United States — North Dakota US-ND

Two sanctions-architecture developments surfaced this cycle. On August 7, 2026, the U.S. Department of the Treasury's Office of Foreign Assets Control designated a network of cryptocurrency exchanges for facilitating financing to Iran's Islamic Revolutionary Guard Corps-Qods Force, an action Treasury linked to Iranian attacks on commercial vessels transiting the Strait of Hormuz. The designation is Tier-1 sourced directly from Treasury's press release and carries High confidence; it is architecturally significant because it targets crypto-exchange infrastructure as a sanctions-evasion conduit rather than a single named individual or entity, extending OFAC's designation practice onto the exchange layer that intermediates IRGC-linked financial flows. For obliged entities with VASP counterparty exposure, this is the kind of designation that a properly configured sanctions-screening program, including blockchain-analytics tooling, should be expected to catch at the counterparty level.

Separately, the FATF grey list continued to churn. Cambodia was removed at the February 2026 plenary, a decision secondary reporting attributes to significant demonstrated progress against its AML/CFT action plan since its original 2019 listing; this removal carries Assessed confidence, resting on a single Tier-3 corroborating source rather than a directly retrieved FATF statement for this specific removal. Laos, by contrast, remained on the grey list through the June 2026 plenary, with the Tier-3 aggregator tracker cross-checked against the FATF's own Tier-1 February 2026 listing, which also shows Lao PDR still listed. The broader tracker record shows the February and June 2026 plenaries adding Kuwait and Papua New Guinea, and Bosnia and Herzegovina and Iraq respectively — an active plenary cycle by listing volume, even though North Dakota itself has no direct exposure to either the Cambodia removal or the Laos continuation.

Applying the three-pillar lens, this cycle's sanctions signal sits squarely in the CTF pillar rather than the AML pillar: the OFAC designation responds to a terrorism-financing nexus channelled through crypto-exchange infrastructure, a pattern this monitor treats as structurally distinct from the money-laundering-driven AML enforcement volume that typically dominates sanctions reporting. CTF and CPF findings are often under-represented relative to AML enforcement simply because AML actions generate more volume; this cycle's designation is a useful corrective data point precisely because it is CTF-pillar and Tier-1 sourced. It is also worth noting what did not happen this cycle: no North Dakota enforcement action tied to sanctions-screening failures was identified, and the state's incorporation-by-reference approach to federal BSA/OFAC obligations means the absence of independent state sanctions-enforcement activity is itself consistent with the state's designed architecture rather than a gap — North Dakota does not maintain a sanctions-enforcement function distinct from the federal layer, so silence here is structural, not evidentiary of enablement.

Outlook

Watch for a possible pattern of further Treasury action against crypto-exchange infrastructure linked to Iranian financing, given the August 7 designation's focus on exchanges rather than end users. On the FATF side, the pace of listing additions across the February and June 2026 plenaries suggests an active monitoring cycle; whether any additional jurisdictions move on or off the list at the next plenary will matter more for global-architecture tracking than for North Dakota specifically, absent a confirmed state-level sanctions nexus.

North Dakota's Money Brokers Act was amended by HB 1127, effective August 1, 2025, to define "loan" to include any "alternative financing product" that the Department of Financial Institutions later designates. This is a contingent enabler-perimeter development rather than a realized one: the amendment gives DFI discretionary authority to bring currently unlicensed alternative-financing arrangements within the Money Brokers Act's licensing scope, but DFI has not yet exercised that discretion. Whether this closes a genuine enabler gap or simply preserves DFI's existing latitude therefore depends on an administrative designation that has not occurred as of this cycle. Sourcing for this development is a single Tier-3 law-firm secondary source; no Tier-1 confirmation of DFI's designation activity was reached this cycle.

Separately, a coordinated multistate enforcement action against Bayview Asset Management LLC and affiliates, taken through the North Dakota Department of Financial Institutions in conjunction with CSBS, addressed deficient cybersecurity practices connected to a data breach affecting 5.8 million customers. This is Tier-1 sourced from the ND DFI enforcement-actions page and reflects state-level enforcement capacity being exercised against a facilitator-adjacent control failure rather than an enabler-jurisdiction licensing gap per se; the penalty amount was not confirmed from accessible source text this cycle.

Outlook

The determinative question for this domain is whether DFI exercises its HB 1127 designation authority. Until it does, North Dakota's enabler-jurisdiction posture on alternative financing products remains unresolved rather than closed or open, and this monitor will treat it as a watch item pending confirmation.

North Dakota's HB 1447 brings cryptocurrency-kiosk operators within the state's money-transmitter licensing regime under NDCC ch. 13-09.1, extending an existing licensing chapter rather than creating a new one. The statute requires crypto-kiosk operators to hold a North Dakota money transmitter license, deploy blockchain-analytics software for suspicious-activity detection, appoint a compliance officer, file quarterly reports, and cap a new user's transactions at two thousand dollars during their early transactions. This finding is corroborated across two independent Tier-3 press sources but has not yet been confirmed against a Tier-1 ND.gov or ndlegis.gov bill-status record, so confidence is Assessed rather than High pending that primary-source check.

