CFIT’s legal authority:
Computer Fraud and Abuse Act
Identity Theft and Assumption Deterrence Act
Financial Institutions Fraud Act
Crypto Asset Enforcement Framework(jointly issued by SEC, CFTC, FinCEN, etc.)