It didn't come from nowhere
Crypto regulation is often framed as bureaucrats reacting to something they don't understand, but a lot of it traces back to real, well-documented harm. Exchange collapses have wiped out customer funds that people believed were safely held on their behalf. Fraudulent schemes have used the language of decentralization to sell investments that were never going to pay out. When those events happen at scale, regulators who are responsible for consumer protection get involved, the same way they would after a bank failure or a securities fraud case in traditional finance.
There are three broad goals behind most crypto regulation: protecting consumers and investors from fraud and mismanagement, preventing the financial system from being used to launder money or fund illegal activity, and protecting the stability of the broader financial system as crypto becomes more interconnected with banks, payment rails, and institutional investors. None of these goals are unique to crypto, they're the same reasons securities law, banking law, and anti-money-laundering law exist at all. What's different is that crypto's technical properties, pseudonymity, cross-border transfers, and programmable assets, make applying those existing frameworks genuinely harder.