Not every instrument is backed by its official text yet. At least one law or rulebook covered here has no official source (tier 1) retrieved for it yet. No finding on this page is shown with confidence above “Probable” until stronger sources are retrieved.

Financial Integrity Monitor

United States — Maryland US-MD

Domains covered

8 of 8

Sources

158

Role actions

Horizon <90d

Jurisdiction profile

FATF status: Compliant Tier: A Risk direction: Increasing Enablement vs enforcement: Mixed

Maryland operates under the federal Bank Secrecy Act/FinCEN AML/CFT architecture (BSA, CTA, OFAC sanctions) with no independent state AML statute; the state layer consists of money-transmitter licensing under the Maryland Financial Institutions Article administered by the Office of the Commissioner of Financial Regulation.

Federal 2025 deregulatory moves (CTA domestic BOI exemption) materially thinned the transparency layer applicable to Maryland-registered entities.

Key deficiencies

Domestic beneficial-ownership reporting to FinCEN eliminated for U.S.-formed entities (including Maryland LLCs/trusts historically used in real-estate layering), reopening a shell-company opacity vector
No Maryland-specific AML statute for crypto kiosks/ATMs comparable to Iowa, Massachusetts, or D.C., despite a documented Baltimore bitcoin-kiosk-to-darknet-market laundering precedent
Real estate settlement professionals (title agents, attorneys) remain outside BSA AML program requirements pending the delayed nationwide Residential Real Estate Rule

Recent developments (18m)

FinCEN interim final rule (March 21/26, 2025) exempted all U.S.-formed 'domestic reporting companies' — including Maryland entities — from Corporate Transparency Act beneficial-ownership reporting
FinCEN renewed Residential Real Estate GTOs (Oct 9, 2025) continuing to cover Maryland/Baltimore-area non-financed legal-entity purchases pending the delayed nationwide RRE Rule
FinCEN postponed RRE Rule reporting requirements to March 1, 2026, extending the GTO-based interim regime
FinCEN issued a national CVC kiosk advisory (Aug 4, 2025) addressing scam/fraud typologies structurally identical to the historic Baltimore kiosk-to-AlphaBay case
Treasury/OFAC 'maximum pressure' campaign on Iran (NSPM-2, Feb 4, 2025) tightened the federal sanctions architecture Maryland-domiciled financial institutions must screen against
Maryland's junior U.S. Senator co-negotiated stablecoin/DeFi provisions in the Senate CLARITY Act markup (May 2026), directly shaping the digital-asset compliance perimeter

United States federal law that applies in United States – Maryland is covered once, on the United States page. This page covers United States – Maryland’s own layer: its own law, regulators and enforcement.

Brief

Lead signal

Lead Signal

Maryland's financial-crime obliged-entity perimeter moved in two directions at once when two state statutes commenced on October 1, 2026. Chapter 20/21 of 2026 (HB118/SB261) narrows the Maryland Money Transmission Act's definition of money transmitter by excluding a payors payroll-processing agent, provided three statutory conditions are met, reversing a 2023 regulatory inclusion by the Office of the Commissioner of Financial Regulation. The same date brought Chapter 417 (SB741) into force, which broadens the definition of virtual currency kiosk operator to capture any person who installs or operates software enabling a stand-alone automated device to provide virtual-currency services. Read together, the two instruments are not a single directional shift but a structural recalibration of who sits inside Marylands obliged-entity perimeter: a narrowing for one payments-adjacent population and a widening for another, both administered by the same regulator.

Read full brief

Lead Signal

The practical effect is that OFRs registration and compliance regime for kiosk operators now reaches software distributors and installers who previously sat outside it, while payroll-processing agents meeting the statutory conditions exit money-transmitter licensure altogether. Neither change was accompanied by implementing guidance from OFR as of this cycle, leaving the two populations most affected, kiosk-adjacent software providers and payroll processors, to self-assess against freshly amended statutory text without an interpretive bulletin to anchor that assessment.

Other Developments

Stablecoin certification regime remains enacted but not yet operative. Chapter 513/514 of 2026 (SB662/HB1355), the Maryland Stablecoin Act, establishes an OFR certification pathway for state issuers and payment stablecoin services institutions aligned to the federal GENIUS Act. The regime does not commence until January 1, 2027, and its status is unchanged this cycle; no certification applications or OFR procedural guidance have surfaced.

A Maryland-based venture firm opened a fourth fund. DataTribe, a Fulton, Maryland cybersecurity-focused venture firm, began raising its fourth fund in October 2026 according to a single aggregator source. The amount and close date are not independently confirmed, and no primary filing or company release was retrieved this cycle, so this is noted as a commercial-activity signal rather than a verified capital event.

Cross-Monitor Connections

The kiosk-operator broadening and the payroll-processor exclusion both sit squarely at the intersection of enabler-jurisdiction architecture and the crypto/digital-asset perimeter: a widened kiosk definition increases the population of regulated on-ramps for virtual-currency cash transactions, a channel of recurring interest to typology analysis of structuring and layering through physical kiosks. The payroll-processor carve-out, by contrast, is a pure licensing-perimeter question with no crypto nexus, but it follows the same legislative calendar and the same regulator, illustrating how a single commencement date can move two unrelated populations through one administrative body. Neither development reflects an enforcement action; both are legislative recalibrations of scope, consistent with the broader pattern of enablement-by-definition rather than enablement-by-inaction.

Outlook

The immediate question for the next cycle is whether OFR issues implementing guidance for either commenced instrument. Absent a bulletin, kiosk-adjacent software installers and payroll-processing agents are left to apply the amended statutory text directly, which is workable for conditions stated with precision but leaves interpretive gaps where the three statutory conditions for the payroll exclusion are tested against边 real arrangements. The Maryland Stablecoin Act's January 1, 2027 commencement is the more structurally significant horizon item: as scheduled, it will open a state certification pathway that did not previously exist, and the next material question is whether any nondepository trust company or credit union service organization begins the certification process ahead of that date. The DataTribe fund-raise, if independently confirmed, would be a minor but illustrative data point on the durability of Maryland's cybersecurity-adjacent investment ecosystem; as it stands, it remains a single-source, unconfirmed signal.

Earlier periodic briefs (4)

25 Oct 2026 · fim-2026-10-25

Lead Signal

The practical effect is that OFRs registration and compliance regime for kiosk operators now reaches software distributors and installers who previously sat outside it, while payroll-processing agents meeting the statutory conditions exit money-transmitter licensure altogether. Neither change was accompanied by implementing guidance from OFR, leaving the two populations most affected, kiosk-adjacent software providers and payroll processors, to self-assess against freshly amended statutory text without an interpretive bulletin to anchor that assessment.

Other Developments

Stablecoin certification regime remains enacted but not yet operative. Chapter 513/514 of 2026 (SB662/HB1355), the Maryland Stablecoin Act, establishes an OFR certification pathway for state issuers and payment stablecoin services institutions aligned to the federal GENIUS Act. The regime does not commence until January 1, 2027, and its status is unchanged; no certification applications or OFR procedural guidance have surfaced.

A Maryland-based venture firm opened a fourth fund. DataTribe, a Fulton, Maryland cybersecurity-focused venture firm, began raising its fourth fund in October 2026 according to a single aggregator source. The amount and close date are not independently confirmed, and no primary filing or company release was retrieved, so this is noted as a commercial-activity signal rather than a verified capital event.

