United States — Wyoming US-WY

The first-cycle baseline for United States - Wyoming surfaces a documented sanctions-architecture finding rather than an isolated enforcement episode. A DPRK IT-worker fraud and crypto-laundering network, which generated close to USD 800 million in 2024 for weapons programs, has been shown to route through US shell entities, including Wyoming-registered firms named in a 2024 FBI affidavit. Applying a three-level architecture reading: at the scheme level, DPRK operatives embedded as fraudulent remote IT workers collect wages in USDC and USDT; at the architecture level, proceeds consolidate through Wyoming and other US shell entities before moving through OTC traders, mixers, and cross-chain bridges across Russia, China, the UAE, Vietnam, and Laos; at the strategic-consequence level, the funds flow toward WMD and ballistic-missile program financing. This is state-directed sanctions evasion and proliferation financing, not opportunistic private crime, and the DPRK states direction of the laundering apparatus is the structural fact that elevates this above a routine designation.

OFAC has responded with two designation waves, in July 2025 naming Song Kum Hyok and four Russia-based entities, and in March 2026 naming six additional individuals and two entities, expanding the sanctioned-address set across multiple blockchain networks. What is analytically significant is the absence documented alongside this enforcement: no parallel UK OFSI or EU Council listing of the same named facilitators has been identified. This designation-tempo divergence is a regime-divergence signal in its own right - it creates a compliance gap for non-US institutions that rely on domestic sanctions lists when screening counterparties connected to Wyoming-linked entities, since a counterparty cleared against a UK or EU list may still carry OFAC-designated exposure.

Wyomings own response sits at a different level entirely. In February 2025 the state enacted expedited dissolution authority permitting the Secretary of State to dissolve shell companies submitting false formation records or linked to foreign adversaries, following the 2024 dissolution of Sheridan-registered entities named in the FBI affidavit. This functions as a quasi-sanctions tool operating independently of federal OFAC listing tempo, but it is narrow - it addresses dissolution of already-identified bad actors rather than the upstream registered-agent vetting gap that allowed the entities to form in the first place. The sanctions-architecture reading of this cycle, therefore, is one of a documented and state-directed evasion network intersecting with a jurisdiction whose formation infrastructure remains structurally permissive even as its designation-adjacent enforcement (dissolution authority) and federal partner (OFAC) tighten around the edges.

Outlook

The sanctions-divergence gap between OFAC and its UK and EU counterparts is the single most actionable open question here: whether Wyomings shell-entity nexus draws matching international designations will determine whether non-US institutions face a persistent blind spot in screening Wyoming-linked counterparties, or whether the gap closes through diplomatic and enforcement coordination. Wyomings dissolution authority, while a genuine tool, does not resolve the underlying registered-agent oversight gap that the D3 tracker documents; further legislative reform is not expected before the February 2027 biennial session at the earliest. The trajectory for this domain is assessed as worsening, with the shell-entity nexus and the designation-tempo gap both moving in a direction that increases rather than reduces screening burden for financial institutions with Wyoming-linked exposure.

The United States sits outside the EU AML Packages direct regulatory perimeter, so the primary subject matter for this jurisdiction is domestic: Wyomings state-level corporate and trust statutes, layered against a narrowing federal disclosure backstop. Wyoming requires no state-level beneficial-ownership disclosure and no certified identity verification for LLC, corporation, or trust formation, a finding corroborated by ICIJ investigative reporting, academic comparative study, and FinCENs own historical shell-company assessment. The states so-called cowboy-cocktail structure permits an anonymous LLC to serve as trustee or controller of a trust, with a second layered LLC beneath it stripping any named natural person from the public record, without requiring assets to be physically transferred into the state. This structure is actively marketed to foreign ultra-wealthy clients by offshore intermediaries, including the Cyprus-based ConnectedSky, which positions Wyoming structures as superior to Cayman, Singapore, or New Zealand alternatives for asset shielding.

This state-level opacity is now compounded by a federal development that requires precise framing. FinCENs March 26, 2025 interim final rule exempts all US-formed entities, including Wyoming LLCs and trusts, from Corporate Transparency Act beneficial-ownership reporting. The correction that matters here: this is an interim rule, not a final one. The public comment period closed May 27, 2025, and FinCEN has stated intent to issue a final rule in 2026 - the exemptions operative status remains provisional and subject to revision or legal challenge, not a settled statutory rollback. Treating it as settled would overstate the finding; treating it as genuinely open, with a documented risk of confirmation, is the more accurate register. Separately, FinCEN signalled in September 2025 an intention to delete beneficial-ownership data already collected on domestic reporting companies, which would further erode the federal transparency backstop if finalized.

