Financial Integrity Monitor

United States — Maryland US-MD

Domains (D1–D6)
3
Sources
12
Role actions
8
Horizon <90d
1
Jurisdiction profile
CompliantTier ARisk: IncreasingMixed

Maryland operates under the federal Bank Secrecy Act/FinCEN AML/CFT architecture (BSA, CTA, OFAC sanctions) with no independent state AML statute; the state layer consists of money-transmitter licensing under the Maryland Financial Institutions Article administered by the Office of the Commissioner of Financial Regulation.

MoreFederal 2025 deregulatory moves (CTA domestic BOI exemption) materially thinned the transparency layer applicable to Maryland-registered entities.

Key deficiencies
  • Domestic beneficial-ownership reporting to FinCEN eliminated for U.S.-formed entities (including Maryland LLCs/trusts historically used in real-estate layering), reopening a shell-company opacity vector
  • No Maryland-specific AML statute for crypto kiosks/ATMs comparable to Iowa, Massachusetts, or D.C., despite a documented Baltimore bitcoin-kiosk-to-darknet-market laundering precedent
  • Real estate settlement professionals (title agents, attorneys) remain outside BSA AML program requirements pending the delayed nationwide Residential Real Estate Rule
Recent developments (18m)
  • FinCEN interim final rule (March 21/26, 2025) exempted all U.S.-formed 'domestic reporting companies' — including Maryland entities — from Corporate Transparency Act beneficial-ownership reporting
  • FinCEN renewed Residential Real Estate GTOs (Oct 9, 2025) continuing to cover Maryland/Baltimore-area non-financed legal-entity purchases pending the delayed nationwide RRE Rule
  • FinCEN postponed RRE Rule reporting requirements to March 1, 2026, extending the GTO-based interim regime
  • FinCEN issued a national CVC kiosk advisory (Aug 4, 2025) addressing scam/fraud typologies structurally identical to the historic Baltimore kiosk-to-AlphaBay case
  • Treasury/OFAC 'maximum pressure' campaign on Iran (NSPM-2, Feb 4, 2025) tightened the federal sanctions architecture Maryland-domiciled financial institutions must screen against
  • Maryland's junior U.S. Senator co-negotiated stablecoin/DeFi provisions in the Senate CLARITY Act markup (May 2026), directly shaping the digital-asset compliance perimeter
Weekly brief

Lead signal

Lead Signal

Read full brief

Lead Signal

Maryland most consequential financial-integrity development this cycle is the finalization of its virtual-currency-kiosk oversight regime alongside enactment of the Maryland Stablecoin Act, together marking a structural build-out of state-level crypto-asset architecture rather than an isolated enforcement event. The Office of the Commissioner of Financial Regulation (OFR) adopted permanent virtual-currency-kiosk registration regulations under COMAR 09.03.16, effective March 30, 2026 with mandatory registration required from January 1, 2026, and the Maryland General Assembly separately enacted SB 741, effective October 1, 2026, which broadens the definition of virtual currency kiosk operator to capture software-based kiosk deployers and removes the prior automated-teller-machine exclusion. The OFR January 2026 legislative briefing identified a documented surge in pig butchering Bitcoin-ATM fraud as the driver behind the expanded oversight, an explicit enablement-versus-enforcement signal: the state is building registration infrastructure ahead of, rather than in response to, a wave of individual enforcement actions. Layered onto this is the Maryland Stablecoin Act (SB 662/HB 1355), signed May 12, 2026, which designates OFR as the state payment-stablecoin regulator aligned to the federal GENIUS Act framework and requires banks and credit unions to notify OFR before seeking federal approval to become a permitted stablecoin issuer. Together these two tracks describe an architecture-level repositioning of the Maryland state financial regulator into a first-line crypto-asset supervisor, a designation most US states have not yet made. This build-out is anchored in Tier-1 primary-source regulatory action rather than secondary reporting: both the COMAR registration rule and the Stablecoin Act trace to OFR own legislative-review materials, giving this cycle crypto-architecture signal a high-confidence foundation. This mixed picture is consistent with an overall in-transition regulatory posture for Maryland, reflecting active, unresolved regulatory construction rather than a settled position.

