Not every instrument is backed by its official text yet. At least one law or rulebook covered here has no official source (tier 1) retrieved for it yet. No finding on this page is shown with confidence above “Probable” until stronger sources are retrieved.

Financial Integrity Monitor

United States — Idaho US-ID

Domains covered
8 of 8
Sources
150
Role actions
8
Horizon <90d
0
Jurisdiction profile
FATF status: Compliant Tier: B Risk direction: Increasing Enablement vs enforcement: Mixed

Idaho operates under the federal BSA/AML framework (FinCEN, OFAC) with state-level money transmitter licensing administered by the Idaho Department of Finance.

MoreNo Idaho-specific BO registry exists; the state relies on the federal CTA regime, now sharply narrowed. State AML supervisory capacity is modest relative to crypto-enabled fraud exposure.

Key deficiencies
  • No state beneficial-ownership registry; Idaho-formed LLCs/corporations now face no operative BO disclosure obligation at either state or federal level following FinCEN's 2025 CTA domestic rollback
  • Idaho has not joined the multistate AG enforcement wave against crypto-ATM operators (Bitcoin Depot, CoinFlip, Athena Bitcoin) despite documented high-volume local scam-wallet exposure
  • Limited publicly available Idaho-specific AML/CFT enforcement data (state primary sourcing is thin relative to national datasets)
Recent developments (18m)
  • FinCEN interim final rule (March 26, 2025) exempted all domestic reporting companies, including Idaho-formed entities, from Corporate Transparency Act beneficial-ownership reporting
  • FinCEN Notice FIN-2025-NTC1 (August 4, 2025) on convertible virtual currency kiosks, directly applicable to Idaho-licensed money transmitters operating crypto ATMs
  • DOJ/FBI $112 million multi-district pig-butchering cryptocurrency seizure, with seizure warrants authorized by a federal judge in the District of Idaho
  • ICIJ 'Coin Laundry' investigation documented a Boise Police Department detective's identification of a single recurring Bitcoin Depot-linked wallet address used in over 100 Idaho-area scam cases

United States federal law that applies in United States – Idaho is covered once, on the United States page. This page covers United States – Idaho’s own layer: its own law, regulators and enforcement.

Brief

Lead signal

Lead Signal

Idaho has moved from a passive to an active posture on financial-crime capacity this cycle, with Governor Brad Little directing Department of Finance Director Salvador Cruz to convene a statewide Financial Fraud Working Group, with a first meeting scheduled for November 17, 2026. The announcement is notable less for any new statutory power than for its candid acknowledgement of a structural gap: the state has no central repository for fraud reports and no standing unit dedicated to investigating financial crime. That gap is being surfaced against a reported figure of 88.7 million dollars in 2026 fraud losses statewide, a figure drawn from secondary reporting that corroborates the rationale behind the Governor's own announcement. Read architecturally rather than as an incident, this is a mid-sized enabler jurisdiction admitting, through its own executive action, that its fraud-detection and reporting plumbing has not kept pace with the volume of loss already occurring inside it.

Read full brief

Lead Signal

Idaho has moved from a passive to an active posture on financial-crime capacity this cycle, with Governor Brad Little directing Department of Finance Director Salvador Cruz to convene a statewide Financial Fraud Working Group, with a first meeting scheduled for November 17, 2026. The announcement is notable less for any new statutory power than for its candid acknowledgement of a structural gap: the state has no central repository for fraud reports and no standing unit dedicated to investigating financial crime. That gap is being surfaced against a reported figure of 88.7 million dollars in 2026 fraud losses statewide, a figure drawn from secondary reporting that corroborates the rationale behind the Governor's own announcement. Read architecturally rather than as an incident, this is a mid-sized enabler jurisdiction admitting, through its own executive action, that its fraud-detection and reporting plumbing has not kept pace with the volume of loss already occurring inside it.

The working group's membership, co-led by the Lieutenant Governor, a U.S. Attorney, and the Department of Finance Director, and drawing in law enforcement, prosecutors, banks, credit unions, senior advocates, state agencies, and legislators, signals an intent to build coordinating infrastructure rather than to legislate a single fix. That the state is choosing institutional capacity-building over new substantive law is itself the architectural finding: Idaho recognizes the enabler-jurisdiction gap but has not yet closed it.

Other Developments

A vetoed kiosk-fraud bill returns to the table. The Virtual Currency Kiosk Fraud Prevention Act, Idaho Senate Bill 1359, passed both chambers of the legislature but was vetoed by Governor Little on April 28, 2026, for drafting deficiencies. The bill would have imposed registration, disclosure, transaction-limit, and fraud-prevention duties on virtual-currency kiosk operators. It never entered into force. Senator Ruchti has stated an intention to consult with the Department of Finance ahead of a renewed attempt in the 2027 legislative session, noting that the department did not provide feedback on the initial 2026 draft. The newly convened Financial Fraud Working Group is explicitly understood to be a vehicle for revisiting this gap ahead of that session.

A capacity gap precedes any evasion-architecture finding. It is worth distinguishing what this cycle does and does not show. The confirmed facts are a state-capacity deficit, missing central fraud reporting, no dedicated investigative unit, and a legislative near-miss on kiosk-specific virtual-currency rules, rather than evidence of a deliberately engineered evasion architecture. The analytical significance lies in the permissiveness that an absence of infrastructure creates, not in any documented scheme exploiting it.

Cross-Monitor Connections

The virtual-currency kiosk vector sits at the boundary between state consumer-fraud policy and the broader national conversation on digital-asset financial innovation, and developments here are relevant to monitoring crypto-sector consumer-protection regimes at the state level generally. The working group's cross-agency, cross-sector composition, spanning law enforcement, financial institutions, and advocacy groups, also mirrors a pattern seen in other enabler-jurisdiction capacity reviews, where the diagnostic step of mapping a reporting gap precedes any substantive statutory response.

Outlook

The Financial Fraud Working Group's first meeting on November 17, 2026, and its subsequent reporting toward the 2027 legislative session are the principal markers to track. As scheduled, the working group's output could include a revised virtual-currency-kiosk fraud bill addressing the drafting deficiencies that triggered the 2026 veto, and possibly a coordinated statewide fraud-reporting model addressing the repository gap identified this cycle. Idaho's broader anti-money-laundering posture remains governed entirely by the federal Bank Secrecy Act and FinCEN framework, with no independent state financial intelligence unit or bespoke state AML statute; this baseline is unchanged and provides the backdrop against which any 2027 legislative product will have to operate.

Earlier periodic briefs (7)
8 Nov 2026 · fim-2026-11-08

Lead Signal

Idaho has moved from a passive to an active posture on financial-crime capacity, with Governor Brad Little directing Department of Finance Director Salvador Cruz to convene a statewide Financial Fraud Working Group, with a first meeting scheduled for November 17, 2026. The announcement is notable less for any new statutory power than for its candid acknowledgement of a structural gap: the state has no central repository for fraud reports and no standing unit dedicated to investigating financial crime. That gap is being surfaced against a reported figure of 88.7 million dollars in 2026 fraud losses statewide, a figure drawn from secondary reporting that corroborates the rationale behind the Governor's own announcement. Read architecturally rather than as an incident, this is a mid-sized enabler jurisdiction admitting, through its own executive action, that its fraud-detection and reporting plumbing has not kept pace with the volume of loss already occurring inside it.

The working group's membership, co-led by the Lieutenant Governor, a U.S. Attorney, and the Department of Finance Director, and drawing in law enforcement, prosecutors, banks, credit unions, senior advocates, state agencies, and legislators, signals an intent to build coordinating infrastructure rather than to legislate a single fix. That the state is choosing institutional capacity-building over new substantive law is itself the architectural finding: Idaho recognizes the enabler-jurisdiction gap but has not yet closed it.

Other Developments

A vetoed kiosk-fraud bill returns to the table. The Virtual Currency Kiosk Fraud Prevention Act, Idaho Senate Bill 1359, passed both chambers of the legislature but was vetoed by Governor Little on April 28, 2026, for drafting deficiencies. The bill would have imposed registration, disclosure, transaction-limit, and fraud-prevention duties on virtual-currency kiosk operators. It never entered into force. Senator Ruchti has stated an intention to consult with the Department of Finance ahead of a renewed attempt in the 2027 legislative session, noting that the department did not provide feedback on the initial 2026 draft. The newly convened Financial Fraud Working Group is explicitly understood to be a vehicle for revisiting this gap ahead of that session.

A capacity gap precedes any evasion-architecture finding. It is worth distinguishing what does and does not show. The confirmed facts are a state-capacity deficit, missing central fraud reporting, no dedicated investigative unit, and a legislative near-miss on kiosk-specific virtual-currency rules, rather than evidence of a deliberately engineered evasion architecture. The analytical significance lies in the permissiveness that an absence of infrastructure creates, not in any documented scheme exploiting it.

Cross-Monitor Connections

The virtual-currency kiosk vector sits at the boundary between state consumer-fraud policy and the broader national conversation on digital-asset financial innovation, and developments here are relevant to monitoring crypto-sector consumer-protection regimes at the state level generally. The working group's cross-agency, cross-sector composition, spanning law enforcement, financial institutions, and advocacy groups, also mirrors a pattern seen in other enabler-jurisdiction capacity reviews, where the diagnostic step of mapping a reporting gap precedes any substantive statutory response.

Outlook

The Financial Fraud Working Group's first meeting on November 17, 2026, and its subsequent reporting toward the 2027 legislative session are the principal markers to track. As scheduled, the working group's output could include a revised virtual-currency-kiosk fraud bill addressing the drafting deficiencies that triggered the 2026 veto, and possibly a coordinated statewide fraud-reporting model addressing the repository gap identified. Idaho's broader anti-money-laundering posture remains governed entirely by the federal Bank Secrecy Act and FinCEN framework, with no independent state financial intelligence unit or bespoke state AML statute; this baseline is unchanged and provides the backdrop against which any 2027 legislative product will have to operate.

25 Oct 2026 · fim-2026-10-25

Lead Signal

Idaho's Department of Finance has, within a single cycle, produced two concrete decisions against virtual-currency money-transmission businesses while the state Legislature lost its only pending kiosk-fraud countermeasure to a gubernatorial veto. The Department entered an Agreement and Order with Rockwallet LLC resolving findings that the firm conducted unlicensed money transmission from at least April 2023 through the order date in violation of Idaho Code Section 26-2903(1), with no monetary penalty disclosed. In a separate matter, the Department denied PayKES L.L.C.'s application for a money-transmitter licence, dated March 25, 2026, on the basis that the applicant failed the statutory net-worth and financial-responsibility tests under Idaho Code Sections 26-2905 and 26-2910. Read together, these are not isolated incidents but evidence of an actively-policed licensing gateway: Idaho requires a licence for the business of money transmission absent a narrow statutory exemption, and the Department is both initiating enforcement against unlicensed virtual-currency operators and screening out under-capitalised applicants at the front door.

The counter-signal arrived from the Governor's desk. The Virtual Currency Kiosk Fraud Prevention Act, Senate Bill 1359, passed the Senate 19-16 on March 19, 2026 and cleared the House on April 1, 2026, would have required kiosk operators to hold money-transmitter licences and deploy blockchain analytics and tracing software for fraud and anti-money-laundering detection, alongside mandatory disclosures, new-user transaction limits, refund rights, and law-enforcement information-sharing. Governor Little vetoed it on April 28, 2026. The combination is architecturally significant: enforcement against unlicensed transmission is live and functioning, but the one legislative vehicle built specifically to address kiosk-channel fraud and tracing did not survive, leaving that channel without a state-specific layering countermeasure.

Other Developments

No dedicated AML/CFT statute or financial-intelligence unit exists at the state level. Idaho's AML-relevant gateway for payment and crypto firms runs entirely through the Money Transmitters Act, Idaho Code Section 26-2901 et seq., administered by the Department of Finance Securities Bureau, which conditions licensing on net worth, bonding, and good standing. This sits alongside, and does not substitute for, federal FinCEN money-services-business registration and Bank Secrecy Act program obligations. The absence of a dedicated AML/CFT statute is a structural fact rather than a gap in the research, and it frames how the two enforcement actions above should be read: Idaho polices money transmission through a licensing-and-capital lens, not a bespoke financial-crime lens.

The kiosk-fraud veto has already drawn public pushback. Reporting on the veto quotes the bill's sponsor and AARP Idaho expressing disappointment, which signals the issue is likely to resurface rather than close. No reintroduced bill exists yet, and the specific terms of any future version remain unknown.

Cross-Monitor Connections

The same primary-source material anchors parallel findings in the World Payments Monitor's module covering licensing and market access, where the Rockwallet and PayKES decisions are read through a payment-services-regulation lens rather than a typology lens, and in the crypto monitor's licensing module, which tracks the same Department of Finance orders against the state's digital-asset-specific legal architecture, including the Distributed Ledger Technology Act's self-custody protections enacted this period. The AML/CFT regime finding connects to the same cross-monitor seam: Idaho's absence of a dedicated AML statute is a fact relevant to any payments or crypto compliance assessment of firms licensed to operate in the state.

Outlook

The near-term picture is one of continuity in enforcement against unlicensed and under-capitalised money-transmission applicants, paired with an unresolved legislative gap on kiosk-specific fraud and tracing requirements. A successor to the vetoed kiosk bill is plausible in the 2027 legislative session given the public reaction to the veto, but its reintroduction and terms are not yet known, so this is stated as a possibility rather than an expectation. Absent new legislation, Idaho's crypto-adjacent money-services sector will continue to be governed by the general money-transmitter licensing statute and federal BSA/AML obligations, with no state-specific kiosk fraud-prevention layer in force as scheduled.

11 Oct 2026 · fim-2026-10-11

Lead Signal

Idaho's Department of Finance has, within a single cycle, produced two concrete decisions against virtual-currency money-transmission businesses while the state Legislature lost its only pending kiosk-fraud countermeasure to a gubernatorial veto. The Department entered an Agreement and Order with Rockwallet LLC resolving findings that the firm conducted unlicensed money transmission from at least April 2023 through the order date in violation of Idaho Code Section 26-2903(1), with no monetary penalty disclosed. In a separate matter, the Department denied PayKES L.L.C.'s application for a money-transmitter licence, dated March 25, 2026, on the basis that the applicant failed the statutory net-worth and financial-responsibility tests under Idaho Code Sections 26-2905 and 26-2910. Read together, these are not isolated incidents but evidence of an actively-policed licensing gateway: Idaho requires a licence for the business of money transmission absent a narrow statutory exemption, and the Department is both initiating enforcement against unlicensed virtual-currency operators and screening out under-capitalised applicants at the front door.

The counter-signal arrived from the Governor's desk. The Virtual Currency Kiosk Fraud Prevention Act, Senate Bill 1359, passed the Senate 19-16 on March 19, 2026 and cleared the House on April 1, 2026, would have required kiosk operators to hold money-transmitter licences and deploy blockchain analytics and tracing software for fraud and anti-money-laundering detection, alongside mandatory disclosures, new-user transaction limits, refund rights, and law-enforcement information-sharing. Governor Little vetoed it on April 28, 2026. The combination is architecturally significant: enforcement against unlicensed transmission is live and functioning, but the one legislative vehicle built specifically to address kiosk-channel fraud and tracing did not survive, leaving that channel without a state-specific layering countermeasure.

Other Developments

No dedicated AML/CFT statute or financial-intelligence unit exists at the state level. Idaho's AML-relevant gateway for payment and crypto firms runs entirely through the Money Transmitters Act, Idaho Code Section 26-2901 et seq., administered by the Department of Finance Securities Bureau, which conditions licensing on net worth, bonding, and good standing. This sits alongside, and does not substitute for, federal FinCEN money-services-business registration and Bank Secrecy Act program obligations. The absence of a dedicated AML/CFT statute is a structural fact rather than a gap in this cycle's research, and it frames how the two enforcement actions above should be read: Idaho polices money transmission through a licensing-and-capital lens, not a bespoke financial-crime lens.

The kiosk-fraud veto has already drawn public pushback. Reporting on the veto quotes the bill's sponsor and AARP Idaho expressing disappointment, which signals the issue is likely to resurface rather than close. No reintroduced bill exists yet, and the specific terms of any future version remain unknown.

Cross-Monitor Connections

The same primary-source material anchors parallel findings in the World Payments Monitor's module covering licensing and market access, where the Rockwallet and PayKES decisions are read through a payment-services-regulation lens rather than a typology lens, and in the crypto monitor's licensing module, which tracks the same Department of Finance orders against the state's digital-asset-specific legal architecture, including the Distributed Ledger Technology Act's self-custody protections enacted this period. The AML/CFT regime finding connects to the same cross-monitor seam: Idaho's absence of a dedicated AML statute is a fact relevant to any payments or crypto compliance assessment of firms licensed to operate in the state.

Outlook

The near-term picture is one of continuity in enforcement against unlicensed and under-capitalised money-transmission applicants, paired with an unresolved legislative gap on kiosk-specific fraud and tracing requirements. A successor to the vetoed kiosk bill is plausible in the 2027 legislative session given the public reaction to the veto, but its reintroduction and terms are not yet known, so this is stated as a possibility rather than an expectation. Absent new legislation, Idaho's crypto-adjacent money-services sector will continue to be governed by the general money-transmitter licensing statute and federal BSA/AML obligations, with no state-specific kiosk fraud-prevention layer in force as scheduled for this cycle.

22 Sep 2026 · fim-2026-09-21

Lead Signal

Idaho's Governor vetoed Senate Bill 1359, the Virtual Currency Kiosk Fraud Prevention Act, in April 2026, after the measure had cleared both legislative chambers with bipartisan support. The veto message cited critical drafting deficiencies that would have undermined the bill's own purpose. The practical effect is architectural rather than incidental: Idaho's virtual-currency kiosk sector remains governed solely by the state's general Money Transmitters Act, with no kiosk-specific transaction limits, mandatory delay periods, fraud-warning disclosures, or fee-refund mechanism. This is a case where the absence of a targeted control regime, following a failed legislative attempt to install one, is itself the signal worth tracking, not a single enforcement incident.

The general licensing backbone remains intact and unaffected by the veto. Virtual currency exchangers that accept fiat currency for later delivery of virtual currency to a third party must still be licensed as money transmitters with the Idaho Department of Finance. That baseline requirement was not disturbed by the SB1359 episode; what was lost was the additional, kiosk-tailored layer that sponsors and advocacy groups argued was necessary given reported losses running into the tens of millions of dollars annually to cryptocurrency fraud in the state.

