United States — Hawaii US-HI

Five distinct sanctions-architecture actions were logged this cycle for the United States sanctions apparatus that governs Hawaii by federal extension, and the analytical unit of interest is the architecture these actions reveal rather than any single designation in isolation. OFAC designated the Prince Group transnational criminal organization and its chairman Chen Zhi on 14 October 2025 alongside a fifteen billion dollar Department of Justice bitcoin forfeiture, a coordinated sanctions-and-forfeiture action against a scam-compound network. The formal designation remains in force, but the enforcement posture toward the principal named individual has since moved outside the United States enforcement chain: Cambodian authorities arrested Chen Zhi, stripped him of Cambodian citizenship, and extradited him to China in January 2026, a status-drift correction held at Assessed confidence rather than treated as settled current fact. The underlying laundering infrastructure, including scam compounds tied to forced labor, persists in Cambodia despite the designation and the approximately one hundred twenty-seven thousand bitcoin forfeiture action.

A second and structurally stronger tool was applied against Huione Group, designated a foreign financial institution of primary money laundering concern under Section 311 on 16 October 2025. A Section 311 special measure severs correspondent access outright, the most forceful United States financial-integrity instrument short of criminal prosecution, and it disrupted a major crypto-laundering guarantee-platform infrastructure that subsequently went offline. Read together, the Prince Group and Huione actions illustrate a three-level sanctions-architecture pattern: the scheme, being scam-compound bitcoin laundering; the enabling architecture, being a guarantee-marketplace payment rail and its principal human sponsor; and the strategic consequence, being disruption of the rail without resolution of the underlying compound business model, since the principal individual has since passed out of United States enforcement reach.

Proliferation-finance and non-state-actor designations extended the architecture further. OFAC designated six individuals and two entities across the Democratic Peoples Republic of Korea, Vietnam, Laos, and Spain on 12 March 2026 for facilitating a fraudulent remote-employment scheme that generated approximately eight hundred million dollars in 2024 for DPRK weapons programs, a state-directed proliferation-finance architecture with potential exposure for any employer engaged in remote technology hiring. Separately, OFAC designated the Burma-based Democratic Karen Benevolent Army on 12 November 2025, together with four senior leaders and Chinese organized-crime-linked companies, for supporting scam centers that defraud Americans, with no confirmed parallel European Union or United Kingdom listing identified.

The fifth architecture point is licensing-timeline divergence. Following the 22 October 2025 Lukoil International GmbH designation, OFAC issued a progression of general licenses, numbered 128B and 128C and 131A through G, extended into mid to late 2026, on a wind-down schedule distinct from European Union and United Kingdom Russian oil-sector sanctions. This divergence, together with the DPRK IT-worker facilitator designations not being fully mirrored across OFAC, OFSI, and European Union lists, creates a persistent reconciliation burden for financial institutions with cross-border correspondent exposure. The coordinated Prince Group and Huione action is the exception in this pattern rather than the rule.

The FATF June 2026 Plenary added Bosnia and Herzegovina and Iraq to the grey list and removed Algeria and Namibia, and the Presidency transitioned from Mexico to the United Kingdom effective 1 July 2026 with a stated fraud-epidemic and scam-compound focus directly relevant to elder-fraud and scam-compound exposure. FATF also indicated it will consider further countermeasures on Iran if no progress is made by October 2026 under the new Presidency, shaping enhanced-due-diligence expectations for institutions handling Iran-nexus transactions. The United States, and by extension Hawaii, remains off both FATF lists.

Outlook

The principal forward item is whether the Chen Zhi status drift receives a formal OFAC or Department of Justice update reflecting the January 2026 extradition; absent that update, the Prince Group enforcement narrative should be treated as superseded rather than current. The FATF October 2026 Iran countermeasures review under the new United Kingdom Presidency, and the continuing Lukoil general-license wind-down sequence extending into mid to late 2026, are the two clearest scheduled horizon events. Sanctions-list reconciliation burden arising from OFAC, OFSI, and European Union divergence on the Lukoil and DPRK IT-worker listings is likely to persist as a structural rather than episodic condition, and the incoming FATF Presidency fraud-epidemic focus is worth monitoring as a forward posture shift rather than a single Plenary event. Whether a successor guarantee-marketplace platform emerges to fill the space vacated by Huione is a further item to track.

