Financial Integrity Monitor

United States — Nebraska US-NE

Domains (D1–D6)

Sources

Role actions

Jurisdiction profile

CleanTier BRisk: StableMixed

Nebraska financial institutions operate under the federal BSA/AML regime administered by FinCEN, OFAC and federal banking regulators, supplemented by state licensing of money transmitters, trust companies, credit unions and (since 2021) digital-asset depositories via the Nebraska Department of Banking and Finance (NDBF).

No state-level AML statute independent of federal BSA exists; NE relies almost entirely on inherited federal architecture.

Key deficiencies

No Nebraska-specific consumer-protection or transaction-limit statute for convertible-virtual-currency (CVC) kiosks, unlike neighboring Iowa and other states that have sued operators
Federal 2025 rollback of Corporate Transparency Act domestic-reporting-company obligations removes beneficial-ownership visibility for the large stock of Nebraska-formed agricultural, ranch, and holding LLCs
Minimal public-record visibility into Nebraska-specific BSA/AML enforcement actions, supervisory findings, or prosecutions during the review window, limiting independent verification of on-the-ground enforcement intensity

Recent developments (18m)

FinCEN's August 2025 Notice on CVC kiosks (FIN-2025-NTC1) and nationwide crypto-ATM crackdown/bankruptcy of the largest US operator (Bitcoin Depot, May 2026) directly affect the kiosk network operating in Nebraska
Federal Corporate Transparency Act beneficial-ownership reporting requirement for US-formed entities (including Nebraska LLCs) was rescinded for domestic reporting companies, effective March 26, 2025
Nebraska's congressional delegation (Rep. Mike Flood) played a lead legislative role in passing the GENIUS Act stablecoin framework, positioning the state's federal representation at the center of US digital-asset policy formation

Weekly brief

Lead signal

Lead Signal

Read full brief

Lead Signal

The FATF June 2026 plenary held the grey list at twenty-two jurisdictions, adding Iraq and Bosnia and Herzegovina while removing Algeria and Namibia, a rotation corroborated by both the FATF own publication and a US Treasury readout, two independent Tier-1 sources. The addition of two jurisdictions alongside two removals signals continued churn on the grey list rather than net expansion, though the underlying enforcement burden facing newly listed jurisdictions is structurally significant regardless of the stable headline count. Recommendation 6 humanitarian-exemption standards were also reported as strengthened at the plenary.

Other Developments

EU sanctions architecture extended into new territory this cycle: the EU Council twenty-first Russia sanctions package designated 218 new targets, including ninety-four Russian financial institutions, the Moscow Exchange, and, for the first time, vessels engaged in shadow-fleet refueling and support operations, while the oil price cap was held at 44.10 dollars per barrel. This sourcing rests on Tier-3 secondary reporting pending a Tier-1 Official Journal citation.

Cambodia casino-linked scam-compound enforcement intensified, with the Commission for Combating Online Scams targeting more than 500 sites and revoking or suspending twenty-five casino licenses since 2025, even as Amnesty International assesses that more than seventy percent of identified compounds have bypassed the crackdown, keeping FATF re-listing risk live.

Mexican cartel fuel-theft typology drew fresh enforcement attention: FinCEN issued a supplemental alert on huachicol fiscal fuel-theft schemes tied to the Jalisco New Generation Cartel, concurrent with OFAC sanctions on two Mexican nationals and nine entities, part of a broader July 2026 action designating more than fifty CJNG-linked persons.

Houthi-linked financing continued to draw sanctions action, with OFAC designating twenty-one individuals and entities plus one vessel in January 2026 targeting oil-smuggling and weapons-procurement financing, while the Houthis remain dually designated as a Specially Designated Global Terrorist group and a Foreign Terrorist Organization.

Stablecoin AML rulemaking advanced under the GENIUS Act framework: a joint FinCEN and OFAC notice of proposed rulemaking published 10 April 2026 closed its comment period on 9 June 2026, with final AML and sanctions compliance rules for Permitted Payment Stablecoin Issuers due by the statutory 18 July 2026 deadline and full enforcement targeted for January 2027.

Model-risk supervision was reset: the Federal Reserve, FDIC, and OCC SR 26-2, issued 17 April 2026, supersedes the fifteen-year-old SR 11-7 model-risk-management framework but explicitly excludes generative and agentic AI from its formal scope, a documented supervisory gap against actual AI and machine-learning transaction-monitoring deployment.