Other Developments

Standing mining exemption unaffected by the kiosk veto. Idaho's 2024 Bitcoin Rights Act continues to exempt bitcoin mining businesses from money-transmitter licensing requirements, a carve-out that sits alongside, and analytically distinct from, the general exchanger-licensing requirement that does apply to kiosk operators. This structural exemption was not implicated in the SB1359 debate and remains the operative rule this cycle with no amendment identified.

Sponsor intent to return next session. Public statements accompanying the veto indicate legislative sponsors intend to bring a redrafted version of the kiosk-fraud bill back in the 2027 session. No primary-source text of any successor bill exists yet, so this is tracked as a regulatory-horizon item rather than a confirmed development.

Cross-Monitor Connections

The kiosk-fraud regulatory gap intersects directly with consumer-protection and payments-sector monitors: the same vetoed bill would have imposed transaction caps, disclosure duties, and a transaction-delay mechanism whose absence bears on both illicit-finance exposure and retail consumer harm through the same non-bank cash-in/cash-out channel. Because Idaho lacks any bespoke crypto-kiosk oversight body, the enforcement gap sits entirely within the general money-transmitter supervisory perimeter, meaning any future kiosk-specific enforcement action would have to be framed as a Money Transmitters Act matter rather than a dedicated crypto-kiosk violation.

Outlook

Absent a successor bill, Idaho's virtual-currency kiosk sector will continue operating under a licensing regime not designed with kiosk-specific fraud typologies in mind. The most likely near-term development is a redrafted bill in the 2027 legislative session, informed by the drafting deficiencies the Governor identified, but no primary text exists yet and its content, scope, and prospects for passage remain unresolved. The structural gap between general money-transmitter supervision and the fraud patterns specific to unattended cash-in kiosks is the durable feature to watch, independent of whether any particular successor bill succeeds.

14 Sep 2026 · fim-2026-08-21

Lead Signal

Idaho Governor Brad Little vetoed SB1359a, the Virtual Currency Kiosk Fraud Prevention Act, on April 8-9, 2026, citing drafting deficiencies that would have undermined enforcement. Had it been signed, the bill would have added Chapter 54 to Title 28 of the Idaho Code, requiring virtual-currency kiosk operators to hold Idaho money-transmitter licenses, deploy blockchain-analytics and tracing software, cap new-customer transactions at two thousand dollars within twenty-four hours and ten thousand dollars within thirty days, delay first-transaction settlement by seventy-two hours, and provide fraud-related fee refunds. The veto preserves the generic Idaho Money Transmitters Act, Idaho Code § 26-2901 et seq., as the sole applicable regime governing virtual-currency exchangers and kiosk operators in the state.

Read architecturally rather than as an isolated incident, this is one data point in a broader pattern: state legislatures across the country are attempting kiosk-specific crypto AML overlays that encounter implementation friction at the drafting stage, with comparable efforts advancing in Louisiana under SB287 and in Utah under HB72 and HB0141, and with the underlying substance mirroring the federal Crypto ATM Fraud Prevention Act of 2025. The structural result for Idaho is a persistent state-level control gap: virtual-currency kiosk operators continue to be governed by a licensing regime built for generic money transmission, with no kiosk-specific transaction ceiling, no blockchain-analytics mandate, and no dedicated fraud-refund mechanism, even though the fraud typology the vetoed bill targeted, principally elder and vulnerable-victim losses at physical kiosks, remains unaddressed by statute.

Other Developments

No additional material development beyond the Lead Signal falls within the scope authorized for this jurisdiction this cycle.

Cross-Monitor Connections

The same veto is independently tracked elsewhere in this fleet: the crypto monitor reads it through its crypto_licensing and consumer_protection lenses as a licensing-and-safeguards event for Idaho's virtual-currency kiosk sector, and the world-payments monitor reads it through its licensing and market-access lens as a payments-regulation development that leaves the bank-versus-nonbank money-transmission distinction untouched. Enablement is itself the signal here, consistent with this monitor's architecture-over-incident framing: the absence of a kiosk-specific enforcement overlay in a state that otherwise administers a functioning generic money-transmitter regime through the Securities Bureau of the Idaho Department of Finance is analytically significant in its own right, not a null result to be passed over.

Outlook

The Governor's veto message attributed the bill's failure to drafting deficiencies rather than to disagreement with its underlying fraud-prevention aim, which leaves open a redrafted Virtual Currency Kiosk Fraud Prevention Act reaching the Idaho Legislature in the 2027 session. Absent such a redraft, Idaho's virtual-currency kiosk operators remain governed solely by the generic Money Transmitters Act, with no kiosk-specific AML control layer in force. The item to watch is whether the Idaho Department of Finance moves administratively to narrow any part of this gap through supervisory guidance, and whether the wider multi-state legislative wave, together with the federal S.710 precedent, produces a template Idaho's Legislature adopts on retry.

11 Aug 2026 · fim-2026-08-05

Lead Signal

This cycle the most structurally significant development is the deepening enabler-jurisdiction crisis in Cambodia, where the casino-junket sector and the associated scam-compound economy have moved from an enforcement footnote to the central axis of a possible third FATF grey-listing for the country. National Bank of Cambodia Governor Chea Serey has publicly acknowledged the relisting risk, an unusual admission from a regulator typically reticent about supervisory exposure, and one that signals the scale of the underlying problem rather than resolving it. The liquidation of Prince Group entities and Prince Bank following the arrest and extradition of Chen Zhi to China demonstrates that enforcement can reach even large, apparently diversified financial and real-estate structures once a triggering law-enforcement action occurs elsewhere in the network. Separately, Reuters reporting that Lim Heng Group leased casino-adjacent property to a Chinese national whose subsequent use of the site supported both online fraud and trafficking operations illustrates how legitimate-facing gaming infrastructure continues to function as a landlord of convenience for illicit compound economies. Read together with a persistent structural finding in Laos, namely the direct 20 percent equity stake the Lao government holds in the Golden Triangle Special Economic Zone, a zone long associated with casino-linked trafficking and laundering, the pattern is architectural rather than episodic: state and quasi-state actors in the region retain a direct or indirect financial interest in the infrastructure that international observers are simultaneously flagging as a laundering and trafficking risk.

The June 2026 FATF plenary outcome, a net removal of two jurisdictions, Algeria and Namibia, against two additions, Bosnia and Herzegovina and Iraq, leaving 22 jurisdictions under increased monitoring, could read as modest churn. Set against the unresolved exposure in Cambodia, however, the net-neutral optics of the plenary understate the concentration of acute risk sitting just outside the current list. The position of Cambodia is precarious rather than settled, and the gap between its current standing and the underlying casino-and-compound economy documented this cycle is the more analytically important signal than the aggregate count from the plenary.

Other Developments

Coordinated US action against cartel financial infrastructure advanced on multiple fronts. OFAC designated six individuals and entities tied to the Cartel del Noreste, including two CDN-affiliated casinos identified as laundering vehicles, while a FinCEN notice of proposed rulemaking under Section 311 separately identified transactions involving ten Mexico-based gambling establishments as a class of primary money-laundering concern warranting special measures under the USA PATRIOT Act. The Department of Justice, in a parallel but distinct action, charged two Chinese nationals with laundering funds for the Sinaloa Cartel and the Cartel de Jalisco Nueva Generacion through mirror transfers and trade-based money laundering spanning the United States, Mexico, and China. Taken together, the three actions, Treasury sanctions, a FinCEN special-measures proposal, and a DOJ trade-based-laundering prosecution, read as a coordinated architecture against cartel financial infrastructure rather than isolated enforcement events.

Terror-finance designations against Houthi revenue networks continued to layer. OFAC designated 21 individuals, entities, and one vessel connected to Houthi oil-smuggling and revenue generation, and separately sanctioned the Yemen-based International Bank of Yemen for providing financial support to the Houthi movement, also known as Ansarallah. The banking-sector designation is notable in that it targets correspondent-banking access rather than only the smuggling logistics chain.

The EU beneficial-ownership perimeter shifted with the lowering of the ownership and voting-rights disclosure threshold to 25 percent or more, alongside a 10 July 2026 deadline for register-transposition provisions under the sixth Anti-Money Laundering Directive. The European Commission has opened Article 74 infringement proceedings against 11 member states for failing to fully notify their AMLD6 transposition measures, a live supervisory-perimeter gap during a transition period discussed further in the Beneficial Ownership sub-brief below.

The MiCA transitional period closed on 30 June and 1 July 2026, with ESMA stating that any entity offering crypto-asset services to EU customers without a MiCA licence now sits in direct breach of EU law. Major exchanges including Binance, Coinbase, Kraken, and Crypto.com have delisted USDT and several other stablecoins, including DAI, USDe, FDUSD, PYUSD, and TUSD, for EEA retail users after those tokens failed to secure MiCA authorisation.

The Russia-related delisting cadence at OFAC accelerated, removing three Russian nationals designated under Executive Order 14024 in a 23 June 2026 action, part of a broader pattern that Treasury has framed as sanctions modernization rather than policy reversal. No equivalent delisting cadence from the EU Council or from OFSI in the United Kingdom was identified this cycle, a divergence discussed further below.

Cross-Monitor Connections

The casino-and-compound economies in Cambodia and Laos sit at the intersection of the enabler-jurisdiction tracking of this monitor and the state-capture lens of the World Democracy Monitor: the direct 20 percent equity stake the Lao state holds in the Golden Triangle Special Economic Zone is simultaneously a financial-integrity enabler-jurisdiction finding and a state-capture finding, since the state itself holds a financial interest in infrastructure implicated in laundering and trafficking. The Houthi oil-smuggling and banking-access designations connect directly to the conflict-finance tracking of the Strategic Conflict and Extractive-Industry Monitor, given the overlap between the sanctions architecture at OFAC and the revenue streams financing an active conflict actor; the same designations also sit within the Conflict Finance domain of this monitor, discussed below. The coordinated US cartel-casino and correspondent-banking actions have a narrower but real connection to extractive and border-economy monitoring, insofar as cartel financial infrastructure increasingly runs through gaming and hospitality assets rather than purely narcotics-adjacent shell structures, a pattern worth tracking alongside commodity and resource-flow monitoring for the same border region.

Outlook

The exposure in Cambodia is the single variable most likely to generate a material FATF-relevant development before the next plenary; the domestic regulator has effectively pre-announced the risk, and enforcement actions against Prince Group assets suggest at least partial domestic capacity to act, though the finding involving Lim Heng Group indicates the underlying leasing and junket ecosystem remains largely unaddressed. In the European Union, the period between the 10 July 2026 transposition deadline and the 10 July 2026 deadline for AMLA to submit 23 regulatory and implementing technical standards to the Commission is the near-term window in which the supervisory-perimeter gap identified this cycle is most likely to be tested, particularly in the 11 member states currently subject to Article 74 infringement proceedings. On sanctions, the divergence between an accelerating delisting cadence in the United States and a static posture in the EU and the United Kingdom bears continued monitoring for whether it reflects durable policy realignment or cyclical administrative catch-up. This is illustrative orientation for continued monitoring, not a prediction of specific future action.

14 Jul 2026 · fim-2026-07-14

Lead Signal

The first full-cycle financial-integrity baseline for Idaho surfaces two structural findings that outweigh any single enforcement episode: a reopened beneficial-ownership opacity vector affecting every Idaho-formed entity, and a documented crypto-ATM cash-out architecture servicing scam networks that has drawn no state-level enforcement response. Following the March 2025 FinCEN interim final rule, Idaho-formed LLCs and corporations are no longer required to disclose beneficial ownership under the Corporate Transparency Act, and because the Idaho Secretary of State registry does not independently collect beneficial-ownership data, Idaho entities now sit outside beneficial-ownership disclosure at both the state and federal level. This is an architecture-level regression, not an isolated policy choice: the rule remains an interim final rule under a 60-day comment period, and its durability is contingent on unresolved appellate litigation and a promised final rulemaking, a status the original framing of the exemption understated by presenting it as settled policy.

Running in parallel, a Boise Police Department detective identified a single Bitcoin Depot-linked wallet address recurring across more than 100 separate Idaho-area scam investigations, illustrating how a small number of upstream crypto-ATM liquidity providers can service a geographically dispersed low-level fraud economy. Idaho functions simultaneously as a victim-origination point and an investigative venue: a separate 112 million US dollar multi-district pig-butchering seizure required parallel warrants authorized by federal judges in Arizona, California, and Idaho, evidencing commingled laundering flows rather than a discrete local incident.

Other Developments

Sanctions architecture continues to diverge across the Atlantic. The OFAC re-designation of Garantex successor Grinex and the A7A5 ruble-backed token targets a continuing Russian crypto-based cross-border settlement rail used for sanctions evasion; EU and UK regimes track OFAC designations with a lag, creating a temporary compliance window that Idaho-licensed institutions must independently manage through their own sanctions-screening programs. A parallel unilateral pattern appears in counter-narcotics enforcement. OFAC designated Armando de Jesus Ojeda Aviles and associates for converting bulk US cash drug proceeds into cryptocurrency for cross-border transfer to Mexico; no parallel EU or OFSI designation has been identified, illustrating a unilateral OFAC-led approach to cartel-finance sanctions relative to European counter-narcotics sanctions architecture. A third designation connects US domestic fraud losses to an active foreign conflict. OFAC designated the Democratic Karen Benevolent Army, its senior leadership, and affiliated companies for supporting Myanmar-based cyber scam centers targeting Americans, alongside the DOJ, FBI, and Secret Service establishment of a Scam Center Strike Force; again, no parallel EU or UK designation has been identified.

The United States retains a clean standing on the FATF list architecture. As of the 19 June 2026 plenary, the United States is not listed on either the FATF Jurisdictions Under Increased Monitoring list or the Call for Action list, a status Idaho inherits federally, though Idaho-licensed institutions must still apply enhanced due diligence to counterparties in grey-listed jurisdictions; this clean status is scheduled for re-verification at the October 2026 plenary.

Idaho has not joined the multistate enforcement wave against crypto-ATM operators pursued by several peer states. No Idaho Attorney General or Department of Finance enforcement action against Bitcoin Depot, CoinFlip, or Athena Bitcoin has been identified, in contrast to peer states, though this absence may partly reflect sourcing thinness specific to Idaho rather than a confirmed enforcement gap.

A federal rulemaking horizon item will extend obligations to stablecoin issuers. The GENIUS Act permitted payment stablecoin issuer AML/CFT rulemaking, a joint FinCEN and OFAC notice of proposed rulemaking under docket FINCEN-2026-0100, is at the consultation stage and expected within the 2026-to-mid-2027 window; it will directly affect any Idaho-domiciled or Idaho-licensed stablecoin issuer. Separately, FinCEN Notice FIN-2025-NTC1 reaffirms that 31 CFR 1022.320 SAR and CTR obligations apply to convertible-virtual-currency kiosk operators nationwide, including Idaho-licensed operators.

Cross-Monitor Connections

The Democratic Karen Benevolent Army designation links a US domestic fraud-victim channel, including Idaho victims, to an armed ethnic organization operating within the internal conflict in Myanmar, warranting SCEM review of the conflict-finance nexus underlying DKBA scam-center revenue. The same designation, alongside Chinese organized-crime-linked companies supporting the Myanmar scam-center network, is flagged for WDM review of state-capture and quasi-state criminal-network dynamics in the region, assessed at Possible confidence. Separately, the continuing pattern of OFAC-led designations against the Russian Garantex, Grinex, and A7A5 crypto settlement rail, running ahead of EU and UK listings, is a macro-relevant sanctions-architecture divergence signal flagged for GMM tracking of sanctions as a macro variable.

Outlook

The Idaho jurisdiction risk trajectory is assessed as increasing, driven by a combination of crypto-enabled fraud exposure and a reopened beneficial-ownership opacity vector, set against a mixed enforcement-versus-enablement balance overall. The durability of the beneficial-ownership exemption remains genuinely unresolved: it rests on an interim final rule subject to a comment period, pending appellate litigation, and a promised final rulemaking, any of which could restore, narrow, or permanently repeal domestic reporting obligations. On the digital-asset side, the pending GENIUS Act stablecoin rulemaking and the FinCEN kiosk notice point toward tightening federal obligations, but state-level consumer-protection enforcement against crypto-ATM operators has not yet kept pace with documented local exposure, and whether Idaho joins the peer-state enforcement wave is a genuine open question for the next cycle.

Domain intelligence (D1–D8)

D1 Sanctions

no_changeno_changestanding position

Sanctions Architecture and Evasion

Three new OFAC designations this cycle bear directly on the sanctions-screening obligations of Idaho-licensed institutions, and each illustrates a variant of the same structural pattern: unilateral United States action running ahead of counterpart European sanctions regimes. The OFAC re-designation of Russian exchange Garantex successor Grinex, together with the A7A5 ruble-backed token, targets a continuing crypto-based cross-border settlement rail engineered to survive prior sanctions action. The EU and UK regimes track OFAC designations with a lag, which creates a temporary compliance window; Idaho-licensed virtual-asset service providers and banks with crypto-asset counterparties must independently manage screening against the newly designated entities rather than relying on parallel EU or UK listings appearing on any predictable timetable.

Continue reading

A second designation targeted a Sinaloa Cartel-run network, led by Armando de Jesus Ojeda Aviles, that converted bulk US cash drug proceeds into cryptocurrency for cross-border transfer to Mexico. No parallel EU or OFSI designation has been identified for this network, a further instance of the unilateral OFAC-led posture that characterizes US cartel-finance sanctions relative to European practice. A third designation, targeting the Democratic Karen Benevolent Army and its senior leadership and affiliated companies for supporting Myanmar-based cyber scam centers targeting Americans, was issued alongside DOJ, FBI, and Secret Service establishment of a new Scam Center Strike Force; here too, no equivalent EU or UK designation has been identified.

For Idaho specifically, none of these three designations name an Idaho-based entity or corridor directly; Idaho exposure is structural rather than incident-specific, running through the federal OFAC and BSA sanctions-screening obligations that all Idaho-licensed institutions inherit regardless of state boundary. Idaho retains a clean FATF standing: the United States is not listed on either the FATF Jurisdictions Under Increased Monitoring list or the Call for Action list as of the 19 June 2026 plenary, a status Idaho inherits federally. Enhanced due diligence remains a live obligation, however, for counterparties of Idaho-licensed institutions located in currently grey-listed jurisdictions, and this clean status is due for re-verification at the October 2026 plenary rather than being a permanent condition.

