United States — Vermont US-VT

Lead Signal

Vermont has enacted Act 142, a statute signed on 16 June 2026 that continues and hardens the state prior moratorium on virtual-currency kiosks while simultaneously creating a new licensing regime for sales-based commercial financing and factoring. The enacted text bars any person from locating, operating, or otherwise making available a virtual-currency kiosk in the state, and it expands the state money-transmission definition to capture virtual-currency business activity. The Vermont Department of Financial Regulation has previously flagged that cryptocurrency moving through unsupervised crypto-kiosks without sufficient controls creates an outsized risk, and Act 142 is the legislative answer to that concern. Secondary legal commentary has characterized the kiosk measure as a permanent ban, though the enacted statutory language and this characterization have not yet been fully reconciled, leaving some ambiguity over whether the prohibition is permanent or an extended continuation of an existing moratorium.

The same statute separately brings sales-based financing and factoring providers under a new Vermont lender or loan-solicitation licensing regime, with Truth in Lending Act-style annual percentage rate disclosure obligations, effective from 1 July 2027. Together the two strands of Act 142 close two previously unlicensed channels: cash-to-crypto conversion through physical kiosks, and non-bank commercial credit extended outside existing lender licensure. Neither change creates a Vermont-specific anti-money-laundering statute distinct from the federal Bank Secrecy Act and FinCEN money-services-business baseline that already governs the state money-transmission chapter; both are better read as architecture-narrowing moves against known enabler gaps than as a new compliance regime in their own right.

Other Developments

Commercial-financing licensure closes an unlicensed credit channel. Act 142 adds a new provision to Vermont statute requiring providers of sales-based financing and factoring, such as merchant cash advance and revenue-based financing arrangements, to hold a Vermont lender or loan-solicitation license before continuing to operate in the state. Industry in this space has generally not operated under state lender licensure, so the one-year lead time before the 1 July 2027 effective date is itself the compliance-gap window regulators and providers now have to close. Law-firm secondary sources are the primary corroboration available for the detail of this provision and are broadly consistent with each other, though the particular statutory text for this specific provision has not been independently re-pulled.

Kiosk prohibition formalizes an existing enforcement posture. The ban on virtual-currency kiosks is a continuation and hardening of a position Vermont regulators had already signaled through the Department of Financial Regulation prior reporting on crypto-kiosk risk. The expansion of the money-transmission definition to explicitly include virtual-currency business activity gives the state a clearer statutory hook for supervising or acting against unlicensed kiosk operators going forward, rather than relying solely on an interpretive extension of pre-existing transmission definitions.

Cross-Monitor Connections

The kiosk prohibition sits squarely inside the pattern tracked by digital-asset integrity work elsewhere in the firm: crypto-ATM and kiosk channels have been a recurring fraud and layering vector nationally, and a state-level permanent or near-permanent bar is the kind of structural hardening that reduces, rather than merely polices, that attack surface. The commercial-financing licensure change has a narrower but real connection to enabler-jurisdiction analysis generally, in that an unlicensed, undisclosed credit channel is precisely the kind of gap that enabler-jurisdiction typologies look for; Vermont closing it is a data point in the other direction from the permissive-jurisdiction pattern that enabler analysis more often surfaces.

Outlook

The virtual-currency kiosk prohibition took effect on 1 July 2026 and is now operative; the open question is whether its characterization as a permanent ban, as opposed to an extended moratorium, will be clarified by subsequent regulatory guidance or litigation. The commercial-financing licensing regime was adopted with the statute but its substantive obligations are not yet in effect: the lender or loan-solicitation licensure and Truth in Lending Act-style disclosure requirements for sales-based financing and factoring providers are due to take effect on 1 July 2027. Firms operating in either space should expect the intervening period to surface further guidance from the Vermont Department of Financial Regulation on scope and compliance expectations ahead of that date.

Lead Signal

Vermont has enacted a structural tightening of its money-transmission and virtual-currency perimeter through Act 142 (H.648), signed into law on 16 June 2026. The statute does two distinct things at once: it folds virtual-currency business activity expressly into the definition of money transmission under 8 V.S.A. §2500, formalising a classification the Department of Financial Regulation had already been applying in enforcement practice, and it restricts the operation of virtual-currency kiosks, terminating existing kiosk registrations effective 1 July 2026 and barring new registrations for a period whose length is not settled in the record. The enacted text itself reads as an unconditional restriction with no visible sunset in the sections sampled, while secondary commentary is split between describing it as a permanent ban and describing it as a moratorium running to 1 July 2027. That gap matters for anyone tracking whether the kiosk channel reopens, and it is carried here as an open question rather than resolved either way.

