Financial Integrity Monitor
Sign in

Not every instrument is backed by its official text yet. At least one law or rulebook covered here has no official source (tier 1) retrieved for it yet. No finding on this page is shown with confidence above “Probable” until stronger sources are retrieved.

Financial Integrity Monitor

United States — Kentucky US-KY

Domains covered
8 of 8
Sources
144
Role actions
8
Horizon <90d
0
Jurisdiction profile
FATF status: Clean Tier: B Risk direction: Increasing Enablement vs enforcement: Mixed

Kentucky operates under the unified U.S.

Morefederal BSA/AML framework administered by FinCEN, OFAC and federal banking regulators, with the Kentucky Department of Financial Institutions (KDFI) licensing and examining state-chartered banks, credit unions, and money transmitters (KRS Ch. 286) via NMLS. No state-level beneficial-ownership registry exists.

Key deficiencies
  • No state-level beneficial ownership backstop now that federal CTA/BOI reporting has been narrowed to foreign reporting companies only, reducing visibility into Kentucky-formed LLCs
  • Pari-mutuel horse-racing wagering (Churchill Downs, Keeneland) is structurally exempted from the BSA casino definition despite being a large cash-intensive sector
  • Sparse public disclosure of Kentucky-specific federal enforcement actions in the current window relative to national volume, limiting independent verification of local enforcement intensity
  • DOJ's 2025 deprioritization of standalone BSA/regulatory-only digital-asset violations may reduce enforcement pressure on Kentucky-based money services businesses and CVC kiosk operators absent proof of willful misconduct
Recent developments (18m)
  • FinCEN's March 2025 interim final rule (effective nationally, including Kentucky-formed entities) exempted domestic reporting companies and their beneficial owners from CTA beneficial ownership reporting
  • FinCEN's February 2025 Consent Order against Brink's for unregistered money transmission bears on Kentucky's cash-in-transit/armored-currency logistics sector
  • FinCEN's August 2025 Notice on convenience-store/gas-station CVC kiosks flags a typology directly applicable to Kentucky's rural and small-town MSB landscape
  • FinCEN's October 2025 Section 311 special-measure designation of Huione Group binds all U.S. financial institutions, including Kentucky-chartered banks and credit unions, to enhanced due diligence

United States federal law that applies in United States – Kentucky is covered once, on the United States page. This page covers United States – Kentucky’s own layer: its own law, regulators and enforcement.

Brief

Lead signal

Lead Signal

Kentuckys Department of Financial Institutions has joined a 34-state settlement with crypto-kiosk operator Coinme Inc., resolving findings of sustained deficiencies in transaction monitoring, know-your-customer screening, suspicious-activity reporting and enhanced due diligence. The coalition settlement totals 2.5 million dollars, with Kentuckys allocated share set at 62,853.57 dollars. As part of the terms, Coinme has agreed to wind down its virtual-currency kiosk operations in the state by January 1, 2027, or face a further 4 million dollar penalty. The settlement was reached through a coordinated multistate examination rather than a Kentucky-specific routine review, a distinction that matters analytically: the states existing money-transmitter licensing gate, set out in KRS 286.11-013, requires applicants to meet a minimum net-worth floor of 500,000 dollars, but that gatekeeping threshold did not itself surface the ongoing control failure. Discovery came from the collective examination capacity of the multistate coalition, not from Kentuckys own supervisory apparatus acting alone.

Read full brief

Lead Signal

Kentuckys Department of Financial Institutions has joined a 34-state settlement with crypto-kiosk operator Coinme Inc., resolving findings of sustained deficiencies in transaction monitoring, know-your-customer screening, suspicious-activity reporting and enhanced due diligence. The coalition settlement totals 2.5 million dollars, with Kentuckys allocated share set at 62,853.57 dollars. As part of the terms, Coinme has agreed to wind down its virtual-currency kiosk operations in the state by January 1, 2027, or face a further 4 million dollar penalty. The settlement was reached through a coordinated multistate examination rather than a Kentucky-specific routine review, a distinction that matters analytically: the states existing money-transmitter licensing gate, set out in KRS 286.11-013, requires applicants to meet a minimum net-worth floor of 500,000 dollars, but that gatekeeping threshold did not itself surface the ongoing control failure. Discovery came from the collective examination capacity of the multistate coalition, not from Kentuckys own supervisory apparatus acting alone.

This is a structural finding as much as an enforcement one. A state that licenses a virtual-currency kiosk operator under its money-transmitter statute is making an implicit representation about its supervisory reach over that operator going forward. Where the mechanism that actually detects a sustained AML control failure is a multistate coalition rather than the licensing states own routine examination, the licensing gate functions more as an entry filter than as an ongoing assurance mechanism. That gap between entry control and continuing supervision is the more durable signal here, independent of whatever Coinme-specific remediation follows.

Other Developments

Kentuckys kiosk-specific licensing framework remains on the horizon, not yet in force. Senate Bill 189, enacted in April 2026, establishes a dedicated regulatory framework for virtual-currency kiosk operators, including consumer-protection provisions, but its effective date is April 30, 2027. The Coinme settlement therefore lands in a period where kiosk operators in Kentucky are supervised under the general money-transmitter statute, KRS Chapter 286, pending the more tailored kiosk regime taking effect. The sequencing is notable: enforcement against a kiosk operators AML deficiencies has arrived before the state-specific kiosk licensing architecture designed partly to address consumer and integrity risk in that same channel is operative.

The settlement structure itself builds in a forcing function. Rather than a one-time penalty, the agreement ties continued kiosk operation in Kentucky to a hard deadline, with an additional, larger penalty held in reserve if Coinme does not exit kiosk operations in the state by the start of 2027. This wind-down-or-pay structure functions as a staged exit mechanism, giving the operator a defined runway while keeping a materially larger financial consequence in place as the alternative to compliance with the wind-down term.

Cross-Monitor Connections

The multistate character of the Coinme settlement is the detail most likely to matter to adjacent monitoring lines. A single state apparatus with a licensing gate did not generate the finding; a coordinated examination spanning dozens of state regulators did. Where digital-asset kiosk infrastructure is monitored for its use as an off-ramp or layering point in illicit-finance typologies more broadly, the relevant supervisory lesson is that state-level entry licensing alone is an insufficient proxy for ongoing control adequacy, and that detection capacity is increasingly a function of coalition-level examination rather than any single states resources. This has a direct bearing on how confidently a kiosk operators state-by-state licensing footprint should be read as a signal of control quality in any cross-border or cross-sector financial-crime risk assessment that touches cash-to-crypto conversion infrastructure.

Outlook

The near-term marker to watch is the January 1, 2027 deadline for Coinme to exit Kentucky kiosk operations under the settlement terms, with the additional 4 million dollar penalty as the consequence if that deadline is not met. Separately, Kentuckys own kiosk-specific licensing framework under Senate Bill 189 is scheduled to take effect on April 30, 2027, which will shift the applicable supervisory regime for any remaining or future kiosk operators in the state from the general money-transmitter statute to a framework built with this operator type specifically in mind. Whether the new framework closes the detection gap illustrated by the Coinme matter, or simply adds a licensing layer on top of the same examination capacity constraints, is not yet determinable from the record available at this time.

Earlier periodic briefs (5)
3 Nov 2026 · fim-2026-11-03

Lead Signal

Kentucky's Department of Financial Institutions has joined thirty-three other state regulators in a 2.5 million dollar multistate settlement with Coinme Inc. over Bank Secrecy Act and anti-money-laundering program deficiencies, with Kentucky allocated 62,853.57 dollars of the total. The settlement is notable less for its size than for what it reveals about the limits of state-level licensing as a control: Coinme operated as a licensed money transmitter and virtual-currency kiosk network across the settling states, including Kentucky, while its BSA/AML program fell short of what examiners required. The deficiency was not caught through routine Kentucky-specific supervision but surfaced through a coordinated, examination-led, multistate process led by the Conference of State Bank Supervisors. As part of the settlement, Coinme has agreed to wind down its virtual-currency kiosk operations by January 1, 2027, or face an additional four million dollar penalty, a term that effectively phases out a kiosk-based cash-to-crypto channel across the settling states rather than simply fining past conduct.

The structural point is that Kentucky's existing licensing gate for money transmitters, set out in KRS 286.11-013, requires every applicant to post a surety bond of at least 500,000 dollars, with the commissioner able to raise that floor as high as five million dollars based on an applicant's financial condition, net worth, or transaction volume. That capital and conduct gate did not, on its own, prevent a sustained AML control gap at an operating, licensed kiosk network. The gap was closed by supervisory cooperation across states rather than by the design of Kentucky's own licensing threshold.

Other Developments

A kiosk-specific licensing framework moves toward commencement. Kentucky enacted SB 189 in April 2026, establishing a dedicated licensing and consumer-protection framework specifically for virtual-currency kiosk operators, administered by the Department of Financial Institutions. The framework is not yet in force; its provisions are scheduled to take effect on April 30, 2027. Once operative, kiosk operators will need a DFI licence and will be subject to consumer-protection conditions tailored to the kiosk channel, layered on top of the general money-transmitter regime that already applies under KRS 286.11-013. The timing means the Coinme settlement's wind-down deadline for kiosk operations, January 1, 2027, falls before SB 189 itself takes effect, so the near-term disposition of kiosk activity in Kentucky will be governed by the settlement and the existing general licensing statute rather than by the kiosk-specific framework still pending commencement.

The settlement's own-state paper trail remains incomplete. As at the point of this review, no Kentucky-specific consent order mirroring the multistate settlement had yet been confirmed on the Department of Financial Institutions' own public channels; the Kentucky allocation and participation are confirmed through the Governor's office release and the national CSBS-linked reporting, but the state regulator's own primary document was not yet independently located.

Cross-Monitor Connections

The Coinme settlement sits at the intersection of crypto-asset oversight and the enabler-jurisdiction question: a state that licenses a money-services business, including a virtual-currency kiosk operator, under a general-purpose statute is not thereby guaranteed early detection of a sustained BSA/AML program failure inside that licensed entity. The detection mechanism that worked here was horizontal, cross-state supervisory coordination rather than the vertical design of any single state's licensing threshold. That has a direct bearing on how compliance technology and transaction-monitoring investment gets prioritized by multistate money-services businesses operating kiosk networks, since the settlement's wind-down term effectively removes a cash-to-crypto channel from the market across more than thirty states on a fixed timetable, concentrating any residual kiosk-channel risk into whatever period remains before January 1, 2027.

Outlook

The near-term calendar in Kentucky is anchored by two dates that do not align: Coinme's settlement-driven obligation to cease kiosk operations by January 1, 2027, and SB 189's own commencement, scheduled for April 30, 2027. Firms and examiners should expect the general money-transmitter licensing regime under KRS 286.11-013, including its surety-bond floor, to remain the operative framework for any kiosk-adjacent activity in the intervening months, with the kiosk-specific consumer-protection layer arriving only once SB 189 takes effect as scheduled. Whether Kentucky's own consent order becomes publicly available in the interim will determine how much independent verification is possible beyond the multistate settlement's own terms.

25 Oct 2026 · fim-2026-10-25

Lead Signal

Kentucky has enacted a standalone licensing and anti-money-laundering program requirement for virtual-currency kiosk operators under SB189, creating a new Subtitle 13 of KRS Chapter 286. Signed by Governor Beshear on April 13, 2026 and operative from April 30, 2027, the statute requires kiosk operators to maintain anti-fraud and AML policies consistent with the Bank Secrecy Act, including designation of a chief compliance officer, alongside a $500,000 minimum net worth and a surety bond. This is a probable-confidence finding drawn from secondary legal commentary; the primary statutory text and its KRS Subtitle 13 codification were not independently retrieved, so the architecture is read through a Tier-3 lens pending direct verification.

The significance of SB189 is structural rather than incidental. It extends Kentucky's AML-relevant regulatory perimeter into a device category -- physical cash-to-crypto kiosks -- that has sat outside dedicated state oversight in many US jurisdictions, and it does so by grafting a BSA-aligned compliance-program duty directly onto the state licensing instrument rather than leaving AML obligations to be inferred from the federal money-services-business framework alone.

Other Developments

Federal prosecution activity continues episodically. The U.S. Attorney's Office for the Western District of Kentucky indicted five defendants on August 19, 2026 in connection with deed-theft and vehicle-title fraud schemes carrying associated money-laundering counts. This is a confirmed federal Bank Secrecy Act and Title 18 action. It is properly read as episodic enforcement rather than an architecture-level shift: Kentucky has no separate state money-laundering supervisory regime, and the prosecution proceeds entirely under the existing federal framework.

No change to the baseline federal AML/CTF framework governing Kentucky-domiciled money transmitters. The Bank Secrecy Act and FinCEN's supervisory and registration architecture remain the governing regime for the state's money-services businesses outside the new kiosk-specific lane created by SB189.

Cross-Monitor Connections

The SB189 kiosk licensing architecture sits directly at the intersection of this monitor's crypto/digital-asset typology work and the World Payments Monitor's licensing and market-access tracking: the same statute that creates the AML program duty assessed here also creates the underlying DFI licensing lane, net-worth, and bond requirements that are a payments-market-access question. It likewise intersects with the Crypto monitor's crypto-licensing module, where the same instrument is assessed for its consumer-facing and classification implications. Readers tracking the kiosk-operator obligation across all three lenses should expect the same underlying fact -- the April 2026 enactment, the April 2027 effective date, and the BSA-aligned compliance-program duty -- to recur with different emphasis in each monitor.

Outlook

The operative date for SB189's AML program duty is April 30, 2027, as scheduled; nothing in the current evidentiary record indicates delay or amendment to that timeline. Firms intending to operate virtual-currency kiosks in Kentucky after that date will need a designated chief compliance officer and a BSA-aligned program in place by commencement. Independent retrieval of the primary statutory text remains an open item for confirming the full scope of the AML program duty beyond what secondary commentary describes, and the federal prosecutorial posture in the Western District is likely to continue generating episodic BSA/money-laundering cases that do not, by themselves, signal a change in Kentucky's broader enabling environment.

11 Oct 2026 · fim-2026-10-11

Lead Signal

Kentucky has enacted a standalone licensing and anti-money-laundering program requirement for virtual-currency kiosk operators under SB189, creating a new Subtitle 13 of KRS Chapter 286. Signed by Governor Beshear on April 13, 2026 and operative from April 30, 2027, the statute requires kiosk operators to maintain anti-fraud and AML policies consistent with the Bank Secrecy Act, including designation of a chief compliance officer, alongside a $500,000 minimum net worth and a surety bond. This is a probable-confidence finding drawn from secondary legal commentary; the primary statutory text and its KRS Subtitle 13 codification were not independently retrieved this cycle, so the architecture is read through a Tier-3 lens pending direct verification.