Federal beneficial-ownership visibility for domestically formed entities, including Hawaii-registered limited liability companies, has structurally regressed this cycle rather than experienced an isolated policy change. Since 26 March 2025, all United States-formed reporting companies and their beneficial owners are exempt from Corporate Transparency Act reporting to FinCEN under an interim final rule; the rule is not yet finalized, a comment period remains open, and FinCEN intends to issue a final rule in 2026. The exemption is currently operative and restores pre-2024 anonymity conditions for domestic shell structures used in real estate, trade, and offshore wire-transfer layering, an enabler-side condition in which the state entity-formation regime, administered in Hawaii by the Department of Commerce and Consumer Affairs Business Registration Division, now sits inside a federally opaque beneficial-ownership environment. Because Hawaii itself maintains no independent state-level beneficial-ownership register, the entity-formation stage of the corporate lifecycle currently carries no beneficial-ownership collection obligation at either the state or federal level for domestic entities.

A second structural regression compounds the first. The Residential Real Estate Rule, which would have created a permanent nationwide beneficial-ownership reporting backbone for non-financed residential transfers, was vacated by a United States District Court in the Eastern District of Texas on 19 March 2026, with FinCEN and the Department of Justice appeal pending. The outcome of that appeal will determine whether a permanent nationwide beneficial-ownership backbone for residential real estate is restored or permanently abandoned, and this is treated as a horizon-linked structural item rather than a single incident.

With the Residential Real Estate Rule vacated, the county-level Geographic Targeting Orders covering Honolulu, Maui, Hawaii, and Kauai counties, renewed 9 October 2025 and requiring title insurance companies to identify and report natural persons behind all-cash entity real estate purchases above three hundred thousand dollars, become the sole operative federal beneficial-ownership tool for Hawaii real estate. The orders were tied to a 28 February 2026 expiration date, and whether they were renewed, replaced, or allowed to lapse has not been verified as of the 5 July 2026 baseline, a four-month currency gap recorded at Possible confidence pending direct FinCEN confirmation. The architecture-over-incident view treats the Geographic Targeting Order mechanism itself, rather than any single filing under it, as the analytical unit of continuing relevance.

Standing architecture: the European Union AML Package operates as three distinct instruments rather than a single measure, a durable structural fact against which any beneficial-ownership signal, including this cycle non-European Union development, should be read. The AML Regulation, known as the AMLR, under Regulation (EU) 2024/1624, is directly applicable across member states without national transposition. The sixth Anti-Money Laundering Directive, the 6AMLD, requires transposition on a per-member-state basis. The AMLA Regulation, Regulation (EU) 2024/1620, establishes the Anti-Money Laundering Authority and creates a direct and indirect supervision perimeter that shifts supervision of high-risk cross-border obliged entities from purely national authorities toward a hybrid European Union-level regime. This architecture has no direct regulatory nexus with Hawaii as a United States sub-national jurisdiction this cycle; the standing tracker for this instrument records the relevance as limited to Hawaii-domiciled institutions with European Union-resident clients or correspondent relationships, and no new European Union AMLA development specific to this jurisdiction was identified this cycle.

Outlook

The Residential Real Estate Rule appeal outcome, expected within the year, is the single clearest structural fork: reinstatement would restore a nationwide beneficial-ownership backbone for residential transfers, while a sustained vacatur would leave the narrower, transaction-specific Geographic Targeting Order mechanism as the only federal tool, itself now of unconfirmed continuity. The Corporate Transparency Act domestic exemption is expected to move from interim to final rule during 2026 following the close of the comment period; whether the final rule preserves, narrows, or reverses the exemption will determine whether the current beneficial-ownership opacity for Hawaii-formed entities is a transitional or durable condition. Direct confirmation of the Hawaii county Geographic Targeting Order post-February-2026 status remains an open verification item for the next cycle.