The formal inclusion of virtual-currency activity within the money-transmission definition is the more durable of the two changes. It removes any ambiguity about whether a crypto-asset business operating in Vermont needs a money-transmitter licence, aligning the statute book with what the Department of Financial Regulation had already been doing as a matter of enforcement posture. Read together, the two provisions describe a state regulator narrowing the informal, cash-adjacent, less-supervised edge of the virtual-currency ecosystem (kiosks) while simultaneously widening and hardening the licensing net around the formal, business-to-consumer edge of the same ecosystem.

Other Developments

A new commercial-financing licensing regime arrives alongside the virtual-currency provisions in the same omnibus act. New 8 V.S.A. §2247 requires providers of sales-based financing and factoring to Vermont recipients to hold a Department of Financial Regulation lender or loan-solicitation licence from 1 July 2027, with disclosure obligations styled on the federal Truth in Lending Act. Depository institutions, government entities, self-financing sellers, and transactions of $1,000,000 or more are exempt. This provision is corroborated by multiple independent secondary legal sources citing the same statutory section and commencement date, though no Department of Financial Regulation implementing guidance has yet been located to confirm the operative detail at primary-source level. It sits outside the virtual-currency core of the finding but shares its instrument and its date, and it signals the same institutional posture: a state regulator extending licensing coverage into financial-services activity that had previously sat outside direct state oversight.

The standing AML supervisory architecture for Vermont remains the Vermont Money Services Act under 8 V.S.A. chapter 79, with the Department of Financial Regulation as the designated state supervisor for non-bank money transmitters, operating alongside the federal Bank Secrecy Act framework and FinCEN money-services-business registration. Vermont's 2025 participation in a 47-state coordinated enforcement action against Block, Inc. over its Cash App product's Bank Secrecy Act and anti-money-laundering compliance is standing context predating the window and is noted here only as backdrop to the supervisor's existing posture, not as new material.

Cross-Monitor Connections

The virtual-currency kiosk restriction and the expanded money-transmission definition both touch ground that a payments-focused reading would treat as licensing and market-access architecture, and a crypto-focused reading would treat as licensing and classification architecture: the same statutory text, read through different lenses, is the throughline of the Vermont material. The commercial-financing licensing regime, while adjacent to money-service-business supervision, points toward a broader non-bank-credit oversight question rather than a sanctions, beneficial-ownership, or conflict-finance one, and is flagged here for a reader tracking enabler-jurisdiction and professional-facilitator dynamics across the small-business lending space rather than for a reader tracking illicit-finance typologies directly.

Outlook

The open question carried is definitional: whether Vermont's virtual-currency-kiosk restriction is permanent or whether it lifts on 1 July 2027. Until the Department of Financial Regulation or a fuller read of the enacted statute resolves this, both possibilities should be treated as live, with the enacted text favouring an unconditional restriction. The commercial-financing licensing regime's 1 July 2027 commencement is a second date to track, as is the possibility that primary Department of Financial Regulation guidance will eventually displace the secondary-source corroboration relies on. No new sanctions, beneficial-ownership, conflict-finance, or compliance-technology signal was identified for Vermont; the state's regulatory energy this period was concentrated entirely on virtual-currency and non-bank-financing licensing architecture.

Lead Signal

Vermont enacted Act 142 in 2026, a single legislative vehicle that reaches two distinct corners of the states financial-crime perimeter at once. The statute permanently bans the location, operation or offering of virtual-currency kiosks anywhere in Vermont, terminating every existing kiosk registration effective July 1, 2026 and imposing a six-year records-retention tail running to 2031. The same act expands the statutory definition of money transmission under 8 V.S.A. chapter 79 to expressly include virtual-currency business activity, a definitional move that brings virtual-asset service providers fully inside the Vermont Money Transmitter Acts BSA/AML licensing perimeter. The ban did not emerge from an abstract policy preference. The Vermont Department of Financial Regulations own report under 8 V.S.A. section 2577(g) documents virtual-currency kiosks as a vehicle for routing scam and fraud proceeds, giving the legislative response a traceable evidentiary basis rather than a generalized anti-crypto posture. Read together, the kiosk ban and the definitional expansion read as a structural tightening of the states crypto-adjacent AML perimeter: one closes an identified cash-in channel for illicit proceeds, the other widens the net of who must hold a license and run a compliance program in order to touch virtual-currency activity at all in the state.

