Financial Integrity Monitor

United States — Georgia US-GA

Domains (D1–D6)

Sources

Role actions

Jurisdiction profile

Largely CompliantTier BRisk: IncreasingMixed

Georgia operates under the federal BSA/AML framework administered by FinCEN and OFAC, with state-level MSB/money-transmitter licensing through the Georgia Department of Banking and Finance.

Georgia has no independent beneficial-ownership registry; it relies entirely on the federal Corporate Transparency Act, which was narrowed in March 2025 to exempt domestic reporting companies. Georgia's low-cost, fast-formation LLC regime and its concentration of national payment processors ('Transaction Alley') create structural exposure alongside active federal enforcement.

Key deficiencies

No state-level beneficial-ownership registry for Georgia-formed LLCs; sole backstop is the federal CTA, now narrowed to foreign reporting companies only
Metro Atlanta was historically excluded from FinCEN's residential real estate Geographic Targeting Orders, leaving non-financed/shell-company real estate purchases in Georgia outside enhanced federal reporting until the nationwide RRE Rule takes effect
High concentration of third-party payment processors and money-transmitter/fintech firms in the Atlanta metro ('Transaction Alley') creates elevated merchant-layering and correspondent exposure
No dedicated state virtual-currency licensing statute analogous to New York's BitLicense, leaving VASP oversight reliant on federal MSB registration alone

Recent developments (18m)

OFAC settlement/cease-and-desist enforcement against an Atlanta-based real estate investment company for dealing in blocked Russian-linked residential property (2025)
FinCEN's March 2025 interim final rule exempting all domestic reporting companies, including Georgia-formed entities, from Corporate Transparency Act BOI reporting
FinCEN's nationwide Residential Real Estate Rule (effective date postponed to March 1, 2026) will for the first time bring Georgia real estate transfers under federal reporting, replacing the GTO regime that never covered Georgia
FinCEN Section 311 special measure severing Huione Group (October 2025), materially affecting due-diligence obligations of Georgia-based payment processors and crypto-adjacent fintechs
DOJ enforcement action resulting in sentencing of a Georgia individual in a $24 million Medicare kickback and fraud conspiracy (December 2025), cited in FinCEN's 2026 health care fraud advisory

Weekly brief

Lead signal

Lead Signal

Read full brief

Lead Signal

Georgia's Department of Banking and Finance finalized a Final Order to Cease and Desist against Virtual Assets LLC, doing business as Crypto Dispensers, effective 16 January 2026, for engaging in money transmission via an online virtual-currency platform without a Georgia money transmitter licence. This is a straightforward, Tier 1-sourced, in-perimeter enforcement action: it does not signal a change to Georgia's money-transmission statute, but it does confirm that the state's existing licensing perimeter, O.C.G.A. § 7-1-681(b), continues to be actively applied to virtual-currency kiosk and platform operators. Read alongside this cycle's global sanctions activity, it situates Georgia within a broader pattern in which crypto-facilitated money movement is drawing sustained regulatory and enforcement attention across jurisdictions and scales, from a single unlicensed kiosk operator up to state-sponsored sanctions evasion.

Other Developments

OFAC's IRGC-linked crypto designations. On 7 August 2026, the U.S. Department of the Treasury's Office of Foreign Assets Control sanctioned crypto exchanges and dismantled clandestine currency networks financing Iran's Islamic Revolutionary Guard Corps, following Iranian attacks on commercial vessels in the Strait of Hormuz. This is an architecture-level action: it targets the exchange and currency-network infrastructure enabling sanctions evasion rather than a single transaction or actor, continuing Treasury's established pattern of using virtual-asset designations as a sanctions-evasion countermeasure.

Cambodia's scam-compound and casino-linked designations. OFAC also designated the Bolai casino-scam compound, described in reporting as the Brilliancy Sihanoukville Investment and Development network, together with a sitting Cambodian senator, for coercing trafficking victims into digital-asset fraud that laundered at least USD 73 million from U.S. victims. The National Bank of Cambodia's governor, Chea Serey, separately warned in January 2026 that continued scam-compound and illegal-casino activity risks a third FATF grey-listing for Cambodia absent further crackdown. Read together, these developments describe an enabler-jurisdiction risk trajectory that is structural rather than episodic: designations against a senator and a named casino-scam network sit alongside a central-bank warning of regulatory consequence, suggesting Cambodia's exposure is a sustained feature of its financial-integrity landscape rather than an isolated event.

