United States — North Carolina US-NC

North Carolina's Virtual Currency Kiosk Consumer Protection Act, signed into law by Governor Josh Stein on July 8, 2026 as House Bill 920, represents a structural closure of what had been an unregulated crypto cash-conversion channel in the state. The Act creates new Article 26 of Chapter 53 of the General Statutes and requires virtual currency kiosk operators to obtain a license under North Carolina's existing money transmitter law, Article 16B, and subjects them to examination, reporting, and ongoing supervision by the Commissioner of Banks. The Act takes effect January 1, 2027.

The legislative record behind the Act is explicit about its purpose. Bill sponsors, and North Carolina's own reporting on the measure, tie the legislation directly to documented elder-fraud losses: North Carolina seniors lost $257 million in 2025 to crypto-ATM-facilitated scams, with more than 4,300 fraud complaints recorded in that year alone. That scale of documented harm is the stated driver for bringing kiosk operators under comprehensive licensure rather than leaving them within the general, non-kiosk-specific money-transmission framework that previously applied.

Prior to the Act, virtual currency kiosks already fell within the general definition of money transmission under North Carolina's Money Transmitters Act, in the sense that operating a kiosk that accepts and converts value on behalf of customers meets the general statutory definition. What the prior framework lacked was kiosk-specific rules and dedicated supervisory attention: examination, reporting, and disclosure obligations tailored to how a walk-up cash-to-crypto kiosk actually operates, as opposed to a conventional money-services business. Article 26 closes that specificity gap. Going forward, the Commissioner of Banks will examine and supervise kiosk operators directly, rather than kiosk operation being a peripheral activity nominally covered by a general transmitter license.

This is a financial-integrity architecture question as much as it is a payments-licensing one. From an enabler-jurisdiction perspective, an unregulated or under-supervised cash-conversion channel is precisely the kind of gap that facilitators of fraud and layering typologies exploit, because it offers a route to convert proceeds into or out of a liquid, less traceable form without the friction of a supervised financial institution. North Carolina's move here is best characterised as the state closing an enabler channel rather than opening one: the trajectory is one of tightening supervision over a previously coverage-gapped financial-services category, driven by hard loss data rather than by a specific enforcement action or prosecution.

Confidence in the details of the Act's scope should be calibrated to the sourcing available this cycle. The structured record here relies on law-firm client alerts and state-focused news reporting describing the Act's provisions; the full session-law text was not independently retrieved and cross-checked against every section this cycle. This is a sourcing gap rather than a substantive doubt about the Act's existence or its core licensure requirement, both of which are corroborated across multiple secondary sources describing the same signed bill, its July 8, 2026 signing date, and its January 1, 2027 effective date.

Outlook

The operative date to track is January 1, 2027, when the Act's licensure, examination, and supervisory requirements become binding on kiosk operators. Ahead of that date, kiosk operators operating in North Carolina will need to secure money-transmitter licensure covering their kiosk operations specifically, and the Commissioner of Banks will need to stand up the examination and reporting infrastructure necessary to supervise a category of licensee it has not previously supervised in this specific form. The most significant gap for the coming cycle is verification: independently retrieving and reviewing the full enacted text of SL2026-45 against the secondary reporting relied upon this cycle would materially strengthen confidence in the precise scope of licensure, any transaction-limit or fee-disclosure requirements, and the examination cadence the Commissioner intends to apply. Analysts should also watch for city- and county-level regulation potentially layering on top of the state framework, a possibility flagged in the secondary reporting on the Act but not itself evidenced as an active development this cycle. Given the explicit elder-fraud driver behind this legislation, any subsequent reporting on kiosk-facilitated fraud trends in North Carolina after the effective date will be the natural indicator of whether the new supervisory architecture is achieving its stated purpose.

The federal Bank Secrecy Act and anti-money-laundering framework binding North Carolina-chartered financial institutions remains, at the state-specific level, stable this cycle beyond ordinary federal rulemaking progress. On April 7, 2026, the Financial Crimes Enforcement Network issued a notice of proposed rulemaking to modernize BSA and AML programs and to implement outstanding provisions of the AML Act of 2020. This NPRM supersedes FinCEN's prior 2024 proposed rule on the same subject, indicating that the modernization effort initiated under the 2020 Act remains an active rulemaking track rather than a shelved initiative. This is a federal, chain-parent-level development: it applies uniformly to covered institutions across the United States, including those chartered or operating in North Carolina, and no North Carolina-specific variance from this federal baseline was identified this cycle.

Standing federal AML/CTF enforcement context for the cycle includes an OCC consent order against Community Federal Savings Bank, a New York-chartered institution, for deficiencies in its BSA/AML compliance program. This action has no direct North Carolina nexus, but it is carried here as part of the same national supervisory architecture, administered by the OCC, that governs BSA/AML compliance program adequacy for federally chartered banks generally, including any nationally chartered institutions operating in North Carolina.

The most analytically significant North Carolina-specific AML/CTF development this cycle is, in fact, primarily a D5 development with clear D7 adjacency: the Virtual Currency Kiosk Consumer Protection Act (SL2026-45) brings virtual currency kiosk operators under money-transmitter licensure, with examination, reporting, and supervision by the Commissioner of Banks effective January 1, 2027. Money-transmitter licensure of this kind typically carries with it BSA-adjacent obligations, since state money-transmitter regimes are frequently the state-level analogue to, and enforcement complement of, federal money-services-business registration and BSA program requirements. The Act's closure of a previously unsupervised cash-conversion channel is therefore properly read as a strengthening of the AML/CTF perimeter in North Carolina specifically, even though its primary classification in this cycle's tracking is under crypto and digital-asset innovation rather than under the AML/CTF regime module directly.

Applying the three-pillar balance discipline that governs this monitor's framing, this cycle's evidentiary base is exclusively AML in pillar terms: no CTF- or CPF-specific finding with a North Carolina nexus was identified this cycle, and no claim in the current evidence base carries a CTF or CPF pillar tag. That absence is noted here explicitly rather than silently, consistent with this monitor's structural correction for AML's tendency to generate more enforcement volume, and reporting coverage, than CTF and CPF matters typically do. Enablement as signal is also worth noting in the other direction: the absence, this cycle, of any North Carolina-specific enforcement action under the state's own money-transmitter or AML-adjacent statutes is itself a data point, indicating that North Carolina's approach to closing the kiosk gap has so far proceeded through legislative reform rather than through retrospective enforcement against operators who had been operating in the previously unsupervised space. For institutions chartered in North Carolina, the practical takeaway this cycle is continuity rather than change at the state-specific AML/CTF program level: existing BSA program obligations continue to flow from the federal framework, and the federal rulemaking track represented by the FinCEN NPRM is the primary vector through which those obligations will change in the near term, not any State of North Carolina-originated AML/CTF initiative.

Outlook

FinCEN's NPRM remains in its proposed-rule stage; its eventual finalization will set the updated federal BSA/AML program baseline against which North Carolina-chartered institutions, alongside all covered US institutions, will be measured, and the rulemaking should be watched through its comment period and toward finalization in coming cycles. No North Carolina-specific AML/CTF divergence from the federal baseline was identified this cycle, and the jurisdiction's federal chain-parent AML/CTF exposure should be treated as stable pending further developments. The clearest forward-looking AML/CTF-adjacent marker specific to North Carolina remains the January 1, 2027 effective date of the kiosk-licensure regime, at which point the state's Commissioner of Banks will begin direct examination and supervision of a category of money-transmission business that has not previously received kiosk-specific supervisory attention.