United States — Illinois US-IL

Lead Signal

Illinois has moved its digital-asset compliance architecture a step closer to operational reality. The Department of Financial and Professional Regulation submitted implementing rules for the Digital Assets and Consumer Protection Act (DACPA, 205 ILCS 731) to Second Notice ahead of the October 20, 2026 meeting of the Joint Committee on Administrative Rules, following a review of public comments. The rules, numbered 38 Ill. Adm. Code 1031 and 1032, carry a written anti-money-laundering program obligation for registrants conducting digital asset business activity with Illinois residents, layered atop custody, disclosure and reserve requirements. The underlying statutory registration and program duty is probable in its specific wording, resting on a primary regulator timeline anchor corroborated by a secondary legal-industry summary, with the substantive AML-program language itself drawn from that secondary source rather than the primary filing text directly reviewed.

In parallel, the Illinois Department of Revenue has posted draft proposed rules for a Digital Asset Tax Act, a 0.2 percent privilege-style tax, opening a comment period that ran through October 30, 2026. This instrument has not yet been filed with the Secretary of State or referred to the Joint Committee on Administrative Rules, placing it at an earlier procedural stage than the DACPA rulemaking. Taken together, the two tracks describe a state building out both the supervisory and fiscal dimensions of a digital-asset regime at the same time, with the AML obligation arriving as a condition of registration rather than as a standalone enforcement initiative.

Other Developments

Custody scoping gains a definitional anchor. The DACPA implementing rules introduce a new definition of "control" relevant to how custodial arrangements will be scoped under the statute, a detail that matters for which digital-asset businesses fall inside the registration perimeter and therefore inside the AML-program duty.

No movement identified in sanctions, ownership-transparency, enabler-jurisdiction or conflict-finance tracking for this jurisdiction. The research effort behind was scoped to a single jurisdiction rather than a full cross-jurisdiction sweep, and no findings surfaced in those areas as a result; their standing position is unchanged.

Cross-Monitor Connections

The layering of an anti-money-laundering program requirement onto a state-level digital-asset registration regime is the kind of structural development that other monitors tracking state capture, conflict finance, and commodity flows would read primarily for its architecture rather than its enforcement volume: a jurisdiction building the scaffolding for future oversight of crypto-asset flows before any enforcement action exists to populate it. Readers following information-operations risk may also find the tax-and-AML pairing relevant insofar as it signals how a mid-sized U.S. state is positioning itself relative to federally regulated digital-asset activity, though no specific cross-border or sanctions-evasion nexus has been identified in the material.

Outlook

The DACPA implementing rules are scheduled to reach the stage where registrants face a live compliance deadline on July 1, 2027, when the statute's registration and program obligations take legal effect. Finalization of the rules remains within the Joint Committee on Administrative Rules process, and industry readiness for a state-level anti-money-laundering program requirement layered on top of registration is understood to be uneven across prospective registrants. Whether the Digital Asset Tax Act proceeds past its comment period to formal filing is a separate and currently open question. Watchers of U.S. state-level digital-asset regulation should expect the AML-program and custody-definition details to firm up as the rules move toward finality, with the tax track likely to lag behind on a slower procedural timeline.

Lead Signal

Illinois has moved its digital-asset regulatory architecture into a concrete rulemaking phase. The Department of Financial and Professional Regulation submitted implementing rules under the Digital Assets and Consumer Protection Act (DACPA, 205 ILCS 731) to Second Notice, with a hearing before the Joint Committee on Administrative Rules scheduled for October 20, 2026. The rules introduce a refined definition of control over a digital asset, a term that determines when an intermediary is treated as a custodian for regulatory purposes. This is a structural development rather than an enforcement event: it reshapes the perimeter of who must register and comply, ahead of any single case testing the boundary.

Alongside the custody-scoping rulemaking, DACPA registrants face a written anti-money-laundering program requirement among the broader set of policies and procedures the statute contemplates. Registration with the state regulator is required by July 1, 2027, meaning the AML program obligation, while not yet in force, is on a fixed and approaching timeline. The combination of a sharpening custody definition and an AML program mandate signals that Illinois is building a reasonably complete state-level digital-asset compliance regime, not merely a registration formality.

