Not every instrument is backed by its official text yet. At least one law or rulebook covered here has no official source (tier 1) retrieved for it yet. No finding on this page is shown with confidence above “Probable” until stronger sources are retrieved.

Financial Integrity Monitor

United States — Massachusetts US-MA

Domains covered
8 of 8
Sources
168
Role actions
8
Horizon <90d
0
Jurisdiction profile
FATF status: Largely Compliant (As Part Of Usa Federal Aml/Cft Framework; Not Fatf Grey/Black-Listed) Tier: A Risk direction: Stable Enablement vs enforcement: Mixed

Massachusetts operates under the federal BSA/AML framework (FinCEN, OFAC) with no independent state AML statute; state-level enforcement runs through the Attorney General's Office (consumer-protection/unfair-deceptive-practices statutes), the Securities Division of the Secretary of the Commonwealth, and the Division of Banks (money transmitter licensing).

MoreBoston is a major asset-management, trust, and private-banking hub, elevating professional-gatekeeper exposure.

Key deficiencies
  • No state-level beneficial ownership registry; Massachusetts LLC/corporate filings via the Secretary of the Commonwealth remain low-transparency, compounded by the federal CTA rollback
  • Crypto ATM/kiosk sector operated for years in Massachusetts with weak AML/KYC controls before state enforcement caught up
  • State money-transmitter/crypto oversight is exposed to federal preemption via OCC national trust-bank charters, mirroring the pattern documented in neighboring Maine
  • Limited direct public evidence of state banking regulator (Division of Banks) enforcement actions in the 18-month window, indicating a possible supervisory visibility gap
Recent developments (18m)
  • Massachusetts Attorney General Andrea Joy Campbell sued crypto ATM operator Bitcoin Depot in February 2026 alleging knowing facilitation of scams
  • Massachusetts AG's office secured restitution for cryptocurrency fraud victims (SpireBit case) using commercial blockchain tracing tools
  • FinCEN renewed Residential Real Estate Geographic Targeting Orders covering Massachusetts (Boston-area) counties through February 2026
  • Federal Corporate Transparency Act domestic beneficial-ownership reporting requirement was rescinded (March 2025), affecting Massachusetts-formed entities
  • Bitcoin Depot, subject of the Massachusetts suit, filed for bankruptcy and ceased ATM operations in May 2026

United States federal law that applies in United States – Massachusetts is covered once, on the United States page. This page covers United States – Massachusetts’s own layer: its own law, regulators and enforcement.

Brief

Lead signal

Lead Signal

Massachusetts continues to run its state-level money-services gatekeeping layer as an active, if routine, enforcement channel. The Division of Banks' third-quarter 2026 enforcement bulletin reports consent order and temporary cease-and-desist actions against check-casher entities, including ChecKings LLC and affiliated Family Financial Centers entities and Parras Inc., for unlicensed activity, with regulated entities required to reimburse $444,136.05 to 1,157 affected consumers. This sits beneath the Commonwealth's Chapter 169B money-transmitter licensing regime, which is the operative perimeter that brings money-service businesses, including virtual-currency transmitters, within reach of state supervision.

Read full brief

Lead Signal

Massachusetts continues to run its state-level money-services gatekeeping layer as an active, if routine, enforcement channel. The Division of Banks' third-quarter 2026 enforcement bulletin reports consent order and temporary cease-and-desist actions against check-casher entities, including ChecKings LLC and affiliated Family Financial Centers entities and Parras Inc., for unlicensed activity, with regulated entities required to reimburse $444,136.05 to 1,157 affected consumers. This sits beneath the Commonwealth's Chapter 169B money-transmitter licensing regime, which is the operative perimeter that brings money-service businesses, including virtual-currency transmitters, within reach of state supervision.

The finding is best read as continuity rather than escalation. The regulator's own framing treats the bulletin as a periodic disclosure of routine gatekeeping activity against unlicensed actors, not as a signal of a new enforcement priority or a change in the scope of what the Division examines. Confidence in the underlying facts is high: the reimbursement figures and named respondents are drawn directly from the Division's own published bulletin.

Other Developments

No material movement elsewhere this cycle. Sanctions exposure, beneficial-ownership and corporate-transparency questions, enabler-jurisdiction dynamics, conflict-finance nexus issues, crypto-specific enforcement, and compliance-technology developments specific to Massachusetts did not produce evidence meeting this cycle's bar. Where the Commonwealth's money-transmitter licensing perimeter does reach virtual-currency transmitters as a matter of statutory design, no crypto-specific action against such an entity was located this cycle, so that reading remains structural rather than evidenced by a new case.

Cross-Monitor Connections

The check-casher enforcement activity sits at the boundary between financial-integrity gatekeeping and payments-market licensing oversight: the same consent orders and bulletin entries that evidence continued AML-adjacent supervision of money-service businesses also describe the licensing and market-access posture that a payments-focused reader would track. Where a money-transmitter licence is the operative control point for both illicit-finance gatekeeping and market entry, enforcement against unlicensed actors is simultaneously a financial-integrity data point and a market-structure one, and the two readings should be understood as describing the same underlying regulatory event rather than two separate developments.

Outlook

Absent a new disclosure, the Division of Banks' enforcement bulletin suggests the state's money-transmitter licensing perimeter will continue to be enforced against unlicensed check-cashing and money-service activity through routine supervisory channels, with periodic public bulletins as the primary visibility mechanism. No structural change to the regime itself is in evidence, and the posture should be read as stable continuity of an existing gatekeeping function rather than a shift in regulatory direction.

Earlier periodic briefs (8)
4 Nov 2026 · fim-2026-11-04

Lead Signal

Massachusetts continues to run its state-level money-services gatekeeping layer as an active, if routine, enforcement channel. The Division of Banks' third-quarter 2026 enforcement bulletin reports consent order and temporary cease-and-desist actions against check-casher entities, including ChecKings LLC and affiliated Family Financial Centers entities and Parras Inc., for unlicensed activity, with regulated entities required to reimburse $444,136.05 to 1,157 affected consumers. This sits beneath the Commonwealth's Chapter 169B money-transmitter licensing regime, which is the operative perimeter that brings money-service businesses, including virtual-currency transmitters, within reach of state supervision.

The finding is best read as continuity rather than escalation. The regulator's own framing treats the bulletin as a periodic disclosure of routine gatekeeping activity against unlicensed actors, not as a signal of a new enforcement priority or a change in the scope of what the Division examines. Confidence in the underlying facts is high: the reimbursement figures and named respondents are drawn directly from the Division's own published bulletin.

Other Developments

No material movement elsewhere. Sanctions exposure, beneficial-ownership and corporate-transparency questions, enabler-jurisdiction dynamics, conflict-finance nexus issues, crypto-specific enforcement, and compliance-technology developments specific to Massachusetts did not produce evidence meeting the bar. Where the Commonwealth's money-transmitter licensing perimeter does reach virtual-currency transmitters as a matter of statutory design, no crypto-specific action against such an entity was located, so that reading remains structural rather than evidenced by a new case.

Cross-Monitor Connections

The check-casher enforcement activity sits at the boundary between financial-integrity gatekeeping and payments-market licensing oversight: the same consent orders and bulletin entries that evidence continued AML-adjacent supervision of money-service businesses also describe the licensing and market-access posture that a payments-focused reader would track. Where a money-transmitter licence is the operative control point for both illicit-finance gatekeeping and market entry, enforcement against unlicensed actors is simultaneously a financial-integrity data point and a market-structure one, and the two readings should be understood as describing the same underlying regulatory event rather than two separate developments.

Outlook

Absent a new disclosure, the Division of Banks' enforcement bulletin suggests the state's money-transmitter licensing perimeter will continue to be enforced against unlicensed check-cashing and money-service activity through routine supervisory channels, with periodic public bulletins as the primary visibility mechanism. No structural change to the regime itself is in evidence, and the posture should be read as stable continuity of an existing gatekeeping function rather than a shift in regulatory direction.

3 Nov 2026 · fim-2026-11-03

Lead Signal

The Massachusetts Division of Banks has published a third-quarter 2026 enforcement bulletin documenting consent orders and cease-and-desist actions against unlicensed check cashers, with regulated entities required to reimburse $444,136.05 to 1,157 affected consumers. The bulletin lands against the backdrop of the transition deadline under M.G.L. c. 169B, the Commonwealth general money-transmitter licensing statute, which took effect 1 January 2026 and whose transition window closed 1 July 2026. Entities that did not hold or transition to a Division of Banks money-transmitter license by that date are barred from money transmission in the Commonwealth, and the Q3 bulletin is best read as the first enforcement harvest of that closed window rather than as an isolated incident. Massachusetts here functions as a gatekeeping layer beneath the money-transmission perimeter: a sub-national licensing regime that captures check cashers and, under its stated scope, virtual-currency transmitters, and that is now producing administrative consequences for operators who continued activity without authorisation.

The architectural point is that this is state-level plumbing rather than a federal or international designation. Nothing in the bulletin reaches sanctions, beneficial ownership, or conflict finance; the signal sits squarely in how a licensing-and-enforcement regime inside one enabler-adjacent jurisdiction is being operationalised now that its statutory deadline has passed. The reimbursement figure and consumer count give the regime a visible enforcement record for the first time since the 1 January 2026 effective date, which matters more than the dollar amount itself.

Other Developments

Consent order activity beyond the bulletin's headline figures shows the Division of Banks working through its enforcement table methodically, with at least one named consent order (Parras Inc. and an individual respondent, NMLS 904752) entered against a check-casher respondent on 2 October 2026. The pattern is consistent with a regulator clearing a backlog of unlicensed-activity cases that accumulated prior to or during the mid-2026 transition window.

The Ch.169B transition deadline itself is the more durable structural fact underneath the enforcement activity. The statute's money-transmitter licensing requirement, effective from 1 January 2026, applies to money transmission broadly and, per the Division's framing, to virtual-currency transmitters operating in the Commonwealth. The transition deadline of 1 July 2026 has now passed, and the Q3 bulletin is the first dated evidence of what enforcement against unlicensed holdovers looks like in practice: administrative consent orders and consumer-reimbursement orders rather than criminal referral.

Cross-Monitor Connections

The licensing-enforcement signal documented here has a direct counterpart in payment-systems monitoring, where the same Q3 bulletin and the same underlying Ch.169B regime are read primarily through market-access and licensing-authorisation lens rather than through a financial-crime lens. The two readings are not in tension: a state money-transmitter licensing regime that bars unlicensed check cashers and virtual-currency transmitters from operating is simultaneously a market-access control and an AML/CTF gatekeeping control, and the same enforcement bulletin supports both readings without need for reconciliation. No sanctions, conflict-finance, or beneficial-ownership connections are supported by the evidence.

Outlook

As at the close of the third quarter of 2026, the Division of Banks enforcement table remains the operative signal to track for whether Massachusetts converts its now-closed transition window into a sustained enforcement programme or a one-off clearing exercise. Further consent orders entered against unlicensed check cashers or virtual-currency transmitters in Q4 2026 would support an enforcement-architecture reading; a lapse back to enforcement silence would instead suggest the Q3 bulletin was a backlog clearance tied to the 1 July 2026 deadline rather than a new baseline posture. Either trajectory is a matter for the Division of Banks' own published enforcement table rather than for inference at this remove.

25 Oct 2026 · fim-2026-10-25

Lead Signal

Massachusetts' cryptocurrency-kiosk regime illustrates a structural gap between a settled general financial-integrity architecture and an unresolved asset-specific enforcement tool. The Commonwealth's general money-transmission licensing regime, M.G.L. c. 169B (enacted as Chapter 312 of the Acts of 2024, replacing the prior foreign-only Foreign Transmittal Agency Act), is now fully operative: licensure began January 1, 2026, and the firm-filing transition deadline of July 1, 2026, has passed, bringing crypto exchanges and kiosk operators that transmit monetary value within the Division of Banks' general AML-adjacent supervisory architecture. No bespoke crypto AML statute exists; coverage flows entirely from the general money-transmitter framework.

Other Developments

A statewide cryptocurrency-kiosk ban remains stalled despite Senate passage. A proposed statewide prohibition on cryptocurrency ATMs and kiosks, Amendment 374 to economic-development bill S.3178, passed the Massachusetts Senate on July 23-24, 2026, but the House version did not include the measure, leaving the amendment pending in a House-Senate conference committee with no confirmed enactment date.

Municipal bylaw bans continue to proliferate in the resulting gap. Dennis became at least the twenty-first Massachusetts town to adopt a bylaw banning cryptocurrency ATMs and kiosks, voting at a special town meeting on October 6-7, 2026, reported October 11, 2026. The Attorney General's Municipal Law Unit has approved at least 19 such bylaws to date, meaning the enforcement architecture against unregulated cash-to-crypto on-ramps in Massachusetts currently rests substantially on a patchwork of local bylaws rather than a uniform state instrument.

Attorney General litigation against kiosk operators continues without a new milestone. The Massachusetts Attorney General's suit against Bitcoin Depot, filed February 3, 2026, alleging facilitation of crypto scams against Massachusetts consumers, continues alongside parallel litigation against Coinhub; no new enforcement milestone in either matter was identified.

The Massachusetts Gaming Commission's sports-wagering internal-controls standard includes an AML component. 205 CMR 238.17 requires a Sports Wagering Operator's system of Internal Controls, submitted under 205 CMR 238.02, to implement AML procedures and policies adequately addressing the risks posed by sports wagering, forming a standing sector-specific AML baseline alongside the general money-transmission regime.

Cross-Monitor Connections

The crypto-kiosk developments connect directly to the crypto monitor's tracking of the same S.3178 amendment and municipal bylaw pattern, and to the advennt monitor's coverage of Massachusetts gambling-sector obligations, given the shared AML internal-controls standard applicable to licensed sports-wagering operators under 205 CMR 238.17.

Outlook

The House-Senate conference committee's resolution of the S.3178 kiosk-ban amendment remains the clearest marker of whether Massachusetts moves toward a uniform statewide enforcement architecture for crypto kiosks or continues to rely on the municipal-bylaw patchwork. Continued stalemate is likely to see further municipalities adopt local bans, while enactment would consolidate enforcement at the state level and reduce reliance on the current mixed municipal and litigation-based approach.

18 Oct 2026 · fim-2026-10-18

Lead Signal

Massachusetts' cryptocurrency-kiosk regime illustrates a structural gap between a settled general financial-integrity architecture and an unresolved asset-specific enforcement tool. The Commonwealth's general money-transmission licensing regime, M.G.L. c. 169B (enacted as Chapter 312 of the Acts of 2024, replacing the prior foreign-only Foreign Transmittal Agency Act), is now fully operative: licensure began January 1, 2026, and the firm-filing transition deadline of July 1, 2026, has passed, bringing crypto exchanges and kiosk operators that transmit monetary value within the Division of Banks' general AML-adjacent supervisory architecture. No bespoke crypto AML statute exists; coverage flows entirely from the general money-transmitter framework.

Other Developments

A statewide cryptocurrency-kiosk ban remains stalled despite Senate passage. A proposed statewide prohibition on cryptocurrency ATMs and kiosks, Amendment 374 to economic-development bill S.3178, passed the Massachusetts Senate on July 23-24, 2026, but the House version did not include the measure, leaving the amendment pending in a House-Senate conference committee with no confirmed enactment date.

Municipal bylaw bans continue to proliferate in the resulting gap. Dennis became at least the twenty-first Massachusetts town to adopt a bylaw banning cryptocurrency ATMs and kiosks, voting at a special town meeting on October 6-7, 2026, reported October 11, 2026. The Attorney General's Municipal Law Unit has approved at least 19 such bylaws to date, meaning the enforcement architecture against unregulated cash-to-crypto on-ramps in Massachusetts currently rests substantially on a patchwork of local bylaws rather than a uniform state instrument.

Attorney General litigation against kiosk operators continues without a new milestone. The Massachusetts Attorney General's suit against Bitcoin Depot, filed February 3, 2026, alleging facilitation of crypto scams against Massachusetts consumers, continues alongside parallel litigation against Coinhub; no new enforcement milestone in either matter was identified this cycle.

The Massachusetts Gaming Commission's sports-wagering internal-controls standard includes an AML component. 205 CMR 238.17 requires a Sports Wagering Operator's system of Internal Controls, submitted under 205 CMR 238.02, to implement AML procedures and policies adequately addressing the risks posed by sports wagering, forming a standing sector-specific AML baseline alongside the general money-transmission regime.

Cross-Monitor Connections

This cycle's crypto-kiosk developments connect directly to the crypto monitor's tracking of the same S.3178 amendment and municipal bylaw pattern, and to the advennt monitor's coverage of Massachusetts gambling-sector obligations, given the shared AML internal-controls standard applicable to licensed sports-wagering operators under 205 CMR 238.17.

Outlook

The House-Senate conference committee's resolution of the S.3178 kiosk-ban amendment remains the clearest marker of whether Massachusetts moves toward a uniform statewide enforcement architecture for crypto kiosks or continues to rely on the municipal-bylaw patchwork. Continued stalemate is likely to see further municipalities adopt local bans, while enactment would consolidate enforcement at the state level and reduce reliance on the current mixed municipal and litigation-based approach.