Other Developments

Beneficial-ownership licensing tightened. Maryland repealed a licensing exemption that had allowed persons acquiring or assigned certain mortgages, mortgage loans, or installment loans to avoid state financial-services licensing, a change that marginally closes a beneficial-ownership and licensing-transparency gap surfaced by 2025 cross-filed passive-trust exemption bills. Payroll-processor carve-out. In a countervailing deregulatory move, HB 118 excludes agents designated for payroll-processing purposes from the Maryland Money Transmission Act money transmitter definition, effective October 1, 2026, a change OFR estimates affects three companies and that aligns Maryland with peer Model Law states. Staking exemption proposed, unresolved. The Maryland Financial Innovation Act (SB 759/HB 859) would exempt staking-as-a-service from Maryland Securities Act registration; OFR itself filed a letter of concern flagging a potential regulatory blind spot, and the bill enactment status beyond committee hearings was not confirmed by session end. Bounded enforcement event. A Maryland attorney was sentenced for tax evasion and mortgage fraud, ordered to pay $3,103,427 in restitution plus indeterminate forfeiture after concealing income through foreign bank accounts, a single bounded prosecution rather than a standing architecture change.

Cross-Monitor Connections

The virtual-currency-kiosk and stablecoin developments carry direct payments-monitor relevance: the same COMAR 09.03.16 registration regime and HB 118 payroll-processor exemption alter the Maryland money-transmission licensing perimeter in ways a payments-focused reading would track as market-access and licensing change rather than as financial-crime architecture. The Maryland Stablecoin Act OFR-notification requirement for banks and credit unions is likewise a dual-relevant development: it is simultaneously a new AML/CTF-adjacent supervisory touchpoint and a payments-infrastructure authorization event, one that the world-payments monitor would read primarily through its own licensing and market-access lens rather than through this financial-integrity architecture-over-incident framing. No conflict-finance, extractive-industry, or information-operations connection was identified for Maryland this cycle.

Outlook

Watch for whether OFR issues implementing regulations for the Maryland Stablecoin Act, which remain pending and will determine how the bank and credit-union notification requirement and broader issuer-authorization pathway actually operate in practice. The unresolved status of SB 759/HB 859 staking-as-a-service exemption is the more consequential open question: if enacted, it would create exactly the kind of regulatory blind spot OFR itself has flagged, sitting in tension with the tightening trend visible elsewhere in Maryland 2026 session. No Tier-1 primary source confirms the bill status beyond committee hearings, and this gap is noted rather than resolved. The mixed enforcement-versus-enablement posture identified in this cycle risk assessment, tightening on kiosk oversight and beneficial-ownership licensing, loosening on payroll-processor treatment, with a deregulatory staking carve-out still pending, is likely to persist as the defining structural signal for Maryland into the next cycle.

weekly_brief_draft · JID US-MD
Domain intelligence (D1–D6)

D1 Sanctions

Not covered

Sanctions is not yet covered for this jurisdiction in this report.

D2 Beneficial Ownership and Corporate Transparency

Beneficial Ownership and Corporate Transparency

Continue reading

Maryland beneficial-ownership and corporate-transparency picture this cycle is defined by two state-level licensing developments rather than any federal or EU-level filing. The state repealed a licensing exemption that had allowed persons who acquire or are assigned certain mortgages, mortgage loans, or installment loans to avoid Maryland financial-services licensing requirements, a change that closes a gap surfaced by 2025 cross-filed passive-trust exemption bills and marginally tightens the state licensing-transparency perimeter for entities operating through assignment structures. Separately, and moving in the opposite direction, HB 118 amended the Maryland Money Transmission Act to exclude a person designated as an agent of a payor for payroll-processing purposes from the money transmitter definition, effective October 1, 2026; OFR estimates the exemption affects three companies and aligns Maryland with the treatment already adopted by peer Model Law states. Read together, these two developments show Maryland calibrating its licensing perimeter selectively rather than moving uniformly toward either greater transparency or greater exemption. A separate, unrelated bounded event, the sentencing of an attorney for tax evasion and mortgage fraud, with restitution of $3,103,427 plus indeterminate forfeiture after concealment of income through foreign bank accounts, illustrates continued federal prosecutorial activity touching beneficial-ownership-adjacent concealment conduct in Maryland, though it is a single case rather than a structural architecture change.