The significance of SB189 is structural rather than incidental. It extends Kentucky's AML-relevant regulatory perimeter into a device category -- physical cash-to-crypto kiosks -- that has sat outside dedicated state oversight in many US jurisdictions, and it does so by grafting a BSA-aligned compliance-program duty directly onto the state licensing instrument rather than leaving AML obligations to be inferred from the federal money-services-business framework alone.

Other Developments

Federal prosecution activity continues episodically. The U.S. Attorney's Office for the Western District of Kentucky indicted five defendants on August 19, 2026 in connection with deed-theft and vehicle-title fraud schemes carrying associated money-laundering counts. This is a confirmed federal Bank Secrecy Act and Title 18 action. It is properly read as episodic enforcement rather than an architecture-level shift: Kentucky has no separate state money-laundering supervisory regime, and the prosecution proceeds entirely under the existing federal framework.

No change to the baseline federal AML/CTF framework governing Kentucky-domiciled money transmitters. The Bank Secrecy Act and FinCEN's supervisory and registration architecture remain the governing regime for the state's money-services businesses outside the new kiosk-specific lane created by SB189.

Cross-Monitor Connections

The SB189 kiosk licensing architecture sits directly at the intersection of this monitor's crypto/digital-asset typology work and the World Payments Monitor's licensing and market-access tracking: the same statute that creates the AML program duty assessed here also creates the underlying DFI licensing lane, net-worth, and bond requirements that are a payments-market-access question. It likewise intersects with the Crypto monitor's crypto-licensing module, where the same instrument is assessed for its consumer-facing and classification implications. Readers tracking the kiosk-operator obligation across all three lenses should expect the same underlying fact -- the April 2026 enactment, the April 2027 effective date, and the BSA-aligned compliance-program duty -- to recur with different emphasis in each monitor.

Outlook

The operative date for SB189's AML program duty is April 30, 2027, as scheduled; nothing in the current evidentiary record indicates delay or amendment to that timeline. Firms intending to operate virtual-currency kiosks in Kentucky after that date will need a designated chief compliance officer and a BSA-aligned program in place by commencement. Independent retrieval of the primary statutory text remains an open item for confirming the full scope of the AML program duty beyond what secondary commentary describes, and the federal prosecutorial posture in the Western District is likely to continue generating episodic BSA/money-laundering cases that do not, by themselves, signal a change in Kentucky's broader enabling environment.

28 Sep 2026 · fim-2026-09-28

Lead Signal

Kentucky enacted SB 189, creating a standalone licensing regime for virtual-currency-kiosk (crypto ATM) operators under a new Subtitle 13 of KRS Chapter 286, signed 13 April 2026 and effective 30 April 2027. The regime targets a specific typology: cash-out of romance and impersonation scam proceeds through unmonitored crypto kiosks. New licensees will require DFI registration through the Nationwide Multistate Licensing System, minimum net worth and surety bond starting at $500,000 each and scaling to $5,000,000, transaction caps, and mandatory anti-fraud warning notices at each kiosk. DFI implementing regulations are due by 1 January 2027, four months ahead of the statutory effective date, leaving a transitional window during which currently operating kiosk businesses are not yet subject to the licensing requirement despite the underlying statute having been enacted.

Other Developments

Kentucky DFI exercised emergency-suspension authority against a non-depository licensee. The Department of Financial Institutions issued an Emergency Order of Suspension against MWG Enterprises, LLC, a deferred-deposit and check-cashing licensee, on 17 July 2026. The underlying violation basis was not detailed in the secondary source reached this cycle, but the action evidences an active state supervisory posture toward non-depository licensees rather than regulatory forbearance.

The standing money-transmitter and AML baseline remains BSA-referential. Kentucky money transmitters continue to be licensed and supervised by DFI under KRS Chapter 286 Subtitle 11, with licensees statutorily obliged to comply with applicable federal law, including the Bank Secrecy Act, rather than a distinct state AML statute. No state-level financial intelligence unit exists in Kentucky; SAR filing and reporting-threshold obligations run through the federal BSA/FinCEN framework.

Cross-Monitor Connections

The SB 189 kiosk regime intersects directly with world-payments' tracking of Kentucky's licensing and market-access architecture, since the new kiosk licence class is structured as a standalone addition alongside, rather than a replacement of, the general money-transmitter licence world-payments monitors for non-bank payment institutions. It also intersects with advennt's gambling-regulatory coverage only at the level of general consumer-fraud-protection architecture; no direct crossover between the kiosk regime and Kentucky's 2026 gambling-law changes was identified this cycle.

Outlook

The defining watch item is publication of DFI's implementing regulations by the 1 January 2027 statutory deadline, which will determine the practical mechanics of net-worth and surety-bond scaling, transaction-cap thresholds, and audit or reporting cadence for kiosk operators ahead of the 30 April 2027 effective date. The transitional gap between statutory enactment and full operative effect leaves currently operating kiosk businesses outside the licensing perimeter in the interim, a window structurally significant for a typology-driven regime built around cash-out risk. Separately, the underlying violation basis for the MWG Enterprises suspension, not independently retrieved from the primary DFI order this cycle, would sharpen the picture of Kentucky's non-depository enforcement posture if surfaced in a future cycle.

14 Sep 2026 · fim-2026-08-05

Lead Signal

Sanctions architecture and beneficial-ownership transparency moved in opposite directions this cycle, and the divergence is the most consequential single thread running through the six domains that saw material change. The EU Council's 20th sanctions package (23 April 2026) added 46 vessels to the Russia shadow-fleet list, bringing the total to 632, continuing an escalating designation architecture aimed at oil-export evasion infrastructure. At the same time, a May 2026 GAO report found that FinCEN's 2025 interim final rule has eliminated beneficial-ownership-information reporting for over 99 percent of previously covered US entities, a retrenchment that stands in sharp contrast to the European Union's parallel move toward a directly applicable, three-instrument AML architecture. Read together, these two developments describe a structural two-speed transparency regime opening up between the two largest Western economic blocs, with material consequences for correspondent banks and cross-border obliged entities trying to calibrate customer due diligence to two diverging standards.

Other Developments

Cambodia's casino sector absorbed a significant enforcement shock. A nationwide inspection found 72 of the country's 195 licensed casinos implicated in online fraud, resulting in 19 revocations, 30 suspensions, and 23 lapses. Long-standing weak fit-and-proper supervision of casinos and other designated non-financial businesses and professions has been an enduring FATF-flagged vulnerability for Cambodia, and the government's own acknowledgment of re-grey-listing risk ahead of the October 2026 Plenary makes this an unusually self-aware admission of structural weakness rather than a one-off enforcement episode.

Conflict-linked financial flows intensified across three separate theaters. OFAC and FinCEN jointly designated two Mexican nationals and nine entities tied to CJNG fuel-smuggling, pairing the sanctions action with a supplemental FinCEN alert; fuel theft is now flagged as the most significant non-narcotics illicit-revenue source for Mexican cartels. Separately, OFAC designated 21 individuals and entities plus one vessel for financing Houthi oil-smuggling operations, with UAE- and Oman-based front companies and financial facilitators enabling the network.

US digital-asset AML/CFT coverage took a concrete step forward. FinCEN and OFAC jointly published an NPRM under the GENIUS Act that would classify permitted payment stablecoin issuers as BSA financial institutions for the first time, treating AI and federated-learning monitoring tools as a mitigating supervisory factor. FinCEN separately proposed shifting the AML/CFT program standard itself from a reasonably designed technical-compliance test to an outcome-based effectiveness standard, with a two-tier program-establishment and implementation enforcement framework; the comment period on that proposal closed 9 June 2026.

The FATF grey list moved in both directions. The 19 June 2026 Plenary added Iraq and Bosnia and Herzegovina while removing Algeria and Namibia, holding the list at 22 jurisdictions; the black list of North Korea, Iran, and Myanmar was unchanged.

Cross-Monitor Connections

The Russia shadow-fleet designation architecture connects directly to conflict-finance and commodity-flow monitoring: sanctioned oil-export evasion infrastructure is the same infrastructure that state-capture and commodity-flow trackers watch for revenue diversion. The Houthi and CJNG fuel-theft findings are conflict-finance developments in their own right and should route to any dedicated conflict-finance or commodity-integrity tracking alongside this brief. Cambodia's casino-sector fraud findings intersect with broader online-fraud and information-operations monitoring, since the fraud typologies implicated in the inspection frequently rely on the same infrastructure used to obscure illicit online-scam proceeds. The GENIUS Act stablecoin NPRM is a financial-innovation development with direct relevance to any digital-asset or crypto-market-structure tracking, given its first-of-a-kind BSA classification of stablecoin issuers.

Outlook

The most consequential near-term marker to watch is the October 2026 FATF Plenary, where Cambodia's self-acknowledged re-grey-listing risk could crystallize into a formal listing decision. On the US side, the GENIUS Act stablecoin rule and the FinCEN AML/CFT program-effectiveness NPRM are both moving toward finalization, and either could materially reset compliance expectations for banks and crypto-asset operators over the coming cycles. The structural divergence between US beneficial-ownership retrenchment and EU AMLR/AMLD6/AMLA consolidation is a multi-cycle theme rather than a single-week event, and its trajectory should be tracked as a standing architecture question rather than as a discrete news item. This is illustrative orientation for analytical purposes only, not a prediction and not compliance advice.

Domain intelligence (D1–D8)

D1 Sanctions

no_changeno_changestanding position

Sanctions Architecture and Evasion

The central sanctions-architecture development this cycle is a factual correction rather than a new event: FinCEN's Section 311 special measure against Huione Group, effective 17 November 2025 under 31 CFR 1010.664, is active and expanding, not disrupted. A 25 June 2026 Federal Register proposed rule confirms the existing measure remains in force and proposes extending it to successor entity H-Pay Service PLC. Read architecturally, this is the significant fact: sanctions designations targeting laundering infrastructure do not eliminate that infrastructure so much as force it to reconstitute under new corporate vehicles, and the regulatory response - extending the special measure to the successor entity - demonstrates an architecture built to track that reconstitution rather than one that assumes a single designation closes the matter.

Continue reading

Alongside this, Executive Order 14157 (20 January 2025) created an interagency process designating Mexico-based cartels as Foreign Terrorist Organizations and Specially Designated Global Terrorists, expanding BSA and OFAC material-support exposure for institutions handling proceeds transiting drug-trafficking corridors, including corridors touching Kentucky. In May 2025, OFAC separately designated the Karen National Army and its leader Saw Chit Thu for facilitating cyber-scam compounds and human trafficking on the Myanmar-Thai border. Both actions extend a distinctly US sanctions architecture - cartel-FTO overlay and scam-compound-linked SDN designation - into terrain with no direct EU or UK equivalent. Kentucky's export-oriented industries, including automotive and aerospace parts manufacturing and distilled spirits, together with its financial institutions, face compliance friction reconciling this US-only designation set against divergent EU sanctions priorities, which in the same period concentrated on Russian crypto-sanctions evasion and instruments such as the A7A5 stablecoin. This is a structural rather than episodic divergence: it reflects differing strategic priorities between sanctioning blocs rather than a temporary gap awaiting alignment.

Kentucky itself has no identified transit or intermediary role in Russian sanctions-evasion architecture. Its exposure to this domain is indirect, running through federal OFAC compliance obligations that bind Kentucky-chartered banks and its export-oriented manufacturing base regardless of any state-specific nexus.

Outlook

The proposed rule extending the Huione special measure to H-Pay Service PLC is expected to progress toward finalisation around the third quarter of 2026, and covered financial institutions should anticipate extending existing Huione enhanced due-diligence screening to the named successor once that rule is finalised. The cartel-FTO and Southeast Asia scam-compound designation architecture is likely to continue generating US-only sanctions actions with no EU/UK counterpart, sustaining the sanctions-regime divergence exposure already documented for Kentucky's trade-exposed sectors. This is architectural forward orientation rather than a prediction of any specific enforcement outcome.

Judgment: No US-KY-specific sanctions signal found this cycle. Uncertain
Cumulative analysis

Sanctions Architecture and Evasion — Cumulative Analysis

This is the first cycle establishing a sanctions-architecture baseline for the US-KY jurisdiction profile, and its defining feature is a correction rather than a discovery: FinCEN's Section 311 special measure against Huione Group, effective 17 November 2025 under 31 CFR 1010.664, was mischaracterised in an earlier draft as disrupted. Independent verification against a 25 June 2026 Federal Register proposed rule confirms the measure remains active and is being expanded to a named successor entity, H-Pay Service PLC. The durable lesson from this correction is architectural: a laundering-infrastructure designation of this kind should be read as an ongoing containment structure that tracks corporate reconstitution, not as a terminal enforcement event whose disruption effect can be assumed to persist without verification each cycle.

Built around this corrected baseline, the jurisdiction's sanctions-architecture exposure has two further durable dimensions. First, a cartel-and-terrorism-designation overlay: Executive Order 14157 (20 January 2025) designated Mexico-based cartels as Foreign Terrorist Organizations and Specially Designated Global Terrorists, expanding BSA/OFAC material-support exposure for institutions handling proceeds transiting drug-trafficking corridors that include Kentucky. Second, a Southeast Asia scam-compound designation track, illustrated by OFAC's May 2025 sanctioning of the Karen National Army and its leader Saw Chit Thu for facilitating cyber-scam compounds and human trafficking on the Myanmar-Thai border. Neither designation set has a direct EU or UK equivalent, and this asymmetry is not incidental: it reflects a structural divergence in sanctioning-bloc priorities, with EU action in the same period concentrated on Russian crypto-sanctions evasion (including instruments such as the A7A5 stablecoin) rather than cartel or scam-compound financing.

The practical consequence for Kentucky is compliance friction rather than direct exposure. The state has no identified transit or intermediary role in Russian sanctions-evasion architecture, and its financial institutions inherit federal OFAC obligations wholesale rather than operating under any state-specific sanctions program. But Kentucky's export-oriented industries - automotive and aerospace parts, distilled spirits - alongside its banks, must reconcile a US-only designation architecture (cartel-FTO, Huione 311, scam-compound SDN designations) against a materially different EU/UK sanctions posture, a friction point that is structural rather than episodic and unlikely to resolve through convergence in the near term.

Outlook

Going forward, the proposed extension of the Huione special measure to H-Pay Service PLC is the most concrete near-term marker to track, expected to progress toward finalisation around the third quarter of 2026; covered institutions should extend Huione enhanced due-diligence screening to the named successor once finalised. More broadly, the corrected Huione status is a methodological caution: successor-entity tracking, not designation-event tracking, is the correct unit of analysis for this scheme going forward. The cartel-FTO and scam-compound designation tracks are likely to continue generating US-only sanctions actions that further widen, rather than narrow, the divergence from EU/UK priorities, sustaining Kentucky's structural compliance-friction exposure. This is architectural orientation, not a prediction of specific future designations.

domain_sub_briefs · D1 · Cumulative analysis
Standing baseline position

EU shadow-fleet vessel designations now total 632 following the 20th sanctions package (April 2026); UK independently applying UNCLOS-statelessness boarding doctrine.