11 Oct 2026 · fim-2026-10-11

Lead Signal

Massachusetts has completed a wholesale replacement of its money-transmission licensing architecture. Chapter 312 of the Acts of 2024 repealed the Foreign Transmittal Agency Act (c.169) and the non-bank check-seller provisions of c.167F Section 4, consolidating licensing authority into a new Chapter 169B of the Massachusetts General Laws. The implementing regulation, 209 CMR 44.00, took final effect on 7 November 2025, and the statute itself became effective 1 January 2026. The Division of Banks set 1 July 2026 as the hard transition deadline for entities already conducting money transmission to have filed or converted their licensure under the new framework. That deadline has now passed, and the Division has issued a regulatory notice reminding unconverted operators that they must immediately stop conducting licensable money-transmission activity in Massachusetts or face civil penalties under c.169B Section 10. The framework is explicitly drafted to capture custodial virtual-currency businesses as entities handling monetary value, meaning crypto-asset operators sit inside the same licensing gateway as traditional money-service businesses rather than under a bespoke carve-out.

This is an architecture story, not a single enforcement story. The significance lies in the structural consolidation of three previously separate licensing regimes into one statute and one implementing regulation, with a definitional sweep broad enough to fold in digital-asset custody without additional legislative action. A regime that absorbs a new instrument class into an existing licensing perimeter, rather than legislating a parallel one, is the more durable and more easily enforced pattern.

Other Developments

Cease Directive against M&M Tech Solutions Corp. The Division of Banks issued a Cease Directive to M&M Tech Solutions Corp. on 2 April 2026 over allegations of unlicensed money transmission, reported in the Division's Q2 2026 Enforcement Bulletin. The conduct underlying the action predates the new regime's transition deadline, but the enforcement itself reflects the Division's posture under the consolidated c.169B framework and signals that unlicensed-activity enforcement did not pause while the new regime phased in.

Finalised cease-and-desist order against a non-depository check casher. A Temporary Order to Cease and Desist issued to ChecKings LLC, doing business as Family Financial Centers, became final on 21 August 2026. This sits in the non-depository licensing space adjacent to the new money-transmission framework and indicates continuing supervisory attention to non-bank payment intermediaries through the third quarter of 2026.

Multistate settlement over force-placed insurance overcharges. The Massachusetts Division of Banks joined other state financial regulators in a 15.5 million dollar multistate settlement with mortgage servicer NewRez, LLC, announced 12 August 2026, resolving allegations concerning force-placed insurance overcharges. This is commercial-conduct enforcement rather than an AML or sanctions matter, but it demonstrates the Division's participation in coordinated multistate supervisory action.

Attorney General data-security settlement. Separately, the Massachusetts Attorney General secured a 795,000 dollar settlement with Peabody Properties, Inc. over alleged data-security and breach-notification failures tied to five phishing intrusions between 2019 and 2021. This action sits outside the Division of Banks' AML/CTF remit and is noted here as cross-pillar commercial-conduct context rather than an illicit-finance finding.

Cross-Monitor Connections

The money-transmission licensing overhaul and its crypto-inclusive scope sit squarely at the intersection of this monitor's D5 (Crypto, Digital Assets, and Financial Innovation) and D7 (AML/CTF Regime) coverage, and the overlap is substantive enough that a reader tracking digital-asset market access in Massachusetts should treat the two domains as describing the same underlying instrument from different angles. The commercial settlements this cycle, principally the NewRez multistate action, are more naturally read alongside consumer-finance and servicing-conduct trackers than illicit-finance ones, since no sanctions, beneficial-ownership, or typology signal attaches to them. The Peabody Properties data-security settlement is noted for completeness but belongs analytically to a data-protection and cybersecurity-enforcement lens rather than to financial integrity.

Outlook

With the 1 July 2026 transition deadline now in the past, the operative question for the coming cycles is enforcement depth rather than regime design: whether the Division of Banks pursues the broader population of unconverted or unlicensed money-service and virtual-currency businesses beyond the two actions already disclosed, and whether a discrete Q3 2026 Enforcement Bulletin is published as a standalone document rather than remaining scattered across individual enforcement-action table rows. Readers should treat the current enforcement record as an early signal of posture under the new statute rather than as a complete account of compliance across the regulated population.

29 Sep 2026 · fim-2026-09-28

Lead Signal

Massachusetts has, for the first time, brought domestic money transmission under state licensing. M.G.L. c.169B, enacted as Chapter 312 of the Acts of 2024 and effective January 1, 2026, requires any business engaged in money transmission involving Massachusetts residents to obtain a state money-transmitter license from the Division of Banks. Before this law, Massachusetts was one of only two states nationwide whose money-transmitter regime did not cover domestic transfers, leaving a structural supervisory gap in a state that hosts a substantial payments and fintech sector. The new statute closely follows the Conference of State Bank Supervisors' Model Money Transmission Modernization Act, making Massachusetts the 49th state to regulate domestic money transmission and completing a long interstate harmonisation process. The Division of Banks began accepting applications via the Nationwide Multistate Licensing System from July 1, 2025, ahead of the effective date, and firms not licensed or transitioned by July 1, 2026 were required to immediately cease all licensable money-transmission activity. This is an architecture story, not an incident: the significance lies in the closing of a durable supervisory gap rather than in any single enforcement action, and the closing itself is the signal.

Other Developments

Virtual-currency scope remains unresolved. Independent legal commentary flags that it is not yet clear whether c.169B's domestic-transfer scope extends to virtual-currency exchange and custody businesses. No primary regulator guidance has resolved this question as of this cycle, leaving a live classification gap for crypto firms operating in or transacting with Massachusetts residents. This is a first-order compliance question for any digital-asset business with Massachusetts exposure: absent clarification, firms face genuine uncertainty about whether the general money-transmitter licensing perimeter now reaches their activity.

No movement identified on sanctions, beneficial ownership, enabler-jurisdiction, or conflict-finance fronts. This cycle's research was bound exclusively to Massachusetts, and no state-level nexus surfaced across these typology areas this window.

Cross-Monitor Connections

The new domestic-transfer perimeter under c.169B is directly relevant to the World Payments Monitor's licensing and market-access tracking, since the law newly captures nonbank payment companies operating peer-to-peer transfer services. It is equally relevant to the Crypto monitor, where the same statute's unresolved scope over virtual-currency exchange and custody businesses creates parallel product-classification uncertainty. Both monitors are tracking the same underlying instrument from their own vantage points; the state licensing question and the virtual-currency scope question are two faces of one structural development.

Outlook

The near-term question is whether the Division of Banks will issue interpretive guidance resolving the virtual-currency scope ambiguity, or whether that resolution will instead come through enforcement action or litigation. No primary regulator clarification has surfaced yet. Absent guidance, firms transacting virtual currency with Massachusetts residents should expect continued uncertainty about their licensing obligations under the new domestic-transfer regime, and the July 2026 transition-deadline enforcement cliff means any unlicensed activity captured by the statute is already exposed.

3 Sep 2026 · fim-2026-08-05

Lead Signal

The most consequential development this cycle sits at the intersection of sanctions architecture and digital-asset innovation: Iranian Revolutionary Guard Corps-linked facilitators have been assessed to be minting a proprietary stablecoin, USDZ, through OFAC-designated issuer Zedxion, to fund proxy operations, a mechanism reported to have moved billions of dollars in transactions since 2020 through layered financial structures. This sits alongside continuing conventional sanctions-architecture activity: OFAC published Russia-related designations on July 20, 2026 under Executive Order 14024 Section 11, naming entities including A T S Heavy Equipment and Pitersnab LLC, even as the GL 131H/132/134-series general-license amendments continue their rolling cadence around the temporary reopening of segments of the oil market. Architecture over incident: the designation cadence itself is a known, recurring compliance surface, but the emergence of state-adjacent proprietary stablecoin rails as a sanctions-evasion mechanism is the structural shift obliged institutions should register this cycle, since it moves value outside the correspondent-banking channels that existing sanctions screening architecture is built around.

Other Developments

The EU AML Package's three instruments continue divergent progression. The AMLR's beneficial-ownership provisions (Articles 11-13 and 15) and a package of AMLA technical standards fall due July 10, 2026, ahead of the AMLR's full direct-applicability date of July 10, 2027. Running in parallel, and less smoothly, the sixth Anti-Money Laundering Directive's register-access transposition provisions missed their July 10, 2025 deadline in roughly a third of Member States, prompting the European Commission to open infringement proceedings against eleven Member States; the Directive's general transposition deadline remains July 10, 2027. The Anti-Money Laundering Authority itself, operational since July 1, 2025, is required to publish twenty-three technical standards by July 10, 2026, ahead of assuming direct supervision of approximately forty high-risk cross-border institutions from January 2028 — a structural shift of the EU's AML supervisory perimeter from a purely national model toward a hybrid EU-level regime.

Cambodia's own regulator is signalling enabler-jurisdiction risk before any fresh FATF action. The National Bank of Cambodia's governor publicly warned that the country must avoid a third FATF grey-list placement tied to scam-centre and casino-linked laundering, and the central bank has launched a second national risk assessment. No fresh 2026 FATF primary statement on Cambodia specifically was identified this cycle, so this reads as a pre-designation warning phase rather than a confirmed listing event.

A separate enabler-jurisdiction risk remains standing rather than fresh. The Golden Triangle Special Economic Zone in Laos remains associated with cyber-enabled fraud and online gambling under the territorial control of Zhao Wei's transnational criminal organization; Zhao faced UK sanctions in 2023 for links to human trafficking and forced criminality in scam operations. This is assessed at low confidence and treated as continuing background structural risk rather than a new development this cycle.

Compliance technology supervision is shifting from tick-box to outcomes. SR 26-2, issued April 17, 2026 by the Federal Reserve, OCC, and FDIC, replaces the SR 11-7 model-risk-management framework, and FinCEN has proposed a two-pronged AML supervisory framework that judges programme design separately from implementation, reserves serious enforcement for material or systemic failures, and explicitly encourages the use of artificial intelligence in compliance programmes.

Cross-Monitor Connections

The IRGC's use of a proprietary, OFAC-designated stablecoin issuer to fund proxy operations is a direct node connecting this cycle's sanctions-architecture and crypto/digital-asset findings; it is also a conflict-finance-adjacent signal to the extent proxy-operation funding intersects with regional conflict financing, though this cycle's evidence base does not extend to a dedicated, independently-sourced conflict-finance development beyond that Iran nexus. Cambodia's casino-and-scam-centre laundering exposure and Laos's Golden Triangle SEZ risk both connect enabler-jurisdiction findings to the gambling and online-scam ecosystems that other monitors in this fleet track from different angles.

Outlook

Watch for the AMLA's publication of its twenty-three technical standards against the July 10, 2026 deadline, and for whether the Commission's infringement proceedings against the eleven Member States lagging on 6AMLD register-access transposition produce further enforcement movement ahead of the July 2027 general transposition deadline. On sanctions-evasion infrastructure, the trajectory to monitor is whether designation activity against stablecoin-based evasion mechanisms such as USDZ/Zedxion accelerates to match the pace at which such rails are reportedly moving value. Cambodia's self-identified grey-list risk is also one to watch for a possible FATF plenary decision in a coming cycle.

14 Jul 2026 · fim-2026-07-14

Lead Signal

Massachusetts enters this monitoring window as a newly established sub-national chain that inherits the federal Bank Secrecy Act, anti-money-laundering, and OFAC sanctions architecture in full; the Commonwealth maintains no independent sanctions regime, financial-intelligence unit, or FATF standing of its own. The structurally dominant development this cycle is a federal regression in beneficial-ownership transparency: an interim final rule from FinCEN, effective 26 March 2025, exempted all US-formed entities from Corporate Transparency Act beneficial-ownership reporting, restoring an anonymous-shell-formation pathway through the corporate registry maintained by the Massachusetts Secretary of the Commonwealth. Massachusetts has no independent state substitute for this lost federal layer. A pending state bill, House Bill 501, would require Massachusetts LLCs to disclose beneficial owners and so partially close the gap, but its hearing was rescheduled to 25 September 2025 and it remains unenacted. Read under the architecture-over-incident principle, this structural regression outweighs any single enforcement episode, and it converges with a second correction this cycle: the frequently cited largely-compliant, not-grey-listed FATF standing of the United States is a legacy rating drawn from the March 2024 follow-up report under the 2016 fourth-round mutual evaluation, not a live current assessment. A fifth-round on-site evaluation was conducted in early 2026, with a final report expected later this year, and the Corporate Transparency Act domestic rollback is itself named as a re-rating risk factor bearing on that pending review.

Set against this transparency regression is a disrupted piece of enforcement architecture on the crypto side. The Office of the Massachusetts Attorney General sued Bitcoin Depot, the crypto-ATM operator, on 3 February 2026, alleging knowing facilitation of scams and misleading sales tactics; the filing alleged that over half the money passing through Bitcoin Depot kiosks in Massachusetts between August 2023 and January 2025 was scam-related. Bitcoin Depot filed for Chapter 11 bankruptcy protection on 18 May 2026 in the US Bankruptcy Court for the Southern District of Texas and ceased nationwide ATM operations approximately three and a half months after the Massachusetts suit. The timeline itself carries the analytical weight: the crypto-ATM operator sector, including Bitcoin Depot and peers such as CoinFlip and Athena Bitcoin, allegedly knew as early as 2021 that Massachusetts kiosks were facilitating money laundering at extreme volume, meaning the enabling infrastructure preceded and outlasted the single enforcement episode by roughly five years. Upstream, exchanges including Gemini, Cumberland DRW, Kraken, and Bitstamp continued supplying bulk bitcoin liquidity to crypto-ATM operators amid mounting scam allegations, a distinct architectural node that remains largely unaddressed by the enforcement action taken this cycle.

Other Developments

A trust-based sanctions-concealment settlement exposes structural gatekeeper exposure. OFAC settled for 1,092,000 dollars with a US-licensed attorney and fiduciary who served as trustee of a sanctioned Russian oligarch family trust between 2018 and 2022. The settlement is not Massachusetts-specific, but the Boston-based trust-and-estate legal and private-banking bar carries structurally elevated exposure to this concealment mechanism absent any named Massachusetts case identified this window.

A sanctions-designation gap opened between US and allied screening regimes. OFAC designated the UK-registered cryptocurrency exchanges Zedcex and Zedxion on 30 January 2026 for processing transactions linked to the Islamic Revolutionary Guard Corps of Iran, the first sanctioning of exchanges specifically for activity within the Iranian financial system. No equivalent European Union or United Kingdom designation was identified this window, creating a screening-scope gap for institutions relying solely on EU or UK sanctions lists.

FinCEN maintained a transparency backstop on anonymous real-estate purchases pending a nationwide successor rule. The Residential Real Estate Geographic Targeting Orders were renewed on 9 October 2025, covering Boston-area Massachusetts counties through 28 February 2026 and requiring title insurers to report non-financed residential purchases above 300,000 dollars made by legal entities and trusts.

FinCEN proposed a structural shift in AML and CFT program supervision. A proposed rule under the AML Act of 2020 would move supervisory expectations for financial institutions toward risk-based, reasonably-designed programs rather than prescriptive checklists; the comment period closed 9 June 2026, with finalization pending and direct implications for Massachusetts banks, money-services businesses, and crypto-asset firms.

A federal charter mechanism risks preempting state oversight of crypto firms. The Office of the Comptroller of the Currency has granted national trust-bank charters allowing crypto firms to bypass state-regulator enforcement, a pattern documented in Maine and structurally applicable to the oversight the Massachusetts Division of Banks exercises over money transmitters and crypto firms. This compounds a distinct supervisory-visibility gap: no direct primary-source enforcement orders or examination findings from the Division of Banks could be located for the eighteen-month window despite the significant asset-management and trust-sector footprint of the Commonwealth.

Massachusetts institutionalized blockchain-analytics tooling for fraud-asset recovery. The Office of the Massachusetts Attorney General used commercial blockchain-tracing tools in the SpireBit case, identifying over 700 addresses, securing asset freezes, and distributing 217,000 dollars to four Massachusetts victims out of more than 600,000 dollars recovered for crypto-scam victims nationally to date.

Cross-Monitor Connections

The Zedcex and Zedxion designation gap connects directly to two adjacent monitors. For GMM, an OFAC action against UK-registered exchanges without a matching EU or UK listing constitutes a cross-regime sanctions-screening scope gap with macro-compliance implications for globally exposed institutions, including Massachusetts-headquartered firms with cross-border operations. For ESA, the same absence of an EU or UK equivalent designation is a candidate regulatory-gap signal for sanctions-list harmonization tracking across the European and British regimes. Separately, the OFAC gatekeeper-trust settlement and the structural exposure of the Massachusetts trust-and-estate sector to that concealment mechanism connect to the standing interest of WDM in professional-enabler networks that service asset concealment for sanctioned persons, even though no Massachusetts-specific case has been named this window.

Outlook

Three developments will determine whether the mixed picture presented this cycle tips toward further deterioration or partial repair. The FATF fifth-round mutual evaluation final report, expected later in 2026, will either confirm or revise the beneficial-ownership-related standing of the United States, with the Corporate Transparency Act domestic rollback weighing directly on that assessment. The committee progress of House Bill 501 will determine whether Massachusetts gains any state-level substitute for the lost federal beneficial-ownership reporting layer, or whether the anonymous-shell-formation pathway remains open indefinitely. On the crypto side, finalization of GENIUS Act stablecoin implementing regulations by January 2027, and the outcome of the CLARITY Act market-structure legislation before the November 2026 midterms, will shape whether the enforcement gains from the Bitcoin Depot disruption are matched by comparable movement against the upstream liquidity-provision layer that has so far gone unaddressed. This is scenario orientation only, not a prediction of any specific outcome.