Globally, the EU AML Package sets the structural direction for beneficial-ownership and corporate-transparency architecture: the package comprises three distinct instruments, the directly applicable AML Regulation (AMLR, Regulation (EU) 2024/1624), the sixth AML Directive (6AMLD, transposed per Member State), and the AMLA Regulation (Regulation (EU) 2024/1620) establishing the Anti-Money Laundering Authority, with AMLA direct and indirect supervision perimeter shifting oversight of higher-risk obliged entities from purely national authorities toward a hybrid EU-level regime. Maryland sits entirely outside this perimeter; the EU framework is durable structural backdrop for cross-border beneficial-ownership standard-setting rather than a source of any direct obligation for Maryland-licensed entities. No AMLA horizon anchors were carried in this cycle interpreter output for the US-MD scope, so this architecture is stated as standing context rather than as a cycle-specific development.

Outlook

Watch for whether the licensing-exemption repeal produces any observable change in mortgage or installment-loan-assignment structuring activity in Maryland, and whether the payroll-processor carve-out three-company estimate holds once the October 1, 2026 effective date passes. No further Maryland-specific beneficial-ownership legislative activity was identified as pending this cycle.

D3 Enabler Jurisdictions

Not covered

Enabler Jurisdictions is not yet covered for this jurisdiction in this report.

D4 Conflict Finance

Not covered

Conflict Finance is not yet covered for this jurisdiction in this report.

D5 Crypto / Digital Assets / Financial Innovation

Crypto / Digital Assets / Financial Innovation

Continue reading

Maryland digital-asset regulatory architecture moved on two fronts this cycle: consumer-fraud-driven tightening of virtual-currency-kiosk oversight, and liberalising build-out of a stablecoin regulatory perimeter. The Office of the Commissioner of Financial Regulation adopted permanent virtual-currency-kiosk registration regulations under COMAR 09.03.16, effective March 30, 2026, with mandatory NMLS-based registration of each kiosk operator and kiosk required from January 1, 2026. Companion legislation, SB 741, effective October 1, 2026, broadens the statutory definition of virtual currency kiosk operator to capture software-based kiosk deployers and removes the regime prior automated-teller-machine exclusion. The OFR January 2026 legislative briefing explicitly identified a documented surge in pig butchering Bitcoin-ATM fraud as the driver for this expansion, an architecture-level regulatory response to an ongoing fraud typology rather than a reaction to a single enforcement action.

Running in parallel, the Maryland Stablecoin Act (SB 662/HB 1355), signed May 12, 2026, establishes OFR as the state payment-stablecoin regulator, modeled on the federal GENIUS Act, and requires banks and credit unions to notify the Commissioner before seeking federal approval to become a permitted payment-stablecoin issuer. This is a liberalising, market-building development: it creates a defined regulatory pathway and a designated supervisor where none previously existed for state-facing stablecoin activity, positioning Maryland among the more crypto-forward US states on the issuance-authorization side even as it tightens on the consumer-fraud side.

A third, unresolved thread cuts against both of the above: the Maryland Financial Innovation Act (SB 759/HB 859) would exempt staking-as-a-service from Maryland Securities Act registration. OFR itself filed a letter of concern about the bill, flagging a potential regulatory blind spot, and the bill enactment status beyond committee hearings was not confirmed by session end, a genuinely open finding rather than a settled development.

Outlook

The near-term picture to watch is whether OFR issues the Stablecoin Act implementing regulations, which remain pending, and whether the staking-as-a-service exemption in SB 759/HB 859 advances, is amended, or dies, its enactment would create exactly the blind spot OFR has already flagged. The virtual-currency-kiosk regime October 1, 2026 SB 741 effective date is the next concrete milestone in the tightening track.

D6 Compliance Technology & Active Defence

Not covered

Compliance Technology & Active Defence is not yet covered for this jurisdiction in this report.

