--- title: "United States — California (US-CA) — Financial-Integrity Intelligence · Sentinel" canonical: https://sentinel.gi/jurisdictions/united-states-california/ source_html: /jurisdictions/united-states-california/index.html description: "Financial integrity intelligence for United States – California (US-CA): sanctions, beneficial ownership, enabler jurisdictions, conflict finance, digital assets and compliance technology — with sourced findings." generated_at: 2026-11-08T04:46:02Z content_sha256: d39490d1e7c2aebaf03d89be6cf90ce4055d72e8e48aa6adb1be0cb80ba77a5f generator: "fe-fleet/md-twin@1.0" --- # United States — California (US-CA) — Financial-Integrity Intelligence · Sentinel Not every instrument is backed by its official text yet. At least one law or rulebook covered here has no official source (tier 1) retrieved for it yet. No finding on this page is shown with confidence above “Probable” until stronger sources are retrieved. Financial Integrity Monitor # United States — California US-CA Domains covered 8 of 8 Sources 145 Role actions 8 Horizon <90d 0 Jurisdiction profile FATF status: Largely Compliant Tier: A Risk direction: Increasing Enablement vs enforcement: Mixed California operates under the federal BSA/AML framework (FinCEN, OFAC) plus a state overlay via the Department of Financial Protection and Innovation (DFPI), which enforces the Money Transmission Act and, from July 1, 2026, the Digital Financial Assets Law (DFAL). More The state is the largest US crypto/fraud-loss jurisdiction and a major node for cartel-linked Chinese money laundering networks, DPRK IT-worker infiltration of its tech sector, and residential-real-estate/GTO-covered laundering typologies. Key deficiencies - Pre-July 2026 DFAL licensing gap allowed unlicensed digital-asset businesses (including kiosk operators) to operate with only partial disclosure/limit controls - Federal CTA domestic beneficial-ownership reporting exemption (March 2025) removed BOI visibility for California-formed entities used in shell/trust layering - High concentration of crypto ATM/kiosk scam-laundering activity in Los Angeles, San Diego and Sacramento with weak upstream liquidity-provider due diligence - DPRK IT-worker infiltration of Bay Area/Silicon Valley tech and crypto employers via falsified US identities Recent developments (18m) - DFPI began accepting DFAL license applications March 9, 2026 ahead of the July 1, 2026 hard licensing deadline - FinCEN renewed Southwest Border and Residential Real Estate GTOs covering California counties through early 2026, before the nationwide Residential Real Estate Rule took effect March 1, 2026 - DOJ Operation Token Mirrors produced coordinated crypto market-manipulation indictments and sentencings run out of the Northern District of California (2025-2026) - OFAC/FinCEN issued repeated 2025-2026 designations against DPRK IT-worker facilitator networks with direct nexus to US (including California) tech-sector victim companies - Domestic CTA/BOI reporting exemption (March 2025) removed federal beneficial-ownership visibility for California-formed entities United States federal law that applies in United States – California is covered once, on the [United States](/jurisdictions/us/) page. This page covers United States – California’s own layer: its own law, regulators and enforcement. Brief ## Lead signal #### Lead Signal The clearest architectural move this cycle sits in California, where SB 97 repealed the Digital Financial Assets Law's standalone stablecoin-issuer chapter, effective 30 June 2026, deferring state-level stablecoin oversight to the federal GENIUS Act framework. The repeal is a structural retreat from a state-specific issuer gateway rather than a loosening of oversight generally, since the broader DFAL licensing regime remains fully operative. Alongside it, the California Department of Financial Protection and Innovation's 13 October 2026 annual report disclosed the states first-ever DFAL enforcement action, among eleven actions taken against crypto kiosk operators in 2025, suggesting the new general licensing architecture is only now moving from paper to active supervision. Read full brief #### Lead Signal The clearest architectural move this cycle sits in California, where SB 97 repealed the Digital Financial Assets Law's standalone stablecoin-issuer chapter, effective 30 June 2026, deferring state-level stablecoin oversight to the federal GENIUS Act framework. The repeal is a structural retreat from a state-specific issuer gateway rather than a loosening of oversight generally, since the broader DFAL licensing regime remains fully operative. Alongside it, the California Department of Financial Protection and Innovation's 13 October 2026 annual report disclosed the states first-ever DFAL enforcement action, among eleven actions taken against crypto kiosk operators in 2025, suggesting the new general licensing architecture is only now moving from paper to active supervision. Separately, sanctions activity escalated sharply in the period. The Office of Foreign Assets Control (OFAC) placed the entire International Criminal Court onto the Specially Designated Nationals list under Executive Order 14203 on 9 October 2026, a designation that drew explicit public objection from the United Kingdom, Canada, Denmark, Germany, France, Italy, Japan, the Netherlands and the United Nations Secretary-General. This is the clearest instance of sanctions-regime divergence among allied governments observed in recent cycles. #### Other Developments Iran-linked banking designations continue. OFAC sanctioned Jazireh International Bank, Chabahar International Bank Overseas Company, an Iraq-based development bank, and a further sixteen individuals and ten entities on 15 October 2026, citing sanctions-evasion networks sustaining Iran's military and proxy forces. Narcotics-finance designations touch the Mexico corridor. On 13 October 2026, OFAC designated four individuals and eleven entities linked to Cartel del Noreste's commercial network, including horse-racing operations, continuing a pattern of targeting ostensibly legitimate commercial fronts for narcotics proceeds. The FATF grey list remains unchanged since the 19 June 2026 Paris plenary , when Bosnia and Herzegovina and Iraq were added and Algeria and Namibia were removed; the blacklist remains fixed at Iran, North Korea and Myanmar. Outcomes from an October 2026 plenary, the first full cycle under the United Kingdom's FATF presidency, had not been published as of this cycle's close, and Mexico remains slated for a possible FATF-GAFILAT mutual-evaluation discussion. #### Cross-Monitor Connections The California stablecoin-chapter repeal and the DFAL enforcement disclosure both sit at the boundary between financial-crime risk and payments regulation: the same facts bear on how digital-asset payment firms are licensed and supervised, a question payments-focused coverage addresses from the market-structure side. The OFAC sanctions actions, particularly the ICC designation's reception among allied governments, carry state-capture and diplomatic-alignment implications that extend beyond financial-crime typology into broader geopolitical risk tracking. #### Outlook The near-term signal to watch is the October 2026 FATF plenary outcome, the first full cycle under the United Kingdom's presidency, which may bring grey-list movement and publication of pending mutual evaluations, including for Mexico. In California, the first enforcement cycle under the DFAL's general licensing regime is still young; whether the pace of crypto-kiosk and other digital-asset enforcement actions continues at a comparable rate will indicate how seriously DFPI intends to use its post-repeal authority. The sanctions-divergence signal around the ICC designation also bears watching for whether allied governments take any formal countermeasures or whether the disagreement remains rhetorical. Earlier periodic briefs (3) 9 Oct 2026 · fim-2026-10-09 #### Lead Signal Californias Digital Financial Assets Law reached full licensing effect on 1 July 2026, and the cycle around that date shows the regime acquiring a visible enforcement posture rather than remaining a paper requirement. The Department of Financial Protection and Innovation ordered Anh Management LLC, operator of the Hermes Bitcoin kiosk network of 42 machines across Southern California, to cease all digital-financial-asset activity in the state by 20 May 2026. The consent order cites DFAL and CCFPL violations alongside a failed BSA/AML compliance program, including failure to collect and verify customer identification and charges exceeding the statutory kiosk transaction and fee cap. One day before DFALs own operative date, SB 97 (Stats. 2026, Ch. 52) took effect on 30 June 2026 and repealed the stablecoin-specific provisions that AB 1934 had added to the statute in 2024, removing the dedicated issuer record-keeping duty and the DFPI-approval route for under-collateralised stablecoin issuers. The sequencing is the structural point. A state licensing regime became fully operative at the same moment its stablecoin-specific carve-out was withdrawn, which means digital-asset activity involving stablecoins in California now sits under the general DFAL licence rather than a tailored sub-regime, at precisely the point enforcement against unlicensed or non-compliant operators was intensifying. #### Other Developments Kiosk enforcement pattern. The DFPI action against Hermes Bitcoin is not presented as an isolated case; the consent order is consistent with an established supervisory pattern against non-compliant crypto kiosk operators that pairs state consumer-protection and licensing levers with an allegation of inadequate BSA/AML controls, even though the AML characterisation originates from DFPI rather than from a FinCEN action. Stablecoin carve-out repeal. The repeal of DFALs stablecoin-specific provisions is sourced to a single secondary regulatory tracker; no primary statute text was independently retrieved this cycle to confirm the precise repealed section numbers, and this gap is carried forward rather than resolved by inference. Implementing regulations still forming. Even with the licensing operative date passed, DFPIs interpretive practice and implementing regulations under the twice-amended DFAL text remain under development, with further rulemaking expected to clarify exemptions and post-repeal stablecoin treatment. #### Cross-Monitor Connections The DFAL licensing perimeter and its interaction with Californias Money Transmission Act is a live question for the payments monitor, since DFPI administers both regimes and a licence under one confers no authority under the other; a proposed, not yet finalised, MTA exemption for fiat transmission incidental to DFAL activity would resolve a duplication firms are currently navigating without certainty. The same DFAL/SB 97 sequencing is relevant to the crypto monitors stablecoin-regime tracking, since the repeal of the dedicated stablecoin sub-regime changes what obligations attach to stablecoin issuers operating in California, independent of the AML characterisation carried here. #### Outlook The near-term question is whether DFPI issues implementing guidance that clarifies stablecoin treatment under the general DFAL licence following SB 97s repeal, expected as scheduled in Q4 2026, though the uncertainty band on that timing is wide. Continued kiosk enforcement in the Hermes Bitcoin pattern would confirm that DFPI is treating DFAL licensing and consumer-protection compliance as an active supervisory programme rather than a one-time registration exercise, which bears on how enforcement-light the regime looks in year one of full operation. 