D1 Sanctions
Sanctions is not yet covered for this jurisdiction in this report.
Indiana operates under the federal Bank Secrecy Act/AML framework administered by FinCEN and OFAC, supplemented by state money-transmitter licensing under the Indiana Uniform Money Services Act (Indiana Department of Financial Institutions).
Sanctions is not yet covered for this jurisdiction in this report.
Beneficial Ownership is not yet covered for this jurisdiction in this report.
Enabler Jurisdictions is not yet covered for this jurisdiction in this report.
Conflict Finance is not yet covered for this jurisdiction in this report.
Indiana's first-in-nation statewide ban on virtual-currency kiosks, enacted under House Enrolled Act 1116, is this cycle's most consequential digital-asset development for the state. The final ban language replaces an earlier draft that would have brought kiosk operators under money-transmitter licensure, marking a legislative shift from a regulate-and-license approach toward an outright-prohibition approach. Enforcement runs through the Indiana Attorney General under the state's existing consumer-protection statutes, specifically the Deceptive Consumer Sales Act, rather than through the Department of Financial Institutions' money-transmitter licensing apparatus. This enforcement architecture choice is itself analytically significant: it frames the kiosk problem as a consumer-fraud issue to be policed by the state's general consumer-protection authority, rather than as a financial-services-licensing issue to be policed by the state's financial regulator.
Indiana's move sits within a considerably broader 2026 legislative wave: at least twenty US states have adopted new laws restricting virtual-currency kiosk activity this year, per ABA Banking Journal reporting. Within that cohort, Indiana's outright-ban approach is assessed as the most restrictive currently observed, standing apart from the median state model of licensing kiosk operators subject to transaction limits or other operating conditions. The architecture-over-incident read here is that this is a structural policy choice about how much residual cash-to-crypto conversion capacity a state is willing to tolerate in exchange for the AML/CTF and fraud-typology benefits of allowing regulated, licensed kiosk operation to continue. Indiana has chosen to eliminate the channel entirely rather than regulate it, which removes both the fraud exposure the kiosk channel carried and any legitimate cash-to-crypto conversion use that channel served.
The practical AML/CTF significance of this shift is that virtual-currency kiosks have functioned, in practice, as a cash-to-crypto off-ramp reachable without money-transmitter-level know-your-customer procedures in many jurisdictions that either did not regulate them at all or regulated them loosely. Indiana's ban removes this off-ramp from the state's typology landscape entirely going forward, a different resolution than the licensing-with-KYC-requirements approach several peer states in the 2026 wave have instead chosen. Whether removing the channel outright versus bringing it under supervised KYC produces a better AML/CTF outcome is a genuine open question this brief does not resolve, since enablement and enforcement can each carry their own typology risks: a banned channel may migrate underground, while a licensed channel remains visible to supervision but continues to exist as an attack surface.
Indiana's underlying money-transmitter licensing backbone, the Money Transmission Modernization Act codified at IC 28-8-4.1 and administered by the Department of Financial Institutions, remains unchanged this cycle and continues to explicitly exclude virtual-currency transmission from its adopted provisions. This structural fact predates the kiosk ban and is not altered by it; the kiosk ban operates entirely outside the money-transmitter licensing framework, through the separate consumer-protection enforcement track.
The exact statutory effective date of HEA 1116's final ban language has not been independently confirmed beyond bill text and secondary legal commentary, and should be verified in a subsequent cycle. Watch for whether other states in the 2026 wave shift toward Indiana's outright-ban model as opposed to the median licensing-with-limits model, and for any indication of whether banned kiosk activity migrates to informal or cross-border channels as a displacement effect. Watch also for whether Indiana's Attorney General brings an early enforcement action under the Deceptive Consumer Sales Act framework once the ban's effective date passes, which would be the first test of this enforcement architecture in practice.
Compliance Technology & Active Defence is not yet covered for this jurisdiction in this report.
AML/CTF Regime is not yet covered for this jurisdiction in this report.
The elimination of Indiana's virtual-currency kiosk channel removes a cash-to-crypto conversion pathway that had, in practice, been reachable without money-transmitter-level KYC. This changes the typology landscape for any monitoring keyed to kiosk-based conversion activity in Indiana specifically, though it does not alter the state's standing money-transmitter licensing framework or the federal BSA/FinCEN layer.
