D1 Sanctions
Sanctions is not yet covered for this jurisdiction in this report.
Idaho operates under the federal BSA/AML framework (FinCEN, OFAC) with state-level money transmitter licensing administered by the Idaho Department of Finance.
Sanctions is not yet covered for this jurisdiction in this report.
Beneficial Ownership is not yet covered for this jurisdiction in this report.
Enabler Jurisdictions is not yet covered for this jurisdiction in this report.
Conflict Finance is not yet covered for this jurisdiction in this report.
The defining development in Idaho's digital-asset architecture this cycle is a failure to legislate rather than a new rule taking effect. Senate Bill 1359, the Virtual Currency Kiosk Fraud Prevention Act, passed both chambers of the Idaho legislature with bipartisan support before being vetoed by Governor Little in April 2026. The veto message stated that the bill contained critical drafting deficiencies that would have undermined its own purpose. Whatever the technical merits of that judgment, the outcome is that Idaho's virtual-currency kiosk sector, the network of unattended cash-in machines through which consumers convert fiat currency into cryptocurrency, remains subject only to the general licensing regime under the Idaho Money Transmitters Act, administered by the Department of Finance. That general regime requires any virtual currency exchanger accepting fiat for later delivery of virtual currency to a third party to hold a money-transmitter license, but it was not built with kiosk-specific fraud typologies in mind, and it lacks the transaction-limit, cooling-off, and disclosure features SB1359 would have introduced.
This matters for a three-pillar assessment because the gap sits almost entirely on the fraud and consumer-harm axis, with correspondingly thin AML/CTF salience. Advocacy testimony behind SB1359 pointed to tens of millions of dollars in annual cryptocurrency fraud losses in Idaho, a figure that, if representative, suggests the kiosk channel is a live vector for scam-driven cash extraction rather than for structured layering or sanctions evasion in the classic AML sense. The architecture-over-incident framing applies squarely here: no single enforcement action or prosecuted fraud ring is the story this cycle; the story is that a legislature-endorsed structural fix was blocked, leaving the exposure in place by default rather than by deliberate policy choice to under-regulate.
It is also worth registering what did not change. Idaho's 2024 Bitcoin Rights Act, which exempts bitcoin mining businesses from money-transmitter licensing and entrenches self-custody and node-operation rights, was not touched by the SB1359 debate and remains the state's other major standing feature in this domain. The two developments are analytically separate: one is a permissive carve-out for mining infrastructure that has stood since 2024, the other is a failed attempt to add a protective layer for retail-facing kiosk transactions. Idaho's overall crypto posture is therefore best read as bifurcated, permissive toward infrastructure and self-custody, but currently under-equipped on the consumer-facing fraud-prevention side of the same sector.
Sponsors of SB1359 have signaled intent to return with a redrafted bill in the 2027 legislative session, informed by the specific drafting problems the Governor's veto identified. No primary-source text for any successor measure exists yet, so this should be read as a directional signal rather than a pending instrument. Whether a future version addresses the deficiencies cleanly enough to earn the Governor's signature, and whether the bipartisan coalition that passed the original bill holds together across an election cycle, are both open questions this cycle cannot resolve.
The near-term trajectory in this domain depends entirely on legislative action that has not yet occurred. Absent a successor bill, or absent the Department of Finance electing to address kiosk-specific risks through rulemaking under its existing money-transmitter authority (an avenue not evidenced in this cycle's research), Idaho's kiosk sector will continue to operate under the general licensing regime alone. The most concrete forward marker is the expected 2027-Q1 legislative session, when a redrafted bill is anticipated; the working assumption, carried at Probable confidence, is that sponsors will attempt a second pass rather than abandon the effort. Analysts should watch for whether any interim guidance from the Department of Finance narrows the gap administratively before then, and whether the fraud-loss figures cited in the SB1359 debate recur or grow in subsequent reporting, which would sharpen the case for the successor bill's passage.