AMLA's completed EBA mandate transfer. On 1 January 2026, the EU's Anti-Money Laundering Authority completed the transfer of all AML/CFT mandates and functions from the European Banking Authority, and closed a public consultation on draft risk-assessment and entity-selection standards on 27 January 2026, ahead of its 2028 mandate to directly supervise 40 high-risk cross-border financial institutions. This is a durable structural development: it marks a substantive step in the shift from a purely national AML supervisory model toward a hybrid EU-level regime, and it is separate in kind from routine enforcement events elsewhere this cycle.

Georgia's pending debanking legislation. Senate Bill 341, an updated private-right-of-action debanking bill that raises the covered-institution asset threshold from one billion dollars to two billion dollars and adds an Attorney General investigatory role, retained banker-opposed private-right-of-action language and had not received final passage as of this cycle's collection window. The Georgia Bankers Association's continued tracking of the bill, without confirmation of final passage, leaves this as a live but unresolved compliance-planning question for Georgia-chartered and Georgia-operating institutions.

Cross-Monitor Connections

The Crypto Dispensers cease-and-desist and the broader OFAC crypto-sanctions activity this cycle both sit at the boundary between FIM's architecture-over-incident lens and the World Payments Monitor's licensing-perimeter tracking: the same Georgia DBF enforcement action that anchors this cycle's D5/D7 signal for FIM is independently tracked by WPM under its own licensing module, and by the crypto monitor under its own licensing module. Cambodia's casino-scam and enabler-jurisdiction exposure also carries a state-capture-adjacent dimension: reporting on a licensed Cambodian gambling and real-estate conglomerate's premises being used for trafficking-linked scam operations was cited via secondary source this cycle and was not independently re-verified, flagging a question that a state-capture-focused monitor would be positioned to pursue further.

Outlook

Georgia's AML/CTF regime is unlikely to see a legislative shift in the near term: the standing federal BSA/FinCEN perimeter and state money-transmission licensure regime remain the operative framework, with SB 341's private-right-of-action provision the only live legislative variable and no confirmed final-passage date. At the global architecture level, AMLA's 2028 direct-supervision mandate and the AMLR's 10 July 2027 EU-wide direct-application date remain the structural developments to track over the coming cycles, while Cambodia's FATF re-listing risk is a live near-term question that the June 2026 Plenary's grey-list movement, which added Iraq and Bosnia and Herzegovina and removed Algeria and Namibia, suggests FATF continues to actively revisit.

weekly_brief_draft · JID US-GA

Domain intelligence (D1–D6)

D1 Sanctions Architecture and Evasion

Sanctions Architecture and Evasion

On 7 August 2026, the U.S. Department of the Treasury's Office of Foreign Assets Control sanctioned crypto exchanges and dismantled clandestine currency networks funding Iran's Islamic Revolutionary Guard Corps, in response to Iranian attacks on commercial vessels transiting the Strait of Hormuz. The designations target exchange and currency-network infrastructure rather than a single actor or transaction, consistent with Treasury's established architecture-level approach to sanctions-evasion enforcement via virtual-asset rails. Separately, the FATF's June 2026 Plenary added Iraq and Bosnia and Herzegovina to its grey list and removed Algeria and Namibia, bringing the list to 22 jurisdictions; the black list of Iran, North Korea and Myanmar is unchanged, and Russia's suspension continues. Primary FATF documentation of the June Plenary was not directly retrieved this cycle; the finding rests on corroborating Tier 3 compliance-vendor reporting. Taken together, this cycle's sanctions signal is dominated by continued reliance on crypto-exchange designations as a state-directed evasion countermeasure rather than by a change to the underlying FATF list architecture, which saw only incremental jurisdictional movement.

Outlook

The durability of the IRGC-linked designations is high: OFAC designation authority is a standing legal instrument, not a discretionary or fragile administrative circular, and further Iran-linked crypto designations should be expected as Treasury continues to target sanctions-evasion infrastructure following the Hormuz attacks. The FATF grey-list's next scheduled movement will be worth tracking for whether Cambodia's escalating scam-compound exposure produces a formal re-listing recommendation.

D2 Beneficial Ownership

Georgia carries zero beneficial-ownership reporting obligation at state or federal level for domestically formed LLCs following the FinCEN March 2025 interim final rule; no state beneficial-ownership registry exists; currency of the exemption in-force status as of mid-2026 is unconfirmed and flagged for verification.