28 Sep 2026 · fim-2026-09-28 #### Lead Signal California's Digital Financial Assets Law (DFAL) licensing requirement for digital-asset business activity took effect on July 1, 2026, bringing a supervised Department of Financial Protection and Innovation (DFPI) perimeter to bear on a category of activity that previously sat largely outside dedicated state licensing. In the same window, SB 97 repealed DFAL's stablecoin-issuer licensing provisions on June 30, 2026, a legislative choice explicitly framed as deference to the evolving federal GENIUS Act framework rather than maintenance of a parallel state licensing track for stablecoin issuers. Read together, these two moves describe a state architecture that is simultaneously tightening its general digital-asset licensing perimeter and stepping back from a specific sub-category, stablecoins, in favour of federal primacy. This is a structural development in enablement terms: DFPI is building the supervisory apparatus for digital-asset businesses broadly, while consciously not duplicating a stablecoin-specific licensing regime the federal government is expected to occupy. #### Other Developments Tech Fraud Task Force convened. Governor Newsom convened the first meeting of a new Tech Fraud Task Force, co-led by DFPI, on June 22, 2026. This is reported from a single source this cycle and has not been independently corroborated, so it is treated here as a discrete convening event rather than a standing programme with established output; it nonetheless signals an increased state enforcement posture directed at technology-enabled financial fraud, and is worth tracking for its first substantive outputs. #### Cross-Monitor Connections The DFAL licensing and stablecoin-repeal developments sit squarely at the intersection of financial integrity and payments regulation: a state licensing perimeter for digital-asset business activity is, by construction, also a payments-regulation development, since digital-asset businesses frequently function as money-transmission-adjacent entities. The compliance-technology angle of the Tech Fraud Task Force convening likewise connects to broader active-defence and fraud-detection infrastructure questions that sit alongside, rather than inside, the AML/CTF reporting perimeter proper. #### Outlook DFPI's implementing regulations for DFAL (rulemaking PRO 02-23) remain in an active rulemaking posture after the Office of Administrative Law disapproved an earlier version and DFPI submitted a revised version in June 2026; this second modification cycle is expected to conclude in Q4 2026, and its final text will determine matters including exemption scope for money-transmission activity incidental to digital-asset business. Whether the Tech Fraud Task Force produces a standing programme with measurable output, or proves to be a single convening event, is also a matter to watch going into the next cycle. 5 Sep 2026 · fim-2026-08-21 #### Lead Signal California's Digital Financial Assets Law entered full force on July 1, 2026, requiring persons conducting digital-financial-asset business activity with California residents to hold a DFPI license, maintain a complete pending application, or qualify for an exemption, backed by civil penalties of up to $100,000 per day for unlicensed activity. The obligation is codified within Division 1.25 of the California Financial Code as an in-force screening-type obligation applicable to crypto-asset operators, giving the regime a governance dimension beyond a bare licensing gate. The licensing threshold arrived alongside an active DFPI enforcement pattern against crypto kiosk operators: Anh Management LLC, operating as Hermes Bitcoin, was ordered to cease all forty-two Bitcoin ATM kiosks in Southern California by May 20, 2026 for violations of the Digital Financial Assets Law, the California Consumer Financial Protection Law, and federal anti-money-laundering requirements, including exceeding transaction limits. The Hermes Bitcoin enforcement action, resting on a California DFPI primary source, named the specific transaction-limit violations that triggered the shutdown, tying an AML-adjacent compliance failure directly to a licensing-and-conduct enforcement outcome rather than treating the two as separate regulatory tracks. Read together, the full-force licensing threshold and the kiosk enforcement action mark California's clearest signal yet that its crypto-asset oversight architecture, built through DFPI's DFAL and CCFPL authority rather than a standalone state AML statute, has moved from a phased-obligation posture into active operational enforcement. #### Other Developments Offshore lender enforcement surfaces an enabler-jurisdiction pattern. Nexo Capital, a Cayman Islands-based digital-asset lending platform, drew a $500,000 DFPI penalty in January 2026 for offering unlicensed crypto-backed loans to 5,456 California residents between July 2018 and November 2022, assessed on a single secondary source without a corroborating DFPI primary release located this cycle. The action illustrates the class of enforcement gap that DFAL's licensing threshold is designed to close going forward: an offshore-domiciled platform serving California residents without in-state authorization for an extended multi-year period before facing any regulatory consequence. Stablecoin oversight ceded to the federal layer. SB 97, an urgency statute signed June 30, 2026, repealed DFAL's stablecoin-licensing provisions in favor of the federal GENIUS Act framework, a deliberate narrowing of DFPI's own licensing remit rather than an oversight gap left unaddressed. Kiosk enforcement pattern continues. A DFPI consent-order enforcement action against Evergreen ATM LLC, a crypto kiosk operator, continues the department's kiosk-enforcement pattern begun with Coinme in June 2025, though this specific action rests on a single secondary source this cycle. #### Cross-Monitor Connections The DFAL licensing threshold and its kiosk-enforcement companion connect directly to World Payments Monitor coverage of California's DFAL/MTA licensing regime and the SB 97 stablecoin repeal under its own W1a and W2 modules, and to the Global Crypto Regulatory Monitor's parallel treatment of the same licensing and stablecoin developments under its crypto_licensing and stablecoin_regime modules. Separately, the Advennt gambling monitor's coverage of AB 831's extension of accessory liability to payment processors and affiliates supporting banned dual-currency sweepstakes-casino platforms sits adjacent to, but analytically distinct from, this cycle's crypto-asset enforcement activity: both reflect California regulators broadening liability beyond the primary offending entity to the vendors and financial intermediaries that support it, a pattern worth tracking across both monitors as a state-level enforcement-design trend rather than treating each instrument in isolation. #### Outlook The dominant question for the next cycle is whether DFPI's kiosk-enforcement pattern, now three actions deep across Coinme, Evergreen ATM, and Hermes Bitcoin, extends to additional operators as the DFAL licensing deadline moves from a forward-looking threshold into a fully operative compliance baseline. The bifurcation created by SB 97, DFPI retaining exchange, custody, and kiosk licensing authority while ceding stablecoin oversight to the federal GENIUS Act, will also warrant continued monitoring as the federal framework's implementation details become clearer. The Nexo Capital enforcement gap, spanning more than four years of unlicensed offshore lending activity before any penalty, will be a useful benchmark against which to measure whether DFAL's licensing threshold meaningfully shortens the enforcement lag for similarly structured offshore platforms in future cycles. Domain intelligence (D1–D8) #### Sanctions Architecture and Evasion This cycle's defining sanctions development is the addition of the entire International Criminal Court to the Office of Foreign Assets Control's Specially Designated Nationals list under Executive Order 14203, effective 9 October 2026, accompanied by four related general licenses. The action drew explicit public objection from the United Kingdom, Canada, Denmark, Germany, France, Italy, Japan and the Netherlands, as well as the United Nations Secretary-General. This is a Comprehensive sanctions action against an international judicial body rather than a state or state-linked network, and the scale and breadth of allied-government objection marks it as one of the clearest instances of sanctions-regime divergence observed between Washington and its traditional partners in recent cycles. The structural significance here is not the designation mechanics themselves but what the divergence signals: a widening gap between the sanctioning authority's own foreign-policy priorities and the consensus views of states that would ordinarily align closely with its sanctions programme. Where allied governments openly contest a designation's legitimacy, the practical compliance question for multinational institutions becomes which jurisdiction's expectations to prioritise when a transaction or relationship touches the designated entity. Continue reading Alongside the ICC designation, OFAC continued more conventional sanctions activity. On 15 October 2026 it sanctioned Jazireh International Bank, Chabahar International Bank Overseas Company, an Iraq-based development