Read together, the three designations and the clean FATF status describe a jurisdiction where sanctions-architecture risk is imported rather than locally generated: Idaho does not produce sanctions-evasion infrastructure of its own, but its licensed institutions sit downstream of a federal sanctions regime that continues to designate crypto-settlement rails, cartel-finance networks, and conflict-adjacent scam-center enablers faster than counterpart European authorities can mirror. The structurally significant finding is not any one designation but the persistence of the EU-UK lag itself, which creates a recurring compliance-window architecture that Idaho-licensed institutions must manage through independent internal sanctions-list monitoring rather than through reliance on regime convergence.

Two of the three designations carry a dimension beyond ordinary money-laundering enforcement. The DKBA designation satisfies both the sanctions-architecture and conflict-finance filters simultaneously, since the underlying scam-center revenue is understood to finance an armed ethnic organization operating within the internal conflict in Myanmar, and this connection has been separately flagged for cross-monitor review by SCEM, for the conflict-finance context, and by WDM, at Possible confidence, for the state-capture and quasi-state criminal-network dimension given reported Chinese organized-crime company involvement. The Sinaloa Cartel designation likewise sits at the intersection of AML and counter-narcotics-finance objectives rather than as a pure money-laundering matter. Idaho-licensed institutions should read all three designations through this cross-pillar lens rather than treating them as routine AML list updates, since the DKBA and Sinaloa Cartel designations in particular reflect the three-pillar balance principle applied by this monitor, under which CTF and CPF findings are frequently under-weighted relative to AML enforcement volume.

The Russia-related re-designation of Grinex and A7A5 also merits separate note as the most durable of the three signals: it represents at least a second identified iteration of the same underlying settlement-rail architecture following the original Garantex action, illustrating that sanctions-evasion infrastructure is frequently rebuilt rather than eliminated by a single designation, a pattern this monitor has previously documented in other crypto-settlement contexts and one that Idaho-licensed institutions with any Russia-adjacent correspondent exposure should treat as a standing rather than one-time screening requirement.

Outlook

The near-term outlook for the Idaho sanctions-architecture exposure turns on whether EU and UK authorities move to mirror the Grinex, A7A5, Sinaloa Cartel, and DKBA designations, and on what further OFAC action follows against adjacent nodes in the same networks. Absent EU-UK convergence, the compliance-window pattern is likely to recur with each new OFAC action, placing continued weight on independent sanctions-screening capability at Idaho-licensed institutions rather than on any assumption of automatic multilateral alignment. The October 2026 FATF plenary is the next scheduled point at which the clean grey-list standing of the United States will be reassessed.

Judgment: No Idaho-specific sanctions-evasion nexus identified this cycle. Uncertain
Cumulative analysis

Sanctions Architecture and Evasion — Cumulative Analysis

This is the first full-cycle sanctions-architecture baseline established for the Idaho (US-ID) jurisdiction profile within the Financial Integrity Monitor. The baseline finds that Idaho sanctions-architecture exposure is structural rather than locally generated: no Idaho-based entity or transit corridor has been identified in any reviewed Russian sanctions-evasion reporting, cartel-finance network, or Myanmar scam-center financing chain. Instead, Idaho-licensed institutions inherit exposure entirely through the federal OFAC and Bank Secrecy Act sanctions-screening framework that applies uniformly across US states.

The baseline cycle documents three concurrent OFAC designation actions: a re-designation of Russian exchange Garantex successor Grinex together with the A7A5 ruble-backed token, targeting a continuing Russian crypto-based cross-border settlement rail; a designation of a Sinaloa Cartel-run crypto money-laundering network converting bulk US cash drug proceeds into cryptocurrency for transfer to Mexico; and a designation of the Democratic Karen Benevolent Army and affiliated companies for supporting Myanmar-based cyber scam centers targeting Americans, issued alongside a new multi-agency Scam Center Strike Force. In each case, no parallel EU or UK designation has yet been identified, establishing a recurring pattern of OFAC-led unilateral action that this baseline treats as the primary structural signal, rather than treating any single designation as a standalone incident. The EU-UK designation lag creates what this monitor characterizes as a temporary compliance window: a period during which Idaho-licensed institutions with crypto-asset or correspondent-banking exposure must rely on independent internal sanctions-screening against the OFAC list rather than assuming multilateral alignment will follow on a predictable schedule.

Against this designation activity, the baseline also establishes the inherited FATF standing of Idaho: the United States is not listed on either FATF list as of the June 2026 plenary, a clean status that nonetheless requires Idaho-licensed institutions to apply enhanced due diligence to counterparties in currently grey-listed jurisdictions, and that is scheduled for re-verification at the October 2026 plenary rather than standing as a permanent condition.

Two of the three designations documented in this baseline carry a dimension beyond ordinary money-laundering enforcement. The DKBA designation satisfies both the sanctions-architecture and conflict-finance filters simultaneously, given the underlying scam-center revenue is understood to finance an armed ethnic organization operating within the internal conflict in Myanmar; this baseline has flagged that connection for SCEM review of the conflict-finance context and for WDM review, at Possible confidence, of the state-capture and quasi-state criminal-network dimension given reported Chinese organized-crime company involvement in the same network. The Sinaloa Cartel designation similarly sits at the intersection of AML and counter-narcotics-finance objectives. This baseline treats both designations as evidence that the three-pillar balance principle, under which CTF and CPF findings are structurally under-weighted relative to AML enforcement volume, is a live concern for the Idaho sanctions-architecture exposure and not merely a theoretical one.

The Grinex and A7A5 re-designation also merits standing note as the most durable signal in this baseline: it represents at least a second identified iteration of the underlying Russian settlement-rail architecture following the original Garantex action, illustrating that sanctions-evasion infrastructure is frequently rebuilt rather than permanently eliminated by a single designation. This baseline treats Russia-adjacent correspondent and crypto-asset screening as a standing requirement for any Idaho-licensed institution with relevant exposure, rather than a response to a single, closed event.

Taken as a whole, this baseline positions the Idaho sanctions-architecture domain as importer rather than generator of risk: every documented designation this cycle targets an entity or network with no Idaho nexus, yet each carries direct screening implications for Idaho-licensed institutions through the uniform federal BSA and OFAC framework. This is consistent with the architecture-over-incident principle applied by this monitor, under which the structural condition, an EU-UK designation lag that Idaho-licensed institutions must independently manage, is the more analytically significant finding than any single designation considered in isolation. Subsequent baselines should track whether this importer-only pattern persists or whether an Idaho-specific transit or facilitation nexus eventually emerges within reviewed reporting.

Outlook

Future cycles should test whether EU and UK authorities move to mirror the designations documented in this baseline, whether the compliance-window pattern recurs with subsequent OFAC actions, and whether the United States retains its clean FATF standing at the October 2026 plenary. Any Idaho-specific transit or facilitation nexus emerging in later reporting would represent a material escalation from the current structural-exposure-only baseline.

domain_sub_briefs · D1 · Cumulative analysis
Periodic updates (1)
11 Aug 2026 · fim-2026-08-05

Sanctions

Sanctions architecture this cycle displays a genuinely mixed trajectory: escalation against conflict-finance and cartel-enabled laundering running in parallel with an accelerating delisting cadence inside the Russia programme. Reading these as a single sanctions posture rather than as separate news items is the more useful analytical move, since it clarifies that current sanctions practice in the United States is simultaneously tightening enforcement against non-state and quasi-state financial infrastructure while easing legacy designations judged no longer to serve their original purpose.

The clearest evidence of escalation sits in the counter-terrorist-financing pillar, which is often structurally under-represented relative to AML enforcement volume. The designation by OFAC of 21 individuals and entities and one vessel tied to Houthi oil-smuggling and revenue-generation networks, layered onto the separate designation of the Yemen-based International Bank of Yemen for financial support to the Houthi movement, targets both ends of the value chain: the physical smuggling and revenue-generation infrastructure on one side, and the correspondent-banking access that allows that revenue to enter the formal financial system on the other. Designating a bank rather than only individuals and vessels is analytically significant because it signals a judgment that formal banking access, not merely informal value transfer, has become a meaningful vector for Houthi-linked revenue, and it forces correspondent banks with any Yemen exposure to reassess their own due-diligence posture regardless of whether they have direct exposure to the designated bank.

A second, distinct escalation runs through Mexico. The designation by OFAC of six individuals and entities tied to the Cartel del Noreste, including two CDN-affiliated casinos identified as laundering vehicles, sits alongside the FinCEN Section 311 notice of proposed rulemaking identifying transactions involving ten Mexico-based gambling establishments as a class of primary money-laundering concern, and a Department of Justice prosecution of two Chinese nationals for trade-based money laundering serving the Sinaloa Cartel and the Cartel de Jalisco Nueva Generacion. The three actions originate from three different agencies operating three different legal authorities, Treasury sanctions, a BSA special-measures rulemaking, and a criminal prosecution, yet converge on a single financial-infrastructure target: casino and gaming-adjacent laundering channels serving Mexican cartel structures, corroborated by a distinct trade-based-laundering corridor running through China. This is the pattern this monitor characterises as architecture rather than incident: three separate legal instruments pointed at the same underlying typology within a matter of months indicates institutional prioritisation, not coincidence.

Set against these two escalating fronts, the Russia programme at OFAC shows the opposite trajectory. The removal of three Russian nationals designated under Executive Order 14024 in a 23 June 2026 action continues an accelerated 2026 delisting pace that Treasury has framed publicly as sanctions modernization, a characterisation that, if taken at face value, suggests routine list maintenance rather than a substantive policy shift toward Russia. What is analytically notable is not the delisting itself but the absence of an equivalent delisting cadence from the EU Council or from OFSI in the United Kingdom this cycle. A sanctions programme in the United States moving faster than its European and British counterparts on delistings, while those same counterparts show no parallel movement, is the kind of enforcement-posture divergence this monitor tracks as a standing signal regardless of the specific individuals involved, because divergent list maintenance across allied sanctions regimes creates arbitrage opportunities for designated or formerly designated persons operating across jurisdictions.

The net outcome of the June 2026 FATF plenary, Bosnia and Herzegovina and Iraq added, Algeria and Namibia removed, netting 22 jurisdictions under increased monitoring, functions as the broader architectural backdrop against which bilateral sanctions actions sit. Presence or absence on the grey list does not by itself indicate enforcement quality; the removal of Algeria and Namibia reflects completed reform programmes, whereas the sanctions actions detailed above concern jurisdictions, Mexico and Yemen, that are not on the grey list at all. The absence of a grey-list mechanism capturing the cartel-casino laundering risk in Mexico or the conflict-finance exposure in Yemen is itself worth noting: multilateral list-based monitoring and bilateral sanctions enforcement are addressing different, only partially overlapping, risk populations.

Outlook

The near-term sanctions outlook has three variables worth tracking independently. First, whether the FinCEN Section 311 special-measures process against the ten identified Mexico-based gambling establishments proceeds to a final rule, which would represent a materially stronger intervention than sanctions designations alone by cutting off broader correspondent-banking access. Second, whether the banking-sector designation against the International Bank of Yemen prompts correspondent banks with adjacent exposure to conduct proactive de-risking, which would be a market response rather than a further government action but would still be a meaningful downstream effect of the designation. Third, whether the divergence between an accelerating Russia-delisting cadence in the United States and a static posture in the EU and the United Kingdom persists into the next cycle, which would begin to look less like routine list maintenance and more like a durable transatlantic policy gap. None of this is a prediction of specific outcomes; it is an orientation toward where the next material sanctions-architecture development is most likely to originate.

D2 Beneficial Ownership

no_changeno_changestanding position

Beneficial Ownership and Corporate Transparency

The beneficial-ownership exposure of Idaho itself is the primary subject here, and it has moved in a single direction this cycle: away from disclosure. Idaho maintains no independent state-level beneficial-ownership registry; corporate filings held by the Idaho Secretary of State capture only registered agents and officers, not beneficial owners. Until early 2025 this state-level gap was offset by the federal Corporate Transparency Act beneficial-ownership reporting requirement, which applied to Idaho-formed LLCs and corporations as domestic reporting companies. The March 2025 FinCEN interim final rule eliminated that federal requirement for domestic reporting companies, formally exempting entities previously known as domestic reporting companies, including Idaho-formed entities, from CTA reporting; only foreign-formed entities registering to do business in a US state remain covered. The combined effect is that Idaho-formed entities now face no operative beneficial-ownership disclosure obligation at either level of government, reopening the shell-entity opacity vector the CTA was designed to close nationally.

Continue reading

This is a structural finding, not a single-incident one, and it is corroborated by two independent source categories, a FinCEN primary publication and ICIJ investigative reporting, meeting the High-confidence corroboration standard applied by this monitor for the underlying registry-absence finding. Both corroborating sources sit at tier 1, reinforcing analytical confidence in the registry-absence architecture even as the exemption legal durability remains genuinely open. The rule that removed the federal backstop, however, carries its own caveat: it is an interim final rule, not settled final policy, subject to a 60-day comment period and to ongoing appellate litigation in National Small Business United v. Yellen, either of which could restore, further narrow, or permanently repeal the domestic reporting-company exemption. The original framing of the exemption as settled policy understated this open status, and this brief treats the exemption durability as unresolved rather than fixed.

Globally, the EU AML Package sets the structural direction against which BO-transparency architecture is increasingly measured, even though Idaho and the United States sit entirely outside its supervisory perimeter. The package is properly understood as three distinct instruments rather than a single measure: the AML Regulation (Regulation (EU) 2024/1624, the AMLR), which is directly applicable across EU member states without domestic transposition; the sixth Anti-Money Laundering Directive (6AMLD), which each member state transposes into its own national law; and the AMLA Regulation (Regulation (EU) 2024/1620), which establishes the Anti-Money Laundering Authority and shifts supervision of the highest-risk cross-border obliged entities from purely national authorities toward a hybrid EU-level direct-and-indirect supervisory regime. For Idaho, this architecture has no direct application: Idaho-licensed institutions with EU counterparties may experience indirect compliance friction from AMLR correspondent-banking due-diligence provisions, but no AMLA direct-supervision nexus attaches to Idaho or US entities. The EU package is durable backdrop against which the international transparency-architecture trend can be read, not the operative regime governing the beneficial-ownership exposure of Idaho itself, which is instead defined entirely by the contested domestic-exemption status of the CTA and the absence of a state registry.

This reopened opacity vector reaches a broad customer-typology base: any Idaho-formed LLC or corporation, regardless of the wealth or sophistication of its beneficial owner, now falls outside both the state and federal beneficial-ownership disclosure regime, touching corporate and high-net-worth customer segments alike. Financial institutions maintaining correspondent, custody, or account relationships with Idaho-formed corporate customers can no longer rely on the CTA reporting chain as an independent source of beneficial-ownership verification and must depend entirely on their own customer-due-diligence programs to identify beneficial owners, a burden-shift from public-registry disclosure to private-sector control frameworks that this brief treats as a material control-framework consequence of the federal rule change.

Read against the overall Idaho jurisdiction risk trajectory, assessed as increasing, the beneficial-ownership finding stands as one of two structural drivers, alongside the crypto-ATM exposure documented in the digital-asset domain, that combine with an otherwise mixed enforcement-versus-enablement balance to produce a deteriorating rather than stable overall assessment for Idaho. Neither driver reflects a discrete state policy choice; both instead reflect federal-level developments that Idaho inherits by virtue of its position within the US federal financial-regulatory architecture rather than through any distinguishing state-level action of its own.

Outlook

The determinative question for the Idaho beneficial-ownership posture over the next several cycles is whether National Small Business United v. Yellen resolves in a way that restores, narrows, or forecloses the domestic reporting-company exemption, and whether FinCEN proceeds to a final rule that entrenches or reverses the current interim position. Absent a state-level registry initiative, which no Idaho legislative proposal currently addresses, Idaho-formed entities will remain without any operative beneficial-ownership disclosure obligation for as long as the interim exemption stands, a structural condition this monitor will continue to track independently of the separate, EU-specific AMLA supervisory build-out.

Judgment: No Idaho-specific BO-registry development identified this cycle; federal CTA/BOI posture sits outside the subnational scope. Uncertain
Cumulative analysis

Beneficial Ownership and Corporate Transparency — Cumulative Analysis

This is the first baseline cycle for the beneficial-ownership and corporate-transparency posture of Idaho within the Financial Integrity Monitor, and it establishes a jurisdiction whose exposure runs through federal policy rather than state design. Idaho itself has never operated an independent state-level beneficial-ownership registry; Secretary of State filings capture registered agents and officers only. For the period the Corporate Transparency Act domestic reporting-company requirement was in force, this state-level gap was immaterial, because Idaho-formed LLCs and corporations reported beneficial ownership federally as domestic reporting companies. That backstop was removed by the March 2025 FinCEN interim final rule, which formally exempted domestic reporting companies, including all Idaho-formed entities, from CTA beneficial-ownership reporting, leaving only foreign-formed entities registering to do business in a US state within scope. The baseline therefore documents a jurisdiction that has moved, within roughly one cycle of coverage, from full federal beneficial-ownership disclosure coverage to none, without any change in the registry design of Idaho itself.

The corroboration for the state-level registry-absence finding is strong, drawing on both a FinCEN primary source and independent ICIJ investigative reporting, and the monitor treats it as an architecture-level fact rather than a provisional read. The federal exemption underlying the broader opacity-vector finding is treated with appropriate caution, however: it remains an interim final rule, open to a comment period, and contingent on the unresolved appellate litigation in National Small Business United v. Yellen and on a promised final rulemaking that has not yet issued. This baseline is explicit that any subsequent cycle could see the exemption narrowed, reinstated in modified form, or permanently entrenched, and treats the current opacity condition as provisional rather than settled.

Set against this Idaho-specific trajectory, the baseline also documents the durable global backdrop of the EU AML Package as context, not as governing law for Idaho. That package comprises three distinct instruments: the directly applicable AML Regulation (Regulation (EU) 2024/1624), the sixth AML Directive requiring member-state transposition, and the AMLA Regulation (Regulation (EU) 2024/1620) establishing the Anti-Money Laundering Authority, which is progressively shifting supervision of the highest-risk cross-border obliged entities toward a hybrid EU-level regime. Idaho and the United States sit entirely outside this perimeter; the relevance to Idaho is confined to indirect correspondent-banking due-diligence friction for institutions with EU counterparties, not to any direct supervisory nexus.