Cross-Monitor Connections

Outlook

The immediate question is whether OFR issues implementing guidance for either commenced instrument. Absent a bulletin, kiosk-adjacent software installers and payroll-processing agents are left to apply the amended statutory text directly, which is workable for conditions stated with precision but leaves interpretive gaps where the three statutory conditions for the payroll exclusion are tested against边 real arrangements. The Maryland Stablecoin Act's January 1, 2027 commencement is the more structurally significant horizon item: as scheduled, it will open a state certification pathway that did not previously exist, and the next material question is whether any nondepository trust company or credit union service organization begins the certification process ahead of that date. The DataTribe fund-raise, if independently confirmed, would be a minor but illustrative data point on the durability of Maryland's cybersecurity-adjacent investment ecosystem; as it stands, it remains a single-source, unconfirmed signal.

28 Sep 2026 · fim-2026-09-28

Lead Signal

Maryland finalised and then expanded a state-level virtual currency kiosk control layer this cycle. COMAR 09.03.16 took permanent effect March 30, 2026, requiring NMLS-based registration of kiosk operators, blockchain-analytics wallet screening, and a designated compliance officer. SB741, Chapter 417, signed May 12, 2026 and effective October 1, 2026, broadens the definition of virtual currency kiosk operator to reach installers and operators of software that enables a stand-alone automated device to provide virtual currency services, closing a device-agnostic gap that had separated software-enabled kiosks from hardware-centric ones.

The architecture is significant beyond Maryland itself: it is a state building an AML-adjacent screening perimeter around a cash-to-crypto conversion channel that sits outside the ordinary Money Transmission Act framework, at a moment when federal beneficial-ownership transparency is narrowing rather than widening.

Other Developments

Federal beneficial-ownership scope narrowed. FinCEN's final rule, effective August 14, 2026, permanently narrows Corporate Transparency Act beneficial-ownership-information reporting to foreign reporting companies only, closing a period of interim-rule volatility that began with the March 2025 interim final rule. The statute itself remains under review before the Supreme Court in National Small Business United v. Bessent, so the narrowing is a regulatory settlement layered atop unresolved constitutional exposure, not a final word on the CTA's scope.

FATF grey list composition shifted at the June 2026 plenary. Bosnia and Herzegovina and Iraq were added; Algeria and Namibia were removed following successful on-site visits, leaving 22 jurisdictions listed. The next plenary is scheduled for October 2026 under the incoming UK Presidency.

Cambodia grey-list re-listing risk flagged, not confirmed. The National Bank of Cambodia's governor publicly warned in January 2026 of a risk of a third FATF grey-listing tied to casino-linked scam-centre finance. This is a public statement of risk, not a FATF action; it was not reflected in any FATF listing decision as of the June 2026 plenary.

Cross-Monitor Connections

The Maryland kiosk-registration and wallet-screening regime is the same underlying fact set that the crypto monitor will read through a licensing-and-consumer-protection lens and that the world-payments monitor may read through a money-transmission-perimeter lens; here the salient point is the AML-adjacent screening obligation itself, layered on top of, not substituting for, general money-transmitter licensing. The federal CTA narrowing interacts with state-level transparency measures: as the federal beneficial-ownership reporting population shrinks to foreign entities only, state-level control layers such as Maryland's kiosk registration and screening regime take on relatively greater weight within the domestic financial-integrity architecture for the products they cover.

Outlook

Watch for the October 1, 2026 effective date of SB741's kiosk-operator scope expansion in Maryland, and for whether the Commission adopts implementing guidance addressing software-only kiosk enablers ahead of that date. At the federal level, the Supreme Court's disposition of National Small Business United v. Bessent will determine whether the narrowed BOI reporting population is a durable settlement or an interim state pending further litigation. On the international side, watch the October 2026 FATF plenary under the incoming UK Presidency for whether Cambodia's publicly flagged re-listing risk materialises into a formal grey-list action, or remains an unconfirmed warning.

14 Sep 2026 · fim-2026-08-21

Lead Signal

Maryland most consequential financial-integrity development this cycle is the finalization of its virtual-currency-kiosk oversight regime alongside enactment of the Maryland Stablecoin Act, together marking a structural build-out of state-level crypto-asset architecture rather than an isolated enforcement event. The Office of the Commissioner of Financial Regulation (OFR) adopted permanent virtual-currency-kiosk registration regulations under COMAR 09.03.16, effective March 30, 2026 with mandatory registration required from January 1, 2026, and the Maryland General Assembly separately enacted SB 741, effective October 1, 2026, which broadens the definition of virtual currency kiosk operator to capture software-based kiosk deployers and removes the prior automated-teller-machine exclusion. The OFR January 2026 legislative briefing identified a documented surge in pig butchering Bitcoin-ATM fraud as the driver behind the expanded oversight, an explicit enablement-versus-enforcement signal: the state is building registration infrastructure ahead of, rather than in response to, a wave of individual enforcement actions. Layered onto this is the Maryland Stablecoin Act (SB 662/HB 1355), signed May 12, 2026, which designates OFR as the state payment-stablecoin regulator aligned to the federal GENIUS Act framework and requires banks and credit unions to notify OFR before seeking federal approval to become a permitted stablecoin issuer. Together these two tracks describe an architecture-level repositioning of the Maryland state financial regulator into a first-line crypto-asset supervisor, a designation most US states have not yet made. This build-out is anchored in Tier-1 primary-source regulatory action rather than secondary reporting: both the COMAR registration rule and the Stablecoin Act trace to OFR own legislative-review materials, giving this cycle crypto-architecture signal a high-confidence foundation. This mixed picture is consistent with an overall in-transition regulatory posture for Maryland, reflecting active, unresolved regulatory construction rather than a settled position.

Other Developments

Beneficial-ownership licensing tightened. Maryland repealed a licensing exemption that had allowed persons acquiring or assigned certain mortgages, mortgage loans, or installment loans to avoid state financial-services licensing, a change that marginally closes a beneficial-ownership and licensing-transparency gap surfaced by 2025 cross-filed passive-trust exemption bills. Payroll-processor carve-out. In a countervailing deregulatory move, HB 118 excludes agents designated for payroll-processing purposes from the Maryland Money Transmission Act money transmitter definition, effective October 1, 2026, a change OFR estimates affects three companies and that aligns Maryland with peer Model Law states. Staking exemption proposed, unresolved. The Maryland Financial Innovation Act (SB 759/HB 859) would exempt staking-as-a-service from Maryland Securities Act registration; OFR itself filed a letter of concern flagging a potential regulatory blind spot, and the bill enactment status beyond committee hearings was not confirmed by session end. Bounded enforcement event. A Maryland attorney was sentenced for tax evasion and mortgage fraud, ordered to pay $3,103,427 in restitution plus indeterminate forfeiture after concealing income through foreign bank accounts, a single bounded prosecution rather than a standing architecture change.

Cross-Monitor Connections

The virtual-currency-kiosk and stablecoin developments carry direct payments-monitor relevance: the same COMAR 09.03.16 registration regime and HB 118 payroll-processor exemption alter the Maryland money-transmission licensing perimeter in ways a payments-focused reading would track as market-access and licensing change rather than as financial-crime architecture. The Maryland Stablecoin Act OFR-notification requirement for banks and credit unions is likewise a dual-relevant development: it is simultaneously a new AML/CTF-adjacent supervisory touchpoint and a payments-infrastructure authorization event, one that the world-payments monitor would read primarily through its own licensing and market-access lens rather than through this financial-integrity architecture-over-incident framing. No conflict-finance, extractive-industry, or information-operations connection was identified for Maryland this cycle.

