United States — Maryland US-MD

Maryland inherits sanctions-compliance obligations wholesale from the federal OFAC architecture; there is no independent state sanctions regime, so this cycle most significant D1 signal is the sustained scale of the OFAC Iran maximum-pressure campaign under National Security Presidential Memorandum 2. NSPM-2 was issued February 4, 2025, and by early 2026 OFAC had sanctioned more than 875 persons, vessels, and aircraft in 2025 alone under the campaign, with designations continuing into 2026 under Executive Order 13599 and the Iranian Transactions and Sanctions Regulations -- a sustained enforcement escalation rather than a single policy directive, correcting an earlier baseline assessment that understated the scale of the campaign. For any Maryland-domiciled bank or cross-sector firm maintaining correspondent or trade-finance relationships touching Iran-linked counterparties, this is not a one-off designation wave but a structurally elevated screening burden, sitting within the counter-terrorist-financing pillar as much as the traditional AML pillar, that should be assumed durable for the balance of 2026.

Running in parallel, and analytically distinct, is a pattern of Russia-related sanctions delistings by OFAC in 2026 that is not mirrored by the EU Council or the UK Office of Financial Sanctions Implementation. The OFAC recent-actions log shows repeated 2026 Russia-related designation removals occurring alongside continued counter-narcotics and transnational-criminal-organization designations, and this divergence -- OFAC removing Russia-related designations while EU and UK lists remain comparatively static -- is not a technical footnote. It creates listing-scope mismatch and secondary-sanctions exposure for any Maryland firm transacting with European counterparties, since a name cleared on the US SDN list may remain designated under EU or UK regimes. This is precisely the kind of cross-regime divergence the sanctions-architecture filter of this monitor is designed to surface: the compliance burden falls not on tracking a single list but on reconciling two increasingly divergent ones, and correspondent-banking customer relationships are the specific typology most exposed to this mismatch.

A third development sharpens the gatekeeper dimension of Maryland sanctions exposure. The OFAC March 31, 2026 sanctions advisory on sham transactions sets out factors examiners will use to evaluate sanctions evasion structured through sham commercial or financial transactions. This guidance is directly relevant to Maryland-based trust and corporate-services providers, fund structures, and real-estate settlement professionals serving high-net-worth and corporate clients, who function as the professional layer through which such structures are typically built -- a relevance made more acute by the fact that the Maryland real-estate gatekeeper class remains, as detailed in the enabler-jurisdiction domain below, categorically outside Bank Secrecy Act AML program obligations even as its exposure to OFAC-relevant advisory guidance grows.

A fourth, more indirect signal concerns the wider architecture of Russian sanctions evasion. Vendor analytics identify the A7 sanctions-evasion platform cluster -- including the A7A5 stablecoin and the Garantex-successor Grinex network -- as linked to at least 56 billion dollars in 2025 volume; Garantex itself was disrupted in March 2025, and a successor platform emerged rapidly thereafter. Maryland relevance to this architecture is indirect, running through the global custodian and asset-manager screening exposure that any Maryland-domiciled institution with international correspondent relationships inherits, rather than through any direct Maryland nexus, and the underlying sourcing here is vendor-tier rather than primary-regulatory, warranting a correspondingly more cautious confidence assessment than the OFAC-sourced findings above.

Maryland own FATF-adjacent standing is unremarkable and stable: the United States is not listed on the FATF Jurisdictions Under Increased Monitoring or Call for Action lists as of the February 13, 2026 plenary, which instead added Kuwait and Papua New Guinea to increased monitoring while Iran, North Korea, and Myanmar remain on the Call for Action list. That stability at the jurisdictional level, however, sits awkwardly against the widening OFAC-EU-UK divergence described above -- a reminder that FATF list status and bilateral sanctions-list alignment are separate axes of exposure, and that a jurisdiction can be FATF-compliant while still generating meaningful secondary-sanctions friction for its domiciled institutions.