Hawaii layers a state money-transmitter licensing regime, administered by the Department of Commerce and Consumer Affairs Division of Financial Institutions, atop the full federal Bank Secrecy Act, FinCEN, and OFAC framework that governs virtual-currency and payment businesses operating in the state. This state licensing layer, which operates in addition to federal FinCEN money-services-business registration, is the principal Hawaii-specific regulatory variance from an otherwise fully federal anti-money-laundering and counter-terrorist-financing architecture, and it represents the state-level supervisory perimeter for crypto and money-transmission activity specifically.

The F3 enabler-jurisdiction filter requires distinguishing a capacity deficit from a political choice when assessing whether a jurisdiction facilitates illicit flows through inaction, and the evidence available this cycle does not permit that distinction for Hawaii specifically. Publicly available Hawaii-specific enforcement and typology reporting remains comparatively thin relative to major mainland financial centers, reducing independent verification of whether state-level supervision effectively addresses tourism-cash-economy and elder-fraud risk factors distinct from national-level federal action applied to Hawaii by extension. This reporting thinness also means the severity rating assigned to the all-cash shell-company real estate layering scheme lacks Hawaii-specific enforcement action or suspicious-activity-report data to substantiate active exploitation as distinct from the national Geographic Targeting Order typology coverage that applies to Hawaii among other jurisdictions.

This is a visibility gap rather than a confirmed enforcement failure, and the enabler-jurisdiction reading should be held at that qualified level: Hawaii inherits federal designations, advisories, and licensing requirements in full, and there is no evidence this cycle of a Hawaii-specific policy choice to under-enforce. What is absent is independent, state-specific verification that would allow an assessment of enforcement effectiveness separate from the federal baseline. This absence is itself an analytically significant condition under the enablement-as-signal principle: the lack of visible state-level enforcement action, in a jurisdiction with demonstrated demographic exposure to elder-fraud and cash-economy typologies, is a data point regardless of whether it reflects genuine under-enforcement or simply thin public reporting.

The two federally targeted tools that do apply specifically to Hawaii, the county-level Geographic Targeting Orders governing all-cash real estate purchases and the national crypto-convertible-virtual-currency kiosk fraud typology guidance, both depend for their practical effectiveness on state-level supervisory follow-through that is not independently documented in public sources. The kiosk fraud typology in particular carries elevated relevance given Hawaii demographic profile, a substantial retiree population and a tourism-dependent economy that create the same convertible-virtual-currency kiosk cash-conversion exposure documented nationally in FinCEN Notice FIN-2025-NTC1. Without Hawaii-specific data on kiosk-related suspicious-activity-report filings or state licensing examination outcomes, it is not possible to assess whether the Division of Financial Institutions supervisory perimeter is translating federal guidance into effective state-level monitoring, or whether Hawaii money-transmitter licensees are meeting the same red-flag-indicator expectations FinCEN has articulated at the national level.

Outlook

Resolution of this visibility gap would require either a direct Hawaii-specific enforcement action or suspicious-activity-report volume disclosure that could substantiate or revise the current severity assessment on the real estate layering scheme, or a comparative study benchmarking Hawaii Division of Financial Institutions examination and enforcement activity against equivalent mainland state regulators. Absent either, this domain is likely to remain assessed primarily through the lens of federal action applied to Hawaii by extension, with the state-specific enabler-jurisdiction question held open pending better source coverage in subsequent cycles.

