Financial Integrity Monitor

United States — Indiana US-IN

Domains (D1–D6)
1
Sources
8
Role actions
8
Jurisdiction profile
CompliantTier ARisk: IncreasingMixed

Indiana operates under the federal Bank Secrecy Act/AML framework administered by FinCEN and OFAC, supplemented by state money-transmitter licensing under the Indiana Uniform Money Services Act (Indiana Department of Financial Institutions).

MoreSince March 2025, domestically-formed Indiana entities are exempt from federal beneficial ownership reporting, and no Indiana-specific virtual-currency-kiosk consumer-protection statute has been confirmed, leaving state-level AML/CFT capacity thin relative to federal architecture.

Key deficiencies
  • Federal Corporate Transparency Act domestic-reporting-company exemption removes beneficial ownership visibility for Indiana-formed LLCs and corporations
  • No confirmed Indiana-specific crypto-ATM/kiosk consumer-protection statute despite Indiana being a documented Bitcoin Depot/Circle K scam-transmission site
  • Residential real estate and legal/title professional gatekeepers remain largely outside BSA compliance-program obligations nationally, a vulnerability that applies fully to Indiana's cash-purchase real estate market
Recent developments (18m)
  • FinCEN interim final rule (March 21/26, 2025) exempted all US-formed 'domestic reporting companies' -- including Indiana entities -- from Corporate Transparency Act beneficial ownership reporting
  • FinCEN issued FIN-2025-NTC1 Notice (August 4, 2025) on convertible virtual currency kiosk scam typologies, directly relevant given documented Indiana Circle K/Bitcoin Depot kiosk scam cases
  • ICIJ/CNN 'Coin Laundry' investigation (December 2025) named an Indiana Circle K location as a site where a scam victim deposited funds into a Bitcoin Depot kiosk
  • FinCEN issued AML/CFT Program NPRM (April 2026) and joint FinCEN/OFAC GENIUS Act stablecoin AML/CFT NPRM (April 2026), both applicable nationwide including to Indiana-chartered/licensed institutions
  • Bitcoin Depot -- operator of kiosks inside Indiana Circle K stores -- filed for bankruptcy (May 2026) amid multi-state AG lawsuits and a Connecticut banking-license suspension
Weekly brief

Lead signal

Lead Signal

Read full brief

Lead Signal

Indiana has enacted a statewide ban on the operation of virtual-currency kiosks under House Enrolled Act 1116, enforced by the state Attorney General under Indiana's existing consumer-protection statutes (the Deceptive Consumer Sales Act) rather than through the Department of Financial Institutions' money-transmitter licensing regime. The final ban language supersedes an earlier draft that would have required money-transmitter licensure for kiosk operators rather than prohibiting the activity outright, a legislative shift from a licensing model toward outright prohibition. The measure targets kiosk-enabled fraud and scam typologies rather than money-laundering typologies directly, but its structural effect is to remove a cash-to-crypto off-ramp that was previously reachable in practice without money-transmitter-level know-your-customer procedures.

Other Developments

A broader 2026 state wave. Indiana's move sits within a wider pattern: at least twenty US states have adopted new virtual-currency kiosk laws in 2026, according to ABA Banking Journal reporting, with Indiana's outright ban assessed as the most restrictive approach currently observed among that cohort, moving away from the median state model of licensing kiosk operation with transaction limits.

Standing money-transmitter licensing layer unaffected. Indiana's Money Transmission Modernization Act (IC 28-8-4.1), administered by the Department of Financial Institutions, licenses fiat money transmission but explicitly did not adopt the virtual-currency transmission provisions of the model act. This structural fact is unchanged this cycle and continues to define the state's baseline AML/CTF exposure at the sub-national level, alongside the unchanged federal Bank Secrecy Act and FinCEN layer.

Cross-Monitor Connections

The kiosk ban is a shared factual predicate across the fleet's monitors this cycle: the crypto monitor addresses the licensing and on-chain-activity dimensions of Indiana's broader 2026 digital-asset legislative package, and world-payments addresses the product-channel-closure dimension of the same kiosk ban. This financial-integrity brief foregrounds the enabler-jurisdiction and typology dimensions specifically: the shift from a licensing-based draft to an outright ban is read here as a reduction in Indiana's enabler surface relative to the median state approach, since a licensing regime with limits still permits regulated activity to continue under supervision, whereas an outright ban removes the channel and its associated fraud-typology exposure entirely, at the cost of also removing the cash-to-crypto conversion pathway altogether for any legitimate use.

