FRM Exam Part II · Regulating the Crypto Ecosystem: The Case of Unbacked Crypto Assets

Rationale for Regulating Crypto and Policy Objectives

Updated 11 October 2026 · Fact-checked

Authorities regulate unbacked crypto assets to protect consumers and investors, preserve financial stability, keep markets fair and integrity-based, and limit financial crime. The hard part is that crypto is borderless and partly decentralised, so national rules alone leave gaps. Exam answers must link each risk to a matching policy objective.

Understand Rationale for Regulating Crypto and Policy Objectives

Unbacked crypto assets (such as Bitcoin) have no underlying claim on an issuer or asset. Their value rests on demand and belief. This is why price swings are large and why holders have no recourse if value collapses.

Regulation is not mainly about the technology. It is about the harms that appear when crypto grows. These include losses for retail investors, fraud and market manipulation, weak disclosure, poor custody, use in money laundering and sanctions evasion, and possible spillovers to banks and the wider system. Each harm maps to an objective: consumer and investor protection, market integrity, financial integrity (AML/CFT) and financial stability.

Two more aims often appear. Authorities want to protect monetary sovereignty and capital-flow management, since crypto can substitute for domestic currency or bypass capital controls. They also want to keep the regulatory perimeter technology-neutral: same activity, same risk, same rule.

The design challenge is cross-border and decentralised structure. Crypto trades 24 hours across many jurisdictions, and firms can relocate to the lightest regime. This is regulatory arbitrage. In decentralised finance (DeFi), code and governance tokens replace a clear legal entity, so it is hard to find who to license or hold liable. Practical responses focus on access points such as exchanges, wallet providers, stablecoin issuers and fiat on-ramps, plus international coordination on common standards.

A useful point: crypto is often described as not yet systemic for large banks, because direct bank exposure is limited. But rapid growth, leverage, interconnection with traditional finance and retail participation can change that. Regulation aims to act before that point.

Key formulas to remember

Harm-to-objective mapping: Retail losses → investor protection; fraud and manipulation → market integrity; illicit use → AML/CFT; interconnection and runs → financial stability; There is no numeric formula here. Use this mapping to structure answers.
Regulatory principle: Same activity + same risk = same regulation; This is the technology-neutral principle. It guards against arbitrage between crypto and traditional finance.
Perimeter logic for DeFi: No central entity → regulate access points (on-ramps, front-ends, intermediaries, stablecoin issuers); Used when no legal person controls the protocol.

How to solve Rationale for Regulating Crypto and Policy Objectives questions

Conceptual questions on this topic reward a clear link between risk, objective and tool. Use this order.

1Identify the harm in the scenario: loss to retail, fraud, run, illicit use, or capital flight.
2Name the matching policy objective: investor protection, market integrity, financial integrity or financial stability.
3Check whether the problem is cross-border or decentralised. If so, expect arbitrage and enforcement gaps.
4Pick the tool that fits: licensing, disclosure, custody rules, AML/KYC, limits on bank exposure, or international standards.
5For DeFi, ask who can be regulated. Target access points when no entity is in control.
6Eliminate options that overstate: absolute bans, claims crypto is already systemic, or claims one country can fix it alone.
7Choose the answer that is proportionate and consistent with same activity, same risk, same regulation.

Quickest way: Harm, objective, tool in 20 seconds

When to use it: Use for scenario MCQs asking why authorities act or which measure fits best.

Underline the harm in the stem.
Match it to one of four objectives.
Scan options for the tool that targets that harm.
If the stem mentions borders or DeFi, prefer answers about coordination or access points.
Reject extreme or single-country answers.

Common mistakes in Rationale for Regulating Crypto and Policy Objectives

Saying regulation exists because crypto is already a major systemic threat to banks.
Students mix current concern with proven systemic impact.
Fix: Say regulation is partly preventive. Risks grow with scale, leverage and links to traditional finance.
Treating all unbacked crypto assets as having an issuer to regulate.
Students think of stablecoins or securities.
Fix: For decentralised assets and DeFi, there may be no issuer. Regulate intermediaries and access points.
Confusing investor protection with financial stability.
Both involve losses.
Fix: Investor protection is about individual holders. Stability is about spillovers, runs and system-wide effects.
Assuming a national rule solves cross-border risk.
Students overlook regulatory arbitrage.
Fix: State that firms can move, so common international standards and cooperation are needed.
Assuming regulation means endorsing or banning crypto.
Students see only two options.
Fix: Regulation sits on a spectrum. The aim is to manage risk, not to approve or prohibit by default.

Worked examples

Example 1

A supervisor sees growing retail purchases of an unbacked crypto asset through offshore platforms, with misleading marketing and no custody safeguards. Which primary policy objective is most directly engaged, and which tool fits best? (A) Monetary sovereignty, capital controls (B) Investor protection, disclosure and marketing rules with custody requirements (C) Financial stability, higher bank capital ratios (D) Financial integrity, sanctions screening only

Show the solution

Harm: retail buyers exposed to misleading marketing and weak custody.
Objective: this is consumer and investor protection.
Tool: disclosure, marketing standards and custody safeguards target this harm directly.
Option A addresses currency substitution, not mentioned. Option C addresses bank spillovers, not the issue. Option D addresses illicit use only.

Answer: B

Example 2

A DeFi lending protocol runs on smart contracts governed by a token vote, with no identifiable operator. Explain how authorities can still pursue their objectives.

Show the solution

Identify the gap: no legal entity to license or hold liable.
Recall the principle: same activity, same risk, same regulation. Risks such as fraud and illicit use remain.
Shift to access points: regulate fiat on-ramps, exchanges, wallet providers, front-end operators and any intermediaries that interact with the protocol.
Add AML/KYC and disclosure duties on those intermediaries, and limit regulated institutions' exposure to the protocol.
Note the cross-border limit: users and developers sit in many places, so authorities need international standards and information sharing to reduce arbitrage.

Answer: Authorities regulate the points where DeFi touches the regulated system and people, apply the same rules to the same activity, and coordinate internationally, since a protocol with no operator cannot be licensed directly.

Exam tips

Expect scenario questions: read the harm first, then pick the objective.
Watch for absolute words such as always, never or completely. They are usually wrong here.
Know the four objectives and one tool for each.
For cross-border or DeFi stems, the best answer usually mentions coordination, access points or arbitrage.
Distinguish unbacked assets from stablecoins. Their risks and regulatory handling differ.

Practice questions from Regulating the Crypto Ecosystem: The Case of Unbacked Crypto Assets

Rationale for Regulating Crypto and Policy Objectives: frequently asked questions

Why do authorities regulate crypto assets?

To protect investors, keep markets fair, stop illicit use and guard financial stability. Unbacked crypto assets have no underlying claim, so price swings and fraud can hurt holders badly. Regulation also aims to prevent spillovers into the traditional system as the market grows.

How can DeFi be regulated if nobody runs it?

Authorities focus on access points such as exchanges, wallet providers, fiat on-ramps and any intermediaries or front-ends. They apply the same rules to the same activity and limit regulated firms' exposure. Some influence also comes from developers or governance participants where identifiable.

Why is cross-border crypto regulation hard?

Crypto trades globally at all hours and firms can move to the lightest regime, which is regulatory arbitrage. Enforcement stops at national borders. Common standards and cooperation between authorities are needed to close gaps.

Is crypto a systemic risk to banks today?

Do not assume so. Direct bank exposure has been limited, but growth, leverage and links to traditional finance could raise risk. Regulation is partly preventive for this reason.