bank, and a further sixteen individuals and ten entities, citing sanctions-evasion networks that sustain Iran's military and proxy forces. This action follows an established architecture pattern: naming correspondent and exchange-house conduits used to move value for Iran-linked actors, rather than targeting Iran's government directly. On 13 October 2026, a separate action designated four individuals and eleven entities linked to Cartel del Noreste's commercial network, including horse-racing operations — an example of narcotics-finance proceeds routed through ostensibly legitimate commercial and leisure-sector fronts, a recurring typology in the Mexico corridor. Separately, OFAC also extended Russia-related General Licenses 128D, 130B and 135 on 9 and 15 October 2026, continuing a managed wind-down of certain previously authorised transactions rather than tightening the Russia sanctions architecture further this cycle. #### Outlook The most consequential open question is whether the ICC designation's reception among allied governments produces any formal countermeasure, such as blocking statutes or diplomatic protest escalating to policy divergence, or whether the disagreement remains at the level of public statements. Institutions operating across US and allied jurisdictions should watch for guidance diverging from US Treasury's own position. On the Iran and Mexico-corridor designations, continuity of the established pattern — correspondent and exchange-house conduits for Iran, commercial-front proceeds for narcotics networks — suggests further designations in the same vein are likely as the architecture matures rather than shifts in kind. #### Beneficial Ownership and Corporate Transparency California this cycle carries the two most significant beneficial-ownership deteriorations in the current research record, plus a standing structural feature of the European Union AML architecture that frames how any future federal reform might eventually be judged. The federal Corporate Transparency Act domestic reporting exemption, an interim final rule announced 21 March 2025 and published with an effective date of 26 March 2025 per Federal Register publication, exempts all US-formed reporting companies and their beneficial owners from CTA beneficial-ownership-information (BOI) reporting; the Financial Crimes Enforcement Network (FinCEN) will not enforce BOI penalties against US persons or domestic reporting companies, leaving only foreign reporting companies in scope. For the large population of California-formed limited liability companies and corporations used in real estate and investment layering, this removes federal ownership visibility that previously existed, however imperfectly, as the CTA baseline. Continue reading Compounding this, a parallel real-estate-specific visibility mechanism has also weakened, though the record required correction to establish this accurately. The nationwide Anti-Money Laundering Regulations for Residential Real Estate Transfers Rule was scheduled to take effect 1 March 2026 and had been characterized in prior research as operative and superseding the county-level Geographic Targeting Orders (GTOs). Challenge verification against FinCEN primary sources establishes instead that the rule was vacated by the United States District Court for the Eastern District of Texas on 19 March 2026 and is not currently in force pending a FinCEN appeal; reporting persons are not currently required to file Real Estate Reports under this rule. The prior GTO framework, renewed through 28 February 2026 and requiring title insurers to identify natural persons behind shell-company residential real-estate purchases in designated California counties, remains the operative backstop, though GTOs cover only designated metropolitan counties rather than the state as a whole. Standing architecture: the European Union AML Package establishes a durable three-instrument structure against which any comparable US reform would eventually be read. The AML Regulation (AMLR, Regulation (EU) 2024/1624) is directly applicable across Member States without domestic transposition; the sixth AML Directive (6AMLD) requires transposition on a per-Member-State basis; and the AMLA Regulation (Regulation (EU) 2024/1620) establishes the Anti-Money Laundering Authority, whose direct and indirect supervision perimeter is shifting AML/CFT supervision from a purely national-authority model toward a hybrid EU-level regime. California, as a United States sub-national jurisdiction, sits entirely outside this EU AMLR/6AMLD/AMLA supervisory perimeter, and no EU AML Package instrument-specific development was supported by this jurisdiction research this cycle; the durable relevance of the architecture is as a comparative backdrop against which the direction of the 2025 domestic BOI exemption, a visibility contraction, can be read against a jurisdiction moving toward greater centralized beneficial-ownership and supervisory integration. The FATF dimension sharpens this picture further. The United States carries a standing position of compliance on 9 of 40 FATF Recommendations and largely-compliant on 23, with serious beneficial-ownership-access gaps persisting from the 2016 mutual evaluation report; the fifth-round mutual evaluation, expected sometime between 2026 and 2028 under the 2022 Methodology, has not yet been scheduled. This cycle assessment is that the 2025 domestic BOI exemption compounds rather than resolves that deficiency, since it removes a federal data source without a state-level substitute, California having no state-level public beneficial-ownership registry of its own. Obligation coverage in this domain is mixed. The BOI domestic exemption obligation is flagged as covered, in the sense that the underlying rule is properly reflected as in force and non-enforced against domestic entities; the Residential Real Estate Rule obligation is flagged as partial, reflecting the operative-but-narrower GTO backstop pending appeal; and the underlying GTO renewal obligation itself is also flagged partial, since GTOs apply only to designated counties and rely on title-insurer reporting rather than a comprehensive ownership registry. Taken together, no single instrument currently gives California, or the federal government with respect to California-formed entities, comprehensive beneficial-ownership visibility across corporate structuring and real estate. This is a domain where the honesty-over-coverage principle matters directly: both corrections applied this cycle, the Residential Real Estate Rule vacatur and the CTA exemption effective date, originated as challenge-verification findings against primary FinCEN and Federal Register sources, not as new developments in the underlying policy. The corrections change what compliance and audit functions should treat as currently binding, not merely when a past event occurred, and reporting persons who continued filing Real Estate Reports on the assumption the vacated rule remained in force would have been complying with an obligation that, per FinCEN own status page, does not currently exist. #### Outlook Two threads will determine the domain trajectory going forward. First, the outcome of the FinCEN appeal of the Residential Real Estate Rule vacatur will determine whether a national beneficial-ownership-adjacent reporting requirement for residential real estate is reinstated, replaced, or permanently narrowed to the GTO model; this outcome is not yet established in the research record. Second, the eventual scheduling and conduct of the fifth-round FATF mutual evaluation of the United States, not expected before 2027 on a multi-year uncertainty band, will be the first international assessment mechanism to test the 2025 domestic BOI exemption against the beneficial-ownership-access Recommendations FATF previously flagged as deficient. Absent a state-level beneficial-ownership registry, California-formed entities used in opaque real estate and investment structuring are, for the duration of this window, visible chiefly through the narrower GTO mechanism rather than through a comprehensive ownership register at either the state or federal level. #### Enabler Jurisdictions and Professional Facilitators California this cycle illustrates a form of enablement that operates through capacity deficit rather than deliberate design, alongside a more conventional professional-facilitator network operating through trade and payment corridors. The California Digital Financial Assets Law (DFAL) pre-licensing window, running from the law 2023 enactment to the 1 July 2026 hard licensing deadline, created a multi-year period in which digital-asset businesses could serve California residents under only partial rules, kiosk daily transaction limits and disclosure requirements, without full licensing, AML-program, or ongoing-supervision obligations. This allowed unlicensed or thinly supervised exchanges, custodians and kiosk operators to build customer bases ahead of the California Department of Financial Protection and Innovation (DFPI) net-worth, surety-bond and audited-AML-program requirements that now apply. Applying the Enabler Jurisdiction Filter distinction between capacity and choice: California did not choose permissiveness as a policy stance, the DFAL was enacted specifically to close this gap, but the multi-year implementation runway itself functioned as an enabler window regardless of intent, and the DFPI has since brought enforcement actions, effective from 1 June 2025, against kiosk operators exceeding transaction limits or failing disclosures, an outcome assessed as containing rather than resolving the historical gap. Continue reading A second, more conventional enabler-adjacent architecture involves Chinese Money Laundering Networks (CMLNs), assessed at High confidence, which launder Sinaloa and CJNG cartel proceeds generated in California using mirror-transfer and Black Market Peso Exchange-style trade-based schemes, smurfing across depository branches, complicit-insider recruitment, and money-mule networks including recruited students, converting drug cash into RMB-denominated value for China-based clients while avoiding direct cross-border fund movement. This is a professional-facilitator architecture in the classical sense: it depends on intermediaries, trade documentation, and banking relationships that function as enabling infrastructure for value transfer that would otherwise require direct, more visible cross-border movement. The red-flag indicators here, trade-based schemes avoiding direct cross-border fund