A sanctions-authority sunset was also flagged this cycle: Executive Order 13936, the Hong Kong Normalization order, expired 17 July 2026, delisting nine persons from the SDN list as an automatic consequence, on single-source reporting not yet independently corroborated.

Cross-Monitor Connections

The Mexican fuel-theft and cartel-financing developments connect directly to conflict-finance and extractive-industry-integrity concerns, given typology drift into designated financial institutions and, separately, into the casino sector, with enforcement footprint reportedly expanding into South Carolina, Ohio, Massachusetts, and Maine. The EU shadow-fleet vessel designations and the IRGC-linked transit-insurance sanctions against Persian Gulf Marine Insurance Company both speak to the same architecture-over-incident pattern: sanctions regimes are increasingly targeting the logistics and insurance infrastructure that enables evasion, not only the designated end users of illicit financing. Cambodia scam-compound enforcement, where a majority of identified compounds are assessed to have evaded the crackdown, is the kind of enablement signal that trafficking and forced-labor monitoring in the same compounds would find directly relevant.

Outlook

The EU AML Package remains the structural item to watch: AMLA must submit twenty-three technical standards to the European Commission by 10 July 2026, ahead of AMLR full direct applicability on 10 July 2027 and AMLA planned start of direct supervision of high-risk cross-border obliged entities in January 2028. The Commission infringement proceedings against eleven member states over the missed Article 74 beneficial-ownership-register-access deadline signal a real, if likely temporary, supervisory-perimeter gap ahead of the 2027 date. On sanctions, continued shadow-fleet designation activity and the pending GENIUS Act final rulemaking are the two items most likely to generate the next material signal, while OFAC lapsed Hong Kong Normalization authority and the resulting delisting of nine persons is a lower-confidence item warranting independent confirmation next cycle.

weekly_brief_draft · JID US-NE

Domain intelligence (D1–D6)

D1 Sanctions

Sanctions

Sanctions activity this cycle spans four theaters. The EU Council twenty-first Russia sanctions package designated 218 new targets, including ninety-four Russian financial institutions and the Moscow Exchange, and, for the first time, extended designations to vessels engaged in shadow-fleet refueling and support operations. The oil price cap was held at 44.10 dollars per barrel. This finding rests on Tier-3 secondary reporting this cycle pending a Tier-1 Official Journal citation. Separately, OFAC designated twenty-one individuals and entities plus one vessel in January 2026 targeting Houthi oil-smuggling and weapons-procurement financing; the Houthis remain dually designated as a Specially Designated Global Terrorist group and a Foreign Terrorist Organization. A third action saw OFAC designate Persian Gulf Marine Insurance Company and one other entity on 29 July 2026 for facilitating IRGC vessel-transit protection-payment insurance schemes through the Strait of Hormuz, a single-source finding not yet independently corroborated. Finally, Executive Order 13936, the Hong Kong Normalization national-emergency order, expired 17 July 2026, automatically delisting nine persons from the SDN list, also on single-source reporting this cycle.

Read together, three of these four items extend sanctions architecture into new categories of target, namely shadow-fleet logistics vessels and transit-insurance facilitators, rather than simply adding designated end users, consistent with an architecture-over-incident enforcement pattern. The fourth item, the Hong Kong authority lapse, is a contraction rather than an extension of sanctions scope and should be read separately from the designation-expansion pattern.

Outlook

The next cycle should prioritize independent Tier-1 corroboration of the EU twenty-first package designation count and the IRGC transit-insurance action, both currently resting on single or Tier-3 sourcing. Continued shadow-fleet vessel designations are the most likely near-term escalation given the pattern already evidenced this cycle.

D2 Beneficial Ownership

Beneficial Ownership and Corporate Transparency

The EU AML Package continues on three distinct, durable instruments: the AML Regulation, or AMLR (Regulation EU 2024/1624), which is directly applicable and reaches full application on 10 July 2027; the sixth AML Directive, or 6AMLD, which is transposed individually by each member state; and the AMLA Regulation (Regulation EU 2024/1620), which establishes the Anti-Money Laundering Authority. AMLA has been operational since 1 July 2025 and must submit twenty-three regulatory and implementing technical standards, plus guidelines, to the European Commission by 10 July 2026, ahead of its planned start of direct supervision of a first cohort of high-risk cross-border obliged entities in January 2028. This three-instrument architecture is the durable backdrop against which this cycle beneficial-ownership signal should be read: it shifts the supervisory perimeter from purely national authorities toward a hybrid EU-level regime over a multi-year timetable, not within a single cycle.