This reopened opacity vector reaches a broad customer-typology base within the baseline: any Idaho-formed LLC or corporation, regardless of the wealth or sophistication of its beneficial owner, now falls outside both the state and federal beneficial-ownership disclosure regime, touching corporate and high-net-worth customer segments alike. Financial institutions maintaining correspondent, custody, or account relationships with Idaho-formed corporate customers can no longer rely on the CTA reporting chain as an independent source of beneficial-ownership verification and must depend entirely on their own customer-due-diligence programs, a burden-shift from public-registry disclosure to private-sector control frameworks that this baseline records as a material control-framework consequence of the federal rule change.

Read against the overall Idaho jurisdiction risk trajectory, assessed in this baseline as increasing, the beneficial-ownership finding stands as one of two structural drivers, alongside the crypto-ATM exposure documented in the digital-asset domain, that combine with an otherwise mixed enforcement-versus-enablement balance to produce a deteriorating rather than stable overall assessment for Idaho. Neither driver reflects a discrete state policy choice; both instead reflect federal-level developments that Idaho inherits by virtue of its position within the US federal financial-regulatory architecture rather than through any distinguishing state-level action of its own. This baseline establishes that distinction as a standing analytical frame for future cycles: Idaho-specific developments, whether legislative or enforcement-related, would represent a materially different category of finding from the federally driven conditions documented here.

The state-of-domain read established by this baseline is that the beneficial-ownership transparency posture of Idaho is currently on a deteriorating trajectory driven by a federal decision rather than a local one, with the durability of that deterioration hinging on litigation and rulemaking outcomes external to Idaho itself, and with no Idaho-specific registry initiative on record to offset the federal rollback.

Outlook

Subsequent cycles should track the National Small Business United v. Yellen appellate outcome, any FinCEN final rule on CTA domestic scope, and any Idaho legislative movement toward an independent state-level beneficial-ownership registry, none of which had resolved as of this baseline.

domain_sub_briefs · D2 · Cumulative analysis
Periodic updates (1)
11 Aug 2026 · fim-2026-08-05

Beneficial Ownership

This cycle substrate identifies no development under the US Corporate Transparency Act, and no Idaho-specific beneficial-ownership development; per the gaps register, this is a coverage gap for this cycle rather than a positive finding that the beneficial-ownership regime in the United States is currently stable. Beneficial-ownership exposure in Idaho runs primarily through the federal beneficial-ownership reporting framework rather than through any state-level register, so the material development this cycle, detailed below, sits entirely within the AML Package of the European Union and is relevant to a reader in the United States or Idaho chiefly as global structural backdrop rather than as a direct description of the regulatory perimeter of Idaho itself.

As durable structural backdrop: the AML Package of the European Union comprises three distinct instruments operating on different legal mechanics. The AML Regulation, or AMLR, Regulation (EU) 2024/1624, is directly applicable across all member states without national transposition. The sixth Anti-Money Laundering Directive, or 6AMLD, must instead be transposed into the domestic law of each member state, producing potential variation in implementation timing and detail even where the underlying directive text is uniform. The AMLA Regulation, Regulation (EU) 2024/1620, establishes the Anti-Money Laundering Authority itself, and its practical effect is to shift the AML supervisory perimeter of the EU from a purely national-authority model toward a hybrid regime in which AMLA exercises direct supervision over a first cohort of high-risk cross-border obliged entities beginning in January 2028, while national authorities retain supervision of the remainder under the indirect oversight of AMLA. This tri-instrument architecture, not any single cycle development, is the durable frame against which the beneficial-ownership signal this cycle should be read.

The specific development this cycle within that architecture is the lowering of the beneficial-ownership disclosure threshold under 6AMLD to 25 percent or more of ownership or voting rights, from the prior more-than-25-percent formulation, a small numeric change with real effect at the margin, since it captures ownership stakes sitting exactly at the historic threshold that previously escaped disclosure. That change lands alongside a 10 July 2026 deadline for the underlying register-transposition provisions, articles 11 through 13 and 15 of 6AMLD. The European Commission has opened Article 74 infringement proceedings against 11 member states for failing to fully notify their transposition measures, meaning the harmonised threshold is not yet uniformly operative across the bloc even as it nominally takes effect. Separately, AMLA itself faces a 10 July 2026 deadline to submit 23 regulatory and implementing technical standards to the European Commission, standards that will govern much of the practical detail, including customer due diligence and risk-assessment methodology, underneath the directly-applicable AMLR.

None of this changes beneficial-ownership obligations in Idaho or at the federal level in the United States directly, but the widening gap between a formally lowered EU disclosure threshold and incomplete member-state transposition is a live illustration of a supervisory-perimeter gap during a multi-year transition, a pattern relevant to any jurisdiction, including the United States, contemplating its own transition points for a beneficial-ownership regime. Financial institutions operating across footprints in the United States and the EU, including Idaho-based institutions with EU correspondent relationships, will need to track the 25 percent threshold and the member-state infringement list as part of correspondent and counterparty due diligence, even without any change to their own domestic beneficial-ownership filing obligations. The absence of a corresponding development under the Corporate Transparency Act this cycle means the US-specific signal in this domain remains at zero; that absence is itself the finding for a reader in the United States of this brief.

Outlook

The most consequential near-term date for this domain is 10 July 2026, on which both the 6AMLD register-transposition deadline and the AMLA technical-standards submission deadline fall simultaneously; whether the 11 member states currently in infringement proceedings close that gap in the following cycle, or whether the list of non-compliant states grows, will indicate whether beneficial-ownership harmonisation in the EU is on a genuine convergence path or a prolonged partial-implementation one. For obliged entities in the United States and Idaho, the more relevant open question, not addressed by this cycle substrate, is whether any rulemaking, litigation, or FinCEN guidance activity under the Corporate Transparency Act resumes in a future cycle; its continued absence this cycle should be read as a monitoring gap rather than as a signal that the CTA framework is settled.

D3 Enabler Jurisdictions

watchactive

Enabler Jurisdictions

Viewed through an enabler-jurisdiction lens, Idaho's launch of a statewide Financial Fraud Working Group is a textbook example of a jurisdiction identifying, through its own executive process, that its institutional architecture for detecting and reporting financial crime has not kept pace with the volume of loss occurring inside it. The Governor's announcement confirms that Idaho currently has no central repository for fraud reports and no standing unit dedicated to investigating financial crime. This is a capacity deficit, not an engineered permissiveness, but capacity deficits are themselves a form of enablement: the absence of coordinated reporting and investigation infrastructure lowers the practical cost of fraud regardless of intent on the part of any single actor.

Continue reading

The scale of the problem being addressed is substantial. Reported 2026 fraud losses statewide reached 88.7 million dollars, a figure drawn from secondary reporting that corroborates the Governor's own stated rationale for convening the working group. The working group itself, meeting first on November 17, 2026, is co-led by the Lieutenant Governor, a United States Attorney, and the Department of Finance Director, and its membership draws together law enforcement, prosecutors, banks, credit unions, senior advocates, state agencies, and legislators. That composition indicates the state is attempting to build cross-sector coordinating infrastructure rather than relying on any single agency or statute.

The analytically significant feature here is the choice of mechanism. Idaho has not responded to a confirmed, quantified loss figure with new substantive law; it has responded with an institutional process. This is consistent with a broader pattern in enabler-jurisdiction analysis: a state recognizing a gap and convening stakeholders to map it is a necessary precursor to legislative or regulatory closure, but it is not closure itself. Until the working group reports and any resulting fraud-reporting model or legislative product takes effect, the underlying absence of a central fraud-reporting repository and a dedicated investigative unit persists as a structural feature of the jurisdiction, not merely a one-time disclosure.

This capacity gap also intersects with the digital-asset space, since the working group has been explicitly tasked with revisiting the vetoed virtual-currency kiosk legislation discussed in the companion sub-brief. The combination of a general fraud-reporting deficit and an unresolved kiosk-specific gap suggests the enabler profile here is broad rather than narrowly confined to any one financial product or sector.

Outlook

The working group's reporting cycle ahead of the 2027 legislative session is the principal structural marker to track. As scheduled, its output could include a coordinated statewide fraud-reporting model that addresses the repository gap, alongside a revised approach to virtual-currency-kiosk oversight. Whether Idaho closes the enabler gap identified this cycle, or simply formalizes a coordinating body without new statutory authority, will determine whether this episode marks a genuine architectural shift or a procedural response to a reputational and financial pressure point. Idaho's underlying anti-money-laundering posture remains entirely dependent on the federal Bank Secrecy Act and FinCEN framework, with no independent state financial intelligence unit, and that baseline is unlikely to change materially before the working group concludes its work.

Judgment: Idaho's Governor launched a statewide Financial Fraud Working Group to address a confirmed capacity gap (no central fraud-reporting repository, no dedicated financial-crime investigative unit). Probable
Cumulative analysis

Enabler Jurisdictions and Professional Facilitators — Cumulative Analysis

This is the first baseline cycle for the enabler-jurisdiction and professional-facilitator profile of Idaho, and the initial signal is narrow and appropriately caveated. The baseline documents a single recurring Bitcoin Depot-linked wallet address identified by a Boise Police Department detective across more than 100 local scam investigations, alongside the absence of any identified Idaho Attorney General or Department of Finance enforcement action against Bitcoin Depot, CoinFlip, or Athena Bitcoin, in contrast to the multistate Attorney General enforcement wave pursued by several peer states against crypto-ATM operators. The monitor treats this as a possible enforcement-gap signal rather than a confirmed one: the reviewer challenge attached to this baseline explicitly cautions that Idaho-specific primary-source sourcing thinness, not a confirmed absence of enforcement, may account for the finding, and the confidence tier is set to Possible accordingly.

Under the enablement-as-signal principle applied by this monitor, the absence of enforcement action in a jurisdiction with documented high-volume scam-wallet exposure is itself analytically significant regardless of cause, and this baseline flags it as a standing watch item rather than closing the question. Subsequent cycles should specifically pursue direct access to Idaho Department of Finance and Attorney General enforcement dockets, which was not available this cycle, in order to distinguish a genuine capacity or prioritization gap from a sourcing artifact.

Outlook

The state-of-domain assessment going forward is watch-and-confirm: this baseline establishes the enforcement-gap hypothesis but does not resolve it, and the priority for the next cycle should be direct docket access rather than continued reliance on secondary reporting.

domain_sub_briefs · D3 · Cumulative analysis
Standing baseline position

Idaho launched a statewide Financial Fraud Working Group (convened 2026-10-26, first meeting 2026-11-17) to assess coordinated fraud-reporting and investigation; the state currently has no central fraud-repository or dedicated financial-crime unit.

Periodic updates (3)
8 Nov 2026 · fim-2026-11-08

Enabler Jurisdictions

Viewed through an enabler-jurisdiction lens, Idaho's launch of a statewide Financial Fraud Working Group is a textbook example of a jurisdiction identifying, through its own executive process, that its institutional architecture for detecting and reporting financial crime has not kept pace with the volume of loss occurring inside it. The Governor's announcement confirms that Idaho currently has no central repository for fraud reports and no standing unit dedicated to investigating financial crime. This is a capacity deficit, not an engineered permissiveness, but capacity deficits are themselves a form of enablement: the absence of coordinated reporting and investigation infrastructure lowers the practical cost of fraud regardless of intent on the part of any single actor.

The scale of the problem being addressed is substantial. Reported 2026 fraud losses statewide reached 88.7 million dollars, a figure drawn from secondary reporting that corroborates the Governor's own stated rationale for convening the working group. The working group itself, meeting first on November 17, 2026, is co-led by the Lieutenant Governor, a United States Attorney, and the Department of Finance Director, and its membership draws together law enforcement, prosecutors, banks, credit unions, senior advocates, state agencies, and legislators. That composition indicates the state is attempting to build cross-sector coordinating infrastructure rather than relying on any single agency or statute.

The analytically significant feature here is the choice of mechanism. Idaho has not responded to a confirmed, quantified loss figure with new substantive law; it has responded with an institutional process. This is consistent with a broader pattern in enabler-jurisdiction analysis: a state recognizing a gap and convening stakeholders to map it is a necessary precursor to legislative or regulatory closure, but it is not closure itself. Until the working group reports and any resulting fraud-reporting model or legislative product takes effect, the underlying absence of a central fraud-reporting repository and a dedicated investigative unit persists as a structural feature of the jurisdiction, not merely a one-time disclosure.

This capacity gap also intersects with the digital-asset space, since the working group has been explicitly tasked with revisiting the vetoed virtual-currency kiosk legislation discussed in the companion sub-brief. The combination of a general fraud-reporting deficit and an unresolved kiosk-specific gap suggests the enabler profile here is broad rather than narrowly confined to any one financial product or sector.

Outlook

The working group's reporting cycle ahead of the 2027 legislative session is the principal structural marker to track. As scheduled, its output could include a coordinated statewide fraud-reporting model that addresses the repository gap, alongside a revised approach to virtual-currency-kiosk oversight. Whether Idaho closes the enabler gap identified, or simply formalizes a coordinating body without new statutory authority, will determine whether this episode marks a genuine architectural shift or a procedural response to a reputational and financial pressure point. Idaho's underlying anti-money-laundering posture remains entirely dependent on the federal Bank Secrecy Act and FinCEN framework, with no independent state financial intelligence unit, and that baseline is unlikely to change materially before the working group concludes its work.

11 Aug 2026 · fim-2026-08-05

Enabler Jurisdictions

Cambodia is this cycle clearest illustration of an enabler jurisdiction in the specific sense this monitor tracks: not a jurisdiction with no AML framework at all, but one whose formal casino-licensing and junket-oversight architecture coexists with, and in places directly enables, a scam-compound and trafficking economy operating at industrial scale. The pattern matches the enablement-as-signal principle of this monitor: it is not the absence of a functioning gaming-regulatory framework that constitutes the risk, but a functioning framework whose junket and VIP-room segment operates largely outside the reach of that same framework beneficial-ownership and source-of-funds requirements. The public acknowledgement by National Bank of Cambodia Governor Chea Serey of renewed FATF grey-listing risk is a rare instance of a national supervisor naming its own exposure before an international body does so, and it should be read as evidence of the scale of the underlying problem rather than as evidence that the problem is being resolved.

The arrest and extradition of Chen Zhi to China, followed by the forced liquidation of Prince Bank and associated real-estate entities under the Prince Group umbrella, demonstrates that enforcement against the casino-and-compound economy in Cambodia can reach substantial, apparently diversified financial structures once a triggering event occurs, in this instance a criminal justice action initiated outside the domestic enforcement architecture of Cambodia. That the liquidation followed an external arrest rather than a domestic supervisory action is itself a data point about where effective enforcement capacity in this ecosystem currently resides.

Separately, Reuters reporting that Lim Heng Group, operator of the Royal Hill Resort and Casino, leased casino-adjacent buildings to a Chinese national whose subsequent activity on the site supported online fraud and trafficking operations illustrates a distinct enablement mechanism: legitimate gaming-sector real estate serving as a landlord of convenience for an entirely separate criminal enterprise operating next door. This is a materially different typology from direct casino-based laundering, and it indicates that enabler-jurisdiction exposure in Cambodia extends beyond the gaming licensees themselves into the broader commercial real-estate ecosystem that services them.

Laos presents a structurally distinct but related enabler-jurisdiction finding. The direct 20 percent equity stake the Lao government holds in the Golden Triangle Special Economic Zone, a zone long associated internationally with casino-linked money laundering and trafficking, represents a structural conflict of interest in which the state itself holds a financial stake in infrastructure that international observers have flagged as a laundering and trafficking risk. This finding carries lower confidence than the findings for Cambodia, resting on a single Tier 2 investigative source with no fresh Lao government or international action this cycle corroborating it further, and it should be weighted accordingly. It nonetheless fits the same architectural pattern as Cambodia: casino and special-economic-zone infrastructure in the region continues to sit at the intersection of formal state or quasi-state financial interest and documented illicit-finance risk, and the absence of enforcement action against that structural interest is itself a form of analytically significant enablement signal, distinct from active facilitation.

The cartel-linked casino sector in Mexico is this cycle third enabler-jurisdiction case, though one addressed primarily through active enforcement in the United States rather than domestic Mexican supervisory failure. The designation by OFAC of two casinos affiliated with the Cartel del Noreste, combined with the FinCEN Section 311 proposal targeting ten Mexico-based gambling establishments as a class, indicates that the gaming sector functioning as cartel financial infrastructure is now assessed by authorities in the United States as a systemic feature of the gaming sector in Mexico rather than a small number of isolated bad actors, a materially more severe framing than a handful of individual designations would suggest.

Outlook

The trajectory in Cambodia over the coming cycles will likely determine whether the net-neutral optics of the June 2026 FATF plenary hold or reverse; a third grey-listing would be a significant reputational and correspondent-banking event for the jurisdiction, and the public warning from the Governor suggests domestic authorities anticipate this as a live possibility rather than a remote risk. Whether the Prince Group liquidation represents a genuine inflection point in domestic enforcement capacity, or an externally triggered one-off, will become clearer only if a subsequent action originates from Cambodian authorities themselves rather than from a foreign arrest. The structural exposure in Laos is unlikely to resolve without either a change in the equity position the state holds in the Golden Triangle SEZ or renewed multilateral attention, neither of which this cycle substrate indicates is imminent. In Mexico, the outcome of the FinCEN Section 311 rulemaking process, whether it proceeds to a final special-measures rule, is the single most consequential near-term variable for whether enforcement in the United States against cartel-linked gaming infrastructure escalates further.

14 Jul 2026 · fim-2026-07-14

Enabler Jurisdictions and Professional Facilitators

The Idaho enabler-jurisdiction signal this cycle is narrow but worth stating plainly: despite a Boise Police Department detective identifying a single recurring Bitcoin Depot-linked wallet address across more than 100 local scam investigations, no Idaho Attorney General or Idaho Department of Finance enforcement action against Bitcoin Depot, CoinFlip, or Athena Bitcoin has been identified, in contrast to the multistate Attorney General enforcement wave pursued by Iowa, Massachusetts, Connecticut, Missouri, Nevada, Maine, and the District of Columbia against crypto-ATM operators. This is presented as a possible enforcement-gap signal rather than a confirmed one. The reviewer challenge attached to this finding cautions explicitly that the absence of identified Idaho enforcement action may partly reflect the thinness of publicly accessible Idaho-specific primary-source enforcement dockets rather than a genuine absence of enforcement activity, and the confidence tier on this finding is set to Possible to reflect that caveat rather than to assert a confirmed capacity or prioritization gap. The absence of Idaho from this wave stands out given the volume of evidence documented in the crypto-ATM scam pipeline, and if confirmed as a genuine non-participation rather than a sourcing artifact, it would constitute an enabler-jurisdiction signal under the enablement-as-signal principle applied by this monitor: the absence of enforcement action in a jurisdiction with documented high-volume exposure is itself analytically significant, independent of any subsequent action.

