--- title: "United States — Oregon (US-OR) — Financial-Integrity Intelligence · Sentinel" canonical: https://sentinel.gi/jurisdictions/united-states-oregon/ source_html: /jurisdictions/united-states-oregon/index.html description: "Financial integrity intelligence for United States – Oregon (US-OR): sanctions, beneficial ownership, enabler jurisdictions, conflict finance, digital assets and compliance technology — with sourced findings." generated_at: 2026-11-08T04:46:02Z content_sha256: ba32f26b7dcf17342a351647542372e0f01784485302e70452c4a9447f3c60e2 generator: "fe-fleet/md-twin@1.0" --- # United States — Oregon (US-OR) — Financial-Integrity Intelligence · Sentinel Not every instrument is backed by its official text yet. At least one law or rulebook covered here has no official source (tier 1) retrieved for it yet. No finding on this page is shown with confidence above “Probable” until stronger sources are retrieved. Financial Integrity Monitor # United States — Oregon US-OR Domains covered 8 of 8 Sources 159 Role actions 8 Horizon <90d 0 Jurisdiction profile FATF status: Largely Compliant Tier: B Risk direction: Increasing Enablement vs enforcement: Mixed Oregon operates entirely within the federal BSA/CTA/FinCEN AML/CFT framework; it has no independent national AML statute. More The Oregon Division of Financial Regulation (DFR) licenses money transmitters and virtual-currency businesses under ORS Chapter 717, supplementing federal supervision. Since March 2025, FinCEN's CTA rollback exempts Oregon-formed domestic entities from beneficial ownership reporting, and Oregon has no state-level BO registry to backstop this gap. Key deficiencies - No state-level beneficial ownership registry; reliance is entirely on the federal CTA/BOI framework - Federal CTA now exempts domestic (Oregon-formed) reporting companies from BOI disclosure since March 2025, reversing prior transparency gains - Oregon excluded from FinCEN's 2026 Southwest Border GTO despite fentanyl-transit and cash-to-crypto laundering exposure highlighted by FinCEN's own Portland PROTECT outreach - Limited public-domain transparency for Oregon DFR state-level AML supervisory/enforcement actions Recent developments (18m) - FinCEN interim final rule (Mar 21/26, 2025) exempting all US-formed domestic reporting companies, including Oregon entities, from CTA beneficial ownership reporting - FinCEN CVC kiosk advisory (Aug 2025) flagging elder-fraud exploitation via crypto ATMs nationally, relevant to Oregon's aging population - DOJ 'Blanche Memo' (Apr 2025) narrowing crypto-related BSA prosecutions nationwide, affecting Oregon-licensed VASPs' regulatory exposure - OFAC sanctions on Sinaloa Cartel Los Chapitos cash-to-stablecoin laundering network (May 2026), relevant given Oregon's fentanyl overdose burden - FATF's Feb 2026 plenary added Kuwait and Papua New Guinea to the grey list; the US remains unlisted United States federal law that applies in United States – Oregon is covered once, on the [United States](/jurisdictions/us/) page. This page covers United States – Oregon’s own layer: its own law, regulators and enforcement. Brief ## Lead signal #### Lead Signal Oregon's Division of Financial Regulation has joined a 34-state coalition in a $2.5 million settlement with crypto-kiosk operator Coinme Inc. over Bank Secrecy Act and anti-money-laundering violations tied to its physical cash-to-crypto kiosk network. Oregon's allocated share of the settlement is $101,425.34, and the settlement carries a forward-looking structural term: Coinme must terminate kiosk operations entirely by 1 January 2027 or face a further $4 million penalty. The action is best read as enforcement against a known physical-cash-to-crypto conversion channel rather than as a change to Oregon's underlying regulatory architecture, which continues to rely on its general money-transmitter licensing statute, ORS Chapter 717, to bring virtual-currency businesses within scope rather than a bespoke crypto AML regime. Read full brief #### Lead Signal Oregon's Division of Financial Regulation has joined a 34-state coalition in a $2.5 million settlement with crypto-kiosk operator Coinme Inc. over Bank Secrecy Act and anti-money-laundering violations tied to its physical cash-to-crypto kiosk network. Oregon's allocated share of the settlement is $101,425.34, and the settlement carries a forward-looking structural term: Coinme must terminate kiosk operations entirely by 1 January 2027 or face a further $4 million penalty. The action is best read as enforcement against a known physical-cash-to-crypto conversion channel rather than as a change to Oregon's underlying regulatory architecture, which continues to rely on its general money-transmitter licensing statute, ORS Chapter 717, to bring virtual-currency businesses within scope rather than a bespoke crypto AML regime. The multistate coordination itself is the notable structural feature here: a single settlement allocated across 34 state regulators demonstrates a maturing cooperative enforcement posture against a typology — unattended cash kiosks facilitating crypto conversion — that has drawn sustained supervisory attention nationally. The kiosk-termination deadline functions as a de facto phase-out of a higher-risk cash-based on-ramp within the settling operator's footprint, achieved through settlement terms rather than through amendment of Oregon's statute book. #### Other Developments Coinbase securities action remains stayed. Oregon's securities-law enforcement action against Coinbase, filed in April 2025 and alleging the unregistered sale of 31 tokens, remains procedurally stayed in federal court. The last confirmed stay order extended proceedings to 16 September 2026, pending a joint status report from the parties, and no ruling on the merits has issued. Whether the stay was further extended, lifted, or resolved after that date could not be confirmed. This procedural dormancy sits alongside the active Coinme settlement as a reminder that enforcement tempo varies sharply by instrument and forum even within the same jurisdiction's crypto-asset docket. Oregon's general money-transmitter statute remains the operative AML backstop for virtual-currency business. Oregon has not adopted a crypto-specific licensing or AML regime; instead, ORS Chapter 717 continues to apply its general money-transmitter licensing and customer-due-diligence obligations to virtual-currency businesses operating in the state, including kiosk operators and payment companies. This is a baseline-descriptive fact rather than a development, but it frames why the Coinme settlement proceeded through multistate regulatory coordination rather than through a standalone Oregon licensing proceeding: the state's crypto-asset oversight runs through its existing money-services-business perimeter. #### Cross-Monitor Connections The Coinme settlement and the dormant Coinbase securities action both concern retail-facing crypto-asset intermediaries and sit naturally alongside parallel monitoring of digital-asset market-structure and consumer-protection developments tracked elsewhere in this research family; no further cross-routing is indicated by the substrate available this cycle. #### Outlook The near-term marker to watch is the 1 January 2027 kiosk-termination deadline embedded in the Coinme settlement: whether Coinme exits the kiosk business cleanly or triggers the additional $4 million penalty will itself be a signal about multistate settlement terms as an enforcement tool against physical cash-to-crypto channels. Separately, the procedural status of the Oregon v. Coinbase securities action past its 16 September 2026 stay deadline remains unresolved in available reporting and is a gap for a future cycle to close rather than a development to project forward on. Absent new findings, Oregon's underlying AML/CTF architecture for virtual-currency business — general money-transmitter licensing under ORS Chapter 717 — is expected to remain the operative framework as scheduled, with no indication of a bespoke crypto AML statute in the pipeline. Earlier periodic briefs (7) 4 Nov 2026 · fim-2026-11-01 #### Lead Signal Oregon's Division of Financial Regulation has joined a 34-state coalition in a $2.5 million settlement with crypto-kiosk operator Coinme Inc. over Bank Secrecy Act and anti-money-laundering violations tied to its physical cash-to-crypto kiosk network. Oregon's allocated share of the settlement is $101,425.34, and the settlement carries a forward-looking structural term: Coinme must terminate kiosk operations entirely by 1 January 2027 or face a further $4 million penalty. The action is best read as enforcement against a known physical-cash-to-crypto conversion channel rather than as a change to Oregon's underlying regulatory architecture, which continues to rely on its general money-transmitter licensing statute, ORS Chapter 717, to bring virtual-currency businesses within scope rather than a bespoke crypto AML regime. The multistate coordination itself is the notable structural feature here: a single settlement allocated across 34 state regulators demonstrates a maturing cooperative enforcement posture against a typology — unattended cash kiosks facilitating crypto conversion — that has drawn sustained supervisory attention nationally. The kiosk-termination deadline functions as a de facto phase-out of a higher-risk cash-based on-ramp within the settling operator's footprint, achieved through settlement terms rather than through amendment of Oregon's statute book. #### Other Developments Coinbase securities action remains stayed. Oregon's securities-law enforcement action against Coinbase, filed in April 2025 and alleging the unregistered sale of 31 tokens, remains procedurally stayed in federal court. The last confirmed stay order extended proceedings to 16 September 2026, pending a joint status report from the parties, and no ruling on the merits has issued. Whether the stay was further extended, lifted, or resolved after that date could not be confirmed. This procedural dormancy sits alongside the active Coinme settlement as a reminder that enforcement tempo varies sharply by instrument and forum even within the same jurisdiction's crypto-asset docket. Oregon's general money-transmitter statute remains the operative AML backstop for virtual-currency business. Oregon has not adopted a crypto-specific licensing or AML regime; instead, ORS Chapter 717 continues to apply its general money-transmitter licensing and customer-due-diligence obligations to virtual-currency businesses operating in the state, including kiosk operators and payment companies. This is a baseline-descriptive fact rather than a development, but it frames why the Coinme settlement proceeded through multistate regulatory coordination rather than through a standalone Oregon licensing proceeding: the state's crypto-asset oversight runs through its existing money-services-business perimeter. #### Cross-Monitor Connections The Coinme settlement and the dormant Coinbase securities action both concern retail-facing crypto-asset intermediaries and sit naturally alongside parallel monitoring of digital-asset market-structure and consumer-protection developments tracked elsewhere in this research family; no further cross-routing is indicated by the substrate available. #### Outlook The near-term marker to watch is the 1 January 2027 kiosk-termination deadline embedded in the Coinme settlement: whether Coinme exits the kiosk business cleanly or triggers the additional $4 million penalty will itself be a signal about multistate settlement terms as an enforcement tool against physical cash-to-crypto channels. Separately, the procedural status of the Oregon v. Coinbase securities action past its 16 September 2026 stay deadline remains unresolved in available reporting and is a gap for a future cycle to close rather than a development to project forward on. Absent new findings, Oregon's underlying AML/CTF architecture for virtual-currency business — general money-transmitter licensing under ORS Chapter 717 — is expected to remain the operative framework as scheduled, with no indication of a bespoke crypto AML statute in the pipeline. 