Outlook

Watch for whether OFR issues implementing regulations for the Maryland Stablecoin Act, which remain pending and will determine how the bank and credit-union notification requirement and broader issuer-authorization pathway actually operate in practice. The unresolved status of SB 759/HB 859 staking-as-a-service exemption is the more consequential open question: if enacted, it would create exactly the kind of regulatory blind spot OFR itself has flagged, sitting in tension with the tightening trend visible elsewhere in Maryland 2026 session. No Tier-1 primary source confirms the bill status beyond committee hearings, and this gap is noted rather than resolved. The mixed enforcement-versus-enablement posture identified in this cycle risk assessment, tightening on kiosk oversight and beneficial-ownership licensing, loosening on payroll-processor treatment, with a deregulatory staking carve-out still pending, is likely to persist as the defining structural signal for Maryland into the next cycle.

11 Aug 2026 · fim-2026-08-05

Lead Signal

Two sanctions-architecture developments moved in parallel this cycle without a shared cause. FinCEN withdrew its Section 311 finding that ABLV Bank of Latvia was a financial institution of primary money-laundering concern, terminating the related special-measure rulemaking, while OFAC designated two Mexican nationals and nine entities linked to the Cartel de Jalisco Nueva Generacion in a coordinated action targeting fiscal fuel-theft and smuggling schemes, accompanied by a FinCEN supplemental alert. The two actions point in opposite directions, one a unilateral US delisting, the other a fresh multi-entity designation, and together they show that sanctions architecture this cycle was defined as much by contraction as by expansion.

Other Developments

US AML/CFT program rulemaking reset. An April 10, 2026 FinCEN notice of proposed rulemaking proposes risk-focused, outcome-oriented AML/CFT program rules and expressly supersedes and withdraws the agency own July 2024 proposal, a rare instance of an agency retiring a prior rulemaking rather than layering a new one on top.

Maryland residential real estate GTOs expiring. The FinCEN Geographic Targeting Order program covering Maryland, including a distinctive fifty-thousand-dollar threshold for Baltimore City and County, is set to expire as the nationwide Residential Real Estate Rule takes effect March 1, 2026, converting a temporary, renewable order-based regime into a permanent nationwide reporting rule.

Maryland stablecoin and kiosk architecture. The Maryland Office of Financial Regulation enacted the Maryland Stablecoin Act, effective January 1, 2027, positioning itself as the state stablecoin regulator, alongside SB741 expanding virtual-currency-kiosk oversight effective October 1, 2026. Both run in parallel with a joint FinCEN and OFAC notice of proposed rulemaking that would bring Permitted Payment Stablecoin Issuers into the Bank Secrecy Act financial-institution perimeter, a state and federal supervisory overlap worth watching into 2027.

Southwest-border MSB examination sweep. FinCEN examined more than one hundred money services businesses along the southwest border for Bank Secrecy Act non-compliance, producing six notices of investigation, dozens of IRS referrals, and more than fifty compliance-outreach letters, a systemic-vulnerability signal in a sector operating largely outside formal banking oversight.

Cambodia grey-list exposure. The National Bank of Cambodia governor publicly warned of renewed FATF grey-listing risk tied to the scam-compound casino economy, estimated at up to nineteen billion dollars, following the Prince Group and Chen Zhi fallout.

Historic broker-dealer AML penalty. A global broker-dealer received what was reported as the largest-ever FinCEN Bank Secrecy Act enforcement action against a broker-dealer, an eighty-million-dollar penalty for willful AML program failure spanning March 2018 through June 2024, though this rests on a single secondary source this cycle.

Cross-Monitor Connections

The CJNG fiscal fuel-theft designations connect directly to conflict-finance and extractive-industry-integrity analysis: the alert identifies this channel as the most significant non-drug illicit revenue source for the cartel, sustaining broader trafficking operations, a pattern that state-capture and commodity-flow monitors would read as a financing backbone rather than an isolated smuggling problem. The Cambodia scam-compound economy, estimated at close to forty percent of GDP by some estimates, similarly sits at the intersection of enabler-jurisdiction and conflict-finance-adjacent analysis, where casino, junket, legal, and accounting-sector supervision gaps identified in the FATF 2023 mutual evaluation remain unresolved. The parallel Maryland and federal stablecoin architecture is a state-capture-adjacent regulatory question in miniature: which supervisor, state or federal, ultimately holds the perimeter over payment stablecoin issuers is a governance question with direct AML/CFT consequences.

Outlook

The GENIUS Act final Permitted Payment Stablecoin Issuer compliance rules are targeted informally for mid-2026, compressing the decision window for issuers weighing an OCC charter, a bank partnership, or exit; the Maryland stablecoin regime becomes effective January 1, 2027, shortly after. Cambodia FATF standing bears watching for a possible third grey-listing absent a plenary outcome confirmed this cycle. The southwest-border MSB examination sweep investigation and referral pipeline is also a forward indicator, since notices of investigation and IRS referrals typically precede enforcement actions by one or more cycles.

Domain intelligence (D1–D8)

D1 Sanctions

no_changestanding position

Sanctions Architecture and Evasion

Maryland inherits sanctions-compliance obligations wholesale from the federal OFAC architecture; there is no independent state sanctions regime, so this cycle most significant D1 signal is the sustained scale of the OFAC Iran maximum-pressure campaign under National Security Presidential Memorandum 2. NSPM-2 was issued February 4, 2025, and by early 2026 OFAC had sanctioned more than 875 persons, vessels, and aircraft in 2025 alone under the campaign, with designations continuing into 2026 under Executive Order 13599 and the Iranian Transactions and Sanctions Regulations -- a sustained enforcement escalation rather than a single policy directive, correcting an earlier baseline assessment that understated the scale of the campaign. For any Maryland-domiciled bank or cross-sector firm maintaining correspondent or trade-finance relationships touching Iran-linked counterparties, this is not a one-off designation wave but a structurally elevated screening burden, sitting within the counter-terrorist-financing pillar as much as the traditional AML pillar, that should be assumed durable for the balance of 2026.

Running in parallel, and analytically distinct, is a pattern of Russia-related sanctions delistings by OFAC in 2026 that is not mirrored by the EU Council or the UK Office of Financial Sanctions Implementation. The OFAC recent-actions log shows repeated 2026 Russia-related designation removals occurring alongside continued counter-narcotics and transnational-criminal-organization designations, and this divergence -- OFAC removing Russia-related designations while EU and UK lists remain comparatively static -- is not a technical footnote. It creates listing-scope mismatch and secondary-sanctions exposure for any Maryland firm transacting with European counterparties, since a name cleared on the US SDN list may remain designated under EU or UK regimes. This is precisely the kind of cross-regime divergence the sanctions-architecture filter of this monitor is designed to surface: the compliance burden falls not on tracking a single list but on reconciling two increasingly divergent ones, and correspondent-banking customer relationships are the specific typology most exposed to this mismatch.