Outlook

This finding should be treated as a watch item rather than a settled assessment. Confirming or ruling out non-public Idaho enforcement activity against crypto-ATM operators would require direct access to Idaho Department of Finance and Attorney General dockets, which was not available this cycle; the next cycle should specifically seek that access before upgrading this signal beyond Possible confidence.

D4 Conflict Finance

no_changeno_changestanding position

Conflict Finance and Extractive-Industry Integrity

The connection of Idaho to conflict finance this cycle runs through a single sanctions designation rather than a locally originated scheme. The OFAC designation of the Democratic Karen Benevolent Army, its senior leadership, and affiliated companies for supporting Myanmar-based cyber scam centers targeting Americans establishes a traceable channel: the source is US and global scam-victim cash proceeds, including Idaho victims documented elsewhere in this baseline crypto-ATM findings; the channel is crypto-ATM and VASP layering infrastructure; and the deployment is financing of the DKBA, an armed ethnic organization operating within the internal conflict in Myanmar. This is treated as an early, single-designation signal rather than an established durable financing channel, and the F4 conflict-finance trace applied by this monitor structures the analysis of source, channel, and deployment rather than asserting a mature or continuing pipeline. No direct Idaho-based entity or transit corridor has been identified within this channel; the connection of Idaho is limited to its documented status as one of the many US jurisdictions whose scam-victim losses feed the broader proceeds pool that this designation targets. This finding was flagged for SCEM review given its conflict-finance context and for WDM review at Possible confidence given the reported entanglement of Chinese organized-crime-linked companies with the scam-center network, illustrating how a single designation can carry cross-monitor significance beyond its immediate sanctions effect.

Continue reading

Outlook

Whether this designation marks an isolated action or the first documented instance of a recurring US-scam-to-Myanmar-conflict financing channel is the open question for subsequent cycles. The role of Idaho in this picture remains indirect, as one origination point among many US jurisdictions feeding the broader scam-victim proceeds pool rather than a distinct conflict-finance node in its own right; continued monitoring of further OFAC action against Myanmar-based armed-group financing would be the clearest signal of an established pattern.

Judgment: No Idaho-specific conflict-finance nexus identified this cycle. Uncertain
Cumulative analysis

Conflict Finance and Extractive-Industry Integrity — Cumulative Analysis

This is the first baseline cycle in which the profile of Idaho intersects with conflict-finance analysis, and the connection is narrow, indirect, and appropriately early-stage. The baseline traces a single channel arising from the OFAC designation of the Democratic Karen Benevolent Army and affiliated companies for supporting Myanmar-based cyber scam centers targeting Americans: source funds are US and global scam-victim cash proceeds, including losses documented among Idaho victims elsewhere in this baseline; the channel is crypto-ATM and VASP layering infrastructure of the kind documented in the digital-asset domain; and the deployment is financing of an armed ethnic organization operating within an active internal conflict in Myanmar. No Idaho-based entity or transit corridor has been identified within this channel, and the role of Idaho is limited to its status as one of many US jurisdictions whose scam-victim losses feed the broader proceeds pool. The monitor treats this as an early, single-designation signal, not an established durable financing pipeline, and has flagged it for SCEM review of the conflict-finance context and for WDM review, at Possible confidence, of state-capture and quasi-state criminal-network dynamics given the reported involvement of Chinese organized-crime-linked companies in the same scam-center network.

Outlook

Future cycles should watch for further OFAC or partner-agency action against Myanmar-based armed-group financing to determine whether this designation represents an isolated action or the first documented instance of a recurring channel; absent such follow-on action, this baseline should be read as an early flag rather than a settled conflict-finance finding.

domain_sub_briefs · D4 · Cumulative analysis
Periodic updates (1)
11 Aug 2026 · fim-2026-08-05

Conflict Finance

The conflict-finance signal this cycle centres on continued action by OFAC against Houthi oil-smuggling and revenue-generation networks in Yemen, representing sustained escalation of sanctions architecture targeting the financial base of a live conflict actor rather than a single discrete action. A structurally distinct extractive-industry-integrity finding concerning Laos rounds out the material in this domain this cycle, though at materially lower confidence.

The designation by OFAC of 21 individuals, entities, and one vessel tied to Houthi oil-smuggling and revenue-generation activity addresses the physical commodity-smuggling and revenue-collection layer of the network directly. The inclusion of a vessel among the designated targets extends the sanctions architecture beyond financial and corporate nodes into the physical logistics layer of the smuggling operation, a maritime dimension that complements rather than substitutes for the parallel banking-sector action. That separate action, the designation of the Yemen-based International Bank of Yemen for providing financial support to the Houthis, also known as Ansarallah, addresses a different layer entirely: formal banking-sector access that allows smuggling revenue, once generated, to enter and move through the conventional financial system. Layering a commodity-smuggling designation with a banking-sector designation against the same underlying conflict actor is the kind of multi-node sanctions architecture this monitor treats as evidence of sustained institutional prioritisation rather than episodic response, consistent with continued concern over Iran-network-linked destabilization that has driven Yemen policy in the United States across multiple administrations.

Consistent with the standing correction of this monitor for AML-enforcement-volume bias, the Houthi designations are best read through a counter-terrorist-financing and counter-proliferation-financing lens rather than a generic AML lens: the underlying concern is revenue generation supporting the operational capacity of an active armed actor, not primarily the laundering of already-generated criminal proceeds through the financial system. The absence of an equivalent OFSI action against the same Houthi-linked network this cycle is worth noting without over-interpretation; it may reflect timing rather than substantive policy divergence, but it is nonetheless the kind of allied-programme asymmetry this monitor tracks across jurisdictions and programmes.

A structurally distinct but conceptually related finding concerns the direct 20 percent equity stake the Lao government holds in the Golden Triangle Special Economic Zone, a zone whose casino and compound economy has been linked to trafficking and laundering activity. While this finding sits primarily within the enabler-jurisdiction tracking of this monitor, its extractive-industry-integrity dimension, a state holding a direct financial stake in a zone implicated in illicit revenue generation, is relevant here as an instance of state-linked financial interest in infrastructure adjacent to illicit-finance risk, a pattern this monitor tracks across both conflict-affected and non-conflict-affected jurisdictions. This finding carries low confidence, resting on a single Tier 2 source with no fresh government or international action corroborating it this cycle, and no new extractive-sector-specific development was identified for Laos beyond this structural observation.

No additional conflict-finance or extractive-industry-integrity development beyond the findings for Yemen and Laos was identified this cycle; in particular, no fresh action was identified concerning conflict-mineral supply chains, sanctioned-state commodity exports beyond the Houthi oil-smuggling finding, or extractive-sector beneficial-ownership disclosure elsewhere. This is a coverage statement about this cycle substrate rather than a finding of stability, and should not be read as evidence that extractive-industry risk elsewhere is currently subdued.

Outlook

The Houthi financial network is likely to remain a live designation target for OFAC given the demonstrated ability of the network to reconstitute revenue streams following individual designations; whether the designation of the International Bank of Yemen meaningfully degrades correspondent-banking access for the broader Houthi-linked financial ecosystem, or whether alternative banking channels absorb the disrupted flows, is the key open question for coming cycles. For Laos, absent a change in the equity position the state holds in the Golden Triangle SEZ or a fresh multilateral or bilateral enforcement action, this monitor expects the structural finding to persist without further development; it is flagged here as standing exposure rather than as an active or escalating signal this cycle. This is illustrative orientation for continued monitoring, not a prediction of specific future action.

D5 Crypto / Digital Assets / Financial Innovation

watchactive

Crypto / Digital Assets / Financial Innovation

Idaho's 2026 attempt to regulate virtual-currency kiosk fraud offers a clear illustration of how digital-asset consumer-protection gaps persist even where legislative intent exists. Senate Bill 1359, the Virtual Currency Kiosk Fraud Prevention Act, would have imposed registration, disclosure, transaction-limit, and fraud-prevention duties on operators of virtual-currency kiosks, a category of physical cash-to-crypto conversion machines increasingly associated with consumer-fraud schemes nationally. The bill passed both chambers of the Idaho legislature but was vetoed by Governor Little on April 28, 2026, specifically for drafting deficiencies rather than any policy objection to kiosk regulation as such. The veto therefore left Idaho's virtual-currency kiosk sector without the registration, disclosure, and transaction-cap framework that other states have already adopted for the same product category.

Continue reading

The legislative process around the bill also surfaced a coordination gap between the legislature and the state's financial regulator. Senator Ruchti, reflecting on the veto, said the Department of Finance did not provide feedback on the initial bill, and he has stated an intention to consult with the department directly ahead of a renewed attempt in the 2027 legislative session. This sequencing, a bill drafted with insufficient regulator input, vetoed for drafting problems, followed by an explicit commitment to closer consultation before the next attempt, is itself a notable structural finding: it suggests the deficiency was procedural and correctable rather than reflecting any substantive disagreement over whether kiosk operators should be regulated.

The newly convened Financial Fraud Working Group adds a further institutional layer to this picture. The group is explicitly understood to be tasked with revisiting the kiosk-fraud issue ahead of the 2027 session, placing the digital-asset kiosk gap inside a broader state capacity-building effort that also addresses the general absence of a central fraud-reporting repository. This linkage matters: a kiosk-specific statute drafted in isolation from the state's wider fraud-reporting architecture risks repeating the coordination failure that contributed to the 2026 veto.

In the interim, virtual-currency kiosk operators in Idaho continue to operate without state-level registration, disclosure, or transaction-limit obligations specific to their product category, leaving oversight of these machines dependent on general consumer-protection law and the federal framework rather than any bespoke kiosk statute.

Outlook

The 2027 legislative session is the key date to track for this vector. As scheduled, a revised kiosk-fraud bill, informed by direct Department of Finance consultation and by the Financial Fraud Working Group's broader findings, is the most likely legislative product, though its content and timing remain unconfirmed. Should the working group's November 17, 2026 proceedings generate a recommendation ahead of the session convening, that would materially increase the likelihood of a corrected bill reaching the Governor's desk in 2027 with the drafting deficiencies that triggered the 2026 veto addressed.

Judgment: Idaho's 2026 attempt to regulate virtual-currency-kiosk fraud (SB1359) was vetoed; the new Financial Fraud Working Group is explicitly tasked with revisiting this ahead of the 2027 session. Probable
Cumulative analysis

Crypto, Digital Assets, and Financial Innovation — Cumulative Analysis

This is the first baseline cycle establishing the digital-asset integrity profile of Idaho, and it identifies crypto-ATM kiosks as the principal exposure mechanism for the jurisdiction. The baseline documents a single Bitcoin Depot-linked wallet address recurring across more than 100 Idaho-area scam investigations, evidencing a cash-to-bitcoin laundering pipeline in which victims are instructed to deposit cash into kiosks operated by Bitcoin Depot, CoinFlip, and Athena Bitcoin, with funds converted and forwarded near-instantly to attacker-controlled wallets before layering through peel chains and offshore exchanges. The role of Idaho in this pipeline is dual: it is both a victim-origination point and, via a 112 million US dollar multi-district pig-butchering seizure requiring a parallel Idaho warrant alongside Arizona and California warrants, an investigative venue within a commingled national laundering network.

Idaho-licensed kiosk operators already sit within an existing federal supervisory framework: FinCEN Notice FIN-2025-NTC1 reaffirms that 31 CFR 1022.320 SAR and CTR obligations apply nationwide, including to Idaho-licensed money-services businesses operating kiosks. Layered onto this baseline is a forward-looking development that will extend obligations further: the joint FinCEN and OFAC GENIUS Act PPSI AML/CFT rulemaking, currently at the consultation stage under docket FINCEN-2026-0100, will impose mandatory sanctions-compliance-program obligations on permitted payment stablecoin issuers, directly affecting any Idaho-domiciled or Idaho-licensed stablecoin issuer entering that space in the 2026-to-mid-2027 window.

The baseline is explicit that the crypto-integrity posture of Idaho is governed by this US federal architecture rather than by international instruments such as MiCA or the FATF virtual-asset standards, which remain relevant only as global contextual backdrop rather than as directly binding frameworks for Idaho-licensed firms.

The retail, MSB, and VASP-counterparty customer segments identified within this baseline crypto-ATM findings sit squarely within existing 31 CFR 1022.320 reporting coverage, meaning the control gap this baseline documents is one of enforcement follow-through rather than regulatory design: the underlying obligation is already covered on paper, but the state-level consumer-protection response has not matched the volume of kiosk-linked scam activity. This is a materially different gap-type from the beneficial-ownership finding documented in the D2 domain, where the underlying disclosure obligation itself was removed; here, the underlying BSA reporting and monitoring obligation for kiosk operators remains fully in force, and the open question this baseline identifies is one of Idaho-specific enforcement capacity or prioritization rather than of any regulatory vacancy.

The pending GENIUS Act rulemaking is best read within this baseline as closing a different kind of gap entirely: general industry practice for permitted payment stablecoin issuers currently lacks a finalized mandatory sanctions-compliance-program standard, and this rulemaking, once finalized, would establish that standard for the first time. Any Idaho-domiciled or Idaho-licensed entity contemplating entry into stablecoin issuance should treat this NPRM, currently at the consultation stage with a High confidence rating and a direct primary-source basis in a joint FinCEN and OFAC docket, as a near-certain future compliance requirement rather than a speculative one.

The overall state-of-domain read of this baseline is that the digital-asset integrity exposure of Idaho is high-volume but reactive rather than proactive at the state level: existing federal kiosk obligations and the coming stablecoin-specific rulemaking address the regulatory-design side of the picture, while the documented gap between scam-wallet volume and state enforcement activity remains the open operational question for subsequent cycles to track.

Outlook

Subsequent cycles should track finalization of the GENIUS Act PPSI AML/CFT rule, any Idaho Attorney General or Department of Finance enforcement action against kiosk operators, and any further multi-district seizure activity connecting Idaho to national laundering networks, as the key indicators of whether the deteriorating trajectory assessment in this baseline continues, stabilizes, or reverses.

domain_sub_briefs · D5 · Cumulative analysis
Standing baseline position

Idaho's Virtual Currency Kiosk Fraud Prevention Act (SB1359) passed both chambers but was vetoed by Gov. Little on 2026-04-28 for drafting deficiencies; not in force. The Financial Fraud Working Group (convening 2026-11-17) is tasked with revisiting kiosk fraud ahead of the 2027 session.

Periodic updates (6)
25 Oct 2026 · fim-2026-10-25

Crypto, Digital Assets, and Financial Innovation

Idaho's digital-asset financial-integrity posture is defined by a licensing gateway that is functioning and actively enforced, paired with a legislative gap on kiosk-channel fraud that the Governor's veto has left open. The Idaho Department of Finance entered an Agreement and Order with Rockwallet LLC, a virtual-currency-adjacent money-services business, resolving findings that the firm had engaged in the business of money transmission in Idaho without a licence from at least April 2023 through the order date, in violation of Idaho Code Section 26-2903(1). No monetary penalty was disclosed in the order. In a second and distinct matter, the Department denied a money-transmitter licence application from PayKES L.L.C., dated March 25, 2026, because the applicant did not satisfy the statutory net-worth and financial-responsibility requirements set out in Idaho Code Sections 26-2905 and 26-2910. Both actions sit squarely within the Money Transmitters Act framework, which requires anyone conducting the business of money transmission in Idaho, absent a narrow exemption under Idaho Code Section 26-2904, to hold a state licence.

The legislative dimension of the crypto signal is the veto of the Virtual Currency Kiosk Fraud Prevention Act, Senate Bill 1359. The bill passed the Senate 19-16 on March 19, 2026 and the House on April 1, 2026, and would have required virtual-currency kiosk operators to be licensed money transmitters and to deploy blockchain analytics and tracing software specifically for fraud and money-laundering detection, together with mandatory disclosures, transaction limits for new users, refund rights, and information-sharing with law enforcement. Governor Little vetoed the bill on April 28, 2026. The practical effect is that Idaho currently has no kiosk-specific statutory requirement to deploy tracing or analytics tools, notwithstanding that the general money-transmitter licensing regime already captures kiosk operators engaged in money transmission as a matter of licensing, if not as a matter of fraud-specific tooling.

Taken together, these three developments describe an enforcement posture that is active at the level of licensing (two orders against virtual-currency-adjacent entities in a single cycle) but legislatively incomplete at the level of fraud-specific typology response (the kiosk bill's failure to become law). This is the kind of architecture-over-incident pattern worth naming explicitly: the underlying licensing statute is doing real work, catching both an unlicensed operator and an under-capitalised applicant, while the newer, more targeted anti-fraud tooling mandate aimed at a known higher-risk channel, cash-to-crypto kiosks, did not clear the legislative process.

The backdrop for this is Idaho's narrow AML/CFT architecture. The state has no dedicated AML/CFT statute or financial-intelligence unit; the Money Transmitters Act, administered by the Department of Finance Securities Bureau, is the sole state-level AML-relevant gateway for payment and crypto firms, and it works in tandem with federal FinCEN money-services-business registration and Bank Secrecy Act program obligations rather than displacing them. Firms operating virtual-currency businesses in Idaho are therefore subject to a licensing-and-capital-adequacy screen at the state level and a transaction-monitoring and reporting obligation at the federal level, with no intermediate state-specific typology or fraud-detection-technology mandate for the kiosk channel specifically, following the veto.

Outlook

The public reaction to the veto, with the bill's sponsor and AARP Idaho both registering disappointment, suggests the issue has not been resolved by the veto alone and may return to the Legislature. Whether a successor bill is introduced in the 2027 session, and on what terms, including whether a revised version addresses whatever concerns prompted the veto, is not yet known. In the interim, Idaho's crypto-adjacent money-services sector continues to be governed by the general money-transmitter licensing statute, which the Department has shown it is prepared to enforce against both unlicensed operators and under-capitalised applicants, without a state-specific kiosk fraud-prevention or blockchain-analytics mandate in force as scheduled.