Structurally, this is a jurisdiction responding to a fraud typology — crypto-kiosk-facilitated fraud — by extending an existing money-transmission licensing chapter rather than building bespoke crypto legislation from scratch. North Dakota did not create a new stand-alone virtual-currency-business licence category; it treated crypto kiosks as a subset of money transmission already regulated under 13-09.1, meaning the AML/CFT reporting duties, bonding, and examination powers that attach to money-transmitter licensees under existing law now attach to crypto-kiosk operators as well.

The blockchain-analytics mandate deserves particular attention from a financial-innovation perspective: North Dakota has, by statute, required a specific class of crypto-adjacent obliged entity to deploy on-chain analytics tooling as a licensing condition, a legislature directly mandating a compliance-technology capability rather than leaving analytics adoption to institutional risk appetite. No state-specific token-classification framework, tax-treatment statute, or cross-border-transfer restriction beyond the federal BSA/OFAC baseline was identified for North Dakota this cycle; the HB 1447 licensing extension is the sole confirmed crypto-specific development.

Outlook

The principal open question is whether HB 1447 has in fact been signed into law and what its confirmed effective date is; no Tier-1 ND.gov or ndlegis.gov source was reached this cycle to close that gap, and the finding should be treated as Assessed rather than confirmed until a primary source is located. If confirmed, the compliance-officer and quarterly-reporting requirements will be the first concrete test of how North Dakota's DFI supervises the newly-licensed kiosk sub-sector.

HB 1447's requirement that North Dakota crypto-kiosk operators deploy blockchain-analytics software for suspicious-activity detection is this cycle's sole compliance-technology development, and it is a narrow but concrete instance of the active-defence thesis this monitor tracks: a state legislature mandating, by statute, that a specific class of obliged entity adopt on-chain analytics tooling as a condition of licensure. This is qualitatively different from analytics adoption driven by institutional risk management or supervisory expectation, because it converts a compliance-technology capability into a binding legal requirement enforceable through the licensing regime itself.

The mandate is corroborated by the same two independent Tier-3 press sources supporting the broader HB 1447 finding, with confidence assessed rather than high pending a Tier-1 primary-source confirmation of the bill's enacted text. No further compliance-technology development — for banks, non-bank payment firms, or other obliged-entity categories in North Dakota — was identified this cycle. This is a jurisdiction-specific data point for a wider pattern this monitor watches: state-level statutory mandates for on-chain analytics deployment remain comparatively rare relative to federal supervisory guidance, making North Dakota's approach a useful case for comparison against other US state crypto-kiosk regimes as they emerge.

Outlook

Once a Tier-1 source confirms HB 1447's final text, the compliance-technology angle worth tracking is which specific blockchain-analytics vendors or standards North Dakota's Department of Financial Institutions accepts as satisfying the statutory mandate, since that operational detail will determine how meaningfully the requirement functions in practice.

North Dakota's money-transmitter chapter, NDCC ch. 13-09.1-22, requires licensees to file all federally-required currency, recordkeeping, and Suspicious Activity Reports under the Anti-Money Laundering Act of 2020. This is a Tier-1-sourced, High-confidence structural finding, drawn directly from the North Dakota Legislative Council's codified statute text. It functions as an incorporation-by-reference provision: rather than establishing an independent state AML reporting regime, North Dakota's money-transmitter law binds its licensees to the federal BSA/AMLA 2020 reporting framework, meaning currency-transaction-report, recordkeeping, and SAR obligations that would otherwise apply only through federal registration also attach as a condition of state licensure.

This cycle's development is the extension of that existing reporting duty to a newly-licensed population: HB 1447 brings crypto-kiosk operators within the money-transmitter licensing chapter, and because the AML/CFT reporting duty in 13-09.1-22 attaches to licensees generically rather than to a specific sub-category, crypto-kiosk operators become subject to the same federally-required reporting obligations as any other North Dakota money transmitter once licensed. This is best characterised as a record-baseline update rather than a new AML obligation category: the reporting duty itself is unchanged, but the population of entities bound by it has grown to include a sub-sector — crypto kiosks — that FBI-reported fraud-loss data suggests has been a meaningful fraud vector.

The renewal-fee structure under the same statutory chapter is tied to virtual-currency-transmission volume and capped at $2,500, a detail indicating the legislature anticipated virtual-currency money transmission as a distinct volume category within the existing licensing chapter even before HB 1447's kiosk-specific extension. Framed through the three-pillar lens, this domain's finding is squarely AML-pillar: the SAR/CTR/recordkeeping duty is a classic money-laundering-reporting mechanism, and no CTF- or CPF-specific state-level obligation was identified for North Dakota's money-transmitter chapter this cycle. That absence is itself unsurprising given the incorporation-by-reference structure — CTF program requirements largely live at the federal BSA/OFAC layer that 13-09.1-22 already binds licensees to, rather than being independently legislated at the state level.

Outlook

The federal AML/CFT program-effectiveness rulemaking FinCEN is understood to be developing, expected around 2027 Q1, would flow through to ND-licensed money transmitters — including now crypto-kiosk operators — via the same incorporation-by-reference mechanism in 13-09.1-22 that currently binds them to the 2020 AML Act framework; the rulemaking's scope and stringency relative to current MSB practice is not yet finalized, and this is a Tier-4-sourced, Low-confidence forward-looking item pending FinCEN's proposed rule.