A third development sharpens the gatekeeper dimension of Maryland sanctions exposure. The OFAC March 31, 2026 sanctions advisory on sham transactions sets out factors examiners will use to evaluate sanctions evasion structured through sham commercial or financial transactions. This guidance is directly relevant to Maryland-based trust and corporate-services providers, fund structures, and real-estate settlement professionals serving high-net-worth and corporate clients, who function as the professional layer through which such structures are typically built -- a relevance made more acute by the fact that the Maryland real-estate gatekeeper class remains, as detailed in the enabler-jurisdiction domain below, categorically outside Bank Secrecy Act AML program obligations even as its exposure to OFAC-relevant advisory guidance grows.

A fourth, more indirect signal concerns the wider architecture of Russian sanctions evasion. Vendor analytics identify the A7 sanctions-evasion platform cluster -- including the A7A5 stablecoin and the Garantex-successor Grinex network -- as linked to at least 56 billion dollars in 2025 volume; Garantex itself was disrupted in March 2025, and a successor platform emerged rapidly thereafter. Maryland relevance to this architecture is indirect, running through the global custodian and asset-manager screening exposure that any Maryland-domiciled institution with international correspondent relationships inherits, rather than through any direct Maryland nexus, and the underlying sourcing here is vendor-tier rather than primary-regulatory, warranting a correspondingly more cautious confidence assessment than the OFAC-sourced findings above.

Maryland own FATF-adjacent standing is unremarkable and stable: the United States is not listed on the FATF Jurisdictions Under Increased Monitoring or Call for Action lists as of the February 13, 2026 plenary, which instead added Kuwait and Papua New Guinea to increased monitoring while Iran, North Korea, and Myanmar remain on the Call for Action list. That stability at the jurisdictional level, however, sits awkwardly against the widening OFAC-EU-UK divergence described above -- a reminder that FATF list status and bilateral sanctions-list alignment are separate axes of exposure, and that a jurisdiction can be FATF-compliant while still generating meaningful secondary-sanctions friction for its domiciled institutions.

Outlook

The controlling near-term uncertainty in this domain is not whether the OFAC Iran enforcement posture continues -- the evidence indicates it will -- but whether the Russia-delisting pattern deepens the divergence with EU and UK sanctions architecture, and how quickly Maryland-domiciled firms with European exposure adjust screening logic to account for two lists moving in different directions. The next FATF plenary review, expected October 2026, is a scheduled checkpoint that could adjust grey-list composition with knock-on effects for correspondent-banking and enhanced due-diligence obligations, though the outcome is not yet determinable. This assessment carries an evidentiary caveat: continuation of the NSPM-2 enforcement pace through the remainder of 2026 is confirmed only through the January-February 2026 Treasury releases examined this cycle, and the A7-Garantex-Grinex evasion-cluster figures rest on vendor rather than primary-regulatory sourcing; both should be revisited as later data becomes available.

D2 Beneficial Ownership

no_changestanding position

Beneficial Ownership and Corporate Transparency

Maryland is not an EEA jurisdiction, and the supervisory perimeter of the EU AML Package does not apply directly to Maryland-domiciled entities; the developments directly relevant to Maryland own regulatory exposure sit instead within the federal Bank Secrecy Act and Corporate Transparency Act architecture that Maryland inherits in full, with no independent state beneficial-ownership statute layered on top. Two federal rollbacks are material this cycle. First, a FinCEN March 26, 2025 interim final rule exempting all US-formed domestic reporting companies from Corporate Transparency Act beneficial-ownership reporting remains in force. This is not, however, a settled legislative reversal of the beneficial-ownership architecture of the 2021 AML Act -- it is administrative policy subject to revision, and the December 2025 Eleventh Circuit ruling upholding the constitutionality of the CTA leaves both litigation and administrative-reversal risk genuinely live rather than resolved in either direction; the underlying reporting obligation, 31 CFR 1010, remains only partially covered as a control matter for cross-sector reporting companies as a result. Second, the US District Court for the Eastern District of Texas vacated the nationwide Residential Real Estate Rule on March 19, 2026 -- a material correction to an earlier assessment that had presented the Rule as taking effect March 1, 2026 and replacing the Geographic Targeting Order program outright. FinCEN and the Department of Justice have appealed; pending that appeal, reporting persons face no Real Estate Report obligation, and the Baltimore-area Geographic Targeting Order program, renewed through February 2026 for title insurance companies, is the sole operative real-estate transparency mechanism covering Maryland counties, functioning as a covered control for that narrower reporting population even as the broader RRE Rule obligation remains suspended.

The practical significance of these two rollbacks is illustrated directly by an active case: a multimillion-dollar Potomac, Maryland mansion acquired through a layered structure of shell companies and overseas trusts by the network of former Gambian president Yahya Jammeh, now the subject of Department of Justice forfeiture litigation in the District of Maryland. This is precisely the corporate-opacity and real-estate-layering vector, involving politically exposed persons, high-net-worth individuals, and fund-structure vehicles, that both the CTA domestic exemption and the RRE Rule vacatur leave structurally less visible -- a foreign-PEP kleptocratic-capture case using exactly the vehicle types the transparency architecture was designed to expose, and a direct illustration of why the CTA beneficial-ownership reporting obligation, even as currently exempted for domestic entities, remains conceptually the control that would have most directly addressed this scheme.

Globally, the EU AML Package sets the structural direction for beneficial-ownership transparency, and it is worth stating as durable backdrop against which the Maryland picture should be read, even though it does not bind Maryland directly. The package comprises three distinct instruments: the AML Regulation (AMLR, Regulation (EU) 2024/1624), which is directly applicable across Member States without transposition; the sixth AML Directive (6AMLD), which each Member State transposes into national law individually; and the AMLA Regulation (Regulation (EU) 2024/1620), which establishes the Anti-Money Laundering Authority. The direct- and indirect-supervision perimeter of AMLA is shifting EU AML supervision from a purely national-authority model toward a hybrid EU-level regime, with AMLA positioned to directly supervise a defined set of high-risk cross-border obliged entities while indirectly overseeing national supervisors for the remainder. For Maryland, this is contextual rather than binding: it illustrates a jurisdiction moving toward centralized, harder-to-arbitrage beneficial-ownership supervision at precisely the moment the US federal layer applicable to Maryland entities is narrowing on two independent fronts. The comparison is instructive for assessing relative transparency trajectories, not a statement that Maryland or the broader US falls within the AMLA perimeter.

Outlook

The controlling uncertainty for the Maryland beneficial-ownership perimeter is not whether opacity vectors have reopened -- the CTA exemption and RRE Rule vacatur both indicate they have -- but whether either rollback proves durable. The CTA domestic exemption remains subject to revision following its own comment period and to the litigation risk the constitutionality ruling of the Eleventh Circuit keeps alive; the RRE Rule vacatur is under active FinCEN and Department of Justice appeal with a timeline and likely outcome not yet established from this cycle sourcing. Both should be tracked as unresolved rather than settled, and continued operation of the Baltimore-area GTO program should be read as an interim patch covering a narrower reporting population rather than a permanent substitute for either instrument.