The architecture-over-incident reading matters here. This is not an isolated enforcement action against a single kiosk operator; it is a legislature permanently removing an entire channel-type from the regulated landscape while simultaneously widening the definitional gate that determines who needs a license to operate in virtual currency at all. That combination of elimination and expansion is the more analytically significant pattern, more durable than any single case outcome would have been.

Other Developments

A new commercial-financing licensing regime sits on the horizon. Act 142 also introduces a lender and loan-solicitation license for sales-based financing and factoring providers, carrying TILA-style disclosure and estimated-APR requirements, with an effective date of July 1, 2027. This is a cross-pillar compliance-technology and market-structure item rather than a typical AML finding: industry participants have not generally treated merchant-cash-advance-style and factoring products as licensed lending, so the run-up to the 2027 effective date opens a compliance gap worth tracking as firms determine whether their products fall inside the new perimeter.

The enabler-jurisdiction angle traces back to the states own typology work. The Department of Financial Regulations section 2577(g) report is the documentary hinge connecting the kiosk channel to fraud-proceeds routing. That a state regulator produced and published its own typology finding, and then saw it translated directly into statute within the same cycle, is itself a notable data point about how enabler-channel identification can move quickly from regulatory report to binding prohibition when the evidentiary chain is clean.

The standing AML/BSA licensing regime for money transmitters now has a wider aperture. Virtual-currency exchangers and custodial-wallet providers already fell within the Vermont Money Transmitter Acts NMLS-administered licensing, surety-bonding and BSA/AML compliance-program requirements; Act 142s definitional expansion simply confirms and hardens that virtual-currency business activity sits squarely inside that perimeter going forward, removing any residual argument that such activity sat outside money-transmission licensing.

Cross-Monitor Connections

The kiosk ban and money-transmission expansion both touch ground that the Crypto monitor and the World Payments monitor also cover from their own vantage points: licensing-perimeter changes of this kind are the kind of structural shift that typically appears as a tightening signal in a payments-licensing tracker and as a licensing-regime change in a digital-asset tracker, even though the underlying fact pattern is one and the same legislative act. The compliance-technology angle in the new commercial-financing license likewise intersects with how non-bank lenders and factoring platforms are treated across state licensing regimes more broadly, a theme that recurs wherever states extend licensing perimeters to previously under-regulated financial products.

Outlook

The near-term marker to watch is whether the Department of Financial Regulation issues implementing guidance interpreting the expanded money-transmission definition specifically as it applies to custodial-wallet or exchange activity; no such guidance had been located as of this cycle, leaving a documented gap between the statutory text and its operational application. A second marker is whether any enforcement action follows the July 1, 2026 termination of existing kiosk registrations; none had been identified as of this cycle. On the commercial-financing side, the run-up to the July 1, 2027 effective date for the new lender and loan-solicitation license is the item to track, particularly given the gap between how sales-based financing and factoring providers have operated to date and how the new licensing regime will treat them once in force.

Lead Signal

Vermont has converted a time-limited moratorium on virtual-currency kiosks into a permanent statutory ban. Act 142, enacted 16 June 2026 and effective 1 July 2026, amends 8 V.S.A. Chapter 79 to prohibit locating, operating, or otherwise making available a virtual-currency kiosk anywhere in the state. The move follows a Department of Financial Regulation finding that the prior moratorium had already driven a reduction of more than 94 percent in the number of cash-accepting kiosks operating in Vermont, and it reflects a recommendation from Attorney General Charity Clark that the protective measures already in place were insufficient to address ongoing consumer-fraud exposure at these access points. The architecture here is the significant fact, not any single enforcement episode: Vermont has permanently closed a recognised cash-to-crypto conversion channel that has featured prominently in romance-scam and impersonation-fraud typologies nationally, rather than layering additional disclosure or transaction-limit conditions onto continued kiosk operation. This is a structural foreclosure, and it sits alongside a customer-identification duty under 8 V.S.A. Section 2577(g) that required kiosk operators to verify identity before accepting payment and barred anonymous or third-party-identity transactions. That duty is now largely moot for new kiosk deployment given the permanent ban, though it remains binding on any kiosk that may retain legacy-exempt status.

Act 142 also creates a new licensing and disclosure regime for commercial-financing providers under Title 8, with an effective date of 1 July 2027, a full year after the kiosk provisions take hold. This is a forward horizon item drawn from secondary legal-alert coverage rather than the enacted statutory text directly, and implementing guidance from the Department of Financial Regulation has not yet been published, so the compliance-readiness gap for affected non-bank providers cannot yet be assessed.