D3 Enabler Jurisdictions and Professional Facilitators

Enabler Jurisdictions and Professional Facilitators

Cambodia's enabler-jurisdiction exposure escalated this cycle. National Bank of Cambodia Governor Chea Serey publicly warned in January 2026 that continued scam-compound and illegal-casino activity risks a third FATF grey-listing for Cambodia absent further crackdown. The warning followed the arrest and extradition of a named Prince Group chairman and preceded OFAC's designation of the Bolai casino-scam compound and a sitting Cambodian senator for coercing trafficking victims into digital-asset fraud that laundered at least USD 73 million from U.S. victims. This central-bank warning, paired with a senator-level sanctions designation, is analytically significant precisely because it is a governor speaking to structural exposure rather than a single prosecutor announcing a single case: it signals that Cambodia's own financial authorities assess the country's casino-and-scam-compound ecosystem as a live re-listing risk, not a contained or resolved problem. This finding rests on Tier 3 secondary reporting; the underlying account of a licensed Cambodian gambling and real-estate conglomerate's premises being used for trafficking-linked scam operations was not independently re-verified this cycle, and the state-capture-adjacent question of whether licensed conglomerate infrastructure is implicated remains open.

Outlook

Cambodia's third-grey-listing risk is the primary enabler-jurisdiction variable to track into the next FATF Plenary cycle. Whether the senator-level OFAC designation prompts further Cambodian domestic enforcement, or whether it remains an isolated action alongside continued scam-compound activity, will materially affect whether this trajectory is read as worsening or stabilizing.

D4 Conflict Finance

Not covered

Conflict Finance is not yet covered for this jurisdiction in this report.

D5 Crypto / Digital Assets / Financial Innovation

Crypto, Digital Assets, and Financial Innovation

Georgia's Department of Banking and Finance finalized a Final Order to Cease and Desist against Virtual Assets LLC, doing business as Crypto Dispensers, effective 16 January 2026, for engaging in money transmission via an online virtual-currency platform without a Georgia money transmitter licence under O.C.G.A. § 7-1-681(b). This is a routine, Tier 1-sourced state-level enforcement action within an existing licensing perimeter, not a new crypto-specific statute. At the global level, OFAC's designation of the Bolai casino-scam compound and a Cambodian senator for coercing trafficking victims into digital-asset fraud that laundered at least USD 73 million from U.S. victims demonstrates continued use of virtual-asset rails in trafficking-linked money-laundering schemes. Read together, the Georgia and Cambodia developments span the two poles of crypto-facilitated illicit finance this cycle: an unlicensed money-transmission kiosk operator at the sub-national U.S. level, and a state-adjacent casino-scam network engaged in cross-border digital-asset fraud at the international level, both drawing active enforcement or sanctions response.

Outlook

Georgia's active licensing-perimeter enforcement against virtual-currency businesses is likely to continue on a routine basis; it reflects standing state capacity rather than a new initiative. The more consequential trajectory to track is whether Cambodia's casino-scam ecosystem draws further OFAC or FATF-linked designations, and whether that activity's use of digital-asset fraud rails prompts a broader FATF or Treasury response beyond the Bolai network designation.

D6 Compliance Technology & Active Defence

Not covered

Compliance Technology & Active Defence is not yet covered for this jurisdiction in this report.

D7 AML/CTF Regime

AML/CTF Regime

The EU's Anti-Money Laundering Authority completed the transfer of all AML/CFT mandates and functions from the European Banking Authority on 1 January 2026, and closed a public consultation on draft risk-assessment and entity-selection standards on 27 January 2026, ahead of its 2028 mandate to directly supervise 40 high-risk cross-border financial institutions; the AMLR remains on track for direct EU-wide application on 10 July 2027. This is a durable structural development under primary EU regulation (Regulation (EU) 2024/1620 establishing AMLA, and Regulation (EU) 2024/1624, the AMLR), marking a substantive step in the shift from purely national AML supervision toward a hybrid EU-level regime. In Georgia, the standing AML/CTF-adjacent regime, the federal BSA/FinCEN perimeter combined with state money-transmission licensure under O.C.G.A. § 7-1-680 et seq., is unchanged in substance but was actively enforced this cycle via the Department of Banking and Finance's cease-and-desist against an unlicensed virtual-currency kiosk operator. Separately, Georgia's Senate Bill 341, an updated private-right-of-action debanking bill that raises the covered-institution asset threshold from one billion dollars to two billion dollars and adds an Attorney General investigatory role, retained banker-opposed language and had not received final passage as of this cycle's collection window.

Outlook

The EU track is the higher-confidence near-term development: AMLA's entity-selection methodology, now past consultation, positions the 2028 direct-supervision cohort selection as the next concrete milestone. In Georgia, SB 341's private-right-of-action language is the live variable; its final disposition will determine whether the state's debanking-dispute framework materially expands bank exposure to litigation.

Regulatory horizon

No dated horizon items this cycle. 3 items tracked without a confirmed date.