Periodic updates (1)
14 Sep 2026 · fim-2026-08-05

Sanctions Architecture and Evasion

Russia's shadow-fleet evasion infrastructure remains the dominant sanctions-architecture story this cycle. The EU Council's 20th sanctions package, adopted 23 April 2026, added 46 additional vessels to the bloc's shadow-fleet designation list, bringing the cumulative total to 632. This is an escalating, cumulative designation architecture rather than a single enforcement episode: each successive package targets vessels engaged in Russian oil-export evasion, and the scale of the list itself, now well over six hundred vessels, is a structural indicator of how large the evasion fleet has grown rather than a snapshot of any single incident. Flag-of-convenience registries and third-country enablement remain the structural condition that allows this fleet to keep operating even as the designation list lengthens; the architecture-over-incident read here is that vessel designation alone does not close the underlying enablement gap, since replacement tonnage and flag-hopping can offset each individual listing.

Sanctions activity was not confined to the Russia theater this cycle. OFAC's designation of 21 individuals and entities plus one vessel for financing Houthi oil-smuggling and financing operations illustrates a parallel sanctions-evasion architecture built on oil-revenue diversion, with UAE- and Oman-based front companies and financial facilitators enabling continued network operation; oil-revenue diversion from this network directly finances Houthi military operations. Separately, OFAC's designation of two Mexican nationals and nine entities tied to CJNG fuel-smuggling, paired with a supplemental FinCEN alert, extends sanctions-architecture logic into a domestic-adjacent theater: fuel theft is now assessed by FinCEN as the most significant non-narcotics illicit-revenue source for Mexican cartels, meaning sanctions and BSA reporting tools are increasingly being deployed together against the same underlying revenue stream.

Three-pillar balance is worth noting explicitly here: two of these three sanctions actions carry a CTF as well as an AML dimension, since the underlying revenue funds ongoing armed operations rather than purely criminal enrichment. CTF findings of this kind are structurally under-represented relative to AML enforcement volume industry-wide, and this cycle's Houthi designation is a useful corrective data point.

Outlook

Watch for the next EU sanctions package to test whether vessel-designation velocity can outpace shadow-fleet replacement capacity, and watch OFAC's Houthi-network designations for follow-on secondary-sanctions exposure against the UAE- and Oman-based facilitators named this cycle. This is analytical orientation only, not a prediction and not compliance advice.

D2 Beneficial Ownership

no_changeno_changestanding position

Beneficial Ownership and Corporate Transparency

As a non-EEA jurisdiction, Kentucky sits entirely outside the EU regulatory perimeter, and the EU AML Package carries no direct or indirect supervisory nexus to Kentucky-chartered institutions. The directly relevant beneficial-ownership development this cycle is domestic: FinCEN's March 2025 interim final rule exempted all US-formed entities and their beneficial owners from Corporate Transparency Act reporting, leaving only foreign-formed entities subject to federal beneficial-ownership-information collection. Kentucky maintains no independent state-level BO registry to backstop this rollback, meaning the federal exemption produces a materially reduced visibility gap for Kentucky-formed LLCs and corporations with no compensating mechanism at the state level. This is a structural exposure, not a single-episode compliance lapse: shell structures and nominee arrangements formed in Kentucky now carry federal BOI visibility that has been substantially narrowed, and this narrowing is durable until and unless a further federal rule restores some form of domestic reporting requirement.

Continue reading

A second, distinct structural gap concerns Kentucky's cash-intensive pari-mutuel wagering sector. FinCEN guidance continues to exclude racetracks offering wagering only on in-track races from the Bank Secrecy Act's casino definition, exempting Churchill Downs and Keeneland from the CTR, SAR, and AML-program obligations that apply to comparable cash-intensive gaming establishments. This carve-out predates the current cycle but remains active and unaddressed, and it sits alongside the BOI-visibility gap as a second axis of corporate/entity-level opacity in the jurisdiction.

Globally, the EU AML Package sets the structural direction for beneficial-ownership regulation: it comprises three distinct instruments, the directly applicable AML Regulation (Regulation (EU) 2024/1624, the AMLR), the sixth AML Directive (6AMLD), which is transposed on a per-member-state basis, and the AMLA Regulation (Regulation (EU) 2024/1620), which establishes the Anti-Money Laundering Authority. Together these instruments are shifting supervision of high-risk cross-border obliged entities from purely national authorities toward a hybrid regime in which AMLA exercises direct and indirect supervision. This is durable structural backdrop for reading global BO-transparency trends, but it has no application to Kentucky-chartered institutions; relevance is confined to Kentucky entities that maintain correspondent or trade relationships with EU counterparties and must therefore navigate AMLR third-country equivalence provisions from the outside.

Separately, the United States remains a FATF member in good standing, not on the FATF grey or black list, and Kentucky inherits this compliant national status wholesale. Whether the United States appears on the EU high-risk third country list or the UK's MLR Schedule 3ZA advisory list could not be independently re-verified this cycle against a dated primary source, and this claim carries reduced confidence pending direct confirmation.

Outlook

Whether FinCEN issues a further rule restoring some scope of domestic BOI reporting remains undetermined, and no evidence was identified this cycle indicating that the Kentucky legislature is considering a state-level beneficial-ownership registry to backstop the federal narrowing. Absent either development, the BOI-visibility gap for Kentucky-formed entities is likely to persist as a durable structural feature rather than a transitional one. This is architectural orientation only, not a forecast of specific legislative or regulatory action.

Judgment: No US-KY-specific BO registry development found this cycle. Uncertain
Cumulative analysis

Beneficial Ownership and Corporate Transparency — Cumulative Analysis

Across the research establishing this jurisdiction's baseline, Kentucky's beneficial-ownership and corporate-transparency profile has consistently been read through its position outside the EU regulatory perimeter and its complete dependence on federal, rather than state, BO-transparency infrastructure. Kentucky maintains no independent state-level beneficial-ownership registry. This absence has become materially more consequential this cycle because of a federal rollback: FinCEN's March 2025 interim final rule exempted all US-formed entities and their beneficial owners from Corporate Transparency Act reporting, leaving only foreign-formed entities subject to federal BOI collection. With no state backstop, Kentucky-formed LLCs and corporations now carry substantially reduced federal beneficial-ownership visibility, a structural rather than episodic development whose durability depends on whether any future FinCEN rule restores some scope of domestic reporting.

A second standing structural gap, distinct from the BOI rollback but compounding the jurisdiction's overall corporate-opacity profile, concerns the cash-intensive pari-mutuel wagering sector anchored by Churchill Downs and Keeneland. FinCEN guidance continues to exclude racetracks offering wagering only on in-track races from the Bank Secrecy Act's casino definition, meaning this nationally significant, high-cash-volume sector remains outside the CTR, SAR, and AML-program obligations applied to comparable gaming establishments. This carve-out has not changed this cycle but remains a persistent second axis of enabling opacity alongside the BOI-visibility gap.

Throughout, the EU AML Package remains the durable global structural backdrop against which any jurisdiction's BO-transparency posture is assessed, even where - as with Kentucky - it has no direct application. The Package comprises three distinct instruments: the directly applicable AML Regulation (Regulation (EU) 2024/1624, AMLR), the sixth AML Directive (6AMLD), transposed per member state, and the AMLA Regulation (Regulation (EU) 2024/1620), establishing the Anti-Money Laundering Authority. Collectively these instruments are shifting supervision of high-risk cross-border obliged entities away from a purely national model toward a hybrid EU-level regime in which AMLA holds direct and indirect supervisory authority over up to a defined set of high-risk cross-border groups. None of this carries direct or indirect supervisory nexus to Kentucky-chartered institutions; its relevance to Kentucky is confined to entities maintaining EU correspondent or trade relationships that must navigate AMLR third-country equivalence provisions from outside the perimeter.

On jurisdictional-listing status, the United States remains a FATF member in good standing, not on the grey or black list, a status Kentucky inherits wholesale with no change this cycle. Whether the US appears on the EU high-risk third country list or the UK MLR Schedule 3ZA advisory list could not be independently re-verified against a dated primary source this cycle, and this specific claim is carried at reduced confidence pending direct confirmation in a future cycle.

Outlook

The trajectory for this domain is deteriorating on the strength of the federal BOI-visibility rollback and the persistence of the pari-mutuel carve-out, with no offsetting state-level development identified. Whether FinCEN issues a further rule restoring some scope of domestic BOI reporting, and whether the Kentucky legislature considers a state-level BO registry, are the two open questions most likely to determine whether this trajectory continues or reverses in subsequent cycles; no evidence of either has surfaced to date. This is architectural orientation, not a forecast of specific legislative or regulatory outcomes.

domain_sub_briefs · D2 · Cumulative analysis
Standing baseline position

US domestic BOI reporting effectively eliminated per March 2025 FinCEN interim rule (GAO-confirmed 99%+ exemption); EU AMLR/AMLD6/AMLA tracked as three distinct instruments with 2025-2028 staggered application.

Periodic updates (1)
14 Sep 2026 · fim-2026-08-05

Beneficial Ownership and Corporate Transparency

Kentucky sits entirely outside the European Union's AML Package and its direct supervisory perimeter; as a US state, the directly relevant beneficial-ownership development this cycle is domestic rather than European. A May 2026 GAO report found that FinCEN's 2025 interim final rule has eliminated beneficial-ownership-information reporting obligations for over 99 percent of entities previously covered under the Corporate Transparency Act framework, a retrenchment that directly affects the domestic BO-transparency baseline against which Kentucky-domiciled and Kentucky-licensed entities, including the state's newly licensed virtual-currency kiosk operators, are now assessed. This is a US-wide development rather than a Kentucky-specific one, but it is the BO-transparency fact most directly relevant to entities operating under Kentucky's jurisdiction this cycle, and it should be read as the primary local signal rather than as background noise.

Globally, the EU AML Package sets the structural direction that the rest of the world, including US supervisors and correspondent-banking counterparties of Kentucky-linked entities, will increasingly have to account for even without direct jurisdiction. The package is properly understood as three distinct instruments rather than a single law: the AML Regulation (Reg (EU) 2024/1624, the AMLR), which is directly applicable across all 27 Member States and becomes fully applicable 10 July 2027; the sixth AML Directive (6AMLD), which is transposed individually by each Member State on a staggered timeline, with FIU-access provisions from July 2025 and beneficial-ownership-register provisions due by 10 July 2026; and the AMLA Regulation (Reg (EU) 2024/1620), which established the Anti-Money Laundering Authority, operational since 1 July 2025, and which begins direct supervision of higher-risk cross-border obliged entities from January 2028. This shift moves EU beneficial-ownership and corporate-transparency supervision from a purely national-authority model toward a hybrid EU-level regime, and it is the durable structural backdrop against which any Kentucky-linked entity with EU-facing counterparties or cross-border obliged-entity relationships should read its own beneficial-ownership exposure, even though Kentucky itself sits outside the package's direct perimeter.

Outlook

The two-speed transparency divergence between the retrenching US federal BOI regime and the consolidating EU AMLR/AMLD6/AMLA architecture is the standing item to watch. For Kentucky specifically, the practical question is whether any successor federal BOI framework re-emerges to restore beneficial-ownership visibility for entities such as the state's newly licensed virtual-currency kiosk operators, or whether the reporting gap identified in the GAO report persists as the durable baseline. This is analytical orientation only, not a prediction and not compliance advice.

D3 Enabler Jurisdictions

watchwatch

Enabler Jurisdictions and Professional Facilitators

Read through the lens of enabler-jurisdiction risk, the Coinme matter in Kentucky is less about the operator and more about what the episode reveals of the states own supervisory architecture around a licensed money-services channel. Kentuckys Department of Financial Institutions licenses virtual-currency kiosk activity as a form of money transmission under KRS Chapter 286, with an entry threshold set by KRS 286.11-013 requiring applicants to meet at minimum a 500,000 dollar net-worth floor, a figure the commissioner retains discretion to raise. That threshold functions as a gate at the point of entry into the regulated channel. What the Coinme settlement demonstrates is that the gate, as currently configured, did not surface sustained deficiencies in transaction monitoring, know-your-customer screening, suspicious-activity reporting and enhanced due diligence at the operator. Those deficiencies were instead identified through a coordinated examination spanning a coalition of 34 state regulators, culminating in a 2.5 million dollar settlement of which Kentuckys allocated share is 62,853.57 dollars.

Continue reading

The distinction between an entry gate and an ongoing supervisory capacity is the core enabler-jurisdiction question this episode poses. A jurisdiction can maintain a facially rigorous licensing statute, with defined capital floors and commissioner discretion to impose additional requirements, while still lacking the independent examination throughput to detect a sustained control failure at a licensed entity absent the detection capacity of a multistate coalition. This is not a finding that Kentucky is a permissive jurisdiction in the sense of deliberately under-regulating; rather, it is a finding that the states routine supervisory posture toward a licensed virtual-currency kiosk operator did not, on its own, generate the finding that ultimately resolved the matter. The absence of state-specific routine examination output as the detection mechanism is itself a data point about where the practical supervisory capacity for this category of licensee currently sits: at the coalition level rather than the individual-state level.

This has a direct bearing on how the facilitator role of a money-transmitter license should be read. A license issued under KRS Chapter 286 by Kentucky to a virtual-currency kiosk operator is not, on the evidence of this cycle, a signal that the operators ongoing AML control environment has been independently verified by that state on a continuing basis. It is a signal that the operator cleared a capital and fitness threshold at the point of application. For any party relying on a Kentucky money-transmitter license as a proxy for the operational integrity of a crypto-kiosk business, the settlement is a caution against conflating licensure with active, continuous supervisory assurance.

The terms of resolution also carry an enabler-jurisdiction dimension. Coinme has agreed to wind down its Kentucky kiosk operations entirely by January 1, 2027, rather than remediate and continue operating under enhanced supervision. The alternative, a further 4 million dollar penalty, is held in reserve rather than imposed outright. That structure, exit now or accept an escalated consequence, suggests the coalition of regulators judged continued operation under remediation to be less attractive, from a supervisory standpoint, than a clean wind-down within a defined window. Where a states chosen remedy for an operator in a facilitator role is exit rather than continued licensed operation under heightened terms, that choice itself speaks to the states assessment of whether its ongoing supervisory tools are adequate to manage the operator going forward.