Other Developments

Vermont's virtual-currency business activity continues to be regulated as money transmission under 8 V.S.A. Chapter 79, with licensure required for exchanging, storing, administering, buying, selling, receiving, or transmitting virtual currency. There is no dedicated Vermont financial intelligence unit; federal Bank Secrecy Act and FinCEN requirements govern in parallel with the state licensing regime. This is a stable baseline finding rather than a new development, but it frames why the kiosk ban matters: the state licensing perimeter was already comprehensive on paper, and the specific gap being closed is the physical cash-acceptance point rather than the licensing architecture itself.

The commercial-financing licensing regime represents a second, slower-moving strand of Act 142 distinct from the virtual-currency provisions, extending Title 8 licensing and disclosure obligations to a class of non-bank commercial-financing providers that previously operated outside dedicated state licensure. The one-year lag between the kiosk ban's effective date and the commercial-financing regime's effective date suggests a staged legislative rollout rather than a single unified reform, and readers should not conflate the two timelines.

Cross-Monitor Connections

The kiosk ban functions as a physical access-point closure with direct relevance to consumer-protection and payments-market-structure readings carried elsewhere in the fleet; the underlying instrument is the same Act 142 text examined here for its illicit-finance-vector implications. The commercial-financing licensing regime, once implementing guidance emerges, will generate AML/CTF regime-as-record findings for a newly captured category of non-bank lender that has not previously been subject to Vermont-specific governance obligations.

Outlook

The commercial-financing licensing regime is scheduled to take effect 1 July 2027, as adopted under Act 142; Department of Financial Regulation implementing guidance had not been published as of this cycle, and the compliance-readiness posture of affected non-bank providers remains unassessed pending that guidance. Whether any kiosks retain legacy-exempt status under a grandfather provision, and how the customer-identification duty under Section 2577(g) would apply to such a kiosk in practice, are open questions this cycle did not resolve.

Lead Signal

Vermont has extended its virtual-currency-kiosk moratorium a further year, from 1 July 2026 to 1 July 2027, under Act 142 (H.648), signed 16 June 2026. This is the third consecutive annual amendment to 8 V.S.A. Chapter 79, Vermont's money-transmission and virtual-currency regime, following the 2024 rebuild under Act 110 and a further amendment under Act 23 in 2025. Read individually, each amendment is a modest legislative act. Read as a sequence, the pattern is architectural rather than episodic: Vermont's legislature has chosen, in three consecutive sessions, to tighten virtual-currency-specific money-transmission controls incrementally rather than settle on a fixed framework and leave it. This is the kind of structural signal that a purely incident-based reading of state gambling or fintech regulation would miss entirely.

Other Developments

Commercial-financing licensing regime introduced. Act 142 also introduces a wholly new licensing and disclosure regime for commercial-financing providers and brokers — specifically sales-based financing and factoring transactions — requiring covered providers and brokers to obtain a Vermont Department of Financial Regulation licence and provide standardized disclosures. This regime is not yet effective; it takes effect 1 July 2027, the same date the extended kiosk moratorium is currently set to expire. The new regime expands DFR's obliged-entity supervisory perimeter beyond money-transmission and virtual-currency businesses into a previously-unlicensed corner of commercial lending, ahead of any confirmed implementing-rules detail beyond the statutory text.

Standing money-transmitter capital requirement unchanged. Money-transmitter licensees in Vermont continue to be subject to a minimum $100,000 surety bond requirement, a standing capital-adequacy control that has not moved this cycle and continues to apply to virtual-currency businesses operating under the money-transmission licence umbrella.

Cross-Monitor Connections

The kiosk-moratorium extension and the new commercial-financing licensing regime both sit inside Vermont's payments-and-money-transmission regulatory perimeter, which the world-payments monitor tracks from the licensing-and-market-access angle; a reader following the payments-structural side of this development should consult that monitor's treatment of Vermont this cycle. No sanctions-architecture, beneficial-ownership, or conflict-finance connection was identified for Vermont in the evidence available this cycle.

Outlook

Given the three-consecutive-year pattern of annual amendment to Chapter 79's virtual-currency provisions, a further extension of the kiosk moratorium in the 2027 legislative session is a plausible trajectory, though this is not confirmed by any evidence available this cycle and should be treated as an open question. The commercial-financing licensing regime's 1 July 2027 effective date is the nearer-term structural milestone to track, alongside whether DFR issues implementing rules or guidance beyond Act 142's statutory text — no such guidance was located this cycle.