Domain intelligence (D1–D8)

D1 Sanctions

no_changeno_changestanding position

Sanctions Architecture and Evasion

Two developments this cycle test the architecture of sanctions enforcement from different angles, and both bear structurally on Massachusetts exposure even though neither produced a Massachusetts-named case this window. The first is a settlement rather than a designation: OFAC settled for 1,092,000 dollars with a US-licensed attorney and fiduciary who served as trustee of a sanctioned Russian oligarch family trust between 2018 and 2022. The mechanism the settlement documents, a fiduciary continuing to administer a family trust after the beneficial owner was designated a Specially Designated National, is a professional-gatekeeper concealment typology that is national in scope but carries structurally elevated exposure wherever a jurisdiction hosts a dense trust-and-estate legal and private-banking bar. Boston is such a jurisdiction: its asset-management, trust, and private-banking cluster is large relative to the size of the Commonwealth, and the OFAC settlement should be read as a documented confirmation of a mechanism this sector is structurally positioned to encounter, independent of whether any Massachusetts-based fiduciary has yet been named in an enforcement action.

Continue reading

The second development is a designation with a visible screening-scope gap attached. OFAC designated the UK-registered cryptocurrency exchanges Zedcex and Zedxion on 30 January 2026 for processing transactions linked to the Islamic Revolutionary Guard Corps, marking the first sanctioning of exchanges specifically for activity within the Iranian financial system rather than for sanctions-adjacent conduct elsewhere. No equivalent European Union or United Kingdom designation was identified this window. For a Massachusetts-headquartered or Massachusetts-exposed financial institution that screens primarily against EU or UK sanctions lists as well as the SDN list, this divergence is a live architecture gap rather than a hypothetical one.

The obligation architecture underlying both findings is well established but unevenly tested. The OFAC gatekeeper settlement is grounded in the blocked-property rule as applied to trust structures, an obligation category that requires investment firms and banks serving as fiduciaries to screen not only account holders but underlying trust beneficiaries. The affected firm types most exposed are investment firms and banks operating trust and estate practices, and the customer typologies most implicated are politically exposed persons, high-net-worth clients, and fund structures. For crypto-asset operators and banks exposed to the Zedcex and Zedxion designation, the relevant obligation is SDN List screening applied to a virtual-asset-service-provider counterparty category that is structurally harder to screen than a named individual in a traditional financial relationship.

Per the architecture-over-incident principle, the significance of both findings lies less in the individual settlement or designation than in what each confirms about the durability of the underlying mechanism. A single OFAC settlement closes one case; it does not close the structural pathway by which a family trust can continue administering blocked property for years before detection. Similarly, a single designation of two named exchanges does not close the pathway by which sanctioned Iranian financial activity can route through jurisdictions where designation authority and screening-list scope have not yet converged. Massachusetts inherits both open pathways as a matter of structural position, consistent with the mixed enforcement-versus-enablement characterization applied to the Commonwealth this cycle.

Outlook

The near-term signal to watch is whether the European Union or the United Kingdom follows the OFAC designation of Zedcex and Zedxion, which would close the screening-scope gap, or whether the divergence persists and widens. On the gatekeeper side, the absence of a Massachusetts-named trust-concealment case to date does not indicate absence of exposure; it indicates that the mechanism has not yet been detected or enforced locally, which is a supervisory-visibility question rather than a risk-absence finding. This is scenario orientation only, not a prediction of enforcement timing.

Judgment: No MA-specific signal this cycle. Uncertain
Cumulative analysis

Sanctions Architecture and Evasion — Cumulative Analysis

Through this first monitoring cycle for the Massachusetts jurisdiction chain, sanctions-architecture exposure rests on two confirmed structural mechanisms rather than on any Massachusetts-specific violation, and reading them together establishes the baseline against which future cycles should be assessed. The first mechanism is professional-gatekeeper concealment of the assets of sanctioned persons through trust structures, confirmed nationally when OFAC settled for 1,092,000 dollars with a US-licensed attorney and fiduciary who served as trustee of a sanctioned Russian oligarch family trust between 2018 and 2022. Massachusetts inherits structurally elevated exposure to this mechanism by virtue of hosting a large Boston-based asset-management, trust, and private-banking cluster relative to the size of the Commonwealth, independent of whether any Massachusetts fiduciary has yet been named in an enforcement action. The obligation architecture underlying this exposure runs through the OFAC blocked-property rule as applied to trust structures, implicating investment firms and banks whose trust and estate practices serve politically exposed persons, high-net-worth clients, and fund structures.

The second mechanism is a cross-regime sanctions-screening scope gap, confirmed when OFAC designated the UK-registered cryptocurrency exchanges Zedcex and Zedxion on 30 January 2026 for processing transactions linked to the Islamic Revolutionary Guard Corps, the first sanctioning of exchanges specifically for activity within the Iranian financial system. No equivalent European Union or United Kingdom designation had been identified as of this cycle, meaning any Massachusetts-headquartered or Massachusetts-exposed financial institution screening primarily against EU or UK sanctions lists carries a live rather than hypothetical screening gap.

Per the architecture-over-incident principle governing this monitor, the significance of both findings lies less in the individual settlement or designation than in what each confirms about the durability of the underlying mechanism. A single settlement closes one case; it does not close the structural pathway by which a family trust can continue administering blocked property for years before detection, because trust administration is a private, low-visibility legal relationship rather than a transaction that triggers automated monitoring. A single designation of two named exchanges likewise does not close the pathway by which sanctioned Iranian financial activity can route through jurisdictions where designation authority and screening-list scope have not converged.

This cycle also establishes the Massachusetts entry point into two standing global trackers maintained by this monitor. The Russian Sanctions-Evasion Architecture tracker notes that Massachusetts carries indirect exposure to continued national evasion infrastructure primarily through its trust-and-estate sector rather than as a physical transit corridor, consistent with the gatekeeper-concealment finding above. The Sanctions Regime Divergence tracker separately notes that the January 2026 designation of Zedcex and Zedxion without matching EU or UK action, combined with divergent regime treatment of blocked trust property interests, continues to create screening-scope mismatches for Massachusetts-headquartered multi-jurisdictional financial institutions.

Taken as a whole, the first-cycle sanctions-architecture baseline for Massachusetts is one of inherited rather than locally generated risk: the Commonwealth has no independent sanctions regime or designation authority of its own, and both structural gaps documented this cycle derive from national-level mechanisms and international-regime asymmetries that happen to intersect with the scale and composition of the Massachusetts financial-services sector. Future cycles should track whether either gap narrows through allied designation action or through a documented Massachusetts-specific enforcement case, or whether it persists as an unresolved structural feature of the jurisdiction risk profile.

Outlook

As subsequent cycles accumulate, this baseline should be tested against whether any Massachusetts-specific trust-concealment case emerges, whether allied designations of Zedcex and Zedxion follow, and whether Massachusetts financial institutions demonstrate enhanced screening coverage against non-SDN sanctions lists. This is scenario orientation only, not a prediction of future enforcement or designation activity.

domain_sub_briefs · D1 · Cumulative analysis
Periodic updates (1)
3 Sep 2026 · fim-2026-08-05

Sanctions Architecture and Evasion

Sanctions architecture targeting Russia continued its established rolling-amendment cadence this cycle, while a parallel and structurally more significant development emerged in Iran: sanctions-evasion infrastructure is beginning to route around, rather than through, the correspondent-banking rails that existing sanctions screening architecture is built to monitor. OFAC published Russia-related Designations Updates on July 20, 2026, naming entities including A T S Heavy Equipment and Pitersnab LLC under Executive Order 14024 Section 11, while the GL 131H/132/134-series of general licenses continues its rolling amendment cycle, including provisions addressing a temporary reopening of segments of the oil market. This is architecture functioning as designed: a layered general-license regime that permits calibrated market access alongside continuing designation activity, assessed at high confidence on the strength of a Tier-1 OFAC primary source.

The more consequential architectural signal is Iranian Revolutionary Guard Corps-linked facilitators reportedly minting a proprietary stablecoin, USDZ, through OFAC-designated issuer Zedxion, to fund proxy operations, with reported transaction volumes in the billions of dollars since 2020 routed through layered financial structures. This is assessed rather than confirmed, resting on a single Tier-4 secondary source with the primary FinCEN alert not retrieved this cycle, and the sanctions-evasion theory here is one of infrastructure substitution: rather than laundering funds through designated correspondent banks where screening architecture would eventually flag the activity, the proxy network mints its own settlement asset, sidestepping that monitoring layer entirely.

For obliged institutions, the compliance obligation attached to the Russia sanctions architecture this cycle remains squarely a screening obligation under Executive Order 14024, applicable across banks and cross-sector correspondent-banking relationships; the claim underlying this cycle's designation update explicitly flags correspondent-bank counterparties as the relevant customer typology. The Iran-linked stablecoin thread carries a different, though related, compliance texture: its customer typology is VASP-counterparty risk, meaning the relevant control point sits with crypto-asset operators and any bank maintaining a relationship with them, rather than with traditional correspondent banking alone. A bank whose sanctions screening architecture is built entirely around correspondent-banking rails and SDN-list matching may have no natural detection point for a proxy network settling in a proprietary stablecoin it does not already monitor.

Architecture-over-incident framing is warranted here rather than incident-specific alarm: neither the July 20 SDN designations nor the USDZ/Zedxion reporting is, on its own, an isolated enforcement event of primary significance. The more durable finding is that the layered general-license and designation machinery around Russia continues to operate as an evolving but recognisable architecture, while the Iran-linked stablecoin reporting, even at Assessed confidence on a single Tier-4 source, is an early signal of a structurally different evasion architecture that conventional correspondent-banking-centric screening was not designed to see.

Outlook

Watch for whether OFAC or FinCEN issue a dedicated primary-source advisory on proprietary-stablecoin sanctions-evasion mechanisms of the USDZ/Zedxion type, which would materially upgrade this cycle's Tier-4-sourced assessment to a corroborated finding. On the conventional side, the GL 134-series oil-market provisions and the pace of new EO 14024 Section 11 designations remain the baseline indicators of whether the layered general-license architecture is tightening or loosening around Russia in the coming cycle.

D2 Beneficial Ownership

no_changeno_changestanding position

Beneficial Ownership and Corporate Transparency

Massachusetts sits outside the European Union direct-supervision perimeter entirely; the AML Regulation, the sixth Anti-Money Laundering Directive, and the AMLA Regulation apply to European Economic Area member states and do not touch Massachusetts corporate filings directly. The developments directly relevant to the Massachusetts regulatory perimeter this cycle sit instead at the federal and state level. The most structurally significant is the interim final rule issued by FinCEN, effective 26 March 2025, which exempted all United States-formed entities, previously termed domestic reporting companies, from Corporate Transparency Act beneficial-ownership reporting. Because Massachusetts maintains no independent state beneficial-ownership registry, this federal exemption restores an anonymous-shell-formation pathway through the corporate filing system operated by the Massachusetts Secretary of the Commonwealth, with no state-level substitute currently in force. A pending countermeasure exists: House Bill 501 would require Massachusetts limited liability companies to disclose beneficial owners, but the hearing on the bill was rescheduled to 25 September 2025 and it had not passed as of this cycle.

Continue reading

This federal rollback also bears on a second finding this cycle: the frequently repeated characterization of United States FATF standing as largely compliant and not grey- or black-listed is a legacy rating, drawn from the March 2024 follow-up report under the 2016 fourth-round mutual evaluation, rather than a current assessment. A fifth-round on-site evaluation was conducted in early 2026, with a final report expected later this year, and the Corporate Transparency Act domestic rollback has been identified as a named re-rating risk factor bearing directly on that pending review, specifically because beneficial-ownership transparency is a core component of FATF Recommendation 24 and Recommendation 25 assessment criteria.

Globally, the EU AML Package sets the structural direction for beneficial-ownership transparency architecture, and this durable structural fact provides useful comparative context even though it does not directly govern Massachusetts. The package comprises three distinct instruments rather than a single measure: the AML Regulation, or AMLR under Regulation (EU) 2024/1624, directly applicable across the European Economic Area without national transposition; the sixth Anti-Money Laundering Directive, or 6AMLD, which each member state transposes into domestic law on its own timeline; and the AMLA Regulation under Regulation (EU) 2024/1620, which establishes the Anti-Money Laundering Authority and a hybrid supervisory perimeter under which the Authority directly supervises a designated set of high-risk cross-border obliged entities while national authorities retain responsibility for the remainder. This architecture represents a shift away from purely national AML supervision toward an EU-level supervisory layer sitting above national regulators, a direction that stands in contrast to the current United States approach, where the recent movement has been toward less rather than more beneficial-ownership disclosure at the federal level. No AMLA-specific horizon anchor applies to Massachusetts this cycle, and this architecture is stated here as standing structural background rather than as a Massachusetts development.

The obligation architecture implicated by the federal rollback runs through the FinCEN Advisory framework rather than through OFAC or BSA transaction-monitoring rules, and it affects a cross-sector population of affected firm types rather than a single regulated industry. The customer typologies most implicated are corporate entities and fund structures, precisely the vehicle types most commonly associated with beneficial-ownership layering, and the interim final rule removes the primary federal transparency tool that would otherwise have made such layering visible to law enforcement and financial institutions conducting customer due diligence. This is a control-gap signal properly characterized as partial rather than total, because the residential real estate sector retains a separate transparency backstop through the Geographic Targeting Order mechanism.

Outlook

Two near-term events will determine the trajectory of Massachusetts beneficial-ownership transparency: the outcome of the FATF fifth-round mutual evaluation report, expected later in 2026, and the committee progress of House Bill 501, which remains the only mechanism currently positioned to restore any beneficial-ownership visibility at the state level. Absent passage of the state bill, the anonymous-shell-formation pathway through the Massachusetts corporate registry remains open indefinitely, a structural regression that architecture-over-incident analysis weighs more heavily than the absence of any documented enforcement case exploiting it to date. This is scenario orientation only, not a prediction of legislative or FATF outcomes.

Judgment: No MA-specific signal this cycle. Uncertain
Cumulative analysis

Beneficial Ownership and Corporate Transparency — Cumulative Analysis

Through this first monitoring cycle, the beneficial-ownership and corporate-transparency posture of Massachusetts is defined by a federal regression with no state-level substitute yet in force. Massachusetts sits outside the European Union direct-supervision perimeter; the AML Regulation, the sixth Anti-Money Laundering Directive, and the AMLA Regulation do not govern the Massachusetts corporate registry directly, so the developments most relevant to this jurisdiction sit at the federal and state level rather than the EU level. The structurally significant event establishing this cycle baseline is the interim final rule issued by FinCEN, effective 26 March 2025, exempting all United States-formed entities from Corporate Transparency Act beneficial-ownership reporting. Because Massachusetts maintains no independent state beneficial-ownership registry, this restores an anonymous-shell-formation pathway through the corporate filing system operated by the Massachusetts Secretary of the Commonwealth. A pending countermeasure, House Bill 501, would require Massachusetts limited liability companies to disclose beneficial owners, but its hearing was rescheduled to 25 September 2025 and it remains unenacted, so the gap is open rather than closed as this baseline is established.

This federal rollback also frames a second baseline finding: the frequently repeated characterization of United States FATF standing as largely compliant is a legacy rating from the March 2024 follow-up report under the 2016 fourth-round mutual evaluation, not a current assessment. A fifth-round on-site evaluation was conducted in early 2026 with a final report expected later this year, and the Corporate Transparency Act rollback is a named re-rating risk factor for that review, given that beneficial-ownership transparency underlies FATF Recommendation 24 and Recommendation 25.

As standing structural backdrop against which this and future Massachusetts cycles should be read, the EU AML Package comprises three distinct instruments: the directly applicable AML Regulation under Regulation (EU) 2024/1624, the sixth Anti-Money Laundering Directive transposed per member state, and the AMLA Regulation under Regulation (EU) 2024/1620 establishing the Anti-Money Laundering Authority and a hybrid direct and indirect supervisory perimeter over high-risk cross-border obliged entities. This durable architecture illustrates a supervisory direction, from purely national toward hybrid EU-level oversight, that stands in contrast to the current federal United States trajectory of reduced rather than expanded beneficial-ownership disclosure. No AMLA-specific horizon anchor applied to Massachusetts this cycle; the architecture is carried here as background rather than as a jurisdiction-specific development.

The corporate and fund-structure customer typologies most exposed to beneficial-ownership layering are precisely those affected by the federal exemption, and the control gap this creates is properly characterized as partial, since the residential real estate sector retains a separate transparency backstop through the Geographic Targeting Order mechanism even as general corporate-formation transparency has narrowed materially since March 2025.