Outlook

The practical marker ahead is the January 1, 2027 wind-down deadline, which will test whether Coinme exits Kentucky kiosk operations as agreed or instead triggers the additional 4 million dollar penalty. Separately, and on a longer horizon, Kentuckys Senate Bill 189, enacted in April 2026, establishes a dedicated licensing and consumer-protection framework specifically for virtual-currency kiosk operators, due to take effect on April 30, 2027. Whether that purpose-built framework closes the gap between entry licensing and ongoing examination capacity that this cycles settlement illustrates, or simply layers a new license category on top of the same underlying supervisory resourcing, is not yet something the record permits a judgment on. The sequencing is itself worth tracking: enforcement arising from a multistate coalition examination has preceded the states own tailored kiosk-licensing regime coming into force, rather than following it.

Judgment: The Coinme matter illustrates a gap between Kentucky's MTL licensing gatekeeping and ongoing AML supervision capacity, though discovery came via coordinated multistate examination rather than state-specific review. Probable
Cumulative analysis

Enabler Jurisdictions and Professional Facilitators — Cumulative Analysis

The baseline research establishing Kentucky's enabler-jurisdiction profile finds a jurisdiction defined by complete structural dependence on federal AML/sanctions architecture rather than any independent local framework. The Kentucky Department of Financial Institutions licenses and examines state-chartered banks, credit unions, and money transmitters through the Nationwide Multistate Licensing System under KRS Chapter 286, but administers no independent state sanctions program; Kentucky inherits the federal BSA/AML/OFAC framework wholesale. Applying the four-dimension enabler test consistently across this baseline, the legal framework itself is nominally adequate at the federal level, but local enforcement reality appears sparse, the balance between genuine capacity deficit and deliberate political choice remains ambiguous on current evidence, and systemic significance is assessed as moderate, driven principally by the state's cash-intensive horse-racing and cash-logistics sectors.

The most concrete enforcement anchor identified in this baseline eighteen-month window is FinCEN's 6 February 2025 Consent Order against Brink's Global Services USA and Brink's Inc., penalising unregistered money transmission in currency-transport activity and requiring MSB registration and BSA/AML program implementation. This is directly relevant to Kentucky's armored cash-logistics channel connecting to banks statewide and stands as the clearest concrete data point on enforcement reaching a Kentucky-relevant sector in this research window.

That single data point sits against a broader and, in this baseline, more consequential finding: publicly available Kentucky-specific federal enforcement actions are sparse relative to national BSA/AML enforcement volume, and most Kentucky-relevant material had to be inferred from national-level actions rather than drawn from state-disaggregated enforcement reporting. Consistent with FIM methodology, this baseline treats the absence of disaggregated enforcement visibility as itself an analytically significant finding rather than a mere data gap to be noted and set aside - it may indicate genuinely low enforcement intensity, a reporting-granularity gap that obscures actual enforcement levels, or some combination of the two, and the evidence gathered in this baseline cycle does not permit a clean resolution between these explanations.

Outlook

As the enabler-jurisdiction baseline for Kentucky, this profile establishes enforcement-visibility opacity as a standing methodological constraint on future cycles: absent a change in federal reporting granularity or the emergence of Kentucky-specific enforcement actions, subsequent cycles are likely to continue relying substantially on national-action inference rather than state-disaggregated evidence. This is architectural orientation rather than a forecast of specific future enforcement outcomes, and the gap itself - rather than any single incident - remains the primary object of ongoing tracking for this domain.

domain_sub_briefs · D3 · Cumulative analysis
Standing baseline position

Cambodia casino-sector inspection revoked 19 and suspended 30 of 195 licensed casinos for online-fraud links (July 2026); UK ECCTA failure-to-prevent-fraud offence remains unevenly embedded a year into force.

Periodic updates (2)
3 Nov 2026 · fim-2026-11-03

Enabler Jurisdictions

Kentucky's role as an enabler jurisdiction is defined less by permissiveness than by the limits of a general-purpose licensing gate applied to a specialised activity. Under KRS 286.11-013, any applicant for a money-transmitter licence, including a virtual-currency kiosk operator, must post a surety bond of not less than 500,000 dollars, with the Department of Financial Institutions able to raise that requirement up to five million dollars depending on the applicant's financial condition, net worth, or transaction volume. That is a substantial capital gate on its face. Yet Coinme Inc., operating as a licensed kiosk network in Kentucky and more than thirty other states, sustained a Bank Secrecy Act and anti-money-laundering program deficiency serious enough to produce a 2.5 million dollar multistate settlement, with Kentucky's allocated share confirmed at 62,853.57 dollars.

The analytically significant fact is how the deficiency was found. It was not identified through Kentucky-specific routine supervision but through a coordinated, examination-led process run across the settling states under the Conference of State Bank Supervisors framework. This matters for how enabler-jurisdiction risk should be read: a state's own licensing threshold, however well-capitalised on paper, is not necessarily the mechanism that catches a sustained control failure inside a licensed entity operating across many states. Horizontal supervisory cooperation did the work that a single state's vertical licensing design did not. That is a structural observation about the architecture of multistate money-services supervision, not a comment on the adequacy of Kentucky's statute in isolation; the bond floor and the commissioner's discretion to raise it remain in force and unchanged by this episode. What changed is the evidentiary record of how a control gap at a licensed kiosk operator was actually surfaced.

The settlement's wind-down term reinforces the enabler-jurisdiction reading. Coinme has agreed to cease virtual-currency kiosk operations by January 1, 2027, or face a further four million dollar penalty. That term operates uniformly across the settling states, including Kentucky, and effectively retires a cash-to-crypto kiosk channel on a fixed multistate timetable rather than leaving its future to each state's separate enforcement discretion. For a reader assessing Kentucky specifically, the absence of enforcement action beyond participation in the multistate settlement is itself notable: there is, at this point, no confirmed Kentucky-specific consent order visible on the Department of Financial Institutions' own channels, meaning the state's exposure and remedy are currently documented through the Governor's office release and national reporting on the CSBS-coordinated process rather than through an independently verifiable state record.

A further structural layer is approaching but not yet active. Kentucky enacted SB 189 in April 2026, creating a licensing and consumer-protection framework specific to virtual-currency kiosk operators, to be administered by the Department of Financial Institutions once it takes effect on April 30, 2027. This framework, once operative, will sit alongside the general money-transmitter statute rather than replacing it, adding kiosk-specific obligations to the existing bond-and-licence structure. Its commencement date falls after the Coinme wind-down deadline, meaning the two instruments do not overlap in their practical effect on the kiosk channel during the intervening months: the general statute and the settlement terms govern the near term, and the kiosk-specific regime becomes relevant only once its own commencement arrives.

Outlook

The period between now and April 30, 2027 is the one in which Kentucky's enabler-jurisdiction posture will be most visible, as the Coinme wind-down deadline of January 1, 2027 arrives under the existing general licensing statute, well before SB 189's own kiosk-specific framework takes effect as scheduled. Whether Kentucky's own consent order becomes independently available during this period, and whether any other licensed money-services businesses in the state face comparable multistate examination findings, will determine whether the observation about detection occurring through horizontal supervisory cooperation rather than state-specific review holds as a durable pattern or proves to be a single episode.

14 Sep 2026 · fim-2026-08-05

Enabler Jurisdictions and Professional Facilitators

Cambodia's casino sector produced this cycle's clearest enabler-jurisdiction signal. A nationwide inspection found 72 of the country's 195 licensed casinos implicated in online fraud, resulting in 19 licence revocations, 30 suspensions, and 23 lapses. This is a structural finding rather than an isolated incident: weak fit-and-proper supervision of casinos and other designated non-financial businesses and professions has been a long-standing, FATF-flagged vulnerability in Cambodia, and the scale of this cycle's revocations and suspensions suggests that vulnerability has been operating at meaningful scale for some time. The Cambodian government's own public acknowledgment of re-grey-listing risk ahead of the October 2026 FATF Plenary is itself analytically significant: it is an unusually candid admission from an enabler jurisdiction that its own supervisory gaps are serious enough to invite formal FATF action, rather than the more typical pattern of an enabler jurisdiction being flagged externally.

A second, structurally distinct enabler-jurisdiction signal comes from the United Kingdom, where the Economic Crime and Corporate Transparency Act 2023 failure-to-prevent-fraud offence has been in force since 1 September 2025, but only a small number of firms are reported to have fully embedded controls despite the offence having been in effect for nearly a year. This is a professional-facilitator-adjacent signal: the offence targets the corporate environments in which professional enablers operate, and slow embedding suggests the deterrent effect of the offence has not yet reached full strength. Absence of visible first-prosecution activity under the offence is itself worth surfacing explicitly as a non-enforcement signal, consistent with the principle that enablement is analytically significant even when no enforcement action has yet occurred.

Outlook

The October 2026 FATF Plenary is the key near-term marker for Cambodia, where this cycle's self-acknowledged risk could crystallize into a formal grey-listing decision. For the UK, the item to watch is the first substantive prosecution or SFO guidance update under the ECCTA failure-to-prevent-fraud offence, which would be the clearest signal yet of how the embedding gap identified this cycle is being addressed. This is analytical orientation only, not a prediction and not compliance advice.

D4 Conflict Finance

no_changeno_changestanding position

Conflict Finance and Extractive-Industry Integrity

Conflict-linked financial flows intensified across two distinct theaters this cycle. OFAC designated 21 individuals and entities plus one vessel on 16 January 2026 for financing a Houthi oil-smuggling and financing network, with UAE- and Oman-based front companies and financial facilitators enabling the network's continued operation; oil-revenue diversion through this network directly finances Houthi military operations, making this a textbook conflict-finance architecture rather than a purely criminal one. Separately, OFAC and FinCEN jointly designated two Mexican nationals and nine entities tied to CJNG fuel-smuggling and tax-evasion schemes, pairing the sanctions action with a supplemental FinCEN alert; FinCEN now assesses fuel theft as the most significant non-narcotics illicit-revenue source for Mexican cartels, a designation that elevates fuel-theft typologies to a conflict-finance-adjacent priority alongside more traditional narcotics-trafficking revenue streams.

Continue reading

Both findings illustrate the same underlying architecture: extractive-commodity revenue diverted through front-company and correspondent-banking infrastructure to fund non-state armed actors or transnational criminal organizations. Russia's shadow-fleet oil-export evasion infrastructure, addressed separately under the sanctions-architecture lens this cycle, is structurally the same category of conflict-adjacent extractive-revenue flow, underscoring that conflict-finance typologies are not confined to any single region or commodity.

Outlook

Watch OFAC's Houthi-network designations for follow-on secondary-sanctions exposure against the UAE- and Oman-based facilitators named this cycle, and watch for further FinCEN guidance on fuel-theft typologies given the agency's explicit elevation of this revenue stream. The absence of a dedicated conflict-mineral or extractive-sector finding for the Sahel or DRC theaters this cycle is a coverage gap rather than a finding of non-activity, and should not be read as evidence that those flows have quieted. This is analytical orientation only, not a prediction and not compliance advice.

Judgment: No US-KY-specific conflict-finance signal found this cycle. Uncertain
Standing baseline position

OFAC designated 21 individuals/entities plus a vessel tied to Houthi oil-smuggling/financing (Jan 2026) and 11 individuals/entities tied to CJNG fuel-theft schemes (June 2026), the latter paired with a FinCEN supplemental alert.

D5 Crypto / Digital Assets / Financial Innovation

material_changematerial_change

Crypto, Digital Assets, and Financial Innovation

The defining development in digital-asset integrity for Kentucky this cycle is the states Department of Financial Institutions joining a 34-state settlement with Coinme Inc., a virtual-currency kiosk operator, over sustained deficiencies in transaction monitoring, know-your-customer screening, suspicious-activity reporting and enhanced due diligence. The settlement totals 2.5 million dollars across the coalition, with Kentuckys allocated share set at 62,853.57 dollars. Under the agreement, Coinme must terminate its virtual-currency kiosk operations in Kentucky by January 1, 2027, or face a further 4 million dollar penalty. This is a materially significant event for how cash-to-crypto conversion infrastructure is supervised in the state: a licensed kiosk operator, the kind of entity that provides the physical on-ramp between cash and virtual currency most exposed to placement and structuring risk, was found to have sustained AML program deficiencies across multiple core control functions simultaneously.

Continue reading

The breadth of the deficiencies named, spanning transaction monitoring, KYC, suspicious-activity reporting and enhanced due diligence together rather than a single isolated control gap, is itself a notable feature of this finding. A kiosk operator sits at a point in the financial system where cash is converted into a bearer-like digital asset, a function that carries elevated placement risk by design. A simultaneous, multi-control deficiency at that specific type of entity speaks to a program-wide weakness rather than an isolated lapse, which is consistent with the scale of the response: a nationwide coalition settlement rather than a single-state enforcement action.

The detection pathway matters as much as the outcome for assessing the health of crypto-kiosk supervision generally. Kentuckys own money-transmitter licensing statute, KRS Chapter 286, with its capital floor under KRS 286.11-013, did not itself generate this finding; the finding emerged from a coordinated multistate examination. For a channel as structurally exposed to illicit-finance risk as a cash-to-crypto kiosk, reliance on a coalition-level examination capacity rather than a states individual supervisory throughput to catch a sustained, multi-control AML failure is a relevant data point for anyone assessing the resilience of kiosk-channel oversight more broadly, in Kentucky or in any state relying on a similar licensing model for this asset class.

The settlements remedy, a hard wind-down date rather than continued licensed operation under remediation, also speaks to how the coalition weighed the risk of this entity continuing to operate the kiosk channel in the interim. Rather than a program of enhanced supervision paired with continued operations, the agreed path is exit from the state market by a fixed date, with an escalated financial penalty as the consequence of non-compliance. That choice of remedy, over a path of continued licensed operation under heightened terms, is itself informative about how acute the underlying control deficiencies were judged to be.

Separately, but adjacent to this enforcement outcome, Kentucky enacted Senate Bill 189 in April 2026, establishing a dedicated regulatory framework specifically for virtual-currency kiosk operators, inclusive of consumer-protection provisions. That framework is not yet in force; its effective date is April 30, 2027. The Coinme settlement is therefore resolved entirely under the states general money-transmitter statute, with the more tailored kiosk-specific regime still on the horizon. This sequencing, a multistate AML enforcement action landing before the states own purpose-built kiosk licensing framework takes effect, is a useful marker for how quickly or slowly dedicated digital-asset regulatory architecture translates into improved on-the-ground supervisory capacity for this specific, higher-risk conversion channel.

Outlook

Two dates frame what comes next for digital-asset kiosk supervision in Kentucky. The first is January 1, 2027, the deadline by which Coinme must wind down its kiosk operations in the state under the settlement or face the additional 4 million dollar penalty; whether the operator exits cleanly or the penalty is triggered will be the first concrete test of the settlements enforceability. The second is April 30, 2027, when Kentuckys Senate Bill 189 kiosk-specific licensing and consumer-protection framework takes effect, shifting the applicable regime for any kiosk operators still active in the state at that point away from the general money-transmitter statute toward a framework designed with this asset class specifically in mind. Whether the new framework meaningfully strengthens the ongoing examination capacity that this cycles settlement suggests was previously reliant on multistate coalition action, rather than Kentucky-specific routine supervision, is a question the current record does not yet resolve.

