United States — Washington State US-WA

The sanctions-evasion exposure of Washington State this cycle runs primarily through two channels: a corrected picture of Russian crypto-sanctions evasion infrastructure, and continuing dual-use parts diversion out of the aerospace manufacturing base located in the state. On the crypto side, a designation by OFAC in August 2025 naming Grinex a sanctions-evasion successor to the dismantled Garantex exchange was omitted from the original enforcement timeline entirely, a gap that materially understated how long the Garantex evasion architecture persisted after its March 2025 takedown. Grinex operated as a functioning successor for roughly eight months before its own suspension in April 2026 -- a period during which the underlying Russian sanctions-evasion crypto architecture continued to function largely undisturbed. The stated cause of that suspension was a cyberattack, but on-chain evidence has raised a question, assessed only at possible confidence, about whether this was a genuine disruption or a false-flag exit scam engineered by the operators themselves. The distinction carries real analytical weight: a genuine takedown would suggest continuing law-enforcement or platform-security pressure on this evasion architecture, while an exit scam would imply the operators retained full control over the timing and framing of their exit, with successor infrastructure likely already in preparation. Either reading is consistent with the broader pattern observed since the original Garantex dismantlement -- that removal of a single node has not eliminated demand for Russian-linked crypto sanctions-evasion capacity, only displaced it.

The second channel is physical rather than digital. Aircraft parts originating from the Puget Sound aerospace manufacturing base, most consequentially components linked to Boeing, continue to be diverted to sanctioned Russian carriers via third-country intermediaries in non-sanctioning jurisdictions including India and the United Arab Emirates. Applying the three-level sanctions-architecture analysis central to this filter: the scheme itself is indirect parts re-routing; the enabling architecture is a layer of third-country intermediary shell companies interposed between the Western supplier and the sanctioned end-user; and the strategic consequence is sustained Russian aviation capacity, both civil and military-adjacent, which in turn sustains the broader war-economy financing picture tracked under conflict-finance coverage. This is a structural enforcement gap rather than a single incident: the mechanism exploits the difficulty of enforcing export controls against indirect, multiply-intermediated supply chains, and its persistence across reporting cycles is itself the signal, independent of any single seizure or designation.

Two further developments sit at the sanctions-regime level rather than the scheme level. The February 2026 plenary of FATF added Kuwait and Papua New Guinea to its Jurisdictions Under Increased Monitoring list, implemented domestically via a FinCEN notice and binding enhanced due-diligence obligations on institutions domiciled in Washington with counterparty exposure to those jurisdictions; the Call for Action list of Iran, DPRK, and Burma remained unchanged, indicating no shift in the highest-tier risk classification this cycle. Separately, the maximum-pressure sanctions regime imposed on Iran under NSPM-2 continues to exceed the sanctions measures maintained by the EU, UK, and the FATF call-for-action baseline. This divergence is not new this cycle, but it remains a live source of compliance friction for multinationals headquartered in Washington -- several of the largest employers in the state maintain global counterparty networks -- that must reconcile a stricter US blocking regime against partner-jurisdiction frameworks permitting transactions the US treats as sanctionable.

Taken together, the trajectory of this domain is assessed as deteriorating, with a severity_preliminary rating of elevated. The deterioration is driven less by any single new designation than by the corrected understanding that evasion architecture -- both the crypto exchange layer and the physical parts-diversion layer -- has proven more durable and less interrupted than earlier reporting suggested.

Outlook

The immediate watch items are the possible emergence of further successor infrastructure to Garantex or Grinex, and any export-enforcement action by OFAC or the Bureau of Industry and Security addressing the aerospace parts-diversion networks specifically, as opposed to the downstream sanctioned end-users. The next plenary of FATF, expected October 2026, will reassess both the Increased Monitoring and Call for Action lists and may alter the enhanced due-diligence scope applicable to institutions domiciled in Washington. None of these forward items should be read as predictions; they are scheduled or plausible inflection points against which the current elevated severity assessment should be re-tested next cycle.