Outlook

The two events most likely to move this baseline in subsequent cycles are the publication of the FATF fifth-round final report and the committee disposition of House Bill 501. Absent passage of the state bill, the anonymous-shell-formation pathway through the Massachusetts corporate registry remains open indefinitely, and this cumulative essay will be revised as either development resolves. This is scenario orientation only, not a prediction of legislative or FATF outcomes.

domain_sub_briefs · D2 · Cumulative analysis
Periodic updates (1)
3 Sep 2026 · fim-2026-08-05

Beneficial Ownership and Corporate Transparency

The EU AML Package's three constituent instruments continued their distinct, standing-architecture progression this cycle. The package comprises three legally separate instruments: the AML Regulation (AMLR, Regulation (EU) 2024/1624), which is directly applicable across Member States without national transposition; the sixth Anti-Money Laundering Directive (6AMLD), which each Member State must transpose into its own national law; and the AMLA Regulation (Regulation (EU) 2024/1620), which establishes the Anti-Money Laundering Authority and shifts a defined slice of AML/CFT supervision from purely national authorities toward a hybrid EU-level regime. This tripartite architecture is durable structural backdrop, not a single-cycle development, and this cycle's beneficial-ownership signal is best read against it.

Within that backdrop, this cycle's concrete development is a milestone-and-friction pairing. On the AMLR side, the beneficial-ownership provisions at Articles 11 to 13 and 15, together with a package of AMLA technical standards, fall due July 10, 2026, ahead of the AMLR's full direct-applicability date of July 10, 2027, a Regulation-track timeline that, being directly applicable, does not depend on Member State transposition quality. On the 6AMLD side, by contrast, the Directive's register-access transposition provisions missed their July 10, 2025 deadline in roughly a third of Member States, prompting the European Commission to open infringement proceedings against eleven Member States; the Directive's general transposition deadline remains July 10, 2027. This is assessed rather than confirmed, resting on Tier-3 and Tier-4 secondary legal commentary without a direct eur-lex or Commission infringement-notice primary citation retrieved this cycle.

The AMLA itself, operational since July 1, 2025, must publish twenty-three technical standards by July 10, 2026, covering matters from risk-based supervision to CDD requirements for newly covered sectors, ahead of assuming direct supervision of approximately forty high-risk cross-border obliged entities beginning January 2028. The structural read is that the EU's beneficial-ownership and corporate-transparency regime is bifurcating in practice even as it unifies on paper: the AMLR's directly-applicable rules and AMLA's build-out are proceeding on schedule, while national 6AMLD transposition maturity is visibly uneven, evidenced by the Commission's infringement action against roughly a third of Member States.

The AMLR's beneficial-ownership articles specifically target fund-structure and corporate customer typologies, meaning asset managers, fund administrators, and corporate-service providers operating cross-border in the EEA are the obliged-entity population most directly affected by the Articles 11-13 and 15 timeline, independent of the separate AMLA technical-standards workstream that applies more broadly across the cross-sector obliged-entity population. The jurisdiction-level read corroborates this bifurcation: EEA-wide risk direction is assessed as stable overall, with enforcement-versus-enablement characterised as mixed and the underlying dynamic characterised as structural rather than episodic; per-Member-State transposition status was not fully established this cycle, which is itself a coverage gap worth flagging rather than a resolved uniform picture.

Outlook

Watch for whether AMLA meets its July 10, 2026 deadline to publish the full slate of twenty-three technical standards, and for whether the Commission's infringement proceedings against the eleven lagging Member States produce further escalation, a referral to the Court of Justice would be the next structural marker, ahead of the 2027 general transposition and full-application dates. The gap between the AMLR's uniform, directly-applicable rulebook and 6AMLD's uneven national transposition is the structural fault line most likely to generate next-cycle developments in this domain.

D3 Enabler Jurisdictions

no_changeno_changestanding position

Enabler Jurisdictions

Massachusetts does not present as a classic enabler jurisdiction in the sense of secrecy-haven corporate architecture, but its state-level money-services licensing regime performs an adjacent gatekeeping function: it determines which entities may lawfully conduct money transmission, including virtual-currency transmission, within the Commonwealth, and it is now producing a visible enforcement record. The Division of Banks' third-quarter 2026 enforcement bulletin documents consent orders and cease-and-desist actions against unlicensed check cashers, with $444,136.05 ordered reimbursed to 1,157 affected consumers. The bulletin also records at least one named consent order, against Parras Inc. and an individually named respondent holding NMLS 904752, entered 2 October 2026 against a check-casher respondent.

Continue reading

The relevant structural backdrop is M.G.L. c. 169B, the general money-transmitter licensing statute, which took effect 1 January 2026 and whose transition deadline of 1 July 2026 has now passed. Entities that did not hold or transition to a Division of Banks license by that date are barred from money transmission, and the Division's framing extends the licensing perimeter to virtual-currency transmitters as well as traditional check cashers and money transmitters. Read as enabler-jurisdiction architecture rather than incident, the significant fact is not the dollar figure but the existence, for the first time since the January 2026 effective date, of a dated enforcement record showing the statute being applied against entities that continued operating without authorisation through the transition window. A sub-national licensing regime that captures virtual-currency activity within its money-transmission definition, and that enforces against unlicensed operators with consumer-reimbursement remedies, narrows the space available to an unlicensed operator seeking to use Massachusetts as a point of access to the U.S. financial system.

This is also a case where enablement-as-signal logic should be stated directly: for most of 2026 to date, the absence of enforcement activity against unlicensed check cashers and money transmitters would itself have carried a permissive signal, irrespective of the statute's formal reach. The appearance of the Q3 bulletin is the Division closing that gap, and it should be read as the regime beginning to convert its statutory perimeter into practiced enforcement rather than as a one-off fine.

Outlook

Whether this represents a durable new enforcement posture or a single clearing exercise tied to the 1 July 2026 deadline passing will only be visible once a Q4 2026 bulletin, or equivalent dated enforcement-table update, is published by the Division of Banks. A continuation of consent-order activity against unlicensed check cashers or virtual-currency transmitters would support reading Massachusetts as having converted a previously under-enforced licensing perimeter into an active gatekeeping control. A reversion to enforcement silence would instead suggest the Q3 bulletin was principally a backlog-clearing exercise. Either way, the relevant evidence will continue to be the Division's own published enforcement table rather than any inference available at this remove.

Judgment: No MA-specific enabler-jurisdiction signal this cycle. Uncertain
Cumulative analysis

Enabler Jurisdictions and Professional Facilitators — Cumulative Analysis

Across this first monitoring cycle, the Massachusetts enabler-jurisdiction profile is established around a structural rather than deliberate-choice framing: exposure derives from the scale of the professional-services sector relative to the visibility of state-level supervision, not from a permissive regulatory framework constructed by design. The Boston-based asset-management, trust, and private-banking cluster is large relative to the size of the Commonwealth, and carries structurally elevated exposure to the trust-based sanctions-concealment mechanism OFAC confirmed nationally through a 1,092,000 dollar settlement with a fiduciary who administered a sanctioned family trust between 2018 and 2022. No Massachusetts-specific case involving this mechanism has been named as of this cycle, an absence that should be read as reflecting the private, low-visibility nature of ongoing trust administration rather than an absence of exposure.

This baseline is compounded by a second, federally driven finding: a reinterpretation by the Office of the Comptroller of the Currency now allows crypto firms to obtain national trust-bank charters immune from state-regulator enforcement, a pattern documented in Maine and structurally applicable to the oversight the Massachusetts Division of Banks exercises over money transmitters and crypto-asset firms. This mirrors the pre-2008 mortgage-lending federal-preemption pattern, in which chartering options allowed regulated entities to route around state-level supervisory attention. Compounding this risk is a directly documented visibility gap: no primary-source enforcement orders or examination findings from the Massachusetts Division of Banks were identified for the eighteen-month window covered by this first research cycle, despite the significant asset-management and trust-sector footprint of the Commonwealth. This is properly read as a supervisory-visibility gap rather than an enforcement-absence finding, since the absence of located records does not establish that no supervisory activity occurred.

The customer typologies underlying this baseline overlap substantially across the two findings: money-services-business and virtual-asset-service-provider counterparties on the crypto-oversight side, and politically exposed persons, high-net-worth individuals, and fund structures on the trust-and-estate side, the same categories implicated by the sanctions-architecture gatekeeper finding established elsewhere this cycle. This overlap means the enabler-jurisdiction risks documented in this first cycle compound through a shared client population rather than operating as independent threads, a point that should inform how future cycles integrate cross-domain findings for this jurisdiction chain.

Per architecture-over-incident analysis, the absence of a documented Division of Banks enforcement record is treated as more analytically significant than any single enforcement action would be, since a persistent absence of visible supervisory output sustained against a sector of this scale raises a structural capacity question rather than a resolved finding. This first-cycle baseline should be understood as establishing a supervisory-visibility question that direct primary-source collection in future cycles is best positioned to resolve.

Outlook

Future cycles should track whether the OCC chartering mechanism is challenged or clarified in a way that preserves state authority over Massachusetts money transmitters and crypto firms, and whether the Division of Banks develops a more visible public enforcement and examination record. Absent either development, this first-cycle baseline of structural, capacity-driven enabler exposure is expected to persist unchanged. This is scenario orientation only, not a prediction of regulatory outcomes.

domain_sub_briefs · D3 · Cumulative analysis
Periodic updates (2)
3 Sep 2026 · fim-2026-08-05

Enabler Jurisdictions and Professional Facilitators

Two enabler-jurisdiction signals surfaced this cycle, one fresh and one standing. Cambodia's own central bank governor publicly warned that the country must avoid a third FATF grey-list placement, citing persistent reports linking Cambodia to online scam hubs and illegal gambling operations tied to laundering, undeclared cash movements, and cross-border payment abuse; the National Bank of Cambodia has launched a second national risk assessment in response. This is assessed rather than confirmed, and notably no fresh 2026 FATF primary statement on Cambodia specifically was identified this cycle; the signal is a jurisdiction acknowledging its own exposure ahead of any FATF action, which reads as a pre-designation warning phase rather than a confirmed listing event.

The second signal is standing background risk rather than a new development: the Golden Triangle Special Economic Zone in Laos remains associated with cyber-enabled fraud and online gambling under the control of Zhao Wei's transnational criminal organisation, who faced UK sanctions in 2023 for links to human trafficking and forced criminality in scam operations. This is assessed at low confidence on a single secondary source with no fresh 2026-cycle primary designation, and is treated here as continuing structural risk rather than an active development.

Outlook

Cambodia's self-identified risk is the item to watch most closely: a second national risk assessment plus public central-bank acknowledgment of scam-centre and casino-linked laundering exposure typically precedes, rather than follows, FATF plenary action, so a listing decision in a coming cycle would not be a surprise. The Golden Triangle SEZ risk in Laos remains unresolved background exposure absent a fresh triggering event.

14 Jul 2026 · fim-2026-07-14

Enabler Jurisdictions and Professional Facilitators

Massachusetts professional-facilitator exposure this cycle concentrates in two related but distinct findings: a structural concentration of the trust-and-estate professional sector, and a documented visibility gap in state-level banking supervision that a federal charter mechanism now threatens to widen further. The Boston-based asset-management, trust, and private-banking cluster is large relative to the size of the Commonwealth, and it carries structurally elevated exposure to the trust-based sanctions-concealment mechanism that OFAC confirmed nationally through its 1,092,000 dollar settlement with a fiduciary who administered a sanctioned family trust between 2018 and 2022. No Massachusetts-specific case involving this mechanism has been named this window, but the structural exposure exists independent of whether any Massachusetts fiduciary has yet been identified in an enforcement action, precisely because ongoing trust administration is private and low-visibility by design.

The second finding compounds the first. A federal reinterpretation by the Office of the Comptroller of the Currency now allows crypto firms to obtain national trust-bank charters that are immune from state-regulator enforcement, a pattern that has been documented in Maine and that is structurally applicable to the oversight the Massachusetts Division of Banks currently exercises over money transmitters and crypto-asset firms. This mirrors a preemption dynamic seen previously in the mortgage-lending sector before 2008, in which federal chartering options allowed regulated entities to route around state-level supervisory attention. The risk this poses to Massachusetts is compounded by a separate and directly documented gap: no direct primary-source enforcement orders or examination findings from the Massachusetts Division of Banks were identified for the eighteen-month window covered by this research cycle, despite the Commonwealth hosting a significant asset-management and trust-sector footprint. This is properly characterized as a supervisory-visibility gap rather than an enforcement-absence finding.

Taken together, these two findings describe an enabler-jurisdiction profile that is less about permissive law than about supervisory capacity and visibility. Massachusetts does not appear to have deliberately constructed a permissive regulatory framework; rather, its exposure derives from the scale of its professional-services sector relative to the visibility of its state banking supervisor, and from a federal chartering mechanism that could further erode whatever state-level supervisory capacity currently exists. Per the enabler-jurisdiction filter, this distinction between capacity constraint and deliberate choice matters analytically.

No formal obligation citation attaches directly to either finding this cycle, since the OCC chartering pattern was documented as a structural risk rather than a specific rule change, and the Division of Banks visibility gap is an absence-of-evidence finding rather than a rule. The customer typologies most relevant to this domain are money-services-business counterparties and virtual-asset-service-provider counterparties on the crypto-oversight side, and politically exposed persons, high-net-worth individuals, and fund structures on the trust-and-estate side, mapping the same customer categories implicated by the OFAC gatekeeper settlement discussed under sanctions architecture. This overlap is structurally significant: the two enabler-jurisdiction risks documented this cycle compound through a shared client population rather than operating independently of one another.

Architecture-over-incident analysis treats the absence of a documented Division of Banks enforcement record as more significant than any single enforcement action would be, because a persistent absence of visible supervisory output, sustained across an eighteen-month window against a sector of this scale, raises a structural question about supervisory capacity that a single enforcement action would not resolve on its own.

Outlook

The trajectory to watch is whether the OCC chartering mechanism is challenged or clarified in a way that preserves state authority over money transmitters and crypto firms operating in Massachusetts, and whether the Division of Banks begins to produce a more visible public enforcement and examination record in subsequent cycles. Absent either development, the structural exposure documented this cycle is likely to persist as a standing rather than resolved finding. This is scenario orientation only, not a prediction of regulatory or supervisory outcomes.

D4 Conflict Finance

no_changeno_changestanding position

Conflict Finance and Extractive-Industry Integrity

No Massachusetts-specific or newly collected conflict-finance or extractive-industry-integrity development was identified for this cycle covering the Commonwealth. The domain tracker for this cycle explicitly records this domain as quiet, with no new developments logged against Massachusetts, and standing global coverage of this domain, including Russian war-economy financing, Sahel minerals-conflict linkages, and Democratic Republic of Congo governance concerns, is carried forward unchanged rather than restated here as though it were new signal. Given the honesty-over-coverage principle governing this brief, no Massachusetts-specific conflict-finance narrative is constructed from adjacent or national-level findings collected under other domains this cycle, since none of the evidence collected this cycle, the crypto-ATM laundering pipeline, the beneficial-ownership rollback, the sanctions gatekeeper settlement, or the Iran-linked exchange designation, carries a documented conflict-finance or extractive-industry nexus specific to Massachusetts or to this reporting window. This absence of Massachusetts-specific signal is noted rather than papered over: a jurisdiction of the size and financial-services profile of Massachusetts could plausibly carry indirect conflict-finance exposure through its asset-management and private-banking sector, but no evidence collected this cycle supports or specifies such exposure.

Continue reading

Outlook

Future cycles should prioritize direct primary-source collection specifically targeting any Massachusetts nexus to conflict-finance or extractive-industry-integrity typologies, given that the current absence of signal reflects a collection gap as plausibly as an absence of exposure. Until such collection occurs, this domain remains a limited-signal entry for the Massachusetts jurisdiction chain, distinct from the standing global D4 trackers, which continue unchanged. This is scenario orientation only, not a prediction of future findings.

Judgment: No MA-specific signal this cycle. Uncertain
Cumulative analysis

Conflict Finance and Extractive-Industry Integrity — Cumulative Analysis

Across this first monitoring cycle, the Massachusetts jurisdiction chain establishes no conflict-finance or extractive-industry-integrity baseline of its own. No Massachusetts-specific development was identified this cycle, and the domain tracker records the domain as quiet for this jurisdiction. Standing global coverage maintained by this monitor, including Russian war-economy financing, Sahel minerals-conflict linkages, and Democratic Republic of Congo governance concerns, continues unchanged and is not restated here as a Massachusetts finding. Consistent with the honesty-over-coverage principle, no Massachusetts-specific narrative is constructed from adjacent findings collected under other domains this cycle, since none of the crypto-ATM, beneficial-ownership, or sanctions-gatekeeper findings established elsewhere this cycle carry a documented conflict-finance or extractive-industry nexus specific to Massachusetts.

This first-cycle absence of signal should be read as a collection gap as plausibly as an absence of exposure: a jurisdiction of the size and financial-services profile of Massachusetts could plausibly carry indirect conflict-finance exposure through its asset-management and private-banking sector, given the trust-and-estate exposure already documented under sanctions architecture and enabler-jurisdiction findings this cycle, but no evidence collected to date supports or specifies such a nexus.

