Financial Integrity Monitor

United States — Iowa US-IA

Domains (D1–D6)

Sources

Role actions

Jurisdiction profile

Largely CompliantTier BRisk: IncreasingMixed

Iowa AML/CTF oversight is federally anchored: money transmitters/MSBs register with FinCEN and license under Iowa Code ch.

533C via the Iowa Division of Banking; beneficial ownership transparency runs through the federal Corporate Transparency Act (now largely inoperative for domestic entities). Iowa layered a 2025 crypto-ATM consumer-protection statute atop this framework after aggressive Attorney General litigation against kiosk operators.

Key deficiencies

No independent Iowa beneficial-ownership registry; state relies entirely on the now-narrowed federal CTA/BOI regime
No dedicated state AML examination cadre for MSBs beyond licensing; supervisory depth depends on federal delegation
Crypto-ATM transaction caps enacted 2025 have not stopped elder-fraud volumes rising nationally
Limited independent Iowa-specific investigative/NGO coverage outside national outlets referencing Iowa AG actions

Recent developments (18m)

Iowa Attorney General sued Bitcoin Depot and CoinFlip (Feb. 26, 2025) alleging the majority of Iowa transactions on their kiosks were scam-related
Iowa enacted crypto-ATM consumer protection law (transaction/fee caps) effective summer 2025
FinCEN issued national CVC Kiosk Notice FIN-2025-NTC1 (Aug. 4, 2025) citing the Iowa enforcement action as a model
Federal CTA/BOI interim final rule (March 26, 2025) exempted domestic reporting companies — including Iowa-formed LLCs/corporations — from beneficial ownership reporting
Bitcoin Depot, defendant in the Iowa suit, filed for bankruptcy (May 2026) after multi-state regulatory pressure
FinCEN proposed sweeping AML/CFT program reform NPRM (April 2026) affecting all federally regulated Iowa financial institutions

Weekly brief

Lead signal

Lead Signal

Read full brief

Lead Signal

The defining architectural shift this cycle is FinCEN's final rule, effective 14 August 2026, permanently exempting US-formed companies and US persons from Corporate Transparency Act beneficial-ownership reporting, leaving only foreign reporting companies within scope. The underlying statute, 31 U.S.C. Section 5336, is not repealed; only the implementing regulation has been narrowed. This is a structural enablement development, not an enforcement one: the primary federal tool for unwinding opaque domestic shell-company structures has been substantially curtailed at the regulatory layer, even though the statutory authority to reinstate broader reporting remains intact. For Iowa specifically, this narrowing is the entire beneficial-ownership picture, since no Iowa-specific beneficial-ownership statute or registry exists; the state's transparency exposure is set wholly by the now-narrowed federal layer.

Other Developments

Cambodia's grey-list warning and the Prince Group aftermath. The National Bank of Cambodia's governor has publicly warned that Cambodia risks a third FATF grey-listing absent sustained action against casino- and scam-centre-linked money laundering, a probable finding corroborated by two independent Tier 3 sources though not yet confirmed by a Tier 1 or Tier 2 FATF document. This warning follows the arrest and extradition to China of Prince Group chairman Chen Zhi, with Prince Bank and related real-estate entities forced into liquidation after joint US-UK sanctions action against the Prince Group network. The enforcement-plus-sanctions convergence in this case is a comparatively rare pattern worth tracking as a structural signal of how enabler-jurisdiction pressure can translate into concrete asset unwinding.

FATF grey-list composition change. At the June 2026 Plenary, Iraq and Bosnia and Herzegovina were added to the FATF list of jurisdictions under increased monitoring, while Algeria and Namibia were removed, bringing the total under increased monitoring to twenty-two. The blacklist of Iran, North Korea, and Myanmar is unchanged. This is a confirmed, Tier 1 sourced list-composition transition typical of routine plenary cycles.