D3 Enabler Jurisdictions

no_change

Enabler Jurisdictions

Maryland's financial-crime enabler profile this cycle is defined by a single legislative act with two effects on the same obliged-entity architecture. Chapter 20 and Chapter 21 of 2026 (HB118/SB261), effective October 1, 2026, amend the Maryland Money Transmission Act to exclude a payors payroll-processing agent from the statutory definition of money transmitter where three conditions are satisfied. This reverses the Office of the Commissioner of Financial Regulation's 2023 position that had brought payroll processors inside the licensing perimeter, and it aligns Maryland with a number of other states that carve payroll processing out of money-transmission licensure entirely. From an enabler-jurisdiction lens, this is architecture, not incident: it is a definitional narrowing enacted through the ordinary legislative calendar, not a response to any identified enforcement gap or illicit-finance episode. The analytical significance lies precisely in that ordinariness. A jurisdiction that quietly narrows its obliged-entity population through routine legislative housekeeping changes the shape of its AML perimeter just as surely as a jurisdiction that imposes a new licensing requirement, and the former kind of change is systematically under-examined because it generates no enforcement headline.

The narrowing is conditional, not blanket: the exclusion applies only where the person is designated as an agent of a payor for the purpose of providing payroll processing services under specified statutory circumstances. That conditionality matters for enabler-jurisdiction assessment because it preserves OFR's authority to pull a payroll-processing arrangement back inside the money-transmitter perimeter if the statutory conditions are not met, meaning this is a scoped carve-out rather than a wholesale deregulation of the payroll-processing sector. No OFR implementing guidance interpreting the three conditions has been located this cycle, which is itself a notable gap: a newly commenced conditional exclusion without interpretive guidance creates near-term ambiguity for any payroll processor attempting to determine, on October 1, 2026 or after, whether its particular arrangement qualifies.

This sits alongside, but is analytically distinct from, Maryland's virtual-currency kiosk amendments (Chapter 417), which moved the obliged-entity perimeter in the opposite direction for a different population. The coincidence of a narrowing and a widening within the same commencement date, administered by the same regulator (OFR), is worth noting as a pattern: Maryland is not moving uniformly toward permissiveness or toward tightening, but recalibrating definitional boundaries population by population. That is the correct reading for an enabler-jurisdiction tracker that assesses structural permissiveness rather than aggregate regulatory direction.

Outlook

The near-term question is whether OFR publishes a bulletin or guidance document construing the three statutory conditions for the payroll-processor exclusion, which would materially reduce ambiguity for affected agents. Absent such guidance, OFR retains case-by-case authority to determine whether a given payroll-processing arrangement falls inside or outside the amended definition, and the absence of a published interpretive position is itself a condition worth monitoring across the next few cycles. No enforcement action or supervisory statement specific to the payroll-processor population has been identified, and none should be inferred from the legislative change alone.

D4 Conflict Finance

no_changestanding position

Conflict Finance and Extractive-Industry Integrity

No Maryland-specific conflict-finance or extractive-industry material was identified in this baseline research cycle. Conflict finance and extractive-industry integrity are not among the primary risk domains of Maryland as currently assessed: exposure runs overwhelmingly through the federal sanctions, beneficial-ownership, and digital-asset channels documented in the other five domains of this brief, rather than through direct extractive-industry or armed-conflict financing nexus points. This is stated as an honest account of the coverage of the evidence base rather than as an assertion that no such exposure could exist; it reflects the absence of qualifying findings in the sources reviewed this cycle, not a determination that the domain is closed to future signal.

The one indirect touchpoint worth noting is architectural rather than Maryland-specific: the sustained OFAC Iran maximum-pressure campaign and the broader sanctions-enforcement posture, detailed in the sanctions-architecture domain above, intersects conceptually with conflict-finance concerns to the extent that Iran-linked sanctions programs address revenue streams with security-policy dimensions. That intersection, however, does not rise to a Maryland-specific D4 finding this cycle and is better read under the sanctions-architecture domain where the underlying evidence sits.

Outlook

This domain should be flagged for targeted scoping in subsequent cycles rather than assumed permanently quiet: the federal-derivative sanctions and AML architecture of Maryland means any future conflict-finance nexus -- for example, sanctioned-goods procurement networks with Maryland-based intermediaries, or extractive-industry beneficial-ownership structures routed through Maryland entities -- would likely surface first through the beneficial-ownership and sanctions-architecture domains already under active monitoring. Absent such a finding, D4 remains appropriately thin for this jurisdiction this cycle.

D5 Crypto / Digital Assets / Financial Innovation

no_changewatch

Crypto / Digital Assets / Financial Innovation

Maryland's digital-asset perimeter tightened on October 1, 2026 with the commencement of Chapter 417 (SB741), which broadens the statutory definition of virtual currency kiosk operator. The amendment extends the definition to include a person who installs or operates software enabling a stand-alone automated device to provide virtual-currency services, reaching beyond the operators of physical kiosks themselves to capture the software layer that makes a kiosk functional. This is a material widening of the population subject to OFR's kiosk registration, consumer-protection, and fraud-refund regime, confirmed at Confirmed confidence on a Tier-1 primary legislative source.

The architecture-over-incident framing is apt here: virtual-currency kiosks are a recurring channel of interest in illicit-finance typology work because they convert cash to crypto-assets with limited friction, and a definitional expansion that captures software distributors as well as device operators closes a gap through which an installer could previously have argued they were not themselves an operator subject to registration. Whether this expansion was motivated by an identified evasion pattern or by routine definitional tidying is not established in the sourced material; what is established is the structural effect, which is to widen the net of persons OFR can require to register and from whom it can demand compliance with the kiosk statute's consumer-protection and fraud-refund provisions.

This development sits alongside, and should be read together with, the Maryland Stablecoin Act (Chapter 513/514 of 2026), which remains enacted but not yet in force pending a January 1, 2027 commencement date. That regime, once operative, will give the Office of the Commissioner of Financial Regulation certification authority over state issuers and payment stablecoin services institutions, aligned to the federal GENIUS Act framework. No change in that regime's status occurred this cycle; it remains a horizon item rather than an active development. Taken together, the kiosk amendment (in force) and the stablecoin regime (enacted, not yet in force) illustrate a jurisdiction building out digital-asset-adjacent licensing architecture in stages, with the kiosk perimeter moving first and the stablecoin issuance perimeter to follow roughly fifteen months later.

A further, more tangential signal in this domain is the October 2026 fund-raise reportedly commenced by DataTribe, a Fulton, Maryland cybersecurity venture firm. This is sourced to a single Tier-4 aggregator with no primary filing retrieved, and its relevance to the digital-asset/financial-innovation domain is limited to DataTribe's general sector focus rather than any crypto-specific mandate; it is noted here for completeness at Uncertain confidence rather than as a digital-asset development in its own right.

Outlook

The most consequential near-term milestone for this domain remains the Maryland Stablecoin Act's January 1, 2027 commencement, as scheduled. Once operative, it will be the first point at which Maryland-chartered nondepository trust companies and credit union service organizations can seek certification as state issuers or payment stablecoin services institutions, materially expanding the state's digital-asset licensing architecture beyond the kiosk and money-transmission statutes. In the nearer term, whether OFR issues guidance interpreting the broadened kiosk-operator definition, particularly as it applies to software vendors who are not themselves kiosk operators in the conventional sense, is the development most likely to clarify compliance obligations for the newly captured population.

