Skip to content

FRM Exam Part II · Regulating the Crypto Ecosystem: The Case of Unbacked Crypto Assets

Crypto Regulatory Approaches: Ban, Contain, Regulate

Updated 11 October 2026 · Fact-checked

Regulators have three broad options for unbacked crypto assets. A ban prohibits activity. Containment walls crypto off from banks, payments and other regulated finance without outlawing it. Regulation brings crypto service providers into a licensing, conduct and prudential regime. To answer a question, match the policy to the risk it addresses and name its main weakness.

Understand Regulatory Approaches: Ban, Contain, and Regulate

Unbacked crypto assets, such as Bitcoin, have no underlying issuer or asset claim. Their value rests on market demand. They create risks for investors, market integrity, financial stability and illicit finance. Policymakers must decide how to respond.

There are three broad strategies. Ban: make holding, trading or providing crypto services illegal. Contain: limit links between crypto and the traditional financial system. For example, restrict banks' exposures, stop regulated funds and insurers from holding crypto, and limit access to payment rails. Regulate: set rules for crypto asset service providers (exchanges, brokers, custodians, issuers) on licensing, disclosure, custody, conflicts of interest, market abuse, AML/CFT and prudential standards.

The approaches are not mutually exclusive. A country can ban some activities, contain bank exposure and regulate the rest. Think of them as a toolkit, not a menu of one.

Each has trade-offs. A ban is simple and sends a clear signal, but it is hard to enforce because crypto is borderless and peer-to-peer. Activity can move offshore or underground, which can weaken visibility and investor protection. Containment protects the core financial system but leaves retail investors exposed. Regulation gives protection and visibility, but it can appear to legitimise the asset class. It also needs strong supervisory capacity and international coordination, because providers operate across borders.

For the exam, tie each approach to its objective: investor protection, market integrity, financial stability, and limits on illicit use. Ask which risks it handles and which it leaves open.

Key formulas to remember

Ban
Prohibit holding, trading or service provision
Strength: clear signal. Weakness: hard to enforce, may push activity offshore or underground and reduce visibility.
Containment
Limit links between crypto and regulated finance
Protects banks, insurers and payments from contagion. Does not protect retail users directly and does not regulate the crypto market itself.
Regulation
Licensing + conduct + prudential + AML/CFT rules for service providers
Aims at investor protection and market integrity. Needs supervisory capacity and cross-border cooperation.
Policy matching rule
Risk identified → objective → tool → residual gap
Use this chain to justify any recommendation. Approaches can be combined.

How to solve Regulatory Approaches: Ban, Contain, and Regulate questions

Use this method for any scenario question on choosing or comparing crypto policy approaches.

  1. 1Identify the main risk in the scenario: retail losses, market manipulation, bank contagion, illicit finance, or capital flight.
  2. 2Name the policy objective that matches it: investor protection, market integrity, financial stability, or AML/CFT.
  3. 3List the approach described: ban, containment, regulation, or a mix.
  4. 4State what that approach achieves for the identified risk.
  5. 5State its main limitation, such as enforcement difficulty, offshore migration, legitimisation, or retail exposure left unaddressed.
  6. 6Check the cross-border dimension: can providers or users escape the rules?
  7. 7Choose the option that fits the risk and the stated limitation. Beware of absolute words like always or eliminates.

Quickest way: Risk-to-tool match

When to use it: Use for short MCQs that ask which approach best fits a described situation.

  1. Spot the key phrase: prohibits means ban; restricts bank links means containment; licensing and conduct rules means regulation.
  2. Ask whether the concern is core system safety (containment) or customer and market protection (regulation).
  3. Eliminate options with absolute claims such as eliminates all risk or fully prevents access.
  4. Pick the option that names both the benefit and the realistic gap.

Common mistakes in Regulatory Approaches: Ban, Contain, and Regulate

  • Treating containment as a form of ban.

    Both limit crypto, so they sound alike.

    Fix: A ban prohibits the activity itself. Containment allows it but separates it from banks, payments and regulated investors.

  • Assuming regulation protects the financial system from all crypto risk.

    Regulation sounds comprehensive.

    Fix: Regulation covers service providers it can reach. Offshore platforms and decentralised activity can fall outside it, so gaps remain.

  • Saying a ban fully stops crypto use.

    Students assume law equals compliance.

    Fix: Crypto is borderless and peer-to-peer, so bans are hard to enforce and activity can move offshore or underground.

  • Treating the three approaches as mutually exclusive.

    Questions present them as a list.

    Fix: Countries can combine them, for example contain bank exposure while regulating domestic providers.

  • Claiming regulation signals approval of the asset.

    Confusing legitimacy with oversight.

    Fix: Regulation is about conduct and risk control. Note the legitimisation concern as a debated drawback, not a certain outcome.

Worked examples

Example 1

A regulator sees that banks are building large crypto exposures and that retail investors are buying through unlicensed offshore platforms. It bars banks from holding unbacked crypto but does nothing else. Which risk does this address, and which does it leave open?

Show the solution
  1. Identify the tool: restricting banks' exposure is containment.
  2. Risk addressed: contagion from crypto price falls into the regulated banking system, a financial stability risk.
  3. Risk left open: retail investor protection, since retail users buy from unlicensed platforms and no rules govern those providers.
  4. Therefore the policy is partial and would need regulation of service providers or other measures.

Answer: Containment reduces contagion to banks but leaves retail investor protection and unlicensed platform risk unaddressed.

Example 2

A country considers an outright ban on crypto trading. Give the main benefit and the main enforcement concern.

Show the solution
  1. Benefit: a ban sends a clear signal and, if effective, removes domestic regulated channels that might spread crypto to retail users and institutions.
  2. Concern: crypto is borderless and can be traded peer-to-peer or through offshore platforms.
  3. Result: activity may migrate offshore or underground, reducing authorities' visibility and weakening investor protection for those who still participate.
  4. Conclude that a ban's effectiveness depends on enforcement capacity and is rarely complete.

Answer: Benefit: a clear prohibition and signal. Concern: it is hard to enforce, and activity can move offshore or underground.

Exam tips

  • Match the verb to the approach: prohibit = ban, restrict links = containment, license and supervise = regulation.
  • Always state a limitation. Options claiming an approach fully eliminates risk are usually wrong.
  • Remember cross-border coordination: it is the usual weakness of any national approach.
  • Expect scenarios where a mix of approaches is the best answer.

Practice questions from Regulating the Crypto Ecosystem: The Case of Unbacked Crypto Assets

Regulatory Approaches: Ban, Contain, and Regulate: frequently asked questions

What is the difference between a crypto ban and regulation?

A ban makes crypto activity illegal. Regulation allows it under rules for licensing, conduct, custody, disclosure and AML/CFT. Regulation gives oversight; a ban relies on enforcement.

What does containment mean for crypto assets?

Containment separates crypto from the traditional financial system. Examples include limits on bank exposures and on regulated institutions holding crypto. It protects the core system but does not itself protect retail investors.

Can countries use more than one approach?

Yes. A jurisdiction can ban some activities, contain bank exposure and regulate the providers it can supervise. The approaches work as a toolkit.

Why is international coordination important?

Crypto providers and users operate across borders. Without coordination, activity can move to places with weaker rules, which limits the effect of any one country's policy.