They are registered as money transmitters in just about every state, not sure what the legal implications of that are exactly, but I doubt the regulatory bodies will just let it slip. If there is any suspicion of "fraud", then you don't need SEC (or USDA, lol) - the local police department and FBI are generally good enough.
https://www.coinbase.com/legal/licenses?locale=en-US