OCC preemption ruling on Iowa's money-transmitter licensing. An OCC interpretive letter dated 12 May 2026 held that the National Bank Act preempts Iowa's money-transmitter licensing requirement, and OCC's exclusive visitorial authority, as applied to Fidelity Digital Assets, N.A., a national trust bank offering crypto-custody services. This is a probable but Tier 1 sourced finding with material precedent implications for state-level AML and licensing leverage over bank-chartered crypto custodians nationally, since a state's ability to compel licensing and inspection of such institutions is now constrained by federal preemption doctrine at the point where a national trust charter is involved.

OFAC Iran-related designation and wind-down licence. OFAC designated additional Turkiye-based entities under its Iran sanctions program on 4 September 2026 and issued Iran General License CC, authorising wind-down of transactions involving certain blocked persons. This is a confirmed, routine designation-plus-wind-down-licence action consistent with standing sanctions-administration practice.

Cross-Monitor Connections

The OCC preemption ruling sits directly at the intersection of financial-integrity and payments-monitor concerns: a ruling that curtails a state's licensing reach over a bank-chartered crypto custodian has implications for how AML and licensing supervision of digital-asset infrastructure is distributed between federal and state authorities going forward, a question equally relevant to conduct-and-market-access monitoring. The Cambodia development connects to conflict-adjacent enforcement themes insofar as the Prince Group network's liquidation follows joint sanctions action, illustrating how sanctions architecture and enabler-jurisdiction AML failure can converge into a single enforcement event. The federal BOI narrowing is a structural enablement signal with no direct sanctions or conflict-finance nexus this cycle, but it bears watching for whether it increases reliance on state-level or private due-diligence tools to fill the transparency gap it leaves behind.

Outlook

Watch for whether FinCEN issues any follow-on guidance addressing the gap left by the domestic BOI exemption, and whether a Tier 1 FATF document confirms or forecloses the Cambodia re-listing risk that is currently only a central-bank-level warning. The OCC preemption precedent for Fidelity Digital Assets warrants continued tracking for whether other states attempt to reassert money-transmitter licensing jurisdiction over nationally chartered crypto-custody banks, and whether the reasoning is extended or narrowed in subsequent OCC interpretive letters.

weekly_brief_draft · JID US-IA

Domain intelligence (D1–D6)

D1 Sanctions

Not covered

Sanctions is not yet covered for this jurisdiction in this report.

D2 Beneficial Ownership and Corporate Transparency

Beneficial Ownership and Corporate Transparency

The EU AML Package stands as a structural global backdrop against which beneficial-ownership developments are read, but it is not the primary subject matter for Iowa, a non-EEA jurisdiction. Globally, the package comprises three distinct instruments: the AML Regulation, or AMLR, Regulation (EU) 2024/1624, which is directly applicable across Member States without national transposition; the sixth AML Directive, or 6AMLD, which requires transposition per Member State; and the AMLA Regulation, Regulation (EU) 2024/1620, which establishes the Anti-Money Laundering Authority and shifts supervision from purely national authorities toward a hybrid EU-level regime through a direct and indirect-supervision perimeter. This standing architecture continues to reshape EU beneficial-ownership supervision structurally, but it has no direct application to a US state jurisdiction. No AMLA horizon anchors specific to this cycle were carried in the interpreter's regulatory_horizon for this development; the architecture is stated from standing context, and this sub-brief is flagged for limited signal on that specific point.

For Iowa and the United States, the directly relevant development this cycle is domestic: FinCEN's final rule, effective 14 August 2026, permanently exempts US-formed companies and US persons from Corporate Transparency Act beneficial-ownership reporting, leaving only foreign reporting companies within scope. The underlying statute, 31 U.S.C. Section 5336, remains on the books; only the implementing regulation has been narrowed by the final rule. This is a confirmed, Tier 1 sourced structural change that removes the principal federal tool available for surfacing the beneficial owners of domestically formed corporate structures, a category that includes the overwhelming majority of shell-company vehicles used in layering and concealment typologies.