D7 AML/CTF Regime

AML/CTF Regime

Continue reading

Maryland AML/CTF-adjacent regime moved this cycle primarily through instruments enacted for other stated purposes, consumer-fraud response and stablecoin market-building, rather than through a dedicated AML/CTF statute. The Maryland Stablecoin Act requirement that commercial banks and credit unions notify the Office of the Commissioner of Financial Regulation before seeking federal approval to become a permitted payment-stablecoin issuer is, functionally, a new state-level supervisory touchpoint layered atop the unaffected federal Bank Secrecy Act and FinCEN baseline: it gives OFR visibility into stablecoin-issuance intentions before those intentions reach the federal approval stage. The virtual-currency-kiosk registration regime finalized under COMAR 09.03.16, and broadened by SB 741, functions similarly as an AML/CTF-adjacent control point, bringing kiosk operators, including newly captured software-based deployers, into a state registration system explicitly motivated by a documented pig butchering fraud typology rather than by a standing money-laundering enforcement docket. Both developments sit at the state layer alongside, not in substitution for, the federal AML/CTF architecture, which was not itself the subject of any Maryland-specific movement this cycle. This is a structural rather than episodic development: it reflects a build-out of registration and notification infrastructure that will outlast any single enforcement cycle, consistent with the state own risk-tracker assessment that its posture this cycle is structural rather than episodic and mixed between enforcement and enablement.

Outlook

Watch for whether OFR implementing regulations for the Stablecoin Act specify concrete AML/CTF expectations for notified banks and credit unions, and whether kiosk-operator registration data begins to inform any future enforcement signal. No Tier-1 enforcement-log data specific to AML/CTF actions against kiosk operators was identified this cycle.

Regulatory horizon
Proposed2027-Q1 · ±year

Maryland Financial Innovation Act of 2026 (SB 759/HB 859)

If enacted, digital-asset staking-as-a-service providers would fall outside MD securities registration; enactment status beyond committee hearings was not confirmed by session end.
1 dated · 4 pending date · baseline financial-integrity-2026-07-05
Role action cards
MLROHigh

Maryland finalized virtual-currency-kiosk registration and enacted a new bank and credit union stablecoin-notification requirement this cycle.

Two new state-level control points now exist for MLRO-relevant monitoring: kiosk-operator registration data and a stablecoin-issuer notification channel to the Office of the Commissioner of Financial Regulation, both layered atop the unaffected federal BSA and FinCEN baseline.

3 evidence refs
ComplianceHigh

Maryland licensing perimeter shifted on five fronts this cycle, tightening for crypto kiosks and beneficial-ownership licensing while loosening for payroll processors.

Compliance functions should note the repeal of the mortgage and installment-loan-assignee licensing exemption, the new payroll-processor money-transmitter exemption effective October 1 2026, and the finalized and broadened virtual-currency-kiosk registration regime, each of which changes the licensing-obligation footprint for entities operating in Maryland.

5 evidence refs
LegalAssessed

A Maryland attorney was sentenced for tax evasion and mortgage fraud, and a proposed staking exemption remains legally unresolved.

The Goldstein sentencing (restitution of $3,103,427 plus indeterminate forfeiture) is a bounded enforcement precedent involving concealment through foreign bank accounts, while SB 759 and HB 859 staking-as-a-service exemption remains an open legal question that the Office of the Commissioner of Financial Regulation has itself flagged as a potential blind spot.

2 evidence refs
BoardAssessed

Maryland enacted a Stablecoin Act designating the state financial regulator as stablecoin supervisor, a strategic-level regulatory expansion.

Board-level oversight should register that Maryland now has a defined stablecoin regulatory pathway and supervisor, a material addition to the state regulatory footprint relevant to any institution considering stablecoin issuance or payment-stablecoin services in Maryland.

1 evidence refs
CTOAssessed

Maryland broadened its virtual-currency-kiosk definition to capture software-based deployers, expanding the technical scope of registration obligations.

Technology functions supporting kiosk-adjacent or stablecoin-adjacent infrastructure in Maryland should note that SB 741 removes the prior automated-teller-machine exclusion, meaning software-based deployment architectures are now within scope of the registration regime from October 1 2026.

