D1 Sanctions
Sanctions is not yet covered for this jurisdiction in this report.
Maryland operates under the federal Bank Secrecy Act/FinCEN AML/CFT architecture (BSA, CTA, OFAC sanctions) with no independent state AML statute; the state layer consists of money-transmitter licensing under the Maryland Financial Institutions Article administered by the Office of the Commissioner of Financial Regulation.
Sanctions is not yet covered for this jurisdiction in this report.
Maryland beneficial-ownership and corporate-transparency picture this cycle is defined by two state-level licensing developments rather than any federal or EU-level filing. The state repealed a licensing exemption that had allowed persons who acquire or are assigned certain mortgages, mortgage loans, or installment loans to avoid Maryland financial-services licensing requirements, a change that closes a gap surfaced by 2025 cross-filed passive-trust exemption bills and marginally tightens the state licensing-transparency perimeter for entities operating through assignment structures. Separately, and moving in the opposite direction, HB 118 amended the Maryland Money Transmission Act to exclude a person designated as an agent of a payor for payroll-processing purposes from the money transmitter definition, effective October 1, 2026; OFR estimates the exemption affects three companies and aligns Maryland with the treatment already adopted by peer Model Law states. Read together, these two developments show Maryland calibrating its licensing perimeter selectively rather than moving uniformly toward either greater transparency or greater exemption. A separate, unrelated bounded event, the sentencing of an attorney for tax evasion and mortgage fraud, with restitution of $3,103,427 plus indeterminate forfeiture after concealment of income through foreign bank accounts, illustrates continued federal prosecutorial activity touching beneficial-ownership-adjacent concealment conduct in Maryland, though it is a single case rather than a structural architecture change.
Globally, the EU AML Package sets the structural direction for beneficial-ownership and corporate-transparency architecture: the package comprises three distinct instruments, the directly applicable AML Regulation (AMLR, Regulation (EU) 2024/1624), the sixth AML Directive (6AMLD, transposed per Member State), and the AMLA Regulation (Regulation (EU) 2024/1620) establishing the Anti-Money Laundering Authority, with AMLA direct and indirect supervision perimeter shifting oversight of higher-risk obliged entities from purely national authorities toward a hybrid EU-level regime. Maryland sits entirely outside this perimeter; the EU framework is durable structural backdrop for cross-border beneficial-ownership standard-setting rather than a source of any direct obligation for Maryland-licensed entities. No AMLA horizon anchors were carried in this cycle interpreter output for the US-MD scope, so this architecture is stated as standing context rather than as a cycle-specific development.
Watch for whether the licensing-exemption repeal produces any observable change in mortgage or installment-loan-assignment structuring activity in Maryland, and whether the payroll-processor carve-out three-company estimate holds once the October 1, 2026 effective date passes. No further Maryland-specific beneficial-ownership legislative activity was identified as pending this cycle.
Enabler Jurisdictions is not yet covered for this jurisdiction in this report.
Conflict Finance is not yet covered for this jurisdiction in this report.
Maryland digital-asset regulatory architecture moved on two fronts this cycle: consumer-fraud-driven tightening of virtual-currency-kiosk oversight, and liberalising build-out of a stablecoin regulatory perimeter. The Office of the Commissioner of Financial Regulation adopted permanent virtual-currency-kiosk registration regulations under COMAR 09.03.16, effective March 30, 2026, with mandatory NMLS-based registration of each kiosk operator and kiosk required from January 1, 2026. Companion legislation, SB 741, effective October 1, 2026, broadens the statutory definition of virtual currency kiosk operator to capture software-based kiosk deployers and removes the regime prior automated-teller-machine exclusion. The OFR January 2026 legislative briefing explicitly identified a documented surge in pig butchering Bitcoin-ATM fraud as the driver for this expansion, an architecture-level regulatory response to an ongoing fraud typology rather than a reaction to a single enforcement action.