The beneficial-ownership transparency picture for Washington State regressed structurally this cycle rather than through any single enforcement event. An interim final rule issued by FinCEN in March 2025 narrowed Corporate Transparency Act beneficial-ownership disclosure obligations to foreign companies registered to do business in the United States, exempting all domestic reporting companies -- including every entity incorporated in Washington -- from the federal BOI reporting regime entirely. Washington maintains no independent state-level beneficial-ownership registry to serve as a substitute, meaning this single rule change removed essentially the entire mandatory BO-transparency backstop that had applied to corporate structures, fund vehicles, and high-net-worth personal holding entities domiciled in the state. Applying the architecture-over-incident principle central to the method of this monitor: a structural transparency regression of this scope carries greater analytical weight than any individual beneficial-ownership-related enforcement action could, because it changes the default visibility of ownership structures across the entire population of Washington-incorporated entities rather than addressing a single bad actor.

It is worth stating plainly what this regression enables rather than only what it removes. The exemption does not itself indicate wrongdoing by any entity incorporated in Washington; the analytical significance lies in the widened opacity surface it creates for anyone seeking to exploit a domestic corporate structure to obscure beneficial ownership, whether for money-laundering, sanctions-evasion, or foreign-influence purposes. The absence of a substitute state registry is itself a signal under the enablement-as-signal principle applied by this monitor: no legislative response has been identified in the current evidence base to fill the gap left by the federal exemption, and that absence is analytically relevant independent of whether any exploitation has yet been documented.

This jurisdiction-level finding should be read against the standing architecture of the beneficial-ownership and corporate-transparency framework maintained by the European Union, which, while not directly applicable to a US sub-national jurisdiction, provides the comparative structural baseline against which US developments are assessed under this methodology. The EU AML Package consists of three distinct instruments: the AML Regulation, known as the AMLR (Regulation (EU) 2024/1624), which is directly applicable across member states without domestic transposition; the sixth AML Directive, known as 6AMLD, which each member state transposes into national law individually; and the AMLA Regulation (Regulation (EU) 2024/1620), which establishes the Anti-Money Laundering Authority. Together these three instruments are shifting supervision of high-risk cross-border obliged entities from a purely national-authority model toward a hybrid regime in which the Authority exercises direct supervision over a defined set of entities while indirect supervision continues to operate through national authorities. No AMLA-specific horizon anchor was carried by research this cycle for Washington State, and the jurisdiction sits outside the perimeter of the EU AML Package in any event, so this paragraph states the architecture as durable standing context rather than as a new development; it is the structural backdrop against which any future comparison involving Washington-domiciled entities with EU exposure should be read, not a claim of new activity this cycle.

The population affected by the domestic-entity exemption spans fund structures, ordinary corporates, and high-net-worth personal holding vehicles across the cross-sector spectrum, per the customer-typology exposure recorded against this finding, meaning the regression is broad in scope rather than confined to any single sector of the Washington economy. The trajectory of this domain is assessed as deteriorating, with a severity_preliminary rating of high, reflecting the structural rather than episodic nature of the effect of the CTA/BOI exemption on entities domiciled in Washington.

Outlook

The principal forward question is whether any legislative response, at either the federal or Washington State level, narrows or reverses the domestic-entity BOI exemption; no evidence of such a response currently exists in the record. A secondary watch item is any further rulemaking by FinCEN that could adjust the scope of the exemption in either direction. Given the structural nature of this finding, its resolution is more likely to be measured in years than in weeks, and its next material test will be whether beneficial-ownership opacity involving any entity domiciled in Washington is specifically implicated in a future enforcement action.

The enabler-jurisdiction exposure of Washington State this cycle is defined by a capacity-deficit dynamic rather than a deliberate policy choice on the part of the state itself. A reinterpretation by the Office of the Comptroller of the Currency now allows crypto firms to obtain a federal trust charter that preempts state-level anti-money-laundering and consumer-protection oversight, including the practical supervisory reach historically exercised by Washington DFI over crypto entities operating in the state. This preemption trend mirrors the precedent set by the earlier migration of Paxos away from oversight by the New York State Department of Financial Services, and its documentation as of May 2026 suggests an established rather than emerging pattern. Under the enabler-jurisdiction filter applied by this monitor, the analytical question is not whether Washington DFI has chosen to relax its supervisory posture -- the corrected enforcement record established elsewhere this cycle shows the opposite, an active state regulator pursuing multiple enforcement actions -- but whether the state retains the practical capacity to supervise entities that elect to migrate to a federal charter. The reinterpretation by the OCC reduces that capacity by design, regardless of the enforcement appetite maintained by Washington DFI.