3 pending date · baseline fim-2026-07-05

Role action cards

MLROHigh

Georgia's Department of Banking and Finance finalized a cease-and-desist against an unlicensed virtual-currency money transmitter, evidencing active state-level licensing enforcement.

The Crypto Dispensers action confirms the state licensing perimeter is actively policed; Cambodia's senator-level OFAC designation for digital-asset fraud laundering is a separate but comparable typology signal for counterparty screening.

2 evidence refs

ComplianceAssessed

AMLA completed absorption of EBA's AML/CFT mandates and closed its entity-selection consultation, while Georgia's SB 341 debanking bill remains unresolved.

The EU supervisory reallocation is a structural policy-framework development; SB 341 is a pending U.S. state-level compliance question with no confirmed passage date.

2 evidence refs

LegalAssessed

SB 341's private-right-of-action language remains live and unresolved.

If enacted, the bill's asset-threshold increase and Attorney General investigatory role would materially change litigation exposure for covered institutions; no final passage has occurred this cycle.

1 evidence refs

BoardHigh

OFAC's IRGC-linked and Cambodia-linked crypto sanctions designations underscore continuing counterparty and reputational exposure tied to virtual-asset rails.

Two separate designation actions this cycle, one state-directed and one criminal-network directed, both used crypto-exchange infrastructure as the enforcement target, reinforcing sustained board-level financial-crime risk in this channel.

2 evidence refs

CTOAssessed

Continued OFAC crypto-exchange designations highlight screening exposure for digital-asset infrastructure with counterparty ties to designated networks.

Both the IRGC-linked and Cambodia-linked designations name specific exchanges and networks; screening architecture should be capable of ingesting these designation updates promptly.

2 evidence refs

RiskAssessed

Cambodia's enabler-jurisdiction risk is escalating, evidenced by a central-bank warning of a third FATF grey-listing and a senator-level OFAC designation.

This is a structural, not episodic, risk trajectory; exposure concentration in Cambodia-linked counterparties warrants elevated monitoring.

2 evidence refs

OperationsPossible

Georgia's Department of Banking and Finance's routine licensing enforcement against unlicensed virtual-currency money transmission continues without a new state licensing regime.

No new state licensing category or threshold change to operationalize this cycle beyond continued application of the existing money-transmission perimeter.

1 evidence refs

AuditPossible

AMLA's entity-selection methodology consultation closure represents a documented milestone toward the 2028 direct-supervision mandate.

This is a traceable, dated regulatory-process milestone suitable for audit-trail documentation of the EU supervisory transition.

1 evidence refs

Decision lens

MLRO

Georgia's Department of Banking and Finance finalized a cease-and-desist against an unlicensed virtual-currency money transmitter, evidencing active state-level licensing enforcement.

Compliance

AMLA completed absorption of EBA's AML/CFT mandates and closed its entity-selection consultation, while Georgia's SB 341 debanking bill remains unresolved.

Legal

SB 341's private-right-of-action language remains live and unresolved.

Board

OFAC's IRGC-linked and Cambodia-linked crypto sanctions designations underscore continuing counterparty and reputational exposure tied to virtual-asset rails.

CTO

Continued OFAC crypto-exchange designations highlight screening exposure for digital-asset infrastructure with counterparty ties to designated networks.

Risk

Cambodia's enabler-jurisdiction risk is escalating, evidenced by a central-bank warning of a third FATF grey-listing and a senator-level OFAC designation.

Operations

Georgia's Department of Banking and Finance's routine licensing enforcement against unlicensed virtual-currency money transmission continues without a new state licensing regime.

Audit

AMLA's entity-selection methodology consultation closure represents a documented milestone toward the 2028 direct-supervision mandate.

Shared evidence: 5 refs

Scenario sketches

AMLA Direct-Supervision Transition and the Evasion Landscape

As AMLA's direct and indirect supervision of cross-border obliged entities phases in toward the 2028 mandate, alongside the directly-applicable AMLR and per-state transposition of the sixth AML Directive, the supervisory perimeter for a first cohort of high-risk institutions could shift from primarily national oversight toward a hybrid EU-level model. Such a shift could, in principle, alter where illicit-finance actors perceive supervisory gaps to be greatest, potentially redirecting layering activity toward institutions or jurisdictions outside the initial direct-supervision cohort while the transition is underway. This is an illustrative structural sketch, not an observed development or a forecast of specific institutional behavior.

Illustrative scenario for analytical orientation only. Not compliance advice, not a prediction, and not a statement of observed fact.