Outlook

The exact statutory effective date of HEA 1116's final kiosk-prohibition language has not been independently confirmed beyond bill text and secondary legal commentary. Watch for confirmation of that effective date, and for whether Indiana's approach becomes a reference point for other states currently weighing between the licensing-with-limits model and the outright-ban model within the ongoing 2026 wave of state-level crypto-kiosk legislation.

weekly_brief_draft · JID US-IN
Domain intelligence (D1–D6)

D1 Sanctions

Not covered

Sanctions is not yet covered for this jurisdiction in this report.

D2 Beneficial Ownership

Not covered

Beneficial Ownership is not yet covered for this jurisdiction in this report.

D3 Enabler Jurisdictions

Not covered

Enabler Jurisdictions is not yet covered for this jurisdiction in this report.

D4 Conflict Finance

Not covered

Conflict Finance is not yet covered for this jurisdiction in this report.

D5 Crypto / Digital Assets / Financial Innovation

Crypto / Digital Assets / Financial Innovation

Continue reading

Indiana's first-in-nation statewide ban on virtual-currency kiosks, enacted under House Enrolled Act 1116, is this cycle's most consequential digital-asset development for the state. The final ban language replaces an earlier draft that would have brought kiosk operators under money-transmitter licensure, marking a legislative shift from a regulate-and-license approach toward an outright-prohibition approach. Enforcement runs through the Indiana Attorney General under the state's existing consumer-protection statutes, specifically the Deceptive Consumer Sales Act, rather than through the Department of Financial Institutions' money-transmitter licensing apparatus. This enforcement architecture choice is itself analytically significant: it frames the kiosk problem as a consumer-fraud issue to be policed by the state's general consumer-protection authority, rather than as a financial-services-licensing issue to be policed by the state's financial regulator.

Indiana's move sits within a considerably broader 2026 legislative wave: at least twenty US states have adopted new laws restricting virtual-currency kiosk activity this year, per ABA Banking Journal reporting. Within that cohort, Indiana's outright-ban approach is assessed as the most restrictive currently observed, standing apart from the median state model of licensing kiosk operators subject to transaction limits or other operating conditions. The architecture-over-incident read here is that this is a structural policy choice about how much residual cash-to-crypto conversion capacity a state is willing to tolerate in exchange for the AML/CTF and fraud-typology benefits of allowing regulated, licensed kiosk operation to continue. Indiana has chosen to eliminate the channel entirely rather than regulate it, which removes both the fraud exposure the kiosk channel carried and any legitimate cash-to-crypto conversion use that channel served.

The practical AML/CTF significance of this shift is that virtual-currency kiosks have functioned, in practice, as a cash-to-crypto off-ramp reachable without money-transmitter-level know-your-customer procedures in many jurisdictions that either did not regulate them at all or regulated them loosely. Indiana's ban removes this off-ramp from the state's typology landscape entirely going forward, a different resolution than the licensing-with-KYC-requirements approach several peer states in the 2026 wave have instead chosen. Whether removing the channel outright versus bringing it under supervised KYC produces a better AML/CTF outcome is a genuine open question this brief does not resolve, since enablement and enforcement can each carry their own typology risks: a banned channel may migrate underground, while a licensed channel remains visible to supervision but continues to exist as an attack surface.

Indiana's underlying money-transmitter licensing backbone, the Money Transmission Modernization Act codified at IC 28-8-4.1 and administered by the Department of Financial Institutions, remains unchanged this cycle and continues to explicitly exclude virtual-currency transmission from its adopted provisions. This structural fact predates the kiosk ban and is not altered by it; the kiosk ban operates entirely outside the money-transmitter licensing framework, through the separate consumer-protection enforcement track.

Outlook

The exact statutory effective date of HEA 1116's final ban language has not been independently confirmed beyond bill text and secondary legal commentary, and should be verified in a subsequent cycle. Watch for whether other states in the 2026 wave shift toward Indiana's outright-ban model as opposed to the median licensing-with-limits model, and for any indication of whether banned kiosk activity migrates to informal or cross-border channels as a displacement effect. Watch also for whether Indiana's Attorney General brings an early enforcement action under the Deceptive Consumer Sales Act framework once the ban's effective date passes, which would be the first test of this enforcement architecture in practice.

D6 Compliance Technology & Active Defence

Not covered

Compliance Technology & Active Defence is not yet covered for this jurisdiction in this report.

D7 AML/CTF Regime

Not covered

AML/CTF Regime is not yet covered for this jurisdiction in this report.

Regulatory horizon
No dated horizon items this cycle. 3 items tracked without a confirmed date.
3 pending date · baseline fim-2026-07-05
Role action cards
MLROAssessed

Indiana bans virtual-currency kiosks statewide, closing a KYC-light cash-to-crypto off-ramp.

