The 2022 amendments to the Uniform Commercial Code added a new Article 12 that gives cryptocurrencies, NFTs, tokenized instruments, and other digital assets their own place in U.S. commercial law. The amendments create a category called “controllable electronic records,” rewrite how lenders secure digital collateral, protect good-faith buyers from hidden claims, and set a default rule for which state’s law governs a token that lives on a blockchain. More than half the states have enacted the changes; the rest are still catching up.
What Counts as a Controllable Electronic Record
Article 12’s central category is the controllable electronic record: any record stored electronically that can be subjected to “control” under the code. Bitcoin, Ethereum, NFTs, and tokenized financial instruments on distributed ledgers are the clearest examples.1Delaware Code Online. Delaware Code 6 – Article 12 Controllable Electronic Records
The definition is broad on purpose, but it excludes digital property that already has UCC rules of its own. Deposit accounts, investment property, electronic documents of title, electronic money, electronic copies of chattel paper, and transferable records under federal E-SIGN or state UETA statutes are all outside the Article 12 core.1Delaware Code Online. Delaware Code 6 – Article 12 Controllable Electronic Records Controllable accounts and controllable payment intangibles are also excluded from the core definition, though Article 12 still governs certain parts of how they’re transferred and discharged.
Control Is the Digital Equivalent of Possession
Possession carries legal weight for physical goods. Digital assets can’t be physically held, so the amendments define “control” as the functional equivalent, and almost every other rule in Article 12 turns on who has it.
A person has control of a controllable electronic record when three conditions are met. The record or its system gives that person the power to enjoy substantially all the benefit from it. The person holds the exclusive power to prevent others from getting those same benefits. And the system lets the person identify themselves as the one holding those powers, whether by name, cryptographic key, account number, or another method.1Delaware Code Online. Delaware Code 6 – Article 12 Controllable Electronic Records
For a cryptocurrency wallet, holding the private key typically satisfies all three prongs. The holder can send and receive, can lock others out, and is identifiable on the network. The statute doesn’t require any particular technology; cryptographic key control is simply the most common way the standard is met.
How Money, Electronic Money, and Crypto Now Sort
Under the previous Section 1-201(b)(24), “money” meant any medium of exchange authorized or adopted by a domestic or foreign government.2Cornell Law Institute. Uniform Commercial Code 1-201 – General Definitions That reading could have swept in government-authorized digital currencies and left courts applying cash rules to blockchain assets.
The amended definition adds an exclusion: electronic records that function as mediums of exchange no longer qualify as “money” under the UCC.3D.C. Law Library. District of Columbia Code 28:1-201 – General Definitions Bitcoin, which existed and operated as a medium of exchange before any government adopted it, falls out of the money category and into controllable electronic records under Article 12.
Central bank digital currencies land in a different lane. A government-issued, purely digital currency that can be subjected to control may qualify as “electronic money,” a new category with its own rules. A stablecoin issued by a private company doesn’t qualify, even if it’s pegged to the dollar, because it lacks government authorization. Physical cash, government-backed digital currency, and private cryptocurrencies now each follow distinct UCC pathways.
Electronic money gets its own take-free rule. A person who receives electronic money and obtains control of it takes it free of any security interest, as long as the transferee didn’t collude with the debtor to violate the secured party’s rights.4D.C. Law Library. District of Columbia Code 28:9-332 – Transfer of Money; Transfer of Funds From Deposit Account This mirrors how a $20 bill works: receive it in good faith, and prior liens don’t follow it into your hands.
Perfecting a Security Interest in Digital Collateral
Article 9 now addresses digital collateral directly. A lender can take a security interest in a controllable electronic record through an enforceable security agreement, the same way it would for any other collateral. The practical question is how to perfect that interest so it holds up against competing claims.
Two paths exist. The lender can file a UCC-1 financing statement with the appropriate state filing office, or the lender can obtain control of the digital asset itself. A security interest perfected by control beats one perfected only by filing.5D.C. Law Library. District of Columbia Code 28:9-326A – Priority of Security Interest in Controllable Account, Controllable Electronic Record, or Controllable Payment Intangible
The priority structure pushes lenders beyond paperwork. A bank that only files risks losing to a creditor that actually holds the private keys. For borrowers, that usually means a lender taking crypto as collateral will insist on a custodial arrangement rather than relying on a public filing alone.
Buyer Protection: The Qualifying Purchaser Rule
Markets don’t function if every buyer has to investigate an asset’s full ownership history. Article 12 answers that with the qualifying purchaser rule. A qualifying purchaser is someone who obtains control of a controllable electronic record, pays value for it, acts in good faith, and has no notice that anyone else claims a property right in it.1Delaware Code Online. Delaware Code 6 – Article 12 Controllable Electronic Records
A qualifying purchaser takes the record free of competing property claims.6New York State Senate. New York Code UCC Article 12 – 12-104 The logic is similar to the holder-in-due-course doctrine for negotiable instruments: meet the requirements, and prior disputes over ownership don’t follow the asset to you. The same protection extends to controllable accounts and controllable payment intangibles that are evidenced by a controllable electronic record, so long as the purchaser has control of the underlying record.
Which State’s Law Governs
A token on a blockchain doesn’t sit in any one state, which creates problems when creditors or disputants need to know which law applies. Section 12-107 resolves this with a five-step waterfall.7D.C. Law Library. District of Columbia Code 28:12-107 – Governing Law You stop at the first step that applies.
Governing law is whatever jurisdiction the record itself (or something attached or logically associated with it) expressly names. If nothing there, it’s the jurisdiction expressly named in the rules of the system where the record is stored. Failing that, the jurisdiction whose law the record itself expressly states governs it. Failing that, the jurisdiction whose law the system rules expressly state governs the record or the system. If none of those apply, the default is the District of Columbia.
The D.C. default guarantees every controllable electronic record has a governing law even when nobody specified one. Parties who want predictability should designate a jurisdiction in the record, the system rules, or their contracts rather than relying on the fallback. Token issuers can embed a jurisdiction designation directly in the metadata, which satisfies step one.
State Adoption and the Transition Period
The UCC has no force on its own; each state legislature has to enact it. The Uniform Law Commission and the American Law Institute finalized the 2022 amendments and released them for state adoption. By mid-2024, twenty-four states and the District of Columbia had passed them. Several more, including New York, enacted them in 2025. Adoption continues to spread into 2026, though some states are still in committee review or haven’t introduced the legislation.
Because the amendments touch so many articles, businesses operating across state lines face a patchwork. A lender perfecting a security interest in digital collateral needs to check whether the borrower’s state has enacted the amendments before relying on control-based perfection. Until adoption is universal, the safer move is to perfect both by filing and by control where that’s possible.
States that enact the amendments include transition provisions for parties who played by the old rules. The core protection is an adjustment period of at least one year from the amendments’ effective date in that state. During that window, a secured party whose interest was properly perfected under prior law keeps its priority without taking new steps.
After the window closes, the old method may not be enough. A lender who relied only on a financing statement to perfect an interest in what is now a controllable electronic record should use the adjustment period to obtain control, negotiate a custodial arrangement, or update the security agreement to track the new categories. Letting the window lapse doesn’t automatically destroy the security interest, but it can drop the lender’s priority below a creditor who perfected under the new rules, and in a bankruptcy, that difference decides who gets paid.