$11.3 Billion in Crypto Scam Losses Puts State Offering Reviews Under Pressure

California's financial regulator is pushing back hard on a federal proposal that, in its reading, would remove one of the last checkpoints before a risky crypto offering reaches retail buyers. The Department of Financial Protection and Innovation has filed a public comment letter opposing SEC Release No. 33-11434, the proposal known as "Regulation Crypto Assets." Commissioner KC Mohseni signed the objection, which was submitted on 20 October 2026. That's a formal, on-the-record fight, not a press-release skirmish.

Where federal and state authority collide

The fight comes down to blue sky review. Certain exempt offerings still have to pass state-level screening before they can be marketed to residents, and California uses that process to catch fraud risk early. The DFPI reads the SEC proposal as creating a federal preemption path for crypto asset offerings that would switch that stage off. Preemption is a legal mechanism that decides which level of government's rules govern, and if it applies, the state doesn't get a say at that stage, whatever it thinks of the offering.

Blue sky review is one of the less glamorous corners of securities law. That's exactly why it gets overlooked until something goes wrong. Most investors never see it happen, and most issuers treat it as a filing task rather than a substantive check. That's the context that makes the DFPI's objection look less like a turf dispute and more like a defense of a process people rarely think about.

Mohseni was blunt. California, he said, won't accept "a coordinated attempt by federal regulators to override state authority and protections while stepping back from the oversight they are supposed to provide." Regulators don't usually reach for words like "override" in a comment letter unless they expect the argument to be read closely, and this one is written to be read closely. My read is that the DFPI wants the framing on the record: this isn't a states-versus-Washington quarrel over procedure, it's a question about who is still watching.

California Business and Consumer Services Secretary Rohit Chopra went further, calling the move an attempt to "muzzle state oversight" just as federal enforcement of investment fraud rules is being pulled back. That's a stronger charge than the letter's technical language suggests. It ties the jurisdictional question to a claim about enforcement capacity, and that link is where the argument gets its force.

The DFPI also warns about spillover. Its concern isn't limited to one asset class. If preemption takes hold for digital assets, the same reasoning could be extended to other investment categories, pulling state protections back well beyond crypto. That's the part that should make other state regulators pay attention, even those with no interest in digital assets at all.

The fraud numbers behind the objection

The scale of losses gives the argument weight. The FBI's Internet Crime Complaint Center recorded $11.3 billion in losses from crypto-related scams in 2025, a record. California's own Crypto Scam Tracker added nearly 200 new entries over the same period, a year-on-year increase of roughly 30 per cent. Those figures give the DFPI a concrete evidential basis, which turns the jurisdictional dispute into a practical one.

Here's the thing about federal complaint totals, though. They capture what people report, not what goes unreported, and they don't tell you which offerings were exempt from state review in the first place. A national loss figure is a useful backdrop, but the more persuasive case is a state tracker showing a rising number of entries in one jurisdiction. Regulators tend to win these arguments with local data rather than headline totals.

The letter also cites recent state enforcement as proof that screening works. The DFPI ordered Fire Suppression Innovations Inc. to halt illegal stock sales, return $2.9 million to investors and pay $785,500 in fines. The company had allegedly fabricated a $5 billion buyout, concealed personal expenditure and operated a Ponzi-like structure. Those allegations are the kind of detail that blue sky review is designed to surface early, before a pitch reaches a wider pool of buyers.

Enforcement cases like this one are the practical side of the argument. They show what the screening stage is for, and they give the DFPI a concrete example to set against an abstract claim about preemption. Whether that example settles anything about crypto specifically is a separate question, and the letter doesn't try to answer it.

Why this matters beyond California

My read is that this fight is less about crypto than about who gets to screen offerings first. The OCC, SEC and CFTC have all been recalibrating their positions on digital assets since early 2025, and preemption versus state oversight has become a live fault line. The DFPI is pushing back on a pattern: federal rules that states say cut investor protection just as federal enforcement shrinks.

Europe faces a version of the same tension. MiCA's single rulebook was partly meant to prevent regulatory fragmentation across member states. That goal is sensible on paper, and it's one reason the US debate sounds familiar to anyone who has watched EU rules take shape. Still, a single rulebook doesn't answer whether one supervisory tier is enough for novel instruments, and that question is what the American argument keeps circling back to.

For issuers raising money from US retail investors, the stakes are concrete. If the SEC proceeds and the preemption argument holds, blue sky review for certain digital asset offerings would disappear in states like California. If the states succeed in contesting the rule, issuers keep working through a state-by-state patchwork, with the compliance costs that come with it. Neither outcome is cheap for everyone involved, and that's why the fight has such a sharp edge.

What to watch next

The outcome to watch is whether state screening survives the rulemaking at all. That's the single question that matters here, and it's narrower than the broader debate about crypto regulation. Nothing in the letter itself settles it, and the public comment process is only one step in a longer procedure.

If you're working in this space, the practical takeaway is simple: don't assume a federal exemption means a state will stay out of the room. Watch how the SEC responds to the comments it receives, and watch whether other states file similar objections. Small print, big consequences.

What this means for you depends on where you sit. Issuers should plan for both scenarios rather than betting on one. Investors should remember that the screening stage they may never see exists precisely to catch problems before money changes hands. And that's the part of this story that deserves more attention than it's getting.