Against that backdrop, this cycle beneficial-ownership development is narrower: the European Commission opened infringement proceedings against eleven member states for missing the 10 July 2025 deadline under Article 74 concerning beneficial-ownership-register access, while the core register-content provisions under Articles 11 through 13 and 15 remain due by 10 July 2026 alongside the AMLA technical-standards package. This sourcing rests on Tier-3 legal commentary this cycle; no Tier-1 Commission or AMLA primary text was independently retrieved confirming the residual scope of the transposition gap beyond the aggregate infringement count of eleven member states.

Outlook

The 10 July 2026 convergence of the AMLD6 register-content deadline and the AMLA technical-standards submission is the next material checkpoint, followed by AMLR full direct applicability on 10 July 2027 and AMLA direct-supervision start in January 2028. Independent Tier-1 confirmation of member-state-by-member-state transposition status, rather than only the aggregate infringement count, is the priority gap for the next cycle.

D3 Enabler Jurisdictions

Enabler Jurisdictions and Professional Facilitators

Cambodia casino-linked scam-compound enforcement intensified this cycle: the Commission for Combating Online Scams reports more than 500 sites targeted and twenty-five casino licenses revoked or suspended since 2025. Amnesty International, however, assesses that more than seventy percent of identified compounds have bypassed the crackdown, an enablement gap that keeps FATF re-listing risk live for Cambodia notwithstanding the headline enforcement figures. This finding is corroborated across independent Tier-2 and Tier-3 sources this cycle, though no Tier-1 FATF or National Bank of Cambodia primary statement was located confirming the specific figures.

The gap between enforcement-visible activity and actual compound-level compliance is the more analytically significant reading here: headline licence-revocation numbers coexist with a documented majority-bypass rate, meaning enforcement capacity, not enforcement will, is the binding constraint on the jurisdiction risk profile this cycle.

Outlook

Watch for whether the FATF cites Cambodia specific bypass rate in any future mutual-evaluation or re-listing discussion, and for Tier-1 National Bank of Cambodia or Commission for Combating Online Scams primary statements that would allow the current Tier-2/Tier-3-sourced figures to be independently corroborated.

D4 Conflict Finance

Conflict Finance and Extractive-Industry Integrity

Two enforcement threads carry conflict-finance and extractive-industry-integrity significance this cycle. FinCEN issued a supplemental alert on huachicol fiscal fuel-theft schemes tied to the Jalisco New Generation Cartel, concurrent with OFAC sanctions on two Mexican nationals and nine entities, part of a broader July 2026 action that designated more than fifty CJNG-linked persons in total; this finding is Tier-1 anchored via the FinCEN primary publication. Separately, typology reporting this cycle describes drift beyond consumer-goods trade-based money laundering into designated Mexican financial institutions, via Section 2313a orders against CIBanco and Intercam, and a proposed Section 311 special measure targeting Mexico-based gambling establishments, alongside April 2026 OFAC sanctions on Cartel del Noreste-linked casinos, with an enforcement footprint reportedly expanding into South Carolina, Ohio, Massachusetts, and Maine. This second thread mixes a Tier-1 Treasury order with Tier-3 secondary synthesis and is capped at Assessed confidence pending independent corroboration of the casino and Section 311 elements specifically.

Houthi oil-smuggling and weapons-procurement financing, addressed in this cycle under sanctions, is the third conflict-finance-adjacent thread, evidencing continued extractive and logistics-sector exposure alongside the Mexican developments.

Outlook

The expanding US-state footprint of Mexican TBML enforcement, and independent confirmation of the casino-sector and Section 311 elements specifically, are the priority items for the next cycle.