Compliance Technology & Active Defence is not yet covered for this jurisdiction in this report.
AML/CTF Regime is not yet covered for this jurisdiction in this report.
The general Money Transmitters Act licensing obligation continues to apply to kiosk operators, but no kiosk-specific transaction-limit or delay mechanism exists to constrain fraud-driven cash extraction through this channel. This sustains a known reporting-relevant gap rather than introducing a new one.
Compliance functions overseeing Idaho kiosk operations should note that the anticipated kiosk-specific compliance regime did not materialize this cycle, so existing money-transmitter licensing and reporting obligations remain the operative standard.
Legal counsel assessing regulatory trajectory should read the veto as a technical rejection, leaving open a reasonable probability of a redrafted successor bill rather than a signal of durable legislative or executive opposition to kiosk-specific rules.
This is a reputational and regulatory-risk data point for any institution operating or partnering with kiosk infrastructure in Idaho; the gap is structural and publicly documented, which increases scrutiny risk even without new enforcement activity.
Engineering teams supporting kiosk deployments in Idaho are not currently subject to any state-mandated fraud-control feature set beyond what the general money-transmitter regime implies; this may change if a 2027 successor bill passes.
Risk functions should treat this as continuation of an existing exposure rather than a fresh risk event; the underlying Money Transmitters Act framework is unchanged, and the veto simply preserves the status quo ante.
Transaction-monitoring operations for kiosk-adjacent flows in Idaho continue under existing money-transmitter-derived thresholds; no new operational workflow change is required as a result of this cycle's development.
No material change for this persona this cycle
Idaho's virtual-currency kiosk sector remains without dedicated fraud/AML controls following the veto of SB1359.
No new licensing obligation was created or removed this cycle; the general money-transmitter regime remains the sole licensing pathway for virtual-currency kiosk operators in Idaho.
The Governor's veto of SB1359 was grounded explicitly in drafting deficiencies rather than a policy objection to kiosk regulation as such.
A bipartisan-backed crypto-kiosk consumer-protection bill failed at the Governor's desk, leaving a known fraud-exposure gap unresolved in Idaho.
No technical or platform-level mandate (transaction caps, delay logic, disclosure UI) was imposed on kiosk operators this cycle.
The kiosk-fraud control gap is assessed as a structural enabling vulnerability rather than a new deterioration in Idaho's risk posture.
No new operational monitoring threshold or screening requirement was introduced for Idaho kiosk transactions this cycle.
No material change this cycle.
As the EU AML Package moves from purely national AML supervision toward AMLA direct and indirect supervision of cross-border obliged entities, one illustrative structural possibility is that entities currently supervised only at the national level under fragmented regimes could face a more harmonised, EU-level supervisory touchpoint for cross-border activity. This is architecture-over-incident illustration: it describes a possible mechanism by which the supervisory perimeter could shift, not an observed event, and not a claim about any specific entity or jurisdiction in this cycle's substrate.
Illustrative scenario for analytical orientation only. Not compliance advice, not a prediction, and not a statement of observed fact.
| Tracker | Status | Note |
|---|---|---|
| T1 · Russian Sanctions-Evasion Architecture | no_change | |
| T2 · EU AML Package / AMLA | no_change | Not applicable to a US subnational jurisdiction this cycle. |
| T3 · FATF Grey List | no_change | No US grey-list movement; not jurisdiction-specific to Idaho. |
| T4 · Beneficial-Ownership Register Status | no_change | No Idaho-specific BO registry development found this cycle. |
| T5 · Crypto & Digital-Asset Integrity | material_change | Idaho's SB1359 crypto-kiosk fraud-prevention bill passed the legislature but was vetoed in April 2026, leaving the state's virtual-currency kiosk sector without dedicated fraud/AML controls beyond the general Money Transmitters Act. |
| T6 · Sanctions Regime Divergence | no_change | No Idaho-specific sanctions divergence signal this cycle. |