Judgment: Kentucky DFI's participation in the 34-state Coinme BSA/AML settlement is a material crypto-integrity enforcement event this cycle, concerning a state-licensed crypto kiosk operator with sustained AML control deficiencies. Probable
Cumulative analysis

Crypto, Digital Assets, and Financial Innovation — Cumulative Analysis

As the baseline for this jurisdiction, Kentucky's crypto and digital-asset integrity profile begins from a starting condition of no bespoke virtual-asset service provider licensing regime, meaning the state's exposure runs entirely through federal rule-making and typology guidance rather than any state-level framework. This baseline identifies four converging federal developments that together establish a deteriorating trajectory for the domain.

First, FinCEN's August 2025 Notice, FIN-2025-NTC1, flags high-traffic retail kiosk placement - convenience stores, gas stations, cafes, supermarkets - as a rapid cash-to-crypto conversion conduit for fraud proceeds. Kentucky's convenience-store and gas-station density closely mirrors this flagged venue profile, an assessed jurisdiction-specific inference drawn from a national typology notice via venue-density matching rather than any Kentucky-specific enforcement action. Second, the Huione Group Section 311 special measure, previously mischaracterised in an earlier draft as disrupted, is now confirmed active and expanding to successor entity H-Pay Service PLC, meaning enhanced due-diligence obligations connected to this designated laundering network continue to apply to covered banks and crypto-asset operators nationwide, including any Kentucky-chartered or Kentucky-adjacent institutions with VASP-counterparty exposure.

Third, the GENIUS Act's implementing architecture is approaching a hard statutory deadline: FinCEN and OFAC published a joint NPRM (10 April 2026) proposing BSA/AML-KYC and OFAC sanctions-program obligations for permitted payment stablecoin issuers, with the comment period closed as of 9 June 2026 and the statutory deadline for final rules set at 18 July 2026 - one year after enactment - with proposed rules taking effect twelve months after issuance. This corrects an earlier baseline estimate that had placed finalisation in Q4 2026 or Q1 2027, and this rule will directly govern any Kentucky-chartered institution seeking permitted-payment-stablecoin-issuer status. Fourth, and running in the opposite direction, an April 2025 DOJ memorandum directs prosecutors to deprioritize standalone BSA or regulatory-only digital-asset violations absent willful misconduct - a posture shift corroborated by two independent source categories - potentially reducing enforcement pressure on Kentucky-based MSBs and CVC kiosk operators for compliance-only failures even as supervisory rule-design advances.

A fifth, more open-ended item sits on the legislative horizon: the Digital Asset Market CLARITY Act passed the US House in 2025 and awaits Senate action as of mid-2026, with its eventual market-structure taxonomy and AML/CFT provisions set to determine the scope of on-chain monitoring and interagency coordination obligations for Kentucky-based crypto-adjacent MSBs. Taken together, these five threads describe an architecture that is simultaneously expanding in rule-design ambition and unevenly enforced in practice - a tension rather than a contradiction, since forward-looking program-design requirements and harm-based prosecutorial discretion can coexist within the same regulatory system without resolving cleanly in either direction.

Outlook

The GENIUS Act PPSI rule's 18 July 2026 statutory deadline is the most time-critical marker for this domain going forward, with the final published text and confirmed effective date still unavailable as of this baseline. The CLARITY Act's Senate trajectory remains the principal source of medium-term uncertainty, and the practical enforcement effect of the Blanche Memo on Kentucky-specific MSB and kiosk-operator compliance failures has not yet been independently confirmed with Kentucky-specific case data. This is architectural orientation only, not a forecast of specific legislative, regulatory, or enforcement outcomes.

domain_sub_briefs · D5 · Cumulative analysis
Standing baseline position

Kentucky SB 189 (2026 RS) creates new KRS 286 Subtitle 13, a standalone DFI-administered licensing and AML regime for virtual-currency kiosk operators, effective 2027-04-30, layered on top of the general Kentucky Money Transmitters Act.

Periodic updates (6)
4 Nov 2026 · fim-2026-11-01

Crypto, Digital Assets, and Financial Innovation

The defining development in digital-asset integrity for Kentucky is the states Department of Financial Institutions joining a 34-state settlement with Coinme Inc., a virtual-currency kiosk operator, over sustained deficiencies in transaction monitoring, know-your-customer screening, suspicious-activity reporting and enhanced due diligence. The settlement totals 2.5 million dollars across the coalition, with Kentuckys allocated share set at 62,853.57 dollars. Under the agreement, Coinme must terminate its virtual-currency kiosk operations in Kentucky by January 1, 2027, or face a further 4 million dollar penalty. This is a materially significant event for how cash-to-crypto conversion infrastructure is supervised in the state: a licensed kiosk operator, the kind of entity that provides the physical on-ramp between cash and virtual currency most exposed to placement and structuring risk, was found to have sustained AML program deficiencies across multiple core control functions simultaneously.

The breadth of the deficiencies named, spanning transaction monitoring, KYC, suspicious-activity reporting and enhanced due diligence together rather than a single isolated control gap, is itself a notable feature of this finding. A kiosk operator sits at a point in the financial system where cash is converted into a bearer-like digital asset, a function that carries elevated placement risk by design. A simultaneous, multi-control deficiency at that specific type of entity speaks to a program-wide weakness rather than an isolated lapse, which is consistent with the scale of the response: a nationwide coalition settlement rather than a single-state enforcement action.

The detection pathway matters as much as the outcome for assessing the health of crypto-kiosk supervision generally. Kentuckys own money-transmitter licensing statute, KRS Chapter 286, with its capital floor under KRS 286.11-013, did not itself generate this finding; the finding emerged from a coordinated multistate examination. For a channel as structurally exposed to illicit-finance risk as a cash-to-crypto kiosk, reliance on a coalition-level examination capacity rather than a states individual supervisory throughput to catch a sustained, multi-control AML failure is a relevant data point for anyone assessing the resilience of kiosk-channel oversight more broadly, in Kentucky or in any state relying on a similar licensing model for this asset class.

The settlements remedy, a hard wind-down date rather than continued licensed operation under remediation, also speaks to how the coalition weighed the risk of this entity continuing to operate the kiosk channel in the interim. Rather than a program of enhanced supervision paired with continued operations, the agreed path is exit from the state market by a fixed date, with an escalated financial penalty as the consequence of non-compliance. That choice of remedy, over a path of continued licensed operation under heightened terms, is itself informative about how acute the underlying control deficiencies were judged to be.

Separately, but adjacent to this enforcement outcome, Kentucky enacted Senate Bill 189 in April 2026, establishing a dedicated regulatory framework specifically for virtual-currency kiosk operators, inclusive of consumer-protection provisions. That framework is not yet in force; its effective date is April 30, 2027. The Coinme settlement is therefore resolved entirely under the states general money-transmitter statute, with the more tailored kiosk-specific regime still on the horizon. This sequencing, a multistate AML enforcement action landing before the states own purpose-built kiosk licensing framework takes effect, is a useful marker for how quickly or slowly dedicated digital-asset regulatory architecture translates into improved on-the-ground supervisory capacity for this specific, higher-risk conversion channel.

Outlook

Two dates frame what comes next for digital-asset kiosk supervision in Kentucky. The first is January 1, 2027, the deadline by which Coinme must wind down its kiosk operations in the state under the settlement or face the additional 4 million dollar penalty; whether the operator exits cleanly or the penalty is triggered will be the first concrete test of the settlements enforceability. The second is April 30, 2027, when Kentuckys Senate Bill 189 kiosk-specific licensing and consumer-protection framework takes effect, shifting the applicable regime for any kiosk operators still active in the state at that point away from the general money-transmitter statute toward a framework designed with this asset class specifically in mind. Whether the new framework meaningfully strengthens the ongoing examination capacity that this cycles settlement suggests was previously reliant on multistate coalition action, rather than Kentucky-specific routine supervision, is a question the current record does not yet resolve.

3 Nov 2026 · fim-2026-11-03

Crypto / Digital Assets / Financial Innovation

The defining digital-asset development in Kentucky is the state's participation, through its Department of Financial Institutions, in a thirty-four-state settlement with Coinme Inc. over deficiencies in its Bank Secrecy Act and anti-money-laundering program. The total settlement is valued at 2.5 million dollars, with Kentucky's allocated portion confirmed at 62,853.57 dollars. Coinme operates as a virtual-currency kiosk network, the cash-to-crypto on-ramp model that has drawn sustained multistate regulatory attention, and the settlement's terms go beyond a monetary penalty: Coinme has agreed to terminate its kiosk operations entirely by January 1, 2027, or face an additional four million dollar penalty on top of the settlement amount. That is a structural remedy aimed at a channel, not merely a conduct fine.

Framing this as a digital-asset development rather than a generic enforcement action matters because the underlying licensing architecture that governed Coinme's Kentucky operations was not a crypto-specific regime at the time of the conduct at issue. Coinme was licensed as a money transmitter under Kentucky's general statute, KRS 286.11-013, which requires a surety bond of at least 500,000 dollars, adjustable up to five million dollars at the commissioner's discretion based on financial condition, net worth, or transaction volume. The statute does not distinguish, in its bonding mechanics, between a traditional money-transmission business and a virtual-currency kiosk operator; both sit inside the same licensing gate. The BSA/AML deficiency that produced this settlement therefore occurred inside a licensed entity operating under general money-services law, and its detection came through coordinated multistate examination rather than through any crypto-specific supervisory tool unique to Kentucky.

That gap in dedicated tooling is precisely what Kentucky's SB 189, enacted in April 2026, is designed to address going forward. SB 189 establishes a licensing and consumer-protection framework specific to virtual-currency kiosk operators, to be administered by the Department of Financial Institutions. It is not yet in force; its provisions are scheduled to take effect on April 30, 2027. Once operative, kiosk operators in Kentucky will face a dedicated licensing requirement layered on top of the existing general money-transmitter statute, with consumer-protection conditions tailored to the kiosk model specifically. The sequencing is notable: the Coinme settlement's kiosk wind-down deadline, January 1, 2027, precedes SB 189's own commencement by roughly four months, meaning the settlement's remedy will have already taken effect, or Coinme will already have incurred the additional four million dollar penalty, before the new kiosk-specific regime becomes operative at all.

For digital-asset operators assessing Kentucky as an operating jurisdiction, the combined picture is of a market moving from general-purpose money-transmitter regulation toward a dedicated kiosk-specific framework, with a live enforcement episode occurring in the gap between the two regimes. The settlement demonstrates that general licensing bonding requirements, however substantial, do not substitute for dedicated BSA/AML program adequacy, and that multistate supervisory coordination, rather than any single state's independent review, was the mechanism that identified the shortfall in this instance. No Kentucky-specific consent order has yet been independently confirmed on the Department of Financial Institutions' own channels beyond the Governor's office release and associated reporting, which is itself worth noting for any party seeking the primary state record of this settlement.

Outlook

Kentucky's digital-asset kiosk landscape is set to be reshaped on two separate timelines over the coming months: the Coinme-specific wind-down of kiosk operations by January 1, 2027 under the settlement's terms, and the broader, kiosk-wide licensing and consumer-protection regime under SB 189, due to take effect as scheduled on April 30, 2027. Firms operating or considering virtual-currency kiosks in Kentucky should expect the general money-transmitter statute, including its surety-bond mechanics, to remain the operative legal framework until SB 189 commences, with the settlement's wind-down term functioning as the most immediate near-term constraint on the kiosk channel specifically.

25 Oct 2026 · fim-2026-10-25

Crypto / Digital Assets / Financial Innovation

Kentucky's SB189 is the clearest state-level digital-asset-relevant financial-integrity development identified. Signed April 13, 2026 and operative from April 30, 2027, the statute creates a new Subtitle 13 of KRS Chapter 286 establishing a licensing regime for virtual-currency kiosk operators administered through the state's Department of Financial Institutions. The AML program duty embedded in the licensing instrument requires anti-fraud and AML policies consistent with the Bank Secrecy Act, a designated chief compliance officer, a $500,000 minimum net worth, and a surety bond. This is a probable-confidence finding sourced to secondary legal commentary; the underlying statutory text and its KRS Subtitle 13 codification have not been independently retrieved, so the full scope of the compliance-program duty -- its precise reporting obligations, its examination cadence, and its interaction with existing federal BSA registration requirements for money-services businesses -- remains to be confirmed against primary source.

The architectural significance of this development lies in where Kentucky has chosen to locate the AML obligation. Rather than relying solely on the federal Bank Secrecy Act's generic money-services-business registration and program requirements to govern virtual-currency kiosks, the state has built a sector-specific compliance-program duty directly into a new state licensing instrument. This is consistent with a broader pattern across US states of using kiosk-specific statutes as a vehicle for AML tightening in a device category associated with elevated fraud and money-laundering typology concerns, particularly romance-scam and pig-butchering-adjacent cash-out mechanisms that regulators in multiple states have flagged as a vector of concern. Kentucky's choice to pair the AML program duty with a $500,000 net-worth floor and a surety bond signals an intent to raise the barrier to entry for kiosk operation in tandem with tightening the compliance expectation, rather than treating licensing and AML compliance as separable tracks.

No federal enforcement action specifically targeting a Kentucky virtual-currency kiosk operator was identified, and the gaps register notes that the primary SB189 statutory text was not independently retrieved, leaving the AML program finding resting on Tier-3 legal commentary rather than a Tier-1 primary citation. This is a material sourcing gap for a finding of this structural weight, and independent verification against the KRS Subtitle 13 text itself should be treated as a priority for confirming the precise contours of the chief-compliance-officer designation requirement and the BSA-consistency standard the statute invokes.

Outlook

The SB189 AML program duty becomes operative on April 30, 2027, as scheduled, giving virtual-currency kiosk operators intending to continue business in Kentucky a defined runway to establish the required compliance program and designate a chief compliance officer ahead of commencement. Independent retrieval of the primary statutory text remains the principal open item: until the KRS Subtitle 13 codification is directly reviewed, the precise scope of the BSA-consistency standard and the examination mechanics attached to the new DFI licence cannot be stated with higher confidence than probable. Kentucky's approach may also be watched as a template that other states with active crypto-kiosk populations could adapt, particularly where a kiosk-specific AML program duty is seen as a faster legislative vehicle than amending generic money-transmitter statutes.