Other Developments

A parallel tax rulemaking track moved on its own timeline. The Illinois Department of Revenue posted draft proposed rules for the Digital Asset Tax Act and accepted public comment through October 30, 2026. This is a separate instrument from the DACPA custody and AML framework, but it adds to the layered compliance picture a digital-asset business operating in Illinois must now track: registration and AML obligations under DACPA, and a distinct tax compliance regime under the Revenue Department's rules.

The AML program requirement itself rests on a thinner sourcing base than the custody rulemaking. The confirmation that DACPA registrants must maintain a written anti-money-laundering program traces to a law-firm summary of the statute rather than to a retrieved excerpt of the primary rule text, even though the existence and timing of the underlying rulemaking process is independently confirmed by the regulator itself. The substance of the obligation is probable, not yet confirmed from a primary document.

Cross-Monitor Connections

The custody-scoping question embedded in the DACPA/DAKA rulemaking is directly relevant to payments-sector readings of the same instrument: a definition of control that excludes certain fraud-response blocking actions from triggering custodial treatment will affect how payments-adjacent digital-asset intermediaries are classified, a question that sits at the boundary between financial-crime compliance architecture and payments market-access rules. The AML program mandate likewise intersects with broader compliance-technology questions, since a registrant building a program from scratch ahead of a 2027 registration deadline will need to decide how much of that program rests on automated transaction monitoring versus manual process, a choice with downstream implications for examination readiness.

Outlook

The DACPA/DAKA implementing rules are expected to reach final form around the third quarter of 2027, consistent with the registration deadline of July 1, 2027, though the precise finalization date remains unsettled pending the Joint Committee's review following the October 20, 2026 hearing. As scheduled, the rules will formalize both the custody definition and the specifics of the required AML program. Firms operating or planning to operate as digital-asset businesses in Illinois have a narrowing window to build compliant programs before the registration deadline arrives. The parallel tax rulemaking, with its comment period closed as of October 30, 2026, is likely to proceed toward finalization on a separate but related track, adding a second compliance dimension for the same population of registrants.

Lead Signal

Illinois' digital-asset registration architecture reached a procedural milestone: implementing rules for the Digital Assets and Consumer Protection Act and the companion Digital Asset Kiosks Act passed to Second Notice and were calendared for an October 20, 2026 hearing before the Illinois General Assembly's Joint Committee on Administrative Rules. Mandatory registration for digital asset business activity conducted with or on behalf of an Illinois resident remains fixed for July 1, 2027, so the architecture under review now is the one registrants will be examined against once that date arrives. The rules define how the Illinois Department of Financial and Professional Regulation will assess applicants, including the department's review of anti-money-laundering compliance planning as part of registration.

Other Developments

Consumer-facing enforcement under the kiosk statute continues to generate measurable results. Illinois consumers have received more than $750,000 across 453 refund requests, averaging $1,656 per claim, under the Digital Asset Kiosks Act's fraud-refund mechanism since the statute took effect. This is a functioning consumer-redress channel operating in parallel with the registration regime still under construction, and it illustrates a jurisdiction building both ends of its digital-asset architecture concurrently: a redress mechanism already live, and a registration perimeter not yet operative.

The state's digital-asset transaction levy has been delayed by litigation, not by regulatory choice. A Sangamon County circuit court approved a stipulated preliminary injunction on October 1, 2026 pushing the 0.2% transactional levy under the Illinois Digital Asset Tax Act from its original January 1, 2027 effective date to July 1, 2027, pending resolution of a constitutionality challenge. The levy and the registration regime now share the same prospective effective date, which means the compliance calendar for digital asset businesses converges on a single mid-2027 point rather than staggering across two separate obligations.

The money-transmission licensing baseline underneath this activity was itself replaced at the start of the year. The Uniform Money Transmission Modernization Act took effect January 1, 2026, repealing the prior Transmitters of Money Act and establishing the current licensing regime administered by the Department of Financial and Professional Regulation. Digital-asset registrants under the newer Act sit alongside this money-transmission layer as a parallel, not a substitute, obligation: the registration requirement under the Digital Assets and Consumer Protection Act is a separate assessment of anti-money-laundering procedure adequacy, while the Suspicious Activity Report and Currency Transaction Report function for these entities remains with the federal Financial Crimes Enforcement Network rather than any state body.