Iowa itself carries no state-specific beneficial-ownership statute or registry. This is a probable finding drawn from the absence of any state-layer instrument identified against the federal action, meaning Iowa-incorporated entities' beneficial-ownership transparency exposure is now set entirely by the narrowed federal layer with no state-level backstop. This is a meaningful structural gap: an entity incorporated in Iowa for domestic purposes now faces no beneficial-ownership disclosure obligation at either the state or federal level, whereas a foreign reporting company operating through Iowa remains within the federal CTA's narrowed but still-active foreign-entity scope.

The practical effect is a widening of the enablement gap for domestic shell structures precisely at the state level where no substitute transparency mechanism exists. Investigators, financial institutions conducting customer due diligence, and law enforcement pursuing beneficial-ownership leads for Iowa-formed entities can no longer rely on the FinCEN BOI registry as a source for that information, and must fall back on state incorporation records, which in Iowa's case do not carry a comparable beneficial-ownership disclosure requirement.

Outlook

Watch for whether FinCEN issues follow-on guidance or rulemaking addressing the transparency gap the domestic exemption leaves for law-enforcement and financial-institution due-diligence purposes, and whether any US state moves to fill that gap with its own beneficial-ownership registry requirement. For the EU architecture, watch for the pace of AMLA's direct and indirect-supervision perimeter build-out as a separate, non-Iowa-specific structural thread to monitor in parallel.

D3 Enabler Jurisdictions and Professional Facilitators

Enabler Jurisdictions and Professional Facilitators

Cambodia is this cycle's clearest enabler-jurisdiction signal. The National Bank of Cambodia's governor has publicly warned that Cambodia risks a third FATF grey-listing absent sustained action against money laundering linked to casino and scam-centre operations. This is a probable finding, corroborated by two independent Tier 3 sources, though no Tier 1 or Tier 2 FATF document confirming an actual re-listing was located this cycle; the warning itself, not a confirmed re-listing, is the substantiated fact. The activities in question have been linked to money laundering, large undeclared cash movements, and cross-border payment abuse, characteristics consistent with the casino- and scam-centre-adjacent enabler-jurisdiction pattern seen elsewhere in the region.

The warning follows a significant enforcement-plus-sanctions convergence event: Prince Group chairman Chen Zhi was arrested and extradited to China, and Prince Bank together with related real-estate entities were forced into liquidation, following joint US-UK sanctions action against the Prince Group network. This is a probable finding at Tier 3 sourcing, but it represents an unusually concrete enforcement outcome for an enabler-jurisdiction case, where sanctions designation converted into an actual arrest, extradition, and forced liquidation rather than remaining at the level of designation alone. This convergence is analytically significant under an architecture-over-incident lens: it demonstrates that Cambodia's domestic enforcement apparatus can act decisively once a sanctioned network's exposure becomes acute, even as the broader grey-list risk warning suggests the underlying structural AML weaknesses that allowed the network to operate persist.

Separately, the FATF's June 2026 Plenary made routine list-composition changes: Iraq and Bosnia and Herzegovina were added to the list of jurisdictions under increased monitoring, while Algeria and Namibia were removed, bringing the total under increased monitoring to twenty-two, with the blacklist of Iran, North Korea, and Myanmar unchanged. This is a confirmed, Tier 1 sourced development that recalibrates the standing enabler-jurisdiction watch list independent of the Cambodia-specific warning.

No Iowa-specific or United States enabler-jurisdiction finding was identified this cycle; the enabler-jurisdiction signal this cycle is exclusively international, centred on Cambodia and the FATF list-composition change.

Outlook

Watch for a Tier 1 FATF statement that either confirms or forecloses the Cambodia re-listing risk currently substantiated only at the level of a central-bank warning, and for further developments in the Prince Group liquidation proceedings that might surface additional enabler-network detail. The broader FATF grey-list composition, now at twenty-two jurisdictions under increased monitoring, remains the standing reference point against which any future Cambodia movement would be measured.

D4 Conflict Finance

Not covered

Conflict Finance is not yet covered for this jurisdiction in this report.