D5 Crypto / Digital Assets / Financial Innovation

Crypto, Digital Assets, and Financial Innovation

Stablecoin AML and sanctions rulemaking under the GENIUS Act advanced this cycle: a joint FinCEN and OFAC notice of proposed rulemaking, published 10 April 2026, closed its comment period on 9 June 2026, with final AML and sanctions compliance rules for Permitted Payment Stablecoin Issuers due by the statutory 18 July 2026 deadline and full practical enforcement targeted for January 2027. In the interim period, existing stablecoin issuers remain subject to standing FinCEN Bank Secrecy Act and AML obligations and state money-transmitter-licensing requirements; the interim period is not a compliance-free window. This finding rests on Tier-3 secondary sourcing this cycle; no Tier-1 Federal Register or FinCEN citation was independently pulled confirming the final-rule date specifically.

Outlook

The 18 July 2026 statutory deadline for final AML and sanctions rules, and the January 2027 practical-enforcement target, are the two dates to track next cycle, alongside independent Tier-1 confirmation of the final-rule text once published.

D6 Compliance Technology & Active Defence

Compliance Technology and Active Defence

The Federal Reserve, FDIC, and OCC issued SR 26-2 on 17 April 2026, superseding the fifteen-year-old SR 11-7 model-risk-management framework. The new framework explicitly excludes generative and agentic artificial intelligence from its formal scope, a documented supervisory gap set against the actual deployment of AI and machine-learning tools in transaction-monitoring and screening operations across the sector. This finding rests on Tier-3 sourcing this cycle; no Tier-1 Federal Reserve SR-letter primary text was independently retrieved.

The gap between a superseded framework that predates modern AI-driven transaction monitoring and a successor framework that still declines to formally address generative or agentic AI is the more significant structural reading, ahead of any single institution incident.

Outlook

Watch for supervisory guidance specifically addressing generative or agentic AI in model-risk contexts, and for independent Tier-1 confirmation of the SR 26-2 text itself.

D7 AML/CTF Regime

Not covered

AML/CTF Regime is not yet covered for this jurisdiction in this report.

Regulatory horizon

No dated horizon items this cycle. 3 items tracked without a confirmed date.

3 pending date · baseline fim-2026-07-05

Role action cards

MLROHigh

FATF grey-list rotation and CJNG-linked fuel-theft alerts raise CDD and SAR-trigger exposure this cycle.

The addition of Iraq and Bosnia and Herzegovina to the FATF grey list, combined with the FinCEN fuel-theft alert and typology drift into designated Mexican financial institutions, widens the population of counterparties warranting enhanced due diligence and increases the likelihood of SAR-relevant activity in correspondent and trade-finance channels this cycle.

4 evidence refs

ComplianceAssessed

EU AML Package technical-standards timetable and GENIUS Act stablecoin rulemaking both advance policy-gap questions this cycle.

The AMLA technical-standards submission due 10 July 2026 and the GENIUS Act final rulemaking due 18 July 2026 both require compliance functions to track parallel implementation timetables across two separate regimes, while SR 26-2 explicitly excludes generative and agentic AI from formal model-risk scope, leaving a documented policy gap against current AI-driven monitoring tools.

4 evidence refs

LegalAssessed

Sanctions architecture extended to shadow-fleet vessels and transit-insurance facilitators this cycle.

The EU twenty-first Russia package, the Houthi designations, and the IRGC-linked transit-insurance designation all extend sanctions exposure to logistics and insurance-facilitation roles rather than only designated end users, while the lapse of the Hong Kong Normalization authority delisted nine persons, a lower-confidence single-source item warranting independent verification before reliance.

4 evidence refs

BoardHigh

FATF list stability and EU AML Package supervisory-perimeter shift are the two strategic-level items this cycle.

The grey list held at twenty-two jurisdictions rather than expanding, while the EU AML Package continues its multi-year shift toward hybrid EU-level supervision; both are structural, board-relevant developments distinct from the sanctions-designation volume seen elsewhere this cycle.

3 evidence refs

CTOAssessed

Stablecoin AML rulemaking and a model-risk framework that excludes agentic AI both carry architecture implications this cycle.

The GENIUS Act final-rule deadline of 18 July 2026 sets a concrete implementation date for stablecoin-issuer AML architecture, while SR 26-2 formal exclusion of generative and agentic AI from model-risk scope leaves a documented gap for institutions already deploying such tools in transaction monitoring.

2 evidence refs

RiskHigh

Cambodia enforcement-bypass rate and Mexican typology drift both signal emerging concentration risk this cycle.