Cross-Monitor Connections

The player-protection extension of Illinois' self-exclusion program to video gaming terminals, and the federal injunction narrowing the state's sports-wagering licensing reach over prediction-market contracts, both touch a different regulatory perimeter than the digital-asset architecture described here and are tracked separately. The structural overlap worth flagging is between the digital-asset registration regime and payments regulation more broadly: a registrant's anti-money-laundering compliance planning is assessed by the same department that administers money-transmission licensing, so an entity operating both a digital-asset kiosk business and a money-transmission business in Illinois faces two assessments from one regulator rather than two separate regulators.

Outlook

The Joint Committee on Administrative Rules hearing of October 20, 2026 is the next procedural gate the implementing rules must clear before the July 1, 2027 mandatory registration date can take effect as scheduled; the rules remain at Second Notice and are not yet final. The Digital Asset Tax Act's constitutionality challenge in Sangamon County circuit court is the other item to track, since its outcome will determine whether the 0.2% levy takes effect on July 1, 2027 as currently stayed, is delayed further, or is invalidated outright.

Lead Signal

Illinois is constructing a bespoke state-level digital-asset licensing and taxation perimeter, comparable in ambition to New York's BitLicense regime, at the same moment that a federal court has preliminarily preempted part of the state's separate sports-wagering licensing apparatus as applied to prediction-market event contracts. The Illinois Department of Financial and Professional Regulation's digital-asset implementing rules, DACPA (38 IAC 1031) and DAKA (38 IAC 1032), moved from First Notice to Second Notice, with a Joint Committee on Administrative Rules hearing scheduled for 20 October 2026. In parallel, the Illinois Department of Revenue published preliminary draft rules on 28 September 2026 for the new Illinois Digital Asset Tax Act, a 0.2 percent levy effective 1 January 2027, with comments due 30 October 2026. On 2 October 2026, the U.S. District Court for the Northern District of Illinois preliminarily enjoined the state from enforcing its sports-wagering licensing and tax provisions against CFTC-regulated prediction-market operators including Kalshi and Coinbase, holding the contracts are likely swaps under the Commodity Exchange Act and the state provisions likely preempted; the state's wagering fees remain unresolved pending supplemental briefing.

Other Developments

Supervisory capacity under construction. IDFPR's digital-asset licensing perimeter is being built out through two tracks simultaneously: a registration and surety-bond regime for digital-asset businesses and kiosk operators, and a dedicated state transaction tax on digital-asset business activity. Both tracks remain in rulemaking rather than final form as of this cycle. Federal/state classification conflict. The prediction-markets litigation illustrates a live dispute over how exchange-traded event contracts should be classified and which regulator, state or federal, has authority to license and tax them; this is relevant to how Illinois approaches jurisdictional boundaries for financial-innovation products generally.

Cross-Monitor Connections

The DACPA/DAKA JCAR Second Notice hearing and the Digital Asset Tax Act rulemaking are shared procedural anchors with the crypto monitor's tracking of Illinois' licensing and tax architecture, and the prediction-markets preemption ruling connects to the advennt monitor's tracking of Illinois sports-wagering enforcement exposure. Neither domain is re-analysed here beyond noting the shared factual basis.

Outlook

The JCAR hearing on 20 October 2026 is the immediate procedural gate for Illinois' digital-asset licensing rules, and the Digital Asset Tax Act's comment period closes 30 October 2026 ahead of its 1 January 2027 effective date. The federal court's proposed injunction terms in the prediction-markets litigation, due 29 October 2026, will determine whether Illinois can collect its sports-wagering fees from CFTC-regulated operators, a question structurally adjacent to how the state's new digital-asset tax regime may eventually be tested against similarly novel financial products.

Lead Signal

Illinois is building a parallel AML/CFT compliance perimeter for digital-asset businesses alongside its existing general money-transmission regime, and the two tracks are being deliberately kept from overlapping. The Illinois Department of Financial and Professional Regulation submitted the Second Notice of implementing rules for the Digital Assets and Consumer Protection Act (38 Ill. Adm. Code 1031) and the Digital Asset Kiosks Act (38 Ill. Adm. Code 1032), following First Notice public-comment review, with a Joint Committee on Administrative Rules hearing scheduled for 20 October 2026. This is the structural development behind the cycle: it builds the governance, compliance-personnel, and anti-fraud infrastructure crypto registrants will need ahead of a registration deadline of 1 July 2027. Separately, and effective 2 September 2026, 38 Ill. Adm. Code 207 was amended to exempt money-transmission transactions conducted solely to purchase, sell, or exchange digital assets by a DACPA registrant from the general Uniform Money Transmission Modernization Act licensing regime, avoiding a period of dual regulation as the new perimeter comes online.