movement, smurfing, and counterfeit-document money mules, are each tied to specific customer typologies, trade finance and money-service businesses for the trade-based indicators, retail for the mule indicator, giving compliance functions typology-specific detection surfaces rather than a single generic red flag. Both architectures share a structural feature relevant to the enabler-jurisdiction analytical frame: neither depends on California choosing weak regulation as a strategy. The DFAL gap is a transition-period artifact of a state actively building a licensing regime considered comparatively rigorous once fully in force; the CMLN architecture exploits California trade and banking infrastructure as a transit point regardless of California own regulatory posture, since the laundering network origin and destination lie substantially outside California and the United States. This distinguishes California from enabler jurisdictions where permissiveness reflects sustained regulatory choice rather than transitional capacity constraint or exploited infrastructure, and the analytical product for this domain is accordingly the enabling window and infrastructure themselves, not a judgment about California regulatory intent. Obligation coverage in this cluster is uneven. The CMLN-related FinCEN advisory reporting obligation is flagged as covered for banks and payment companies. No obligation reference is currently associated with the DFAL pre-licensing gap itself, since the gap is a structural finding about a transition period rather than a specific compliance citation, though the DFPI enforcement actions against kiosk operators for limit and disclosure breaches represent the operative control mechanism once the interim rules applied. This cycle also surfaces a documentation gap relevant to confidence in this domain: no directly retrievable DFPI primary regulatory or enforcement-order text was cited in the underlying research, meaning California-specific DFPI actions are characterized entirely through secondary vendor and analytics reporting rather than primary regulatory-agency text. This constrains confidence in the precise scope and count of DFPI enforcement actions to Assessed rather than High, and is flagged as a persistent gap carried forward from the prior baseline research cycle. Filters F3 (Enabler Jurisdiction) and F2 (Sanctions Architecture) were both applied to the CMLN scheme this cycle, reflecting that professional-facilitator networks and sanctions-relevant trade corridors are frequently the same underlying infrastructure assessed through different analytical lenses; the DFAL pre-licensing gap carries F3 alone, since it is a licensing-capacity story rather than a sanctions-evasion one. Taken together, the domain trajectory for California is assessed as stable rather than deteriorating or improving this cycle: the DFAL transition-period gap is closing as full licensing takes effect, even if post-deadline compliance data is not yet confirmed, while the CMLN architecture continues without a California-specific enforcement development this cycle beyond the standing FinCEN advisory material. #### Outlook The principal open question for this domain is whether the DFPI first post-deadline supervisory sweep, expected in the fourth quarter of 2026 but carrying an uncertain risk direction and only Possible confidence in the current record, confirms that the pre-licensing enabler window has meaningfully closed or reveals continued thin supervision among newly licensed or exited operators. Separately, no California-specific prosecutorial or civil-enforcement development targeting the CMLN architecture directly was identified this cycle; the network continues to be addressed through federal advisory and Geographic Targeting Order instruments rather than jurisdiction-specific enforcement action. Absent DFPI primary source material becoming available, confidence in the precise scale of historical DFAL-gap exploitation and the current state of kiosk-operator compliance will likely remain capped at Assessed rather than High. #### Conflict Finance and Extractive-Industry Integrity No California-specific conflict-finance or extractive-industry-integrity development was surfaced in this jurisdiction-scoped research cycle. The domain status for this slice is quiet, with a stable trajectory, reflecting the absence rather than the resolution of signal: California is not documented this cycle as a transit point, financing node, or extractive-sector nexus for conflict-affected commodity flows or armed-group revenue generation. This is distinct from the broader Financial Integrity Monitor standing coverage of conflict finance, Russian war-economy financing, Sahel conflict minerals, and Democratic Republic of Congo mining governance, which continues under separate, non-jurisdiction-scoped baselines not reflected in this particular research pull and therefore not restated here as new signal. Continue reading Per the honesty-over-coverage principle, this sub-brief is intentionally short rather than padded with material outside the structured claims produced for this cycle. The absence of a California-specific D4 finding is itself a data point worth recording explicitly: it indicates that this jurisdiction research pass, which was scoped around DPRK IT-worker infiltration, beneficial-ownership visibility, crypto-asset supervision, and enabler-jurisdiction dynamics, did not surface a conflict-finance or extractive-industry thread requiring assessment this cycle, rather than that no such thread could in principle exist for California-linked capital. Where cross-domain material does touch this domain indirectly, it is through the DPRK IT-worker infiltration architecture assessed under D1 and D6, since DPRK-linked revenue generation is itself connected to a broader financing architecture for weapons programs that the Conflict Finance and Extractive-Industry Integrity domain would, in a fuller multi-jurisdiction assessment, cross-reference against SCEM conflict-context material and ERM commodity-flow material. No such cross-reference was independently developed as D4 signal in this cycle research, however, and is noted here only to explain why this domain sub-brief remains thin rather than empty. #### Outlook No California-specific D4 horizon items were identified this cycle. Future jurisdiction-scoped research passes for California would need to specifically target extractive-industry supply chains, conflict-mineral sourcing by California-headquartered manufacturers, or conflict-adjacent financing corridors to develop material D4 signal for this jurisdiction; absent such targeted scoping, this domain is likely to remain quiet in subsequent California-specific cycles even as the broader Financial Integrity Monitor standing conflict-finance trackers continue to evolve independently. #### Crypto, Digital Assets, and Financial Innovation California's SB 97, an urgency statute, repealed the Digital Financial Assets Law's standalone stablecoin-issuer chapter — formerly Cal. Fin. Code §3601 et seq., covering issuer approval, reserve and redemption requirements — effective 30 June 2026. In its place, the statute defers stablecoin-specific oversight to the federal GENIUS Act framework rather than retaining a parallel state-level issuer gateway. This is a structural retreat, not a deregulation of digital-asset activity generally: the broader DFAL general licensing regime remains intact and became fully operative on 1 July 2026, meaning digital-asset businesses dealing with California residents still require a license, a pending application filed on or before 1 July 2026, or a qualifying statutory exemption. The repeal should be read as California recalibrating which layer of government owns stablecoin-specific prudential oversight, while preserving its own general licensing authority over the wider digital-asset business population. Continue reading The practical significance of this recalibration becomes clearer alongside the California Department of Financial Protection and Innovation's annual report, published 13 October 2026, covering 2025 activity. That report discloses the state's first-ever enforcement action brought specifically under the DFAL, together with a total of eleven enforcement actions against crypto kiosk operators during 2025. Read together, the repeal of the stablecoin chapter and the emergence of the state's first substantive DFAL enforcement record indicate that California's general licensing architecture is only now transitioning from a dormant statutory framework into one with an active supervisory record — the repeal narrowed the regime's scope at the same moment its surviving provisions began to be tested in practice. This sequencing matters for financial-integrity purposes because crypto kiosks — physical cash-to-crypto conversion points — are a recognised typology vector for layering and for circumventing bank-level transaction monitoring, and DFPI's enforcement attention there suggests state-level supervisors are treating kiosk operators as a priority enforcement target independent of federal action. #### Outlook Whether DFPI's pace of enforcement against crypto kiosk operators and other digital-asset businesses continues at a comparable rate into 2026 will be the clearest indicator of how seriously the state intends to use its post-repeal licensing authority. It also remains to be confirmed what residual authority, if any, DFPI retains over previously DFAL-approved stablecoin issuers following the chapter's repeal, and whether the federal GENIUS Act framework will in practice supply the prudential detail the repealed state chapter previously provided. #### Compliance Technology and Active Defence This cycle surfaces a single but analytically significant D6 development for California: a proposed FinCEN AML/CFT Program rule that would require an effective, risk-based, reasonably designed program standard with explicit accommodation for innovative and technology-driven compliance approaches. This is a consultation-stage instrument, assessed at Assessed confidence from a FinCEN fact-sheet primary source, expected to finalize in 2027. Its relevance to California is structural rather than jurisdiction-specific: once finalized, it would reshape supervisory expectations for California-headquartered banks, money-service businesses, and crypto firms operating under, or alongside, the DFAL regime, by formally accommodating technology-driven compliance methods that current Bank Secrecy Act program requirements do not explicitly recognize. Continue