Judgment: Maryland Stablecoin Act is enacted but not yet effective (2027-01-01); OFR still building the supervisory pathway. Probable

D6 Compliance Technology & Active Defence

no_changestanding position

Compliance Technology and Active Defence

The single material D6 development this cycle is a FinCEN proposed rule to refocus bank AML/CFT programs toward risk-based prioritization, whose comment period closed June 9, 2026. The proposal, currently at the consultation stage, would require federal banking regulators to consult FinCEN before taking certain supervisory or enforcement actions, elevating the supervisory role of FinCEN and reshaping the compliance posture expected of Maryland-chartered and Maryland-headquartered banks toward proactive, risk-based program design rather than the more checklist-oriented program structures the current rule is understood to encourage. This is a watch-stage development: the comment period has closed, but the final form of the rule, adoption timeline, and practical supervisory-consultation mechanics are not yet established from the evidence base this cycle, and the underlying governance obligation remains formally at the citation-stage of consultation rather than in force.

The significance of this proposal should be read against the other developments in this brief rather than in isolation. A risk-based refocus of bank AML/CFT programs would, in principle, be the kind of active-defence architecture capable of addressing exactly the structural gaps documented elsewhere this cycle -- the real-estate settlement-agent gatekeeper gap, the crypto-kiosk enforcement-absence gap, and the beneficial-ownership opacity reopened by the CTA domestic exemption and RRE Rule vacatur -- to the extent examiners direct risk-based attention toward those specific vectors. Whether the final rule does so, however, is not established; the proposal as currently understood addresses program structure and supervisory consultation mechanics rather than any of these specific typologies by name, and this monitor rates the connection between the NPRM and those specific gaps as assessed rather than confirmed.

The broader Maryland compliance-technology posture continues to be defined by inheritance from the federal BSA and FinCEN architecture rather than by any state-specific active-defence initiative; no Maryland-specific regtech, transaction-monitoring, or supervisory-technology development was identified this cycle independent of the federal NPRM, and this absence of state-specific findings should itself be read as a coverage feature of the current evidence base rather than a confirmed absence of activity.

Outlook

The controlling question for this domain is whether the FinCEN AML/CFT Program NPRM is finalized substantially as proposed, and if so, on what implementation timeline for Maryland-chartered and headquartered banks. Given the comment period closed only recently, a finalized rule and clear implementation guidance are not expected before the next several cycles; institutions should treat the current proposal as directional rather than settled, and monitor for the final text of the rule and any accompanying supervisory guidance specific to risk-based prioritization mechanics, revisiting this domain each cycle until the rulemaking reaches a resolved state.

D7 AML/CTF Regime

no_changeno_changestanding position

AML/CTF Regime

Maryland AML/CTF-adjacent regime moved this cycle primarily through instruments enacted for other stated purposes, consumer-fraud response and stablecoin market-building, rather than through a dedicated AML/CTF statute. The Maryland Stablecoin Act requirement that commercial banks and credit unions notify the Office of the Commissioner of Financial Regulation before seeking federal approval to become a permitted payment-stablecoin issuer is, functionally, a new state-level supervisory touchpoint layered atop the unaffected federal Bank Secrecy Act and FinCEN baseline: it gives OFR visibility into stablecoin-issuance intentions before those intentions reach the federal approval stage. The virtual-currency-kiosk registration regime finalized under COMAR 09.03.16, and broadened by SB 741, functions similarly as an AML/CTF-adjacent control point, bringing kiosk operators, including newly captured software-based deployers, into a state registration system explicitly motivated by a documented pig butchering fraud typology rather than by a standing money-laundering enforcement docket. Both developments sit at the state layer alongside, not in substitution for, the federal AML/CTF architecture, which was not itself the subject of any Maryland-specific movement this cycle. This is a structural rather than episodic development: it reflects a build-out of registration and notification infrastructure that will outlast any single enforcement cycle, consistent with the state own risk-tracker assessment that its posture this cycle is structural rather than episodic and mixed between enforcement and enablement.

Outlook

Watch for whether OFR implementing regulations for the Stablecoin Act specify concrete AML/CTF expectations for notified banks and credit unions, and whether kiosk-operator registration data begins to inform any future enforcement signal. No Tier-1 enforcement-log data specific to AML/CTF actions against kiosk operators was identified this cycle.

Judgment: Maryland money transmitters remain supervised under the Money Transmission Act with concurrent BSA obligations; no change this cycle. Probable

D8 Commercial Activity

no_change

Commercial Activity

The sole commercial-activity signal identified for Maryland this cycle is a reported fund-raise by DataTribe, a cybersecurity-focused venture capital firm headquartered in Fulton, Maryland. According to a single Tier-4 aggregator source, DataTribe began raising its fourth venture fund in October 2026; the amount of the raise is not publicly disclosed in the source retrieved, and no primary filing, regulatory disclosure, or company press release corroborating the raise was located this cycle. The finding is therefore carried at Uncertain confidence, reflecting both the single-source sourcing and the absence of independent corroboration.

Held against the honesty-over-coverage standard, this item does not support an architecture-level reading: a single undisclosed-amount fund-raise by one firm, reported by one aggregator, is a data point rather than a structural signal about Maryland's investment ecosystem, cybersecurity-sector capital formation, or any financial-integrity-relevant commercial pattern. It is retained in this cycle's record because commercial-activity tracking is intentionally inclusive of thinly-sourced items, on the premise that a pattern across cycles may later emerge from individually weak signals; no such pattern is asserted here.

No other commercial event, merger, acquisition, product launch, or disclosed investment with a Maryland nexus and financial-integrity relevance was identified this cycle.

Outlook

The principal open question is whether DataTribes fourth fund, if it proceeds, is confirmed through a primary source, such as a Form D filing or a company announcement disclosing fund size and initial close. Absent that confirmation, this item should be treated as provisional in any subsequent cycle that revisits Maryland commercial activity. No other near-term commercial development specific to Maryland has been flagged for monitoring.

Regulatory horizon

In Force Pending1 Jan 2027 · ±quarter

Maryland Stablecoin Act commencement

Nondepository trust companies and credit union service organizations will be able to seek OFR certification as 'State issuers' or 'payment stablecoin services institutions'.

Source

Proposed2027-Q1 · ±year

Maryland Financial Innovation Act of 2026 (SB 759/HB 859)

If enacted, digital-asset staking-as-a-service providers would fall outside MD securities registration; enactment status beyond committee hearings was not confirmed by session's end.

Maryland General Assembly / Office of Financial Regulation Source

2 dated · 1 pending date · baseline financial-integrity-2026-07-05

Role action cards

MLRO

Maryland narrowed and widened its money-services obliged-entity perimeter on the same commencement date.

Payroll-processing agents meeting statutory conditions exit money-transmitter licensure, while software installers/operators enabling virtual-currency kiosks newly enter the kiosk-operator registration population, both effective October 1, 2026.

2 evidence refs

Compliance

Two Maryland definitional amendments commenced October 1, 2026 with no OFR implementing guidance yet located.

Compliance functions covering payroll-processing agents or kiosk-adjacent software should note the absence of OFR interpretive guidance on the amended statutory conditions as an open gap, not a resolved position.

2 evidence refs

Board

Maryland's licensing perimeter for payments and digital-asset kiosk activity shifted this cycle without any enforcement incident driving it.

The changes are routine legislative calendar items rather than a risk-direction shift, but they alter which entities fall within Maryland's obliged-entity population for money transmission and virtual-currency kiosk activity.