Outlook

This cumulative baseline will be updated as future cycles conduct direct primary-source collection targeting any Massachusetts nexus to conflict-finance or extractive-industry-integrity typologies. Until such collection occurs, this domain remains a limited-signal entry for the jurisdiction chain, distinct from the standing global D4 trackers. This is scenario orientation only, not a prediction of future findings.

domain_sub_briefs · D4 · Cumulative analysis

D5 Crypto / Digital Assets / Financial Innovation

no_changeno_changestanding position

Crypto / Digital Assets / Financial Innovation

Massachusetts' digital-asset financial-innovation picture this cycle is dominated by the continuing fragmentation of its cryptocurrency-kiosk regulatory response. A statewide prohibition on cryptocurrency ATMs and kiosks, Amendment 374 to economic-development bill S.3178, passed the Massachusetts Senate on July 23-24, 2026, but the House version of the bill did not include the measure, leaving the amendment stalled in a House-Senate conference committee with no confirmed enactment date. In the absence of state-level resolution, municipal action has continued to fill the gap: Dennis became at least the twenty-first Massachusetts town to adopt a local bylaw banning cryptocurrency kiosks, voting at a special town meeting on October 6-7, 2026 and reported October 11, 2026, with the Attorney General's Municipal Law Unit having approved at least 19 such bylaws to date.

Continue reading

This kiosk-specific gap sits alongside a settled general framework: Massachusetts' money-transmission licensing regime under M.G.L. c. 169B, which replaced the prior foreign-only Foreign Transmittal Agency Act, is now fully operative, with licensure beginning January 1, 2026, and the firm-filing transition deadline of July 1, 2026, having passed. Crypto exchanges and other entities transmitting monetary value are captured within this general licensing architecture via NMLS filing, administered by the Division of Banks; there is no bespoke crypto AML statute, and coverage of digital-asset activity flows entirely from the general money-transmitter framework. The result is a jurisdiction where the general financial-innovation licensing perimeter is well settled while the kiosk-specific enforcement tool most relevant to consumer-facing cash-to-crypto on-ramps remains unresolved at the state level.

Ongoing Attorney General litigation against Bitcoin Depot (filed February 3, 2026) and Coinhub, alleging facilitation of crypto scams against Massachusetts consumers via kiosk operations, continues without a new milestone this cycle, illustrating that remedial enforcement against kiosk-related harm currently proceeds independently of both the stalled state ban and the settled general licensing regime.

Outlook

Resolution of the House-Senate conference committee's consideration of the S.3178 kiosk-ban amendment is the clearest marker of whether Massachusetts consolidates kiosk regulation at the state level or continues to rely on the expanding municipal-bylaw patchwork. Continued stalemate is likely to produce further municipal adoptions; enactment would create a uniform statewide prohibition superseding local bylaws.

Judgment: No MA-specific crypto AML signal this cycle; MA's MTL perimeter covers virtual-currency transmitters generally but no crypto-specific action was located. Uncertain
Cumulative analysis

Crypto, Digital Assets, and Financial Innovation — Cumulative Analysis

Through this first monitoring cycle, the Massachusetts digital-asset baseline is established by the disruption, though not full resolution, of a crypto-ATM cash-to-crypto laundering pipeline that operated within the Commonwealth for years. The Office of the Massachusetts Attorney General sued Bitcoin Depot on 3 February 2026, alleging knowing facilitation of scams; over half the money passing through Massachusetts kiosks between August 2023 and January 2025 was allegedly scam-related. Bitcoin Depot filed for Chapter 11 bankruptcy protection on 18 May 2026 and ceased nationwide ATM operations roughly three and a half months later. This sequence establishes, as a baseline fact for this jurisdiction chain, that state-level consumer-protection enforcement can produce national-scale market effects on crypto-ATM infrastructure. The enforcement timeline itself, however, is a structural caution baked into this baseline: the crypto-ATM sector allegedly possessed internal knowledge as early as 2021 of the laundering volume at Massachusetts kiosks, meaning roughly five years elapsed between internal red flags and external intervention, and upstream exchanges including Gemini, Cumberland DRW, Kraken, and Bitstamp continued supplying liquidity to ATM operators amid mounting scam allegations, a node this first cycle of enforcement does not appear to have reached.

Alongside this enforcement-lag finding, the same Massachusetts Attorney General office has built a demonstrated blockchain-analytics enforcement capability, evidenced by the SpireBit case, in which commercial blockchain-tracing tools identified more than 700 wallet addresses, secured asset freezes, and distributed 217,000 dollars to four Massachusetts victims as part of a running national recovery total exceeding 600,000 dollars. This establishes, as a baseline capability for this jurisdiction, an active state-level regulatory-technology posture that contrasts with the comparatively thin public record located from the Massachusetts Division of Banks over the same period.

The federal regulatory horizon forms the durable backdrop against which this Massachusetts baseline should be read going forward. Implementing regulations for the GENIUS Act stablecoin AML and sanctions-compliance framework are due by 18 January 2027 and will govern Massachusetts-based or Massachusetts-serving payment stablecoin issuers once finalized. The CLARITY Act market-structure legislation, pending before the November 2026 midterms, would reset SEC and CFTC jurisdictional boundaries over digital assets, with law-enforcement groups warning that broad decentralized-service exemptions could open AML oversight gaps relevant to Massachusetts-based fintech and crypto firms.

The most significant unresolved control gap in this first-cycle baseline is the uncovered due-diligence obligation at the exchange-to-exchange liquidity layer: major exchanges continued supplying bitcoin to ATM operators despite documented scam-facilitation risk, and no enhanced due-diligence practice at that layer was identified even after the retail-facing kiosk operator at the center of the scheme ceased operations. This gap, together with the pending federal decentralized-service exemption debate under the CLARITY Act, defines the primary risk trajectory for this domain going forward.

Outlook

Subsequent cycles should track whether the upstream liquidity-provider layer draws regulatory or civil attention, and whether the GENIUS Act implementing-regulation process and CLARITY Act outcome move the federal digital-asset AML oversight trajectory toward strengthening or weakening. This cumulative baseline will be revised accordingly. This is scenario orientation only, not a prediction of enforcement or legislative timing.

domain_sub_briefs · D5 · Cumulative analysis
Standing baseline position

Statewide crypto-kiosk ban remains in conference committee; 21+ municipalities, including Dennis (2026-10-06/07), have now enacted local bylaw bans, approved by the AG's Municipal Law Unit.

Periodic updates (4)
25 Oct 2026 · fim-2026-10-25

Crypto / Digital Assets / Financial Innovation

Massachusetts' digital-asset financial-innovation picture is dominated by the continuing fragmentation of its cryptocurrency-kiosk regulatory response. A statewide prohibition on cryptocurrency ATMs and kiosks, Amendment 374 to economic-development bill S.3178, passed the Massachusetts Senate on July 23-24, 2026, but the House version of the bill did not include the measure, leaving the amendment stalled in a House-Senate conference committee with no confirmed enactment date. In the absence of state-level resolution, municipal action has continued to fill the gap: Dennis became at least the twenty-first Massachusetts town to adopt a local bylaw banning cryptocurrency kiosks, voting at a special town meeting on October 6-7, 2026 and reported October 11, 2026, with the Attorney General's Municipal Law Unit having approved at least 19 such bylaws to date.

This kiosk-specific gap sits alongside a settled general framework: Massachusetts' money-transmission licensing regime under M.G.L. c. 169B, which replaced the prior foreign-only Foreign Transmittal Agency Act, is now fully operative, with licensure beginning January 1, 2026, and the firm-filing transition deadline of July 1, 2026, having passed. Crypto exchanges and other entities transmitting monetary value are captured within this general licensing architecture via NMLS filing, administered by the Division of Banks; there is no bespoke crypto AML statute, and coverage of digital-asset activity flows entirely from the general money-transmitter framework. The result is a jurisdiction where the general financial-innovation licensing perimeter is well settled while the kiosk-specific enforcement tool most relevant to consumer-facing cash-to-crypto on-ramps remains unresolved at the state level.

Ongoing Attorney General litigation against Bitcoin Depot (filed February 3, 2026) and Coinhub, alleging facilitation of crypto scams against Massachusetts consumers via kiosk operations, continues without a new milestone, illustrating that remedial enforcement against kiosk-related harm currently proceeds independently of both the stalled state ban and the settled general licensing regime.

Outlook

Resolution of the House-Senate conference committee's consideration of the S.3178 kiosk-ban amendment is the clearest marker of whether Massachusetts consolidates kiosk regulation at the state level or continues to rely on the expanding municipal-bylaw patchwork. Continued stalemate is likely to produce further municipal adoptions; enactment would create a uniform statewide prohibition superseding local bylaws.

29 Sep 2026 · fim-2026-09-28

Crypto, Digital Assets, and Financial Innovation

Massachusetts' new domestic money-transmission licensing regime under M.G.L. c.169B, effective January 1, 2026, creates a fresh and as-yet-unresolved classification question for virtual-currency exchange and custody businesses operating in or transacting with Massachusetts residents. The statute itself does not carve out or expressly reference virtual-currency activity; it was drafted to close a general domestic-transfer supervisory gap, following the Conference of State Bank Supervisors' Model Money Transmission Modernization Act framework that roughly thirty other states have already adopted. Independent legal commentary -- specifically law-firm advisories reviewing the statute's text and legislative history -- states plainly that it remains unclear whether the new law will be interpreted to apply to virtual-currency transactions. No primary regulator guidance from the Division of Banks has resolved this question as of this cycle.

The practical stakes are immediate rather than theoretical. Firms not licensed or transitioned under c.169B by July 1, 2026 were required to immediately cease all licensable money-transmission activity in Massachusetts. If the Division of Banks later determines that virtual-currency exchange or custody activity falls within the statute's domestic-transfer scope, any firm that treated itself as outside the perimeter and continued operating unlicensed past that deadline would face a materially different compliance posture than firms in states with settled crypto-specific carve-outs or dedicated licensing tracks. This is a structural ambiguity worth active monitoring rather than a resolved finding, and the absence of enforcement action against crypto firms to date should not be read as an implicit safe harbour -- it may simply reflect that the classification question has not yet been tested.

The broader significance is architectural: Massachusetts becoming the 49th state to regulate domestic money transmission removes one of the last remaining gaps in the fragmented US state-by-state money-transmitter licensing patchwork that crypto exchange and custody businesses must navigate nationally. Firms with a national or near-national US footprint should treat the Massachusetts gap-closure as one more state where the general MTL framework may now reach their activity, pending clarification.

Outlook

The central open question is whether the Division of Banks will issue interpretive guidance, a formal advisory opinion, or a rulemaking that resolves the virtual-currency scope question, or whether resolution will instead come reactively through an enforcement action or private litigation testing the statute's reach. No primary regulator clarification had surfaced as of this cycle. Firms with Massachusetts-resident virtual-currency customers should treat the current period as one of live regulatory uncertainty and should not assume the general MTL exemptions or provisions available to traditional payment firms transfer cleanly to crypto exchange or custody models without confirmation.

3 Sep 2026 · fim-2026-08-05

Crypto / Digital Assets / Financial Innovation

Two developments this cycle define the compliance perimeter for stablecoins and other digital-asset innovation. First, Treasury advanced formal rulemaking: FinCEN and OFAC issued a joint Notice of Proposed Rulemaking on April 8, 2026 to implement AML/CFT and sanctions provisions for GENIUS Act Permitted Payment Stablecoin Issuers, with final regulations required by July 18, 2026 and full enforcement beginning no later than January 18, 2027. This formally integrates PPSIs into the Bank Secrecy Act and OFAC compliance framework, treating them as financial institutions for AML/CFT purposes and creating a defined customer-due-diligence obligation with a VASP-counterparty typology lens. This is assessed rather than confirmed, corroborated by Federal Register primary docket references cited within Tier-3 law-firm analysis, but without a direct Federal Register primary citation independently retrieved this cycle.

Second, and at a materially larger scale, the ruble-backed stablecoin A7A5 facilitated $93.3 billion in transactions in ten months, reflecting a scale of digital-asset use to circumvent sanctions and facilitate cross-border trade that is assessed at high confidence on Tier-2 analytics-vendor data corroborated by EU Council sanctions-package context. Read together with the Iran-linked USDZ/Zedxion reporting surfaced elsewhere this cycle, the pattern is that state-adjacent stablecoin rails are now processing sanctions-evasion volume at a scale that exceeds prior typologies for this vector, arriving at the same moment the United States is building out its first dedicated AML/CFT and sanctions compliance perimeter for regulated payment stablecoin issuers. The asymmetry is notable: the GENIUS Act rulemaking targets permitted, US-regulated issuers, while the largest reported sanctions-circumvention volume this cycle runs through a ruble-backed stablecoin operating entirely outside that perimeter.

For affected firm types, the compliance burden falls primarily on crypto-asset operators and banks maintaining stablecoin-issuer relationships. The GENIUS Act's BSA-based CDD obligation for PPSIs means these issuers will need to stand up customer due diligence, sanctions screening, and reporting programmes on a timeline compressed to roughly nine months between the April NPRM and the July final-rule deadline, with full enforcement following six months later in January 2027, a rapid build-out schedule relative to the scale of the new obliged-entity population being brought inside the regulatory perimeter for the first time.

Outlook

Watch for the GENIUS Act PPSI final rule, due no later than July 18, 2026, and whether its AML/CFT and sanctions provisions extend any meaningful reach toward non-US-regulated stablecoins such as A7A5, or whether the compliance perimeter remains confined to permitted domestic issuers while the largest sanctions-evasion volume continues to run outside it. Full enforcement begins no later than January 18, 2027, giving obliged institutions a defined runway to build PPSI-specific compliance programmes.

14 Jul 2026 · fim-2026-07-14

Crypto, Digital Assets, and Financial Innovation

The defining development in Massachusetts digital-asset exposure this cycle is the disruption, though not full resolution, of a crypto-ATM cash-to-crypto laundering pipeline that had operated within the Commonwealth for years. The Office of the Massachusetts Attorney General sued Bitcoin Depot, the crypto-ATM kiosk operator, on 3 February 2026, alleging knowing facilitation of scams and misleading sales tactics; the complaint alleged that over half the money passing through Bitcoin Depot kiosks in Massachusetts between August 2023 and January 2025 was scam-related. Bitcoin Depot subsequently filed for Chapter 11 bankruptcy protection on 18 May 2026 in the United States Bankruptcy Court for the Southern District of Texas, ceasing nationwide ATM operations approximately three and a half months after the Massachusetts filing. This sequence should be read as a state-level enforcement action producing a national-scale market effect. However, the enforcement timeline carries a structural caution: the crypto-ATM operator sector, including Bitcoin Depot and peer operators such as CoinFlip and Athena Bitcoin, allegedly possessed internal knowledge as early as 2021 that Massachusetts kiosks were facilitating laundering at extreme volume, meaning roughly five years elapsed between internal red flags and external state regulatory intervention. Upstream of the kiosk layer, major exchanges including Gemini, Cumberland DRW, Kraken, and Bitstamp continued supplying bulk bitcoin liquidity to crypto-ATM operators amid mounting scam allegations, a distinct architectural node this cycle enforcement action does not appear to have reached.

Separately, the Office of the Massachusetts Attorney General has built a proactive blockchain-analytics enforcement capability. In the SpireBit investment-fraud case, the Office used commercial blockchain-tracing tools to identify more than 700 wallet addresses, secure asset freezes, and distribute 217,000 dollars to four Massachusetts victims, part of more than 600,000 dollars recovered for crypto-scam victims nationally to date. This demonstrates active state-level regulatory-technology adoption that stands in contrast to the comparatively thin public record of primary-source enforcement activity located from the Massachusetts Division of Banks over the same window.

Globally, the federal regulatory horizon for digital assets carries two developments with direct bearing on Massachusetts-based and Massachusetts-serving firms. Implementing regulations for the GENIUS Act stablecoin AML and sanctions-compliance framework are due from Treasury, FinCEN, OFAC, and the OCC by 18 January 2027, a framework that will govern any Massachusetts-based or Massachusetts-serving payment stablecoin issuer once finalized. The CLARITY Act market-structure legislation, which would reset jurisdictional boundaries between the SEC and the CFTC over digital assets, remains pending before the November 2026 midterm elections, with law-enforcement groups warning that broad decentralized-service exemptions could create AML oversight gaps directly relevant to Massachusetts-based fintech and crypto firms.

The obligation architecture underlying the crypto-ATM finding runs through Bank Secrecy Act money-services-business registration and AML program requirements, and separately through the counterparty due-diligence expectations that would ordinarily govern exchange-to-exchange liquidity relationships, an obligation category this cycle characterizes as uncovered rather than partially covered, since no evidence of enhanced due diligence at the liquidity-supply layer was identified. The customer typologies most implicated are retail consumers, who bore the direct scam losses, and virtual-asset-service-provider counterparties, who occupy the exchange-to-exchange relationship layer. This uncovered-obligation finding is the single most significant control gap identified in this domain this cycle. Massachusetts is not the origin of either the GENIUS Act or CLARITY Act processes, but its status as home to an active enforcement office pursuing crypto-ATM litigation and blockchain-analytics-driven asset recovery gives it a comparatively concrete stake in how the federal decentralized-service exemption debate resolves.