Outlook

The controlling near-term uncertainty in this domain is not whether the OFAC Iran enforcement posture continues -- the evidence indicates it will -- but whether the Russia-delisting pattern deepens the divergence with EU and UK sanctions architecture, and how quickly Maryland-domiciled firms with European exposure adjust screening logic to account for two lists moving in different directions. The next FATF plenary review, expected October 2026, is a scheduled checkpoint that could adjust grey-list composition with knock-on effects for correspondent-banking and enhanced due-diligence obligations, though the outcome is not yet determinable. This assessment carries an evidentiary caveat: continuation of the NSPM-2 enforcement pace through the remainder of 2026 is confirmed only through the January-February 2026 Treasury releases examined this cycle, and the A7-Garantex-Grinex evasion-cluster figures rest on vendor rather than primary-regulatory sourcing; both should be revisited as later data becomes available.

Maryland is not an EEA jurisdiction, and the supervisory perimeter of the EU AML Package does not apply directly to Maryland-domiciled entities; the developments directly relevant to Maryland own regulatory exposure sit instead within the federal Bank Secrecy Act and Corporate Transparency Act architecture that Maryland inherits in full, with no independent state beneficial-ownership statute layered on top. Two federal rollbacks are material this cycle. First, a FinCEN March 26, 2025 interim final rule exempting all US-formed domestic reporting companies from Corporate Transparency Act beneficial-ownership reporting remains in force. This is not, however, a settled legislative reversal of the beneficial-ownership architecture of the 2021 AML Act -- it is administrative policy subject to revision, and the December 2025 Eleventh Circuit ruling upholding the constitutionality of the CTA leaves both litigation and administrative-reversal risk genuinely live rather than resolved in either direction; the underlying reporting obligation, 31 CFR 1010, remains only partially covered as a control matter for cross-sector reporting companies as a result. Second, the US District Court for the Eastern District of Texas vacated the nationwide Residential Real Estate Rule on March 19, 2026 -- a material correction to an earlier assessment that had presented the Rule as taking effect March 1, 2026 and replacing the Geographic Targeting Order program outright. FinCEN and the Department of Justice have appealed; pending that appeal, reporting persons face no Real Estate Report obligation, and the Baltimore-area Geographic Targeting Order program, renewed through February 2026 for title insurance companies, is the sole operative real-estate transparency mechanism covering Maryland counties, functioning as a covered control for that narrower reporting population even as the broader RRE Rule obligation remains suspended.

The practical significance of these two rollbacks is illustrated directly by an active case: a multimillion-dollar Potomac, Maryland mansion acquired through a layered structure of shell companies and overseas trusts by the network of former Gambian president Yahya Jammeh, now the subject of Department of Justice forfeiture litigation in the District of Maryland. This is precisely the corporate-opacity and real-estate-layering vector, involving politically exposed persons, high-net-worth individuals, and fund-structure vehicles, that both the CTA domestic exemption and the RRE Rule vacatur leave structurally less visible -- a foreign-PEP kleptocratic-capture case using exactly the vehicle types the transparency architecture was designed to expose, and a direct illustration of why the CTA beneficial-ownership reporting obligation, even as currently exempted for domestic entities, remains conceptually the control that would have most directly addressed this scheme.

Globally, the EU AML Package sets the structural direction for beneficial-ownership transparency, and it is worth stating as durable backdrop against which the Maryland picture should be read, even though it does not bind Maryland directly. The package comprises three distinct instruments: the AML Regulation (AMLR, Regulation (EU) 2024/1624), which is directly applicable across Member States without transposition; the sixth AML Directive (6AMLD), which each Member State transposes into national law individually; and the AMLA Regulation (Regulation (EU) 2024/1620), which establishes the Anti-Money Laundering Authority. The direct- and indirect-supervision perimeter of AMLA is shifting EU AML supervision from a purely national-authority model toward a hybrid EU-level regime, with AMLA positioned to directly supervise a defined set of high-risk cross-border obliged entities while indirectly overseeing national supervisors for the remainder. For Maryland, this is contextual rather than binding: it illustrates a jurisdiction moving toward centralized, harder-to-arbitrage beneficial-ownership supervision at precisely the moment the US federal layer applicable to Maryland entities is narrowing on two independent fronts. The comparison is instructive for assessing relative transparency trajectories, not a statement that Maryland or the broader US falls within the AMLA perimeter.