D5 Crypto / Digital Assets / Financial Innovation

Crypto / Digital Assets / Financial Innovation

The lead digital-asset development this cycle is directly anchored to Iowa's own regulatory perimeter: an OCC interpretive letter dated 12 May 2026 held that the National Bank Act preempts Iowa's money-transmitter licensing requirement, and OCC's exclusive visitorial authority, as applied to Fidelity Digital Assets, N.A., a national trust bank offering crypto-custody services. This is a probable finding, sourced from a Tier 1 OCC primary document, that resolves a direct jurisdictional conflict between Iowa's state banking regulator and the OCC over supervisory authority for a bank-chartered crypto custodian operating within the state.

The precedent implication extends well beyond Iowa. Because the OCC's reasoning rests on National Bank Act preemption doctrine rather than any Iowa-specific statutory feature, the ruling is a template with implications for state-level AML and licensing leverage over bank-chartered crypto custodians nationally. Any state seeking to impose money-transmitter licensing, inspection, or visitorial requirements on a nationally chartered trust bank offering digital-asset custody now faces a federal preemption argument with a live interpretive letter behind it. From a financial-integrity perspective, this narrows the set of levers available to state authorities for imposing state-specific AML or consumer-protection conditions on this category of institution, concentrating supervisory authority at the federal, OCC level instead.

This development sits at a genuine architecture-over-incident inflection point: it is not an enforcement action against a bad actor but a structural reallocation of supervisory authority between state and federal regulators over a category of institution, crypto-custody national trust banks, that did not exist in comparable form when existing money-transmitter licensing statutes were drafted. The practical AML consequence is that Iowa's own capacity to compel licensing-linked AML conditions on this specific institutional category is now curtailed, with OCC's federal supervisory framework substituting for whatever state-specific conditions Iowa might otherwise have imposed.

No other Iowa-specific digital-asset or crypto development was identified this cycle; the OCC preemption ruling is the sole substantiated finding in this domain for this jurisdiction.

Outlook

Watch for whether other states attempt to reassert money-transmitter licensing jurisdiction over nationally chartered crypto-custody banks following this ruling, and whether subsequent OCC interpretive letters extend or narrow the preemption reasoning established here. Also watch for whether Iowa's Division of Banking issues any public response or seeks legislative or administrative avenues to preserve some form of state-level oversight over this institutional category.

D6 Compliance Technology & Active Defence

Not covered

Compliance Technology & Active Defence is not yet covered for this jurisdiction in this report.

D7 AML/CTF Regime

Not covered

AML/CTF Regime is not yet covered for this jurisdiction in this report.

Regulatory horizon

No dated horizon items this cycle. 4 items tracked without a confirmed date.

4 pending date · baseline fim-2026-07-05

Role action cards

MLROHigh

Federal BOI registry no longer available for domestic entity beneficial-ownership screening.

FinCEN's permanent domestic exemption removes the federal BOI registry as a screening resource for US-formed customers, requiring MLROs to rely more heavily on internal customer due diligence and state incorporation records, which for Iowa carry no beneficial-ownership disclosure requirement at all.

2 evidence refs

ComplianceHigh

Domestic BOI exemption and Cambodia grey-list warning both raise due-diligence burden in different registers.

The compliance function faces a dual signal: reduced federal BOI data availability for domestic entities, and elevated enhanced-due-diligence rationale for Cambodia-linked counterparties given the grey-list re-listing warning and the Prince Group liquidation.

3 evidence refs

LegalAssessed

OCC preemption ruling resolves a direct state-federal supervisory conflict over crypto-custody licensing.

Legal counsel advising bank-chartered crypto custodians or their state regulators now has a live interpretive-letter precedent establishing National Bank Act preemption of state money-transmitter licensing, relevant to any similar jurisdictional dispute.

1 evidence refs

BoardAssessed

Federal beneficial-ownership transparency tool has been structurally narrowed.

The board should note that a previously available federal transparency mechanism for domestic shell-company structures has been permanently curtailed at the regulatory level, a durable enablement shift with reputational and institutional financial-crime-risk implications for any domestic corporate-structure exposure.