11 Oct 2026 · fim-2026-10-11

Crypto, Digital Assets, and Financial Innovation

Idaho's digital-asset financial-integrity posture this cycle is defined by a licensing gateway that is functioning and actively enforced, paired with a legislative gap on kiosk-channel fraud that the Governor's veto has left open. The Idaho Department of Finance entered an Agreement and Order with Rockwallet LLC, a virtual-currency-adjacent money-services business, resolving findings that the firm had engaged in the business of money transmission in Idaho without a licence from at least April 2023 through the order date, in violation of Idaho Code Section 26-2903(1). No monetary penalty was disclosed in the order. In a second and distinct matter, the Department denied a money-transmitter licence application from PayKES L.L.C., dated March 25, 2026, because the applicant did not satisfy the statutory net-worth and financial-responsibility requirements set out in Idaho Code Sections 26-2905 and 26-2910. Both actions sit squarely within the Money Transmitters Act framework, which requires anyone conducting the business of money transmission in Idaho, absent a narrow exemption under Idaho Code Section 26-2904, to hold a state licence.

The legislative dimension of this cycle's crypto signal is the veto of the Virtual Currency Kiosk Fraud Prevention Act, Senate Bill 1359. The bill passed the Senate 19-16 on March 19, 2026 and the House on April 1, 2026, and would have required virtual-currency kiosk operators to be licensed money transmitters and to deploy blockchain analytics and tracing software specifically for fraud and money-laundering detection, together with mandatory disclosures, transaction limits for new users, refund rights, and information-sharing with law enforcement. Governor Little vetoed the bill on April 28, 2026. The practical effect is that Idaho currently has no kiosk-specific statutory requirement to deploy tracing or analytics tools, notwithstanding that the general money-transmitter licensing regime already captures kiosk operators engaged in money transmission as a matter of licensing, if not as a matter of fraud-specific tooling.

Taken together, these three developments describe an enforcement posture that is active at the level of licensing (two orders against virtual-currency-adjacent entities in a single cycle) but legislatively incomplete at the level of fraud-specific typology response (the kiosk bill's failure to become law). This is the kind of architecture-over-incident pattern worth naming explicitly: the underlying licensing statute is doing real work, catching both an unlicensed operator and an under-capitalised applicant, while the newer, more targeted anti-fraud tooling mandate aimed at a known higher-risk channel, cash-to-crypto kiosks, did not clear the legislative process this cycle.

The backdrop for this is Idaho's narrow AML/CFT architecture. The state has no dedicated AML/CFT statute or financial-intelligence unit; the Money Transmitters Act, administered by the Department of Finance Securities Bureau, is the sole state-level AML-relevant gateway for payment and crypto firms, and it works in tandem with federal FinCEN money-services-business registration and Bank Secrecy Act program obligations rather than displacing them. Firms operating virtual-currency businesses in Idaho are therefore subject to a licensing-and-capital-adequacy screen at the state level and a transaction-monitoring and reporting obligation at the federal level, with no intermediate state-specific typology or fraud-detection-technology mandate for the kiosk channel specifically, following the veto.

Outlook

The public reaction to the veto, with the bill's sponsor and AARP Idaho both registering disappointment, suggests the issue has not been resolved by the veto alone and may return to the Legislature. Whether a successor bill is introduced in the 2027 session, and on what terms, including whether a revised version addresses whatever concerns prompted the veto, is not yet known. In the interim, Idaho's crypto-adjacent money-services sector continues to be governed by the general money-transmitter licensing statute, which the Department has shown this cycle it is prepared to enforce against both unlicensed operators and under-capitalised applicants, without a state-specific kiosk fraud-prevention or blockchain-analytics mandate in force as scheduled.

22 Sep 2026 · fim-2026-09-21

Crypto, Digital Assets, and Financial Innovation

The defining development in Idaho's digital-asset architecture this cycle is a failure to legislate rather than a new rule taking effect. Senate Bill 1359, the Virtual Currency Kiosk Fraud Prevention Act, passed both chambers of the Idaho legislature with bipartisan support before being vetoed by Governor Little in April 2026. The veto message stated that the bill contained critical drafting deficiencies that would have undermined its own purpose. Whatever the technical merits of that judgment, the outcome is that Idaho's virtual-currency kiosk sector, the network of unattended cash-in machines through which consumers convert fiat currency into cryptocurrency, remains subject only to the general licensing regime under the Idaho Money Transmitters Act, administered by the Department of Finance. That general regime requires any virtual currency exchanger accepting fiat for later delivery of virtual currency to a third party to hold a money-transmitter license, but it was not built with kiosk-specific fraud typologies in mind, and it lacks the transaction-limit, cooling-off, and disclosure features SB1359 would have introduced.

This matters for a three-pillar assessment because the gap sits almost entirely on the fraud and consumer-harm axis, with correspondingly thin AML/CTF salience. Advocacy testimony behind SB1359 pointed to tens of millions of dollars in annual cryptocurrency fraud losses in Idaho, a figure that, if representative, suggests the kiosk channel is a live vector for scam-driven cash extraction rather than for structured layering or sanctions evasion in the classic AML sense. The architecture-over-incident framing applies squarely here: no single enforcement action or prosecuted fraud ring is the story this cycle; the story is that a legislature-endorsed structural fix was blocked, leaving the exposure in place by default rather than by deliberate policy choice to under-regulate.

It is also worth registering what did not change. Idaho's 2024 Bitcoin Rights Act, which exempts bitcoin mining businesses from money-transmitter licensing and entrenches self-custody and node-operation rights, was not touched by the SB1359 debate and remains the state's other major standing feature in this domain. The two developments are analytically separate: one is a permissive carve-out for mining infrastructure that has stood since 2024, the other is a failed attempt to add a protective layer for retail-facing kiosk transactions. Idaho's overall crypto posture is therefore best read as bifurcated, permissive toward infrastructure and self-custody, but currently under-equipped on the consumer-facing fraud-prevention side of the same sector.

Sponsors of SB1359 have signaled intent to return with a redrafted bill in the 2027 legislative session, informed by the specific drafting problems the Governor's veto identified. No primary-source text for any successor measure exists yet, so this should be read as a directional signal rather than a pending instrument. Whether a future version addresses the deficiencies cleanly enough to earn the Governor's signature, and whether the bipartisan coalition that passed the original bill holds together across an election cycle, are both open questions this cycle cannot resolve.

Outlook

The near-term trajectory in this domain depends entirely on legislative action that has not yet occurred. Absent a successor bill, or absent the Department of Finance electing to address kiosk-specific risks through rulemaking under its existing money-transmitter authority (an avenue not evidenced in this cycle's research), Idaho's kiosk sector will continue to operate under the general licensing regime alone. The most concrete forward marker is the expected 2027-Q1 legislative session, when a redrafted bill is anticipated; the working assumption, carried at Probable confidence, is that sponsors will attempt a second pass rather than abandon the effort. Analysts should watch for whether any interim guidance from the Department of Finance narrows the gap administratively before then, and whether the fraud-loss figures cited in the SB1359 debate recur or grow in subsequent reporting, which would sharpen the case for the successor bill's passage.

14 Sep 2026 · fim-2026-08-21

Crypto / Digital Assets / Financial Innovation

Governor Brad Little vetoed Idaho SB1359a, the Virtual Currency Kiosk Fraud Prevention Act, on April 8-9, 2026, citing drafting deficiencies that would have undermined enforcement. The bill would have added Chapter 54, Title 28, Idaho Code, imposing kiosk-specific money-transmitter licensing, a blockchain-analytics and tracing-software mandate, new-customer transaction caps of two thousand dollars per twenty-four hours and ten thousand dollars per thirty days, a seventy-two hour first-transaction settlement delay, and fraud-related fee refunds. Its failure leaves the generic Idaho Money Transmitters Act, Idaho Code § 26-2901 et seq., as the sole applicable regime for virtual-currency kiosk operators in the state, administered by the Securities Bureau of the Idaho Department of Finance.

This is assessed as one instance of a broader nationwide pattern in which state legislatures attempt kiosk-specific crypto AML overlays that encounter implementation friction, with comparable legislative activity in Louisiana (SB287) and Utah (HB72/HB0141), and substantive overlap with the federal Crypto ATM Fraud Prevention Act of 2025 (S.710). The Governor's stated rationale, drafting deficiencies rather than policy disagreement, is itself analytically material: it signals the underlying fraud-prevention objective was not rejected, only the vehicle.

Outlook

Whether a redrafted Virtual Currency Kiosk Fraud Prevention Act reaches the Idaho Legislature in the 2027 session, addressing the Governor's stated drafting deficiencies, is the principal item to watch. Until then, Idaho's virtual-currency kiosk sector operates without a kiosk-specific AML overlay, a persistent state-level control gap.

11 Aug 2026 · fim-2026-08-05

Crypto / Digital Assets / Financial Innovation

This cycle substrate identifies no Idaho-specific or federal crypto-asset regulatory development in the United States; that absence is a coverage gap for this cycle rather than a finding that the digital-asset regulatory perimeter in the United States is currently stable. Crypto-asset businesses based in Idaho and elsewhere in the United States operate under a materially different regulatory architecture from the MiCA regime of the European Union in any case, so the EU material developed this cycle, detailed below, is relevant to a reader in the United States or Idaho primarily as structural backdrop and as a driver of commercial consequences for US-headquartered firms with EU-facing operations, rather than as a direct description of the regulatory perimeter of Idaho itself.

The MiCA transitional period closed on 30 June and 1 July 2026, and the European Securities and Markets Authority has stated that any entity offering crypto-asset services to EU customers without a MiCA licence now sits in direct breach of EU law, with no further transitional cover available. This is a structural perimeter-closure event rather than an incremental compliance deadline: firms that operated under grandfathered national authorisations or informal tolerance during the transitional window no longer have that option, and EU market access for crypto-asset service providers is now conditioned entirely on MiCA authorisation rather than on any residual national discretion.

The practical market effect has been immediate and concentrated in the stablecoin segment. Tether USDT, along with DAI, USDe, FDUSD, PYUSD, and TUSD, lack MiCA authorisation as electronic-money tokens and have been delisted by Binance, Coinbase, Kraken, and Crypto.com for EEA retail users. Several of these tokens are issued or administered by entities with substantial operational footprints in the United States, meaning the MiCA enforcement action, while an EU-perimeter event, has direct commercial consequences for the European retail distribution of US-domiciled stablecoin issuers regardless of the domestic US regulatory standing of those issuers. For a reader in the United States or Idaho, this is the clearest current illustration of how the licensing perimeter of a foreign jurisdiction can affect the addressable market of a US-headquartered firm without any corresponding change to the US regulatory obligations of that firm.

This perimeter closure should be read alongside the broader beneficial-ownership and AML-package developments this cycle as evidence of a general EU regulatory posture: closing implementation windows firmly on their stated dates rather than extending informal tolerance, a posture that contrasts with the ongoing, still-incomplete 6AMLD transposition picture discussed in the Beneficial Ownership domain. Crypto-asset firms operating across markets in both the United States and the EU, including any Idaho-licensed money-services businesses with EU-facing operations, should treat the MiCA transitional closure as a firm deadline that has already passed rather than as an aspirational future milestone, and should assume that continued non-compliant stablecoin exposure in EU-facing product offerings now carries direct regulatory-breach risk rather than merely reputational risk.

No FATF virtual-asset-specific development, and no additional federal or Idaho state digital-asset development in the United States, was identified in this cycle substrate beyond the MiCA material above; the signal in this domain this cycle is concentrated entirely in the European perimeter-closure event.

Outlook

The near-term question for this domain is less about the now-closed transitional perimeter of the EU than about how quickly non-compliant stablecoin issuers pursue MiCA authorisation, since continued exclusion from EEA retail venues carries a direct and now-realised commercial cost rather than a prospective one. For digital-asset businesses in the United States and Idaho, the absence of a domestic development this cycle should not be read as regulatory stability; it is a monitoring gap, and any subsequent federal stablecoin or market-structure legislation, or state-level money-transmission guidance addressing digital assets, would represent the more directly relevant US-side counterpart to the EU-centred material this cycle. This is illustrative orientation for continued monitoring, not a prediction of specific future action.

14 Jul 2026 · fim-2026-07-14

Crypto, Digital Assets, and Financial Innovation

The digital-asset integrity exposure of Idaho is concentrated in a single mechanism operating at street level: crypto-ATM kiosks functioning as cash-out points for scam networks. A Boise Police Department detective identified a single Bitcoin Depot-linked wallet address recurring across more than 100 Idaho-area scam investigations, illustrating how scammers instruct victims to withdraw cash and deposit it into kiosks operated by Bitcoin Depot, CoinFlip, and Athena Bitcoin, which convert the cash to bitcoin and forward it near-instantly to attacker-controlled wallets before the funds are layered through peel chains and offshore exchanges. Idaho functions as both a victim-origination point and an investigative venue: a separate 112 million US dollar multi-district pig-butchering seizure, spanning six virtual-currency accounts, required parallel seizure warrants authorized by federal judges in the District of Arizona, the Central District of California, and the District of Idaho, evidencing commingled laundering flows that reach well beyond any single state.

The applicable federal supervisory framework for Idaho-licensed money-services businesses operating these kiosks is FinCEN Notice FIN-2025-NTC1, issued August 2025, which reaffirms that 31 CFR 1022.320 SAR and CTR obligations apply nationwide to convertible-virtual-currency kiosk operators, including those licensed in Idaho. Layered on top of that existing obligation is a forward-looking rulemaking: a joint FinCEN and OFAC notice of proposed rulemaking under docket FINCEN-2026-0100 will impose Bank Secrecy Act obligations and mandatory sanctions-compliance programs on permitted payment stablecoin issuers under the GENIUS Act framework, a rule currently at the consultation stage and expected within the 2026-to-mid-2027 window, which will directly affect any Idaho-domiciled or Idaho-licensed stablecoin issuer that enters the space.

Globally, instruments such as the EU Markets in Crypto-Assets Regulation and FATF virtual-asset standards set the international direction for digital-asset supervision, but neither is the operative framework governing the exposure of Idaho itself; the crypto-integrity posture of Idaho is defined instead by the interaction between kiosk-level BSA obligations already in force and the pending federal stablecoin-issuer rulemaking, both of which sit within the existing US federal supervisory architecture rather than any EU or FATF instrument directly binding Idaho-licensed firms.

The retail, MSB, and VASP-counterparty customer segments identified in this baseline crypto-ATM findings sit squarely within existing 31 CFR 1022.320 reporting coverage, meaning the control gap here is one of enforcement follow-through rather than regulatory design: the obligation is already covered on paper, but the state-level consumer-protection response has not matched the volume of documented kiosk-linked scam activity. This is a materially different gap-type from the beneficial-ownership finding elsewhere in this baseline, where the underlying obligation itself was removed; here, the underlying BSA reporting and monitoring obligation for kiosk operators remains fully in force, and the open question is one of Idaho-specific enforcement capacity or prioritization rather than of any regulatory vacancy.

The pending GENIUS Act rulemaking is best read as closing a different kind of gap: general industry practice for permitted payment stablecoin issuers currently lacks a finalized mandatory sanctions-compliance-program standard, and this rulemaking, once finalized, would establish that standard for the first time. Any Idaho-domiciled or Idaho-licensed entity contemplating entry into the stablecoin-issuance space should treat this NPRM, now at the consultation stage, as a near-certain future compliance requirement rather than a speculative one, given its High confidence rating and direct primary-source basis in a joint FinCEN and OFAC docket.

Outlook

The principal near-term digital-asset risk for Idaho is the continued gap between documented kiosk-level scam exposure and the absence of state-level consumer-protection enforcement matching the multistate Attorney General wave seen in peer states. Finalization of the GENIUS Act PPSI AML/CFT rule would extend mandatory sanctions-compliance-program obligations to any Idaho stablecoin issuer, closing a current gap in industry practice; whether the enforcement posture of Idaho toward kiosk operators shifts before then remains an open question for subsequent cycles.

D6 Compliance Technology & Active Defence

no_changeno_changestanding position

Compliance Technology and Active Defence

No independent compliance-technology or active-defence development, such as a RegTech deployment, AI-driven transaction-monitoring initiative, or perpetual-KYC program, was identified for Idaho this cycle. The only proximate signal is a cross-reference to the crypto, digital-assets domain: FinCEN Notice FIN-2025-NTC1 reminds money-services businesses, including Idaho-licensed crypto-ATM kiosk operators, of ongoing SAR and CTR vigilance obligations under 31 CFR 1022.320, which is consistent with the broader sector-wide shift from reactive to forward-looking, proactive compliance posture, though the notice itself is fundamentally a virtual-currency-kiosk supervisory development rather than a standalone compliance-technology deployment. The pending GENIUS Act stablecoin AML/CFT rulemaking similarly mandates formal sanctions-compliance programs for permitted payment stablecoin issuers, a governance-obligation development consistent with the proactive-compliance paradigm generally, but again not itself a technology or supervisory-guidance signal specific to this domain. The absence of a domain-specific development this cycle should not be read as an absence of underlying pressure: the same crypto-ATM and beneficial-ownership findings that drive the D5 and D2 assessments in this baseline create an implicit case for exactly the kind of automated screening and transaction-monitoring capability this domain tracks, even though no such capability has yet been documented for an Idaho-licensed institution specifically.

Continue reading

Outlook

This domain remains on watch status for Idaho pending an independent compliance-technology or active-defence development. Subsequent cycles should specifically look for adoption by any Idaho-licensed institution of automated sanctions-screening tools, transaction-monitoring upgrades, or perpetual-KYC programs responsive to the crypto-ATM and beneficial-ownership findings documented elsewhere in this baseline, as the clearest indicator that this domain would move from watch to active status. Given the volume of crypto-ATM scam activity already documented in this baseline, a compliance-technology response, whether vendor-driven or supervisory, would be a reasonably expected next development to track.

Judgment: No Idaho-specific RegTech/compliance-technology development identified this cycle. Uncertain
Cumulative analysis

Compliance Technology and Active Defence — Cumulative Analysis

This is the first baseline cycle for the compliance-technology and active-defence domain of Idaho, and it establishes a watch-status jurisdiction rather than an active one: no independent RegTech, AI-driven monitoring, or perpetual-KYC development specific to an Idaho-licensed institution was identified. The only proximate signal available this cycle is a cross-domain reference to FinCEN Notice FIN-2025-NTC1, which reminds money-services businesses, including Idaho-licensed crypto-ATM kiosk operators, of ongoing SAR and CTR vigilance obligations under 31 CFR 1022.320, consistent with a broader sector-wide shift toward proactive compliance posture but not itself a standalone compliance-technology deployment. The pending GENIUS Act stablecoin AML/CFT rulemaking carries a similar governance-obligation character without constituting a technology-specific signal.