Outlook

The controlling uncertainty for the Maryland beneficial-ownership perimeter is not whether opacity vectors have reopened -- the CTA exemption and RRE Rule vacatur both indicate they have -- but whether either rollback proves durable. The CTA domestic exemption remains subject to revision following its own comment period and to the litigation risk the constitutionality ruling of the Eleventh Circuit keeps alive; the RRE Rule vacatur is under active FinCEN and Department of Justice appeal with a timeline and likely outcome not yet established from this cycle sourcing. Both should be tracked as unresolved rather than settled, and continued operation of the Baltimore-area GTO program should be read as an interim patch covering a narrower reporting population rather than a permanent substitute for either instrument.

The principal Maryland enabler-jurisdiction signal this cycle is a widening gap rather than a new one: real-estate settlement professionals -- attorneys, title insurers, and escrow agents who conduct Maryland residential closings -- remain categorically outside Bank Secrecy Act AML program requirements. This gap, which the now-vacated Residential Real Estate Rule would have closed by extending the 31 U.S.C. 5318(h) program obligation to real-estate professionals, is now indefinite in duration pending the appeal by FinCEN and the Department of Justice of the March 19, 2026 vacatur; the relevant obligation remains formally proposed rather than in force, and the associated control-gap signal is best characterized as uncovered rather than partial. The professional layer that structures Maryland real-estate transactions for fund-structure and high-net-worth clients therefore continues to operate without an enforceable AML program obligation, even as the OFAC March 2026 sham-transactions advisory signals heightened supervisory interest in exactly the kind of structuring this gatekeeper class can facilitate.

The independent Maryland AML-relevant regulatory architecture is narrow: the Office of the Commissioner of Financial Regulation administers state money-transmitter licensing under Title 12 of the Financial Institutions Article, but no independent state AML statute exists. This means the enabler-jurisdiction risk profile of Maryland is defined almost entirely by which federal gatekeeper obligations do and do not apply, rather than by any state-specific regulatory choice. That said, the evidence base available to this monitor for assessing Maryland own supervisory activity is thin: sourcing this cycle relies predominantly on federal FinCEN, OFAC, and DOJ material supplemented by investigative journalism, and Maryland Office of the Commissioner of Financial Regulation licensing and enforcement dockets are not well represented. This is a gap in the evidence base itself, not a statement about the adequacy of any firm internal controls, and it limits confident assessment of state-level supervisory intensity -- a limitation this monitor rates at only possible confidence given the thinness of the underlying sourcing.

The Jammeh-network Potomac property case is also relevant here as an enabler-jurisdiction illustration: the shell-company and trust structures used to acquire and hold the property required professional facilitation -- company formation, trust administration, and likely real-estate closing services -- of exactly the kind that remains outside enforceable BSA AML program obligations in Maryland pending resolution of the RRE Rule appeal. The enabler gap and the beneficial-ownership rollback described elsewhere in this brief are, in this sense, two faces of the same structural exposure: a professional-facilitator class operating without a mandated AML program, serving exactly the customer typologies -- politically exposed persons, high-net-worth individuals, and fund structures -- for which beneficial-ownership opacity carries the greatest illicit-finance risk.