2 evidence refs

CTOAssessed

OCC ruling reallocates supervisory authority over crypto-custody infrastructure from state to federal level.

For technology teams supporting bank-chartered crypto-custody infrastructure, the OCC preemption ruling changes which regulator's technical, reporting, and audit expectations govern, shifting compliance-technology design toward federal OCC standards rather than state money-transmitter requirements.

1 evidence refs

RiskHigh

Enabler-jurisdiction risk in Cambodia is rising while domestic BO transparency is falling, a converging exposure pattern.

Risk functions should register both the Cambodia grey-list re-listing warning and the domestic BOI exemption as concurrent enablement-side developments increasing the difficulty of surfacing beneficial ownership and jurisdictional risk for cross-border counterparties.

5 evidence refs

OperationsPossible

No material change for this persona this cycle.

No material change for this persona this cycle

AuditAssessed

BOI registry narrowing removes a documented external verification source for domestic beneficial-ownership audit trails.

Internal audit should note that control testing which previously referenced the FinCEN BOI registry as an external verification point for domestic entities no longer has that source available, requiring a documented adjustment to control-testing scope.

2 evidence refs

Decision lens

MLRO

Federal BOI registry no longer available for domestic entity beneficial-ownership screening.

Compliance

Domestic BOI exemption and Cambodia grey-list warning both raise due-diligence burden in different registers.

Legal

OCC preemption ruling resolves a direct state-federal supervisory conflict over crypto-custody licensing.

Board

Federal beneficial-ownership transparency tool has been structurally narrowed.

CTO

OCC ruling reallocates supervisory authority over crypto-custody infrastructure from state to federal level.

Risk

Enabler-jurisdiction risk in Cambodia is rising while domestic BO transparency is falling, a converging exposure pattern.

Operations

No material change for this persona this cycle.

Audit

BOI registry narrowing removes a documented external verification source for domestic beneficial-ownership audit trails.

Shared evidence: 5 refs

Scenario sketches

AMLA supervisory transition and cross-border obliged-entity evasion pressure

As the AMLA Regulation's direct and indirect-supervision perimeter matures alongside the directly applicable AMLR and per-state 6AMLD transposition, cross-border obliged entities currently supervised unevenly across national authorities could face a more harmonised but also more exacting EU-level supervisory layer. Illustratively, entities that previously navigated divergent national AML supervisory standards by domiciling activity in the most permissive available Member State could see that arbitrage narrowed as AMLA's direct-supervision perimeter extends to higher-risk cross-border obliged entities. This is an illustrative structural sketch of how the supervisory architecture could reshape evasion incentives, not an observed development or a prediction of a specific outcome.

Illustrative scenario for analytical orientation only. Not compliance advice, not a prediction, and not a statement of observed fact.

Standing trackers (T1–T6)

Tracker	Status	Note
T1 · Russian Sanctions-Evasion Architecture	stable	No material change identified this cycle; Yemen/Houthi channel check returned no material change.
T2 · EU AML Package / AMLA	no_change	No AMLR/6AMLD/AMLA supervisory-perimeter movement identified this cycle.
T3 · FATF Grey List	material_change	June 2026 Plenary: Iraq and Bosnia and Herzegovina added; Algeria and Namibia removed. 22 jurisdictions now under increased monitoring.
T4 · Beneficial-Ownership Register Status	worsening	FinCEN's 11 August 2026 final rule permanently narrows the US federal BOI registry to foreign reporting companies only.
T5 · Crypto & Digital-Asset Integrity	watch	OCC interpretive letter on National Bank Act preemption of state MTL licensing for a crypto-custody national trust bank.
T6 · Sanctions Regime Divergence	stable	No new cross-bloc divergence identified beyond routine OFAC SDN updates not cross-checked against EU/UK this cycle.