The principal conflict-finance-adjacent signal this cycle is the OFAC designation of the Democratic Karen Benevolent Army, a Burma-based armed group, on 12 November 2025, alongside four senior leaders and Chinese organized-crime-linked companies, for supporting cyber scam centers that defraud Americans nationwide. Read through the F4 conflict-finance filter, the source of funds is scam-compound proceeds, the channel is the armed group financial network, and the deployment sustains a non-state armed actor operating in Myanmar; this is a conflict-finance architecture in which the revenue stream is cyber-enabled fraud rather than a traditional extractive-industry or commodity-trafficking channel. No confirmed parallel European Union or United Kingdom OFSI listing was identified, an enforcement-architecture divergence in a domain where the United States, European Union, and United Kingdom sanctions regimes do not consistently mirror underlying designations.

This finding is not Hawaii-specific and has no direct jurisdictional nexus to this cycle sub-national baseline beyond the general observation that scam-compound revenue streams of this kind can intersect with the same crypto-laundering and kiosk-fraud typologies tracked elsewhere in this cycle for Hawaii demographic exposure. Signal for this domain is limited this cycle relative to the other five domains; no extractive-industry, mineral-trafficking, or direct war-economy financing development specific to this jurisdiction pass was identified in the underlying research.

Outlook

Given the limited and largely non-jurisdiction-specific signal this cycle, the principal forward item is whether a parallel European Union or United Kingdom listing of the Democratic Karen Benevolent Army network emerges, which would narrow the current sanctions-architecture divergence. No Hawaii-specific conflict-finance development is anticipated in the near term absent a materially different research scope in subsequent cycles.

Crypto-ATM kiosk fraud targeting elderly and tourist populations is a live national typology with direct demographic relevance to Hawaii this cycle. FinCEN Notice FIN-2025-NTC1, issued 4 August 2025, documents a ninety-nine percent rise in FBI Internet Crime Complaint Center reports involving convertible virtual currency kiosks and two hundred forty-six point seven million dollars in 2024 reported losses nationally, with the notice stating that illicit activity involving such kiosks is linked to fraud, certain types of cybercrime, and drug-trafficking-organization activity. Given the Hawaii substantial retiree population and tourism-dependent economy, this typology carries elevated relevance relative to the national baseline, though no Hawaii-specific kiosk enforcement action or suspicious-activity-report data has been located to substantiate active local exploitation distinct from the national pattern.

The active scheme inventory identifies two specific red-flag indicators associated with this kiosk pipeline: an elderly customer converting cash to convertible virtual currency at an unlicensed or non-compliant kiosk following unsolicited outreach or an online relationship or investment prompt, observable through transaction monitoring; and rapid onward movement of kiosk-originated virtual currency through stablecoins, mixers, or centralized exchanges toward Southeast-Asia-linked wallets, observable on-chain. These indicators reflect the same proactive, typology-driven guidance posture that FinCEN has increasingly adopted, embedding specific, observable red-flag indicators in industry notices rather than relying solely on retrospective reporting reminders.

A parallel regulatory buildout is underway at the federal level. Federal regulators are expected to finalize GENIUS Act Payment Stablecoin Issuer AML and sanctions implementing regulations by July 2026, ahead of a January 2027 effective date, following a Notice of Proposed Rulemaking issued in April 2026. This establishes a new national stablecoin AML and sanctions-screening compliance perimeter that will directly govern any Hawaii-licensed stablecoin or virtual-asset activity once finalized, a purpose-built compliance architecture distinct from existing bank and money-services-business regimes.

The October 2025 disruption of Prince Group and Huione Group crypto-laundering infrastructure is directly relevant to this domain as a digital-asset architecture event rather than solely a sanctions event. The Huione Section 311 special measure severed the guarantee-marketplace platform from correspondent access, and the platform subsequently went offline, while the Prince Group forfeiture action recovered approximately one hundred twenty-seven thousand bitcoin and led to the designation of twenty-nine bitcoin addresses. Despite this disruption, the underlying Southeast Asian scam-compound business model persists, illustrating a gap between Tier 2 investigative and forensic findings, which document persistent forced-labor compound operations, and Tier 1 enforcement acknowledgement, which reflects the disruption of named infrastructure rather than resolution of the underlying criminal business model. The principal named individual, Chen Zhi, has since passed out of United States enforcement reach via extradition to China in January 2026.