reading This domain is flagged for limited signal this cycle because the underlying research pass, scoped around California-specific enforcement, sanctions, and beneficial-ownership developments, surfaced only this one compliance-technology-specific instrument rather than a broader set of active-defence or regtech-specific findings for the jurisdiction. The domain status is nonetheless assessed as watch with an improving trajectory, since the proposed reform, alongside the GENIUS Act PPSI NPRM assessed under D5, points toward a regulatory environment increasingly willing to formalize technology-driven compliance approaches rather than treat them as exceptions requiring case-by-case supervisory accommodation. No control-gap signal is yet assignable to this instrument, since it remains at the consultation stage and the eventual final rule will define the compliance obligation itself once adopted. Honesty over coverage governs this sub-brief: rather than extrapolating a fuller California-specific compliance-technology narrative from adjacent D5 material such as the DFAL licensing regime or the GENIUS Act NPRM, this sub-brief limits itself to the single NPRM directly coded to this domain, leaving cross-domain synthesis to the weekly_brief_draft Cross-Monitor Connections and Outlook sections rather than duplicating it here. Affected firm types under the proposed rule span the cross-sector population, meaning its eventual effect, once finalized, would not be confined to crypto-asset operators or banks alone but would extend across the full range of Bank Secrecy Act-obligated entities operating in or through California. #### Outlook The FinCEN AML/CFT Program NPRM finalization, expected in 2027 on a year-length uncertainty band, is the primary item to track for this domain; its eventual text will determine whether technology-driven compliance approaches receive genuine regulatory accommodation or remain a discretionary supervisory consideration. Given the current limited signal for this domain in the California-specific research record, subsequent cycles would benefit from explicitly scoping active-defence and regtech-adoption questions, such as machine-learning transaction-monitoring deployment among DFAL-licensed entities, rather than relying on incidental coverage through adjacent D5 crypto-regulatory material. FATF grey list unchanged since the June 19, 2026 Paris plenary; October 2026 plenary outcomes not yet published as of this cycle's cutoff. Continue reading FATF grey list unchanged since June 2026 plenary : Latest confirmed plenary outcome remains the 19 June 2026 Paris plenary (Bosnia and Herzegovina and Iraq added; Algeria and Namibia removed); blacklist unchanged. No qualifying commercial event identified this cycle. Regulatory horizon No dated horizon items this cycle. 4 items tracked without a confirmed date. 4 pending date · baseline fim-2026-07-05 Role action cards MLRO ### OFAC sanctioned Iran-linked banks and a Mexico narcotics-finance network in mid-October 2026, while the ICC designation raises cross-jurisdictional screening complexity. Screening lists should be updated against the 9, 13 and 15 October 2026 OFAC designations, including the ICC entry, which allied-government partners have publicly contested and which may complicate correspondent-bank risk assessments touching those partners. 3 evidence refs Compliance ### California's DFAL general licensing regime now has an active enforcement record following its first-ever enforcement action and the repeal of its stablecoin-issuer chapter. Firms dealing in digital-asset activity with California residents should confirm licensing or exemption status under the DFAL general regime, which remains fully in force notwithstanding the stablecoin chapter's repeal. 2 evidence refs Board ### Allied governments publicly objected to the OFAC designation of the entire International Criminal Court, signalling a sanctions-policy divergence among traditional partners. Institutions with cross-border exposure to the US and allied jurisdictions face a widening divergence in sanctions-policy alignment that could create conflicting compliance expectations across jurisdictions. 1 evidence refs CTO ### California's repeal of its stablecoin-issuer chapter shifts prudential oversight of stablecoin issuance toward the federal GENIUS Act framework. Technology teams supporting stablecoin issuance or custody platforms touching California should track whether the federal framework supplies equivalent technical and reserve-reporting requirements previously specified at state level. 1 evidence refs Risk ### Crypto kiosk operators remain a priority state-level enforcement target, with California disclosing eleven 2025 enforcement actions including its first DFAL action. Risk functions should treat cash-to-crypto kiosk exposure as an elevated typology concentration given active state supervisory attention independent of federal enforcement. 1 evidence refs Audit ### FATF grey-list status remains unchanged since June 2026, pending October 2026 plenary publication. Audit testing of grey-list-driven enhanced due diligence controls can continue against the current June 2026 list pending confirmation of any October 2026 plenary changes. 1 evidence refs Scenario sketches ### AMLA direct-supervision transition and cross-border evasion pathways As the Anti-Money Laundering Authority moves toward direct and indirect supervision of designated cross-border obliged entities under the AMLA Regulation, alongside the directly-applicable AML Regulation and per-state transposition of the sixth AML Directive, the European supervisory landscape could shift from a purely national patchwork toward a hybrid EU-level regime. Illustratively, entities currently structuring activity to exploit divergence between national supervisory practices might face a narrower window to do so as AMLA's direct-supervision perimeter is defined and populated, while entities just outside that perimeter could see continued reliance on national-level variation. This is an illustrative structural sketch of how the transition could reshape evasion incentives, not a description of an observed event. Illustrative scenario for analytical orientation only. Not compliance advice, not a prediction, and not a statement of observed fact. Standing trackers (T1–T6) Tracker Status Note T1 · Russian Sanctions-Evasion Architecture stable OFAC extended Russia-related General Licenses 128D/130B and GL 135 on Oct 9 and 15, 2026, continuing managed wind-down. T2 · EU AML Package / AMLA no_change No AMLR/6AMLD/AMLA-specific development surfaced this cycle; out of scope for subnational US-CA. T3 · FATF Grey List stable Latest confirmed plenary outcome remains the 19 June 2026 Paris plenary; October 2026 plenary outcomes not yet located. T4 · Beneficial-Ownership Register Status no_change No BO-registry development identified for US-CA or globally this cycle. T5 · Crypto & Digital-Asset Integrity material_change SB 97's stablecoin-chapter repeal and DFAL's first enforcement action mark a material architecture shift for US-CA. T6 · Sanctions Regime Divergence material_change OFAC's ICC designation drew explicit public disagreement from UK, Canada, Denmark, Germany, France, Italy, Japan, the Netherlands and the UN Secretary-General. Registers ### Enforcement actions - 1 Jun 2025 - 30 Mar 2026 - 27 Jan 2026 - 12 Mar 2026 - 9 Oct 2025 - 1 Jun 2026 - 1 Jun 2026 - 25 Jun 2025 - 1 Jan 2026 - 18 May 2026 - 14 Jan 2026 - 16 Jan 2026 - 13 Oct 2026 - DFPI brought multiple enforcement actions against California crypto kiosk operators for exceeding the $1,000/day per-customer transaction limit or failing to provide required pre-transaction disclosures under the phased DFAL kiosk rules in effect since January 2024/2025. 1 Jun 2025 - Three coordinated indictments charged ten foreign nationals across four crypto market-making/wash-trading firms with wire fraud conspiracy; defendants Tsao and Popov were arrested and sentenced in the Oakland federal court in 2025-2026, with forfeiture of 1.2 million USDT. 30 Mar 2026 - Defendant sentenced for role in a digital-asset investment scam involving $36.9 million in victim funds converted through stablecoins, part of a broader pattern of California-venued crypto investment-fraud prosecutions tied to money-laundering statutes. 27 Jan 2026 - OFAC sanctioned facilitators who converted DPRK IT-worker earnings—generated in part from remote contracts with US employers—into cryptocurrency across Ethereum, Tron and Bitcoin, funding DPRK WMD/ballistic-missile programs. 12 Mar 2026 - FinCEN renewed Residential Real Estate GTOs requiring title insurers to identify natural persons behind shell-company, non-financed residential real-estate purchases above $300,000 in covered California counties, ahead of the nationwide Residential Real Estate Rule taking effect March 1, 2026. 9 Oct 2025 ### Sanctions changes - 21 Mar 2025 - 30 Jan 2026 - 1 Oct 2025 - 16 Jun 2026 - 16 Jun 2026 - 16 Jan 2026 - 21 Mar 2025 - 1 Jun 2026 - 9 Oct 2026 - 15 Oct 2026 - 13 Oct 2026 - OFAC formally delisted the decentralized, non-custodial mixer Tornado Cash from the SDN List following a federal court ruling that its autonomous smart contracts could not be treated as blockable property, a change with direct compliance implications for California-headquartered crypto exchanges and analytics firms that had built Tornado Cash screening into sanctions programs. 1 Mar 2025 - OFAC designated UK-registered digital asset exchanges Zedcex Exchange, Ltd. and Zedxion Exchange, Ltd. for processing Iran-linked, IRGC-connected cryptocurrency flows, illustrating the cross-border reach of Iran sanctions into exchanges accessible to California-based users and counterparties. 30 Jan 2026 - FinCEN proposed severing H-Pay Service PLC and other Huione Group successor entities from the US financial system under Section 311 special measures, extending the October 2025 Huione designation used to launder over $4 billion including North Korean cyber-heist proceeds accessible via US-facing (including California) crypto on/off-ramps. 22 Jun 2026 - FinCEN's Residential Real Estate GTOs covering California counties expired February 28, 2026 and were replaced by the nationwide Anti-Money Laundering Regulations for Residential Real Estate Transfers Rule effective March 1, 2026, converting a geographically-targeted temporary order into permanent nationwide reporting. 