Amnesty International assessed bypass rate of more than seventy percent for Cambodia scam-compound enforcement, alongside typology drift into designated Mexican financial institutions and the casino sector, both indicate that enforcement-visible activity is running behind actual exposure concentration in these two jurisdictions.

4 evidence refs

OperationsHigh

FATF list changes and the FinCEN fuel-theft alert require near-term screening and monitoring-threshold updates.

Screening lists should reflect the addition of Iraq and Bosnia and Herzegovina and the removal of Algeria and Namibia, and transaction-monitoring rules should be reviewed against the FinCEN huachicol fiscal alert typology indicators, while SR 26-2 implementation is a longer-horizon operational item.

3 evidence refs

AuditAssessed

SR 26-2 model-risk supersession and the AMLA technical-standards timetable both create near-term control-testing scope questions.

Audit functions should confirm whether current model-risk documentation has been updated to reference SR 26-2 rather than the superseded SR 11-7, and should track the AMLA technical-standards timetable as a documentation-evidence item for EU-exposed obliged entities.

2 evidence refs

Decision lens

MLRO

FATF grey-list rotation and CJNG-linked fuel-theft alerts raise CDD and SAR-trigger exposure this cycle.

Compliance

EU AML Package technical-standards timetable and GENIUS Act stablecoin rulemaking both advance policy-gap questions this cycle.

Legal

Sanctions architecture extended to shadow-fleet vessels and transit-insurance facilitators this cycle.

Board

FATF list stability and EU AML Package supervisory-perimeter shift are the two strategic-level items this cycle.

CTO

Stablecoin AML rulemaking and a model-risk framework that excludes agentic AI both carry architecture implications this cycle.

Risk

Cambodia enforcement-bypass rate and Mexican typology drift both signal emerging concentration risk this cycle.

Operations

FATF list changes and the FinCEN fuel-theft alert require near-term screening and monitoring-threshold updates.

Audit

SR 26-2 model-risk supersession and the AMLA technical-standards timetable both create near-term control-testing scope questions.

Shared evidence: 9 refs

Typology observations

Exposure: {'total_matched_typologies': 0, 'by_typology': {}, 'top_indicators': [], 'exposure_note': None}

Scenario sketches

AMLA supervisory-perimeter transition, illustrative pathway

Illustrative scenario for analytical orientation: as AMLA moves from a standing-up phase toward direct supervision of high-risk cross-border obliged entities in 2028, the shift from purely national AML supervision toward a hybrid EU-level regime, under the AMLA Regulation alongside the directly-applicable AMLR and per-state 6AMLD transposition, could reshape both supervisory practice and the evasion pathways obliged entities and their counterparties currently rely on within fragmented national perimeters. This is architecture-over-incident framing describing a possible structural mechanism, not an observed fact or a forecast of a specific outcome.

Illustrative scenario for analytical orientation only. Not compliance advice, not a prediction, and not a statement of observed fact.

Standing trackers (T1–T6)

Tracker	Status	Note
T1 · Russian Sanctions-Evasion Architecture	escalating	EU 21st sanctions package (218 designations) extends enforcement to shadow-fleet bunkering/refueling vessels for the first time; ~75% of Russian crude now moving via shadow-fleet tankers per KSE tracking.
T2 · EU AML Package / AMLA	watch	AMLR direct applicability 10 July 2027; AMLD6 staggered transposition with infringement proceedings over missed Art 74 deadline; AMLA operational since 1 July 2025, RTS/ITS due 10 July 2026, direct supervision begins January 2028.
T3 · FATF Grey List	material_change	June 2026 plenary: Iraq and Bosnia and Herzegovina added; Algeria and Namibia removed, holding the grey list at 22 jurisdictions; black list unchanged.
T4 · Beneficial-Ownership Register Status	watch	EU BO-register interconnection still under construction; Commission infringement proceedings opened against 11 member states over Art 74 notification failures; core register-content provisions due 10 July 2026.
T5 · Crypto & Digital-Asset Integrity	improving	GENIUS Act stablecoin AML/sanctions NPRM comment period closed 9 June 2026, final rules due 18 July 2026; MiCA enforcement evidenced by Tether's reported EU-venue delisting.
T6 · Sanctions Regime Divergence	stable	OFAC/OFSI continued coordinated action while the EU pursued its own autonomous 21st sanctions package with a distinct designation set — continued autonomous-listing divergence rather than a new rupture event this cycle.