3 evidence refs
RiskAssessed

The Office of the Commissioner of Financial Regulation itself flagged a potential regulatory blind spot in a proposed staking-as-a-service exemption.

Risk functions should track SB 759 and HB 859 as an unresolved item where the regulator itself, rather than an external critic, has identified a possible gap in oversight, alongside the parallel build-out of kiosk and stablecoin oversight moving in the opposite, tightening direction.

2 evidence refs
OperationsPossible

New registration and notification workflows now apply to Maryland virtual-currency-kiosk operators and stablecoin-adjacent banks and credit unions.

Operations teams administering kiosk registrations or bank and credit union stablecoin notifications in Maryland should track the January 1 2026 and October 1 2026 effective dates for the registration and scope-broadening obligations respectively.

2 evidence refs
AuditPossible

Maryland closed a beneficial-ownership licensing gap this cycle while a federal prosecution illustrated continued concealment risk in the state.

Audit functions should note the repeal of the mortgage and installment-loan-assignee licensing exemption as a control-framework tightening, alongside the Goldstein sentencing as evidence that concealment-based schemes involving foreign bank accounts continue to be prosecuted in Maryland.

2 evidence refs
Decision lens
MLRO

Maryland finalized virtual-currency-kiosk registration and enacted a new bank and credit union stablecoin-notification requirement this cycle.

Compliance

Maryland licensing perimeter shifted on five fronts this cycle, tightening for crypto kiosks and beneficial-ownership licensing while loosening for payroll processors.

Legal

A Maryland attorney was sentenced for tax evasion and mortgage fraud, and a proposed staking exemption remains legally unresolved.

Board

Maryland enacted a Stablecoin Act designating the state financial regulator as stablecoin supervisor, a strategic-level regulatory expansion.

CTO

Maryland broadened its virtual-currency-kiosk definition to capture software-based deployers, expanding the technical scope of registration obligations.

Risk

The Office of the Commissioner of Financial Regulation itself flagged a potential regulatory blind spot in a proposed staking-as-a-service exemption.

Operations

New registration and notification workflows now apply to Maryland virtual-currency-kiosk operators and stablecoin-adjacent banks and credit unions.

Audit

Maryland closed a beneficial-ownership licensing gap this cycle while a federal prosecution illustrated continued concealment risk in the state.

Shared evidence: 6 refs
Scenario sketches

AMLA transition and cross-border obliged-entity supervision

Illustrative orientation only: as the AMLA Regulation moves supervision of higher-risk cross-border obliged entities from a purely national model toward direct or indirect AMLA-level supervision, alongside the directly-applicable AMLR and per-state 6AMLD transposition, the supervisory and evasion landscape for entities operating across multiple EU jurisdictions could shift meaningfully. A hypothetical illustration: an obliged entity historically supervised only by a national authority could face a dual-layer supervisory relationship, and evasion strategies premised on national-supervisor arbitrage could lose some effectiveness as AMLA direct-supervision criteria are finalized. This is architecture-over-incident framing, not a prediction about any specific entity or jurisdiction.

Illustrative scenario for analytical orientation only. Not compliance advice, not a prediction, and not a statement of observed fact.

Standing trackers (T1–T6)
TrackerStatusNote
T1 · Russian Sanctions-Evasion ArchitecturestableNo material change identified within this US-MD-scoped pass.
T2 · EU AML Package / AMLAstableNot applicable to a US subnational jurisdiction pass.
T3 · FATF Grey ListstableNo plenary or mutual-evaluation movement affecting US FATF membership surfaced within this pass.
T4 · Beneficial-Ownership Register StatusimprovingMaryland repealed a licensing-exemption loophole for mortgage/installment-loan assignees, marginally tightening BO/licensing transparency at the state level.
T5 · Crypto & Digital-Asset IntegrityescalatingMaryland finalized virtual-currency-kiosk registration rules (COMAR 09.03.16) and enacted SB 741, and separately enacted the Maryland Stablecoin Act (SB 662) making OFR the state's stablecoin regulator.
T6 · Sanctions Regime DivergencestableNo US-MD-specific sanctions divergence signal surfaced this cycle; sanctions authority sits at the federal level.
Registers