11 Oct 2026 · fim-2026-10-11

Crypto / Digital Assets / Financial Innovation

Kentucky's SB189 is the clearest state-level digital-asset-relevant financial-integrity development identified this cycle. Signed April 13, 2026 and operative from April 30, 2027, the statute creates a new Subtitle 13 of KRS Chapter 286 establishing a licensing regime for virtual-currency kiosk operators administered through the state's Department of Financial Institutions. The AML program duty embedded in the licensing instrument requires anti-fraud and AML policies consistent with the Bank Secrecy Act, a designated chief compliance officer, a $500,000 minimum net worth, and a surety bond. This is a probable-confidence finding sourced to secondary legal commentary; the underlying statutory text and its KRS Subtitle 13 codification have not been independently retrieved, so the full scope of the compliance-program duty -- its precise reporting obligations, its examination cadence, and its interaction with existing federal BSA registration requirements for money-services businesses -- remains to be confirmed against primary source.

The architectural significance of this development lies in where Kentucky has chosen to locate the AML obligation. Rather than relying solely on the federal Bank Secrecy Act's generic money-services-business registration and program requirements to govern virtual-currency kiosks, the state has built a sector-specific compliance-program duty directly into a new state licensing instrument. This is consistent with a broader pattern across US states of using kiosk-specific statutes as a vehicle for AML tightening in a device category associated with elevated fraud and money-laundering typology concerns, particularly romance-scam and pig-butchering-adjacent cash-out mechanisms that regulators in multiple states have flagged as a vector of concern. Kentucky's choice to pair the AML program duty with a $500,000 net-worth floor and a surety bond signals an intent to raise the barrier to entry for kiosk operation in tandem with tightening the compliance expectation, rather than treating licensing and AML compliance as separable tracks.

No federal enforcement action specifically targeting a Kentucky virtual-currency kiosk operator was identified this cycle, and the gaps register notes that the primary SB189 statutory text was not independently retrieved, leaving the AML program finding resting on Tier-3 legal commentary rather than a Tier-1 primary citation. This is a material sourcing gap for a finding of this structural weight, and independent verification against the KRS Subtitle 13 text itself should be treated as a priority for confirming the precise contours of the chief-compliance-officer designation requirement and the BSA-consistency standard the statute invokes.

Outlook

The SB189 AML program duty becomes operative on April 30, 2027, as scheduled, giving virtual-currency kiosk operators intending to continue business in Kentucky a defined runway to establish the required compliance program and designate a chief compliance officer ahead of commencement. Independent retrieval of the primary statutory text remains the principal open item: until the KRS Subtitle 13 codification is directly reviewed, the precise scope of the BSA-consistency standard and the examination mechanics attached to the new DFI licence cannot be stated with higher confidence than probable. Kentucky's approach may also be watched as a template that other states with active crypto-kiosk populations could adapt, particularly where a kiosk-specific AML program duty is seen as a faster legislative vehicle than amending generic money-transmitter statutes.

28 Sep 2026 · fim-2026-09-28

Crypto / Digital Assets / Financial Innovation

Kentucky's enactment of SB 189 is a structural, typology-targeted intervention rather than a broad crypto-industry regulatory expansion. Signed 13 April 2026 and codified as a new Subtitle 13 of KRS Chapter 286, the statute establishes a standalone licensing regime specific to virtual-currency kiosks, the crypto ATM machines that have become a documented cash-out mechanism for romance and impersonation scam proceeds. This typology framing is explicit in the drafting record: the new regime is built to interrupt a specific fraud-conduit pattern, not to reclassify or license the broader digital-asset sector operating in the state.

The substantive requirements are calibrated to the risk the typology presents. Kiosk operators must obtain a Kentucky DFI licence via the Nationwide Multistate Licensing System, hold a minimum net worth starting at $500,000 and scaling upward to $5,000,000 depending on operational scale, and post a surety bond at matching thresholds. Transaction caps limit the maximum value that can move through a single kiosk transaction, directly constraining the scale of loss achievable through a single scam cash-out. Mandatory anti-fraud warning notices at each kiosk are intended to interrupt the transaction at the point of highest victim vulnerability, when a victim is actively depositing funds at a scammer's direction.

The regime's effective date, 30 April 2027, sits a full year after signature, and DFI's implementing regulations are due by 1 January 2027, four months ahead of that effective date. This sequencing creates a defined transitional gap: the statute exists and its substantive requirements are settled in the enacted text, but full enforceability awaits both the implementing regulations and the effective date itself. Structurally, this means currently operating kiosk businesses in Kentucky sit, for the duration of this window, outside a licensing perimeter that has already been legislated but is not yet live. That gap is itself a finding worth naming, distinct from either full regulation or full absence of regulation: it is a known, dated, and time-limited exposure window built into the statute's own implementation timeline, rather than an open-ended regulatory vacuum.

No other digital-asset or financial-innovation development was identified for Kentucky this cycle. The broader digital-asset business landscape in the state, including exchanges, custodians, and other digital-asset business models not operating through physical kiosks, was not the subject of new legislative or regulatory activity in the record reached this cycle; SB 189's targeted scope leaves that broader landscape's typology exposure unaddressed for now.

Outlook

The single most consequential development to track is publication of DFI's implementing regulations ahead of the 1 January 2027 deadline, which will supply the operational detail, precise bonding-scale formulas, transaction-cap thresholds, and any reporting or audit cadence, not visible in the enacted statute's text alone. Whether Kentucky extends comparable typology-targeted scrutiny to other digital-asset business models beyond kiosks in a future legislative session is an open question this cycle's evidence cannot answer. The transitional gap between enactment and full effect remains the structurally significant exposure to monitor through the coming quarters.

14 Sep 2026 · fim-2026-08-05

Crypto, Digital Assets, and Financial Innovation

Kentucky's own digital-asset regulatory perimeter moved directly this cycle. The Kentucky Department of Financial Institutions's SB189, signed into law 13 April 2026, establishes a new licensing subtitle, Subtitle 13 of KRS Chapter 286, specifically to regulate virtual-currency kiosks operating in the state. This is a Kentucky-specific development, not a derivative of federal action, and it places the state's DFI directly in the business of licensing a discrete category of crypto-facing physical infrastructure that previously sat outside any dedicated state licensing regime.

That state-level move aligns directly with the federal direction of travel. FinCEN and OFAC jointly published an NPRM under the GENIUS Act that would, for the first time, classify permitted payment stablecoin issuers as financial institutions subject to the Bank Secrecy Act, implementing the GENIUS Act's AML/CFT and sanctions-compliance provisions; the rule treats AI and federated-learning monitoring tools as a mitigating supervisory factor. Read together, Kentucky's kiosk-licensing regime and the federal stablecoin NPRM illustrate state-federal regulatory convergence on digital-asset AML/CFT coverage: Kentucky is not diverging from the federal direction but actively building state-level infrastructure that anticipates it, even though the primary regulatory text implementing SB189 from the Kentucky DFI has not yet been retrieved this cycle.

Outlook

The item most likely to sharpen Kentucky's digital-asset picture next cycle is publication of the Kentucky DFI's implementing regulatory text under SB189, which would move the kiosk-licensing finding from an Assessed-confidence legislative-tracker basis toward a primary-source-confirmed basis. Federally, the GENIUS Act stablecoin rule remains at the NPRM stage and its finalization timeline is the other key marker to watch, given the direct relevance of any final BSA classification to Kentucky-licensed virtual-currency kiosk operators. This is analytical orientation only, not a prediction and not compliance advice.

D6 Compliance Technology & Active Defence

no_changeno_changestanding position

Compliance Technology and Active Defence

This cycle's compliance-technology signal for Kentucky is exemplified by two developments that together illustrate a shift toward proactive, typology-driven guidance rather than reactive, tick-box compliance. FinCEN's August 2025 Notice, FIN-2025-NTC1, reinforces heightened SAR and CTR expectations and red-flag guidance for all covered MSBs and depository institutions operating CVC kiosks. This is an active-defence typology development directly relevant to Kentucky's retail kiosk landscape, providing covered institutions with forward-looking indicator guidance - rather than post-hoc enforcement - to identify rapid cash-to-crypto conversion of fraud proceeds at high-traffic, low-scrutiny venues.

Continue reading

Separately, the joint FinCEN/OFAC GENIUS Act NPRM for permitted payment stablecoin issuers embeds AML/KYC and sanctions-screening program design directly into the stablecoin-issuer licensing gate itself, rather than layering compliance obligations onto an already-operating entity after the fact. This represents forward, positive-compliance architecture: institutions seeking PPSI status, including any Kentucky-chartered institution pursuing that status, will need functioning BSA/AML-KYC and OFAC sanctions-screening programs in place as a condition of licensing, ahead of the 18 July 2026 statutory deadline for the rule's finalisation.

This proactive typology-and-licensing-gate posture sits in some tension with the DOJ's April 2025 Blanche Memo, which directs prosecutors to deprioritize standalone BSA or regulatory-only digital-asset violations absent willful misconduct. The tension is structural: supervisory guidance is advancing toward more granular, typology-specific expectations for active defence, while prosecutorial practice is simultaneously narrowing toward harm-based triggers, potentially reducing the practical consequence of falling short of the newly articulated typology guidance for compliance-only failures.

Outlook

The GENIUS Act PPSI rule's finalisation by the 18 July 2026 statutory deadline will be the clearest near-term test of whether forward, licensing-gate-embedded compliance architecture continues to expand for Kentucky-chartered institutions pursuing stablecoin-issuer status. Whether FinCEN issues further kiosk-specific or typology-specific guidance beyond FIN-2025-NTC1 remains an open question for subsequent cycles. This is architectural orientation only, not a forecast of specific regulatory or supervisory outcomes.

Judgment: No US-KY-specific RegTech/compliance-technology development found this cycle. Uncertain
Cumulative analysis

Compliance Technology and Active Defence — Cumulative Analysis

As the baseline for this jurisdiction, Kentucky's compliance-technology and active-defence profile is defined by two federal developments that together illustrate a shift toward proactive, typology-driven guidance rather than reactive, tick-box compliance, tempered by a countervailing prosecutorial posture. FinCEN's August 2025 Notice, FIN-2025-NTC1, reinforces heightened SAR and CTR expectations and red-flag guidance for all covered MSBs and depository institutions operating CVC kiosks, an active-defence typology development directly relevant to Kentucky's retail kiosk landscape that supplies forward-looking indicator guidance rather than post-hoc enforcement for identifying rapid cash-to-crypto conversion of fraud proceeds at high-traffic, low-scrutiny venues.

The second development is architectural in a different sense: the joint FinCEN/OFAC GENIUS Act NPRM for permitted payment stablecoin issuers embeds AML/KYC and sanctions-screening program design directly into the stablecoin-issuer licensing gate itself, rather than layering compliance obligations onto an already-operating entity after the fact. Institutions seeking PPSI status, including any Kentucky-chartered institution pursuing that status, will need functioning BSA/AML-KYC and OFAC sanctions-screening programs in place as a condition of licensing ahead of the 18 July 2026 statutory deadline for the rule's finalisation - a positive-compliance model built into market entry rather than imposed retrospectively.

Both developments sit in structural tension with the DOJ's April 2025 Blanche Memo, which directs prosecutors to deprioritize standalone BSA or regulatory-only digital-asset violations absent willful misconduct. This baseline reads that tension as a durable feature of the current US compliance-technology landscape rather than a temporary anomaly: supervisory guidance is advancing toward more granular, typology-specific expectations for active defence and toward licensing-gate-embedded program design, while prosecutorial practice is simultaneously narrowing toward harm-based enforcement triggers. The practical effect is that the consequence of falling short of newly articulated typology guidance, for compliance-only failures, may be less severe in practice than the guidance itself implies.

Outlook

Going forward, the GENIUS Act PPSI rule's finalisation by the 18 July 2026 statutory deadline is the clearest near-term test of whether forward, licensing-gate-embedded compliance architecture continues to expand for Kentucky-chartered institutions pursuing stablecoin-issuer status. Whether FinCEN issues further kiosk-specific or typology-specific guidance beyond FIN-2025-NTC1, and whether Kentucky-specific case data emerges to clarify the practical enforcement effect of the Blanche Memo, remain the two open questions most likely to shape this domain's trajectory in subsequent cycles. This is architectural orientation only, not a forecast of specific regulatory or supervisory outcomes.

domain_sub_briefs · D6 · Cumulative analysis
Standing baseline position

FinCEN's April 2026 NPRM proposes replacing the 'reasonably designed' technical-compliance standard with an outcome-based 'effectiveness' standard and a two-tier program-establishment/implementation enforcement framework; comment period closed June 9, 2026.

Periodic updates (1)
14 Sep 2026 · fim-2026-08-05

Compliance Technology and Active Defence

FinCEN's April 2026 NPRM proposes a structural pivot in how AML/CFT program adequacy itself is measured. The current standard evaluates whether a program is reasonably designed; the proposed reform would shift to an outcome-based effectiveness standard, paired with a two-tier program-establishment and implementation enforcement framework. This is a technology-and-active-defence-relevant development because an effectiveness standard, by its nature, places greater weight on whether a firm's monitoring technology actually produces risk-appropriate outcomes rather than whether its program documentation is well designed on paper; firms relying on legacy rules-based transaction-monitoring architecture are likely to face closer scrutiny of demonstrated outcomes under this standard than under the current design-focused test.

The comment period on the NPRM closed 9 June 2026, and the proposal has not yet been finalized. Separately, the GENIUS Act stablecoin NPRM's treatment of AI and federated-learning monitoring tools as a mitigating supervisory factor is a related compliance-technology signal, suggesting that supervisors are beginning to build explicit regulatory credit for advanced monitoring technology into rule text rather than treating it as a purely voluntary enhancement. No corresponding active-defence or RegTech development from FATF, the EU AMLA build-out, or UK ECCTA implementation surfaced in this cycle's research bundle, leaving the FinCEN program-rule reform as the sole compliance-technology signal this cycle.

Outlook

Watch for the finalized version of the AML/CFT program rule and whether the effectiveness standard survives the rulemaking process in its proposed form; this is the single most consequential compliance-technology signal in the pipeline this cycle. This is analytical orientation only, not a prediction and not compliance advice.

D7 AML/CTF Regime

no_changeno_change

Kentucky MTL licensees are bound under KRS 286.11-063 to comply with all applicable federal and state laws, operationalising the federal BSA framework at the point of state licensure.

Judgment: Kentucky's AML/CTF regime is unchanged: money transmission remains governed by KRS Chapter 286 under DFI, with no dedicated state FIU; SB 189 (kiosk licensing) is enacted but not yet in force (effective 2027-04-30). Probable

D8 Commercial Activity

no_changeno_change
Judgment: No new commercial events for integrity-infrastructure firms in US-KY this cycle. Uncertain
Regulatory horizon
No dated horizon items this cycle. 3 items tracked without a confirmed date.
3 pending date · baseline financial-integrity-2026-07-05
Role action cards
MLRO

Kentucky joined a 34-state BSA/AML settlement against crypto-kiosk operator Coinme over transaction-monitoring, KYC, SAR and EDD deficiencies.