3 Nov 2026 · fim-2026-11-03 #### Lead Signal Oregons financial-integrity posture is defined by a single, well-evidenced development in the digital-asset space rather than by a broad shift across the monitors typology set. The Oregon Division of Financial Regulation joined thirty-three other state financial regulatory agencies in reaching a 2.5 million dollar multistate settlement with crypto-kiosk operator Coinme Inc., with Oregons own share of the recovery set at 101,425.34 dollars. The settlement was announced on 19 October 2026 and carries a forward-looking structural condition: Coinme must cease kiosk operations by 1 January 2027 or face a further 4 million dollar penalty. Read architecturally rather than as an isolated enforcement item, the action signals that state-level money-services regulators are converging on coordinated, multi-jurisdiction supervisory responses to physical crypto-cash-conversion infrastructure, using Bank Secrecy Act and state money-transmitter anti-money-laundering provisions as the operative legal basis rather than any bespoke virtual-currency statute. The coordinated character of the settlement, spanning thirty-four state regulators acting in concert, is itself the more durable signal. A single states enforcement action against a kiosk operator would be an incident; thirty-four regulators reaching the same settlement on the same instrument is a structural alignment in how crypto-cash-conversion risk is being supervised across the United States, with Oregon positioned as one of the coordinating jurisdictions rather than a standalone actor. #### Other Developments Coinbase securities litigation remains procedurally stayed. The State of Oregon v. Coinbase, Inc. matter, an Oregon securities-law enforcement action against the exchange, remains stayed in the United States District Court for the District of Oregon, with the operative docket entry recording a stay until 16 September 2026 and a requirement that the parties file a formal joint status report by that date. This is a continuation of a procedural posture rather than a new development, and it sits alongside the Coinme settlement as a second, separate thread of state-level digital-asset accountability activity touching Oregon, this one unresolved rather than concluded. Standing money-transmitter baseline unchanged. Oregon continues to regulate virtual-currency businesses through its general money-transmitter licensing statute, ORS Chapter 717, rather than through a bespoke crypto anti-money-laundering regime. This baseline did not move, but it is the backdrop against which the Coinme settlement should be read: the enforcement instrument used against the kiosk operator draws on the same general money-services-AML architecture, applied in coordination with other states, rather than on any Oregon-specific digital-asset statute. #### Cross-Monitor Connections The Coinme settlement has a direct connective thread to monitors concerned with compliance-technology posture at crypto-asset operators, since the deficiency underlying a multistate Bank Secrecy Act and anti-money-laundering settlement of this scale typically speaks to the adequacy of a kiosk operators transaction-monitoring and customer-identification controls, even though no compliance-technology-specific finding was reported for Oregon. The coordinated, thirty-four-regulator character of the action also has a bearing on how commodity- and asset-flow monitors should read the broader state-level regulatory environment for physical cash-to-crypto conversion points, which have historically been a lower-friction entry point into the financial system for layering illicit proceeds. The stayed Coinbase securities matter, while not independently active, remains relevant to any cross-monitor tracking of exchange-level accountability actions building across multiple states, since a lifted stay and resumed litigation would represent a distinct escalation separate from the kiosk-specific settlement. #### Outlook The most concrete forward marker is the 1 January 2027 deadline by which Coinme must cease kiosk operations or face a further 4 million dollar penalty; whether the firm exits the kiosk business, restructures its compliance programme, or accepts the additional penalty will be the clearest near-term test of whether this settlement functions as a genuine behavioural constraint or as a cost of continued operation. The Coinbase securities litigation carries its own near-term marker, the 16 September 2026 joint status report, a date that, given the timing of this cycles research, has already passed by the time of the most recent docket entry recorded here; whether the stay was lifted, extended, or the case otherwise progressed is not resolved in the material available and should be treated as outstanding rather than settled in either direction. Taken together, Oregon sanctions, beneficial-ownership, enabler-jurisdiction, and conflict-finance exposure remain quiet, consistent with a state-level jurisdiction that does not operate an independent sanctions or beneficial-ownership-registry regime, leaving digital-asset enforcement as the one domain carrying active movement. 18 Oct 2026 · fim-2026-10-18 #### Lead Signal Oregon carries one standout commercial-activity signal this cycle: Workday, Inc. signed a definitive agreement on 12 October 2026 to acquire C1 (ConductorOne, Inc.), a Portland, Oregon-headquartered identity-governance firm founded in 2020. The deal terms are undisclosed and the target close sits in Workday's fiscal Q4 2027, as scheduled. The transaction is corroborated across Tier-3 secondary sources rather than a directly retrieved primary filing, so the probable-tier framing holds: Workday is understood to have signed to acquire ConductorOne for undisclosed terms, with an SEC Form 8-K reported as filed on 13 October 2026. The analytical significance of this transaction for a financial-integrity readership sits less in the deal mechanics than in the subject matter being acquired. ConductorOne operates in the identity-governance space -- the control layer that determines who can touch what inside an enterprise's systems -- and its absorption into a much larger HR and finance-platform vendor is a compliance-technology consolidation event. Architecture-over-incident framing applies directly here: a single acquisition is not, by itself, a regulatory development, but the pattern of identity-governance and access-control tooling being pulled into platform-scale vendors is a structural shift in how enterprise compliance technology gets built, sold and standardized. #### Other Developments Unlicensed debt-collection enforcement. Oregon's Division of Financial Regulation is probably understood to have imposed a civil penalty on a company for operating as a debt collector without the required Oregon registration. Under the reported consent order, the company must cease and desist from further violations and pay $40,000 of a total $181,500 civil penalty, with the balance apparently suspended contingent on compliance. This is a licensing-enforcement action rather than an AML/CTF-specific finding, but it illustrates that Oregon's financial-services licensing apparatus continues to generate enforcement activity against unregistered actors. BNPL licensing guidance remains at the consultation stage. Oregon's Division of Financial Regulation has proposed guidance reminding nonbank buy-now-pay-later lenders and certain BNPL service providers that they must use the Nationwide Multistate Licensing System to obtain payday or consumer-finance licensure, depending on repayment terms. The comment period on this bulletin closed on 14 September 2026, and any resulting rules would take effect 180 days after adoption, as scheduled. Industry commentary has questioned whether this guidance requires formal rulemaking under Oregon's Administrative Procedures Act rather than issuance as a bulletin, so its path to finalization remains unresolved. #### Cross-Monitor Connections The Workday-ConductorOne transaction sits naturally at the boundary between this monitor's commercial-activity tracking and compliance-technology vendor consolidation more broadly: identity-governance tooling is foundational infrastructure for access controls that AML, sanctions-screening and data-governance functions all depend on. No sanctions-nexus, conflict-finance, or cross-border enabler signal was found for Oregon this cycle, so no routing to those typologies is warranted at this time. #### Outlook The Workday-ConductorOne transaction is probable-tier and bears watching through to its expected close in Workday's fiscal Q4 2027, as scheduled, including whether a primary SEC filing becomes available to firm up the terms. The BNPL licensing guidance remains unresolved pending Oregon DFR's decision on whether to proceed by bulletin or formal rulemaking; its practical effect, if finalized, would fall 180 days after adoption. The debt-collection consent order's suspended-penalty structure implies continued compliance monitoring by Oregon DFR over the multi-year suspension period. 28 Sep 2026 · fim-2026-09-28 #### Lead Signal Oregon's financial-integrity architecture saw one confirmed, dated instrument change this cycle: HB 4116, effective June 5, 2026, closes a rate-export loophole under the federal Depository Institutions Deregulation and Monetary Control Act of 1980 that had allowed internet consumer lenders partnering with out-of-state banks to charge Oregon borrowers interest rates above the state's 36 percent usury cap. This is properly read as an enabler-jurisdiction development rather than a core AML/CTF instrument change: the loophole functioned as a rate-arbitrage pathway that let non-bank lending arrangements route around Oregon's consumer-protection ceiling by leaning on a partner bank's home-state rate authority, and its closure removes one enabling mechanism from the state's consumer-finance landscape. This sits alongside Oregon's confirmed baseline AML/CTF-adjacent control, the money-transmitter licensing regime under ORS 717.205, which remained unchanged in substance this cycle and continues to operate as the sole state-specific layer beneath the federal Bank Secrecy Act and FinCEN framework that governs Oregon-licensed money-services businesses. #### Other Developments HB 4116's DIDMCA loophole closure is the confirmed development of note. Effective June 5, 2026, the statute closes the rate-export gap that had allowed internet lenders partnering with out-of-state banks to exceed Oregon's 36 percent usury limit, removing a rate-arbitrage enabler pathway that predatory or aggressive consumer-lending operations had relied upon. The Oregon Division of Financial Regulation characterizes the change as closing a loophole that had permitted rates in excess of the state limit. Oregon's money-transmitter licensing architecture was confirmed but not independently re-verified for change this cycle. ORS 717.205 requires a license from the Division of Financial Regulation for any money transmission business operating in the state, backed by a surety bond under ORS 717.225 and quarterly money-services-business call reports. The statute's definition of money is stated by the state to cover the evolving landscape of virtual currency, including Bitcoin, meaning crypto-asset businesses transmitting value in Oregon fall under this same general licensing regime rather than a bespoke crypto statute. #### Cross-Monitor Connections The DIDMCA loophole closure under HB 4116 principally intersects with consumer-protection and lending-conduct oversight rather than a typical AML/CTF typology, but the underlying mechanism, rate arbitrage achieved by routing consumer credit through an out-of-state bank partnership, shares structural features with enabler-jurisdiction analysis tracked elsewhere in the fleet: a permissive cross-border (in this case cross-state) legal architecture being used to route around a stricter home jurisdiction's rule. No direct connection to world-payments or crypto-monitor findings was evidenced this cycle for the Oregon MTL baseline. #### Outlook The practical significance of HB 4116 will depend on how actively Oregon enforces the closed loophole against internet lenders that had previously relied on out-of-state bank partnerships to exceed the 36 percent cap; no enforcement action under the new provision was identified this cycle. Separately, six standing fleet-wide trackers (T1 through T6) were not independently re-verified against the Oregon-specific sweep this cycle, and Oregon's crypto-asset variance under the general MTL regime remains on watch status pending any bespoke state crypto statute or enforcement action, neither of which was identified this cycle. 