2 evidence refs

CTO

Software that enables stand-alone virtual-currency kiosk devices now falls within Maryland's kiosk-operator definition.

Technology teams building or deploying kiosk-enabling software for Maryland-based deployments should note that installation or operation of such software can itself trigger the amended kiosk-operator definition, effective October 1, 2026.

1 evidence refs

Risk

Maryland's crypto/digital-asset tracker moved to watch status this cycle on two concurrently commencing instruments.

The kiosk-operator broadening and the pending (January 1, 2027) stablecoin certification regime together represent a staged build-out of digital-asset licensing architecture in Maryland worth tracking for exposure-concentration purposes.

2 evidence refs

Audit

No OFR implementing guidance has been located for either October 1, 2026 commencement.

Audit scope covering Maryland money-transmission or kiosk-operator registration should note the absence of a published OFR interpretive bulletin on the amended statutory conditions as an evidentiary gap pending future cycles.

2 evidence refs

Scenario sketches

AMLA direct-supervision transition and cross-border obliged-entity evasion

Illustrative scenario for analytical orientation only: as the AMLA Regulation (Reg (EU) 2024/1620) phases in direct and indirect supervision of selected cross-border obliged entities, alongside the directly-applicable AMLR (Reg (EU) 2024/1624) and per-state 6AMLD transposition, a hybrid EU-level/national supervisory architecture could create transitional seams at the boundary between AMLA-supervised entities and those remaining under purely national supervision. An illustrative mechanism: an obliged entity structures its cross-border footprint to sit just below the threshold that would trigger AMLA direct supervision, deliberately remaining within a national supervisor's sole remit during the transition window. This is not observed in the Maryland record and has no state-level analogue; it is included as standing structural orientation on the EU architecture only.

Illustrative scenario for analytical orientation only. Not compliance advice, not a prediction, and not a statement of observed fact.

Standing trackers (T1–T6)

Tracker	Status	Note
T1 · Russian Sanctions-Evasion Architecture	no_change
T2 · EU AML Package / AMLA	no_change
T3 · FATF Grey List	no_change
T4 · Beneficial-Ownership Register Status	no_change
T5 · Crypto & Digital-Asset Integrity	no_change
T6 · Sanctions Regime Divergence	no_change

Registers

Enforcement actions

9 Oct 2025
30 Sep 2025
4 Aug 2025
31 Mar 2026
6 Mar 2026
30 Jun 2026
1 Jul 2026
FinCEN renewed its Residential Real Estate Geographic Targeting Orders, continuing to require title insurance companies to identify and report beneficial owners of legal entities making non-financed residential real estate purchases in covered Maryland jurisdictions pending the nationwide RRE Rule. 9 Oct 2025
FinCEN postponed the effective reporting date of its Anti-Money Laundering Regulations for Residential Real Estate Transfers Rule, extending reliance on the interim GTO regime. 30 Sep 2025
FinCEN issued a Notice urging financial institutions to identify and report suspicious activity involving convertible virtual currency kiosks, citing fraud, cybercrime, and drug-trafficking-linked abuse patterns consistent with prior Maryland cases. 4 Aug 2025
OFAC issued a sanctions advisory on sham transactions used to evade sanctions, providing factors for evaluating whether property is the subject of a sham transaction — directly relevant to Maryland-based trust/corporate-services and real-estate gatekeepers. 31 Mar 2026

Sanctions changes

4 Feb 2025
1 Jun 2026
30 Jun 2026
Presidential National Security Presidential Memorandum-2 directed a 'maximum pressure' campaign on Iran, reaffirming that the Government of Iran and Iranian financial institutions remain blocked persons under Executive Order 13599 and the Iranian Transactions and Sanctions Regulations, broadly prohibiting Maryland-domiciled U.S. financial institutions from any dealings with Iranian counterparties. 4 Feb 2025
OFAC recent-actions listings show a pattern of Russia-related designation removals alongside continued new counter-narcotics and transnational-criminal-organization designations, altering the sanctions-screening landscape for Maryland financial institutions and asset managers with global counterparty exposure. 1 Jun 2026

Regulatory horizon (register)

Maryland Financial Innovation Act of 2026 (SB 759/HB 859)
Maryland Financial Innovation Act of 2026 (SB 759/HB 859)
Maryland Virtual Currency Kiosk law scope expansion effective
Maryland Stablecoin Act commencement
Nationwide Residential Real Estate Rule reporting takes effect
FinCEN AML/CFT Program NPRM comment period closes, rule refocus expected
CLARITY Act Senate floor vote and digital-asset market-structure regime
Next FATF plenary review of Jurisdictions Under Increased Monitoring

Active schemes

Real-estate layering via shell/trust structures in Maryland suburbs
Convertible-virtual-currency kiosk laundering/scam conduit
Real-estate settlement-agent gatekeeper gap in AML coverage

Sources

Coverage gaps

fim-int-2026-07-05-G001: Maryland Office of the Commissioner…

fim-int-2026-07-05-G001: Maryland Office of the Commissioner of Financial Regulation licensing-action and cease-and-desist dockets are not directly retrieved, limiting visibility into state-level AML supervisory intensity. [resolved]

fim-int-2026-07-05-G002: The appellate timeline and likely o…

fim-int-2026-07-05-G002: The appellate timeline and likely outcome of the FinCEN/DOJ appeal of the RRE Rule vacatur are not established, leaving the D2 real-estate transparency horizon materially uncertain. [resolved]

fim-int-2026-07-05-G003: Evidence on whether the CTA domesti…

fim-int-2026-07-05-G003: Evidence on whether the CTA domestic-BOI exemption interim final rule will be finalized, revised, or rescinded following the comment period closing May 27, 2025 is not established. [resolved]

fim-int-2026-07-05-G004: The specific contested provisions (…

fim-int-2026-07-05-G004: The specific contested provisions (law-enforcement, ethics, stablecoin-yield) blocking CLARITY Act Senate floor passage, and their resolution timeline, are not established from this baseline's sourcing. [resolved]

fim-int-2026-07-05-G005: Continuation of the NSPM-2 875+-des…

fim-int-2026-07-05-G005: Continuation of the NSPM-2 875+-designation enforcement pace into the remainder of 2026 is not confirmed beyond the January-February 2026 Treasury press releases cited by the verification challenge. [resolved]

fim-int-2026-07-05-G006: Whether any Maryland state legislat…

fim-int-2026-07-05-G006: Whether any Maryland state legislature bill addressing crypto-ATM/kiosk AML obligations is pending is not established; only the absence of enacted statute is confirmed. [resolved]

fim-int-2026-07-14-G001: A direct FinCEN Federal Register ci…

fim-int-2026-07-14-G001: A direct FinCEN Federal Register citation for the April 2026 casino AML/CFT NPRM was not independently retrieved this cycle; only a law-firm secondary summary (T3) was available. [resolved]

fim-int-2026-07-14-G002: MD-specific enforcement_actions and…

fim-int-2026-07-14-G002: MD-specific enforcement_actions and sanctions_changes are entirely absent this cycle - no Research citation for either category was found. [resolved]

fim-int-2026-07-14-G003: Full Maryland MTMA adoption status …

fim-int-2026-07-14-G003: Full Maryland MTMA adoption status is sourced to a single T2 CSBS tracker without independent corroboration or a direct Maryland statutory citation. [resolved]