A licensed money-services entity in the kiosk channel was found to have sustained, multi-control AML program deficiencies, detected through a multistate coalition examination rather than state-specific routine review. This is relevant to reportable-activity threshold design and program-adequacy benchmarking for any entity operating or servicing crypto-kiosk channels.

1 evidence refs
Compliance

Kentuckys money-transmitter licensing gate did not itself surface the Coinme AML control failures; detection came via multistate coalition examination.

State money-transmitter licensure, including the KRS 286.11-013 capital floor, should not be read as continuing assurance of AML control adequacy for a licensed crypto-kiosk operator. Kentuckys dedicated kiosk-licensing framework under Senate Bill 189 is enacted but not yet in force, effective April 30, 2027, leaving the general money-transmitter statute as the applicable regime in the interim.

1 evidence refs
Legal

Coinme must wind down Kentucky kiosk operations by January 1, 2027, or face an additional 4 million dollar penalty under the multistate settlement terms.

The settlement structure creates a binding exit deadline with an escalated financial consequence for non-compliance, which is a relevant precedent for how multistate coalitions are structuring remedies against crypto-kiosk operators found to have sustained AML deficiencies.

1 evidence refs
Board

A 34-state regulatory coalition, including Kentucky, settled with a crypto-kiosk operator over sustained AML control failures, with a hard wind-down deadline as the resolution.

The episode is a reputational and strategic marker for how dependent crypto-kiosk channel oversight currently is on multistate coalition examination capacity rather than any single states supervisory resourcing, a structural consideration for any institution with exposure to this conversion channel.

1 evidence refs
CTO

A licensed virtual-currency kiosk operator is exiting the Kentucky market by January 1, 2027, under a multistate AML settlement, ahead of the states dedicated kiosk-licensing framework taking effect in April 2027.

For platform and infrastructure planning touching cash-to-crypto kiosk channels, the sequencing of enforcement before the dedicated licensing regime (Senate Bill 189, effective April 30, 2027) takes effect is a relevant technical-compliance timing marker for any system built around kiosk-channel conversion in this state.

1 evidence refs
Risk

A crypto-kiosk operators sustained, multi-control AML deficiencies were detected via multistate coalition examination rather than Kentucky-specific routine supervision, exposing a gap between entry licensing and ongoing oversight capacity.

This is a concentration and model-risk signal: reliance on a states money-transmitter licensing gate as a proxy for continuing control adequacy in the crypto-kiosk channel is not supported by this cycles detection pathway, which emerged from coalition-level rather than state-specific examination.

1 evidence refs
Operations

No material change for this persona this cycle.

No material change for this persona this cycle

Audit

The Coinme settlement surfaced sustained AML control deficiencies at a licensed Kentucky money-services entity through multistate coalition examination rather than state-specific routine review.

This is relevant to control-testing scope: it indicates that state-specific audit coverage of a licensed crypto-kiosk operator did not independently detect the control failure that a broader multistate examination ultimately identified, a gap worth noting in assessing whether current state-level audit trails and documented evidence for this entity type remain fit for purpose.

1 evidence refs
Standing trackers (T1–T6)
TrackerStatusNote
T1 · Russian Sanctions-Evasion Architectureno_change
T2 · EU AML Package / AMLAno_change
T3 · FATF Grey Listno_change
T4 · Beneficial-Ownership Register Statusno_change
T5 · Crypto & Digital-Asset Integritymaterial_changeKentucky DFI joined the 34-state Coinme BSA/AML settlement.
T6 · Sanctions Regime Divergenceno_change
Registers

Enforcement actions

  • 6 Feb 2025
  • 4 Aug 2025
  • 1 Oct 2025
  • 12 Nov 2025
  • 28 Jul 2026
  • 17 Jul 2026
  • 28 Oct 2026
  • 28 Oct 2026
  • FinCEN issued a Consent Order imposing a civil money penalty on Brink's for operating as an unregistered money transmitter, conducting cross-border and domestic currency shipments without BSA/MSB compliance. Brink's operates armored cash-logistics services to banks nationally, including Kentucky-based financial institutions. 6 Feb 2025
  • FinCEN issued a Notice (FIN-2025-NTC1) alerting financial institutions to fraud and cybercrime typologies associated with cryptocurrency ATM/kiosk transactions, reinforcing BSA reporting expectations for kiosk operators located in high-traffic retail settings common across Kentucky. 4 Aug 2025
  • FinCEN designated Huione Group a primary money laundering concern under Section 311 of the USA PATRIOT Act, severing its access to the U.S. financial system and subsequently proposing to extend the designation to successor entities including H-Pay Service PLC; binds all U.S. financial institutions, including Kentucky-chartered banks, to enhanced due diligence. 1 Oct 2025
  • DOJ launched the Scam Center Strike Force, an interagency initiative combining prosecutions, sanctions, and asset forfeiture to dismantle Southeast Asia-based scam compounds whose laundering infrastructure reaches U.S. financial institutions, including those serving Kentucky-based victims and money-mule accounts. 12 Nov 2025

Sanctions changes

  • 20 Jan 2025
  • 1 May 2025
  • 16 Jan 2026
  • 30 Jun 2026
  • 23 Apr 2026
  • Executive Order 14157 (Jan 20, 2025) created an interagency process designating Mexico-based cartels and other transnational criminal organizations as Foreign Terrorist Organizations and Specially Designated Global Terrorists, materially expanding BSA/OFAC material-support exposure for financial institutions handling proceeds transiting drug-trafficking corridors that include Kentucky. 20 Jan 2025
  • OFAC sanctioned the Karen National Army, its leader Saw Chit Thu, and family members in May 2025 for facilitating cyber-scam compounds and human trafficking on the Myanmar-Thai border, part of the broader crackdown on pig-butchering infrastructure that reaches U.S. victims. 1 May 2025
  • FinCEN's Section 311 special-measure designation of Huione Group (October 2025) and subsequent proposed amendment extending the designation to successor entities (including H-Pay Service PLC) functions as a de facto financial sanction, cutting the entity off from correspondent access to the U.S. financial system. 1 Oct 2025

Regulatory horizon (register)

  • UK ECCTA 2023 failure-to-prevent-fraud embedding maturity horizon
  • AMLR / 6AMLD application date
  • AMLA Work Programme / build-out
  • GENIUS Act stablecoin AML/CFT and sanctions final rule
  • FinCEN AML/CFT Program Rule reform (BSA effectiveness standard)
  • UK ECCTA 2023 failure-to-prevent-fraud embedding maturity horizon
  • SB 189 implementing regulations (Kentucky DFI) for virtual-currency-kiosk licensing
  • Kentucky SB 189 virtual-currency-kiosk licensing and AML subtitle
  • SB 189 virtual-currency-kiosk implementing regulations due
  • SB 189 virtual-currency kiosk licensing framework
  • GENIUS Act stablecoin AML/sanctions implementing rules finalization
  • Digital Asset Market CLARITY Act Senate consideration
  • FinCEN CTA/BOI final rule following domestic-company exemption