Other Developments

Beneficial-ownership scope narrowed at the federal layer. FinCEN finalized its Beneficial Ownership Information rule, effective 11 August 2026, exempting U.S. companies from Corporate Transparency Act beneficial-ownership reporting and narrowing the regime to certain foreign companies registered to do business in the United States, including those registered in Illinois. This is a federal-layer change applying uniformly across jurisdictions rather than an Illinois-specific variance, but it directly affects the beneficial-ownership transparency perimeter that any Illinois-registered foreign entity now faces.

General money transmission remains anchored in its own statute. Illinois's general money-transmission regime continues to run on the Uniform Money Transmission Modernization Act (205 ILCS 658), which took effect 1 January 2026 replacing the former Transmitters of Money Act, with the Illinois Department of Financial and Professional Regulation's Division of Banking as licensing authority using the Nationwide Multistate Licensing System. This baseline is unchanged this cycle; what is new is the carve-out exempting DACPA registrants' digital-asset-only transmission from it.

Cross-Monitor Connections

The DACPA/DAKA Second Notice rulemaking and the parallel MTMA exemption are matters the world-payments monitor is independently tracking for their licensing and market-access implications for non-bank payment institutions; the same primary-source developments underlie both monitors' coverage of Illinois this cycle. The federal BOI rule's narrowing of beneficial-ownership reporting scope is a structural development with implications beyond Illinois and intersects with ongoing fleet-wide tracking of beneficial-ownership transparency architecture.

Outlook

The 20 October 2026 JCAR hearing will determine whether the DACPA/DAKA Second Notice rules proceed toward adoption ahead of the 1 July 2027 registration deadline; the outcome will settle the operational detail of the AML/CFT, cybersecurity, and anti-fraud governance duties that registrants will carry. No further Illinois-specific beneficial-ownership development is anticipated in the near term beyond the federal BOI rule already in effect; the structural question going forward is how the narrowed federal reporting perimeter interacts with Illinois-registered foreign entities over time.

Lead Signal

Illinois has extended an existing federal obliged-entity architecture into a newly legalized gaming vertical. The Sports Wagering Act amendment creating Illinois Gaming Board licensure for fantasy-contest operators, at Section 25-120.5(a), requires licensees to comply with anti-money-laundering standards as defined by the federal Bank Secrecy Act of 1970 and the Anti-Money Laundering Act of 2020. This is not a new state AML statute or a new Financial Intelligence Unit; Illinois has no independent state AML law. It is a state-level licensing condition that pulls a newly regulated activity class into the existing federal BSA/FinCEN compliance perimeter, which is the pattern to watch as more US states create adjacent licensing regimes for previously ambiguous product categories.

Other Developments

Digital-asset registration architecture without an AML-specific clause. Illinois enacted the Digital Assets and Consumer Protection Act (205 ILCS 731), effective 18 August 2025, giving the Illinois Department of Financial and Professional Regulation authority to register, supervise, and take enforcement action, including civil penalties of up to $100,000 per day, against digital-asset exchanges and administrators serving Illinois residents. This is framed by IDFPR as consumer protection, and no AML-specific provision within DACPA itself was independently confirmed this cycle. The architecture is nonetheless compliance-technology-adjacent: a registration and supervisory perimeter of this kind is the kind of infrastructure a future AML overlay could be built on top of, even though no such overlay has been issued yet.

Cross-Monitor Connections

The fantasy-contest AML duty under Section 25-120.5(a) is the same statutory provision that the world-payments and advennt monitors will surface from their own vantage points; here the relevant reading is the extension of the federal BSA/AMLA-2020 obliged-entity model into a new gaming licensing class, rather than the gambling-market or payments-infrastructure framing those monitors will apply. The DACPA/IDFPR registration architecture also intersects with the crypto monitor's licensing coverage of the same instrument; the financial-integrity reading is narrower, treating the registration perimeter strictly as compliance-technology-adjacent infrastructure rather than as a licensing achievement in its own right.