This capacity reduction does not occur in isolation. It compounds a parallel federal-level development: a 33 percent cut to the national IRS crypto-AML examiner workforce, from 208 agents to 139 in 2025, which reduces the supervisory bandwidth available to the federal government over money-services businesses and virtual-asset service providers, including the crypto-ATM operators concentrated in Washington. The multi-tiered US AML supervisory architecture depends on redundancy across federal, quasi-federal, and state layers; both developments recorded in this domain narrow one layer of that redundancy at the same time as a separate finding this cycle demonstrates the state layer functioning actively. The net effect, read across domains, is a structural narrowing of supervisory capacity precisely where a corrected record shows enforcement activity being generated. The dense concentration of licensed virtual-asset service providers and crypto-ATM operators in Washington magnifies the significance of this dynamic relative to the size of Washington as a single US sub-national jurisdiction: the state functions as a structurally significant node for both sanctions-evasion-adjacent and proliferation-finance-adjacent typologies well beyond what its share of the national financial system would suggest.

This dynamic is best read alongside the corrected enforcement record documented under the crypto and financial-innovation domain covered elsewhere in this brief: an actively functioning state regulator whose practical jurisdiction is nonetheless narrowing by federal design is a materially different risk picture from either a captured regulator or an absent one, and the distinction matters for how counterparties and correspondent institutions should weight Washington-specific supervisory assurances going forward. This is a jurisdiction-agnostic enablement finding, consistent with the standing methodology of this monitor of assessing jurisdictions for what their frameworks enable as much as what they enforce: it does not allege that either the OCC or Washington DFI has acted in bad faith, only that the combined effect of federal chartering policy and federal examiner capacity reductions is to narrow the practical supervisory perimeter available to catch illicit activity routed through crypto and payments infrastructure domiciled in Washington. The trajectory of this domain is assessed as deteriorating, with a severity_preliminary rating of elevated, reflecting a capacity-side rather than enforcement-side risk driver.

Outlook

The principal forward question is quantitative: how many crypto and virtual-asset-service-provider firms domiciled in Washington migrate to OCC national trust charters, and what resulting reduction in the practical supervisory reach of Washington DFI follows. No such data currently exists in the evidence base, and its absence is itself flagged as a research gap. A secondary watch item is whether the IRS restores any of the examiner capacity that was cut, or whether further staffing reductions follow. Neither development should be read as predetermined; both remain open questions for the next research cycle to test against the corrected state-enforcement baseline established this cycle.

No jurisdiction-specific conflict-finance or extractive-industry development was identified for Washington State this cycle. This is recorded as a quiet domain rather than an omission: the domain tracker maintained by the interpreter explicitly assessed D4 as stable, with no-change status and a monitored severity_preliminary rating, rather than leaving the domain unaddressed. The one point of contact with this domain is indirect: the aerospace dual-use parts diversion pattern documented under the sanctions-architecture coverage of this monitor -- aircraft parts originating from Puget Sound re-routed to sanctioned Russian carriers via third-country intermediaries -- carries a secondary conflict-finance dimension insofar as it sustains Russian military and civil aviation capacity within the broader war-economy financing picture tracked elsewhere in the coverage of this monitor. No independent D4 finding specific to Washington State is asserted on that basis alone; the cross-reference is noted for completeness rather than treated as a standalone development.

Consistent with the honesty-over-coverage principle applied by this monitor, this sub-brief is intentionally limited rather than padded. A jurisdiction of the size and economic character of Washington State, with no domestically based extractive industry of the scale that typically generates independent D4 signal, and no documented conflict-finance channel distinct from the aerospace cross-reference already covered, is not expected to generate material D4 content every cycle, and the absence of such content this cycle should not be read as an active judgment that no conflict-finance exposure exists, only that none was identified in the current evidence base.