The elimination of Indiana's virtual-currency kiosk channel removes a cash-to-crypto conversion pathway that had, in practice, been reachable without money-transmitter-level KYC. This changes the typology landscape for any monitoring keyed to kiosk-based conversion activity in Indiana specifically, though it does not alter the state's standing money-transmitter licensing framework or the federal BSA/FinCEN layer.

2 evidence refs
ComplianceAssessed

Indiana's kiosk ban enforcement runs through the Attorney General, not the Department of Financial Institutions.

Firms tracking Indiana's regulatory perimeter should note that this enforcement architecture places kiosk-ban compliance under general consumer-protection law rather than financial-services licensing law, a distinct enforcement track from the state's money-transmitter licensing regime, which itself remains unchanged and continues to exclude virtual-currency transmission from its adopted provisions.

3 evidence refs
LegalPossible

No material change this cycle.

No material change for this persona this cycle

BoardAssessed

Indiana positions itself as the most restrictive state in the 2026 US crypto-kiosk regulatory wave.

Board-level exposure is limited given Indiana's sub-national scope, but the state's outright-ban approach, contrasted with at least twenty other states choosing a licensing-with-limits model, is a notable data point in how state-level crypto-kiosk policy is diverging across the United States this year.

1 evidence refs
CTOAssessed

Indiana's ban targets kiosk hardware/operation, not custodial exchange or wallet software infrastructure.

The prohibition is scoped to the physical/operational kiosk channel and does not alter Indiana's money-transmitter licensing treatment of custodial exchange, custody, or wallet infrastructure, which continues under the unchanged Money Transmission Modernization Act framework.

1 evidence refs
RiskAssessed

Indiana's kiosk-ban approach and the broader 2026 state wave present a bifurcated typology-mitigation model to monitor.

Risk functions monitoring cross-typology exposure should note that the current 2026 wave of state crypto-kiosk legislation splits between outright prohibition (Indiana) and licensing-with-limits (the median approach across at least twenty other states), each carrying distinct residual-risk profiles including possible channel-migration effects under the prohibition model.

2 evidence refs
OperationsPossible

No material change this cycle.

No material change for this persona this cycle

AuditPossible

Indiana's kiosk-ban enforcement architecture is a new control point to document, distinct from the DFI licensing regime.

Internal audit scope covering Indiana-facing crypto activity should document the newly bifurcated enforcement architecture: consumer-protection-based Attorney General enforcement for the kiosk ban, versus the unchanged DFI-administered money-transmitter licensing regime for custodial activity, as two distinct control points rather than one.

2 evidence refs
Decision lens
MLRO

Indiana bans virtual-currency kiosks statewide, closing a KYC-light cash-to-crypto off-ramp.

Compliance

Indiana's kiosk ban enforcement runs through the Attorney General, not the Department of Financial Institutions.

Legal

No material change this cycle.

Board

Indiana positions itself as the most restrictive state in the 2026 US crypto-kiosk regulatory wave.

CTO

Indiana's ban targets kiosk hardware/operation, not custodial exchange or wallet software infrastructure.

Risk

Indiana's kiosk-ban approach and the broader 2026 state wave present a bifurcated typology-mitigation model to monitor.

Operations

No material change this cycle.

Audit

Indiana's kiosk-ban enforcement architecture is a new control point to document, distinct from the DFI licensing regime.

Shared evidence: 4 refs
Scenario sketches

Illustrative AMLA transition scenario: hybrid EU-level supervision of cross-border obliged entities

This is an illustrative structural sketch, not a prediction or observed fact. As the EU AML Package matures, the transition from purely national AML supervision toward AMLA direct and indirect supervision of cross-border obliged entities, under the AMLA Regulation (Reg (EU) 2024/1620), alongside the directly-applicable AML Regulation (Reg (EU) 2024/1624) and per-Member-State transposition of the sixth AML Directive, could illustratively reshape both the supervisory landscape and the evasion landscape for firms operating across EU borders. A hybrid EU-level supervisory architecture could, in an illustrative sense, concentrate scrutiny on the largest cross-border obliged entities while leaving smaller, purely domestic entities under continued national supervision, potentially creating a differential evasion incentive at the margin between the two supervisory tiers. This scenario is architecture-over-incident framing under the intelligence register and does not describe any observed development in US-IN or any other specific jurisdiction this cycle.

Illustrative scenario for analytical orientation only. Not compliance advice, not a prediction, and not a statement of observed fact.