Active schemes

  • [HIGH] Federal BOI/CTA narrowing exposes Kentucky shell structures
  • Cash-intensive pari-mutuel wagering BSA carve-out
  • CVC kiosk cash-to-crypto laundering conduit in retail Kentucky
  • [HIGH] Huione-linked stablecoin flows reaching US correspondent exposure (status corrected: active/expanding)
  • Cartel/fentanyl money laundering transiting Appalachian corridor
Sources
  1. Regulatory returns guidance - Risk assessments
  2. https://www.logisticsmiddleeast.com/analysis/how-far-can-europe-go-against-russias-shadow-fleet
  3. https://www.hklaw.com/en/insights/publications/2026/06/what-happened-to-fincens-corporate-transparency-act
  4. https://eucrim.eu/news/new-anti-money-laundering-directive-amld-6/
  5. https://asgam.com/2026/07/28/nationwide-inspection-finds-72-of-cambodias-195-licensed-casinos-involved-in-online-fraud/
  6. https://www.fincen.gov/news/news-releases/fincen-issues-supplemental-alert-fuel-smuggling-and-tax-evasion-schemes-southern
  7. https://ofac.treasury.gov/faqs/1219
  8. https://www.occ.gov/news-issuances/bulletins/2026/bulletin-2026-28.html
  9. https://legiscan.com/KY/text/SB189/id/3381931/Kentucky-2026-SB189-Engrossed.pdf
  10. https://www.lawsociety.org.uk/topics/anti-money-laundering/economic-crime-and-corporate-transparency-act
  11. https://amluae.com/fatf-grey-list-countries-update-19th-june-2026/
  12. https://www.fincen.gov/system/files/2026-04/Program-NPRM-FactSheet.pdf
  13. https://apps.legislature.ky.gov/law/statutes/chapter.aspx?id=38644
  14. https://cornerstonelicensing.com/regulatory/kentucky-dfi-emergency-suspension-order-against-mwg-enterprises-llc-f4d6c17e
  15. https://www.fincen.gov/
  16. https://www.shipkevich.com/kentucky-enacts-comprehensive-licensing-and-consumer-protection-framework-for-virtual-currency-kiosk-operators-effective-april-30-2027/
  17. https://apps.legislature.ky.gov/recorddocuments/bill/26RS/sb189/orig_bill.pdf
  18. https://apps.legislature.ky.gov/law/statutes/statute.aspx?id=14976
  19. Kentucky Legislative Research Commission
  20. Shipkevich PLLC
  21. Kentucky Department of Financial Institutions
  22. U.S. Department of the Treasury / Federal Register
  23. https://www.justice.gov/usao-wdky/pr/federal-grand-jury-indicts-five-fraud-and-money-laundering-related-deed-theft-and
  24. https://www.fincen.gov/news/news-releases/fincen-assesses-25000-civil-money-penalty-against-kentucky-msb
  25. https://www.discern.com/resources/kentucky-financial-services-compliance
  26. TheLevisaLazer (syndicating Governor's office release)
  27. ICBA / Independent Banker (publishing CSBS statement)
  28. FaisalKhan.com (licensing consultancy)
  29. Orrick, Herrington & Sutcliffe
  30. READOUT: Treasury Officials Visit Kentucky and Ohio to Meet with Financial Institutions, Hold FinCEN Exchange on Combatting Fentanyl Trafficking | FinCEN.gov
  31. FinCEN Fines Kentucky Money Services Business and Its Owner/Compliance Officer for Anti-Money Laundering Failures | FinCEN.gov
  32. Guidance | FinCEN.gov
  33. Enforcement Actions | FinCEN.gov
  34. Treasury Convenes Financial Institutions and Law Enforcement to Identify and Dismantle Money Laundering Networks | FinCEN.gov
  35. FinCEN Assesses $25,000 in Civil Money Penalty Against Kentucky MSB | FinCEN.gov
  36. United States Department of the Treasury Financial Crimes Enforcement Network - Home | FinCEN.gov
  37. FinCEN Announces Data-Driven Border Operation to Address Potential Money Laundering | FinCEN.gov
  38. News | FinCEN.gov
  39. FinCEN Year In Review | FinCEN.gov
  40. STATE CONTACT INFORMATION FOR MSBs
  41. Fact Sheet on MSB Registration Rule | FinCEN.gov
  42. Fincen
  43. FinCEN Notice, FIN-2025-NTC1, August 4, 2025
  44. United States Department of the Treasury Financial Crimes Enforcement Network - Home | FinCEN.gov
  45. fincen logo MONEY SERVICES BUSINESS REGISTRATION FACT SHEET
  46. 1 FinCEN Advisory United States Department of the Treasury
  47. United States Attorney's Office for the Eastern District of Kentucky - Company Profile and News - Bloomberg Markets
  48. Edward B Atkins, United States District Court for the Eastern District of Kentucky: Profile and Biography - Bloomberg Markets
  49. Hanly A Ingram, United States District Court for the Eastern District of Kentucky: Profile and Biography - Bloomberg Markets
  50. Matthew A Stinnett, United States District Court for the Eastern District of Kentucky: Profile and Biography - Bloomberg Markets
  51. The Scam Center Strike Force: A Whole-of-Government Response to Global Crypto Fraud | TRM Labs
  52. 2026 Crypto Crime Report: Scams
  53. The DOJ's NCET Disbanded: What This Means for Digital Assets - Chainalysis
  54. 2025 Crypto Crime Report
  55. FinCEN Notice, FIN-2025-NTC1, August 4, 2025
  56. Justice Department Scales Back Cryptocurrency Enforcement - Bloomberg
  57. About The Coin Laundry global crypto investigation
  58. Crypto Sanctions: 2026 Crypto Crime Report
  59. Crypto Bill Seen Hindering Fraud Prosecutions, States Warn - Bloomberg
  60. Enforcement Actions for Failure to Register as a Money Services Business | FinCEN.gov
  61. Important Information for MSBs | FinCEN.gov
  62. Money Services Business (MSB) Registration | FinCEN.gov
  63. MSB Registrant Search | FinCEN.gov
  64. Financial Crimes Enforcement Network Registration of Money Services Business
  65. UNITED STATES OF AMERICA FINANCIAL CRIMES ENFORCEMENT NETWORK
  66. MEMORANDUM OF UNDERSTANDING
  67. National Health Care Fraud Takedown: A Coordinated Federal Response to Complex Criminal Networks | TRM Labs
  68. Press Releases | FinCEN.gov
  69. 1 1. See 31 U.S.C. § 5312(a)(2); 31 C.F.R. § 1010.100(t). 2.
  70. 1 The U.S. Department of the Treasury’s (Treasury) Financial
  71. PPSI-AMLCFT-NPRM.pdf
  72. Confessions of a Laptop Farmer: How an American Helped North Korea’s Wild Remote Worker Scheme
  73. Watch North Korea’s Hidden Remote IT Scheme - Bloomberg
  74. Video: The Secret North Korean Workforce Inside US Companies - Bloomberg
  75. SAR-FAQs-October-2025.pdf
  76. FIN-2025-G001 Issued: September 5, 2025
  77. CONSENT ORDER IMPOSING CIVIL MONEY PENALTY
  78. Federal Register/Vol. 91, No. 69/Friday, April 10, 2026/ ...
  79. FinCEN Consent Order Imposing Civil Money Penalty
  80. Interagency Statement on Sharing Bank Secrecy Act Resources | FinCEN.gov
  81. Bank Secrecy Act Filing Information | FinCEN.gov
  82. FinCEN Number 2023-03, CONSENT ORDER IMPOSING ...
  83. DOJ Seizes USD 61 Million Tied to Pig Butchering Scam in North Carolina | TRM Labs
  84. U.S. Launches New Strike Force to Combat $10 Billion Scam Industry
  85. Pig butchering scam
  86. 1 1. See 31 U.S.C. § 5312(a)(2); 31 CFR § 1010.100(t). 2.
  87. US Seizes Bitcoin Worth $15 Billion in 'Pig-Butchering' Case
  88. FinCEN Issues Alert on Prevalent Virtual Currency Investment Scam Commonly Known as “Pig Butchering” | FinCEN.gov
  89. The behavioral detection of pig butchering scams on blockchain: Flagging suspect wallets and speeding up investigations
  90. What is Pig Butchering? Crypto Investment Scam - Chainalysis
  91. APAC-based Law Enforcement Freezes $47 Million in Pig Butchering Funds
  92. Notice of Fraudulent Communications Requesting Payments Involving OFAC
  93. Treasury Whistleblower Program | U.S. Department of the Treasury
  94. Related Government Agencies/Press Contacts | FinCEN.gov
  95. FinCEN Reminds the Public to be Wary of Fraudulent Correspondence and Phone Calls | FinCEN.gov
  96. FinCEN Alert on COVID-19 Employee Retention Credit Fraud
  97. Independent Review of Disclosure and Fraud Offences
  98. Statement by FinCEN Director Andrea M. Gacki before the House Committee on Financial Services, Subcommittee on National Security, Illicit Finance, and International Financial Institutions | FinCEN.gov
  99. Fraud Warning
  100. Unpacking Trump's Executive Order on Digital Financial Technology | TRM Labs
  101. 2025 Crypto Regulatory Round-Up
  102. Landmark cryptocurrency legislation passes US House, to be signed into law by President Trump - ICIJ
  103. Digital Assets in Digital Finance Regulatory Standards and Law
  104. What the GENIUS and Market Structure Bills Mean for Crypto Compliance
  105. Crypto regulatory affairs: OCC gives US banks go-ahead on riskless crypto transfers
  106. How crypto regulation changed in 2025: a global review
  107. Digital assets: Final report HC 1486 Law Com No 412
  108. SEC draws the line: Which cryptoassets are securities and which are not?
  109. House Plan Sets Tax Harbor for Stablecoins, Crypto Staking - Bloomberg
  110. FinCEN-Supplemental-Advisory-on-Fentanyl-508C.pdf
  111. Press Releases | FinCEN.gov
  112. FinCEN Exchange in the Press | FinCEN.gov
  113. Statement | FinCEN.gov
  114. Prepared Remarks of FinCEN Deputy Director Jamal El-Hindi, delivered at the CSBS State Federal Supervisory Forum | FinCEN.gov
  115. Definition of Money Transmitter (Merchant Payment Processor) | FinCEN.gov
  116. FinCEN Alert, FIN-2024-Alert005, December 18, 2024
  117. MONEY TRANSMITTER REGULATORS ASSOCIATION
  118. Application of the Definition of Money Transmitter to Brokers and Dealers in Currency and Other Commodities | FinCEN.gov
  119. Money Services Business (MSB) Registration | FinCEN.gov
  120. Definition of Money Services Business (Money Transmitter/Currency Dealer or Exchanger) | FinCEN.gov
  121. Pandora Papers reveal Emirati royal families’ role in secret money flows - ICIJ
  122. Kentucky
  123. Application of the Definition of Money Services Business to Certain Owner-Operators of Automated Teller Machines Offering Limited Services | FinCEN.gov
  124. Definition of Money Transmitter/Stored Value (Gift Certificates/Gift Cards) | FinCEN.gov
  125. Frequently Asked Questions Casino Recordkeeping, Reporting, and Compliance Program Requirements | FinCEN.gov
  126. Frequently Asked Questions Casino Record keeping, Reporting, and Compliance Program Requirements | FinCEN.gov
  127. Financial Crimes Enforcement Network FinCEN Currency Transaction Report
  128. FinCEN Correspondence with the American Gaming Association Regarding Sports Betting Conducted on Behalf of Third Parties | FinCEN.gov
  129. Pubs and clubs toolkit
  130. Casino Industry Currency Transaction Reporting
  131. CTR CPamphlet
  132. What Is Transaction Monitoring? AML Compliance, KYT & Crypto Monitoring Guide - Chainalysis
  133. A Cash Wager on Table Game Play Represents a "Bet of Currency" | FinCEN.gov
  134. Regulatory returns guidance - Risk assessments
  135. FinCEN
  136. FinCEN
  137. Kentucky Department of Financial Institutions
  138. FinCEN
  139. FinCEN
  140. Chainalysis
  141. ICIJ
  142. TRM Labs
  143. FinCEN
  144. FinCEN
Coverage gaps
fim-int-2026-07-07-G001: No state-disaggregated FinCEN/DOJ e…
fim-int-2026-07-07-G001: No state-disaggregated FinCEN/DOJ enforcement reporting exists to independently verify the true intensity of Kentucky-specific BSA/AML enforcement relative to inferred national-action exposure. [resolved]
fim-int-2026-07-07-G002: The claim that the United States is…
fim-int-2026-07-07-G002: The claim that the United States is absent from current EU and UK high-risk third country lists lacks a dated primary-source citation from the European Commission or HM Treasury this cycle and requires direct re-verification. [resolved]
fim-int-2026-07-07-G003: The final published text and confir…
fim-int-2026-07-07-G003: The final published text and confirmed effective date of the GENIUS Act PPSI AML/CFT rule are not yet available; only the NPRM and statutory deadline are confirmed as of this cycle. [resolved]
fim-int-2026-07-07-G004: No evidence was found this cycle on…
fim-int-2026-07-07-G004: No evidence was found this cycle on whether the Kentucky legislature has proposed or is considering a state-level beneficial-ownership registry to backstop the federal CTA narrowing. [resolved]
fim-int-2026-07-07-G005: No Kentucky-specific case data exis…
fim-int-2026-07-07-G005: No Kentucky-specific case data exists to independently confirm the practical enforcement impact of the DOJ Blanche Memo on Kentucky-based MSBs and CVC kiosk operators, beyond national-level inference. [resolved]
fim-int-2026-08-05-G001: D4 conflict-finance coverage this c…
fim-int-2026-08-05-G001: D4 conflict-finance coverage this cycle is limited to Houthi oil and Mexican cartel fuel-theft; no dedicated conflict-mineral/extractive-sector finding surfaced (Sahel, DRC). [resolved]
fim-int-2026-08-05-G002: No new material found in FATF/GAFIL…
fim-int-2026-08-05-G002: No new material found in FATF/GAFILAT channels for Colombia this cycle; the last Follow-Up Mutual Evaluation Report remains dated 2023. [resolved]
fim-int-2026-08-05-G003: EU AMLR/AMLD6/AMLA primary EUR-Lex …
fim-int-2026-08-05-G003: EU AMLR/AMLD6/AMLA primary EUR-Lex or amla.europa.eu text was not directly retrieved this cycle; reliance on secondary/vendor trackers caps confidence at Assessed. [resolved]
fim-int-2026-08-05-G004: No primary National Bank of Cambodi…
fim-int-2026-08-05-G004: No primary National Bank of Cambodia statement text was retrieved verbatim regarding the casino-sector inspection results. [resolved]
fim-int-2026-09-22-G001 ({'scheme': 'financial_integrity', '…
fim-int-2026-09-22-G001 ({'scheme': 'financial_integrity', 'value': 'D7'}): Primary Kentucky DFI order text for the MWG Enterprises emergency suspension was not independently located this cycle; AML/BSA nexus (if any) is unconfirmed. [resolved]
fim-int-2026-09-22-G002: Tier D jurisdiction watch (Cambodia…
fim-int-2026-09-22-G002: Tier D jurisdiction watch (Cambodia, Laos, Mexico, Colombia) was not actively searched this cycle; pooled union web-search budget was concentrated on the bound JID US-KY. [resolved]
fim-int-2026-09-28-G001 ({'scheme': 'financial_integrity', '…
fim-int-2026-09-28-G001 ({'scheme': 'financial_integrity', 'value': 'D1'}): No T1 primary source was located for domains D1 (Sanctions), D2 (Beneficial Ownership), D3 (Enabler Jurisdictions) and D4 (Conflict Finance) this cycle; the union dispatch scope concentrated search effort on US-KY. [resolved]
fim-int-2026-09-28-G002: Standing trackers T1, T2, T3 and T6…
fim-int-2026-09-28-G002: Standing trackers T1, T2, T3 and T6 (global-instrument-scoped) were not actively re-researched within this single-jurisdiction union dispatch; this is a coverage gap rather than a finding of no activity. [resolved]
fim-int-2026-09-28-G003 ({'scheme': 'financial_integrity', '…
fim-int-2026-09-28-G003 ({'scheme': 'financial_integrity', 'value': 'D7'}): The underlying violation basis for the DFI emergency suspension against MWG Enterprises, LLC was not independently retrieved from the primary DFI order this cycle. [resolved]
fim-int-2026-10-04-G001: Tier D watch jurisdictions (Cambodi…
fim-int-2026-10-04-G001: Tier D watch jurisdictions (Cambodia, Laos, Mexico, Colombia) were not independently re-verified this cycle; pooled budget was concentrated on the bound US-KY JID. [resolved]
fim-int-2026-10-04-G002: Domains D1-D4 (sanctions, beneficia…
fim-int-2026-10-04-G002: Domains D1-D4 (sanctions, beneficial ownership, enabler jurisdictions, conflict finance) returned no US-KY-specific material this cycle; recorded as a coverage gap rather than an affirmative no-activity finding. [resolved]
fim-int-2026-10-04-G003: Primary Treasury rule text for the …
fim-int-2026-10-04-G003: Primary Treasury rule text for the $10bn GENIUS Act stablecoin-issuer threshold was not independently located this cycle; relied on secondary financial-press summary. [resolved]
fim-int-2026-10-11-G001 ({'scheme': 'financial_integrity', '…
fim-int-2026-10-11-G001 ({'scheme': 'financial_integrity', 'value': 'D5'}): Primary SB189 statutory text and KRS Subtitle 13 codification were not independently retrieved this cycle; AML-program finding rests on Tier-3 legal commentary. [resolved]
fim-int-2026-10-11-G002: Tier D watch jurisdictions (KH, LA,…
fim-int-2026-10-11-G002: Tier D watch jurisdictions (KH, LA, MX, CO) were not independently researched this cycle due to pooled union search-budget allocation toward US-KY. [resolved]
fim-int-2026-10-25-G001: No KY-specific sanctions, beneficia…
fim-int-2026-10-25-G001: No KY-specific sanctions, beneficial-ownership, or conflict-finance development was located this cycle; D1/D2/D4 coverage remains structurally thin at this per-JID dispatch level. [resolved]
fim-int-2026-11-01-G001 ({'scheme': 'financial_integrity', '…
fim-int-2026-11-01-G001 ({'scheme': 'financial_integrity', 'value': 'D5'}): No KHRG/DFI administrative-regulation filing log was reachable this pass to confirm whether DFI has published its own consent order for the Coinme settlement. [open]
fim-int-2026-11-01-G002: D1, D2, D4 and D6 show thin coverag…
fim-int-2026-11-01-G002: D1, D2, D4 and D6 show thin coverage this cycle for US-KY; no material signal identified in sanctions, beneficial ownership, conflict finance or compliance-technology domains. [open]
FIM-GAP-001 (D2): Kentucky's cash-intensive pari-mutuel hors…
FIM-GAP-001 (D2): Kentucky's cash-intensive pari-mutuel horse-racing industry is structurally excluded from the BSA casino definition, meaning racetracks are not subject to CTR/SAR/AML-program obligations applied to comparable cash-intensive gaming establishments elsewhere in the BSA framework.
FIM-GAP-002 (D2): FinCEN's 2025 interim final rule exempting…
FIM-GAP-002 (D2): FinCEN's 2025 interim final rule exempting domestic reporting companies from CTA beneficial-ownership reporting removed federal BO visibility for Kentucky-formed LLCs and corporations, and Kentucky maintains no state-level BO registry to backstop the rollback.
FIM-GAP-003 (D3): Publicly available, named Kentucky-specifi…
FIM-GAP-003 (D3): Publicly available, named Kentucky-specific federal enforcement actions within the 18-month baseline window are sparse relative to the volume of national BSA/AML enforcement; most material bearing on Kentucky is inferred from national actions (Brink's, Huione, CVC kiosk notice) rather than Kentucky-targeted actions.
FIM-GAP-004 (D5): The April 2025 DOJ 'Ending Regulation by P…
FIM-GAP-004 (D5): The April 2025 DOJ 'Ending Regulation by Prosecution' memorandum (Blanche Memo) directs prosecutors to deprioritize standalone BSA/regulatory violations involving digital assets absent willful misconduct, potentially reducing enforcement pressure on Kentucky-based MSBs and CVC kiosk operators for compliance-only failures.

Evidence

Confidence-tiered claims

virtual currency kiosk (crypto ATM) operators, DFI-administered, effective 2027-04-30 [Source 1]
Probable · 1 source
minimum net worth $500,000; surety bond $500,000-$5,000,000 [Source 1]
Probable · 1 source
daily per-user cap $2,000; $10,500 aggregate cap for new users' first 30 days; mandatory ID verification per transaction [Source 1]
Probable · 1 source
money transmission and virtual-currency transmission, DFI-administered via NMLS [Source 1]
Probable · 1 source
$1,000-$5,000 per violation per day; up to $25,000/day for a pattern of violations [Source 1]
Probable · 1 source
$10 billion consolidated total outstanding issuance threshold for state-vs-federal stablecoin licensing track [Source 1]
Uncertain · 1 source
Virtual-currency kiosk operators must maintain anti-fraud and AML policies consistent with the Bank Secrecy Act, including designation of a chief compliance officer, alongside a $500,000 minimum net worth and surety bond [Source 1]
Probable · 1 source
Five defendants indicted 2026-08-19 for deed-theft/vehicle-title fraud with associated money-laundering counts [Source 1]
Probable · 1 source
DFI supervises money transmission, including virtual-currency exchange/custody where it meets the 'monetary value' test, under KRS Chapter 286 Subtitle 11. [Source 1]
Probable · 1 source
SB 189 (signed 2026-04-13) creates a licensing and consumer-protection regime for virtual-currency-kiosk operators; effective 2027-04-30; DFI regulations due by 2027-01-01. [Source 1]
Probable · 1 source
Civil penalties up to $5,000 per violation per day under KRS 286.11-047; enhanced civil penalties up to $25,000 per violation per day under KRS 286.12-140 for patterns of violation. [Source 1]
Probable · 1 source
62853.57 [Source 1]
Probable · 1 source
500000 [Source 1]
Probable · 1 source
2027-04-30 [Source 1]
Probable · 1 source
Kentucky DFI joined a 34-state, $2.5M BSA/AML settlement over transaction-monitoring, KYC, SAR, EDD and record-keeping deficiencies; Kentucky's allocated share is $62,853.57; Coinme must wind down kiosk operations by 2027-01-01 or face a further $4M penalty. [Source 1]
Probable · 1 source