28 Aug 2026 · fim-2026-08-21 #### Lead Signal Oregon's Attorney General has emerged this cycle as a deliberate backstop against contracting federal consumer-financial-protection capacity. Leading a 46-state settlement, Oregon DOJ secured $45 million from Block, Inc. over Cash App's misrepresented account-safety features and failures to deliver fraud-protection and resolution obligations to users, with Oregon's own share set at $3 million. The Oregon Department of Justice explicitly framed the action in terms of reduced enforcement activity at the federal Consumer Financial Protection Bureau, a framing this brief treats as an assessed, high-confidence signal rather than an isolated incident: it sits inside Oregon's broader enabler-jurisdiction posture, where the state itself is acting as an enforcer filling a federal gap rather than functioning as an enabler of illicit activity. That distinction matters for how the finding should be read — this is state capacity substituting for federal capacity, not a facilitation risk being tolerated. The 2025 creation of an Economic Justice Section inside Oregon DOJ, explicitly positioned to pursue further payments- or crypto-adjacent matters, reinforces the assessment that this is a structural shift in state posture rather than a single settlement. This finding carries a High-confidence rating anchored in a Tier-1 Oregon Department of Justice press release, and it aligns with the jurisdiction's broader risk trajectory: Oregon's overall risk direction this cycle is assessed as increasing, with enforcement — rather than enablement — as the dominant character of that risk, and a structural-episodic profile assessed as mixed, meaning both a genuine institutional shift and an episodic settlement event are contributing to the present picture. #### Other Developments Coinbase's unregistered-securities action remains stayed pending a March 2026 status report. Oregon's action against Coinbase, alleging the unregistered offer and sale of 31 tokens including XRP, was removed to federal court and stayed until March 16, 2026, with a joint status report due from the parties. This assessed-confidence finding continues to represent a state-level securities-enforcement theory that diverges from the federal Securities and Exchange Commission's current de-regulatory posture toward digital-asset platforms nationally — a genuine architecture-level divergence between state and federal financial-integrity postures, not merely a procedural footnote. The underlying docket entries are procedural and carry a Tier-2 sourcing designation, though the original filing is corroborated by an Oregon DOJ press release; readers should treat the litigation's trajectory, rather than any single docket entry, as the operative signal. For any digital-asset platform serving Oregon residents, the practical consequence is continued classification uncertainty until the stay resolves. UCC Article 12 continues in force alongside, rather than in tension with, the enforcement posture. Oregon's 2025 enactment of UCC Article 12 via SB 167, which establishes digital assets as usable commercial-law collateral, remains a separate and unaffected instrument, sourced this cycle at Tier 3. The state has therefore built an enabling commercial-law framework for digital-asset transactions at the same time it pursues an unresolved securities theory against a major exchange — two structurally distinct postures coexisting rather than resolving one another, and each should be read on its own terms rather than netted against the other. #### Cross-Monitor Connections The Block/Cash App settlement is a shared finding with the World Payments Monitor, which addresses the same underlying facts from a payments-conduct and consumer-protection lens; this brief's framing foregrounds the enabler-jurisdiction gap-filling dimension of the same enforcement action. The Coinbase enforcement action and the UCC Article 12 framework are likewise shared findings with the Crypto monitor's token-classification and on-chain-activity-regime coverage; here the emphasis is the financial-integrity dimension of a state-level securities theory diverging from federal posture, relevant to firms assessing jurisdiction-specific compliance exposure rather than token-level classification risk alone. #### Outlook The single most consequential near-term event for Oregon's crypto posture is the outcome of the March 16, 2026 joint status report in State of Oregon v. Coinbase: either the stay lifts and the underlying securities theory proceeds toward substantive resolution, or the litigation's present uncertainty persists. A related open item is Coinbase's separate public-records suit against Governor Kotek, which could surface material affecting the state's broader crypto-policy narrative. On the enabler-jurisdiction side, the Economic Justice Section is the structural item to watch: whether its case selection over coming cycles constitutes a sustained pattern of state-level backstop enforcement against payments and crypto firms, or a one-off intervention tied to the Block settlement specifically, will determine whether Oregon's enabler-jurisdiction profile continues escalating. Both the broader enabler-jurisdiction sweep beyond the Block settlement, and the substantive outcome of the Coinbase stay, remain explicitly flagged evidentiary gaps this cycle pending further primary-source confirmation. 11 Aug 2026 · fim-2026-08-05 #### Lead Signal The FATF June 2026 plenary reset the global grey-list baseline, adding Bosnia and Herzegovina and Iraq while removing Algeria and Namibia, holding the monitored-jurisdiction count steady at twenty-two. This action, confirmed at High confidence from a Tier-1 FATF source, is the lead signal this cycle because it recalibrates the country-risk backdrop against which enabler-jurisdiction exposure is read globally, rather than representing an isolated country action. The plenary result is best read as continued active recalibration of the monitored list rather than a stabilizing trend, since the list churns rather than merely growing or shrinking. #### Other Developments Sanctions architecture sustained a high operational tempo. OFAC issued the largest-to-date package against the Ansarallah, or Houthi, financial network, designating twenty-one individuals and entities and identifying one vessel tied to oil-smuggling, procurement, and financial-facilitation activity; this finding is Assessed, corroborated only at Tier 3, since no direct Treasury press release was retrieved for the specific action. Separately, OFAC extended General License 131H, authorizing continued wind-down and divestment activity related to Lukoil International GmbH, through August 22, 2026, a High-confidence, Tier-1-sourced development that keeps a structured off-ramp open even as the broader Russia sanctions architecture holds. Beneficial-ownership transparency is moving on a mixed and staggered timeline. In the European Union, the Anti-Money Laundering Authority has been operational since July 1, 2025, but roughly one third of member states missed the Article 74 transposition deadline under the sixth Anti-Money Laundering Directive, set for July 10, 2025, triggering Commission infringement proceedings against eleven states; core beneficial-ownership register provisions are due July 10, 2026, with the Regulation reaching full application on July 10, 2027. This finding is Assessed, capped by the absence of a retrieved europa.eu or AMLA primary source this cycle. In the United States, the domestic beneficial-ownership reporting exemption for domestic companies and US persons, introduced by a FinCEN March 2025 interim final rule, remains in force; the Eleventh Circuit affirmed the constitutionality of the Corporate Transparency Act on December 16, 2025, and a May 2026 GAO report found that the exemption removed more than ninety-nine percent of previously covered entities. This is a High-confidence, Tier-1-sourced finding. Enabler-jurisdiction enforcement is visibly widening its aperture. In Cambodia, the central bank governor publicly warned that the country faces renewed FATF grey-relisting risk tied to casino and scam-centre laundering exposure, prompting a coordinated domestic crackdown; this is Assessed at Tier 3. In the United States, FinCEN issued a Notice of Proposed Rulemaking proposing a Section 311 special measure against ten identified Mexico-based gambling establishments tied to Sinaloa Cartel proceeds, a High-confidence, Tier-1 finding that extends an enforcement perimeter previously anchored in designated banks into the gaming sector directly. Conflict-finance findings this cycle span two distinct corridors. FinCEN issued a supplemental alert on a fiscal fuel-theft, or huachicoleo, trade-based money-laundering scheme linked to the CJNG cartel, generating tens of billions of dollars annually through cross-border smuggling; this is High confidence and Tier-1 sourced. The Houthi financial-network designation described above also carries a conflict-finance reading, since oil-smuggling revenue is a direct input to the weapons-procurement capacity of the network. Crypto and digital-asset oversight passed a structural threshold. The Markets in Crypto-Assets Regulation transitional period across the European Union ended on July 1, 2026, requiring full Crypto-Asset Service Provider authorization across the bloc; Binance withdrew its Greek MiCA application and restricted onboarding for European Union customers in response, and cumulative MiCA fines were reported above five hundred forty million euros. This finding is Assessed, since it rests on Tier 3 and Tier 4 sourcing with no Tier-1 or Tier-2 anchor retrieved this cycle. #### Cross-Monitor Connections The Houthi oil-smuggling designation and the CJNG fiscal fuel-theft alert both sit at the intersection of financial-integrity and commodity-flow analysis, since the underlying revenue architecture in each case depends on physical fuel or oil movement rather than pure financial layering; this is the kind of finding that a commodity-flow-focused monitor would read as a supply-chain integrity signal rather than a purely financial one. The expansion of the FinCEN enforcement perimeter into Mexico-based gambling establishments similarly sits adjacent to conflict-finance analysis, since Sinaloa Cartel proceeds are the underlying subject of the Section 311 special-measure proposal. The Cambodia grey-relisting warning, tied explicitly to casino and scam-centre laundering, is the kind of enabler-jurisdiction finding that connects most directly to state-capture-oriented analysis, given the public acknowledgment by the central bank itself. None of these connections change the underlying financial-integrity findings; they are noted here as routing signals for adjacent monitors. #### Outlook The coming cycle turns on several concrete dates. The Anti-Money Laundering Authority of the European Union must submit approximately twenty-three regulatory and implementing technical standards to the Commission by July 10, 2026, and the beneficial-ownership register core provisions fall due the same day, both of which will materially firm up the currently Assessed-confidence reading of the transposition status of the EU package. The full application date of the Regulation, July 10, 2027, remains the horizon marker for the eventual end of the current staggered-transposition period. On sanctions, the Lukoil International wind-down authorization runs through August 22, 2026, a date worth tracking for whether it is extended again or allowed to lapse. On crypto oversight, the pending penalty-methodology consultation of the European Banking Authority and the broader post-transitional MiCA enforcement and DeFi-policy review, expected in the fourth quarter of 2026, are the next concrete markers for whether the current MiCA uncertainty around decentralised finance and staking activity resolves toward expansion or restraint. 14 Jul 2026 · fim-2026-07-14 #### Lead Signal The financial-integrity exposure of Oregon this cycle is anchored in a federal beneficial-ownership rollback compounding a widening crypto-sanctions divergence. FinCEN revised the Corporate Transparency Act reporting-company definition to exempt every US-formed domestic reporting company, including Oregon-formed LLCs and corporations, from beneficial-ownership-information reporting, with the rule effective upon Federal Register publication on 26 March 2025. Oregon lacks any state-level beneficial ownership registry, leaving no backstop to the narrowed federal regime for Oregon-formed entities, a structural transparency gap rather than an isolated event. On 20 May 2026 OFAC designated more than a dozen individuals and entities operating a Sinaloa Cartel Los Chapitos cash-to-stablecoin laundering cell that converted bulk cash proceeds from US fentanyl sales into stablecoins for cross-border transfer to Mexico. Neither the EU nor the UK has mirrored this designation, a gap producing divergent enhanced-due-diligence exposure for EU- and UK-regulated virtual-asset service providers interacting with the same designated addresses. Separately, TRM Labs attributes USD 1.92 billion in 2025 cryptocurrency theft to DPRK-linked actors, laundered via chain-hopping and Chinese OTC broker networks, sustaining a proliferation-financing corridor whose settlement architecture, not any single theft, is the persistent structural fact of concern. #### Other Developments The severance of Huione Group from the US financial system unfolded as FinCEN designated the Cambodia-based conglomerate under Section 311 as a foreign financial institution of primary money-laundering concern, after the entity and successor entities processed more than USD 39.6 billion in 2025; the Section 311 special-measures authority used here has no direct EU/UK statutory equivalent, leaving EU/UK institutions discretionary on Huione-linked exposure absent parallel listings. A narrowed federal prosecutorial posture for crypto-related BSA violations emerged as a Deputy Attorney General memorandum disbanded the National Cryptocurrency Enforcement Team and directed prosecutors to deprioritize standalone or unwitting Bank Secrecy Act regulatory violations absent willful misconduct, while explicitly preserving enforcement where knowing and willful violations are evidenced. A forthcoming stablecoin onboarding-control mandate is taking shape as FinCEN, the OCC, the Federal Reserve, the FDIC, and the NCUA jointly proposed a GENIUS Act Customer Identification Program rule for stablecoin issuers and participants, expected in force around the fourth quarter of 2026 and reaching Oregon-chartered institutions and Oregon Division of Financial Regulation-licensed