Standing trackers (T1–T6)
TrackerStatusNote
T1 · Russian Sanctions-Evasion Architectureno_changeNo US-IN-specific dark-fleet, tech-procurement, or Houthi/Yemen-channel material surfaced this cycle for this sub-national jurisdiction.
T2 · EU AML Package / AMLAno_changeNot applicable to a US sub-national jurisdiction; no EEA/UK bloc-level movement to attribute here.
T3 · FATF Grey Listno_changeNo US-IN-specific FATF mutual-evaluation or grey-list movement; US federal FATF status unchanged this cycle.
T4 · Beneficial-Ownership Register Statusno_changeNo Indiana state-level beneficial-ownership registry exists; federal CTA/FinCEN BOI regime governs and was not found to have moved this cycle.
T5 · Crypto & Digital-Asset IntegrityescalatingIndiana's kiosk ban (HEA 1116) and new digital-asset framework (HEA 1042) are incremental state-level developments in the broader 2026 US wave of crypto-kiosk regulation (at least 20 states have adopted new CVC-kiosk laws in 2026).
T6 · Sanctions Regime Divergenceno_changeNo US-IN-specific sanctions-divergence signal this cycle.
Registers

Enforcement actions

  • FinCEN issued a consent order against Brink's for operating as an unregistered money transmitter, moving bulk currency shipments across the US border between unrelated parties without BSA registration or compliance program, following a January 2025 DOJ non-prosecution agreement. 6 Feb 2025
  • OFAC designated two UK-registered digital asset exchanges connected to an Iranian businessman and sanctions evader, cited by FinCEN as an example of DASP front companies exploited to move Iran-linked funds through crypto rails accessible to US-based virtual asset users. 30 Jan 2026
  • Connecticut suspended Bitcoin Depot's banking/money-transmitter license over anti-money-laundering control lapses; the same operator runs kiosks inside Indiana Circle K stores implicated in scam-transmission complaints, illustrating cross-state supervisory exposure for a single crypto-ATM network operating in Indiana. 1 Dec 2025
  • FinCEN designated Huione Group as a foreign financial institution of primary money laundering concern, severing its access to the US financial system after the network was found to have received over $39.6 billion in 2025 tied to scam and laundering networks with US victim exposure. 1 Aug 2025

Sanctions changes

  • OFAC removed the final remaining name from its Foreign Sanctions Evaders (FSE) List, emptying the list entirely, though new names may be added at any time; this affects compliance screening obligations for all US persons and institutions, including Indiana-based financial institutions and MSBs, that maintain FSE-screening protocols. 18 Dec 2025
  • OFAC designated the Prince Group Transnational Criminal Organization network (October 2025), coordinated with UK sanctions and a simultaneous DOJ indictment of founder Chen Zhi, tied to Cambodia-based forced-labor scam compounds and crypto laundering with US victims. 14 Oct 2025
  • OFAC designated Zedcex Exchange, Ltd. and Zedxion Exchange, Ltd., two UK-registered digital asset exchanges tied to an Iranian sanctions evader, as part of continued enforcement against Iran-linked crypto shadow-banking networks. 30 Jan 2026

Regulatory horizon (register)

  • FinCEN AML/CFT Program Rule modernization finalization
  • GENIUS Act stablecoin AML/CFT rule implementation
  • Next FATF plenary review of US MER follow-up / grey list

Active schemes

  • [HIGH] Domestic BOI exemption enabling shell-layering in Indiana entities
  • [HIGH] Crypto-ATM cash-to-crypto scam conduit at Indiana retail sites
  • All-cash real estate purchases as AML blind spot
Sources
  1. FinCEN (U.S. Department of the Treasury)
  2. U.S. Department of the Treasury
  3. Financial Action Task Force
  4. International Consortium of Investigative Journalists (ICIJ)
  5. FinCEN (U.S. Department of the Treasury)
  6. Office of Foreign Assets Control (U.S. Department of the Treasury)
  7. TRM Labs
  8. International Consortium of Investigative Journalists (ICIJ)
Coverage gaps
The March 2025 CTA interim final rule exempts all US-formed …
The March 2025 CTA interim final rule exempts all US-formed entities, including Indiana LLCs and corporations, from beneficial ownership reporting, eliminating the primary federal transparency mechanism intended to unmask shell-company structures nationwide.
No Indiana-specific crypto-ATM/kiosk consumer-protection sta…
No Indiana-specific crypto-ATM/kiosk consumer-protection statute has been confirmed, unlike the roughly 18 US states that have passed such laws following the surge in scam-related crypto kiosk complaints; Indiana is a documented site of Bitcoin Depot/Circle K kiosk scam transmission.
No Indiana Department of Financial Institutions-specific sup…
No Indiana Department of Financial Institutions-specific supervisory enforcement order, penalty, or license action was identified in open-source search for the 18-month baseline window, despite the state administering money-transmitter licensing under the Uniform Money Services Act.

Evidence

Confidence-tiered claims

No structured claims published for this jurisdiction yet.