Outlook

The crypto-ATM pipeline finding will be tested by whether the upstream exchange-liquidity layer, currently unaddressed by any enforcement action identified this cycle, draws regulatory or civil attention in subsequent cycles. The GENIUS Act implementing-regulation process and the CLARITY Act outcome will together determine whether the federal digital-asset regulatory horizon moves toward stronger or weaker AML oversight over the next twelve to eighteen months. This is scenario orientation only, not a prediction of enforcement or legislative timing.

D6 Compliance Technology & Active Defence

no_changeno_changestanding position

Compliance Technology and Active Defence

Massachusetts this cycle presents a genuine contrast between proactive state-level adoption of compliance technology and a federal-level proposal to restructure the supervisory paradigm those technologies operate within. On the adoption side, the Office of the Massachusetts Attorney General has institutionalized commercial blockchain-tracing tooling as a working component of its fraud-enforcement capability rather than as a one-time investigative measure. In the SpireBit case, the Office used blockchain-analytics tools to identify more than 700 wallet addresses connected to a crypto-investment-fraud scheme, secure asset freezes across that address set, and distribute 217,000 dollars to four Massachusetts victims, part of a running total exceeding 600,000 dollars recovered for crypto-scam victims nationally to date. This is a working example of state-level regulatory-technology adoption operating ahead of, rather than in response to, federal guidance, and it stands in contrast to the comparatively thin public record of primary-source enforcement activity located from the Massachusetts Division of Banks over the same eighteen-month window.

Continue reading

On the supervisory-architecture side, FinCEN has proposed a rule under the AML Act of 2020 that would fundamentally reform financial institution AML and CFT program requirements, shifting supervisory expectations away from a prescriptive checklist model and toward risk-based, reasonably-designed programs judged on effectiveness rather than mechanical compliance with enumerated controls. The comment period on this proposal closed 9 June 2026, with finalization still pending. This is a structural rather than episodic development: once finalized, it will change how Massachusetts banks, money-services businesses, and crypto-asset firms are examined, moving the compliance-technology conversation from control-presence questions toward control-effectiveness questions.

Read together, these two findings suggest that Massachusetts compliance-technology posture is currently uneven across institutional layers: strong and demonstrably effective at the state law-enforcement layer, thin and difficult to verify at the state banking-supervisor layer, and about to be reshaped at the federal supervisory layer in a direction that rewards exactly the kind of outcome-oriented, technology-enabled enforcement the Attorney General office has already shown.

No formal obligation citation attaches to either finding directly, since the SpireBit blockchain-analytics deployment is an operational enforcement practice rather than a citation-bearing rule, and the FinCEN proposal remains at the consultation stage. The customer typologies implicated by the SpireBit case are retail investors and virtual-asset-service-provider counterparties, the same categories affected by the crypto-ATM laundering pipeline finding elsewhere this cycle, underscoring that the compliance-technology and crypto-domain findings this cycle are drawn from an overlapping population of Massachusetts crypto-exposed retail consumers rather than two unrelated threads.

Architecture-over-incident analysis favors reading the FinCEN program-reform proposal as more significant than any single Massachusetts enforcement action this cycle, including the SpireBit recovery itself, because a successful shift toward risk-based, effectiveness-oriented supervision would recalibrate examination expectations across every bank, money-services business, and crypto firm operating in or serving Massachusetts, whereas the SpireBit recovery resolved a single investment-fraud scheme rather than altering the supervisory framework those firms operate under. Both findings also bear on the enabler-jurisdiction and enforcement-visibility questions raised elsewhere this cycle, since a state banking-supervisor layer that adopts effectiveness-based federal expectations without a comparably visible public enforcement record risks appearing compliant on paper while remaining difficult to verify in practice.

Outlook

The FinCEN AML and CFT program-reform rule, once finalized, will be the primary event to track for how compliance-technology expectations shift across Massachusetts-regulated firms. Whether the Division of Banks develops a more visible public examination and enforcement record in subsequent cycles will determine whether the current unevenness between law-enforcement-layer and banking-supervisor-layer compliance-technology adoption narrows or persists. This is scenario orientation only, not a prediction of rulemaking or supervisory timing.

Judgment: No MA-specific RegTech/compliance-technology signal this cycle. Uncertain
Cumulative analysis

Compliance Technology and Active Defence — Cumulative Analysis

Through this first monitoring cycle, the Massachusetts compliance-technology baseline is defined by an uneven pattern across institutional layers. At the state law-enforcement layer, the Office of the Massachusetts Attorney General has institutionalized commercial blockchain-tracing tooling as a working fraud-enforcement capability, demonstrated in the SpireBit case, in which more than 700 wallet addresses were identified, asset freezes secured, and 217,000 dollars distributed to four Massachusetts victims as part of a national recovery total exceeding 600,000 dollars. This establishes a baseline of active, outcome-producing regulatory-technology adoption operating ahead of federal guidance. At the state banking-supervisor layer, by contrast, no direct primary-source enforcement or examination record from the Massachusetts Division of Banks was located for the eighteen-month window covered by this first cycle, despite the significant asset-management and trust-sector footprint of the Commonwealth, establishing a comparatively thin and difficult-to-verify baseline at that layer.

At the federal supervisory-architecture layer, FinCEN has proposed a rule under the AML Act of 2020 that would fundamentally reform financial institution AML and CFT program requirements, shifting expectations from a prescriptive checklist model toward risk-based, effectiveness-oriented programs. The comment period closed 9 June 2026 with finalization pending. This is treated as the most structurally significant of the three findings establishing this baseline, because its eventual finalization will recalibrate examination expectations across every Massachusetts-regulated bank, money-services business, and crypto firm, a change with far broader reach than any single enforcement action, however operationally impressive.

The customer typologies underlying the law-enforcement-layer finding, retail investors and virtual-asset-service-provider counterparties, overlap with those affected by the crypto-ATM laundering pipeline finding established under the digital-assets domain this cycle, indicating that the compliance-technology and crypto-domain baselines for this jurisdiction chain are drawn from a shared, rather than separate, population of Massachusetts crypto-exposed retail consumers. This overlap should inform how future cycles integrate findings across these two domains rather than treating them as independent threads.

The central tension established in this first-cycle baseline is between demonstrated capability and demonstrated visibility: strong, technology-enabled, outcome-producing enforcement at the law-enforcement layer sits alongside a banking-supervisor layer whose activity cannot currently be confirmed through available primary sources, and a coming federal shift toward effectiveness-based supervision that will test whether all layers of the Massachusetts compliance architecture can produce comparably verifiable outcomes.

Outlook

Subsequent cycles should track finalization of the FinCEN AML and CFT program-reform rule and whether the Division of Banks develops a more visible public record, since either development would materially update this baseline of uneven compliance-technology capability across the Massachusetts regulatory layers. This is scenario orientation only, not a prediction of rulemaking or supervisory timing.

domain_sub_briefs · D6 · Cumulative analysis
Periodic updates (1)
3 Sep 2026 · fim-2026-08-05

Compliance Technology & Active Defence

United States banking supervisors executed a structural pivot in AML supervisory philosophy this cycle. SR 26-2, issued April 17, 2026 by the Federal Reserve, OCC, and FDIC, replaces the SR 11-7 model-risk-management framework, and FinCEN has separately proposed a two-pronged AML supervisory framework that judges programme design separately from implementation, reserving serious enforcement action for material or systemic failures rather than for every technical gap, and explicitly encouraging institutions to adopt artificial intelligence within their compliance programmes. This is assessed rather than confirmed, corroborated across multiple Tier-4 secondary analyses of the underlying April 2026 Federal Register proposal, without a direct primary Federal Register citation independently retrieved this cycle.

The structural significance of this shift is that it moves US AML supervision away from a tick-box compliance-programme-adequacy standard and toward an effectiveness-and-outcomes standard, a change that directly enables rather than merely permits the use of AI-driven transaction-monitoring and screening tools that a stricter tick-box regime would have treated with more supervisory suspicion. Practitioner commentary corroborating this shift also flags a persisting enforcement-expectation gap: institutions and examiners do not yet share a common, tested understanding of what a material or systemic failure means in practice under the new two-pronged framework, which is itself a compliance-technology risk in the transition period even as the direction of travel is toward lighter-touch, effectiveness-based supervision.

The obligation reshaping here is classified as a governance obligation rather than a reporting or screening one, and it applies across banks and the broader cross-sector obliged-entity population that falls under Federal Reserve, OCC, and FDIC supervision, distinguishing it from the customer-due-diligence and screening obligations driving this cycle's sanctions and beneficial-ownership developments. For compliance-technology vendors and internal build teams alike, the practical effect of a governance-standard shift of this kind is to lower the supervisory friction associated with adopting new detection technology, provided the institution can demonstrate sound programme design; the harder question, per the persisting enforcement-expectation gap noted above, is what evidentiary standard will satisfy examiners that a design is in fact sound.

Outlook

Watch for the first enforcement actions or examination findings issued under the SR 26-2 / effectiveness-based framework, which would begin to clarify where supervisors draw the line between a tolerated design gap and a material or systemic failure warranting serious enforcement. The explicit regulatory encouragement of AI adoption in compliance is also worth tracking for whether it is followed by supervisory guidance on model-risk expectations specific to AI-driven AML tools, given that SR 26-2 itself is a model-risk-management framework replacement.

D7 AML/CTF Regime

stableactivestanding position

AML/CTF Regime

The durable fact for this cycle is the Massachusetts Division of Banks' enforcement of M.G.L. c. 169B, the Commonwealth's general money-transmitter licensing statute, now that its transition deadline of 1 July 2026 has passed. The statute took effect 1 January 2026 and brought money transmission, including virtual-currency transmission, within a Division of Banks licensing requirement; entities not licensed or transitioned by the July deadline are barred from transmitting money in the Commonwealth. The Division's third-quarter 2026 enforcement bulletin is the first dated evidence of what enforcement against unlicensed holdovers looks like in practice, recording consent orders and cease-and-desist actions against unlicensed check cashers and ordering $444,136.05 reimbursed to 1,157 affected consumers. At least one named consent order, against Parras Inc. and an individually named respondent (NMLS 904752), was entered 2 October 2026.

Continue reading

Framed through the AML/CTF-regime lens rather than the enabler-jurisdiction lens, the significance is architectural: a licensing gate of this kind is a preventive AML control, screening entry into the money-transmission system before any suspicious-activity reporting or transaction-monitoring obligation would otherwise attach. Unlicensed check cashers operating outside the Division's supervisory perimeter sit outside the state's AML program-requirement structure entirely; bringing them into enforcement contact, even through administrative consent orders rather than criminal sanction, is the mechanism by which the regime converts a paper licensing requirement into an operative control. The three-pillar balance point worth noting explicitly is that this cycle's signal is entirely AML-pillar; no CTF- or CPF-specific finding is supported by the evidence available, and the bulletin's own framing (consumer reimbursement, consent orders) is consistent with an AML/consumer-protection enforcement posture rather than a counter-terrorist-financing or proliferation-financing one.

The virtual-currency dimension is worth isolating for the regime's own sake: the Division's statutory language brings virtual-currency transmitters within the same money-transmitter licensing perimeter as check cashers and traditional remitters. No virtual-currency-specific enforcement action is evidenced in this cycle's bulletin, but the licensing architecture now in enforcement is one that, by its own terms, reaches that activity, and the absence of a crypto-specific case this cycle should not be read as the perimeter not applying to it.

Outlook

The near-term question for the regime is whether the Division's Q3 2026 enforcement activity continues into subsequent quarters at a comparable or increasing rate, which would evidence a sustained supervisory commitment to the post-transition licensing perimeter, or recedes, which would instead suggest the bulletin reflected clearance of a backlog that accumulated ahead of the 1 July 2026 deadline. No forward legislative or regulatory change to M.G.L. c. 169B itself is evidenced in this cycle's material; the relevant forward signal is enforcement cadence, not statutory amendment.

Judgment: MA's Chapter 169B MTL regime continues to operate with active state-level enforcement against unlicensed MSBs; the Q3 2026 bulletin is routine gatekeeping, not a structural shift. Probable
Cumulative analysis

AML/CTF Regime

Massachusetts has closed a long-standing structural gap in its money-services-business supervisory architecture. M.G.L. c.169B, codified from Chapter 312 of the Acts of 2024 and effective January 1, 2026, requires any business engaged in money transmission involving Massachusetts residents -- including purely domestic transfers -- to obtain a state money-transmitter license from the Division of Banks. Prior to this law, Massachusetts was one of only two US states whose money-transmitter regime did not extend to domestic transfers, an anomaly in an otherwise near-universal state licensing patchwork. The new statute closely tracks the Conference of State Bank Supervisors' Model Money Transmission Modernization Act, the interstate harmonisation template that roughly thirty other states have already adopted, and its enactment makes Massachusetts the 49th state to bring domestic money transmission within a state licensing perimeter.

The Division of Banks opened its application window via the Nationwide Multistate Licensing System from July 1, 2025, six months ahead of the statute's effective date, giving firms a runway to apply or transition existing authorisations. That runway closed on July 1, 2026: firms not licensed or transitioned by that date were required to immediately cease all licensable money-transmission activity in Massachusetts. This is a clean example of architecture-over-incident significance -- the meaningful event is the closing of the supervisory gap itself, not any single enforcement action arising from it, and no adverse enforcement or evasion signal specific to this transition has been identified this cycle.

The federal BSA/FinCEN overlay is unchanged by this development: state money-transmitter licensing under c.169B is additive to, not a substitute for, federal registration and reporting obligations that already apply to money-services businesses operating in Massachusetts. The state-level change principally affects entities that previously operated in Massachusetts without a state license on the assumption that only foreign-transfer activity triggered state licensing; that assumption no longer holds for domestic activity as of January 1, 2026.

The one live open question intersecting this AML/CTF architecture is the unresolved virtual-currency scope issue: independent legal commentary states it remains unclear whether the new domestic-transfer scope reaches virtual-currency exchange and custody businesses, and no primary regulator guidance has settled this as of this cycle. Three-pillar balance requires noting that this cycle's evidence base speaks to AML-adjacent licensing architecture; no CTF- or CPF-specific finding was identified for Massachusetts this window, and that absence should be read as an evidentiary gap rather than a finding of no CTF exposure.

Outlook

Watch for Division of Banks enforcement activity following the July 2026 transition deadline, which would be the first indicator of how strictly the new domestic-transfer perimeter is being applied against firms that failed to transition. Watch equally for any interpretive guidance addressing the virtual-currency scope question, since that determination will materially affect the compliance posture of digital-asset firms with Massachusetts-resident customers.

domain_sub_briefs · D7 · Cumulative analysis
Standing baseline position

Massachusetts' money-transmission licensing regime (MGL c.169B / 209 CMR 44.00) is fully in force; the 2026-07-01 transition deadline has passed and enforcement under the new regime is active.

Periodic updates (2)
3 Nov 2026 · fim-2026-11-03

AML/CTF Regime

The durable fact is the Massachusetts Division of Banks' enforcement of M.G.L. c. 169B, the Commonwealth's general money-transmitter licensing statute, now that its transition deadline of 1 July 2026 has passed. The statute took effect 1 January 2026 and brought money transmission, including virtual-currency transmission, within a Division of Banks licensing requirement; entities not licensed or transitioned by the July deadline are barred from transmitting money in the Commonwealth. The Division's third-quarter 2026 enforcement bulletin is the first dated evidence of what enforcement against unlicensed holdovers looks like in practice, recording consent orders and cease-and-desist actions against unlicensed check cashers and ordering $444,136.05 reimbursed to 1,157 affected consumers. At least one named consent order, against Parras Inc. and an individually named respondent (NMLS 904752), was entered 2 October 2026.

Framed through the AML/CTF-regime lens rather than the enabler-jurisdiction lens, the significance is architectural: a licensing gate of this kind is a preventive AML control, screening entry into the money-transmission system before any suspicious-activity reporting or transaction-monitoring obligation would otherwise attach. Unlicensed check cashers operating outside the Division's supervisory perimeter sit outside the state's AML program-requirement structure entirely; bringing them into enforcement contact, even through administrative consent orders rather than criminal sanction, is the mechanism by which the regime converts a paper licensing requirement into an operative control. The three-pillar balance point worth noting explicitly is that the signal is entirely AML-pillar; no CTF- or CPF-specific finding is supported by the evidence available, and the bulletin's own framing (consumer reimbursement, consent orders) is consistent with an AML/consumer-protection enforcement posture rather than a counter-terrorist-financing or proliferation-financing one.

The virtual-currency dimension is worth isolating for the regime's own sake: the Division's statutory language brings virtual-currency transmitters within the same money-transmitter licensing perimeter as check cashers and traditional remitters. No virtual-currency-specific enforcement action is evidenced in the bulletin, but the licensing architecture now in enforcement is one that, by its own terms, reaches that activity, and the absence of a crypto-specific case should not be read as the perimeter not applying to it.

Outlook

The near-term question for the regime is whether the Division's Q3 2026 enforcement activity continues into subsequent quarters at a comparable or increasing rate, which would evidence a sustained supervisory commitment to the post-transition licensing perimeter, or recedes, which would instead suggest the bulletin reflected clearance of a backlog that accumulated ahead of the 1 July 2026 deadline. No forward legislative or regulatory change to M.G.L. c. 169B itself is evidenced in the material; the relevant forward signal is enforcement cadence, not statutory amendment.