virtual-asset service providers alike. A prolonged due-diligence gap for private-fund structures persists because the effective date of the Investment Adviser AML/CDD Rule was postponed to 2028, prolonging a beneficial-ownership-linked due-diligence compliance gap exploitable via private-fund layering structures reachable from Oregon. The February 2026 FATF plenary outcome added Kuwait and Papua New Guinea to the Increased Monitoring list, while Iran, DPRK, and Burma remain on the Call for Action list; the United States is not listed on either list. A national elder-fraud cash-out vector is described in FinCEN Notice FIN-2025-NTC1, issued in August 2025, which flags scam networks directing victims, including the elderly, to deposit cash at crypto ATMs via QR code for rapid sweep to scammer-controlled wallets. A documented domestic enabler architecture persists in the low-disclosure Oregon LLC formation regime, since a domestic shell-company assessment by FinCEN cites an Oregon-based fraudulent-loan-scheme case as illustrative of a national anonymous-entity vulnerability, a vulnerability widened by the 2025 CTA domestic exemption. Geographic-scope exclusion, not enforcement anomaly describes the position of Oregon relative to the expanded Southwest Border Geographic Targeting Order, since the 2026 expanded GTO covers designated counties and ZIP codes in Arizona, California, New Mexico, and Texas by definition of border proximity, and the exclusion of Oregon follows from this defined scope, though it leaves enhanced MSB reporting tools uncalibrated for Portland-area fentanyl cash-to-crypto exposure. Growing on-chain attribution of terror-designated entities compounds exposure, as cryptocurrency addresses attributable to already-designated terror-financing entities, including the IRGC, a Hamas-linked exchange, and Ansarallah and Houthi networks, increasingly transact on-chain, a forensic-attribution improvement that is itself a downstream sanctions-exposure signal for US virtual-asset service providers, including Oregon-licensed money transmitters. #### Cross-Monitor Connections The unmirrored OFAC cartel crypto-cell designation is flagged for GMM sanctions-as-macro-variable tracking, since designation-scope divergence between the US and EU/UK regimes shapes correspondent-banking and enhanced-due-diligence exposure beyond the sanctions function itself. The DPRK proliferation-financing corridor and the continuing on-chain attribution of terror-designated entities sit at the intersection of counter-proliferation and counter-terrorist-financing pillars that this monitor tracks structurally, a framing intended to correct the volume bias that AML enforcement activity otherwise imposes on CTF and CPF signal within a single-jurisdiction brief. #### Outlook Three forward-looking items dominate the horizon for Oregon-facing institutions. The proposed GENIUS Act stablecoin Customer Identification Program rule is expected in force around the fourth quarter of 2026, tightening onboarding-control obligations for banks and money-services businesses including Oregon-licensed virtual-asset service providers. The Investment Adviser AML/CDD Rule remains adopted but its substantive applicability is deferred to 2028, prolonging the private-fund due-diligence gap described above. FATF is expected to conduct its next grey-list review at the October 2026 plenary, a moment relevant to correspondent-banking enhanced-due-diligence triggers even though the United States itself is not expected to be listed. A further, lower-confidence item concerns a potential federal reclassification of marijuana to a less restrictive schedule, which if finalised could ease federal banking access for the licensed cannabis industry of Oregon and reduce cash-intensive trade-based money-laundering exposure associated with that sector. Domain intelligence (D1–D8) #### Sanctions Architecture and Evasion Read through the sanctions-architecture lens, this cycle for Oregon centers on a single unifying pattern: US unilateral tools designating crypto-enabled illicit finance without corresponding EU or UK action. On 20 May 2026 OFAC designated more than a dozen individuals and entities operating a Sinaloa Cartel Los Chapitos cash-to-stablecoin laundering cell that converted bulk cash proceeds from US fentanyl sales into stablecoins for cross-border transfer to Mexico. Under the three-level F2 analysis this monitor applies, the scheme is the bulk cash-to-stablecoin conversion itself; the architecture is the cartel broker network and decentralized-exchange-to-centralized-exchange routing that decouples cash-out from correspondent banking; the strategic consequence is that neither the EU nor the UK has mirrored the designation, opening a designation-scope gap that produces divergent enhanced-due-diligence exposure for EU- and UK-regulated virtual-asset service providers interacting with the same addresses. Continue reading This divergence is not an isolated instance. FinCEN separately designated Cambodia-based Huione Group under Section 311 as a foreign financial institution of primary money-laundering concern after the entity and successor entities processed more than USD 39.6 billion in 2025, again using a domestic special-measures authority with no direct EU/UK statutory equivalent. The pattern extends to the proliferation-financing space, where TRM Labs attributes USD 1.92 billion in 2025 cryptocurrency theft to DPRK-linked actors, laundered via chain-hopping and Chinese OTC broker networks, a channel that persists regardless of any single US enforcement action against it. Growing forensic capability to attribute on-chain addresses to already-designated terror-financing entities, including the IRGC, a Hamas-linked exchange, and Ansarallah and Houthi networks, adds a fourth strand: attribution improvement is itself a downstream sanctions-exposure signal for US virtual-asset service providers, including Oregon-licensed money transmitters, since improved traceability does not by itself close the multilateral-mirroring gap. For Oregon specifically, the jurisdiction is not documented as a transit or intermediary hub for any of these schemes; its exposure is that of a settlement-layer participant, since Oregon-licensed money transmitters and Oregon Division of Financial Regulation-supervised virtual-asset service providers sit within the same correspondent and on/off-ramp infrastructure that cartel, DPRK, and terror-financing actors exploit nationally. The February 2026 FATF plenary added Kuwait and Papua New Guinea to the Increased Monitoring list, while Iran, DPRK, and Burma remain on the Call for Action list; the United States is not listed on either list, which keeps correspondent-banking friction for Oregon-headquartered groups oriented toward designation-scope divergence rather than jurisdictional listing risk. #### Outlook The structural question for the coming cycles is whether the EU and UK move toward mirroring US crypto-sanctions designations or whether the divergence architecture becomes the durable norm. FATF's October 2026 plenary grey-list review is the next scheduled inflection point for correspondent-banking due-diligence triggers, though the United States itself is not expected to be listed. Absent multilateral mirroring, Oregon-facing institutions with cross-border exposure should expect continuing friction between US designation scope and EU/UK list architecture as a standing feature of the sanctions environment rather than a transitional one. #### Beneficial Ownership and Corporate Transparency The standing structural backdrop for beneficial-ownership and corporate-transparency regulation globally is the European Union's AML Package, which comprises three distinct instruments: the directly applicable AML Regulation (Regulation (EU) 2024/1624), the sixth AML Directive requiring transposition by each Member State, and the AMLA Regulation (Regulation (EU) 2024/1620) establishing the Anti-Money Laundering Authority. Together these shift supervision from purely national authorities toward a hybrid regime in which the Authority exercises direct supervision over a subset of higher-risk cross-border obliged entities while indirect supervision continues through national bodies for the remainder. This architecture is durable background against which beneficial-ownership developments anywhere are read, though it is not the directly relevant framework for the jurisdiction under examination in this cycle, which sits outside the European Union's direct perimeter; no European Union AML Package horizon anchors were surfaced this cycle for this specific jurisdiction, so the architecture is stated here as standing context rather than as an active development. Continue reading The material beneficial-ownership signal this cycle instead concerns Cambodia, where the International Monetary Fund's 2026 Article IV Consultation found the legal framework for preventing criminals from owning or controlling casinos to be deficient. The Fund's finding is specific: Cambodia's fit-and-proper test for casino licensing relies only on criminal-record certificates, without any mechanism to verify beneficial ownership or the lawful source of funds behind a casino's ownership structure. This is a narrower and more targeted gap than a general absence of a beneficial-ownership register; it describes a sector-specific vetting failure in a licensing gateway that controls entry into a cash-intensive, high-risk industry. The Fund recommended that Cambodia extend fit-and-proper testing to reach beneficial owners and directors, not merely the nominal licence applicant, and timed that recommendation to land ahead of Cambodia's 2027 casino licence-renewal window, which gives the recommendation a concrete near-term test: whether Cambodia's regulator incorporates beneficial-ownership verification into the renewal process for existing casino licences due to come up in that window. The significance of this gap is compounded by its relationship to a separate and ongoing concern: reporting on Cambodia- and Laos-based casino and scam-compound infrastructure being used to launder proceeds of cyber-enabled fraud, including a September 2026 alert from the United States Financial Crimes Enforcement Network naming Cambodia's Huione Group as an example of underground-banking facilitation for scam operators. A casino sector whose ownership vetting cannot see past the nominal licence-holder to the actual beneficial owner is structurally more exposed to exactly this kind of capture, because a beneficial owner with links to illicit networks can hold a licence without ever being tested against that fact. #### Outlook The concrete date to track is the 2027 casino licence-renewal window in Cambodia, which is the first point at which the IMF's beneficial-ownership recommendation could be operationalized within the existing licensing cycle rather than through new legislation. Whether Cambodia's Commercial Gambling Management Commission moves to extend fit-and-proper testing to beneficial owners ahead of that window, or whether the 2027 renewals proceed under the existing criminal-record-only standard, will be the clearest signal of whether the IMF's finding produces a structural change or remains a documented gap. #### Enabler Jurisdictions and Professional Facilitators Oregon's D3 signal this cycle centers on HB 4116, effective June 5, 2026, which closes a rate-export loophole under the federal Depository Institutions Deregulation and Monetary Control Act of 1980. That loophole had allowed internet consumer lenders partnering with out-of-state banks to charge Oregon borrowers interest rates in excess of the state's 36 percent usury cap, functioning as a rate-arbitrage enabler pathway: a non-bank lender could structure its product through a partner bank chartered elsewhere and thereby import that bank's home-state rate ceiling rather than Oregon's own. The Oregon Division of Financial Regulation has publicly framed the amendment as closing precisely this loophole. Continue reading Read through an enabler-jurisdiction lens, this is a structural correction rather than an enforcement event: it removes a legal architecture that permissive out-of-state bank-partnership arrangements had exploited to route consumer lending around Oregon's own rate protections. Architecture-over-incident framing applies directly here, the significance lies in closing the enabling mechanism itself, not in any single enforcement action against a specific lender. No enforcement action taken under the new provision was identified this cycle, and the amendment's practical bite will only become visible once (or if) it is tested against a lender that previously relied on the DIDMCA rate-export structure. This development should be read alongside, but distinguished from, Oregon's core AML/CTF architecture under ORS 717.205's money-transmitter licensing regime, which addresses a different facilitator class (money transmission and virtual-currency businesses) and was not itself affected by HB 4116. The two sit in the same general financial-integrity landscape for Oregon but address distinct enabler risks: rate-arbitrage lending structures on one hand, and unlicensed money