Enforcement actions

  • FinCEN renewed its Residential Real Estate Geographic Targeting Orders, continuing to require title insurance companies to identify and report beneficial owners of legal entities making non-financed residential real estate purchases in covered Maryland jurisdictions pending the nationwide RRE Rule. 9 Oct 2025
  • FinCEN postponed the effective reporting date of its Anti-Money Laundering Regulations for Residential Real Estate Transfers Rule, extending reliance on the interim GTO regime. 30 Sep 2025
  • FinCEN issued a Notice urging financial institutions to identify and report suspicious activity involving convertible virtual currency kiosks, citing fraud, cybercrime, and drug-trafficking-linked abuse patterns consistent with prior Maryland cases. 4 Aug 2025
  • OFAC issued a sanctions advisory on sham transactions used to evade sanctions, providing factors for evaluating whether property is the subject of a sham transaction — directly relevant to Maryland-based trust/corporate-services and real-estate gatekeepers. 31 Mar 2026

Sanctions changes

  • Presidential National Security Presidential Memorandum-2 directed a 'maximum pressure' campaign on Iran, reaffirming that the Government of Iran and Iranian financial institutions remain blocked persons under Executive Order 13599 and the Iranian Transactions and Sanctions Regulations, broadly prohibiting Maryland-domiciled U.S. financial institutions from any dealings with Iranian counterparties. 4 Feb 2025
  • OFAC recent-actions listings show a pattern of Russia-related designation removals alongside continued new counter-narcotics and transnational-criminal-organization designations, altering the sanctions-screening landscape for Maryland financial institutions and asset managers with global counterparty exposure. 1 Jun 2026

Regulatory horizon (register)

  • Nationwide Residential Real Estate Rule reporting takes effect
  • FinCEN AML/CFT Program NPRM comment period closes, rule refocus expected
  • CLARITY Act Senate floor vote and digital-asset market-structure regime
  • Next FATF plenary review of Jurisdictions Under Increased Monitoring

Active schemes

  • [HIGH] Real-estate layering via shell/trust structures in Maryland suburbs
  • Convertible-virtual-currency kiosk laundering/scam conduit
  • Real-estate settlement-agent gatekeeper gap in AML coverage
Sources
  1. FinCEN (U.S. Department of the Treasury)
  2. FinCEN (U.S. Department of the Treasury)
  3. FinCEN (U.S. Department of the Treasury)
  4. OCCRP
  5. OFAC (U.S. Department of the Treasury)
  6. FinCEN (U.S. Department of the Treasury)
  7. ICIJ
  8. Elliptic
  9. TRM Labs
  10. U.S. Department of the Treasury
  11. Maryland Office of the Commissioner of Financial Regulation (Maryland Department of Labor)
  12. FinCEN (U.S. Department of the Treasury)
Coverage gaps
FinCEN's March 2025 interim final rule exempted all U.S.-for…
FinCEN's March 2025 interim final rule exempted all U.S.-formed 'domestic reporting companies' and their beneficial owners from Corporate Transparency Act BOI reporting, meaning Maryland-formed LLCs and trusts — the same category of vehicle used in the Potomac real-estate laundering case — are no longer required to disclose beneficial ownership to FinCEN.
Unlike Iowa, Massachusetts, Connecticut, and the District of…
Unlike Iowa, Massachusetts, Connecticut, and the District of Columbia, Maryland has not brought a state-level enforcement action or dedicated statute against crypto-ATM/kiosk operators despite the historic Baltimore bitcoin-kiosk-to-AlphaBay case and a national surge in kiosk-facilitated elder-fraud losses.
Publicly available English-language reporting on Maryland-sp…
Publicly available English-language reporting on Maryland-specific state-level AML enforcement actions (Office of the Commissioner of Financial Regulation licensing actions, cease-and-desist orders) is sparse relative to federal FinCEN/OFAC/DOJ (D. Md.) sourcing; this baseline relies predominantly on federal primary sources supplemented by investigative journalism rather than state regulator enforcement dockets.

Evidence

Confidence-tiered claims

No structured claims published for this jurisdiction yet.