Registers

Enforcement actions

FinCEN issued a $37 million civil money penalty consent order against Brink's for failing to establish an AML program covering its cash-in-transit and currency-shipment operations, resulting in unreported suspicious bulk-cash transactions. Brink's provides currency transport services across the US, including Nebraska's cash-intensive agricultural and retail sectors, making this a direct piece of the compliance architecture Nebraska-based depository customers rely upon. 6 Feb 2025
FinCEN assessed an $80 million civil money penalty against Canaccord Genuity for willful AML program and customer due diligence failures, including inadequate risk-differentiation between customer types and failure to resolve red flags during onboarding — a supervisory architecture failure of direct relevance to the compliance-technology expectations applicable to securities firms and their Nebraska-resident clients. 16 Feb 2026
Treasury designated Huione Group under FinCEN Section 311 special measures as a primary money-laundering concern and OFAC sanctioned the Prince Group TCO and associated casinos/front companies, severing their access to the US financial system. DOJ simultaneously unsealed an indictment against Prince Group founder Chen Zhi and filed a record $15 billion bitcoin civil forfeiture — the enforcement architecture directly protecting US crypto-scam victims nationwide. 14 Oct 2025

Sanctions changes

OFAC designated the Prince Group Transnational Criminal Organization, Cambodian Senator Kok An, his business empire, and 28 other individuals/entities (including casinos, front companies, and Heng Feng Cambodia Bank) for facilitating cryptocurrency scam operations. This designation directly affects screening obligations for every US financial institution, including Nebraska-chartered banks and credit unions. 14 Oct 2025
FATF added Kuwait and Papua New Guinea to its Jurisdictions Under Increased Monitoring ('grey') list at its February 2026 plenary, while maintaining Iran, DPRK and Burma on the High-Risk Jurisdictions Subject to a Call for Action list. FinCEN passed through the update as a public notice requiring enhanced due diligence by all US financial institutions, including those chartered or licensed in Nebraska. 13 Feb 2026
Under National Security Presidential Memorandum-2 (Feb. 4, 2025), the US reimposed a maximum-pressure sanctions posture on Iran, keeping Iranian financial institutions blocked under Executive Order 13599/ITSR. Nebraska-based multinational financial and insurance operations (e.g., Berkshire Hathaway's global reinsurance book) must maintain correspondent-banking exclusions consistent with this posture. 4 Feb 2025

Regulatory horizon (register)

GENIUS Act stablecoin Customer Identification Program rulemaking finalization
FinCEN AML/CFT Program reform rule (risk-based, effectiveness-focused) finalization
FATF next plenary review of grey/high-risk jurisdiction lists

Active schemes

CVC-kiosk cash-to-crypto elder fraud pipeline
[HIGH] Pig-butchering romance-investment stablecoin laundering
Domestic LLC beneficial-ownership opacity post-CTA rollback

Sources

Coverage gaps

Public reporting (Tier 1 regulator releases, Tier 2 investig…

Public reporting (Tier 1 regulator releases, Tier 2 investigative journalism) contains very limited Nebraska-specific granular detail on state-level BSA/AML enforcement actions, supervisory examination findings, or prosecutions during the 18-month review window; most material available is federal/national in scope and only inferentially applicable to Nebraska.

Nebraska has no state-level beneficial-ownership disclosure …

Nebraska has no state-level beneficial-ownership disclosure requirement for LLCs and corporations registered with the Secretary of State, and the federal Corporate Transparency Act no longer requires domestic reporting companies (including Nebraska-formed entities) to report beneficial ownership to FinCEN as of March 2025.

Unlike Iowa, Massachusetts, Connecticut, Missouri and Washin…

Unlike Iowa, Massachusetts, Connecticut, Missouri and Washington DC, Nebraska has not enacted state-level crypto-kiosk consumer-protection legislation (transaction limits, mandatory scam warnings, or licensing scrutiny specific to CVC kiosk operators), despite documented industry-wide scam-transaction rates exceeding 50% on some operators' networks nationally.

Evidence

Confidence-tiered claims

No structured claims published for this jurisdiction yet.