1 Mar 2026 ### Regulatory horizon (register) - DFAL implementing regulations finalized and operative - DFAL implementing regulations finalized and operative - DFPI DFAL implementing regulations (PRO 02-23) - DFAL implementing regulations (post-SB 97 amendment) still developing - October 2026 FATF Plenary (first full cycle under UK Presidency) - GENIUS Act PPSI AML/CFT and sanctions final rule adoption - DFAL full licensing enforcement ramp-up and first supervisory sweep - FinCEN AML/CFT Program NPRM finalization (risk-based program reform) - US 5th-round FATF mutual evaluation scheduling - DFAL implementing regulations finalized and operative ### Active schemes - [HIGH] DPRK IT-worker infiltration of California tech/crypto employers - [HIGH] Convertible virtual currency kiosk scam-laundering pipeline - [HIGH] Chinese Money Laundering Networks servicing cartel proceeds via California trade corridors - Pre-licensing regulatory gap exploitation under California DFAL Sources - [1 Heath Tarbert, Chairman, U.S. Commodity Futures Trading Commission (CFTC)](https://www.fincen.gov/system/files/2019-10/CVC%20Joint%20Policy%20Statement_508%20FINAL_0.pdf) - [U.S. Department of the Treasury](https://home.treasury.gov/news/press-releases/jy2777) - [Baker McKenzie Sanctions News](https://sanctionsnews.bakermckenzie.com/uk-expands-russia-sanctions-to-further-target-shadow-fleet-military-procurement-and-financial-networks/) - [Sigma7](https://www.s7risk.com/june-2026-sanctions-guide/) - [FATF](https://www.fatf-gafi.org/en/publications/High-risk-and-other-monitored-jurisdictions/increased-monitoring-february-2026.html) - [The Dark Side of Development (Substack)](https://drdavidwhitehouse.substack.com/p/why-is-cambodia-not-on-faft-grey) - [FinCEN](https://www.fincen.gov/boi) - [Federal Register / FinCEN](https://www.federalregister.gov/documents/2026/04/16/2026-07416/imposition-of-special-measure-prohibiting-certain-transmittals-of-funds-involving-cibanco-sa) - [U.S. Department of State](https://www.state.gov/releases/office-of-the-spokesperson/2025/09/presidential-determination-on-major-drug-transit-or-major-illicit-drug-producing-countries-for-fiscal-year-2026) - [eucrim](https://eucrim.eu/news/new-anti-money-laundering-directive-amld-6/) - [European Banking Authority](https://www.eba.europa.eu/regulation-and-policy/asset-referenced-and-e-money-tokens-mica) - [UK Government / Companies House](https://changestoukcompanylaw.campaign.gov.uk/identity-verification/) - [U.S. Department of the Treasury (OFAC)](https://home.treasury.gov/news/press-releases/sb0057) - [U.S. Court of Appeals, Fifth Circuit](https://www.ca5.uscourts.gov/opinions/pub/23/23-50669-CV0.pdf) - [Napier AI](https://www.napier.ai/post/fincen-aml-ai-effectiveness) - [Sullivan & Cromwell LLP](https://www.sullcrom.com/insights/memo/2026/April/OCC-Fed-FDIC-Issue-Revised-Guidance-Model-Risk-Management) - [https://dfpi.ca.gov/press_release/dfpi-shuts-down-crypto-kiosk-operator-for-cheating-consumers-and-violating-state-laws/](https://dfpi.ca.gov/press_release/dfpi-shuts-down-crypto-kiosk-operator-for-cheating-consumers-and-violating-state-laws/) - [https://calawyers.org/business-law/a-closer-look-at-california-financial-regulators-2026-agenda/](https://calawyers.org/business-law/a-closer-look-at-california-financial-regulators-2026-agenda/) - [https://www.techtimes.com/articles/319477/20260701/california-crypto-law-now-live-unlicensed-platforms-risk-100k-daily-fines.htm](https://www.techtimes.com/articles/319477/20260701/california-crypto-law-now-live-unlicensed-platforms-risk-100k-daily-fines.htm) - [https://www.mofo.com/resources/insights/260729-california-digital-assets-and-fintech-update](https://www.mofo.com/resources/insights/260729-california-digital-assets-and-fintech-update) - [https://dfpi.ca.gov/regulated-industries/digital-financial-assets](https://dfpi.ca.gov/regulated-industries/digital-financial-assets) - [https://dfpi.ca.gov/press_release/governor-newsom-convenes-the-first-meeting-of-californias-tech-fraud-task-force-to-help-strengthen-consumer-protections/](https://dfpi.ca.gov/press_release/governor-newsom-convenes-the-first-meeting-of-californias-tech-fraud-task-force-to-help-strengthen-consumer-protections/) - [https://www.gov.ca.gov/2026/06/24/governor-newsom-convenes-the-first-meeting-of-californias-tech-fraud-task-force-to-help-strengthen-consumer-protections/](https://www.gov.ca.gov/2026/06/24/governor-newsom-convenes-the-first-meeting-of-californias-tech-fraud-task-force-to-help-strengthen-consumer-protections/) - [Morrison Foerster](https://www.mofo.com/resources/insights/260729-california-digital-assets-and-fintech-update) - [DFPI](https://dfpi.ca.gov/wp-content/uploads/2026/06/PRO-02-23-Notice-of-Modification-and-Addition-of-Document-Post-Disapproval-Final.pdf) - [https://natlawreview.com/article/dfpi-orders-crypto-kiosk-operator-shut-down-california-operations-over-alleged-dfal-violations](https://natlawreview.com/article/dfpi-orders-crypto-kiosk-operator-shut-down-california-operations-over-alleged-dfal-violations) - [https://www.sheppard.com/insights/blogs/dfpi-orders-crypto-kiosk-operator-to-shut-down-california-operations-over-alleged-dfal-violations](https://www.sheppard.com/insights/blogs/dfpi-orders-crypto-kiosk-operator-to-shut-down-california-operations-over-alleged-dfal-violations) - [https://sjud.senate.ca.gov/media/1518](https://sjud.senate.ca.gov/media/1518) - [https://www.clearlaunch.dev/regulations/ca-dfal](https://www.clearlaunch.dev/regulations/ca-dfal) - [https://infobytes.orrick.com/2026-10-16/dfpi-releases-annual-california-consumer-financial-protection-law-report-for-2025/](https://infobytes.orrick.com/2026-10-16/dfpi-releases-annual-california-consumer-financial-protection-law-report-for-2025/) - [https://www.daeryunlaw.com/us/practices/detail/california-crypto-law](https://www.daeryunlaw.com/us/practices/detail/california-crypto-law) - [https://ofac.treasury.gov/recent-actions/20261015](https://ofac.treasury.gov/recent-actions/20261015) - [https://sanctionsnews.bakermckenzie.com/](https://sanctionsnews.bakermckenzie.com/) - [https://www.fatf-gafi.org/en/publications/High-risk-and-other-monitored-jurisdictions/increased-monitoring-june-2026.html](https://www.fatf-gafi.org/en/publications/High-risk-and-other-monitored-jurisdictions/increased-monitoring-june-2026.html) - [California DFAL: what to know before the July 2026 licensing deadline](https://www.elliptic.co/blog/california-dfal-july-2026-licensing-deadline) - [The Golden State of Crypto: Regulating Digital Assets with Brynly Llyr, California DFPI](https://www.trmlabs.com/resources/trm-talks/the-golden-state-of-crypto-regulating-digital-assets-with-brynly-llyr-california-dfpi) - [Permitted Payment Stablecoin Issuer Anti-Money Laundering/Countering the Financing of Terrorism Program and Sanctions Compliance Program Requirements | FinCEN.gov](https://www.fincen.gov/resources/statutes-regulations/federal-register-notices/permitted-payment-stablecoin-issuer-anti) - [Enforcement Actions | FinCEN.gov](https://fincen.gov/news-room/enforcement-actions) - [TRM Labs Resources | Crypto Investigations, Compliance, and Policy Insights](https://www.trmlabs.com/resources) - [Definition of Money Transmitter (Merchant Payment Processor) | FinCEN.gov](https://www.fincen.gov/resources/statutes-regulations/administrative-rulings/definition-money-transmitter-merchant-payment) - [PPSI-AMLCFT-NPRM.pdf](https://www.fincen.gov/system/files/2026-04/PPSI-AMLCFT-NPRM.pdf) - [Advisories | FinCEN.gov](https://www.fincen.gov/resources/advisoriesbulletinsfact-sheets/advisories) - [Alerts/Advisories/Notices/Bulletins/Fact Sheets | FinCEN.gov](https://www.fincen.gov/resources/advisoriesbulletinsfact-sheets) - [Recent Actions | Office of Foreign Assets Control](https://ofac.treasury.gov/recent-actions/enforcement-actions) - [FinCEN WCHT Notice](https://www.fincen.gov/system/files/2026-05/FinCEN-WCHT-Notice.pdf) - [Fact Sheet: Proposed Rule to Fundamentally Reform Financial](https://www.fincen.gov/system/files/2026-04/Program-NPRM-FactSheet.pdf) - [1 The U.S. Department of the Treasury’s (Treasury) Financial](https://www.fincen.gov/system/files/2026-03/FinCEN-Advisory-Health-Care-Fraud.pdf) - [FinCEN-Advisory-CMLN-508.pdf](https://www.fincen.gov/system/files/2025-08/FinCEN-Advisory-CMLN-508.pdf) - [Treasury Department Publishes National Money Laundering Risk Assessment and National Terrorist Financing Risk Assessment | FinCEN.gov](https://www.fincen.gov/news/news-releases/treasury-department-publishes-national-money-laundering-risk-assessment-and) - [FinCEN Alert on the Use of Front Companies...](https://www.fincen.gov/system/files/2026-05/FinCEN-Alert-IRGC.pdf) - [Fact Sheet: Proposed Rule to Strengthen and Modernize ...](https://www.fincen.gov/system/files/shared/Program-NPRM-FactSheet-508.pdf) - [Fincen](https://www.fincen.gov/sites/default/files/shared/Program-NPRM-FactSheet-508.pdf) - [Fact Sheet: Proposed Rule to Implement the GENIUS Act’s Anti-](https://www.fincen.gov/system/files/2026-04/FactSheet-PPSI-program-NPRM.pdf) - [Ten Fraudsters from Four Financial Services Firms Charged in Different Cryptocurrency Market Manipulation Schemes Out of Northern District of California | TRM Labs](https://www.trmlabs.com/resources/blog/ten-fraudsters-from-four-financial-services-firms-charged-in-different-cryptocurrency-market-manipulation-schemes-out-of-northern-district-of-california) - [The DOJ's NCET Disbanded: What This Means for Digital Assets - Chainalysis](https://www.chainalysis.com/blog/ncet-blanche-memo/) - [FinCEN Issues Geographic Targeting Order Covering the Los Angeles Fashion District as Part of Crackdown on Money Laundering for Drug Cartels | FinCEN.gov](https://www.fincen.gov/news/news-releases/fincen-issues-geographic-targeting-order-covering-los-angeles-fashion-district) - [Blockchain Legal Library](https://www.trmlabs.com/blockchain-legal-library) - [FinCEN-Advisory-CMLN-508.pdf](https://www.fincen.gov/sites/default/files/advisory/2025-08-28/FinCEN-Advisory-CMLN-508.pdf) - [Press Releases | FinCEN.gov](https://www.fincen.gov/news/press-releases) - [FinCEN Alert, FIN-2025-Alert003, November 26, 2025](https://www.fincen.gov/system/files/FinCEN_Alert_Cross_Border_FINAL508.pdf) - [FinCEN Combats Financial Support to the Sinaloa Cartel by Finding Transactions Involving 10 Mexico-based Gambling Establishments to be of Primary Money Laundering Concern | FinCEN.gov](https://www.fincen.gov/news/news-releases/fincen-combats-financial-support-sinaloa-cartel-finding-transactions-involving) - [1 1. See 31 U.S.C. § 5312(a)(2); 31 C.F.R. § 1010.100(t). 