The baseline notes that the absence of a domain-specific finding sits in tension with the volume of crypto-ATM scam activity and beneficial-ownership opacity documented elsewhere in this same baseline, both of which would reasonably be expected to generate compliance-technology responses, whether vendor-driven monitoring tools or supervisory guidance specifically addressing automated screening capability, over subsequent cycles.

Outlook

Future cycles should specifically track whether any Idaho-licensed institution adopts automated sanctions-screening, transaction-monitoring, or perpetual-KYC capability responsive to the exposures documented in the D2 and D5 domains of this baseline, as the indicator that would move this domain from watch to active status.

domain_sub_briefs · D6 · Cumulative analysis

D7 AML/CTF Regime

no_changeno_change
Judgment: Idaho carries no FIU or bespoke AML statute of its own, sitting entirely within the federal BSA/FinCEN perimeter; baseline description unchanged. Probable

D8 Commercial Activity

no_changeno_change
Judgment: No commercial events identified in the financial-integrity space for Idaho this cycle. Uncertain
Regulatory horizon
Proposed2027-Q1 · ±year

Successor Virtual Currency Kiosk Fraud Prevention Act expected next session

Sponsors have publicly stated intent to return with revised kiosk-fraud legislation next session after the governor's veto.
Proposed2027-Q1 · ±year

Reintroduction of a state virtual-currency-kiosk AML/fraud-prevention statute

If reintroduced and enacted, kiosk operators would need to be licensed money transmitters and deploy blockchain analytics/tracing software, with mandatory disclosures and transaction limits for new users.
Proposed2027-Q1 · ±year

Virtual Currency Kiosk Fraud Prevention Act (re-introduction candidate)

If reintroduced and enacted, operators would face licensing-contingent kiosk reporting, mandatory blockchain-analytics use, and new-customer transaction caps; as of this cycle none of this is in force.
Consultation2027-Q1 · ±quarter

Idaho Financial Fraud Working Group assessment

The working group convenes November 17, 2026, and reports to the Governor ahead of the 2027 legislative session; possible outputs include a revised virtual-currency-kiosk fraud bill and/or a coordinated state fraud-reporting model.
4 dated · 2 pending date · baseline financial-integrity-2026-07-05
Role action cards
MLRO

Idaho has convened a statewide Financial Fraud Working Group to address a confirmed fraud-reporting and investigation capacity gap.

A jurisdiction acknowledging it lacks a central fraud-reporting repository and a dedicated financial-crime investigative unit signals that reporting and escalation channels into state-level authorities in Idaho may remain informal or ad hoc pending the working group's output, which is relevant to how suspicious activity reported in Idaho is currently triaged outside the federal framework.

2 evidence refs
Compliance

A virtual-currency kiosk fraud bill vetoed in April 2026 is slated for revival ahead of the 2027 Idaho legislative session.

Virtual-currency kiosk operators in Idaho currently face no state-specific registration, disclosure, or transaction-limit regime, and should anticipate renewed legislative activity in this area following closer consultation between the sponsoring legislator and the state financial regulator.

2 evidence refs
Board

Idaho's executive branch has launched a cross-sector working group in response to a confirmed 88.7 million dollar statewide fraud-loss figure for 2026.

The response signals heightened state-level attention to financial-crime exposure within Idaho, with potential downstream legislative or regulatory consequences for firms operating in the state ahead of the 2027 session.

2 evidence refs
CTO

Idaho's virtual-currency kiosk oversight gap persists following the April 2026 veto of Senate Bill 1359.

Technical systems supporting virtual-currency kiosk operations in Idaho continue to operate without state-mandated registration, disclosure, or transaction-cap controls, pending a possible revised bill for the 2027 session.

2 evidence refs
Risk

Idaho presents a confirmed state-capacity gap in fraud reporting alongside an unresolved digital-asset kiosk regulatory gap.

These two findings together indicate a broader enabler-jurisdiction exposure profile in Idaho that is being addressed through institutional process rather than immediate new statute, keeping residual exposure elevated until the working group reports.

4 evidence refs
Audit

Idaho's Department of Finance was not consulted on the drafting of the 2026 virtual-currency kiosk bill prior to its veto.

The absence of regulator input into a bill later vetoed for drafting deficiencies is a documented process gap relevant to assessing the adequacy of legislative-regulatory coordination controls in the state ahead of a stated 2027 revival effort.

1 evidence refs
Scenario sketches

Illustrative scenario: supervisory transition under the EU AML Package

Illustrative only. As the AML Regulation becomes directly applicable across EU member states, the sixth AML Directive is transposed nationally, and the Anti-Money Laundering Authority assumes direct supervision of a defined set of cross-border obliged entities, a possible structural effect is a bifurcated supervisory landscape in which large cross-border institutions face harmonized EU-level expectations while smaller or purely domestic entities remain under national supervisors applying transposed national rules. This could, illustratively, create an incentive for evasion-minded actors to structure activity through entities sized or positioned to remain outside direct AMLA supervision, shifting risk toward the indirectly supervised tier rather than eliminating it. This is an illustrative orientation sketch, not an observed development and not a prediction.

Illustrative scenario for analytical orientation only. Not compliance advice, not a prediction, and not a statement of observed fact.

Standing trackers (T1–T6)
TrackerStatusNote
T1 · Russian Sanctions-Evasion Architectureno_changeNo Idaho-specific nexus identified this cycle.
T2 · EU AML Package / AMLAno_changeNot applicable at the US-ID subnational level.
T3 · FATF Grey Listno_changeUS is not on the FATF grey list; no change affecting Idaho.
T4 · Beneficial-Ownership Register Statusno_changeNo Idaho-specific state-level BO-registry development identified.
T5 · Crypto & Digital-Asset IntegritywatchSB1359 (Virtual Currency Kiosk Fraud Prevention Act) vetoed 2026-04-28; Financial Fraud Working Group tasked with revisiting ahead of 2027 session.
T6 · Sanctions Regime Divergenceno_changeNo Idaho-specific sanctions-divergence development identified.
Registers

Enforcement actions

  • 18 Sep 2025
  • 4 Aug 2025
  • 26 Mar 2025
  • 1 Mar 2026
  • 30 Jun 2026
  • 1 Jun 2025
  • 14 Apr 2026
  • 16 Jan 2026
  • 1 Apr 2026
  • 25 Mar 2026
  • Federal seizure of approximately $112 million across six virtual currency accounts linked to pig-butchering and other crypto investment scams, with seizure warrants authorized in three federal districts including the District of Idaho, reflecting Idaho-origin victim funds within the commingled laundering network. 18 Sep 2025
  • FinCEN issued Notice FIN-2025-NTC1 urging increased vigilance around CVC kiosks used for scam payments and other illicit activity, reminding MSBs (including Idaho-registered money transmitters operating crypto ATMs) of SAR/CTR obligations under 31 CFR 1022.320. 4 Aug 2025
  • FinCEN issued an interim final rule removing the requirement for US companies and US persons to report beneficial ownership information under the Corporate Transparency Act, narrowing the reporting-company definition to foreign entities only. 26 Mar 2025

Sanctions changes

  • 20 May 2026
  • 12 Nov 2025
  • 14 Aug 2025
  • 16 Jan 2026
  • 8 Jul 2026
  • 29 Jun 2026
  • 23 Jun 2026
  • 16 Jan 2026
  • 17 Jan 2025
  • OFAC designated a Sinaloa Cartel-run money-laundering network (Armando de Jesus Ojeda Aviles and associates) that converts bulk US cash drug proceeds into cryptocurrency for cross-border transfer to Mexico, relevant to US financial institutions (including Idaho-licensed MSBs) screening for cartel-linked crypto flows. 20 May 2026
  • OFAC designated the Democratic Karen Benevolent Army (DKBA), a Burma-based armed group, along with senior leaders and Chinese organized-crime-linked companies for supporting cyber scam centers that target Americans, alongside DOJ/FBI/Secret Service establishment of a Scam Center Strike Force. 12 Nov 2025
  • OFAC re-designated Russian exchange Garantex and sanctioned its successor Grinex along with affiliates tied to the ruble-backed token A7A5, targeting a crypto-based Russian cross-border settlement rail used for sanctions evasion, relevant to Idaho-licensed VASPs' sanctions-screening obligations. 14 Aug 2025

Regulatory horizon (register)

  • Virtual Currency Kiosk Fraud Prevention Act (post-veto reconsideration)
  • Virtual Currency Kiosk Fraud Prevention Act (post-veto reconsideration)
  • Successor Virtual Currency Kiosk Fraud Prevention Act expected next session
  • Reintroduction of a state virtual-currency-kiosk AML/fraud-prevention statute
  • Virtual Currency Kiosk Fraud Prevention Act (re-introduction candidate)
  • Idaho Financial Fraud Working Group assessment
  • GENIUS Act PPSI AML/CFT and sanctions-compliance final rule
  • FATF October 2026 Plenary and virtual-asset/hawala reports
  • CTA domestic BOI litigation appellate resolution