Firms tracking Indiana's regulatory perimeter should note that this enforcement architecture places kiosk-ban compliance under general consumer-protection law rather than financial-services licensing law, a distinct enforcement track from the state's money-transmitter licensing regime, which itself remains unchanged and continues to exclude virtual-currency transmission from its adopted provisions.
No material change for this persona this cycle
Board-level exposure is limited given Indiana's sub-national scope, but the state's outright-ban approach, contrasted with at least twenty other states choosing a licensing-with-limits model, is a notable data point in how state-level crypto-kiosk policy is diverging across the United States this year.
The prohibition is scoped to the physical/operational kiosk channel and does not alter Indiana's money-transmitter licensing treatment of custodial exchange, custody, or wallet infrastructure, which continues under the unchanged Money Transmission Modernization Act framework.
Risk functions monitoring cross-typology exposure should note that the current 2026 wave of state crypto-kiosk legislation splits between outright prohibition (Indiana) and licensing-with-limits (the median approach across at least twenty other states), each carrying distinct residual-risk profiles including possible channel-migration effects under the prohibition model.
No material change for this persona this cycle
Internal audit scope covering Indiana-facing crypto activity should document the newly bifurcated enforcement architecture: consumer-protection-based Attorney General enforcement for the kiosk ban, versus the unchanged DFI-administered money-transmitter licensing regime for custodial activity, as two distinct control points rather than one.
Indiana bans virtual-currency kiosks statewide, closing a KYC-light cash-to-crypto off-ramp.
Indiana's kiosk ban enforcement runs through the Attorney General, not the Department of Financial Institutions.
No material change this cycle.
Indiana positions itself as the most restrictive state in the 2026 US crypto-kiosk regulatory wave.
Indiana's ban targets kiosk hardware/operation, not custodial exchange or wallet software infrastructure.
Indiana's kiosk-ban approach and the broader 2026 state wave present a bifurcated typology-mitigation model to monitor.
No material change this cycle.
Indiana's kiosk-ban enforcement architecture is a new control point to document, distinct from the DFI licensing regime.
This is an illustrative structural sketch, not a prediction or observed fact. As the EU AML Package matures, the transition from purely national AML supervision toward AMLA direct and indirect supervision of cross-border obliged entities, under the AMLA Regulation (Reg (EU) 2024/1620), alongside the directly-applicable AML Regulation (Reg (EU) 2024/1624) and per-Member-State transposition of the sixth AML Directive, could illustratively reshape both the supervisory landscape and the evasion landscape for firms operating across EU borders. A hybrid EU-level supervisory architecture could, in an illustrative sense, concentrate scrutiny on the largest cross-border obliged entities while leaving smaller, purely domestic entities under continued national supervision, potentially creating a differential evasion incentive at the margin between the two supervisory tiers. This scenario is architecture-over-incident framing under the intelligence register and does not describe any observed development in US-IN or any other specific jurisdiction this cycle.
Illustrative scenario for analytical orientation only. Not compliance advice, not a prediction, and not a statement of observed fact.
| Tracker | Status | Note |
|---|---|---|
| T1 · Russian Sanctions-Evasion Architecture | no_change | No US-IN-specific dark-fleet, tech-procurement, or Houthi/Yemen-channel material surfaced this cycle for this sub-national jurisdiction. |
| T2 · EU AML Package / AMLA | no_change | Not applicable to a US sub-national jurisdiction; no EEA/UK bloc-level movement to attribute here. |
| T3 · FATF Grey List | no_change | No US-IN-specific FATF mutual-evaluation or grey-list movement; US federal FATF status unchanged this cycle. |
| T4 · Beneficial-Ownership Register Status | no_change | No Indiana state-level beneficial-ownership registry exists; federal CTA/FinCEN BOI regime governs and was not found to have moved this cycle. |
| T5 · Crypto & Digital-Asset Integrity | escalating | Indiana's kiosk ban (HEA 1116) and new digital-asset framework (HEA 1042) are incremental state-level developments in the broader 2026 US wave of crypto-kiosk regulation (at least 20 states have adopted new CVC-kiosk laws in 2026). |
| T6 · Sanctions Regime Divergence | no_change | No US-IN-specific sanctions-divergence signal this cycle. |