Outlook

The watch item for this domain remains whether the aerospace parts-diversion pattern generates any conflict-finance-specific enforcement action, as opposed to a sanctions-architecture action, that would justify an independent D4 finding for Washington State in a future cycle. Absent such a development, this domain is expected to remain quiet.

This is the domain in which the central corrective finding of this cycle sits. Baseline reporting had claimed there was zero enforcement activity by the Washington State Department of Financial Institutions relevant to crypto and payments firms; that claim is factually incorrect. The corrected record establishes at least three material state-level actions: a November 2025 Statement of Charges and Temporary Order to Cease and Desist against crypto-ATM operator Coinme Inc, alleging unsafe and unsound practices, inadequate tangible net worth, and unfair claiming of customer voucher funds as income; a February 2026 consent order with CoinZoom Inc requiring cessation of Uniform Money Services Act violations and surrender of its money transmitter licence; and co-leadership by Washington DFI, alongside six other states, of an 80 million dollar multistate enforcement action against the Cash App product operated by Block Inc for Bank Secrecy Act and anti-money-laundering program violations, announced in January 2025. Taken together, these three actions establish an active, if previously under-cited, state supervisory posture operating alongside major federal enforcement.

That federal enforcement layer has itself been active and, in one respect, materially corrected this cycle. A Section 311 designation issued by FinCEN naming Huione Group a primary money-laundering concern, effective October 14, 2025, severed the access of the Cambodia-based conglomerate to US correspondent and payable-through accounts, binding Bank Secrecy Act-covered institutions and virtual-asset service providers domiciled in Washington to cease dealings with an entity functioning as a central laundering hub for the broader Southeast Asian scam-compound ecosystem. A parallel designation by OFAC of the Prince Group Transnational Criminal Organization, alongside a Department of Justice indictment and a record 15 billion dollar civil forfeiture filing in October 2025, targeted 146 individuals and entities tied to crypto-enabled scam and forced-labor operations. The framing of that original designation -- an unresolved jurisdictional and extradition dispute centered on Chen Zhi -- has since been superseded: Chen Zhi was stripped of Cambodian citizenship and extradited to China in January 2026, and the June 2026 expansion by OFAC of the Prince Group designation to nine additional individuals and 26 entities, including second-in-command Hu Xiaowei and CCU Commercial Bank, confirms that the financial infrastructure of the network, not the legal status of any single principal, remains the operative analytical unit.

A distinct but related typology within this domain concerns proliferation finance rather than conventional money laundering. Infiltration by DPRK IT workers into the concentrated technology and crypto employment sector of Washington continues, per assessment by OFAC and Chainalysis, to generate hundreds of millions of dollars annually for weapons programs maintained by the regime, through falsified-identity remote hires whose wages and freelance proceeds are routed through crypto exchanges and OTC brokers back to DPRK-linked wallets. This typology sits within the counter-proliferation-finance pillar of the AML/CTF/CPF three-pillar framework specifically, a pillar the methodology of this monitor flags as structurally under-weighted relative to conventional AML enforcement volume, and its persistence alongside the scam-compound and sanctions-evasion findings above illustrates the breadth of typologies converging on the crypto and technology-sector concentration of Washington.

The dense virtual-asset-service-provider and crypto-ATM commercial base of Washington also sits at the center of a retail-facing scheme this monitor tracks independently: a crypto-ATM and kiosk cash-out pipeline in which scam victims are instructed to deposit cash at kiosks using scammer-provided QR codes, with the converted virtual currency then layered through peel chains, cross-chain bridges, and high-risk offshore exchanges. This scheme is the retail-facing counterpart to the Huione and Prince Group findings above: it is the origination layer feeding proceeds into the laundering infrastructure those designations targeted, and its persistence is a reminder that designation of upstream laundering hubs does not by itself eliminate retail-facing exploitation of the kiosk infrastructure present in Washington.

