United States — Colorado US-CO

Lead Signal

Colorado enacted two coordinated instruments that reached effective date this cycle and materially reshape the money-transmission and virtual-currency perimeter of the state. The Colorado Money Transmission Modernization Act (HB25-1201) repealed the prior Money Transmitters Act and replaced it with a framework built on the Conference of State Bank Supervisors multistate-licensing model, expanding the regulated-activity definition to expressly cover digital money movement and payroll processing and giving the Division of Banking stronger enforcement tools. In parallel, the Colorado Vending of Digital Assets Act (SB25-079) reached its own effective date of 2026-08-12, imposing disclosure and electronic-receipt duties on virtual-currency-kiosk operators and a conditional first-transaction refund obligation where a customer transaction moved funds to a wallet or exchange located outside the United States and fraud is reported within 60 days with law-enforcement contact. Both developments are assessed with Assessed-tier confidence against Tier 1 primary legislative sources and are now in force rather than merely proposed. Assessed together, these are architecture-level developments rather than incident-level enforcement actions: Colorado is building a state-level supervisory layer around fiat-linked virtual-currency transmission and kiosk-based conversion ahead of, and alongside, the federal Bank Secrecy Act framework that continues to govern money-services businesses generally.

Other Developments

The Colorado Division of Banking, within the Department of Regulatory Agencies, is confirmed as the supervisory authority administering money-transmitter licensing under Title 11, Article 110 of the Colorado Revised Statutes, including fiat-linked virtual-currency transmission. This is a standing supervisory-architecture fact rather than a new development in itself, but it is the authority against which compliance under both HB25-1201 and SB25-079 will be assessed going forward. No enforcement action or Division of Banking implementing guidance under either statute has yet been located this cycle; the regulatory horizon anticipates implementation or enforcement guidance from the Division of Banking in the third quarter of 2026, with the 60-day fraud-claim window under SB25-079 assessed as a novel compliance parameter not yet mirrored in most other states. This absence of enforcement is a genuine evidentiary gap rather than a signal that no enforcement is occurring: the absence reflects the short interval since the 2026-08-12 effective date rather than a substantive finding of regulatory forbearance. The overall risk trajectory for Colorado is assessed as stable, with an enablement rather than enforcement orientation and a structural rather than episodic character, reflecting a state building supervisory capacity ahead of any observed violation rather than reacting to one.

Cross-Monitor Connections

The same statutory package driving this cycle signal for Colorado carries direct relevance beyond the financial-integrity lens. The money-transmission licensing overhaul under HB25-1201 is a payments-market-structure development in its own right, bearing on how non-bank payment institutions and electronic-money issuers access the Colorado market, a reading that belongs properly to the world-payments monitor licensing and market-access analysis. Separately, the crypto-kiosk consumer-protection regime under SB25-079 is a crypto-licensing and consumer-protection development in the typology of the crypto monitor, distinct from but sourced to the same underlying statute this brief treats as an AML-adjacent and digital-asset-innovation development. No sanctions, conflict-finance, or beneficial-ownership signal was identified for Colorado this cycle; the D1 through D4 domains for Colorado remain properly assessed at the federal level for this US subnational jurisdiction, consistent with a delta-only research posture rather than a research gap. Consistent with the architecture-over-incident framing this monitor applies, the absence of enforcement volume under either new instrument is not itself evidence of low risk; it is, if anything, the expected posture in the first weeks after a supervisory framework effective date, and the test in the coming cycle will be whether enforcement volume develops commensurate with the expanded regulated-activity definition.

Outlook

The near-term marker to watch is whether the Colorado Division of Banking issues implementing or enforcement guidance under SB25-079 and HB25-1201 in the third quarter of 2026, as currently anticipated; such guidance would be the first indication of how the Division intends to apply the modernized licensing perimeter and the kiosk-operator refund mechanism in practice. Absent enforcement activity to date, the signal this cycle is structural rather than punitive: Colorado has built the architecture before testing it, and the coming cycle is where operator-facing enforcement exposure would first become visible if it materializes. Analysts should also track whether other Conference of State Bank Supervisors multistate-licensing-model states adopt a similar 60-day kiosk-refund parameter, since the Colorado approach is currently assessed as a novel compliance parameter nationally; convergence toward a common standard, or continued divergence, will shape the compliance burden facing multistate money-services businesses and crypto-kiosk operators alike.