Standing trackers (T1–T6)

Tracker	Status	Note
T1 · Russian Sanctions-Evasion Architecture	no_change	No material development surfaced this cycle within the pooled search budget; coverage gap not an earned null.
T2 · EU AML Package / AMLA	material_change	AMLA completed absorption of all EBA AML/CFT mandates 1 January 2026; closed consultation on entity-selection standards 27 January 2026; AMLR on track for 10 July 2027 direct application.
T3 · FATF Grey List	material_change	June 2026 Plenary added Iraq and Bosnia and Herzegovina; removed Algeria and Namibia; grey list now 22 jurisdictions.
T4 · Beneficial-Ownership Register Status	no_change	No BO-registry-specific development actively researched this cycle; coverage gap.
T5 · Crypto & Digital-Asset Integrity	escalating	OFAC sanctioned crypto exchanges funding Iran's IRGC (7 Aug 2026) and Cambodian scam-casino network/senator; Georgia DBF finalised cease-and-desist against unlicensed virtual-currency kiosk operator.
T6 · Sanctions Regime Divergence	no_change	No EU/US/UK autonomous-listing divergence actively researched this cycle; coverage gap.

Registers

Enforcement actions

OFAC assessed a civil monetary penalty against a Georgia-based real estate investment company and its controlling individual for dealing in blocked Russian-linked residential real property between April 2023 and March 2024, including mortgaging, renovating, and selling the property while concealing the transaction from OFAC and violating a prior cease-and-desist order and administrative subpoena. 24 Nov 2025
FinCEN issued an interim final rule revising the CTA's 'reporting company' definition to cover only foreign entities registered to do business in a US state or tribal jurisdiction, formally exempting all domestic reporting companies and their beneficial owners — including the large volume of Georgia-incorporated LLCs — from BOI reporting. 26 Mar 2025
A Georgia man was sentenced in a $24 million kickback and Medicare fraud conspiracy, cited by FinCEN as an example within its broader health care fraud typology advisory describing shell billing-entity layering of federal health program proceeds. 2 Dec 2025

Sanctions changes

OFAC's Recent Actions log through mid-2026 shows a rolling mix of new Russia-related designations alongside periodic Russia-related designation removals, occurring against the backdrop of active enforcement (e.g., the Atlanta blocked-property case) targeting historically designated Russian elites and their US-held assets. 18 Jun 2026
FinCEN finalized a Section 311 special measure severing Cambodia-based Huione Group from the US financial system, prohibiting covered financial institutions — including Georgia-based payment processors and correspondent banks — from opening or maintaining accounts connected to Huione Group entities. 14 Oct 2025
FATF updated its Jurisdictions Under Increased Monitoring list on February 13, 2026 (adding Kuwait and Papua New Guinea) while maintaining its High-Risk Jurisdictions Call for Action list (Iran, DPRK, Burma unchanged); FinCEN issued a corresponding public notice directing US financial institutions, including those in Georgia, to factor this into risk-based due diligence. 13 Feb 2026

Regulatory horizon (register)

Nationwide Residential Real Estate Rule takes effect, first-time covering Georgia
FATF fifth-round mutual evaluation of the United States
GENIUS Act stablecoin state-equivalency framework build-out

Active schemes

[HIGH] Blocked Russian-asset circumvention via Atlanta real estate
[HIGH] Health-care fraud proceeds laundered via Georgia shell billing entities
Payment-processor layering risk in Georgia's fintech corridor

Sources

Coverage gaps

FinCEN's residential real estate GTOs, renewed repeatedly th…

FinCEN's residential real estate GTOs, renewed repeatedly through 2025, covered specific counties in California, Colorado, Connecticut, Florida, Hawaii, Illinois, Maryland, Massachusetts, Nevada, New York, Texas, Washington, Virginia, and DC — never any Georgia county — despite metro Atlanta being a major, fast-growing residential real estate market.

Following FinCEN's March 2025 interim final rule, domestic r…

Following FinCEN's March 2025 interim final rule, domestic reporting companies — including the large population of Georgia-formed LLCs, a jurisdiction known for low-cost, fast online business formation — are entirely exempt from federal beneficial ownership reporting, and Georgia maintains no state-level BO registry to compensate.

Publicly available federal enforcement data (DOJ, FinCEN, OF…

Publicly available federal enforcement data (DOJ, FinCEN, OFAC) is rarely disaggregated by US state, and no Georgia-specific state financial intelligence unit or standalone virtual-currency licensing statute (e.g., a BitLicense analogue) exists, limiting independently verifiable, jurisdiction-specific AML/CFT effectiveness data for Georgia distinct from the national US picture.

Evidence

Confidence-tiered claims

No structured claims published for this jurisdiction yet.