11 Oct 2026 · fim-2026-10-11

AML/CTF Regime

Massachusetts has rebuilt the statutory foundation of its money-transmission licensing regime, and that rebuild is the dominant AML/CTF-adjacent development in the Commonwealth this cycle. Chapter 312 of the Acts of 2024 repealed the Foreign Transmittal Agency Act, formerly Chapter 169, together with the non-bank check-seller provisions of Chapter 167F Section 4, replacing both with a single consolidated licensing statute, Chapter 169B. The implementing regulation, 209 CMR 44.00, reached final effect on 7 November 2025, and the underlying statute became effective 1 January 2026. The Division of Banks set 1 July 2026 as the deadline by which entities already conducting licensable money transmission needed to have filed for or completed their transition to licensure under the new regime. That deadline has now passed. The Division's own regulatory notice states plainly that an entity that did not transition in time must immediately stop conducting licensable money-transmission activities in Massachusetts, with civil penalties available under Chapter 169B Section 10 for continued unlicensed operation.

The AML/CTF significance of this consolidation is structural rather than incidental. A single licensing gateway replacing three fragmented predecessor regimes narrows the surface area for regulatory arbitrage between differently-licensed categories of money-service business, and it gives the Division one consistent set of books-and-records, reporting and supervisory levers to apply across the sector rather than three sets inherited from superseded statutes. The framework's definition of money transmission is drafted broadly enough to capture custodial virtual-currency businesses as handling monetary value, which means that entities providing custodial crypto-asset services fall inside the general money-transmitter perimeter rather than operating outside licensed supervision or under a separate, narrower crypto-specific statute. For AML/CTF purposes, this is consequential: it means the standard money-transmitter compliance obligations, and the standard enforcement posture the Division has now demonstrated, extend to virtual-currency businesses offering custody or money-transmission-equivalent services to Massachusetts customers.

Enforcement activity under and adjacent to the new regime continued through the second and third quarters of 2026. The Division's Q2 2026 Enforcement Bulletin recorded a Cease Directive issued to M&M Tech Solutions Corp. on 2 April 2026 over allegations of unlicensed money transmission. Separately, a Temporary Order to Cease and Desist issued to ChecKings LLC, doing business as Family Financial Centers, a non-depository check casher, became final on 21 August 2026. Neither action is framed by the available sourcing as a sanctions or beneficial-ownership matter; both concern the core licensing-perimeter question of whether an entity engaging in money-service activity holds (or held) the licence the Commonwealth now requires. The practical reading is that the Division is treating the post-deadline enforcement window as live and is not confining its attention solely to newly converted licensees.

The current record does not establish whether any custodial virtual-currency business specifically has been the subject of enforcement action under the new regime; the two disclosed cases both concern conventional money-service or check-cashing conduct. What the sourcing does establish is the structural fact that the licensing gateway now reaches such businesses by definition, which is itself the material change this cycle records, independent of whether enforcement has yet been directed at a crypto-specific operator.

Outlook

The near-term question is less about further legislative change, since the statutory and regulatory architecture is now fully in force, and more about enforcement depth and documentation. A discrete Division of Banks Q3 2026 Enforcement Bulletin had not been located as a standalone document as at this cycle's research, with only individual enforcement-action table rows available; whether a consolidated bulletin surfaces, and whether it names any custodial virtual-currency licensee specifically, will be the clearest indicator of how the Division is applying the new perimeter to digital-asset business models in practice. Readers should also expect continued attention to the population of money-service businesses that may not have completed the 1 July 2026 transition, since the Division's own notice framed immediate cessation and civil penalties as the consequence of continued unlicensed operation.

D8 Commercial Activity

no_changeno_changestanding position

Commercial Activity

Commercial-conduct enforcement touching Massachusetts-regulated or Massachusetts-domiciled entities was active this cycle, though neither disclosed matter concerns illicit-finance typology in the sanctions, beneficial-ownership or terrorist-financing sense; both are consumer-facing commercial-conduct actions that happen to fall within the Division of Banks' or Attorney General's broader supervisory remit. The Massachusetts Division of Banks participated as one of several state financial regulators in a 15.5 million dollar multistate settlement with mortgage servicer NewRez, LLC, announced 12 August 2026. The settlement resolved allegations concerning force-placed insurance overcharges imposed on borrowers, a longstanding area of state mortgage-servicing supervisory attention. The regulatory review recorded against this settlement shows the matter as cleared by the Division of Banks, consistent with a completed multistate resolution rather than an ongoing investigation.

Continue reading

Separately, the Massachusetts Attorney General secured a 795,000 dollar settlement with Peabody Properties, Inc., a property management company, over alleged violations connected to five phishing intrusions occurring between 2019 and 2021 and associated data-security and breach-notification failures. This matter was brought by the Attorney General's office rather than the Division of Banks and concerns data-security and consumer-protection obligations rather than AML or financial-crime compliance; it is included here as cross-pillar commercial-activity context because it reflects the same general pattern of active Massachusetts regulatory enforcement against commercial entities this cycle, even though its substantive hook is data security rather than financial integrity.

Read together, these two settlements indicate that Massachusetts regulators, across both the Division of Banks and the Attorney General's office, were actively closing out commercial-conduct matters during the third quarter of 2026, in parallel with the money-transmission licensing enforcement recorded under the AML/CTF domain this cycle. Neither settlement discloses a conflict-finance, sanctions-evasion, or beneficial-ownership-concealment typology, and neither should be read as bearing on the custodial virtual-currency licensing question addressed elsewhere this cycle. No new mergers, acquisitions, or market-entry activity specific to the financial-integrity infrastructure sector was identified in Massachusetts this cycle.

Outlook

The two settlements disclosed this cycle are both closed matters as reported, with the NewRez settlement marked cleared and the Peabody Properties settlement concluded with final payment terms. No open commercial-activity investigation specific to Massachusetts was identified in the available sourcing. Readers tracking the broader multistate NewRez action should expect the Massachusetts component to remain a historical reference point rather than a developing matter, absent further disclosed regulatory activity.

Judgment: No qualifying commercial event this cycle. Uncertain
Regulatory horizon
No dated horizon items this cycle. 2 items tracked without a confirmed date.
2 pending date · baseline financial-integrity-2026-07-05
Role action cards
MLRO

Massachusetts Division of Banks reports continued enforcement against unlicensed check cashers under the Chapter 169B money-transmitter regime.

The Q3 2026 bulletin documents consent orders and reimbursement obligations against unlicensed money-service businesses. This confirms the state licensing perimeter remains an active gatekeeping and supervisory channel for money-service businesses operating in the Commonwealth.

1 evidence refs
Compliance

Routine state-level enforcement activity continues against unlicensed money-service businesses in Massachusetts.

The licensing perimeter under Chapter 169B remains the operative control point for money-service business activity in the Commonwealth, including entities that the statute would also reach as virtual-currency transmitters.

1 evidence refs
Risk

State-level gatekeeping against unlicensed money-service businesses remains active in Massachusetts.

The continuity of enforcement under the Chapter 169B licensing regime indicates the state supervisory channel for money-service businesses is functioning as a stable control point, without evidence of escalation or structural change this cycle.

1 evidence refs
Standing trackers (T1–T6)
TrackerStatusNote
T1 · Russian Sanctions-Evasion Architectureno_change
T2 · EU AML Package / AMLAno_change
T3 · FATF Grey Listno_change
T4 · Beneficial-Ownership Register Statusno_change
T5 · Crypto / VASP Regulatory Frameworkno_changeMA's Chapter 169B MTL regime continues to bring virtual-currency transmitters within its licensing perimeter; no crypto-specific enforcement located this cycle.
T6 · Sanctions Regime Divergenceno_change
Registers

Enforcement actions

  • 3 Feb 2026
  • 5 Jul 2025
  • 9 Oct 2025
  • 5 Jul 2025
  • 12 Mar 2026
  • 25 Jun 2026
  • 1 Feb 2026
  • 1 Oct 2026
  • 1 Oct 2026
  • Massachusetts Attorney General Andrea Joy Campbell filed suit against Bitcoin Depot alleging the company knowingly facilitated crypto scams and used misleading sales tactics to overcharge Massachusetts consumers. 3 Feb 2026
  • The Massachusetts AG's office filed a civil lawsuit under the state's unfair and deceptive practices law against the SpireBit scam network, using commercial blockchain-tracing tools to identify over 700 addresses tied to the scheme and secure asset freezes. 5 Jul 2025
  • FinCEN renewed its Residential Real Estate Geographic Targeting Orders, requiring title insurers to report and maintain records on non-financed residential real estate purchases by legal entities and trusts above a purchase-price threshold across covered counties, including Massachusetts metropolitan areas. 9 Oct 2025
  • The Massachusetts AG's office institutionalized use of a commercial blockchain intelligence platform to trace and recover stolen crypto-fraud proceeds, coordinating with exchanges to freeze scammer-controlled wallets pending court judgment. 5 Jul 2025

Sanctions changes

  • 30 Jan 2026
  • 9 Dec 2025
  • 23 Apr 2026
  • 30 Jun 2026
  • 1 Jul 2026
  • 13 Jul 2026
  • 30 Jun 2026
  • 20 Jul 2026
  • 30 Jun 2026
  • 18 May 2026
  • 20 Aug 2026
  • OFAC designated UK-registered Iranian-linked cryptocurrency exchanges Zedcex and Zedxion on January 30, 2026 for processing transactions for the IRGC, marking the first sanctioning of exchanges specifically for activity within Iran's financial system — a listing that triggers immediate compliance/screening obligations for any Massachusetts-based or -exposed financial institution or crypto-exposed firm. 30 Jan 2026
  • OFAC settled with a US-person attorney/fiduciary for $1,092,000 for apparent Ukraine-/Russia-related sanctions violations arising from serving as trustee of a sanctioned Russian oligarch's family trust between 2018 and 2022, underscoring OFAC's broad definition of 'property interest' as applied to trust and corporate-services structures nationally, including Massachusetts' substantial trust-and-estate bar. 9 Dec 2025

Regulatory horizon (register)

  • GENIUS Act PPSI AML/CFT and sanctions final rule
  • FinCEN AML/CFT Program Reform NPRM (incl. casinos/card clubs)
  • M.G.L. c.169B implementation (transition deadline enforcement)
  • Statewide ban on cryptocurrency ATMs/kiosks (S.3178 Amendment 374)
  • FinCEN AML/CFT Program NPRM (casinos and card clubs, 31 CFR Part 1021)
  • FinCEN AML/CFT program reform rule comment period closes
  • Nationwide Residential Real Estate AML rule supersedes Boston-area GTOs
  • GENIUS Act stablecoin implementing regulations deadline
  • CLARITY Act market-structure legislation outcome