2.](https://www.fincen.gov/system/files/2026-06/FinCEN-Alert-Fiscal-Fuel-Theft.pdf) - [FinCEN Renews Residential Real Estate Geographic Targeting Orders | FinCEN.gov](https://www.fincen.gov/news/news-releases/fincen-renews-residential-real-estate-geographic-targeting-orders-0) - [FREQUENTLY ASKED QUESTIONS Issued: October 9, 2025](https://www.fincen.gov/system/files/2025-10/RRE-GTO-FAQs.pdf) - [FinCEN Renews Real Estate Geographic Targeting Orders | FinCEN.gov](https://www.fincen.gov/news/news-releases/fincen-renews-real-estate-geographic-targeting-orders-0) - [Geographic Targeting Order Covering TITLE INSURANCE COMPANY October 9, 2025](https://www.fincen.gov/system/files/2025-10/RRE-GTO-Order.pdf) - [FinCEN Renews and Expands Real Estate Geographic Targeting Orders | FinCEN.gov](https://www.fincen.gov/news/news-releases/fincen-renews-and-expands-real-estate-geographic-targeting-orders-1) - [FinCEN GEOGRAPHIC TARGETING ORDER, April 14, 2025](https://www.fincen.gov/system/files/shared/RRE-GTO-Order-April-14-2025-FINAL508.pdf) - [FREQUENTLY ASKED QUESTIONS Issued: April 14, 2025](https://www.fincen.gov/system/files/shared/RRE-GTO-FAQs-FINAL508.pdf) - [FinCEN Issues Modified Southwest Border Geographic Targeting Order | FinCEN.gov](https://www.fincen.gov/news/news-releases/fincen-issues-modified-southwest-border-geographic-targeting-order) - [FinCEN GEOGRAPHIC TARGETING ORDER, Frequently ...](https://www.fincen.gov/sites/default/files/shared/Real%20Estate%20GTO_FAQ_4.29.22_for%20Press%20Release.pdf) - [FinCEN Reissues Real Estate Geographic Targeting Orders for 12 Metropolitan Areas | FinCEN.gov](https://www.fincen.gov/news/news-releases/fincen-reissues-real-estate-geographic-targeting-orders-12-metropolitan-areas-3) - [US Treasury Sanctions North Korean Cyber Facilitator Linked to IT Worker Scheme | TRM Labs](https://www.trmlabs.com/resources/blog/us-treasury-sanctions-north-korean-cyber-facilitator-linked-to-it-worker-scheme) - [OFAC Targets DPRK IT Workers Using Crypto](https://www.chainalysis.com/blog/ofac-targets-north-korean-it-workers-crypto-march-2026/) - [North Korea IT Workers: Inside the DPRK’s Crypto Laundering Network](https://www.chainalysis.com/blog/dprk-it-workers-north-korea-crypto-laundering-networks/) - [OFAC Sanctions Tracker: How Sanctions Impact Crypto Crime - Chainalysis](https://www.chainalysis.com/blog/ofac-sanctions/) - [Publication of North Korea Information Technology Workers Advisory | Office of Foreign Assets Control](https://ofac.treasury.gov/recent-actions/20220516) - [OFAC sanctions a fraud network for assisting the North Korean (DPRK) regime](https://www.elliptic.co/blog/ofac-sanctions-a-fraud-network-for-assisting-the-north-korean-dprk-regime) - [1 thaj It is almost certain that UK firms are currently being targeted](https://assets.publishing.service.gov.uk/media/66e2ec410d913026165c3d91/OFSI_Advisory_on_North_Korean_IT_Workers.pdf) - [OFAC Sanctions Fraud Network Funding DPRK Weapons Programs](https://www.chainalysis.com/blog/ofac-sanctions-fraud-network-funding-dprk-weapons-program/) - [Guidance on the Democratic People's Republic of Korea ...](https://ofac.treasury.gov/media/923126/download?inline=) - [‍California DFPI Releases Comprehensive Data on Crypto ATMs; TRM Analyzes the Data | TRM Blog](https://www.trmlabs.com/resources/blog/california-dfpi-releases-comprehensive-data-on-crypto-atms-trm-analyzed-the-data) - [California Crypto Oversight Bill AB 2269 Moves Closer to Becoming Law - Bloomberg](https://www.bloomberg.com/news/articles/2022-08-31/california-crypto-oversight-bill-moves-closer-to-becoming-law) - [Financial Crimes Enforcement Network; Inflation Adjustment of Civil Monetary Penalties | FinCEN.gov](https://www.fincen.gov/resources/statutes-regulations/federal-register-notices/financial-crimes-enforcement-network-8) - [2025 Civil Penalties and Enforcement Information | Office of Foreign Assets Control](https://ofac.treasury.gov/civil-penalties-and-enforcement-information/2025-enforcement-information) - [Resources Search](https://www.trmlabs.com/resources/resources-search) - [Law Enforcement Overview | FinCEN.gov](https://www.fincen.gov/resources/law-enforcement) - [Penalties | FinCEN.gov](https://www.fincen.gov/penalties) - [FinCEN Notice, FIN-2025-NTC1, August 4, 2025](https://www.fincen.gov/system/files/2025-08/FinCEN-Notice-CVCKIOSK.pdf) - [Amid a scam crackdown, crypto giants keep fueling bitcoin ATMs - ICIJ](https://www.icij.org/investigations/coin-laundry/amid-a-scam-crackdown-crypto-giants-keep-fueling-bitcoin-atms/) - [Bitcoin ATMs: amid recent UK enforcement action, what are the risks of crypto kiosks?](https://www.elliptic.co/blog/analysis/bitcoin-atms-amid-recent-uk-enforcement-action-what-are-the-risks-of-crypto-kiosks) - [Enforcement Actions | FinCEN.gov](https://www.fincen.gov/news/enforcement-actions) - [Crypto Sanctions: 2026 Crypto Crime Report](https://www.chainalysis.com/blog/crypto-sanctions-2026/) - [U.S. Crackdown on Southeast Asian Crypto Scam Centers](https://www.chainalysis.com/blog/asian-scam-centers-crypto-fraud-april-2026/) - [Crypto Enforcement Actions by US Regulators Reach $2.5 Billion](https://www.elliptic.co/blog/https/www.elliptic.co/blog/crypto-enforcement-actions-by-us-regulators-reach-2.5-billion) - [Beneficial Ownership Information Reporting | FinCEN.gov](https://www.fincen.gov/boi) - [Frequently Asked Questions | FinCEN.gov](https://www.fincen.gov/boi-faqs) - [Treasury Department won’t enforce beneficial ownership rule under the Corporate Transparency Act - ICIJ](https://www.icij.org/inside-icij/2025/03/treasury-department-wont-enforce-beneficial-ownership-rule-under-the-corporate-transparency-act/) - [FinCEN Removes Beneficial Ownership Reporting Requirements for U.S. Companies and U.S. Persons, Sets New Deadlines for Foreign Companies | FinCEN.gov](https://www.fincen.gov/news/news-releases/fincen-removes-beneficial-ownership-reporting-requirements-us-companies-and-us) - [Beneficial Ownership Information Reporting Rule Fact Sheet | FinCEN.gov](https://www.fincen.gov/beneficial-ownership-information-reporting-rule-fact-sheet) - [Small Entity Compliance Guide | FinCEN.gov](https://www.fincen.gov/boi/small-entity-compliance-guide) - [Reference Materials | FinCEN.gov](https://www.fincen.gov/boi/Reference-materials) - [Fact Sheet: Beneficial Ownership Information Access and Safeguards Final Rule | FinCEN.gov](https://www.fincen.gov/news/news-releases/fact-sheet-beneficial-ownership-information-access-and-safeguards-final-rule) - [Interim Final Rule: Questions and Answers | FinCEN.gov](https://www.fincen.gov/boi/ifr-qa) - [Small Business Resources | FinCEN.gov](https://www.fincen.gov/boi/small-business-resources) - [Mutual Evaluation of the United States](https://www.fatf-gafi.org/en/publications/Mutualevaluations/Mutualevaluationoftheunitedstates.html) - [Consolidated assessment ratings](https://www.fatf-gafi.org/en/publications/Mutualevaluations/Assessment-ratings.html) - [Assessments](https://www.fatf-gafi.org/en/calendars/assessments.html) - ["Black and grey" lists](https://www.fatf-gafi.org/en/countries/black-and-grey-lists.html) - [United States](https://www.fatf-gafi.org/en/countries/detail/United-States.html) - [High-risk and other monitored jurisdictions](https://www.fatf-gafi.org/en/publications/High-risk-and-other-monitored-jurisdictions.html) - [Mutual Evaluations](https://www.fatf-gafi.org/en/publications/Mutualevaluations.html) - [Jurisdictions under Increased Monitoring - 19 June 2026](https://www.fatf-gafi.org/en/publications/High-risk-and-other-monitored-jurisdictions/increased-monitoring-june-2026.html) - [FATF](https://www.fatf-gafi.org/en/home.html) - [Publications](https://www.fatf-gafi.org/en/publications.html) - [DEPARTMENT OF THE TREASURY OFFICE OF FOREIGN ASSETS CONTROL](https://ofac.treasury.gov/media/935351/download?inline=) - [Settlement Agreement between the U.S. Department of the Treasury's Office of Foreign Assets Control and TradeStation Securities, Inc. | Office of Foreign Assets Control](https://ofac.treasury.gov/recent-actions/20260317) - [Civil Penalties and Enforcement Information | Office of Foreign Assets Control](https://ofac.treasury.gov/civil-penalties-and-enforcement-information) - [Basic Information on OFAC and Sanctions](https://ofac.treasury.gov/faqs/topic/1501) - [HSBC HOLDINGS PLC - Form 6-K - FY2012](https://www.sec.gov/Archives/edgar/data/0001089113/000119312512499974/d451985dex997.htm) - [2022 Procedures for the FATF AML/CFT/CPF Mutual Evaluations, Follow-Up and ICRG](https://www.fatf-gafi.org/en/publications/Mutualevaluations/5th-Round-Procedures.html) - [FATF Procedures for AML/CFT/CPF Mutual Evaluations, Follow-up and ICRG](https://www.fatf-gafi.org/media/fatf/documents/methodology/5th-Round-Procedures.pdf) - [FATF Procedures for AML/CFT/CPF Mutual Evaluations, ...](https://www.fatf-gafi.org/content/dam/fatf/documents/methodology/5th-Round-Procedures.pdf) - [Consolidated Processes and Procedures for Mutual Evaluations and Follow-Up: “Universal Procedures”](https://www.fatf-gafi.org/en/publications/Mutualevaluations/Universal-Procedures-2023.html) - [FATF MUTUAL EVALUATIONS? FATF METHODOLOGY?](https://www.fatf-gafi.org/content/dam/fatf/documents/methodology/Handout-5th-Round-Methodology.pdf) - [PROCEDURES FOR THE FATF AML/CFT/CPF MUTUAL EVALUATIONS, FOLLOW‑UP AND ICRG](https://www.fatf-gafi.org/content/dam/fatf-gafi/methodology/Assessment-Follow-Up-ICRG-Procedures-2022.pdf.coredownload.inline.pdf) - [What are FATF mutual evaluations?](https://www.fatf-gafi.org/content/dam/fatf-gafi/methodology/Handout-5th-Round-Methodology.pdf.coredownload.pdf) - [The 2022 and 2013 Methodologies for Assessing Technical Compliance with the FATF Recommendations and the Effectiveness of AML/CFT/CPF Systems](https://www.fatf-gafi.org/en/publications/Mutualevaluations/5th-Round-Methodology.html) - [Crypto compliance](https://www.trmlabs.com/glossary/crypto-compliance) - [Digital Assets in Digital Finance Regulatory Standards and Law](https://uncitral.un.org/sites/uncitral.un.org/files/media-documents/uncitral/en/castellano_updated.pdf) - [Recent Actions | Office of Foreign Assets Control](https://ofac.treasury.gov/recent-actions/general-licenses) - [DEPARTMENT OF THE TREASURY WASHINGTON, D.C. OFFICE OF FOREIGN ASSETS CONTROL](https://ofac.treasury.gov/media/935516/download?inline=) - [2025 Crypto Regulatory Round-Up](https://www.chainalysis.com/blog/2025-crypto-regulatory-round-up/) - [Virtual Assets](https://www.fatf-gafi.org/en/publications/Virtualassets/Virtual-assets.html) - [1 Heath Tarbert, Chairman, U.S. Commodity Futures Trading Commission (CFTC)](https://www.fincen.gov/system/files/2019-10/CVC%20Joint%20Policy%20Statement_508%20FINAL_0.pdf) - [US