transmission on the other. #### Outlook The key indicator to watch is whether Oregon regulators or the Attorney General bring an enforcement action against a lender that continues to rely on an out-of-state bank partnership to exceed the 36 percent cap following the June 5, 2026 effective date. Absent such action, the loophole closure remains a confirmed statutory development without yet a demonstrated enforcement track record. #### Conflict Finance and Extractive-Industry Integrity No jurisdiction-specific conflict-finance or extractive-industry-integrity development was identified for Oregon this cycle. Oregon carries no documented extractive-industry footprint or conflict-finance nexus in the evidence base reviewed, and the domain row for this jurisdiction is carried forward unchanged from prior baselines. Two of this cycle F1/F4-adjacent developments elsewhere in the sanctions-architecture domain, the DPRK proliferation-financing corridor and the cartel cash-to-stablecoin laundering scheme, are tagged in the underlying scheme inventory as touching conflict-finance dimensions at the national level, but neither carries an Oregon-specific nexus beyond the shared settlement-layer exposure already addressed under sanctions architecture and digital assets. Continue reading #### Outlook Absent a documented Oregon-specific conflict-finance or extractive-industry signal, no jurisdiction-level forward marker is set for this domain this cycle. This row will be revisited if future evidence surfaces an Oregon-specific nexus to either conflict-finance flows or extractive-industry governance gaps. #### Crypto / Digital Assets / Financial Innovation Oregon's financial regulator has become one of 34 state regulators in a $2.5 million multistate settlement with Coinme Inc., a crypto-kiosk operator, over Bank Secrecy Act and anti-money-laundering violations. Oregon's allocated recovery is $101,425.34. The settlement is structurally significant beyond its dollar figure because it sets a hard operational deadline: Coinme must terminate its kiosk operations entirely by 1 January 2027, or incur a further $4 million penalty. Physical cash-to-crypto kiosks have long been flagged as a higher-risk conversion channel precisely because they allow cash entry into the crypto system with limited identity verification relative to exchange on-ramps, and a settlement that functionally phases out an operator's kiosk footprint within a defined window is a meaningful lever even though it arrives through negotiated terms rather than new statute. Continue reading Separately, Oregon's securities-law action against Coinbase — filed in April 2025 and alleging unregistered sale of 31 tokens — remains stayed in federal court, with the last confirmed order extending proceedings to 16 September 2026 pending a joint status report. No ruling on the merits has issued, and the status of the matter beyond that date could not be confirmed. The coexistence of an active, concluded multistate settlement against a kiosk operator and a dormant securities claim against a major exchange illustrates how enforcement tempo in this space is driven as much by venue and procedural posture as by the underlying conduct. Underpinning both matters is the fact that Oregon has no bespoke statutory regime for virtual-currency businesses: coverage runs through the general money-transmitter licensing statute, ORS Chapter 717, which extends standard customer-due-diligence and licensing obligations to crypto-asset businesses operating as money-services businesses in the state. That architecture did not change this cycle, but it is the backdrop against which coordinated multistate settlements like Coinme's are the primary enforcement instrument available to Oregon, absent dedicated crypto legislation. #### Outlook The operative date to track is 1 January 2027, the deadline by which Coinme must exit kiosk operations under the settlement; non-compliance would trigger an additional $4 million penalty and would itself be a signal about the durability of settlement-based phase-outs as an enforcement tool. The Coinbase securities matter's procedural trajectory past its 16 September 2026 stay deadline is an open question for subsequent monitoring rather than something that can be projected from current reporting. No change to Oregon's underlying statutory architecture for virtual-currency business is indicated; ORS Chapter 717 is expected to remain the operative coverage mechanism as scheduled. #### Compliance Technology and Active Defence No material RegTech, perpetual-KYC, or AI/ML compliance-technology development specific to Oregon or its federal framework was identified this cycle. The pending GENIUS Act stablecoin Customer Identification Program rule has D6-adjacent implications, since it will raise onboarding-control expectations for Oregon-chartered banks and Oregon Division of Financial Regulation-licensed virtual-asset service providers, but this development is tracked primarily under the crypto and digital-assets domain rather than as an independent compliance-technology finding this cycle. Growing forensic on-chain attribution capability that links addresses to already-designated terror-financing entities is a defence-relevant signal worth noting here as well, though it too is substantively addressed under the sanctions-architecture domain this cycle. Continue reading #### Outlook No compliance-technology-specific forward marker is set for Oregon this cycle beyond the pending stablecoin onboarding-control rule already tracked under the digital-assets domain. This row will be revisited when RegTech, perpetual-KYC, or AI/ML compliance-technology developments with a direct Oregon or federal-framework nexus are identified. Oregon continues to apply general money-transmitter licensing statute to virtual-currency businesses : Oregon applies ORS Chapter 717 (money transmitter licensing) to virtual-currency businesses rather than a bespoke crypto AML regime; no change this cycle. #### Commercial Activity The defining commercial-activity event for Oregon this cycle is Workday, Inc.'s signed agreement, dated 12 October 2026, to acquire C1 (ConductorOne, Inc.), an identity-governance company headquartered in Portland, Oregon and founded in 2020. The deal terms are undisclosed and the target close falls in Workday's fiscal Q4 2027, as scheduled. Multiple Tier-3 secondary sources corroborate the transaction, including reference to an SEC Form 8-K reported as filed on 13 October 2026, though no primary filing was directly retrieved this cycle; the finding is therefore carried at probable-tier confidence rather than confirmed. Continue reading Framing this through a commercial-activity lens, the transaction is notable for what is being bought rather than simply its size or price (which was not disclosed). ConductorOne builds identity-governance tooling -- software that manages and audits who has access to what within an organisation's systems. That category of technology sits adjacent to, and increasingly overlaps with, the compliance-technology stack that institutions rely on for access controls, segregation-of-duties enforcement, and audit-trail generation. Its acquisition by Workday, a platform-scale HR and finance-systems vendor, is consistent with a broader pattern of identity and access-governance capability being consolidated into large enterprise-platform vendors rather than remaining the province of standalone point solutions. Architecture-over-incident framing is appropriate here: the single transaction is not itself a regulatory event, but it is illustrative of a structural direction in how compliance-adjacent technology capability is being assembled and distributed across the market. A second, narrower commercial-adjacent finding from this cycle is the Oregon DFR enforcement action against a company operating as an unlicensed debt collector. Under the reported consent order, the company must cease and desist from further violations and pay $40,000 of a total $181,500 civil penalty, with the remainder apparently suspended on conditions. While this sits closer to licensing enforcement than to commercial transaction activity proper, it is included here because it demonstrates that Oregon's financial-services licensing regime continues to generate enforcement outcomes against firms operating without required registration, a backdrop condition relevant to any commercial actor assessing Oregon's regulatory environment before entering or expanding operations there. No other Oregon-specific commercial-activity signal -- M&A, funding, or corporate-structuring -- met the bar for inclusion this cycle beyond these two items. A Tier-4 source citing aggregate Portland-area startup funding volume was reviewed but did not rise to a standalone finding given its low source tier and lack of specificity to the typologies this monitor tracks. #### Outlook The Workday-ConductorOne transaction will bear monitoring through to its expected close in Workday's fiscal Q4 2027, as scheduled, particularly for whether a primary SEC filing emerges that would allow the deal terms, and any associated regulatory conditions, to be confirmed directly rather than inferred from secondary reporting. Should the deal close as structured, it would represent a further data point in the consolidation of identity-governance capability into large enterprise-platform vendors, a trend with downstream implications for how compliance and access-control functions are procured and standardized across sectors. The debt-collection consent order's suspended-penalty structure implies an multi-year compliance-monitoring tail by Oregon DFR, and any breach of its conditions would be the next material development to watch in that specific matter. Regulatory horizon Consultation 2027-Q1 · ±half_year ### Oregon DFR proposed Bulletin No. DFR 2026-X — BNPL licensing guidance If finalized, nonbank BNPL providers and certain BNPL service providers operating in Oregon would need payday or consumer-finance NMLS licensure. [Oregon Division of Financial Regulation (DCBS) Source](https://dfr.oregon.gov/laws-rules/Documents/Bulletins/proposed/bnlp-bulletin.pdf) 1 dated · 3 pending date · baseline fim-2026-07-05 Role action cards MLRO ### Coinme's multistate BSA/AML settlement highlights kiosk-channel risk and a 2027 wind-down deadline. The settlement confirms that cash-to-crypto kiosk operations remain a focus of coordinated state AML enforcement, and the termination deadline embedded in the settlement is a concrete marker for monitoring exposure to similar kiosk-based channels. 1 evidence refs Compliance ### Oregon continues to regulate virtual-currency business through its general money-transmitter statute rather than a bespoke crypto regime. Obliged entities operating in Oregon remain subject to ORS Chapter 717 licensing and due-diligence obligations rather than a crypto-specific framework, which should inform how compliance programs map Oregon coverage. 1 evidence refs Legal ### Oregon's securities action against Coinbase remains stayed with no ruling on the merits. The unresolved procedural posture of the Coinbase matter, filed over unregistered token sales, leaves open liability questions that have not been adjudicated and whose status past the September 2026 deadline is unconfirmed. 1 evidence refs Board ### A coordinated 34-state settlement signals sustained multistate regulatory attention to crypto-kiosk operations. The scale of multistate coordination behind the Coinme settlement is a reputational and strategic marker for any institution with exposure to physical crypto cash-conversion channels. 1 evidence refs CTO ### The Coinme settlement targets kiosk infrastructure specifically, not exchange-based digital-asset architecture. The enforcement action and its termination deadline are specific to physical kiosk hardware and cash-handling flows, a distinct technical surface from exchange or custodial architecture. 1 evidence refs Risk ### Cash-to-crypto kiosk channels remain an active enforcement typology with a defined phase-out timeline in Oregon. Risk teams tracking crypto-asset typology exposure should note the kiosk-channel enforcement pattern and the 2027 operational deadline as a concrete escalation marker. 1 evidence refs Operations ### No new transaction-monitoring or screening rule changes identified for Oregon this cycle. The settlement and the stayed securities matter did not produce new generally-applicable screening or monitoring obligations for operations teams to implement. Standing trackers (T1–T6) Tracker Status Note T1 · Russian Sanctions-Evasion Architecture no_change No material change found bearing on this jurisdiction. T2 · EU AML Package / AMLA no_change Not applicable at the Oregon subnational level. T3 · FATF Grey List no_change No plenary outcome bearing on US-OR. T4 · Beneficial-Ownership Register Status no_change No Oregon-specific BO registry development. T5 · Crypto & Digital-Asset Integrity escalating Oregon DFR joined a 34-state BSA/AML settlement with crypto-kiosk operator Coinme; Oregon v. Coinbase securities action remains stayed. T6 · Sanctions Regime Divergence no_change No new divergence bearing on this jurisdiction. Registers ### Enforcement actions - 26 Mar 2025 - 20 May 2026 - 7 Apr 2025 - 1 Oct 2025 - 25 Jun 2025 - 1 Jun 2026 - 1 Nov 2025 - 9 Jul 2026 - 19 Oct 2026 - FinCEN issued an interim final rule revising the CTA's 'reporting company' definition to cover only foreign entities, formally exempting all US-formed domestic reporting companies and their beneficial owners from BOI reporting requirements. 