Active schemes

  • Scammers instruct victims to withdraw cash and deposit it into crypto-ATM kiosks, which convert cash to bitcoin and forward it near-instantly to attacker-controlled wallets, later layered through peel chains and offshore exchanges. Idaho functions as both a victim-origination point and investigative venue.
  • Pig-butchering scam networks operated largely from Southeast Asian forced-labor compounds direct victims across multiple US states to deposit funds into fraudulent crypto investment platforms; proceeds are commingled and layered across VASP accounts before law enforcement traces and seizes the funds.
  • Following FinCEN's March 2025 interim final rule, entities formed under US state law, including Idaho LLCs and corporations, are exempt from Corporate Transparency Act beneficial-ownership reporting; only foreign-formed entities registering to do business in a US state remain covered. Idaho's own corporate registry does not independently collect or verify beneficial-ownership data.
Sources
  1. STATE CONTACT INFORMATION FOR MSBs
  2. https://complyadvantage.com/insights/fatf-plenary-june-2026-outcomes/
  3. https://sigma.world/news/cambodia-anti-gambling-drive-fatf-grey-list/
  4. https://wearenotforsale.org/human-trafficking/cambodia-scam-compounds-casinos-trafficking/
  5. https://newlinesinstitute.org/global-security-mil-priorities/cybercrimes-human-trafficking-and-cryptocurrency-in-southeast-asias-special-economic-zones/
  6. https://www.cmtradelaw.com/2026/04/ofac-sanctions-cartel-linked-casinos-and-financial-enablers-on-the-southern-border/
  7. https://www.fincen.gov/news/news-releases/fincen-combats-financial-support-sinaloa-cartel-finding-transactions-involving
  8. https://www.millerchevalier.com/publication/where-fto-designated-cartels-operate-2026-update
  9. https://home.treasury.gov/news/press-releases/sb0203
  10. https://home.treasury.gov/news/press-releases/sb0092
  11. https://zavia.ai/eu-beneficial-ownership-in-2026-amlr-amld6-amla-explained/
  12. https://eucrim.eu/news/new-anti-money-laundering-directive-amld-6/
  13. https://en.cryptonomist.ch/2026/07/06/mica-euro-stablecoins-growth/
  14. https://assets.publishing.service.gov.uk/media/67f8ef1845705eb1a1513f35/Failure+to+Prevent+Fraud+Guidance+-+English+Language+v1.6.pdf
  15. https://fesenkolaw.com/blog/what-the-june-2026-ofac-delisting-of-three-russian-nationals-means/
  16. https://wcys.org/the-u-s-treasury-imposes-broad-sanctions-package-targeting-houthi-oil-and-financing-networks/
  17. https://gov.idaho.gov/pressrelease/gov-little-vetoes-five-bills/
  18. https://www.finance.idaho.gov/securities-bureau/money-transmitters/
  19. https://idahofreedom.org/senate-bill-1359-virtual-currency-fraud-prevention/
  20. https://www.fatf-gafi.org/en/publications/High-risk-and-other-monitored-jurisdictions/increased-monitoring-june-2026.html
  21. https://www.billtrack50.com/billdetail/1983173
  22. https://idahocapitalsun.com/2026/04/09/idaho-gov-brad-little-vetoes-five-bills-after-2026-legislative-session-adjourns/
  23. https://www.idahopress.com/news/sen-ruchti-aarp-disappointed-in-veto-of-legislation-addressing-virtual-currency-kiosk-fraud/article_409b6089-36cd-4589-a3e6-db0d49bac826.html
  24. https://legislature.idaho.gov/wp-content/uploads/sessioninfo/2024/legislation/S1296.pdf
  25. https://legislature.idaho.gov/wp-content/uploads/sessioninfo/2026/legislation/S1440SOP.pdf
  26. https://www.fatf-gafi.org/en/publications/Fatfgeneral/outcomes-fatf-plenary-june-2026.html
  27. https://www.finance.idaho.gov/wp-content/uploads/2026/04/Rockwallet-AO.pdf
  28. https://www.finance.idaho.gov/wp-content/uploads/2026/05/Order-Denying-Application-PayKES.pdf
  29. https://legislature.idaho.gov/sessioninfo/2026/vetoes/
  30. https://www.finance.idaho.gov/wp-content/uploads/legal/statutes-rules/documents/Money%20Transmitters%20Act.pdf
  31. https://cornerstonelicensing.com/money-transmitter-laws/idaho-money-transmitter-laws
  32. https://www.bdo.com/insights/tax/remittance-tax-guidance-implications-for-money-services-and-global-mobility
  33. Office of the Governor of Idaho
  34. Gem State Chronicle
  35. Idaho Legislature
  36. Idaho Press
  37. Enforcement Actions | FinCEN.gov
  38. Enforcement Actions for Failure to Register as a Money Services Business | FinCEN.gov
  39. Fact Sheet on MSB Registration Rule | FinCEN.gov
  40. Guidance | FinCEN.gov
  41. FinCEN Notice, FIN-2025-NTC1, August 4, 2025
  42. Application of the Definition of Money Transmitter to Brokers and Dealers in Currency and Other Commodities | FinCEN.gov
  43. Application of FinCEN’s Regulations to Persons Administering, Exchanging, or Using Virtual Currencies | FinCEN.gov
  44. PPSI-AMLCFT-NPRM.pdf
  45. Definition of Money Transmitter (Merchant Payment Processor) | FinCEN.gov
  46. New FinCEN Guidance Affirms Its Longstanding Regulatory Framework for Virtual Currencies and a New FinCEN Advisory Warns of Threats Posed by Virtual Currency Misuse | FinCEN.gov
  47. Money Services Business (MSB) Registration | FinCEN.gov
  48. Fincen
  49. A Money Services Business Guide Financial Crimes Enforcement Network
  50. Money Services Businesses | FinCEN.gov
  51. Financial Crimes Enforcement Network Registration of Money Services Business
  52. Money Services Business Definition | FinCEN.gov
  53. Important Information for MSBs | FinCEN.gov
  54. GUIDANCE TO MONEY SERVICES BUSINESSES ON OBTAINING AND MAINTAINING BANKING SERVICES | FinCEN.gov
  55. FinCEN Ruling 2003-9 – Definition of Money Services Business (Money
  56. FinCEN Consent Order Imposing Civil Money Penalty
  57. 1 FinCEN Advisory United States Department of the Treasury
  58. FinCEN Consent Order Number 2023-04
  59. Canaccord-Consent-Order-No-2026-01. ...
  60. Application of Money Services Business Regulations to a Company that Offers Escrow Services to a Buyer and Seller in a Given Internet Sale of Goods or Services | FinCEN.gov
  61. Administrative Ruling on Whether a Company that Offers a Payment Mechanism Based on Payable-Through Drafts to its Commercial Customers is a Money Transmitter | FinCEN.gov
  62. Administrative Ruling on the Application of FinCEN Regulations to Currency Transporters, Including Armored Car Services, and Exceptive Relief | FinCEN.gov
  63. DOJ Uses Organized Crime Statute in $263 Million Cryptocurrency Theft, Money Laundering and Home Invasion Conspiracy | TRM Labs
  64. Amid a scam crackdown, crypto giants keep fueling bitcoin ATMs - ICIJ
  65. 1 The U.S. Department of the Treasury’s (Treasury) Financial
  66. OFAC sanctions Tornado Cash developer Roman Semenov
  67. Questions swirl around US plans for record $15B Prince Group crypto seizure - ICIJ
  68. FINANCIAL ACTION TASK FORCE ON MONEY LAUNDERING FATF | FinCEN.gov
  69. SAR Activity Review
  70. 2026 Crypto Crime Report: Scams
  71. State Jury Convicts Defendant of Structuring to Avoid BSAReporting Requirements | FinCEN.gov
  72. DOJ and FBI Phoenix Seize $112M in Proceeds from Crypto-related Scams
  73. Pig butchering scam
  74. 1 1. See 31 U.S.C. § 5312(a)(2); 31 CFR § 1010.100(t). 2.
  75. FinCEN Reminds Financial Institutions of Its Resources on Identifying Potential Relationship Investment Scams | FinCEN.gov
  76. FinCEN Reminds Financial Institutions to Remain Vigilant Regarding Potential Relationship Investment Scams | FinCEN.gov
  77. U.S. Launches New Strike Force to Combat $10 Billion Scam Industry
  78. FinCEN Alert, FIN-2024-Alert005, December 18, 2024
  79. FinCEN Alert, FIN-2023-Alert005, September 8, 2023
  80. 2024 Pig Butchering Crypto Scam Revenue Grows 40% YoY as Industry Increases Sophistication
  81. Beneficial Ownership Information Reporting | FinCEN.gov
  82. Frequently Asked Questions | FinCEN.gov
  83. Beneficial Ownership Information Reporting Rule Fact Sheet | FinCEN.gov
  84. Treasury Department won’t enforce beneficial ownership rule under the Corporate Transparency Act - ICIJ
  85. FinCEN Removes Beneficial Ownership Reporting Requirements for U.S. Companies and U.S. Persons, Sets New Deadlines for Foreign Companies | FinCEN.gov
  86. Beneficial Ownership Information Report (BOIR) - BOI E-FILING
  87. IDAHO LIMITED people - Find and update company information - GOV.UK
  88. U.S. Beneficial Ownership Information Registry Now Accepting Reports | FinCEN.gov
  89. FATF guidance TRANSPARENCY AND BENEFICIAL OWNERSHIP October 2014
  90. BOI E-FILING - FinCEN
  91. Financial Fraud Enforcement Task Force (FFETF) | FinCEN.gov
  92. 1st Review of the Suspicious Activity Reporting System (SARS) | FinCEN.gov
  93. 1 Financial Crimes Enforcement Network
  94. United States Department of the Treasury Financial Crimes Enforcement Network - Home | FinCEN.gov
  95. 1 Section 314(b) Fact Sheet Issue Date: June 12, 2026
  96. Enforcement Division | FinCEN.gov
  97. Advisories | FinCEN.gov
  98. News | FinCEN.gov
  99. Crypto ATM operator Bitcoin Depot files for bankruptcy - ICIJ
  100. Retailers keep cashing in on crypto ATMs as scams surge - ICIJ
  101. Massachusetts sues Bitcoin Depot, alleging the crypto ATM operator knowingly facilitated crypto scams - ICIJ
  102. How Crypto ATMs in the U.S. Became A Favorite Tool for Scammers | OCCRP
  103. Law enforcement, banks warn of money laundering gaps in major US crypto bill - ICIJ
  104. Bitcoin ATMs are a legal and fast-growing part of the crypto world, despite flying under the regulatory radar
  105. How Crypto ATMs in the U.S. Became A Favorite Tool for Scammers
  106. TRM Labs | Maximize Your Agency’s Crypto Investigation Outcomes
  107. MSB Registrant Search | FinCEN.gov
  108. MONEY TRANSMITTER REGULATORS ASSOCIATION
  109. A Money Services Business Guide Financial Crimes Enforcement Network
  110. Definition of Money Services Business (Money Transmitter/Currency Dealer or Exchanger) | FinCEN.gov
  111. Money Services Businesses | FinCEN.gov
  112. Jurisdictions under Increased Monitoring - 19 June 2026
  113. "Black and grey" lists
  114. Outcomes FATF Plenary, 17-19 June 2026
  115. Jurisdictions under Increased Monitoring - 13 February 2026
  116. Money Laundering Advisory Notice: June 2026 - GOV.UK
  117. High-Risk Jurisdictions subject to a Call for Action - 19 June 2026
  118. News
  119. High-risk and other monitored jurisdictions
  120. Jurisdictions under Increased Monitoring - 24 October 2025
  121. High-Risk Jurisdictions subject to a Call for Action - 13 February 2026
  122. OFAC Sanctions Fentanyl Trafficking and Crypto Laundering Network
  123. Understanding the Use of Cryptocurrencies By Cartels | TRM Labs
  124. 1 1. See 31 U.S.C. § 5312(a)(2); 31 C.F.R. § 1010.100(t). 2.
  125. Sanctions and terrorism: How the cartels use crypto to launder the proceeds of narcotics trafficking
  126. Counter Narcotics Press Chart Archive | Office of Foreign Assets Control
  127. Drug Trafficker Pleads Guilty to Structuring and Money Laundering Charges | FinCEN.gov
  128. 1 The U.S. Department of the Treasury’s (Treasury)
  129. US Treasury Sanctions Sinaloa Cartel Operatives for Crypto Money Laundering - Bloomberg
  130. Maduro Accused of 25 Years of Narco-Terrorism Crimes by DOJ - Bloomberg
  131. Russia-related Designation Update and Designation Removal | Office of Foreign Assets Control
  132. U.S. DEPARTMENT OF THE TREASURY OFFICE OF FOREIGN ASSETS CONTROL
  133. Russia-related, Iran-related, Cyber-related, and Foreign Interference in U.S. Election Designations; Global Magnitsky Designation | Office of Foreign Assets Control
  134. Iran Sanctions | Office of Foreign Assets Control
  135. Non-Proliferation Designations; Iran-related and Counter Terrorism Designations, Designation Updates, and Designation Removal | Office of Foreign Assets Control
  136. OFAC Sanctions 300 Individuals and Entities Involved In Russia's War Effort Including Sanctions Evasion Networks | TRM Labs
  137. Iran-related Designations; Non-Proliferation Designations; Russia-related Designation Update; North Korea Designation Removal; Publication of Iran Ballistic Missile Procurement Advisory | Office of Foreign Assets Control
  138. OFAC Sanctions Tracker: How Sanctions Impact Crypto Crime - Chainalysis
  139. Hostages and Wrongfully Detained U.S. Nationals Designations; Counter Narcotics Designations and Removal; Iran-related Designations Updates and Removals; Issuance of Cyber-related General License and Amended Frequently Asked Questions | Office of Foreign Assets Control
  140. STATE CONTACT INFORMATION FOR MSBs
  141. Idaho Department of Finance
  142. FinCEN / US Department of the Treasury
  143. FinCEN / US Department of the Treasury
  144. International Consortium of Investigative Journalists (ICIJ)
  145. TRM Labs
  146. Financial Action Task Force (FATF)
  147. Chainalysis
  148. Office of Foreign Assets Control (OFAC), US Department of the Treasury
  149. HM Treasury (United Kingdom)
  150. Chainalysis
Coverage gaps
fim-int-2026-07-07-G001: Idaho Department of Finance and Ida…
fim-int-2026-07-07-G001: Idaho Department of Finance and Idaho Attorney General primary enforcement dockets are not independently accessible in sufficient depth to confirm or rule out non-public enforcement activity against crypto-ATM operators. [resolved]
fim-int-2026-07-07-G002: The appellate resolution of Nationa…
fim-int-2026-07-07-G002: The appellate resolution of National Small Business United v. Yellen and any subsequent FinCEN final rule on CTA domestic reporting-company scope have not yet occurred, leaving the durability of the Idaho beneficial-ownership exemption unresolved. [resolved]
fim-int-2026-07-07-G003: The 112 million US dollar multi-dis…
fim-int-2026-07-07-G003: The 112 million US dollar multi-district pig-butchering seizure is sourced only from a T3 vendor case study; a primary DOJ or US Attorney press release has not been located to independently corroborate the seizure date and district allocation. [resolved]
fim-int-2026-07-07-G004: Publication-gate metrics for this c…
fim-int-2026-07-07-G004: Publication-gate metrics for this cycle's US-ID baseline show unmet source-floor and schema-validation flags (schema_valid false, jurisdiction_source_floor_met false, tier_a_b_national_primary_pct 0.0); the underlying cause of these gate failures has not been established from the provided documents. [resolved]
fim-int-2026-07-07-G005: No jurisdiction-specific FATF Recom…
fim-int-2026-07-07-G005: No jurisdiction-specific FATF Recommendation 24/25 compliance-trajectory citation was collected for Idaho this cycle, limiting the ability to map beneficial-ownership findings to a specific FATF Recommendation reference. [resolved]
fim-int-2026-07-14-G001: No Laos-specific enforcement signal…
fim-int-2026-07-14-G001: No Laos-specific enforcement signal was surfaced this cycle beyond its standing FATF grey-list status. [resolved]
fim-int-2026-07-14-G002: No Colombia-specific signal was sur…
fim-int-2026-07-14-G002: No Colombia-specific signal was surfaced this cycle. [resolved]
fim-int-2026-07-14-G003: No Tier 1 eur-lex/AMLA/Commission s…
fim-int-2026-07-14-G003: No Tier 1 eur-lex/AMLA/Commission source was directly cited for the EU AML Package timeline; corroboration rests on Tier 4 legal/compliance commentary. [resolved]
fim-int-2026-07-14-G004: No Tier 1 ESMA source was directly …
fim-int-2026-07-14-G004: No Tier 1 ESMA source was directly cited for MiCA authorization statistics. [resolved]
fim-int-2026-07-14-G005: D4 (Conflict Finance) had only a si…
fim-int-2026-07-14-G005: D4 (Conflict Finance) had only a single development this cycle (Houthi oil revenue); broader conflict-finance coverage (Sahel, DRC, Russian war economy) was thin. [resolved]
fim-int-2026-08-05-G001: No direct FATF primary plenary-outc…
fim-int-2026-08-05-G001: No direct FATF primary plenary-outcomes document was retrieved this cycle; the grey-list net-change finding rests entirely on Tier 3/4 compliance-vendor secondary reporting. [resolved]
fim-int-2026-08-05-G002: No National Bank of Cambodia primar…
fim-int-2026-08-05-G002: No National Bank of Cambodia primary statement was directly retrieved to corroborate the Governor's public re-listing warning. [resolved]
fim-int-2026-08-05-G003: No fresh Lao government or OFAC act…
fim-int-2026-08-05-G003: No fresh Lao government or OFAC action was identified for the Golden Triangle SEZ this cycle; the structural finding rests on a single Tier 2 investigative source. [resolved]
fim-int-2026-08-05-G004: AMLA/European Commission Tier 1 pri…
fim-int-2026-08-05-G004: AMLA/European Commission Tier 1 primary sources for the 10 July 2026 RTS/6AMLD transposition deadlines were not directly retrieved. [resolved]
fim-int-2026-08-05-G005: ESMA's Tier 1 primary statement on …
fim-int-2026-08-05-G005: ESMA's Tier 1 primary statement on post-MiCA-transitional CASP enforcement was not directly retrieved. [resolved]
fim-int-2026-08-05-G006: No US Corporate Transparency Act de…
fim-int-2026-08-05-G006: No US Corporate Transparency Act development was identified this cycle; the US leg of D2 beneficial-ownership tracking remains a coverage gap. [resolved]
fim-int-2026-08-05-G007: D6 (Compliance Technology and Activ…
fim-int-2026-08-05-G007: D6 (Compliance Technology and Active Defence) had thin coverage this cycle; no material RegTech/AI-compliance-technology primary source was retrieved. [resolved]
fim-int-2026-08-20-G001 ({'scheme': 'financial_integrity', '…
fim-int-2026-08-20-G001 ({'scheme': 'financial_integrity', 'value': 'D2'}): No US-ID-specific D2 (Beneficial Ownership) finding surfaced within this cycle's search budget. [resolved]
fim-int-2026-08-20-G002 ({'scheme': 'financial_integrity', '…
fim-int-2026-08-20-G002 ({'scheme': 'financial_integrity', 'value': 'D3'}): No US-ID-specific D3 (Enabler Jurisdictions) finding surfaced within this cycle's search budget. [resolved]
fim-int-2026-08-20-G003 ({'scheme': 'financial_integrity', '…
fim-int-2026-08-20-G003 ({'scheme': 'financial_integrity', 'value': 'D1'}): Tier-D jurisdictions Mexico and Colombia were not independently searched this cycle due to pooled union budget constraints; status is awaiting_primary_source, not asserted no_source. [resolved]
fim-int-2026-09-21-G001 ({'scheme': 'financial_integrity', '…
fim-int-2026-09-21-G001 ({'scheme': 'financial_integrity', 'value': 'D3'}): No T1 source located on any state-level enabler-jurisdiction (D3) development for Idaho this cycle. [resolved]
fim-int-2026-09-21-G002 ({'scheme': 'financial_integrity', '…
fim-int-2026-09-21-G002 ({'scheme': 'financial_integrity', 'value': 'D5'}): No primary source text located for successor virtual-currency kiosk legislation expected in the 2027 session. [resolved]
fim-int-2026-09-28-G001 ({'scheme': 'financial_integrity', '…
fim-int-2026-09-28-G001 ({'scheme': 'financial_integrity', 'value': 'D1'}): D1-D6 domains carry thin coverage for US-ID this cycle; no active-signal search was performed beyond the D7-anchored sweep and the global FATF plenary check. [resolved]
fim-int-2026-09-28-G002: Tier D jurisdictions (Cambodia, Lao…
fim-int-2026-09-28-G002: Tier D jurisdictions (Cambodia, Laos, Mexico, Colombia) were not actively queried this cycle beyond the general FATF sweep; standing concern persists as prior-cycle context only. [resolved]
fim-int-2026-10-11-G001: Tier D watch jurisdictions (KH/LA/M…
fim-int-2026-10-11-G001: Tier D watch jurisdictions (KH/LA/MX/CO) were not independently re-swept this cycle; pooled search budget was allocated entirely to the bound jurisdiction (US-ID). [resolved]
fim-int-2026-10-11-G002 ({'scheme': 'financial_integrity', '…
fim-int-2026-10-11-G002 ({'scheme': 'financial_integrity', 'value': 'D8'}): No Idaho-specific D8 (Commercial Activity) financial-integrity-relevant commercial event was located this cycle. [resolved]
fim-int-2026-10-25-G001: Tier D jurisdictions (KH, LA, MX, C…
fim-int-2026-10-25-G001: Tier D jurisdictions (KH, LA, MX, CO) were not actively re-searched this cycle because the dispatch was bound to the single jurisdiction US-ID; this is an awaiting_primary_source-style coverage gap rather than a finding of no material Tier D change. [open]
fim-int-2026-10-25-G002: Idaho Department of Finance's admin…
fim-int-2026-10-25-G002: Idaho Department of Finance's administrative treatment of virtual-currency exchangers rests on policy rather than statutory text naming virtual currency; whether this constitutes binding precedent remains unconfirmed. [open]
fim-int-2026-11-08-G001: Tier D jurisdiction collection (KH,…
fim-int-2026-11-08-G001: Tier D jurisdiction collection (KH, LA, MX, CO) was not performed this cycle because the dispatch is bound to the single subnational jurisdiction US-ID. [open]
fim-int-2026-11-08-G002: D1, D2, D4, D6 showed thin or no co…
fim-int-2026-11-08-G002: D1, D2, D4, D6 showed thin or no coverage this cycle for Idaho; no Idaho-specific nexus in sanctions, beneficial ownership, conflict finance, or RegTech was identified. [open]
FIM-GAP-001 (D5): While Iowa, Massachusetts, Connecticut, Mi…
FIM-GAP-001 (D5): While Iowa, Massachusetts, Connecticut, Missouri, Nevada, Maine, and the District of Columbia have sued, fined, or opened investigations into crypto-ATM operators (Bitcoin Depot, CoinFlip, Athena Bitcoin) for facilitating scam transactions, no equivalent Idaho Attorney General or Department of Finance enforcement action was identified despite Boise Police documentation of a single recurring scam-linked wallet address across more than 100 local cases.
FIM-GAP-002 (D2): FinCEN's March 2025 rule change exempts al…
FIM-GAP-002 (D2): FinCEN's March 2025 rule change exempts all domestic reporting companies, including Idaho LLCs and corporations, from beneficial-ownership disclosure; the Idaho Secretary of State's corporate registry independently collects no beneficial-ownership data, leaving Idaho-formed entities without any operative BO transparency mechanism at state or federal level.
FIM-GAP-003 (D6): Publicly available primary-source data spe…
FIM-GAP-003 (D6): Publicly available primary-source data specific to Idaho AML/CFT enforcement (Idaho Department of Finance consent orders, Idaho Attorney General press releases) within the 18-month baseline window is sparse; most Idaho-specific findings in this baseline are derived from secondary investigative journalism (ICIJ, TRM Labs) rather than Idaho state primary filings.

Evidence

Confidence-tiered claims

Idaho Department of Finance Agreement and Order (April 2026) resolving findings that Rockwallet engaged in money transmission in Idaho without a licence, from at least April 2023 through the order date, in violation of Idaho Code §26-2903(1); no monetary penalty disclosed. [Source 1]
Probable · 1 source
Idaho Department of Finance denied PayKES's money transmitter licence application (dated 2026-03-25) for failing statutory net-worth and financial-responsibility tests under Idaho Code §§26-2905, 26-2910. [Source 1]
Probable · 1 source
S1359, which would have required kiosk operators to be licensed money transmitters and deploy blockchain analytics/tracing software for fraud and AML detection, passed both chambers of the Idaho Legislature (Senate 19-16 on 2026-03-19; House on 2026-04-01) but was vetoed by Governor Little on 2026-04-28. [Source 1]
Probable · 1 source
Idaho has no dedicated AML/CFT statute or FIU; the state's AML-relevant gateway for payment and crypto firms is the Idaho Money Transmitters Act (Idaho Code §26-2901 et seq.), administered by the Department of Finance Securities Bureau, conditioning licensing on net worth, bonding and good standing, paired with federal FinCEN MSB registration and BSA/AML programme requirements. [Source 1]
Probable · 1 source
Virtual-currency exchangers accepting fiat currency for later delivery of virtual currency are brought within the money-transmission licensing requirement via Department of Finance administrative policy, not express statutory text. [Source 1]
Probable · 1 source
Passed both chambers in the 2026 session but vetoed by Governor Little on 2026-04-28; Idaho crypto kiosk operators therefore remain subject only to the general Money Transmitters Act BSA/AML programme requirement. [Source 1]
Probable · 1 source
Licensees must provide audited financial statements, implement a comprehensive BSA/AML filings programme, and pass background checks for all control persons as a condition of licensure. [Source 1]
Probable · 1 source
A 1% federal excise tax on remittance transfers, created by the One Big Beautiful Bill Act, became effective for transfers beginning 2026-01-01; no Idaho-specific surcharge sits atop this federal rate. [Source 1]
Probable · 1 source
Idaho has no subnational AML statute distinct from the federal BSA/AML framework; all AML/CTF regulatory architecture for Idaho entities derives from federal law applied through the state money-transmission licensing regime. [Source 1]
Probable · 1 source
Vetoed by Governor Little on 2026-04-28; not in force. [Source 1]
Probable · 1 source
Sole state-level AML/licensing gateway for virtual-currency exchangers accepting fiat for later delivery of virtual currency; administered by the Department of Finance's Securities Bureau. [Source 1]
Probable · 1 source
Idaho Department of Finance denied a money-transmitter licence application on 2026-03-25 after applicant failed to resolve eight NMLS-identified licensing deficiencies. [Source 1]
Probable · 1 source
Banned cryptocurrency ATMs within city limits in response to elder-targeted fraud, reported 2026-10-01; city of Kuna considering similar restriction. [Source 1]
Probable · 1 source
Governor's Financial Fraud Working Group, first meeting 2026-11-17, co-led by Lt. Gov. Scott Bedke, U.S. Attorney John Shirts, Dept. of Finance Director Salvador Cruz [Source 1]
Probable · 1 source
$88.7 million in reported 2026 fraud losses statewide [Source 1]
Probable · 1 source
passed both chambers; vetoed by Gov. Little 2026-04-28 for drafting deficiencies; not in force [Source 1]
Probable · 1 source
intends to work with the Idaho Dept. of Finance ahead of a renewed attempt at virtual-currency-kiosk fraud legislation for the 2027 session [Source 1]
Probable · 1 source
no independent FIU or AML statute; governed entirely by the federal BSA/FinCEN framework [Source 1]
Probable · 1 source