Globally, the EU AML Package sets the structural direction for beneficial-ownership transparency: it comprises three distinct instruments - the directly applicable AML Regulation (Reg (EU) 2024/1624), the sixth AML Directive requiring per-Member-State transposition, and the AMLA Regulation (Reg (EU) 2024/1620) establishing the Anti-Money Laundering Authority with a direct and indirect supervision perimeter that shifts obliged-entity oversight from purely national authorities toward a hybrid EU-level regime. For Wyoming, this architecture is not directly applicable - the United States falls outside the AMLR direct-applicability, 6AMLD transposition, and AMLA direct-supervision perimeters entirely. The only documented nexus is indirect: EU and Cyprus-based corporate-service intermediaries such as ConnectedSky actively market Wyoming structures to EU clients, meaning AMLA-era supervision of EU-based trust and company service providers is the operative control point for this cross-border risk, not any direct instrument reach into Wyoming itself. This durable structural backdrop is worth holding in view even though it is not this cycles primary story for a US sub-national jurisdiction.

Wyomings own FATF standing frames the domestic picture: the United States is rated compliant on 9 of 40 Recommendations, largely compliant on 23, partially compliant on 5, and non-compliant on 3 as of March 2024, with beneficial-ownership access flagged as a persistent effectiveness gap. Wyoming is not separately assessed sub-nationally by FATF, meaning national-level ratings do not capture state-specific structural permissiveness. It is also worth registering a limiting counter-fact: Wyoming trust and LLC structures provide anonymity from the public record, but this is independent of federal IRS trust-reporting requirements and bank KYC obligations, both of which continue to apply. The opacity, in other words, is real but not absolute.

Outlook

The single most consequential open question for this domain is whether FinCENs 2026 final rule confirms, narrows, or reverses the March 2025 domestic-entity exemption; this will determine whether the federal transparency backstop to Wyomings state-level opacity is restored, further eroded, or left in its current diminished state. A secondary open question is whether Wyomings legislature, having rejected registered-agent and trust-transparency reform in 2016, 2022, and 2023, will revisit BO-adjacent reform at its February 2027 biennial session. Absent either federal or state movement, the trajectory here remains worsening.

The enabler-jurisdiction reading of this cycles Wyoming baseline turns on a distinction the FIM methodology treats as central: capacity deficit versus political choice. A single registered-agent address at 30 N. Gould St. in Sheridan accounted for over 40 percent of new Wyoming incorporations between 2019 and 2024, operating an unlicensed, address-only service that requires no client vetting. Wyomings registered-agent statute requires no training, background checks, or beneficial-owner collection from agents forming entities at this volume. This concentration attracted COVID-relief fraud exposure, foreign politically-exposed-person activity, and was named in an FBI affidavit describing a North Korean sanctions-evasion scheme - the same DPRK IT-worker network assessed under D1.

What elevates this from a capacity gap to a structural, choice-driven finding is the legislative record. Wyomings legislature rejected registered-agent oversight and trust-transparency reforms in 2016, 2022, and 2023, with the trust-formation and registered-agent services industry itself cited as the effective opposition to reform. Only a narrow foreign-adversary dissolution law passed in February 2025, addressing already-identified bad actors rather than the upstream vetting gap; broader registered-agent licensing reform remains pending despite the Wyoming Secretary of State and Treasurer publicly describing such reform as critical. This is legislative capture sustaining a gap that political will alone could close - a materially different and more serious finding than a jurisdiction lacking the administrative capacity to supervise its incorporation industry.

A comparative academic study (Sharman) sharpens this further by finding that Wyoming and Nevada require no certified identity documents to form a company or open an associated bank account - a materially lower verification bar than classic offshore centres including Bermuda or the Cayman Islands. This finding undercuts the conventional onshore-versus-offshore risk framing that treats US states as inherently lower-risk than recognized secrecy jurisdictions; the evidence this cycle suggests the opposite ordering on this specific dimension.

The cross-border professional-facilitator dimension is also documented this cycle: the Cyprus-based intermediary ConnectedSky markets Wyoming LLC-trust secrecy structures to European ultra-wealthy clients, positioning them as superior to Cayman, Singapore, and New Zealand structures for asset shielding. This is a professional-enabler nexus linking a non-EEA secrecy jurisdiction (Wyoming) to EU-domiciled facilitators, a pattern directly relevant to how AMLA will eventually assess cross-border obliged-entity risk from the EU side, even though Wyoming itself sits outside AMLAs reach.

Outlook

The enabler-jurisdiction classification for Wyoming is assessed as worsening precisely because the documented gap is legislative choice rather than administrative incapacity - a distinction that makes near-term resolution less, not more, likely absent a change in the underlying political economy of Wyomings registered-agent industry. The February 2027 biennial legislative session is the next probable vehicle for reform, following three prior rejections; whether the registered-agent industrys opposition holds a fourth time will be the key indicator to watch. In the interim, the Sheridan address concentration and the ConnectedSky cross-border marketing nexus both continue to operate without the oversight that would flag or interrupt them.