Registers

Enforcement actions

Iowa AG filed suit alleging Bitcoin Depot's kiosks in the state were instruments of massive fraud, with an analysis of Iowa transactions between October 2021 and July 2024 suggesting more than half involved scams, costing Iowans over $20 million. 26 Feb 2025
Iowa AG sued CoinFlip alleging roughly 90% of transactions examined on its Iowa ATM network were scam-related and that all of its top 20 Iowa users were scam victims, calling the firm a 'willfully blind participant' in victimizing Iowans. 26 Feb 2025
FinCEN issued Notice FIN-2025-NTC1, a national advisory on illicit finance risks at crypto ATMs, explicitly citing the Iowa Attorney General's February 2025 lawsuits as evidence of the scale of kiosk-enabled fraud and setting AML/CFT red-flag expectations for financial institutions. 4 Aug 2025
OFAC designated facilitators of DPRK government-orchestrated IT worker fraud schemes that generated nearly $800 million in 2024 for DPRK weapons programs, including 21 cryptocurrency addresses; the scheme systematically targets US businesses nationwide, creating exposure for Iowa-based employers of contracted remote IT labor. 12 Mar 2026

Sanctions changes

OFAC designated six individuals and two entities, including Vietnam- and China-based currency converters and a DPRK IT-management company (Amnokgang Technology Development Company), for facilitating DPRK IT-worker fraud schemes funding WMD/ballistic missile programs, with 21 crypto addresses listed. 12 Mar 2026
US Treasury delisted the Tornado Cash mixer in March 2025, following a US court ruling that OFAC lacked authority to sanction the immutable smart-contract protocol, reversing the original 2022 designation. 1 Mar 2025
OFAC, jointly with FinCEN and in coordination with the UK's FCDO, designated the Prince Group Transnational Criminal Organization and 146 associated targets (including Chen Zhi) for operating massive 'pig butchering' scam and money-laundering operations — the same laundering-network typology into which US crypto-ATM (including Iowa) scam proceeds are shown to flow. 14 Oct 2025

Regulatory horizon (register)

Resolution of Iowa AG litigation vs. CoinFlip/Bitcoin Depot
FinCEN AML/CFT Program reform NPRM comment deadline
Investment Adviser AML Rule new effective date
US FATF 8th Enhanced Follow-up Report (BO access gaps)

Active schemes

[HIGH] Crypto-ATM elder-fraud cash-to-crypto laundering pipeline
[CRITICAL] DPRK IT-worker fraudulent-employment revenue scheme
[HIGH] Post-CTA-rollback shell-entity beneficial-ownership opacity
Foreign farmland-ownership opacity in Iowa's agricultural sector

Sources

Coverage gaps

Iowa has no independent state AML examination cadre for lice…

Iowa has no independent state AML examination cadre for licensed money-services businesses beyond registration/licensing under Iowa Code ch. 533C; supervisory depth for BSA compliance depends on federal delegation (FinCEN/federal banking agencies), leaving state-level supervisory capacity thin relative to the scale of MSB/crypto-ATM activity within the state.

The March 2025 federal CTA/BOI interim final rule exempted a…

The March 2025 federal CTA/BOI interim final rule exempted all US-formed entities, including Iowa LLCs and corporations, from beneficial ownership reporting to FinCEN, restoring a beneficial-ownership opacity gap that Iowa has no independent state-level registry to fill.

Despite Iowa's 2025 crypto-ATM transaction-cap and fee-cap s…

Despite Iowa's 2025 crypto-ATM transaction-cap and fee-cap statute, national FBI IC3 data show crypto-ATM fraud complaints and losses continuing to rise sharply (99% complaint increase in 2024, losses projected to exceed $380 million in 2025), indicating state-level transactional caps alone have not closed the underlying enforcement/detection gap.

Independent Iowa-specific investigative/NGO reporting (OCCRP…

Independent Iowa-specific investigative/NGO reporting (OCCRP, Global Witness, ICIJ standalone Iowa-focused pieces) is sparse; available Iowa-specific findings largely surface as secondary references within national crypto-ATM and CTA coverage rather than dedicated Iowa-focused investigations, and no direct Iowa.gov primary URL for the AG's press release was independently verified in this research pass.

Evidence

Confidence-tiered claims

No structured claims published for this jurisdiction yet.