On the regulatory horizon, the permitted-payment-stablecoin-issuer framework under the GENIUS Act requires federal regulators to finalize implementing regulations by July 18, 2026, with the full statutory framework applicable no later than January 18, 2027 -- a deadline that will require fintech and crypto-ATM firms domiciled in Washington to align with new Bank Secrecy Act obligations specific to stablecoin issuance. The trajectory of this domain is assessed as mixed and its severity_preliminary rating as high, reflecting the coexistence of genuinely active enforcement, both federal and, contrary to the original baseline, state, with the structural supervisory-capacity erosion documented elsewhere in this brief.

Outlook

The GENIUS Act implementing-regulation deadline of July 18, 2026 is the most concrete near-term event in this domain and will materially affect the compliance posture of stablecoin-adjacent firms domiciled in Washington. Beyond that date, the durability of the corrected Washington DFI enforcement record itself is a watch item: whether the department pursues further actions consistent with the three already documented, or whether this cycle correction proves to be an artifact of catching up on a backlog rather than a genuinely active ongoing posture, remains to be tested in subsequent cycles.

This domain captures a genuine structural tension this cycle between a proactive-compliance policy direction and a shrinking supervisory-capacity backstop. A proposed rule by FinCEN to reform financial-institution anti-money-laundering program requirements -- comment period closed June 9, 2026, with finalization expected between the fourth quarter of 2026 and the first quarter of 2027 -- would shift banks and other Bank Secrecy Act-covered institutions from prescriptive, check-the-box compliance toward risk-based, reasonably-designed program design. Read on its own, this represents the outcomes-focused compliance-technology thesis tracked under the standing methodology of this monitor: a move toward programs judged on effectiveness rather than adherence to a fixed checklist.

That proactive direction runs directly against a countervailing capacity development also recorded this cycle: a 33 percent cut to the national IRS crypto-AML examiner workforce, from 208 agents to 139 in 2025, which reduces the bandwidth available to the federal government to supervise and test whether the risk-based programs of institutions are, in practice, reasonably designed. A risk-based standard is only as effective as the supervisory capacity available to verify it; a reform that shifts the compliance burden toward institutional judgment while simultaneously reducing the examiner base available to test that judgment is a structural tension this monitor flags explicitly rather than resolves, since the evidence base does not establish which effect will dominate.

The corrected enforcement record of Washington State, established this cycle, is directly relevant to the assessment of this domain as well. Co-leadership by Washington DFI of the 80 million dollar multistate enforcement action against the Cash App product operated by Block Inc, announced in January 2025, targeted Bank Secrecy Act and anti-money-laundering program governance failures specifically, a control-framework finding rather than a screening or sanctions-list failure, and demonstrates that at least one state-level regulator retained both the willingness and the practical capacity to test program adequacy during the same period in which federal examiner capacity was contracting. This corrected finding is itself evidence that the compliance-technology and active-defence layer of the US AML architecture is not uniformly weakening; it is thinning unevenly, with at least one state regulator functioning as an active-defence node even as the federal examiner layer narrows.

The structure of the Cash App enforcement action is itself an active-defence signal worth noting independently of its underlying findings under the Bank Secrecy Act: a seven-state multistate coalition co-led by Washington DFI represents a horizontal compliance-technology and supervisory-coordination mechanism distinct from the vertical federal-to-state architecture more commonly assessed under the enabler-jurisdiction filter of this monitor. Whether this coalition model persists or expands to address other national payments and crypto firms is itself a compliance-technology development worth tracking independently of the enforcement outcome of any single firm.

The trajectory of this domain is assessed as mixed, with a severity_preliminary rating of elevated, reflecting the coexistence of a genuinely proactive federal rulemaking direction with a genuinely contracting federal supervisory-capacity backstop, partially offset by demonstrated state-level program-governance enforcement capacity.

Outlook

Finalization of the FinCEN AML program reform rule, expected between the fourth quarter of 2026 and the first quarter of 2027, is the key forward event for this domain; its final form will determine whether the risk-based standard is accompanied by any compensating examination-capacity commitment. Absent such a commitment, the structural tension identified this cycle is likely to persist into subsequent reporting periods, and the enforcement record of Washington DFI should be watched as an indicator of whether state-level capacity can continue to substitute, even partially, for contracting federal examiner bandwidth.