Lead Signal

The clearest signal this cycle is architectural rather than incident-specific: Russia-linked shadow-fleet vessels are showing rising AIS transponder blackout rates at the same time as sustained blocking sanctions from OFAC, OFSI, and the EU remain in place against Rosneft, Lukoil, Surgutneftegas, and Gazprom Neft. The co-occurrence of rising evasion signal and unchanged designation pressure is itself the finding: the evasion architecture underlying Russian crude exports appears to be adapting faster than the designation regime is closing it down, a structural read rather than a single-incident one.

Other Developments

AMLA completes its institutional handover. The EU's Anti-Money Laundering Authority formally absorbed the full AML/CFT supervisory mandate from the European Banking Authority effective January 1, 2026, and closed its consultation on the methodology for selecting the roughly forty highest-risk cross-border entities that will move to AMLA direct supervision from 2028. This is the definitive institutional handover point in the EU's supervisory build-out, ahead of the AML Regulation's direct-applicability date of July 2027.

Cambodia's enabler-environment pattern persists. A politically-connected conglomerate, Lim Heng Group, is alleged to have leased premises at the Royal Hill Resort and Casino site to operators later running an industrial-scale cyber-scam and human-trafficking compound. Separately, OFAC designated the linked Bolai/K99 network for coercing trafficking victims into digital-asset fraud targeting Americans, with at least seventy-three million dollars laundered through US-based co-conspirators. Both findings surface despite Cambodia's 2023 exit from the FATF grey list, underscoring that grey-list removal did not resolve the casino-junket sector's function as an enabler channel.

Vermont closes a crypto on-ramp. Act 142 converts what had been a temporary moratorium into a permanent, statewide ban on virtual-currency kiosks, effective July 1, 2026, terminating all existing kiosk registrations. The instrument sits in the state's general financial-services statute rather than a crime-specific one, but it is a genuine channel closure rather than a symbolic gesture.

FinCEN moves on two fronts. A supplemental alert addressing southern-border fiscal fuel-theft and tax-evasion schemes tied to CJNG was coordinated with OFAC sanctions against two individuals and nine entities. Separately, FinCEN's proposed rule to operationalise a BSA and sanctions whistleblower programme, offering ten to thirty percent of collected penalties above one million dollars, signals an incentive-driven enforcement posture extending beyond BSA-covered institutions into any entity with sanctions exposure; this rulemaking is sourced here through secondary legal-analysis commentary and has not been independently re-verified against the FinCEN text this cycle.

FATF grey list moves. The June 2026 Plenary added Iraq and Bosnia and Herzegovina to the grey list and removed Algeria and Namibia, leaving twenty-two jurisdictions under increased monitoring.

UBS penalised for recidivist BSA violations. FinCEN imposed a 125 million dollar penalty on UBS Financial Services Inc. for recidivist Bank Secrecy Act violations.

Mexican institutions excluded from the US financial system. FinCEN Section 311 special measures now prohibit covered US financial institutions from transmitting funds to or from CIBanco, Intercam, and a third Mexican financial institution, over opioid-trafficking-linked money-laundering exposure.

Cross-Monitor Connections

The Russian shadow-fleet finding routes directly to conflict-finance monitoring: continued crude-export evasion sustains war-economy financing, though this cycle's coverage is confined to the Russia-Ukraine corridor with no fresh sub-Saharan Africa or Latin America material located. The Cambodia findings connect enabler-jurisdiction and conflict-finance-adjacent monitoring lines, given the politically-connected nature of the implicated conglomerate and the scale of the underlying trafficking-and-fraud compound economy. The Vermont and Bolai/K99 findings both route to crypto-infrastructure monitoring: one is a regulatory channel closure, the other is continued illicit exploitation of a different digital-asset vector, and both surfaced in the same cycle.

Outlook

The AMLA handover and the FATF grey-list movement are the two developments most likely to generate follow-on obligations for obliged entities in coming cycles: AMLA's technical standards are largely due by July 2026 ahead of the 2027 AMLR enforcement date, and grey-list-driven enhanced due diligence obligations now extend to Iraq and Bosnia and Herzegovina. On the enforcement-incentive side, FinCEN's whistleblower rulemaking remains at the proposal stage with a comment period that closed June 1, 2026; its next material marker will be a final rule or further FinCEN commentary. The shadow-fleet evasion pattern remains the highest-severity unresolved thread of the cycle, given that rising AIS blackout rates alongside unchanged designation activity suggest the current sanctions posture is not closing the evasion gap.