Wyomings own regulatory environment for digital assets is the most developed at the US state level, and this cycle establishes both its scope and its principal exposure. The Wyoming Stable Token Commission conducted initial test issuance of FRNT, the first US state-issued fully-reserved stablecoin, between August and October 2025; public launch is corrected in this cycle to January 7, 2026, rather than the August 2025 date initially reported. FRNT is live across seven blockchains - Ethereum, Solana, Avalanche, Polygon, Arbitrum, Optimism, and Base - overseen by the Wyoming Stable Token Commission with Franklin Advisers as reserve manager. This sits alongside Wyomings established Special Purpose Depository Institution charter regime and DAO-LLC statute, together forming the states first-mover crypto-bank architecture.

The principal exposure documented this cycle is a direct nexus between this architecture and a state-directed illicit-finance scheme: DPRK operatives embedded as fraudulent remote IT workers collect wages in USDC and USDT, consolidate proceeds through US shell entities including Wyoming-incorporated firms named in a 2024 FBI affidavit, and route funds through OTC traders, mixers, and cross-chain bridges toward sanctioned DPRK financial representatives funding weapons programs - a scheme that generated close to USD 800 million in 2024. This is not a finding against FRNT or the SPDI regime specifically, but it establishes that Wyomings broader crypto-native infrastructure operates in the same jurisdictional space as this documented laundering nexus, and no evidence currently isolates the SPDI/DAO-LLC/FRNT architecture itself from illicit-flow activity as distinct from this separate scheme - a gap the internal review register flags explicitly.

The federal supervisory perimeter for this architecture is actively being defined and remains the single largest open variable. The GENIUS Act payment-stablecoin framework has implementing regulations due July 2026 and reaches full force January 2027; a FinCEN/OFAC joint proposed rule assessing payment-stablecoin illicit-finance risk (Docket FINCEN-2026-0100) published April 10, 2026 with comments closing June 9, 2026, and final scope remains undetermined. Both instruments will determine how Wyomings state-chartered stablecoin issuance and SPDI custodians reconcile with a federal AML and sanctions-screening regime that is only now catching up to state-level crypto-bank innovation.

On the supervisory-technology side, Wyomings Division of Banking has partnered with Chainalysis to monitor money-laundering and illicit digital-asset activity across the SPDI charter regime, a RegTech-forward posture worth registering even though no documented enforcement action or illicit-flow finding attaches directly to that specific partnership at this stage.

Outlook

The determinative question for this domain is how the GENIUS Act implementing regulations and the FinCEN/OFAC joint stablecoin rule, both maturing through 2026 into 2027, will define the federal-state supervisory interface for FRNT and Wyomings SPDI custodians. Until that interface is settled, Wyomings crypto architecture continues to expand - a CRITICAL severity_preliminary reflects the combination of first-mover regulatory novelty, a documented DPRK laundering nexus operating in the same jurisdictional space, and a still-unresolved federal supervisory perimeter, rather than any finding of illicit activity within the SPDI or FRNT architecture itself.

Wyomings Division of Banking has partnered with Chainalysis for ongoing supervisory monitoring of money-laundering and illicit digital-asset activity across the states Special Purpose Depository Institution charter regime. This positions Wyomings crypto-bank supervisory architecture as RegTech-forward relative to peer US states, and it sits alongside this cycles other D6-relevant finding: two Wyoming state-government primary sources - the Secretary of States FinCEN-related page and the Wyoming Division of Bankings own site - were not incorporated into the baseline research this cycle despite being independently retrievable, a gap that should be closed in subsequent cycles through direct citation of these state primary sources.

The RegTech partnership finding requires a specific and deliberate framing discipline. No documented enforcement action or illicit-flow finding attaches directly to the Chainalysis partnership itself at this stage. The correct register, per FIM methodology, is to treat the partnerships existence as a MONITORED-severity signal reflecting supervisory technology adoption, rather than to inflate it into a finding of either demonstrated effectiveness or theoretical vulnerability. The same crypto-bank architecture that the partnership monitors - SPDI charters, DAO-LLC, FRNT - is separately documented (under D5) as expanding the surface for crypto-native illicit-finance typologies even as federal AML and sanctions-screening rules are only now catching up; the Chainalysis partnership is best read as the states own acknowledgment of that expanding surface rather than evidence that the surface has been secured.

Outlook

The most immediate actionable item for this domain is procedural rather than substantive: prioritizing direct citation of the Wyoming Secretary of State and Wyoming Division of Banking primary sources in the next research cycle, since both are independently verified as retrievable and their absence from the current baseline is a research-completeness gap rather than a reflection of their non-existence. Substantively, this domains trajectory is assessed as watch rather than worsening or improving - the RegTech partnership is a genuine supervisory development, but its practical effectiveness against the specific illicit-finance nexus documented elsewhere in this cycle (D1, D5) has not yet been demonstrated one way or the other.