Outlook

Watch whether IDFPR's forthcoming DACPA implementing rules, expected around the first quarter of 2027 on a half-year uncertainty band, add any Illinois-specific AML or KYC conditions beyond the federal BSA baseline; none has been confirmed as of this cycle. Watch also whether Illinois extends the Section 25-120.5(a) AML-duty model to other newly licensed gaming or gaming-adjacent verticals, which would confirm this cycle's pattern as a template rather than an isolated instance.

Lead Signal

Illinois this cycle produced the most consequential state-level financial-integrity development observed for the jurisdiction: a first-in-nation transaction-level tax on digital-asset business activity, enacted 16 June 2026 as part of the FY2027 state budget under SB 3019, arriving alongside a structural overhaul of the money-transmission licensing architecture of the state. The Digital Asset Tax Act imposes a 0.2% levy on digital-asset business activity and establishes a $100,000 Illinois-receipts nexus threshold for remote brokers, and it was signed into law only after immediate contestation — a repeal bill, HB 5798, was introduced, and the Digital Chamber filed suit in Sangamon County Circuit Court. Assessed alongside the Uniform Money Transmission Modernization Act (UMTMA), which repealed the legacy Transmitters of Money Act effective 1 January 2026 and standardized licensing, examination authority, and AML and compliance-program requirements for money transmitters and virtual-currency exchangers — including a shift to mandatory electronic surety bonds administered through the Nationwide Multistate Licensing System — the cycle reads as Illinois tightening rather than loosening its financial-integrity gatekeeping architecture, even as its fiscal posture toward digital assets remains contested and unsettled.

This reading carries assessed rather than confirmed confidence. The tax mechanism, while fiscal rather than AML in its formal framing, is judged to layer a broker-reporting, nexus-based visibility mechanism onto out-of-state crypto brokers that did not previously exist under the licensing regime of the state alone. Combined with the continuing rulemaking build-out under the Digital Assets and Consumer Protection Act (DACPA) — which establishes IDFPR registration for digital-asset businesses, with customer-disclosure and custody protections due by 1 January 2027 and full licensing by 1 July 2027 — the crypto-facing regulatory perimeter of Illinois is expanding on multiple axes simultaneously: fiscal exposure, registration, and eventual full licensure.

Other Developments

Beneficial-ownership scope narrows at the federal layer. The FinCEN interim final rule narrowing Corporate Transparency Act beneficial-ownership-information reporting to foreign-formed entities only became final and effective 14 August 2026 — a federal-layer change that exempts Illinois-formed LLCs and corporations from BOI filing obligations, even as the transparency posture of the state elsewhere saw no development identified this cycle.

Sanctions-adjacent divestment architecture holds steady. The Illinois Investment Policy Board Prohibited Investment List — covering Russia, Belarus, Iran, and Sudan-linked entities under the Illinois Pension Code — was confirmed actively maintained as of June 2026, with more than 472 entities currently listed and no amendment or repeal of the underlying 2022 statute identified this cycle; continuity here functions as its own signal rather than an absence of one.

Digital-asset licensing perimeter builds toward 2027. DACPA, signed 18 August 2025, remains in active rulemaking, with IDFPR registration for digital-asset businesses underway and a multi-year gap between the 2025 enactment and the 2027 full-licensing horizon — an implementation window during which digital-asset businesses operate under partial and evolving supervisory obligations.

Coverage gaps logged rather than treated as stability. No Illinois-specific development was researched this cycle in the beneficial-ownership (D2), enabler-jurisdiction (D3), or conflict-finance (D4) domains, and Tier D jurisdiction checks were deferred under the jurisdiction-scoped budget allocation applied this cycle; these are recorded explicitly as coverage gaps rather than findings of no change.