Outlook

Absent enactment of the RRE Rule or an equivalent replacement, and absent a state-specific extension of AML program obligations to Maryland real-estate settlement professionals, this gatekeeper gap should be read as structurally persistent rather than transitional. Whether the FinCEN and Department of Justice appeal succeeds, and on what timeline, is the single clearest catalyst that would close it; no other near-term mechanism for closure is currently visible in the evidence base. Priority should be given in subsequent research cycles to directly retrieving Maryland Office of the Commissioner of Financial Regulation licensing and enforcement records, which would materially improve confidence in the state-level supervisory-intensity assessment that the evidence base this cycle cannot currently support.

No Maryland-specific conflict-finance or extractive-industry material was identified in this baseline research cycle. Conflict finance and extractive-industry integrity are not among the primary risk domains of Maryland as currently assessed: exposure runs overwhelmingly through the federal sanctions, beneficial-ownership, and digital-asset channels documented in the other five domains of this brief, rather than through direct extractive-industry or armed-conflict financing nexus points. This is stated as an honest account of the coverage of the evidence base rather than as an assertion that no such exposure could exist; it reflects the absence of qualifying findings in the sources reviewed this cycle, not a determination that the domain is closed to future signal.

The one indirect touchpoint worth noting is architectural rather than Maryland-specific: the sustained OFAC Iran maximum-pressure campaign and the broader sanctions-enforcement posture, detailed in the sanctions-architecture domain above, intersects conceptually with conflict-finance concerns to the extent that Iran-linked sanctions programs address revenue streams with security-policy dimensions. That intersection, however, does not rise to a Maryland-specific D4 finding this cycle and is better read under the sanctions-architecture domain where the underlying evidence sits.

Outlook

This domain should be flagged for targeted scoping in subsequent cycles rather than assumed permanently quiet: the federal-derivative sanctions and AML architecture of Maryland means any future conflict-finance nexus -- for example, sanctioned-goods procurement networks with Maryland-based intermediaries, or extractive-industry beneficial-ownership structures routed through Maryland entities -- would likely surface first through the beneficial-ownership and sanctions-architecture domains already under active monitoring. Absent such a finding, D4 remains appropriately thin for this jurisdiction this cycle.

The clearest Maryland digital-asset exposure is a confirmed, active laundering typology operating without any state-specific regulatory response. The historic Baltimore case -- in which an individual purchased at least 112,797 dollars of bitcoin from a Baltimore convertible-virtual-currency kiosk and sent it directly to the AlphaBay darknet market -- is not a historical curiosity; a FinCEN August 4, 2025 national advisory confirms the cash-to-crypto kiosk laundering conduit remains structurally active and growing nationwide. The underlying Money Services Business registration and AML program obligation for crypto-asset operators, codified at 31 CFR 1022, is formally in force nationally, but the control-gap signal associated with kiosk operators specifically is assessed as only partial, reflecting registration coverage without a corresponding state-level enforcement layer in Maryland. Despite the Baltimore precedent and a national surge in kiosk-facilitated fraud, Maryland has not enacted a kiosk-specific statute of the kind adopted in Iowa, Massachusetts, Connecticut, and the District of Columbia, nor has it brought a comparable state-level enforcement action. Maryland crypto-kiosk exposure therefore rests entirely on federal FinCEN advisory guidance and Money Services Business registration enforcement, with no independent state-level control layer, and the retail customer typology most exposed to this conduit receives no additional state-specific protection as a result.

That enforcement-absence gap sits alongside sector-level distress with direct Maryland-area retail relevance: Bitcoin Depot, a national crypto-ATM operator with machines placed in Maryland-area retail chains, filed for bankruptcy in 2026 amid multistate attorney-general lawsuits alleging facilitation of crypto scams and a Connecticut banking-licence suspension. The contrast between multistate enforcement action elsewhere and the absence of any comparable Maryland state action, despite the regional retail footprint of the operator, is itself an analytically significant signal under the enablement-as-signal principle of this monitor: the absence of action in a permissive jurisdiction is not a neutral fact.