Running in parallel, the Maryland Stablecoin Act (SB 662/HB 1355), signed May 12, 2026, establishes OFR as the state payment-stablecoin regulator, modeled on the federal GENIUS Act, and requires banks and credit unions to notify the Commissioner before seeking federal approval to become a permitted payment-stablecoin issuer. This is a liberalising, market-building development: it creates a defined regulatory pathway and a designated supervisor where none previously existed for state-facing stablecoin activity, positioning Maryland among the more crypto-forward US states on the issuance-authorization side even as it tightens on the consumer-fraud side.
A third, unresolved thread cuts against both of the above: the Maryland Financial Innovation Act (SB 759/HB 859) would exempt staking-as-a-service from Maryland Securities Act registration. OFR itself filed a letter of concern about the bill, flagging a potential regulatory blind spot, and the bill enactment status beyond committee hearings was not confirmed by session end, a genuinely open finding rather than a settled development.
The near-term picture to watch is whether OFR issues the Stablecoin Act implementing regulations, which remain pending, and whether the staking-as-a-service exemption in SB 759/HB 859 advances, is amended, or dies, its enactment would create exactly the blind spot OFR has already flagged. The virtual-currency-kiosk regime October 1, 2026 SB 741 effective date is the next concrete milestone in the tightening track.
Compliance Technology & Active Defence is not yet covered for this jurisdiction in this report.
Maryland AML/CTF-adjacent regime moved this cycle primarily through instruments enacted for other stated purposes, consumer-fraud response and stablecoin market-building, rather than through a dedicated AML/CTF statute. The Maryland Stablecoin Act requirement that commercial banks and credit unions notify the Office of the Commissioner of Financial Regulation before seeking federal approval to become a permitted payment-stablecoin issuer is, functionally, a new state-level supervisory touchpoint layered atop the unaffected federal Bank Secrecy Act and FinCEN baseline: it gives OFR visibility into stablecoin-issuance intentions before those intentions reach the federal approval stage. The virtual-currency-kiosk registration regime finalized under COMAR 09.03.16, and broadened by SB 741, functions similarly as an AML/CTF-adjacent control point, bringing kiosk operators, including newly captured software-based deployers, into a state registration system explicitly motivated by a documented pig butchering fraud typology rather than by a standing money-laundering enforcement docket. Both developments sit at the state layer alongside, not in substitution for, the federal AML/CTF architecture, which was not itself the subject of any Maryland-specific movement this cycle. This is a structural rather than episodic development: it reflects a build-out of registration and notification infrastructure that will outlast any single enforcement cycle, consistent with the state own risk-tracker assessment that its posture this cycle is structural rather than episodic and mixed between enforcement and enablement.
Watch for whether OFR implementing regulations for the Stablecoin Act specify concrete AML/CTF expectations for notified banks and credit unions, and whether kiosk-operator registration data begins to inform any future enforcement signal. No Tier-1 enforcement-log data specific to AML/CTF actions against kiosk operators was identified this cycle.
Two new state-level control points now exist for MLRO-relevant monitoring: kiosk-operator registration data and a stablecoin-issuer notification channel to the Office of the Commissioner of Financial Regulation, both layered atop the unaffected federal BSA and FinCEN baseline.
Compliance functions should note the repeal of the mortgage and installment-loan-assignee licensing exemption, the new payroll-processor money-transmitter exemption effective October 1 2026, and the finalized and broadened virtual-currency-kiosk registration regime, each of which changes the licensing-obligation footprint for entities operating in Maryland.
The Goldstein sentencing (restitution of $3,103,427 plus indeterminate forfeiture) is a bounded enforcement precedent involving concealment through foreign bank accounts, while SB 759 and HB 859 staking-as-a-service exemption remains an open legal question that the Office of the Commissioner of Financial Regulation has itself flagged as a potential blind spot.