Department of the Treasury](https://home.treasury.gov/system/files/246/2026-NMLRA.pdf) - [California Department of Financial Protection and Innovation](https://dfpi.ca.gov) - [Financial Crimes Enforcement Network (FinCEN)](https://www.fincen.gov/boi) - [Office of Foreign Assets Control (OFAC)](https://ofac.treasury.gov/recent-actions/enforcement-actions) - [Financial Action Task Force (FATF)](https://www.fatf-gafi.org/en/countries/detail/United-States.html) - [Elliptic](https://www.elliptic.co/blog/california-dfal-july-2026-licensing-deadline) - [TRM Labs](https://www.trmlabs.com/resources/blog/california-dfpi-releases-comprehensive-data-on-crypto-atms-trm-analyzed-the-data) - [International Consortium of Investigative Journalists (ICIJ)](https://www.icij.org/investigations/coin-laundry/amid-a-scam-crackdown-crypto-giants-keep-fueling-bitcoin-atms/) - [Financial Crimes Enforcement Network (FinCEN)](https://www.fincen.gov/system/files/2025-08/FinCEN-Advisory-CMLN-508.pdf) - [Chainalysis](https://www.chainalysis.com/blog/ofac-targets-north-korean-it-workers-crypto-march-2026/) Coverage gaps fim-int-2026-07-07-G001: DFPI post-July-2026-deadline licens… fim-int-2026-07-07-G001: DFPI post-July-2026-deadline licensing application outcomes, denial/exit rates, and any first supervisory enforcement sweep are not yet established in the research record. [resolved] fim-int-2026-07-07-G002: Current status of FinCEN's appeal o… fim-int-2026-07-07-G002: Current status of FinCEN's appeal of the March 19, 2026 vacatur of the Residential Real Estate Rule, and whether any interim reporting obligation has been reinstated, is not established. [resolved] fim-int-2026-07-07-G003: No live, directly retrievable DFPI … fim-int-2026-07-07-G003: No live, directly retrievable DFPI (dfpi.ca.gov) primary regulatory document or enforcement-order text was cited; California-specific DFPI actions rely entirely on secondary vendor/analytics characterisation (persistent gap carried from baseline FIM-GAP-003). [resolved] fim-int-2026-07-07-G004: No California-state-level prosecuto… fim-int-2026-07-07-G004: No California-state-level prosecutorial or civil-enforcement data specific to the DPRK IT-worker facilitator network exists beyond national OFAC/DOJ actions; a state-nexus enforcement record would sharpen the D1/D6 jurisdiction assessment. [resolved] fim-int-2026-07-07-G005: The publication_gate block reports … fim-int-2026-07-07-G005: The publication_gate block reports jurisdiction_source_floor_met as false and tier_a_b_national_primary_pct as 0.0, contradicting the profile-level source_quality.floor_met value of true; this internal inconsistency in the source-quality gate has not been reconciled. [resolved] fim-int-2026-07-14-G001: No direct Tier 1 UK Gazette / EU Of… fim-int-2026-07-14-G001: No direct Tier 1 UK Gazette / EU Official Journal URL was captured for the 16 June 2026 OFSI/EU Council Russia designations; sourcing rests on Tier 4 secondary summaries. [resolved] fim-int-2026-07-14-G002: PEP-classification-specific FCA/FAT… fim-int-2026-07-14-G002: PEP-classification-specific FCA/FATF findings (D3) were searched for but none met the sourcing bar this cycle. [resolved] fim-int-2026-07-14-G003: Primary FinCEN NPRM text for the BS… fim-int-2026-07-14-G003: Primary FinCEN NPRM text for the BSA/AML effectiveness-standard proposed rule was not directly retrieved; the finding rests on a single Tier 4 secondary source. [resolved] fim-int-2026-07-14-G004: Cambodia's Huione continued-operati… fim-int-2026-07-14-G004: Cambodia's Huione continued-operation claim rests on a single Tier 4 source (Chainalysis via secondary reporting); no independently retrieved primary transaction-flow evidence this cycle. [resolved] fim-int-2026-07-14-G005: MiCA/PSD2 dual-licensing market-con… fim-int-2026-07-14-G005: MiCA/PSD2 dual-licensing market-concentration statistics (France 26%, Germany 5% of authorised EU stablecoin issuers) are sourced from a Tier 4 outlet only; no Tier 1 confirmation captured this cycle. [resolved] fim-int-2026-08-21-G001: Tier D jurisdictions (KH/LA/MX/CO) … fim-int-2026-08-21-G001: Tier D jurisdictions (KH/LA/MX/CO) were not actively re-run this cycle given the union dispatch's single-JID (US-CA) scope and pooled search budget. [resolved] fim-int-2026-08-21-G002 ({'scheme': 'financial_integrity', '… fim-int-2026-08-21-G002 ({'scheme': 'financial_integrity', 'value': 'D5'}): No T1 DFPI primary source cross-checked for the Nexo Capital $500,000 penalty; only a single T3 source available this cycle. [resolved] fim-int-2026-09-05-G001: Tier D jurisdiction watch (Cambodia… fim-int-2026-09-05-G001: Tier D jurisdiction watch (Cambodia, Laos, Mexico, Colombia) was not independently re-verified this cycle because this run's pooled search budget was directed at US-CA's own regulatory sources. [resolved] fim-int-2026-09-05-G002 ({'scheme': 'financial_integrity', '… fim-int-2026-09-05-G002 ({'scheme': 'financial_integrity', 'value': 'D2'}): D2 (beneficial ownership), D3 (enabler jurisdictions) and D4 (conflict finance) yielded no CA-specific material this cycle; these domains are federally anchored for a US state and no state-level variance was found. [resolved] fim-int-2026-09-05-G003 ({'scheme': 'financial_integrity', '… fim-int-2026-09-05-G003 ({'scheme': 'financial_integrity', 'value': 'D5'}): DFPI's first wave of DFAL license grants/denials following the July 1 application deadline has not yet been reported; also unresolved is any DFPI guidance clarifying DFAL/California Money Transmission Act overlap for non-stablecoin digital-asset businesses. [resolved] fim-int-2026-09-28-G001 ({'scheme': 'financial_integrity', '… fim-int-2026-09-28-G001 ({'scheme': 'financial_integrity', 'value': 'D1'}): No US-CA-specific sanctions architecture (D1), beneficial ownership (D2), enabler-jurisdiction (D3), or AML/CTF (D7) source was located this cycle; these domains are substantially governed at the US federal level and this dispatch's single-jurisdiction binding did not extend into that federal layer. [resolved] fim-int-2026-09-28-G002: The mandatory global Tier-D jurisdi… fim-int-2026-09-28-G002: The mandatory global Tier-D jurisdiction watch (Cambodia, Laos, Mexico, Colombia) could not be honoured given this dispatch's US-CA-only scope. [resolved] fim-int-2026-10-09-G001 ({'scheme': 'financial_integrity', '… fim-int-2026-10-09-G001 ({'scheme': 'financial_integrity', 'value': 'D5'}): No primary statute text (leginfo.legislature.ca.gov) for SB 97's repeal of DFAL stablecoin provisions was retrieved this cycle; only a T3 secondary tracker states it. [open] fim-int-2026-10-09-G002: Tier D watch jurisdictions (KH, LA,… fim-int-2026-10-09-G002: Tier D watch jurisdictions (KH, LA, MX, CO) were not re-searched this cycle; research budget was allocated to the bound jurisdiction US-CA. [open] fim-int-2026-10-25-G001: October 2026 FATF Plenary outcomes … fim-int-2026-10-25-G001: October 2026 FATF Plenary outcomes (first full cycle under UK Presidency) not located as published by this cycle's cutoff. [open] fim-int-2026-10-25-G002: No substantive D3 (Enabler Jurisdic… fim-int-2026-10-25-G002: No substantive D3 (Enabler Jurisdictions) or D4 (Conflict Finance) finding for US-CA was located this cycle. [open] FIM-GAP-001 (D2): The March 2025 interim final rule exemptin… FIM-GAP-001 (D2): The March 2025 interim final rule exempting all US-formed ("domestic reporting company") entities and their beneficial owners from CTA BOI reporting removed federal beneficial-ownership visibility for the large volume of California-formed LLCs and corporations, a jurisdiction with heavy shell-entity formation for real-estate and investment structuring. FIM-GAP-002 (D5): Prior to the July 2026 DFAL licensing dead… FIM-GAP-002 (D5): Prior to the July 2026 DFAL licensing deadline, upstream crypto liquidity providers continued to supply bitcoin to kiosk operators flagged for scam-linked transaction patterns in other US jurisdictions, with no California-specific requirement forcing exchanges to cut off high-risk downstream ATM counterparties. FIM-GAP-003 (D2): No live, directly-cited DFPI (dfpi.ca.gov)… FIM-GAP-003 (D2): No live, directly-cited DFPI (dfpi.ca.gov) primary regulatory document or enforcement order text could be independently pulled and quoted within this baseline cycle; California-specific DFPI actions are evidenced only through secondary vendor/analytics reporting (Elliptic, TRM Labs) rather than DFPI's own enforcement-order text. ## Evidence #### Confidence-tiered claims DFAL licensing became fully operative 1 July 2026; a completed application filed by that date permits continued operation pending review. [[Source 1]](#sec-sources) Probable · 1 source DFPI consent order requiring cessation of all CA digital-financial-asset kiosk operations by 20 May 2026 for DFAL, CCFPL, and BSA/AML violations including failure to collect/verify customer ID and exceeding the kiosk fee/transaction cap. [[Source 1]](#sec-sources) Probable · 1 source SB 97, effective 30 June 2026, amended DFAL and repealed its stablecoin-specific provisions (issuer record-keeping and DFPI-approval route for under-collateralised stablecoins) that AB 1934 (2024) had added. [[Source 1]](#sec-sources) Probable · 1 source DFAL's standalone stablecoin-issuer chapter (former Cal. Fin. Code §3601 et seq.), effective June 30, 2026, deferring to the federal GENIUS Act framework. [[Source 1]](#sec-sources) Probable · 1 source 11 enforcement actions against crypto kiosk operators in 2025, including the first-ever DFAL enforcement action, per DFPI's Oct 13, 2026 annual CCFPL report. [[Source 1]](#sec-sources) Probable · 1 source Entire International Criminal Court added to the SDN List under EO 14203, Oct 9, 2026, with four related general licenses issued; drew public objection from UK, Canada, Denmark, Germany, France, Italy, Japan, Netherlands and UN Secretary-General. [[Source 1]](#sec-sources) Probable · 1 source Iran-linked banks (Jazireh International Bank, Chabahar International Bank Overseas Company) and an Iraq-based development bank, plus 16 individuals/10 entities, sanctioned Oct 15, 2026. [[Source 1]](#sec-sources) Probable · 1 source Four individuals and 11 entities linked to Cartel del Noreste's commercial network and horse-racing operations, Oct 13, 2026. [[Source 1]](#sec-sources) Probable · 1 source Unchanged since 19 June 2026 Paris plenary: Bosnia and Herzegovina and Iraq added; Algeria and Namibia removed; blacklist unchanged at Iran/North Korea/Myanmar. [[Source 1]](#sec-sources) Probable · 1 source