21 Mar 2025 - OFAC designated more than a dozen individuals and entities responsible for converting bulk cash proceeds of US fentanyl sales into stablecoins for cross-border transfer to Mexico, dismantling a specialized cash-to-crypto laundering cell. 20 May 2026 - Deputy Attorney General Todd Blanche issued a memorandum disbanding the National Cryptocurrency Enforcement Team and directing prosecutors to deprioritize standalone BSA/regulatory violations absent willful misconduct, refocusing resources on fraud, cartels, and terrorism financing where digital assets are used as a tool. 7 Apr 2025 ### Sanctions changes - 20 May 2026 - 18 Mar 2025 - 16 Jan 2026 - 1 Jun 2026 - 16 Jan 2026 - 24 Jul 2026 - 23 Jul 2026 - OFAC designated the Sinaloa Cartel Los Chapitos cash-to-stablecoin laundering cell, targeting brokers who converted US fentanyl-sale cash proceeds into cryptocurrency for cross-border transfer. 20 May 2026 - Following the White House's designation of international cartels as Foreign Terrorist Organizations and Specially Designated Global Terrorists (Jan/Feb 2025), OFAC and the State Department issued follow-on alerts targeting cartel financial networks, including fuel-theft and fentanyl-proceeds laundering schemes. 18 Mar 2025 - FinCEN designated Huione Group, a Cambodian conglomerate, as a foreign financial institution of primary money-laundering concern under Section 311, severing it and successor entities from the US financial system after it processed over $39.6 billion in 2025. 1 Oct 2025 ### Regulatory horizon (register) - MiCA post-transitional enforcement and DeFi/staking policy review - Oregon DFR proposed Bulletin No. DFR 2026-X — BNPL licensing guidance - GENIUS Act stablecoin Customer Identification Program rule - FinCEN Investment Adviser AML Rule effective date postponed - Next FATF Plenary grey-list review (October 2026) - Potential federal marijuana rescheduling affecting Oregon cannabis banking ### Active schemes - [HIGH] Cartel fentanyl cash-to-stablecoin laundering pipeline - Oregon LLC shell-company fraud layering - [HIGH] Crypto-kiosk elder-fraud cash-out network - [CRITICAL] DPRK crypto-theft proliferation financing corridor - [HIGH] Sanctioned terror-group crypto wallet attribution Sources - [Protecting the EU’s financial system - Finance - European Commission](https://finance.ec.europa.eu/news/protecting-eus-financial-system-2025-07-16_en) - [https://www.fatf-gafi.org/en/publications/High-risk-and-other-monitored-jurisdictions/increased-monitoring-june-2026.html](https://www.fatf-gafi.org/en/publications/High-risk-and-other-monitored-jurisdictions/increased-monitoring-june-2026.html) - [https://www.aa.com.tr/en/americas/us-targets-alleged-houthi-oil-smuggling-weapons-networks-with-new-sanctions/3801653](https://www.aa.com.tr/en/americas/us-targets-alleged-houthi-oil-smuggling-weapons-networks-with-new-sanctions/3801653) - [https://ofac.treasury.gov/recent-actions](https://ofac.treasury.gov/recent-actions) - [https://zavia.ai/eu-beneficial-ownership-in-2026-amlr-amld6-amla-explained/](https://zavia.ai/eu-beneficial-ownership-in-2026-amlr-amld6-amla-explained/) - [https://www.casinoguardian.co.uk/2026/01/27/cambodia-intensifies-crackdown-on-illegal-online-gambling-amid-fatf-scrutiny/](https://www.casinoguardian.co.uk/2026/01/27/cambodia-intensifies-crackdown-on-illegal-online-gambling-amid-fatf-scrutiny/) - [https://www.fincen.gov/news/news-releases/fincen-issues-supplemental-alert-fuel-smuggling-and-tax-evasion-schemes-southern](https://www.fincen.gov/news/news-releases/fincen-issues-supplemental-alert-fuel-smuggling-and-tax-evasion-schemes-southern) - [https://www.fincen.gov/news/news-releases/fincen-combats-financial-support-sinaloa-cartel-finding-transactions-involving](https://www.fincen.gov/news/news-releases/fincen-combats-financial-support-sinaloa-cartel-finding-transactions-involving) - [https://www.fincen.gov/boi](https://www.fincen.gov/boi) - [https://en.cryptonomist.ch/2026/06/29/mica-penalty-framework-eu-fines/](https://en.cryptonomist.ch/2026/06/29/mica-penalty-framework-eu-fines/) - [https://globallawexperts.com/mica-compliance-deadline-crypto-businesses-serving/](https://globallawexperts.com/mica-compliance-deadline-crypto-businesses-serving/) - [https://www.courtlistener.com/docket/70443284/state-of-oregon-v-coinbase-inc/](https://www.courtlistener.com/docket/70443284/state-of-oregon-v-coinbase-inc/) - [https://www.doj.state.or.us/media-home/news-media-releases/oregon-attorney-general-rayfield-sues-coinbase-for-promoting-and-selling-high-risk-investments/](https://www.doj.state.or.us/media-home/news-media-releases/oregon-attorney-general-rayfield-sues-coinbase-for-promoting-and-selling-high-risk-investments/) - [https://dfr.oregon.gov/business/licensing/financial/pages/money-transmitters.aspx](https://dfr.oregon.gov/business/licensing/financial/pages/money-transmitters.aspx) - [https://oregon.public.law/statutes/ors_717.205](https://oregon.public.law/statutes/ors_717.205) - [https://www.doj.state.or.us/media-home/news-media-releases/ag-rayfield-announces-45m-multistate-settlement-in-cash-app-investigation/](https://www.doj.state.or.us/media-home/news-media-releases/ag-rayfield-announces-45m-multistate-settlement-in-cash-app-investigation/) - [https://www.gibsondunn.com/mid-year-developments-in-anti-money-laundering-in-2026/](https://www.gibsondunn.com/mid-year-developments-in-anti-money-laundering-in-2026/) - [Oregon State Legislature](https://www.oregonlegislature.gov/bills_laws/ors/ors717.html) - [Oregon Division of Financial Regulation](https://dfr.oregon.gov/business/licensing/financial/pages/money-transmitters.aspx) - [Oregon Division of Financial Regulation](https://dfr.oregon.gov/news/news2026/Pages/20260604-high-interest-loans.aspx) - [Oregon Secretary of State](https://apps.oregon.gov/SOS/LicenseDirectory/LicenseDetail/21) - [https://dfr.oregon.gov/business/licensing/financial/Pages/money-transmitters.aspx](https://dfr.oregon.gov/business/licensing/financial/Pages/money-transmitters.aspx) - [https://www.ecfr.gov/current/title-31/subtitle-B/chapter-X/part-1021/subpart-C/section-1021.320](https://www.ecfr.gov/current/title-31/subtitle-B/chapter-X/part-1021/subpart-C/section-1021.320) - [https://www.sheppard.com/insights/blogs/oregon-regulator-penalizes-debt-collector-for-alleged-unregistered-activity](https://www.sheppard.com/insights/blogs/oregon-regulator-penalizes-debt-collector-for-alleged-unregistered-activity) - [https://dfr.oregon.gov/laws-rules/Documents/Bulletins/proposed/bnlp-bulletin.pdf](https://dfr.oregon.gov/laws-rules/Documents/Bulletins/proposed/bnlp-bulletin.pdf) - [https://sandpczone.com/workday-acquires-c1-ai](https://sandpczone.com/workday-acquires-c1-ai) - [https://www.cbinsights.com/company/conductorone](https://www.cbinsights.com/company/conductorone) - [https://flashalert.net/id/ODCBS/191631](https://flashalert.net/id/ODCBS/191631) - [https://www.csbs.org/newsroom/state-financial-regulators-reach-25-million-settlement-crypto-kiosk-operator](https://www.csbs.org/newsroom/state-financial-regulators-reach-25-million-settlement-crypto-kiosk-operator) - [https://hoodline.com/2026/10/coinme-must-pull-bitcoin-atms-from-oregon-by-2027-after-2-5m-settlement/](https://hoodline.com/2026/10/coinme-must-pull-bitcoin-atms-from-oregon-by-2027-after-2-5m-settlement/) - [https://www.fatf-gafi.org/en/news/fatf-week-october-2026.html](https://www.fatf-gafi.org/en/news/fatf-week-october-2026.html) - [https://www.oregonlegislature.gov/bills_laws/ors/ors717.html](https://www.oregonlegislature.gov/bills_laws/ors/ors717.html) - [Oregon Division of Financial Regulation](https://dfr.oregon.gov/news/news2026/pages/20261020-settlement-with-crypto-kiosk-operator.aspx) - [CourtListener / U.S. District Court, District of Oregon](https://www.courtlistener.com/docket/70443284/state-of-oregon-v-coinbase-inc/) - [FinCEN Assesses Civil Money Penalty Against Oregon-Based Unregistered Money Transmitter | FinCEN.gov](https://www.fincen.gov/news/news-releases/fincen-assesses-civil-money-penalty-against-oregon-based-unregistered-money) - [Enforcement Actions | FinCEN.gov](https://www.fincen.gov/news/enforcement-actions) - [FinCEN Announces Data-Driven Border Operation to Address Potential Money Laundering | FinCEN.gov](https://www.fincen.gov/news/news-releases/fincen-announces-data-driven-border-operation-address-potential-money-laundering) - [United States Department of the Treasury Financial Crimes Enforcement Network - Home | FinCEN.gov](https://www.fincen.gov/) - [Treasury Convenes Financial Institutions and Law Enforcement to Identify and Dismantle Money Laundering Networks | FinCEN.gov](https://www.fincen.gov/news/news-releases/treasury-convenes-financial-institutions-and-law-enforcement-identify-and) - [Guidance | FinCEN.gov](https://www.fincen.gov/resources/statutes-regulations/guidance) - [News Releases on Unregistered Money Transmitter Enforcement Actions | FinCEN.gov](https://www.fincen.gov/news-releases-unregistered-money-transmitter-enforcement-actions) - [FinCEN Notice, FIN-2023-NTC1, August 15, 2023](https://www.fincen.gov/system/files/2025-09/FinCEN_Notice_Payroll_Tax_Evasion_and_Workers_Comp_508.pdf) - [1 Fact Sheet: FinCEN Issues Final Rule to](https://www.fincen.gov/system/files/shared/RREFactSheet.pdf) - [FinCEN Issues Final Rule to Postpone Effective Date of Investment Adviser Rule to 2028 | FinCEN.gov](https://www.fincen.gov/news/news-releases/fincen-issues-final-rule-postpone-effective-date-investment-adviser-rule-2028) - [Treasury Department won’t enforce beneficial ownership rule under the Corporate Transparency Act - ICIJ](https://www.icij.org/inside-icij/2025/03/treasury-department-wont-enforce-beneficial-ownership-rule-under-the-corporate-transparency-act/) - [Beneficial Ownership Information Reporting | FinCEN.gov](https://www.fincen.gov/boi) - [Frequently Asked Questions | FinCEN.gov](https://www.fincen.gov/boi-faqs) - [FinCEN Removes Beneficial Ownership Reporting Requirements for U.S. Companies and U.S. Persons, Sets New Deadlines for Foreign Companies | FinCEN.gov](https://www.fincen.gov/news/news-releases/fincen-removes-beneficial-ownership-reporting-requirements-us-companies-and-us) - [Beneficial Ownership Information Reporting Rule Fact Sheet | FinCEN.gov](https://www.fincen.gov/beneficial-ownership-information-reporting-rule-fact-sheet) - [Beneficial Ownership Information Report (BOIR) - BOI E-FILING](https://boiefiling.fincen.gov/fileboir) - [Fact Sheet: Beneficial Ownership Information Access and Safeguards Final Rule | FinCEN.gov](https://www.fincen.gov/news/news-releases/fact-sheet-beneficial-ownership-information-access-and-safeguards-final-rule) - [U.S. Beneficial Ownership Information Registry Now Accepting Reports | FinCEN.gov](https://www.fincen.gov/news/news-releases/us-beneficial-ownership-information-registry-now-accepting-reports) - [U.S. Department of the Treasury Financial Crimes Enforcement Network](https://www.fincen.gov/system/files/shared/BOI_FinCEN_Brochure_508C.pdf) - [Beneficial Ownership Information Report Filing Instructions](https://boiefiling.fincen.gov/resources/BOIR_Filing_Instructions.pdf?trk=public_post_comment-text) - [2026 Crypto Crime Report – Illicit Crypto Trends & Typologies | TRM Labs](https://www.trmlabs.com/reports-and-whitepapers/2026-crypto-crime-report) - [2026 Crypto Crime Report: Scams](https://www.chainalysis.com/blog/crypto-scams-2026/) - [The DOJ's NCET Disbanded: What This Means for Digital Assets - Chainalysis](https://www.chainalysis.com/blog/ncet-blanche-memo/) - [Financial Action Task Force Identifies Jurisdictions with Anti-Money Laundering, Combating the Financing of Terrorism, and Counter-Proliferation Finance Deficiencies | FinCEN.gov](https://www.fincen.gov/news/news-releases/financial-action-task-force-identifies-jurisdictions-anti-money-laundering-5) - [Press Releases | FinCEN.gov](https://www.fincen.gov/news/press-releases) - [1 The U.S. Department of the Treasury’s (Treasury) Financial](https://www.fincen.gov/system/files/2026-03/FinCEN-Advisory-Health-Care-Fraud.pdf) - [Year in Review for Fiscal Year 2025](https://www.fincen.gov/system/files/2026-05/FinCEN-Year-in-Review-2025.pdf) - [The Value of FinCEN Data - Law Enforcement ...](https://www.fincen.gov/resources/law-enforcement/case-examples) - [Application of FinCEN’s Regulations to Persons Administering, Exchanging, or Using Virtual Currencies | FinCEN.gov](https://www.fincen.gov/resources/statutes-regulations/guidance/application-fincens-regulations-persons-administering) - [Request for Administrative Ruling on the Application of FinCEN’s Regulations to a Virtual Currency Payment System | FinCEN.gov](https://www.fincen.gov/resources/statutes-regulations/administrative-rulings/request-administrative-ruling-application) - [Fact Sheet on MSB Registration Rule | FinCEN.gov](https://www.fincen.gov/fact-sheet-msb-registration-rule) - [F I N C E N G U I D A N C E 1](https://www.fincen.gov/system/files/2019-05/FinCEN%20CVC%20Guidance%20FINAL.pdf) - [Application of FinCEN’s Regulations to Virtual Currency Mining Operations | FinCEN.gov](https://www.fincen.gov/resources/statutes-regulations/administrative-rulings/application-fincens-regulations-virtual-0) - [Whether a Company that Provides Online Real-Time Deposit, Settlement, and Payment Services for Banks, Businesses and Consumers is a Money Transmitter rather | FinCEN.gov](https://www.fincen.gov/resources/statutes-regulations/administrative-rulings/whether-company-provides-online-real-time) - [Application of Money Services Business regulations to the rental of computer systems for mining virtual currency | FinCEN.gov](https://www.fincen.gov/resources/statutes-regulations/administrative-rulings/application-money-services-business-0) - [Definition of Money Transmitter (Merchant Payment Processor) | FinCEN.gov](https://www.fincen.gov/resources/statutes-regulations/administrative-rulings/definition-money-transmitter-merchant-payment) - [Request for Administrative Ruling on the Application of FinCEN’s Regulations to a Virtual Currency Trading Platform | FinCEN.gov](https://www.fincen.gov/resources/statutes-regulations/administrative-rulings/request-administrative-ruling-application-0) - [BSA Expectations Regarding Marijuana-Related Businesses | FinCEN.gov](https://www.fincen.gov/resources/statutes-regulations/guidance/bsa-expectations-regarding-marijuana-related-businesses) - [FinCEN Issues Guidance to Financial Institutions on Marijuana Businesses | FinCEN.gov](https://www.fincen.gov/news/news-releases/fincen-issues-guidance-financial-institutions-marijuana-businesses) - [Frequently Requested FOIA-Processed Records | FinCEN.gov](https://www.fincen.gov/frequently-requested-foia-processed-records) - [What is money laundering? | FinCEN.gov](https://www.fincen.gov/what-money-laundering) - [MONEY LAUNDERING PREVENTION](https://www.fincen.gov/sites/default/files/shared/prevention_guide.pdf) - [FinCEN Guidance, FIN-2020-G001](https://www.fincen.gov/sites/default/files/2020-06/FinCEN_Hemp_Guidance_508_FINAL.pdf) - [Financial Crimes Enforcement Network](https://www.fincen.gov/system/files/guidance/guidance04262005.pdf) - [FATF REPORT Money Laundering Through the Physical Transportation of Cash](https://www.fatf-gafi.org/content/dam/fatf-gafi/reports/money-laundering-through-transportation-cash.pdf) - [SARs Reveal Multi-Million Dollar Illicit Business | FinCEN.gov](https://www.fincen.gov/sars-reveal-multi-million-dollar-illicit-business) - [Local Municipality Case Example (Narcotics Trafficking, Money Laundering, and Mortgage Fraud) | FinCEN.gov](https://www.fincen.gov/resources/law-enforcement/case-examples/local-municipality-case-example-narcotics-trafficking-money) - [OFAC Sanctions Fentanyl Trafficking and Crypto Laundering Network](https://www.chainalysis.com/blog/sinaloa-cartel-fentanyl-trafficking-crypto-laundering-may-2026/) - [Financial Trend Analysis Fentanyl-Related Illicit Finance](https://www.fincen.gov/system/files/shared/FinCEN-FTA-Fentanyl.pdf) - [1 The U.S. Department of the Treasury’s (Treasury)](https://www.fincen.gov/system/files/2025-08/FinCEN-Advisory-CMLN-508.pdf) - [FinCEN Reminds Financial Institutions to Remain Vigilant to Suspicious Transactions Associated with Synthetic Opioids | FinCEN.gov](https://www.fincen.gov/news/news-releases/fincen-reminds-financial-institutions-remain-vigilant-suspicious-transactions) - [1 1. See 31 U.S.C. § 5312(a)(2); 31 C.F.R. § 1010.100(t). 2.](https://www.fincen.gov/system/files/2026-06/FinCEN-Alert-Fiscal-Fuel-Theft.pdf) - [Understanding the Use of Cryptocurrencies By Cartels | TRM Labs](https://www.trmlabs.com/resources/blog/understanding-the-use-of-cryptocurrencies-by-cartels) - [United States Department of the Treasury Financial Crimes Enforcement Network | FinCEN.gov](https://www.fincen.gov/?mc_eid=UNIQID) - [FinCEN Issues Expanded Southwest Border Geographic Targeting Order | FinCEN.gov](https://www.fincen.gov/news/news-releases/fincen-issues-expanded-southwest-border-geographic-targeting-order) - [Beneficial Ownership Reporting Outreach and Education Toolkit | FinCEN.gov](https://www.fincen.gov/boi/toolkit) - [Updated: March 2025 1 Financial Crimes Enforcement Network](https://www.fincen.gov/system/files/shared/BOI-FAQs-QA-508C.pdf) - [Fact Sheet: Beneficial Ownership Information Reporting Notice of Proposed Rulemaking (NPRM) | FinCEN.gov](https://www.fincen.gov/index.php/news/news-releases/fact-sheet-beneficial-ownership-information-reporting-notice-proposed-rulemaking) - [Financial Crimes Enforcement Network U.S. Department of the Treasury](https://www.fincen.gov/system/files/shared/BOI_Small_Compliance_Guide.v1.1-FINAL.pdf) - [U.S. Launches a Beneficial Ownership Registry | OCCRP](https://www.occrp.org/en/news/us-launches-a-beneficial-ownership-registry) - [BSA Expectations Regarding Marijuana-Related Businesses](https://www.fincen.gov/system/files/shared/FIN-2014-G001.pdf) - [Cannabis: DOJ Expected to Ease Marijuana Restrictions as Soon as Wednesday - Bloomberg](https://www.bloomberg.com/news/articles/2026-04-22/doj-expected-to-ease-marijuana-restrictions-as-soon-as-wednesday) - [Drug trafficking statistics](https://www.unodc.org/unodc/en/data-and-analysis/statistics/drug-trafficking.html) - [Counter Narcotics Trafficking Sanctions | Office of Foreign Assets Control](https://ofac.treasury.gov/sanctions-programs-and-country-information/counter-narcotics-trafficking-sanctions) - [Organized Crime Module 3 Key Issues: Drug Trafficking](https://www.unodc.org/cld/zh/education/tertiary/organized-crime/module-3/key-issues/drug-trafficking.html) - [Marijuana Rescheduling to Class III Drug Plan Advanced by DOJ - Bloomberg](https://www.bloomberg.com/news/articles/2024-05-16/doj-advances-marijuana-rescheduling-plan-favored-by-biden) - [184 The Regulation-Legalization Debate](https://www.unodc.org/pdf/world_drug_report_1997/CH5/5bLEG.pdf) - [BSA Information Helps Jury Convict Cocaine Trafficker | FinCEN.gov](https://www.fincen.gov/resources/law-enforcement/case-examples/bsa-information-helps-jury-convict-cocaine-trafficker) - [FinCEN Notice, FIN-2025-NTC1, August 4, 2025](https://www.fincen.gov/system/files/2025-08/FinCEN-Notice-CVCKIOSK.pdf) - [USSS Pig Butchering Investigation Leads to $5M+ Seizure of Victim Funds](https://www.trmlabs.com/resources/case-studies/usss) - [U.S. Crackdown on Southeast Asian Crypto Scam Centers](https://www.chainalysis.com/blog/asian-scam-centers-crypto-fraud-april-2026/) - [Crypto scams and elder financial exploitation: cracking down on fraud targeting the vulnerable](https://www.elliptic.co/blog/analysis/crypto-scams-and-elder-financial-exploitation-cracking-down-on-fraud-targeting-the-vulnerable) - [Pig butchering scam](https://www.trmlabs.com/glossary/pig-butchering-scam) - [What Is a Crypto Scam? Types & Defense - Chainalysis](https://www.chainalysis.com/glossary/crypto-scam/) - [1 1. See 31 U.S.C. § 5312(a)(2); 31 CFR § 1010.100(t). 2.](https://www.fincen.gov/system/files/shared/FinCEN_Alert_Pig_Butchering_FINAL_508c.pdf) - [FinCEN Reminds Financial Institutions to Remain Vigilant Regarding Potential Relationship Investment Scams | FinCEN.gov](https://www.fincen.gov/news/news-releases/fincen-reminds-financial-institutions-remain-vigilant-regarding-potential) - [Elder Financial Exploitation: Threat Pattern & Trend ...](https://www.fincen.gov/system/files/shared/FTA_Elder_Financial_Exploitation_508Final.pdf) - [FinCEN and the Bureau of Industry and Security (BIS) Issue Joint Notice and New Key Term for Reporting Evasion of U.S. Export Controls Globally | FinCEN.gov](https://www.fincen.gov/news/news-releases/fincen-and-bureau-industry-and-security-bis-issue-joint-notice-and-new-key-term) - [FinCEN & BIS Joint Notice, FIN-2023-NTC2, ...](https://www.fincen.gov/system/files/shared/FinCEN_Joint_Notice_US_Export_Controls_FINAL508.pdf) - [1 Department of Commerce, Department of the Treasury, and](https://ofac.treasury.gov/media/931471/download?inline=) - [| Office of Foreign Assets Control](https://ofac.treasury.gov/faqs/topic/1501) - [FinCEN and BIS Supplemental Joint Alert_FINAL](https://www.fincen.gov/system/files/shared/FinCEN%20and%20BIS%20Joint%20Alert%20_FINAL_508C.pdf) - [ASML, Tokyo Electron Dodge New US Chip Export Rules, For Now - Bloomberg](https://www.bloomberg.com/news/articles/2024-07-31/asia-chip-stocks-rally-on-report-us-allies-exempted-from-curbs) - [Internal Emails Reveal Russian Reaction to U.S. Squeezing Supply of Microchips for Missiles | OCCRP](https://www.occrp.org/en/scoop/internal-emails-reveal-russian-reaction-to-us-squeezing-supply-of-microchips-for-missiles) - [US to Toughen Enforcement of Russia, China Export Violations - Bloomberg](https://www.bloomberg.com/news/articles/2022-05-16/us-to-toughen-enforcement-of-russia-china-export-violations) - [US Considers Tougher Trade Rules Against Companies in Chip Crackdown on China - Bloomberg](https://www.bloomberg.com/news/articles/2024-07-17/us-considers-tougher-trade-rules-against-companies-in-chip-crackdown-on-china) - [Impact of Sanctions and Export Controls on Russia's ...](https://ofac.treasury.gov/media/928856/download?inline=) - [Financial Fraud Enforcement Task Force (FFETF) | FinCEN.gov](https://www.fincen.gov/financial-fraud-enforcement-task-force-ffetf) - [Advisories | FinCEN.gov](https://www.fincen.gov/resources/advisoriesbulletinsfact-sheets/advisories) - [Financial Crimes Enforcement Network The Role of Domestic Shell Companies in](https://www.fincen.gov/system/files/shared/LLCAssessment_FINAL.pdf) - [2025 Civil Penalties and Enforcement Information | Office of Foreign Assets Control](https://ofac.treasury.gov/civil-penalties-and-enforcement-information/2025-enforcement-information) - [FinCEN Calls Attention to Payroll Tax Evasion and Workers ...](https://www.fincen.gov/sites/default/files/shared/FinCEN_Notice_Payroll_Tax_Evasion_and_Workers_Comp_508%20FINAL.pdf) - [Transforming National Anti-Corruption Priorities into ...](https://www.unodc.org/documents/data-and-analysis/Corruption/Practical_Guide_for_consultation.pdf) - [Judge Off Oregon National Guard Case After DOJ Claims Conflict - Bloomberg](https://www.bloomberg.com/news/articles/2025-10-02/judge-off-oregon-national-guard-case-after-doj-claims-conflict) - [State Contact Information For MSBs](https://www.fincen.gov/sites/default/files/shared/msbstatecontactsfinal.pdf) - [Enforcement Division | FinCEN.gov](https://www.fincen.gov/enforcement-division) - [Law Enforcement Overview | FinCEN.gov](https://www.fincen.gov/resources/law-enforcement) - [Enforcement Actions for Failure to Register as a Money Services Business | FinCEN.gov](https://www.fincen.gov/enforcement-actions-failure-register-money-services-business) - [FinCEN -Financial Crimes Enforcement Network | FinCEN.gov](https://www.fincen.gov/fincen-financial-crimes-enforcement-network) - [Memoranda of Understanding Between OFAC and Bank Regulators | Office of Foreign Assets Control](https://ofac.treasury.gov/civil-penalties-and-enforcement-information/2019-enforcement-information/memoranda-of-understanding-between-ofac-and-bank-regulators) - [Requests by Law Enforcement for Financial Institutions to Maintain Accounts | FinCEN.gov](https://www.fincen.gov/resources/statutes-regulations/guidance/requests-law-enforcement-financial-institutions-maintain) - [Anti-money laundering and countering the financing of terrorism at international level - Finance](https://finance.ec.europa.eu/financial-crime/anti-money-laundering-and-countering-financing-terrorism-international-level_en) - [European Commission updates list of high-risk countries to strengthen international fight against financial crime - Finance](https://finance.ec.europa.eu/news/european-commission-updates-list-high-risk-countries-strengthen-international-fight-against-2025-12-04_en) - [High risk third countries and the international context content of anti-money laundering and countering the financing of terrorism - European Commission](https://finance.ec.europa.eu/financial-crime/high-risk-third-countries-and-international-context-content-anti-money-laundering-and-countering_en) - [Commission adds Russia to list of high-risk jurisdictions to strengthen international fight against financial crime](https://ec.europa.eu/commission/presscorner/detail/en/ip_25_2910) - [EU methodology for the identification of high-risk third countries - Finance](https://finance.ec.europa.eu/financial-crime/anti-money-laundering-and-countering-financing-terrorism-international-level/eu-methodology-identification-high-risk-third-countries_en) - [Money Laundering Advisory Notice: June 2026 - GOV.UK](https://www.gov.uk/government/publications/money-laundering-advisory-notice-high-risk-third-countries--2/money-laundering-advisory-notice-high-risk-third-countries--2) - [Commission updates list of high-risk countries to strengthen international fight against financial crime - Finance](https://finance.ec.europa.eu/news/commission-updates-list-high-risk-countries-strengthen-international-fight-against-financial-crime-2025-06-10_en) - [Anti-Money Laundering