Active schemes

  • Crypto ATM cash-to-crypto scam laundering pipeline
  • Trust/fiduciary gatekeeper concealment of sanctioned persons' assets
  • Anonymous LLC/corporate-shell formation post-CTA rollback
Sources
  1. Retailers keep cashing in on crypto ATMs as scams surge - ICIJ
  2. US Treasury / OFAC
  3. TRM Labs
  4. Amnesty International
  5. Steptoe
  6. FATF
  7. AMLA (EU)
  8. Mass.gov / Massachusetts Division of Banks
  9. Ballard Spahr
  10. US Treasury
  11. Chainalysis
  12. ComplyAdvantage
  13. AML UAE
  14. OFAC (US Treasury)
  15. OFAC (US Treasury)
  16. Mayer Brown
  17. Sanction Scanner
  18. Crypto Briefing
  19. Zavia
  20. eucrim.eu
  21. Klea Legal
  22. A&O Shearman
  23. financialregulations.eu
  24. finconduit.com
  25. SiGMA
  26. AGB
  27. Wikipedia (secondary aggregation of RFA/Treasury reporting)
  28. FinCEN
  29. ABA Banking Journal
  30. FATF
  31. Morrison Foerster
  32. Chainalysis
  33. Stout
  34. Liminal
  35. Policy Pros
  36. The Law Society
  37. https://ofac.treasury.gov/recent-actions
  38. https://www.federalregister.gov/documents/2026/04/10/2026-07033/anti-money-laundering-and-countering-the-financing-of-terrorism-programs
  39. https://www.bhfs.com/insight/fincen-proposes-sweeping-aml-cft-reforms-what-casinos-need-to-know/
  40. https://amluae.com/fatf-grey-list-countries-update-19th-june-2026/
  41. https://zavia.ai/eu-beneficial-ownership-in-2026-amlr-amld6-amla-explained/
  42. Massachusetts Division of Banks
  43. Massachusetts Division of Banks
  44. Nutter McClennen & Fish LLP
  45. Alston & Bird
  46. Stinson LLP
  47. https://www.mass.gov/info-details/regulatory-notice-reminder-of-money-transmitter-licensing-requirements-under-mgl-c-169b
  48. https://www.sec.state.ma.us/divisions/pubs-regs/hearings/pdf/9-26-25-209-CMR-44-45-48.00-NPH-SBIS-250926.pdf
  49. https://www.mass.gov/doc/second-quarter-2026-enforcement-bulletin/download
  50. https://www.mass.gov/info-details/enforcement-actions-issued-by-the-division-of-banks
  51. https://www.mass.gov/orgs/division-of-banks
  52. https://natlawreview.com/article/massachusetts-ag-secures-795000-settlement-alleged-data-security-and-breach
  53. Massachusetts Division of Banks
  54. Faisal Khan (licensing consultancy)
  55. Massachusetts Gaming Commission
  56. Massachusetts Division of Banks
  57. Massachusetts Division of Banks
  58. Boston.com
  59. Massachusetts Attorney General's Office
  60. Cape Cod Times (via Yahoo)
  61. https://www.fatf-gafi.org/en/publications/High-risk-and-other-monitored-jurisdictions/increased-monitoring-june-2026.html
  62. https://www.mass.gov/doc/faqs-for-chapter-312-of-the-acts-of-2024-money-transmission-0/download
  63. Massachusetts Division of Banks
  64. FinCEN Proposes Rule to Fundamentally Reform Financial Institution Programs Designed to Fight Illicit Finance | FinCEN.gov
  65. Treasury Convenes Financial Institutions and Law Enforcement to Identify and Dismantle Money Laundering Networks | FinCEN.gov
  66. Enforcement Actions | FinCEN.gov
  67. Financial Action Task Force Identifies Jurisdictions with Anti-Money Laundering, Combating the Financing of Terrorism, and Counter-Proliferation Finance Deficiencies | FinCEN.gov
  68. News | FinCEN.gov
  69. FinCEN Renews Residential Real Estate Geographic Targeting Orders | FinCEN.gov
  70. Guidance | FinCEN.gov
  71. Important Information for MSBs | FinCEN.gov
  72. FinCEN Announces Data-Driven Border Operation to Address Potential Money Laundering | FinCEN.gov
  73. PPSI-AMLCFT-NPRM.pdf
  74. Amid a scam crackdown, crypto giants keep fueling bitcoin ATMs - ICIJ
  75. Global Crypto Policy Review Outlook 2025/26 Report | TRM Labs
  76. 2025 Crypto Regulatory Round-Up
  77. Crypto regulatory affairs: US regulators issue comprehensive guidance on tokenized securities
  78. Elliptic's 2026 regulatory and policy outlook: US sets the pace
  79. Crypto regulatory affairs: OCC gives US banks go-ahead on riskless crypto transfers
  80. SEC draws the line: Which cryptoassets are securities and which are not?
  81. Elliptic's 2026 regulatory and policy outlook: 5 crypto trends to expect in 2026
  82. What the GENIUS and Market Structure Bills Mean for Crypto Compliance
  83. Trump administration curbs state oversight of crypto industry - ICIJ
  84. Crypto ATM operator Bitcoin Depot files for bankruptcy - ICIJ
  85. Massachusetts sues Bitcoin Depot, alleging the crypto ATM operator knowingly facilitated crypto scams - ICIJ
  86. The Coin Laundry Archives - ICIJ
  87. How the Massachusetts Attorney General Fought for Investment Fraud Victims | TRM Labs
  88. Latest News from ICIJ | The Global Muckraker
  89. Questions swirl around US plans for record $15B Prince Group crypto seizure - ICIJ
  90. Bitcoin Depot Goes Bankrupt, Signaling Demise of Crypto ATMs - Bloomberg
  91. Retailers keep cashing in on crypto ATMs as scams surge - ICIJ
  92. US Faces Court Scrutiny Over $15 Billion Bitcoin Seizure Linked to Crypto Hack - Bloomberg
  93. Crypto Sanctions: 2026 Crypto Crime Report
  94. 2026 Crypto Crime Report: Scams
  95. Crypto Bill Seen Hindering Fraud Prosecutions, States Warn - Bloomberg
  96. FinCEN Alert, FIN-2024-Alert005, December 18, 2024
  97. Application of FinCEN’s Regulations to Persons Administering, Exchanging, or Using Virtual Currencies | FinCEN.gov
  98. Fact Sheet on MSB Registration Rule | FinCEN.gov
  99. FinCEN CVC Guidance FINAL.pdf
  100. Request for Administrative Ruling on the Application of FinCEN’s Regulations to a Virtual Currency Trading Platform | FinCEN.gov
  101. Money Services Business (MSB) Registration | FinCEN.gov
  102. Application of Money Services Business regulations to the rental of computer systems for mining virtual currency | FinCEN.gov
  103. Application of FinCEN’s Regulations to Virtual Currency Mining Operations | FinCEN.gov
  104. Application of FinCEN’s Regulations to Virtual Currency Software Development and Certain Investment Activity | FinCEN.gov
  105. Request for Administrative Ruling on the Application of FinCEN’s Regulations to a Virtual Currency Payment System | FinCEN.gov
  106. FinCEN Guidance, FIN-2019-G001, May 9, 2019
  107. Beneficial Ownership Information Reporting | FinCEN.gov
  108. Frequently Asked Questions | FinCEN.gov
  109. Treasury Department won’t enforce beneficial ownership rule under the Corporate Transparency Act - ICIJ
  110. FinCEN Removes Beneficial Ownership Reporting Requirements for U.S. Companies and U.S. Persons, Sets New Deadlines for Foreign Companies | FinCEN.gov
  111. US Congressional Committee Chips Away at Corporate Transparency Act | OCCRP
  112. Beneficial Ownership Information Reporting Rule Fact Sheet | FinCEN.gov
  113. Financial Crimes Enforcement Network U.S. Department of the Treasury
  114. Small Entity Compliance Guide | FinCEN.gov
  115. Fact Sheet: Beneficial Ownership Information Access and Safeguards Final Rule | FinCEN.gov
  116. U.S. Beneficial Ownership Information Registry Now Accepting Reports | FinCEN.gov
  117. "Black and grey" lists
  118. Mutual Evaluation of the United States
  119. Jurisdictions under Increased Monitoring - 19 June 2026
  120. High-risk and other monitored jurisdictions
  121. Assessments
  122. Consolidated assessment ratings
  123. United States
  124. Countries / Jurisdictions
  125. Mutual Evaluations
  126. FATF
  127. Civil Penalties and Enforcement Information | Office of Foreign Assets Control
  128. Basic Information on OFAC and Sanctions
  129. Recent Actions | Office of Foreign Assets Control
  130. Enforcement Release - Office of Foreign Assets Control
  131. Sanctions Programs and Country Information | Office of Foreign Assets Control
  132. 2024 Civil Penalties and Enforcement Information | Office of Foreign Assets Control
  133. 12. How much are the penalties for violating ...
  134. Sanctions List Search Tool | Office of Foreign Assets Control
  135. Sanctions List Service | Office of Foreign Assets Control
  136. 2025 Civil Penalties and Enforcement Information | Office of Foreign Assets Control
  137. Check Cashing Worker Convicted of Money Laundering | FinCEN.gov
  138. 2026 Crypto Crime Report – Illicit Crypto Trends & Typologies | TRM Labs
  139. U.S. DEPARTMENT OF THE TREASURY OFFICE OF FOREIGN ASSETS CONTROL
  140. Fincen
  141. 1 1. See 31 U.S.C. § 5312(a)(2); 31 C.F.R. § 1010.100(t). 2.
  142. Chainalysis Links 2026 • March 31-April 1 • New York, NY
  143. Financial Fraud Enforcement Task Force (FFETF) | FinCEN.gov
  144. Settlement Agreement between the U.S. Department of the Treasury's Office of Foreign Assets Control and Exodus Movement, Inc. | Office of Foreign Assets Control
  145. DEPARTMENT OF THE TREASURY OFFICE OF FOREIGN ASSETS CONTROL
  146. DEPARTMENT OF THE TREASURY
  147. 1 1. See 31 U.S.C. § 5312(a)(2); 31 C.F.R. § 1010.100(t).
  148. OFAC Sanctions Tracker: How Sanctions Impact Crypto Crime - Chainalysis
  149. Additional Select Settlement Agreements | Office of Foreign Assets Control
  150. What are OFAC crypto sanctions?
  151. 562 | Office of Foreign Assets Control
  152. | Office of Foreign Assets Control
  153. U.S. Authorities Take $3.6B in Largest Crypto Seizure Ever | OCCRP
  154. Press Releases | FinCEN.gov
  155. Law enforcement, banks warn of money laundering gaps in major US crypto bill - ICIJ
  156. The DOJ's NCET Disbanded: What This Means for Digital Assets - Chainalysis
  157. Enforcement Actions for Failure to Register as a Money Services Business | FinCEN.gov
  158. Difficulties Encountered by Money Services Businesses in Obtaining Banking Services | FinCEN.gov
  159. FinCEN Issues Guidance on Virtual Currencies and Regulatory Responsibilities | FinCEN.gov
  160. FinCEN (US Department of the Treasury)
  161. FATF
  162. OFAC (US Department of the Treasury)
  163. ICIJ
  164. TRM Labs
  165. FinCEN / OFAC (US Department of the Treasury)
  166. ICIJ
  167. Chainalysis
  168. Massachusetts Attorney General's Office
Coverage gaps
fim-int-2026-07-08-G001: No direct primary-source enforcemen…
fim-int-2026-07-08-G001: No direct primary-source enforcement orders or examination findings from the Massachusetts Division of Banks or Securities Division were located for the 18-month window, limiting confidence in the T3/D3 state-regulator supervisory-capacity assessment. [resolved]
fim-int-2026-07-08-G002: The FATF fifth-round mutual evaluat…
fim-int-2026-07-08-G002: The FATF fifth-round mutual evaluation final report for the United States had not yet been published as of this cycle's baseline date, leaving the T3 grey-list re-rating risk assessment provisional pending its release. [resolved]
fim-int-2026-07-08-G003: The ratified sentinel-typology-libr…
fim-int-2026-07-08-G003: The ratified sentinel-typology-library-v1.0.json context was not supplied this cycle, preventing Task 11C typology matching against fim-typ-NNN indicators for the crypto-ATM and gatekeeper-concealment developments. [resolved]
fim-int-2026-07-08-G004: Massachusetts House Bill 501's curr…
fim-int-2026-07-08-G004: Massachusetts House Bill 501's current committee status and passage likelihood rely solely on T3 legislative-tracking sources (BillTrack50, Harbor Compliance); no primary legislative-record confirmation was available. [resolved]
fim-int-2026-07-08-G005: No evidence was collected confirmin…
fim-int-2026-07-08-G005: No evidence was collected confirming or denying whether EU or UK authorities have since followed OFAC's January 2026 Zedcex/Zedxion designation, leaving the sanctions-regime-divergence signal unresolved for this cycle. [resolved]
fim-int-2026-07-14-G001: No fresh Tier-1 2026 finding was lo…
fim-int-2026-07-14-G001: No fresh Tier-1 2026 finding was located for Colombia narco-finance / FATF assessment trajectory this cycle. [resolved]
fim-int-2026-07-14-G002: FinCEN's April 10, 2026 AML/CFT pro…
fim-int-2026-07-14-G002: FinCEN's April 10, 2026 AML/CFT program NPRM was not independently retrieved from FinCEN.gov; confidence capped at Assessed pending direct docket retrieval. [resolved]
fim-int-2026-07-14-G003: Cambodia's current FATF grey/black-…
fim-int-2026-07-14-G003: Cambodia's current FATF grey/black-list status carries a conflicting secondary source this cycle that was not fully reconciled against the primary FATF list. [resolved]
fim-int-2026-08-05-G001: AMLR/6AMLD/AMLA direct eur-lex.euro…
fim-int-2026-08-05-G001: AMLR/6AMLD/AMLA direct eur-lex.europa.eu or amla.europa.eu primary citations were not retrieved this cycle; reliance is on Tier-3/4 secondary legal commentary only. [resolved]
fim-int-2026-08-05-G002: No fresh 2026-cycle primary-source …
fim-int-2026-08-05-G002: No fresh 2026-cycle primary-source material was found for Colombia (Tier D) beyond its standing FATF/GAFILAT follow-up posture. [resolved]
fim-int-2026-08-05-G003: UN Panel of Experts / OFAC / OFSI Y…
fim-int-2026-08-05-G003: UN Panel of Experts / OFAC / OFSI Yemen-Houthi sanctions channel showed no material finding this cycle, a coverage gap for the T1 tracker's Houthi dimension. [resolved]
fim-int-2026-08-05-G004: D4 (Conflict Finance) domain covera…
fim-int-2026-08-05-G004: D4 (Conflict Finance) domain coverage this cycle is limited to the Iran/IRGC nexus; no independently-sourced conflict-finance development for Sahel, DRC, or oil-revenue-corruption standing coverage areas. [resolved]
fim-int-2026-08-05-G005: active_scheme_inventory scheme_id i…
fim-int-2026-08-05-G005: active_scheme_inventory scheme_id identifiers were not supplied by Research for the A7A5, USDZ/Zedxion, CJNG fuel-theft, or Cambodia scam-centre schemes this cycle; inventory entries were withheld pending scheme_id assignment rather than fabricated. [resolved]
fim-int-2026-08-05-G006: Station-1 publication gate flagged …
fim-int-2026-08-05-G006: Station-1 publication gate flagged min_t1_per_instrument_met=false and jurisdiction_source_floor_met=false; the majority of AMLA/6AMLD claims rest on Tier-3/4 secondary sources pending stronger primary-source corroboration. [resolved]
fim-int-2026-09-05-G001: Tier-D jurisdiction checks (KH, LA,…
fim-int-2026-09-05-G001: Tier-D jurisdiction checks (KH, LA, MX, CO) were not actively searched this cycle due to budget allocation toward the bound JID's own research requirements. [resolved]
fim-int-2026-09-05-G002 ({'scheme': 'financial_integrity', '…
fim-int-2026-09-05-G002 ({'scheme': 'financial_integrity', 'value': 'D3'}): No genuine US-MA-specific AML/CTF, sanctions, beneficial-ownership, enabler-jurisdiction, or conflict-finance delta was found this cycle distinct from the inherited federal (US) layer; D3, D4, D5, D6 thin coverage. [resolved]
fim-int-2026-09-28-G001: No US-MA-specific findings this cyc…
fim-int-2026-09-28-G001: No US-MA-specific findings this cycle for D1 (sanctions), D2 (beneficial ownership), D3 (enabler jurisdictions), or D4 (conflict finance) — this union run is bound exclusively to US-MA and no state-level nexus surfaced. [resolved]
fim-int-2026-09-28-G002 ({'scheme': 'financial_integrity', '…
fim-int-2026-09-28-G002 ({'scheme': 'financial_integrity', 'value': 'D5'}): Whether the Division of Banks will issue guidance resolving the virtual-currency scope question under c.169B remains an open evidence gap; no primary regulator clarification found this cycle. [resolved]
fim-int-2026-10-11-G001: Tier D jurisdiction watch (Cambodia…
fim-int-2026-10-11-G001: Tier D jurisdiction watch (Cambodia, Laos, Mexico, Colombia) was not re-examined this cycle given single-JID dispatch and pooled search budget. [resolved]
fim-int-2026-10-11-G002 ({'scheme': 'financial_integrity', '…
fim-int-2026-10-11-G002 ({'scheme': 'financial_integrity', 'value': 'D7'}): No Division of Banks Q3 2026 Enforcement Bulletin had been located as a discrete document at time of research, only individual enforcement-action table rows. [resolved]
fim-int-2026-10-18-G001 ({'scheme': 'financial_integrity', '…
fim-int-2026-10-18-G001 ({'scheme': 'financial_integrity', 'value': 'D5'}): Resolution status of the House-Senate conference committee on the statewide crypto-kiosk ban (S.3178) since this cycle's close would upgrade confidence on D5 trajectory. [resolved]
fim-int-2026-10-18-G002 ({'scheme': 'financial_integrity', '…
fim-int-2026-10-18-G002 ({'scheme': 'financial_integrity', 'value': 'D2'}): Massachusetts-specific D2 beneficial-ownership registry and D4 conflict-finance nexus were not applicable/found this cycle; no corroborating source exists to evidence otherwise. [resolved]
fim-int-2026-10-25-G001 ({'scheme': 'financial_integrity', '…
fim-int-2026-10-25-G001 ({'scheme': 'financial_integrity', 'value': 'D3'}): Could not confirm whether an October 2026 FATF plenary produced a fresh statement affecting Laos, Cambodia, Mexico or Colombia before 25 October 2026. [resolved]
fim-int-2026-10-25-G002 ({'scheme': 'financial_integrity', '…
fim-int-2026-10-25-G002 ({'scheme': 'financial_integrity', 'value': 'D7'}): No procedural movement in the FinCEN casino AML/CFT NPRM docket was found dated to this window; finalization status for later 2026 not independently re-verified. [resolved]
fim-int-2026-11-01-G001 ({'scheme': 'financial_integrity', '…
fim-int-2026-11-01-G001 ({'scheme': 'financial_integrity', 'value': 'D1'}): No MA-specific sanctions, beneficial-ownership, enabler-jurisdiction, conflict-finance, crypto, or compliance-technology development was identified this cycle; this bound-jurisdiction run cannot discharge the multi-jurisdiction D1-D6 substantive-finding floor. [open]
FIM-GAP-001 (D2): The federal rescission of Corporate Transp…
FIM-GAP-001 (D2): The federal rescission of Corporate Transparency Act domestic beneficial-ownership reporting (March 2025) removed the principal national transparency backstop for Massachusetts-formed LLCs and corporations, with no state-level substitute beneficial ownership registry in place.
FIM-GAP-002 (D3): A federal reinterpretation of banking rule…
FIM-GAP-002 (D3): A federal reinterpretation of banking rules is allowing crypto firms to obtain slimmed-down national trust-bank charters that grant immunity from state regulator enforcement, a pattern documented in Maine and structurally applicable to Massachusetts' Division of Banks oversight of money transmitters and crypto firms.
FIM-GAP-003 (D5): Crypto ATM operators allegedly knew as ear…
FIM-GAP-003 (D5): Crypto ATM operators allegedly knew as early as 2021 that their Massachusetts kiosks facilitated money laundering 'at an extreme volume,' yet effective state enforcement action did not arrive until the AG's February 2026 lawsuit — a multi-year enforcement lag during which scam losses accumulated.
FIM-GAP-004 (D3): This baseline could not locate direct prim…
FIM-GAP-004 (D3): This baseline could not locate direct primary-source enforcement orders or examination findings from the Massachusetts Division of Banks or Securities Division (Secretary of the Commonwealth) for the 18-month window, despite Massachusetts' significant asset-management/trust-sector footprint; coverage of state banking-regulator activity relies on secondary/investigative sourcing only.

Evidence

Confidence-tiered claims

A money-transmitter licence under MGL c.169B, implemented by 209 CMR 44.00, is required to engage in money transmission in Massachusetts, including custodial virtual-currency businesses treated as handling "monetary value". [Source 1]
Probable · 1 source
Cease Directive issued by the Massachusetts Division of Banks for allegations of unlicensed money transmission. [Source 1]
Probable · 1 source
Temporary Order to Cease and Desist issued to a check casher; order became final 2026-08-21. [Source 1]
Probable · 1 source
$15.5 million multistate settlement with Massachusetts Division of Banks (and other state regulators) over force-placed insurance overcharges. [Source 1]
Probable · 1 source
$795,000 settlement with the Massachusetts Attorney General over alleged data-security and breach-notification failures following five phishing intrusions 2019-2021. [Source 1]
Probable · 1 source
Dennis became at least the 21st Massachusetts town to adopt a bylaw banning cryptocurrency ATMs/kiosks, voting 2026-10-06/07, reported 2026-10-11; AG Municipal Law Unit has approved 19+ such bylaws. [Source 1]
Probable · 1 source
Statewide ban on cryptocurrency ATMs/kiosks (S.3178 Amendment 374) passed the Senate 2026-07-23/24 but remains stuck in House-Senate conference committee; no enactment this cycle. [Source 1]
Probable · 1 source
M.G.L. c. 169B (Chapter 312 of the Acts of 2024), replacing the prior foreign-only Foreign Transmittal Agency Act (c.169), is fully operative: licensing began 2026-01-01 and the firm-filing transition deadline of 2026-07-01 has passed, making licensure (via NMLS) mandatory for newly captured firms, including crypto exchanges treated as transmitting monetary value. [Source 1]
Probable · 1 source
Massachusetts AG filed suit against Bitcoin Depot (2026-02-03) alleging facilitation of crypto scams via kiosks against MA consumers; litigation against both Bitcoin Depot and Coinhub continues without a new enforcement milestone this cycle. [Source 1]
Probable · 1 source
205 CMR 238.17 requires a Sports Wagering Operator's system of Internal Controls (submitted under 205 CMR 238.02) to implement AML procedures and policies adequately addressing the risks posed by sports wagering. [Source 1]
Probable · 1 source
proposed, comment period closed 9 June 2026, finalization expected in 2026 [Source 1]
Probable · 1 source
Laos remains on the FATF grey list as of 19 June 2026 plenary (listed since October 2021) [Source 1]
Probable · 1 source
DOB treats convertible virtual currency as a form of 'monetary value' for licensing purposes under c.169B [Source 1]
Probable · 1 source
Q3 2026 bulletin reports $444,136.05 reimbursed to 1,157 consumers [Source 1]
Probable · 1 source
Q3 2026 enforcement bulletin reports consent order and temporary cease-and-desist actions against check-casher entities (ChecKings LLC/Family Financial Centers; Parras Inc.) for unlicensed activity, with $444,136.05 reimbursed to 1,157 consumers. [Source 1]
Probable · 1 source