Cross-Monitor Connections

The transaction-level digital-asset tax of Illinois carries a flagged cross-monitor signal directed at GMM: the mechanism is assessed as a possible bellwether for state-level fiscal treatment of crypto flows that other US states may replicate, with implications for how digital-asset flows are priced and monitored at a macro level should replication occur. More broadly, this cycle produced a dual movement — a modernizing AML and licensing statute in UMTMA alongside a fiscal instrument that incidentally creates transaction visibility in the Digital Asset Tax Act — illustrating a pattern of interest to compliance-technology and enforcement-architecture monitoring generally: regulatory visibility over digital-asset flows can accrete through fiscal or licensing channels not originally designed for AML purposes, and downstream monitors should treat this as an architecture and reporting-scope change rather than an AML transaction-monitoring or suspicious-activity-reporting obligation, a distinction the underlying interpreter sourcing does not support extending beyond. The federal BOI narrowing, for its part, sits at the intersection of beneficial-ownership transparency and corporate-formation practice, a domain where the exposure of Illinois this cycle is shaped primarily by federal rule rather than state legislative action.

Outlook

Two open questions carry into the next cycle. First, the durability of the Illinois digital-asset transaction tax is unresolved while litigation and a repeal bill remain live; the regulatory-horizon entry of the Interpreter carries a half-year uncertainty band with an expected resolution point around the first quarter of 2027, and broker-collection obligations under the tax would only take effect from 2027 if the mechanism survives both the Sangamon County suit and the HB 5798 repeal effort. Second, the DACPA rulemaking trajectory toward July 2027 full licensing remains, per the gap assessment of the Interpreter, a live rulemaking process rather than finalized rules, meaning firms serving Illinois residents face a multi-year window of partial and evolving supervisory obligations rather than a single compliance cliff-edge. Separately, the Assessed-confidence finding of the Interpreter on the UMTMA transition rests on Tier-3 and Tier-4 corroboration only, absent independent Tier-1 confirmation from IDFPR; that sourcing gap, along with the logged coverage gaps across beneficial ownership, enabler jurisdictions, and conflict finance, should be prioritized for closure in the coming cycle.

Lead Signal

This cycle, the Illinois file is defined less by new enforcement than by correction of the baseline architecture record itself. Two corrections move in opposite directions. On beneficial ownership, the record is more exposed than previously stated: the FinCEN Residential Real Estate Rule, treated in baseline reporting as having taken permanent nationwide effect on 1 March 2026, was in fact vacated by the U.S. District Court for the Eastern District of Texas on 19 March 2026 and remains unenforceable pending the FinCEN appeal (fim-2026-W28-007, High confidence). Separately, the March 2025 interim rule exempting domestic reporting companies from Corporate Transparency Act beneficial-ownership disclosure remains just that: interim, not a permanent removal of the transparency tool, notwithstanding the Eleventh Circuit ruling of 16 December 2025 upholding the underlying CTA statute as constitutional (fim-2026-W28-008, Assessed). Illinois has no state-level beneficial ownership registry to substitute for either federal mechanism (fim-2026-W28-009, High).

On crypto, the correction runs the other way. Illinois enacted the Digital Assets and Consumer Protection Act and the Digital Asset Kiosk Act on 18 August 2025, granting IDFPR statutory licensing authority over crypto exchanges and ATM/kiosk operators with a registration deadline of 1 July 2027 (fim-2026-W28-010, High), a genuine structural improvement mischaracterised in baseline research as a pending, unenacted proposal. That improvement sits alongside two persistent structural drags: Chicago continuing status as the DEA/FinCEN-identified primary US collection point for drug-trafficking cash later layered through roughly 1,167 of the 1,626 statewide crypto ATM kiosks in Illinois (fim-2026-W28-004, High), and a federal preemption dynamic in which the OCC reinterpreted national trust charter rules to grant crypto firms immunity from state regulator action, structurally eroding IDFPR practical reach over the same firms its new statute is meant to license (fim-2026-W28-012, Assessed).

Other Developments

Sanctions architecture inherited, not independently exercised. Illinois has no state sanctions authority; OFAC-compliance oversight for Illinois runs through a standing information-sharing memorandum of understanding between IDFPR and the US Treasury (fim-2026-W28-001, High). Against that structural baseline, intensified OFAC Iran maximum-pressure enforcement following NSPM-2 reinforces correspondent-banking prohibitions binding on all US-domiciled banks, including Illinois-chartered institutions (fim-2026-W28-002, High), while the FinCEN Section 311 designation of Huione Group as a primary money-laundering concern severs a network with direct relevance to the dense Chicago CVC-kiosk exposure to the cross-border stablecoin flows Huione facilitated (fim-2026-W28-003, Assessed). The parallel October 2025 joint US-OFAC/UK-OFSI action against the Prince Group/Huione/Byex network proceeded well ahead of EU designation, leaving a compliance-mapping gap for Illinois-based multinational banks and Chicago derivatives and trading firms with EU-facing books (fim-2026-W28-019, Assessed).