Outlook

The GENIUS Act Payment Stablecoin Issuer AML and sanctions rules are the clearest near-term structural event in this domain, expected to finalize around July 2026 ahead of the January 2027 effective date; finalization will determine the specific program requirements Hawaii-licensed stablecoin and virtual-asset entities must meet. Continued monitoring of whether a successor guarantee-marketplace platform emerges to replace the disrupted Huione infrastructure, and whether the underlying Southeast Asian scam-compound business model is disrupted at the compound level rather than only at the payment-rail level, will determine whether this cycle disruption proves durable. Crypto-ATM kiosk fraud is likely to remain a live typology absent a Hawaii-specific enforcement or licensing intervention distinct from the national FinCEN advisory.

Federal supervisory guidance this cycle illustrates a shift toward proactive, typology-driven compliance expectations rather than purely retrospective reporting reminders. FinCEN Notice FIN-2025-NTC1 on convertible virtual currency kiosks, issued 4 August 2025, embeds specific, observable red-flag indicators, for example an elderly customer converting cash to virtual currency at a kiosk following unsolicited outreach, intended to support forward-looking transaction-monitoring posture rather than tick-box suspicious-activity-report filing after the fact. This pattern is consistent with prior FinCEN pig-butchering and elder-financial-exploitation advisories and reflects a global, cross-cutting active-defence signal in which supervisory guidance increasingly frames expectations around proactive typology recognition.

A second active-defence-relevant development is the pending GENIUS Act Payment Stablecoin Issuer framework, which will impose a new, purpose-built AML and sanctions-screening program requirement on a newly defined category of payment stablecoin issuer once implementing regulations are finalized, expected around July 2026 ahead of a January 2027 effective date. This is a compliance-technology and governance perimeter distinct from existing bank and money-services-business regimes, and it represents a forward-looking supervisory architecture decision rather than a response to a specific enforcement incident.

This proactive-guidance posture matters for a three-pillar balance because active-defence and typology-recognition investment is often structurally under-weighted relative to anti-money-laundering enforcement volume, since enforcement actions generate more visible metrics than internal transaction-monitoring rule changes. The kiosk notice and the pending stablecoin AML program requirement both sit on the counter-fraud and proactive-monitoring side of that balance rather than on the enforcement-volume side, and their cumulative effect over time is better measured by whether financial institutions demonstrably adjust monitoring rules to the published indicators than by counting subsequent enforcement actions alone.

No Hawaii-specific RegTech deployment, agentic-artificial-intelligence supervisory tool, or state-level active-defence initiative was identified this cycle. The absence of a documented Hawaii-specific active-defence or RegTech initiative is itself a data point under the enablement-as-signal principle: it does not establish that Hawaii institutions lack such capability, only that no such capability is independently visible in public reporting this cycle, a visibility gap that mirrors the enabler-jurisdiction thinness identified elsewhere in this jurisdiction pass. The domain assessment for this jurisdiction pass therefore rests on the national posture shift and its eventual application to Hawaii-licensed entities rather than on a jurisdiction-specific technology deployment.

Outlook

Finalization of the GENIUS Act Payment Stablecoin Issuer AML and sanctions implementing regulations by mid-2026 is the clearest forward marker for this domain, and its eventual compliance perimeter will be the first purpose-built stablecoin-specific active-defence architecture to apply directly to Hawaii-licensed virtual-asset activity. Whether FinCEN continues to embed observable red-flag indicators in future advisories, extending the pattern seen in the kiosk notice, is a further posture indicator worth tracking, as is whether any Hawaii-specific RegTech or supervisory-technology initiative becomes independently documented in subsequent cycles.