United States — Maine US-ME

Maine enacted two statutory changes this cycle that materially tighten the state's crypto-kiosk and virtual-currency exchanger architecture. Public Law Chapter 542, signed March 3, 2026, authorizes NMLS registration of cash-dispensing machines and expressly prohibits operating a cash-dispensing machine as a virtual-currency kiosk unless the operator holds a Maine money-transmitter licence. The statute also raises the daily fine for noncompliance from $5 to $25 and authorizes background checks and NMLS processing fees for registrants. This is assessed-confidence material sourced to a single T3 law-firm alert (Orrick InfoBytes); the primary statute text has not been independently retrieved this cycle, a gap the evidence register itself notes.

Signed April 22, 2026, the Money Transmission Modernization Act (LD 2112) amends and repeals large parts of Maine's existing money-transmission statute and introduces a requirement — characterized as first-in-the-nation — that cryptocurrency companies verify that a digital wallet receiving customer funds actually belongs to that customer before completing the transfer. This targets a specific fraud vector: scripts that direct victims to send funds to what appears to be their own wallet, where the destination wallet is in fact controlled by a scammer rather than the victim. This claim carries high confidence, corroborated by the Maine Bureau of Consumer Credit Protection's own consumer-facing guidance (a Tier-1 primary source) alongside independent secondary trade-press reporting, which is a materially stronger sourcing posture than the PL Chapter 542 material.

Alongside the two enactments, the Maine Bureau of Consumer Credit Protection secured an approximately $1.9 million consent agreement with Bitcoin Depot, compensating consumers defrauded through its kiosks between 2022 and 2025. Claims closed April 1, 2026, and the agreement requires Bitcoin Depot to become a licensed money transmitter going forward — meaning the settlement operates as both restitution and a forcing mechanism into the very licensing regime the concurrent legislation was tightening. This claim is assessed-confidence, corroborated across multiple T3 outlets but without an independently retrieved T1 consent-order text.

Read as a set, these three developments describe a single coherent regulatory project rather than three unrelated items: a legislature closing a licensing gap (PL Ch. 542), a licensing statute gaining a new customer-protection control tied to fraud typology (LD 2112's wallet-verification duty), and an enforcement action against the most visible operator in the affected sector (Bitcoin Depot) that both compensates victims and pushes the operator into the tightened licensing perimeter. Jurisdiction risk for Maine on this domain moves in the decreasing (improving) direction as a structural rather than episodic matter — the developments are legislative and regulatory-settlement in nature, not a single enforcement headline, and are expected to persist rather than lapse.

The multi-year fraud window underlying the Bitcoin Depot settlement — consumers defrauded from 2022 through 2025 — is itself an enablement signal under the architecture-over-incident register: for roughly three years, Maine's crypto-kiosk sector operated within a licensing framework that did not compel the wallet-ownership verification control that LD 2112 has now introduced, and the absence of an equivalent state enforcement action prior to this cycle's settlement is as analytically significant as the settlement itself. The claims sourced this cycle sit predominantly on the AML/consumer-protection axis; no counter-terrorist-financing-specific finding was identified for Maine's crypto-kiosk sector this cycle, and the three-pillar balance principle cautions against treating that absence as a CTF clean bill rather than as an under-searched dimension.

Outlook

The Maine Bureau of Consumer Credit Protection is expected to issue implementing rulemaking on the kiosk-licensing and unhosted-wallet-verification requirements in the fourth quarter of 2026. The evidence base already flags a readiness gap: general industry practice among kiosk operators has lagged the new requirements, and some operators are reportedly withdrawing machines from the state rather than build the required verification controls. Watch for whether the rulemaking hardens the wallet-verification standard into a specific technical requirement or leaves it as a principles-based duty, and whether kiosk-operator withdrawal accelerates or stabilizes once the rulemaking is finalized. The largest gap in this cycle's evidence is the absence of independently retrieved primary statute text for both PL Chapter 542 and LD 2112; a future cycle should prioritize closing that gap given the materiality of the obligations involved.

Maine's AML/CTF posture for crypto-adjacent activity runs through its general money-transmitter regime under Title 32, Chapter 80, rather than through a freestanding crypto-AML statute, and this cycle's developments tighten that regime at exactly the obligated-entity population — kiosk operators and virtual-currency exchangers — that had previously carried the lightest oversight. The Money Transmission Modernization Act (LD 2112), signed April 22, 2026, and Public Law Chapter 542, signed March 3, 2026, jointly narrow the scope for unlicensed operation: PL Chapter 542 requires a Maine money-transmitter licence before a cash-dispensing machine may be operated as a virtual-currency kiosk, while LD 2112 introduces a customer-due-diligence-adjacent control requiring verification that a destination digital wallet actually belongs to the customer receiving funds. Read through the AML/CTF lens specifically, that verification duty functions analogously to a beneficiary-verification check within a payment chain: it is not a traditional CDD/KYC-at-onboarding control, but a transaction-time control aimed at a specific typology (scripted self-transfer fraud) that the traditional onboarding-stage CDD regime does not reach.

This is an important distinction for AML program design: a money transmitter that has already onboarded a customer through standard identity verification can still be the unwitting instrument of a self-transfer fraud, because the fraud operates by manipulating the customer into transferring their own funds to a wallet the customer believes is theirs. Maine's new verification duty inserts a control at the transaction stage rather than relying solely on onboarding-stage CDD, which is a meaningful architectural choice regardless of the confidence level attached to the specific enacting statute's text.

The Bitcoin Depot consent agreement adds a compliance-program dimension to this cycle's AML/CTF picture: the settlement requires the operator to become a licensed money transmitter, which brings it inside Maine's AML-adjacent supervisory perimeter (examination rights, licensing conditions, and the new wallet-verification duty) for the first time. Viewed architecturally, the settlement functions less as a one-off financial penalty and more as an onboarding event into the state's obligated-entity population, which is the more durable outcome from an AML/CTF program-design perspective than the dollar figure of the settlement itself.

The state's overall AML/CTF trajectory this cycle is assessed as a watch item rather than a settled improvement: the developments are structural and are expected to persist, but Maine's underlying obligated-entity architecture is unchanged in its basic form — the money-transmitter licence remains the operative AML instrument, and what has changed is the scope of who must hold that licence and what additional transaction-level control they must apply, not the creation of a new supervisory body or reporting regime. Consistent with the three-pillar balance principle, this cycle's Maine evidence sits almost entirely on the AML side of the ledger; no counter-terrorist-financing-specific or counter-proliferation-financing-specific finding was identified for the state's crypto-kiosk sector, and that absence should be read as a research gap rather than a clean CTF finding, particularly given that crypto kiosks have historically been flagged elsewhere as a channel of interest for CTF-adjacent typologies. No independent evidence was identified this cycle regarding STR/CTR-equivalent thresholds or a designated-reporting-entity list beyond the money-transmitter licence category; the AML/CTF read here is therefore built entirely from the licensing and consumer-protection statutes rather than from a dedicated AML supervisory filing.

Outlook

Maine Bureau of Consumer Credit Protection rulemaking expected in the fourth quarter of 2026 will determine whether the wallet-verification duty is implemented as a specific technical standard or left as a principles-based obligation for licensees to satisfy through their own procedures. That implementation choice will materially affect the practical AML/CTF compliance lift for licensed money transmitters operating kiosks or exchanges in Maine. Analysts should also watch whether Maine's approach becomes a template referenced in other states' money-transmission modernization efforts, given that the underlying fraud typology is not unique to Maine.