Board-level oversight should register that Maryland now has a defined stablecoin regulatory pathway and supervisor, a material addition to the state regulatory footprint relevant to any institution considering stablecoin issuance or payment-stablecoin services in Maryland.
Technology functions supporting kiosk-adjacent or stablecoin-adjacent infrastructure in Maryland should note that SB 741 removes the prior automated-teller-machine exclusion, meaning software-based deployment architectures are now within scope of the registration regime from October 1 2026.
Risk functions should track SB 759 and HB 859 as an unresolved item where the regulator itself, rather than an external critic, has identified a possible gap in oversight, alongside the parallel build-out of kiosk and stablecoin oversight moving in the opposite, tightening direction.
Operations teams administering kiosk registrations or bank and credit union stablecoin notifications in Maryland should track the January 1 2026 and October 1 2026 effective dates for the registration and scope-broadening obligations respectively.
Audit functions should note the repeal of the mortgage and installment-loan-assignee licensing exemption as a control-framework tightening, alongside the Goldstein sentencing as evidence that concealment-based schemes involving foreign bank accounts continue to be prosecuted in Maryland.
Maryland finalized virtual-currency-kiosk registration and enacted a new bank and credit union stablecoin-notification requirement this cycle.
Maryland licensing perimeter shifted on five fronts this cycle, tightening for crypto kiosks and beneficial-ownership licensing while loosening for payroll processors.
A Maryland attorney was sentenced for tax evasion and mortgage fraud, and a proposed staking exemption remains legally unresolved.
Maryland enacted a Stablecoin Act designating the state financial regulator as stablecoin supervisor, a strategic-level regulatory expansion.
Maryland broadened its virtual-currency-kiosk definition to capture software-based deployers, expanding the technical scope of registration obligations.
The Office of the Commissioner of Financial Regulation itself flagged a potential regulatory blind spot in a proposed staking-as-a-service exemption.
New registration and notification workflows now apply to Maryland virtual-currency-kiosk operators and stablecoin-adjacent banks and credit unions.
Maryland closed a beneficial-ownership licensing gap this cycle while a federal prosecution illustrated continued concealment risk in the state.
Illustrative orientation only: as the AMLA Regulation moves supervision of higher-risk cross-border obliged entities from a purely national model toward direct or indirect AMLA-level supervision, alongside the directly-applicable AMLR and per-state 6AMLD transposition, the supervisory and evasion landscape for entities operating across multiple EU jurisdictions could shift meaningfully. A hypothetical illustration: an obliged entity historically supervised only by a national authority could face a dual-layer supervisory relationship, and evasion strategies premised on national-supervisor arbitrage could lose some effectiveness as AMLA direct-supervision criteria are finalized. This is architecture-over-incident framing, not a prediction about any specific entity or jurisdiction.
Illustrative scenario for analytical orientation only. Not compliance advice, not a prediction, and not a statement of observed fact.
| Tracker | Status | Note |
|---|---|---|
| T1 · Russian Sanctions-Evasion Architecture | stable | No material change identified within this US-MD-scoped pass. |
| T2 · EU AML Package / AMLA | stable | Not applicable to a US subnational jurisdiction pass. |
| T3 · FATF Grey List | stable | No plenary or mutual-evaluation movement affecting US FATF membership surfaced within this pass. |
| T4 · Beneficial-Ownership Register Status | improving | Maryland repealed a licensing-exemption loophole for mortgage/installment-loan assignees, marginally tightening BO/licensing transparency at the state level. |
| T5 · Crypto & Digital-Asset Integrity | escalating | Maryland finalized virtual-currency-kiosk registration rules (COMAR 09.03.16) and enacted SB 741, and separately enacted the Maryland Stablecoin Act (SB 662) making OFR the state's stablecoin regulator. |
| T6 · Sanctions Regime Divergence | stable | No US-MD-specific sanctions divergence signal surfaced this cycle; sanctions authority sits at the federal level. |