — even in a named custody arrangement — does not constitute actual delivery under the proposed standard. A soft wallet maintained by the exchange with a user-facing label is not delivery. A hardware wallet shipped to the customer with the keys inside is.

This is significant because most retail crypto platforms — especially those offering margin or yield products — retain custody of customer assets by design. The model is built around it. Under Reg CTX, that model requires CFTC registration unless the platform restructures the custody layer.

The 28-day window is the same standard the CFTC has applied in enforcement — but this would be the first time it appears in a regulation that firms can plan against in advance.

What Reg CAM Creates

If Reg CTX defines the jurisdictional trigger, Reg CAM defines what you do once you’re inside it.

The ANPRM proposes creating a new registration category — Crypto Asset Market, or CAM — as a subcategory of the existing Designated Contract Market (DCM) framework. Currently, a platform wanting to offer exchange-traded futures or swaps must register as a DCM, which carries extensive requirements designed for professional derivatives markets: robust technical systems, financial surveillance, settlement mechanisms, position limits, and more.

The full DCM framework wasn’t designed for a platform where retail users are trading Solana with 5x leverage on their phones. Reg CAM would create a lighter-registration path specifically for that context, with tailored requirements focused on:

• Capital adequacy for the retail-facing platform (not full DCM capital rules, but something proportional to retail exposure)
• Customer disclosure requirements for leveraged products, including risk warnings, margin call procedures, and liquidation policies
• Conduct of business standards for how platforms handle customer orders, especially in volatile conditions
• Conflict of interest rules addressing platforms that also act as market makers or principal counterparties

The CAM registration path is intended to be lighter than a full DCM but heavier than nothing. The ANPRM asks specific questions about what the right calibration looks like — which is exactly what the comment period is for.

Who This Hits and How Hard

The firms reading this most carefully should be:

Retail crypto exchanges with margin products. If you offer 2x leverage on BTC, you are the primary target of Reg CTX/CAM. The question is whether your custody model qualifies for actual delivery. If you hold keys and offer leverage, you’re almost certainly in scope.

Yield and lending platforms. If your product involves depositing crypto with the platform in exchange for a yield — especially if that yield is generated through lending or leveraged strategies on the back end — the ANPRM’s commentary suggests the CFTC views those structures skeptically under the actual delivery test. The platform controls the keys; the 28-day clock may never reset.

Stablecoin issuers offering yield. This is an evolving edge. The GENIUS Act established a payment stablecoin framework, but stablecoins used as collateral for leveraged positions or structured as yield instruments may still implicate Reg CTX if the transaction has the economic character of a leveraged commodity trade.

Pure spot exchanges with full customer custody. If your model is: customer deposits fiat, buys ETH, ETH goes immediately to their self-custody wallet, keys never touch your servers — you are almost certainly outside scope. The ANPRM is not trying to regulate that.

Banks and broker-dealers offering crypto services. If you’re offering crypto trading through an existing licensed entity, the ANPRM notes that entities already subject to CFTC jurisdiction (FCMs, for example) would be addressed through existing registration rather than a new CAM registration. But the actual delivery analysis still applies to the products themselves.

The CLARITY Act Connection

One elephant in the room: Congress has been trying to pass crypto market structure legislation for two years. The CLARITY Act — the current leading vehicle — would divide jurisdiction between the SEC and CFTC based on whether a crypto asset is a “digital commodity” or a “digital security.” It stalled in committee earlier this year, but it’s not dead.

The CFTC’s ANPRM doesn’t wait for CLARITY. It works with existing statutory authority under Section 2(c)(2)(D), which has been on the books since 2010. The Commission is essentially saying: we have the authority we need for leveraged retail crypto right now; we don’t need new legislation to act.

That’s a meaningful institutional choice. It means the ANPRM timeline isn’t dependent on Congress moving, which gives it a realistic shot at becoming final rule within the normal rulemaking cycle. If CLARITY passes and changes the jurisdictional landscape, these rules would need to be reconciled — but that’s a problem for a future Congress and a future Commission.

What to Do With the 60-Day Comment Window

The ANPRM’s comment period runs 60 days from Federal Register publication. That window is where the actual delivery definition gets shaped. The questions the Commission is asking — and where your comments will matter most — include:

On actual delivery: Is 28 days the right window? Should there be a different standard for staking versus spot? What technical standards (on-chain settlement, key transfer verification) should count?

On CAM registration scope: Should CAMs be required to register separately for each asset class, or can one registration cover multiple digital assets? Should there be size-based exemptions for smaller platforms?

On capital requirements: The ANPRM doesn’t propose specific capital numbers — it asks for industry input. This is a genuine open question that the final rule will need to answer, and the comment record is where the calibration happens.

On conflicts of interest: Should platforms that act as principal counterparty to retail customers be prohibited from CAM registration, or is disclosure adequate?

If your firm is in scope or even near-scope, submit a comment. The alternatives analysis in the ANPRM signals that the Commission is genuinely weighing different approaches, not just checking a public-comment box.

For context on related regulatory developments in the crypto space, the CFTC’s FinCEN coordination on unhosted wallet rules and the broader stablecoin framework from the GENIUS Act are both relevant background.

So What?

The CFTC has spent years in enforcement mode on leveraged retail crypto, winning cases but without the regulatory clarity that lets platforms plan ahead. Reg CTX/CAM is the Commission trying to convert enforcement precedent into a stable regulatory framework.

For compliance teams at crypto platforms, the immediate task isn’t registration — there’s nothing to register for yet. The immediate task is a product-level assessment: for every product you offer, map it against the proposed actual delivery standard and determine whether the platform or the customer holds the keys at the end of the transaction. Products where the platform holds keys and leverage is involved are your highest-risk exposures. Document the analysis now, before the proposed rule stage, because once a proposed rule drops, the comment window gets shorter and the definitional stakes get higher.

If your current risk assessment infrastructure predates the digital asset era, the AML/BSA Risk Assessment Template (Fintech Edition) includes a digital asset product mapping section that covers the key risk factors for crypto product lines — custody model, leverage, settlement timing, customer type — in a format that can feed directly into a regulatory comment or an internal board briefing.

The window between ANPRM and proposed rule is where the compliance strategy gets built. That window is now.

Resources used to build this post:

• CFTC Release No. 9307-26: ANPRM on Reg CTX and Reg CAM — CFTC, October 5, 2026
• Steptoe: CFTC Proposes First Dedicated Framework for Retail Crypto Leveraged Products
• WilmerHale: CFTC Reg CTX/CAM ANPRM — Key Provisions and Implications
• Lowenstein Sandler: What the CFTC’s Crypto ANPRM Means for Digital Asset Platforms

Related reading on this site:

• GENIUS Act Implementing Regulations: July 18 Deadline and Stablecoin Compliance
• FinCEN Withdraws Unhosted Wallet and Crypto Mixer Rules
• GENIUS Act and FinCEN CIP Rule: What Stablecoin Issuers Need to Know

For crypto-adjacent fintechs doing a product-by-product regulatory exposure assessment, the AML/BSA Risk Assessment Template (Fintech Edition) gives you a structured framework for documenting custody model, leverage exposure, and regulatory touchpoints across your product set — exactly what you need to build a defensible comment submission or board briefing before the proposed rule stage.