fim-int-2026-07-14-G004: Tier-D (KH/LA/MX/CO) and Yemen/Hout…

fim-int-2026-07-14-G004: Tier-D (KH/LA/MX/CO) and Yemen/Houthi checks were not substantively actionable within this US-MD-bound research pass; the absence is structural to the jurisdiction-scoped dispatch, not a research failure. [resolved]

fim-int-2026-08-05-G001: No EU-specific beneficial-ownership…

fim-int-2026-08-05-G001: No EU-specific beneficial-ownership register update was retrieved this cycle to corroborate or update the EU AML Package tracker. [resolved]

fim-int-2026-08-05-G002: Laos (LA) and Colombia (CO) Tier D …

fim-int-2026-08-05-G002: Laos (LA) and Colombia (CO) Tier D corridor queries returned no cycle-specific material this cycle. [resolved]

fim-int-2026-08-05-G003: Precise estimated-impact-date for t…

fim-int-2026-08-05-G003: Precise estimated-impact-date for the GENIUS Act PPSI final rule remains pending official confirmation beyond the informally targeted July 18, 2026 date. [resolved]

fim-int-2026-08-05-G004: The $80 million FinCEN broker-deale…

fim-int-2026-08-05-G004: The $80 million FinCEN broker-dealer penalty rests on a single Tier-4 secondary source this cycle; a direct FinCEN/SEC/FINRA press release would upgrade confidence. [resolved]

fim-int-2026-08-20-G001 ({'scheme': 'financial_integrity', '…

fim-int-2026-08-20-G001 ({'scheme': 'financial_integrity', 'value': 'D5'}): No T1 primary source located confirming whether SB 759/HB 859 (Maryland Financial Innovation Act) has passed beyond committee hearings this session. [resolved]

fim-int-2026-08-20-G002: D1 (Sanctions), D3 (Enabler Jurisdi…

fim-int-2026-08-20-G002: D1 (Sanctions), D3 (Enabler Jurisdictions) and D4 (Conflict Finance) domain_updates for US-MD were absent this cycle because sanctions/enabler/conflict-finance authority sits at the federal layer and was out of scope for this delta-only subnational pass. [resolved]

fim-int-2026-09-28-G001 ({'scheme': 'financial_integrity', '…

fim-int-2026-09-28-G001 ({'scheme': 'financial_integrity', 'value': 'D3'}): D3 (Enabler Jurisdictions) domain not substantively researched this cycle due to pooled-budget allocation. [resolved]

fim-int-2026-09-28-G002 ({'scheme': 'financial_integrity', '…

fim-int-2026-09-28-G002 ({'scheme': 'financial_integrity', 'value': 'D4'}): D4 (Conflict Finance) domain not substantively researched this cycle due to pooled-budget allocation. [resolved]

fim-int-2026-09-28-G003: Tier D jurisdictions Laos, Mexico, …

fim-int-2026-09-28-G003: Tier D jurisdictions Laos, Mexico, and Colombia were not reached this cycle within the pooled 25-search union budget; recorded as awaiting_primary_source, not as a finding of no activity. [resolved]

fim-int-2026-09-28-G004: EU AML Package tracker (T2) and san…

fim-int-2026-09-28-G004: EU AML Package tracker (T2) and sanctions-divergence tracker (T6) were not substantively researched this cycle. [resolved]

fim-int-2026-10-13-G001: Tier D jurisdictions (KH, LA, MX, C…

fim-int-2026-10-13-G001: Tier D jurisdictions (KH, LA, MX, CO) were not actively re-searched this cycle; pooled web-search budget was allocated to the bound jurisdiction (US-MD). [open]

fim-int-2026-10-13-G002 ({'scheme': 'financial_integrity', '…

fim-int-2026-10-13-G002 ({'scheme': 'financial_integrity', 'value': 'D5'}): No MD-specific OFR implementing guidance or bulletin located for the Ch.20/21 payroll exclusion or Ch.417 kiosk-operator expansion since their October 1, 2026 commencement. [open]

fim-int-2026-10-25-G001: D1-D4, D6 and D8 had thin coverage …

fim-int-2026-10-25-G001: D1-D4, D6 and D8 had thin coverage for the US-MD subnational scope this cycle; these domains are largely federal/supranational and structurally out of scope for a subnational-bound run. [open]

FIM-GAP-001 (D2): FinCEN's March 2025 interim final rule exe…

FIM-GAP-001 (D2): FinCEN's March 2025 interim final rule exempted all U.S.-formed 'domestic reporting companies' and their beneficial owners from Corporate Transparency Act BOI reporting, meaning Maryland-formed LLCs and trusts — the same category of vehicle used in the Potomac real-estate laundering case — are no longer required to disclose beneficial ownership to FinCEN.

FIM-GAP-002 (D5): Unlike Iowa, Massachusetts, Connecticut, a…

FIM-GAP-002 (D5): Unlike Iowa, Massachusetts, Connecticut, and the District of Columbia, Maryland has not brought a state-level enforcement action or dedicated statute against crypto-ATM/kiosk operators despite the historic Baltimore bitcoin-kiosk-to-AlphaBay case and a national surge in kiosk-facilitated elder-fraud losses.

FIM-GAP-003 (D3): Publicly available English-language report…

FIM-GAP-003 (D3): Publicly available English-language reporting on Maryland-specific state-level AML enforcement actions (Office of the Commissioner of Financial Regulation licensing actions, cease-and-desist orders) is sparse relative to federal FinCEN/OFAC/DOJ (D. Md.) sourcing; this baseline relies predominantly on federal primary sources supplemented by investigative journalism rather than state regulator enforcement dockets.

Evidence

Confidence-tiered claims

Effective October 1, 2026, Ch.20/21 (HB118/SB261) excludes a payor's payroll-processing agent from the 'money transmitter' definition where three statutory conditions are met. [Source 1]

Probable · 1 source

Effective October 1, 2026, Ch.417 (SB741) broadens 'virtual currency kiosk operator' to include a person who installs or operates software enabling a stand-alone automated device to provide virtual-currency services. [Source 1]

Probable · 1 source

Ch.513/514 (SB662/HB1355) establishes OFR certification for 'State issuers' and 'payment stablecoin services institutions', aligned to the federal GENIUS Act; commences January 1, 2027. [Source 1]

Probable · 1 source

Maryland-based cybersecurity VC firm began raising its fourth fund in October 2026; amount not disclosed. [Source 1]

Uncertain · 1 source

Maryland money transmitters, including virtual-currency kiosk operators and future payment-stablecoin service institutions, under the Maryland Money Transmission Act (Fin. Inst. §12-401 et seq.), subject to Bank Secrecy Act program obligations enforced concurrently with FinCEN. [Source 1]

Probable · 1 source

Establishes OFR as Maryland's state stablecoin regulator, following passage of the federal GENIUS Act (July 2025); commences 2027-01-01. [Source 1]

Probable · 1 source

Supervised and exercised significant managerial control over a conspiracy that laundered more than $20 million in stolen proceeds; sentenced September 2026. [Source 1]

Probable · 1 source

EarnIn filed suit on 2026-10-22 in the U.S. District Court for the District of Maryland challenging SB 94's ban on earned-wage-access tip solicitation as a First Amendment, Fourteenth Amendment due-process, and Civil Rights Act of 1871 violation. [Source 1]

Probable · 1 source