Are Trading Bots Legal in the US?

The short answer, and where it stops being short

Running an automated strategy on your own account is legal. What changes the answer is who owns the money, what you are trading, and how the orders behave in the market. A Python script placing spot Bitcoin orders through your own Coinbase account looks nothing like a hedge fund routing algorithmic orders for outside investors, and the two sit under different regulators.

The rest of this page walks through the federal agencies that care, the conduct that stays illegal no matter how the orders are generated, when you have to register, and how broker and exchange rules can shut a bot down long before a regulator gets involved. For scam-detection and product vetting, see are AI trading bots legit.

Who regulates what

Four different bodies touch automated trading in the US, and they split the market by instrument and by activity.

• SEC regulates securities: stocks, ETFs, options, and most tokens the SEC classifies as securities. It also registers investment advisers.
• CFTC regulates futures, options on futures, swaps, and commodity interests including Bitcoin and Ether futures. It also oversees commodity pool operators (CPOs) and commodity trading advisors (CTAs), with registration handled through the National Futures Association (NFA).
• FINRA writes and enforces rules on broker-dealers. Its Rule 3110 requires member firms to supervise algorithmic trading, and under Regulatory Notice 16-21 associated persons who design, develop, or significantly modify algorithmic strategies at a member firm must be registered.
• IRS taxes the results. Automated execution does not change that every closed trade is a taxable event. See trading bot tax implications.

What is illegal no matter who or what places the order

Automation is not a defense. The following conduct is prohibited under the federal securities laws and the Commodity Exchange Act, and enforcement actions against algorithmic traders are routine.

• Spoofing and layering: entering orders with the intent to cancel before execution to move the price. Explicitly banned by CEA section 4c(a)(5) after Dodd-Frank.
• Wash trading: buying and selling with yourself to fake volume.
• Pump-and-dump and coordinated manipulation: including Telegram or Discord groups that push tokens and dump on followers.
• Insider trading: trading on material non-public information, whether the trigger is a human or a model.
• Front-running customer orders if you owe a duty to those customers.

Related reading: common trading bot scams to avoid.

When you have to register

You cross into regulated territory the moment you take other people's money, or advise them, in exchange for compensation.

• Investment adviser: if you manage securities for others for a fee, you generally register with a state securities regulator up to about $100 million in regulatory AUM and with the SEC above roughly $110 million, per the Dodd-Frank thresholds administered under the Investment Advisers Act.
• Commodity trading advisor (CTA) and commodity pool operator (CPO): if the bot trades futures, options on futures, swaps, or retail off-exchange FX for others, CFTC/NFA registration is generally required unless a specific exemption applies.
• Broker-dealer: routing customer orders or matching buyers and sellers pulls you into SEC and FINRA broker-dealer rules.
• Money transmitter / MSB: custodying customer crypto can trigger FinCEN registration and state money-transmitter licensing.

Trading only your own account, with no outside investors and no advisory fee, does not trigger any of the above.

Broker and exchange terms of service

Even where the law says yes, the venue can still say no. Terms of service and API agreements are enforced by account closure long before a regulator sends a letter.

• Official APIs only. Reverse-engineered or scraped endpoints usually violate the platform agreement.
• Rate limits. Exceeding published request or order limits is grounds for throttling or termination. See API keys security for bots.
• Market data licensing. Redistribution of a broker's real-time feeds normally requires a separate agreement.
• Day-trading margin rules. For years FINRA's pattern day trader rule required $25,000 minimum equity in a margin account once you made four or more day trades in five business days, and bots tripped it fast. The SEC approved FINRA's replacement, risk-based intraday margin standards, on April 14, 2026, effective June 4, 2026, with member firms allowed to phase in until October 20, 2027, so your broker may still apply the old thresholds during the transition. Details in PDT rule and trading bots.

Crypto: federal rules plus a state-by-state map

US crypto exchanges operate under state money-transmitter regimes on top of federal AML rules. Coverage varies: some venues do not serve New York (BitLicense) or restrict specific products in a changing list of other states, and futures or leveraged spot products are often restricted to residents outside the US. Before pointing a bot at an exchange, confirm the exchange serves your state for the specific product (spot, margin, perpetual, options), and read the API agreement. Keep records of every order the bot places, since the IRS treats each sale, swap, or spend of crypto as a taxable disposition and the burden of proof for cost basis sits with the taxpayer, not the exchange. A local export of fills, timestamps, and fees is worth more at tax time than any dashboard screenshot.

Quick decision table

This is not financial advice. Rules change and enforcement depends on facts; if real money is at stake or you are handling other people's funds, talk to a securities lawyer in your state. For deeper background see what is a trading API.

Frequently asked questions