and Terrorist Financing Directive 4 - Finance](https://finance.ec.europa.eu/regulation-and-supervision/financial-services-legislation/implementing-and-delegated-acts/anti-money-laundering-and-terrorist-financing-directive-4_en) - [High-risk and other monitored jurisdictions](https://www.fatf-gafi.org/en/topics/high-risk-and-other-monitored-jurisdictions.html) - [Protecting the EU’s financial system - Finance - European Commission](https://finance.ec.europa.eu/news/protecting-eus-financial-system-2025-07-16_en) - [Oregon Department of Consumer and Business Services, Division of Financial Regulation](https://dfr.oregon.gov) - [Financial Crimes Enforcement Network (FinCEN)](https://www.fincen.gov/boi) - [Financial Crimes Enforcement Network (FinCEN)](https://www.fincen.gov/news/news-releases/fincen-assesses-civil-money-penalty-against-oregon-based-unregistered-money) - [Financial Crimes Enforcement Network (FinCEN)](https://www.fincen.gov/news/news-releases/fincen-reminds-financial-institutions-remain-vigilant-suspicious-transactions) - [Chainalysis](https://www.chainalysis.com/blog/sinaloa-cartel-fentanyl-trafficking-crypto-laundering-may-2026/) - [Financial Crimes Enforcement Network (FinCEN)](https://www.fincen.gov/news/news-releases/financial-action-task-force-identifies-jurisdictions-anti-money-laundering-5) - [International Consortium of Investigative Journalists (ICIJ)](https://www.icij.org/inside-icij/2025/03/treasury-department-wont-enforce-beneficial-ownership-rule-under-the-corporate-transparency-act/) - [Organized Crime and Corruption Reporting Project (OCCRP)](https://www.occrp.org/en/news/us-launches-a-beneficial-ownership-registry) - [TRM Labs](https://www.trmlabs.com/reports-and-whitepapers/2026-crypto-crime-report) - [Financial Crimes Enforcement Network (FinCEN)](https://www.fincen.gov/system/files/shared/LLCAssessment_FINAL.pdf) - [Financial Crimes Enforcement Network (FinCEN)](https://www.fincen.gov/system/files/2025-08/FinCEN-Notice-CVCKIOSK.pdf) - [Financial Crimes Enforcement Network (FinCEN)](https://www.fincen.gov/news/news-releases/fincen-issues-expanded-southwest-border-geographic-targeting-order) - [Chainalysis](https://www.chainalysis.com/blog/ncet-blanche-memo/) - [European Commission](https://ec.europa.eu/commission/presscorner/detail/en/ip_25_2910) Coverage gaps fim-int-2026-07-07-G001: Oregon-specific enforcement-action … fim-int-2026-07-07-G001: Oregon-specific enforcement-action reporting (US Attorney's Office District of Oregon prosecutions, DFR consent orders) is largely absent from the public-domain evidence base, limiting confidence in the Oregon-level enforcement-capacity assessment beyond national touchpoints. [resolved] fim-int-2026-07-07-G002: Precise legal effective-date docume… fim-int-2026-07-07-G002: Precise legal effective-date documentation for the FinCEN CTA interim final rule should be reconciled across future baselines to eliminate the announcement-versus-effective-date ambiguity identified this cycle. [resolved] fim-int-2026-07-07-G003: Direct evidence of Oregon DFR super… fim-int-2026-07-07-G003: Direct evidence of Oregon DFR supervisory response to Portland-area fentanyl cash-to-crypto exposure flagged by FinCEN's PROTECT outreach is not available, limiting assessment of any residual state-level reporting-tool gap. [resolved] fim-int-2026-07-07-G004: No evidence of Oregon legislative a… fim-int-2026-07-07-G004: No evidence of Oregon legislative activity toward an independent state-level beneficial-ownership registry was identified, leaving the systemic-significance assessment of this transparency gap reliant on national CTA-rollback context alone. [resolved] fim-int-2026-07-14-G001: No EU AML Package (AMLR/6AMLD/AMLA)… fim-int-2026-07-14-G001: No EU AML Package (AMLR/6AMLD/AMLA) domain content was actively resourced this cycle; T2 remains held at no_change pending a dedicated sweep. [resolved] fim-int-2026-07-14-G002: D6 compliance-technology coverage i… fim-int-2026-07-14-G002: D6 compliance-technology coverage is limited to a single CDD-relief finding; no RegTech/AI-monitoring guidance was sourced this cycle. [resolved] fim-int-2026-07-14-G003: Colombia (CO), a standing Tier-D wa… fim-int-2026-07-14-G003: Colombia (CO), a standing Tier-D watch jurisdiction, yielded no material signal this cycle. [resolved] fim-int-2026-07-14-G004: UK ECCTA 2023 failure-to-prevent-fr… fim-int-2026-07-14-G004: UK ECCTA 2023 failure-to-prevent-fraud offence gap assessment was not refreshed with new SFO/FCA guidance this cycle. [resolved] fim-int-2026-08-05-G001: No sourced material was found for C… fim-int-2026-08-05-G001: No sourced material was found for Colombia (Tier D) this cycle; coverage remains an explicit gap rather than a fabricated finding. [resolved] fim-int-2026-08-05-G002: No fresh FinCEN model-risk or FCA/J… fim-int-2026-08-05-G002: No fresh FinCEN model-risk or FCA/JMLSG supervisory guidance was located to close the AI/ML transaction-monitoring validation gap implied by MiCA's continuous-screening mandate. [resolved] fim-int-2026-08-05-G003: No europa.eu/AMLA primary source wa… fim-int-2026-08-05-G003: No europa.eu/AMLA primary source was retrieved for the 11-member-state infringement proceedings or AMLD6 transposition status. [resolved] fim-int-2026-08-20-G001: Tier D jurisdiction checks (KH, LA,… fim-int-2026-08-20-G001: Tier D jurisdiction checks (KH, LA, MX, CO) were not actively re-run this cycle within the pooled union budget. [resolved] fim-int-2026-08-20-G002 ({'scheme': 'financial_integrity', '… fim-int-2026-08-20-G002 ({'scheme': 'financial_integrity', 'value': 'D3'}): D3 enabler-jurisdiction sweep for US-OR beyond the Block/Cash App settlement was not independently run this cycle. [resolved] fim-int-2026-08-20-G003 ({'scheme': 'financial_integrity', '… fim-int-2026-08-20-G003 ({'scheme': 'financial_integrity', 'value': 'D5'}): Outcome of the 3/16/2026 Coinbase joint status report is not yet available and may materially change the D5 posture. [resolved] fim-int-2026-09-28-G001: Six standing trackers (T1-T6) were … fim-int-2026-09-28-G001: Six standing trackers (T1-T6) were not independently re-verified this cycle; pooled search budget was concentrated on the bound jurisdiction US-OR variance sweep. [resolved] fim-int-2026-09-28-G002: Tier-D jurisdiction coverage (KH, L… fim-int-2026-09-28-G002: Tier-D jurisdiction coverage (KH, LA, MX, CO) was not performed this cycle. [resolved] fim-int-2026-10-18-G001: Tier D jurisdictions (KH, LA, MX, C… fim-int-2026-10-18-G001: Tier D jurisdictions (KH, LA, MX, CO) not re-searched this cycle given single-jurisdiction (US-OR) binding of this run. [resolved] fim-int-2026-10-18-G002 ({'scheme': 'financial_integrity', '… fim-int-2026-10-18-G002 ({'scheme': 'financial_integrity', 'value': 'D7'}): No Oregon-specific AML overlay for the Oregon Lottery's state-run sports-betting operation was located in primary sources this cycle. [resolved] fim-int-2026-10-25-G001: Laos and Colombia Tier D watch item… fim-int-2026-10-25-G001: Laos and Colombia Tier D watch items were not re-confirmed this cycle within search budget; awaiting_primary_source rather than asserted no_source. [resolved] fim-int-2026-10-25-G002: Tribal gaming compact AML/sanctions… fim-int-2026-10-25-G002: Tribal gaming compact AML/sanctions-screening terms for Oregon tribal casinos were not retrieved this cycle. [resolved] fim-int-2026-11-01-G001 ({'scheme': 'financial_integrity', '… fim-int-2026-11-01-G001 ({'scheme': 'financial_integrity', 'value': 'D1'}): Tier D jurisdictions (Cambodia, Laos, Mexico, Colombia) were not independently researched this cycle as the run is bound to US-OR. [open] fim-int-2026-11-01-G002: Whether the Oregon v. Coinbase stay… fim-int-2026-11-01-G002: Whether the Oregon v. Coinbase stay has been further extended, lifted, or resolved after the 2026-09-16 status-report deadline could not be confirmed. [open] FIM-GAP-001 (D3): Publicly available federal and state enfor… FIM-GAP-001 (D3): Publicly available federal and state enforcement-action reporting specific to Oregon within the 18-month baseline window is sparse. Most identifiable enforcement touchpoints are national-level actions (CTA rule change, OFAC cartel designations, DOJ policy memo) with indirect Oregon relevance rather than Oregon-situated prosecutions or DFR supervisory orders. FIM-GAP-002 (D2): FinCEN's March 2025 CTA rollback exempting… FIM-GAP-002 (D2): FinCEN's March 2025 CTA rollback exempting all US-formed domestic reporting companies from beneficial ownership reporting undermines transparency for Oregon-registered LLCs and corporations, which now face no federal or state-level BO disclosure obligation. FIM-GAP-003 (D1): Oregon is excluded from FinCEN's expanded … FIM-GAP-003 (D1): Oregon is excluded from FinCEN's expanded Southwest Border Geographic Targeting Order (covering Arizona, California, New Mexico, and Texas counties), despite FinCEN's own 2024 Portland PROTECT outreach having flagged fentanyl-related BSA reporting and cash-to-crypto laundering exposure in the Pacific Northwest. FIM-GAP-004 (D2): Oregon has no dedicated state-level benefi… FIM-GAP-004 (D2): Oregon has no dedicated state-level beneficial ownership registry or public UBO transparency mechanism, unlike some peer states exploring such registries following the federal CTA's 2025 domestic-company exemption. ## Evidence #### Confidence-tiered claims Money transmitter licensees, including virtual-currency exchangers and administrators, must maintain a written AML compliance program under USA Patriot Act Section 352. [[Source 1]](#sec-sources) Probable · 1 source Oregon tribal Class III casinos must file CTRs for currency transactions over $10,000 per gaming day (31 CFR 1021.311) and SARs for suspicious transactions (31 CFR 1021.320); this is a federal, not state, obligation. [[Source 1]](#sec-sources) Probable · 1 source Workday signed a definitive agreement on 12 October 2026 to acquire Portland, Oregon-headquartered identity-governance firm C1 (ConductorOne); terms undisclosed; target close Workday fiscal Q4 2027. [[Source 1]](#sec-sources) Probable · 1 source DFR penalized a company for operating as a debt collector without Oregon registration; consent order requires $40,000 paid immediately, $141,500 suspended for three years contingent on compliance. [[Source 1]](#sec-sources) Probable · 1 source Proposed guidance would require nonbank BNPL lenders and certain BNPL service providers to hold payday or consumer-finance NMLS licensure; comment period closed 14 September 2026; rules, if adopted, take effect 180 days after adoption. [[Source 1]](#sec-sources) Probable · 1 source Oregon DFR joined 33 other state regulators (34 total) in a $2.5 million consent settlement with Coinme Inc. (NMLS 1185542) over BSA/AML deficiencies (customer ID, transaction tracking, SAR filing) identified in a review of March 2023-March 2025 kiosk operations; Coinme must exit kiosk operations in Oregon by 1 January 2027 or face a further $4 million penalty, and must retain an independent BSA/AML consultant. Oregon's allocated share is $101,425.34. [[Source 1]](#sec-sources) Probable · 1 source IMF 2026 Article IV Consultation found Cambodia's casino fit-and-proper test deficient, relying only on criminal-record certificates rather than verifying beneficial ownership or lawful source of funds; IMF recommended extending fit-and-proper testing to beneficial owners/directors ahead of the 2027 licence-renewal window. [[Source 1]](#sec-sources) Probable · 1 source ACAMS analysis (21 Oct 2026), drawing on FATF/UNODC/APG material, describes continuing use of Cambodia- and Laos-based casino/scam-compound infrastructure for cyber-enabled fraud laundering; FinCEN's 3 September 2026 alert named Cambodia's Huione Group as an example of underground-banking/"guarantee marketplace" facilitation used by scam operators. [[Source 1]](#sec-sources) Probable · 1 source The first FATF Plenary meeting under the UK Presidency of Giles Thomson takes place 28-30 October 2026, expected to discuss mutual evaluation reports for Mexico and the United States under the new assessment round. [[Source 1]](#sec-sources) Probable · 1 source USD 2,500,000 multistate settlement; Oregon share USD 101,425.34 [[Source 1]](#sec-sources) Probable · 1 source Stayed until 9/16/2026 [[Source 1]](#sec-sources) Probable · 1 source Coinme Inc. settled with a 34-state coalition including Oregon for $2.5 million over BSA/AML violations tied to crypto kiosk operations; Oregon's allocated share is $101,425.34; Coinme must terminate kiosk operations by 1 January 2027 or face a further $4 million penalty. [[Source 1]](#sec-sources) Probable · 1 source Oregon's securities-law enforcement action against Coinbase (filed April 2025, alleging unregistered sale of 31 tokens) remains procedurally stayed in federal court; last known stay order extended proceedings to 2026-09-16 pending a joint status report; no ruling on the merits has issued. [[Source 1]](#sec-sources) Probable · 1 source Oregon continues to apply its general money-transmitter licensing statute (ORS Chapter 717) to virtual-currency businesses rather than a bespoke crypto AML regime. [[Source 1]](#sec-sources) Probable · 1 source