At the federal level, Maryland digital-asset firms operate against two frameworks in different stages of maturity. The GENIUS Act, enacted in 2025, established federal stablecoin issuer licensing and brought stablecoin issuers under full Bank Secrecy Act and OFAC coverage -- a durable federal baseline now in force and rated as a covered control for that issuer population. The CLARITY Act, a broader digital-asset market-structure bill, cleared the Senate Banking Committee 15-9 on May 14, 2026, with Maryland Senator Angela Alsobrooks among those voting in favor after negotiating stablecoin-yield compromise language, but the bill has not reached a Senate floor vote, and law-enforcement, ethics, and yield-restriction provisions remain contested by banking trade groups. This is a materially less certain trajectory than a committee vote alone might suggest, and Maryland-based crypto-asset operators and payment companies should not assume near-term passage.

Global digital-asset regulatory developments form a structural backdrop against which the US federal framework is developing, but the evidence base this cycle does not establish specific Maryland-relevant findings from that global layer beyond the federal GENIUS Act and CLARITY Act developments already described; any comparison to international virtual-asset standards should be read as directional context rather than a sourced Maryland-specific finding.

Outlook

Two trajectories will determine Maryland digital-asset exposure over the coming cycles: whether the CLARITY Act reaches and survives a Senate floor vote and House reconciliation, and whether any Maryland-specific legislative or enforcement response to the crypto-kiosk laundering gap emerges, whether prompted by the Baltimore precedent, the national elder-fraud surge, or the exposure of retail-sector distress by the Bitcoin Depot bankruptcy. Neither trajectory is currently resolved, and the enforcement-absence gap in particular should be read as a persistent rather than transitional feature of the Maryland digital-asset risk profile absent a specific catalyst for change.

The single material D6 development this cycle is a FinCEN proposed rule to refocus bank AML/CFT programs toward risk-based prioritization, whose comment period closed June 9, 2026. The proposal, currently at the consultation stage, would require federal banking regulators to consult FinCEN before taking certain supervisory or enforcement actions, elevating the supervisory role of FinCEN and reshaping the compliance posture expected of Maryland-chartered and Maryland-headquartered banks toward proactive, risk-based program design rather than the more checklist-oriented program structures the current rule is understood to encourage. This is a watch-stage development: the comment period has closed, but the final form of the rule, adoption timeline, and practical supervisory-consultation mechanics are not yet established from the evidence base this cycle, and the underlying governance obligation remains formally at the citation-stage of consultation rather than in force.

The significance of this proposal should be read against the other developments in this brief rather than in isolation. A risk-based refocus of bank AML/CFT programs would, in principle, be the kind of active-defence architecture capable of addressing exactly the structural gaps documented elsewhere this cycle -- the real-estate settlement-agent gatekeeper gap, the crypto-kiosk enforcement-absence gap, and the beneficial-ownership opacity reopened by the CTA domestic exemption and RRE Rule vacatur -- to the extent examiners direct risk-based attention toward those specific vectors. Whether the final rule does so, however, is not established; the proposal as currently understood addresses program structure and supervisory consultation mechanics rather than any of these specific typologies by name, and this monitor rates the connection between the NPRM and those specific gaps as assessed rather than confirmed.

The broader Maryland compliance-technology posture continues to be defined by inheritance from the federal BSA and FinCEN architecture rather than by any state-specific active-defence initiative; no Maryland-specific regtech, transaction-monitoring, or supervisory-technology development was identified this cycle independent of the federal NPRM, and this absence of state-specific findings should itself be read as a coverage feature of the current evidence base rather than a confirmed absence of activity.

Outlook

The controlling question for this domain is whether the FinCEN AML/CFT Program NPRM is finalized substantially as proposed, and if so, on what implementation timeline for Maryland-chartered and headquartered banks. Given the comment period closed only recently, a finalized rule and clear implementation guidance are not expected before the next several cycles; institutions should treat the current proposal as directional rather than settled, and monitor for the final text of the rule and any accompanying supervisory guidance specific to risk-based prioritization mechanics, revisiting this domain each cycle until the rulemaking reaches a resolved state.