Professional-enabler continuity at the liquidity layer. Chicago proprietary trading firm Cumberland DRW continues supplying bulk bitcoin liquidity to Bitcoin Depot and CoinFlip, crypto ATM operators found by state attorneys general to be majority scam-related, even after those findings became public (fim-2026-W28-005, Assessed), an illustration of upstream liquidity providers functioning as de facto enablers despite maintaining their own institutional AML programs. The May 2026 Bitcoin Depot bankruptcy filing reduces, without eliminating, kiosk-laundering exposure tied to that specific operator (fim-2026-W28-018, Assessed).

Federal preemption contests multiply. Beyond the OCC trust-charter dynamic, the CFTC sued Illinois state officials in April 2026 over the state cease-and-desist campaign against prediction-market platforms, a dispute over exclusive federal jurisdiction over event-contract derivatives (fim-2026-W28-013, Assessed), a second front, alongside crypto, on which federal authority is asserted against the regulatory posture of Illinois.

Enforcement-absence and clean-list status persist alongside gaps. No confirmed enforcement action against crypto ATM operators has been identified in Illinois, in contrast to peer-state litigation in Iowa, Massachusetts, Connecticut, Nevada, Missouri and Maine (fim-2026-W28-011, Assessed), though this finding predates the August 2025 statutory grant and whether IDFPR has since acted is unconfirmed. Separately, the United States, and Illinois by inheritance, remains off both FATF watch lists as of the 19 June 2026 plenary (fim-2026-W28-016, High), even as the US mutual-evaluation beneficial-ownership technical-compliance gap identified in 2016 is arguably widened by the continuing interim CTA exemption (fim-2026-W28-017, Possible). A DOJ health-care-fraud takedown charged 13 defendants in the Northern District of Illinois as part of a nationwide 14.6 billion dollar action involving laundered Medicare and Medicaid reimbursements (fim-2026-W28-014, Assessed), and a proposed FinCEN AML/CFT Program Rule reform, with comment period closed 9 June 2026, would move BSA-covered institutions nationwide, including Illinois-chartered banks and IDFPR-licensed money transmitters, toward risk-assessment-driven, US-based compliance officer structures (fim-2026-W28-015, High). FinCEN also renewed Chicago-area Residential Real Estate GTOs through 28 February 2026 as a bridge mechanism, ahead of the subsequent rule vacatur (fim-2026-W28-006, High).

Cross-Monitor Connections

The OCC national-trust-charter preemption and the CFTC litigation against Illinois both describe the same underlying architecture: federal authority displacing state regulatory capacity in a manner independent of any single incident, a dynamic flagged this cycle at Medium level for WDM state-capacity and governance monitoring. The Chicago-based CME Group derivatives complex, while not tied to any Illinois-specific sanctions-evasion finding this cycle, represents a latent structural exposure point for commodity-based sanctions-evasion typologies that would be more naturally routed through the commodity-flow lens of ERM should a concrete scheme emerge (fim-2026-W28-020, Possible). The Huione Group designation and its onward Cambodia-linked scam-compound ecosystem connect the kiosk-laundering exposure of Illinois to the broader network-level tracking carried by FCW and SCEM, though no direct Illinois-Cambodia transactional link is established in this cycle evidence base.

Outlook

The near-term trajectory of the Illinois file turns on three pending federal determinations rather than state action: the outcome of the FinCEN appeal of the Residential Real Estate Rule vacatur, the timing of a final rule succeeding the interim CTA domestic-entity exemption, and the shape of the FinCEN AML/CFT Program Rule reform following the 9 June 2026 comment-period close. The IDFPR crypto-licensing regime moves toward its 1 July 2027 registration deadline, but whether that authority translates into confirmed enforcement action against kiosk operators, and whether the OCC trust-charter preemption dynamic narrows or widens IDFPR practical reach in the interim, remain open questions this cycle evidence base does not resolve.