Financial Integrity Monitor

United States — Oregon US-OR

Domains (D1–D6)
2
Sources
14
Role actions
8
Jurisdiction profile
Largely CompliantTier BRisk: IncreasingMixed

Oregon operates entirely within the federal BSA/CTA/FinCEN AML/CFT framework; it has no independent national AML statute.

MoreThe Oregon Division of Financial Regulation (DFR) licenses money transmitters and virtual-currency businesses under ORS Chapter 717, supplementing federal supervision. Since March 2025, FinCEN's CTA rollback exempts Oregon-formed domestic entities from beneficial ownership reporting, and Oregon has no state-level BO registry to backstop this gap.

Key deficiencies
  • No state-level beneficial ownership registry; reliance is entirely on the federal CTA/BOI framework
  • Federal CTA now exempts domestic (Oregon-formed) reporting companies from BOI disclosure since March 2025, reversing prior transparency gains
  • Oregon excluded from FinCEN's 2026 Southwest Border GTO despite fentanyl-transit and cash-to-crypto laundering exposure highlighted by FinCEN's own Portland PROTECT outreach
  • Limited public-domain transparency for Oregon DFR state-level AML supervisory/enforcement actions
Recent developments (18m)
  • FinCEN interim final rule (Mar 21/26, 2025) exempting all US-formed domestic reporting companies, including Oregon entities, from CTA beneficial ownership reporting
  • FinCEN CVC kiosk advisory (Aug 2025) flagging elder-fraud exploitation via crypto ATMs nationally, relevant to Oregon's aging population
  • DOJ 'Blanche Memo' (Apr 2025) narrowing crypto-related BSA prosecutions nationwide, affecting Oregon-licensed VASPs' regulatory exposure
  • OFAC sanctions on Sinaloa Cartel Los Chapitos cash-to-stablecoin laundering network (May 2026), relevant given Oregon's fentanyl overdose burden
  • FATF's Feb 2026 plenary added Kuwait and Papua New Guinea to the grey list; the US remains unlisted
Weekly brief

Lead signal

Lead Signal

Read full brief

Lead Signal

Oregon's Attorney General has emerged this cycle as a deliberate backstop against contracting federal consumer-financial-protection capacity. Leading a 46-state settlement, Oregon DOJ secured $45 million from Block, Inc. over Cash App's misrepresented account-safety features and failures to deliver fraud-protection and resolution obligations to users, with Oregon's own share set at $3 million. The Oregon Department of Justice explicitly framed the action in terms of reduced enforcement activity at the federal Consumer Financial Protection Bureau, a framing this brief treats as an assessed, high-confidence signal rather than an isolated incident: it sits inside Oregon's broader enabler-jurisdiction posture, where the state itself is acting as an enforcer filling a federal gap rather than functioning as an enabler of illicit activity. That distinction matters for how the finding should be read — this is state capacity substituting for federal capacity, not a facilitation risk being tolerated. The 2025 creation of an Economic Justice Section inside Oregon DOJ, explicitly positioned to pursue further payments- or crypto-adjacent matters, reinforces the assessment that this is a structural shift in state posture rather than a single settlement. This finding carries a High-confidence rating anchored in a Tier-1 Oregon Department of Justice press release, and it aligns with the jurisdiction's broader risk trajectory: Oregon's overall risk direction this cycle is assessed as increasing, with enforcement — rather than enablement — as the dominant character of that risk, and a structural-episodic profile assessed as mixed, meaning both a genuine institutional shift and an episodic settlement event are contributing to the present picture.

Other Developments

Coinbase's unregistered-securities action remains stayed pending a March 2026 status report. Oregon's action against Coinbase, alleging the unregistered offer and sale of 31 tokens including XRP, was removed to federal court and stayed until March 16, 2026, with a joint status report due from the parties. This assessed-confidence finding continues to represent a state-level securities-enforcement theory that diverges from the federal Securities and Exchange Commission's current de-regulatory posture toward digital-asset platforms nationally — a genuine architecture-level divergence between state and federal financial-integrity postures, not merely a procedural footnote. The underlying docket entries are procedural and carry a Tier-2 sourcing designation, though the original filing is corroborated by an Oregon DOJ press release; readers should treat the litigation's trajectory, rather than any single docket entry, as the operative signal. For any digital-asset platform serving Oregon residents, the practical consequence is continued classification uncertainty until the stay resolves.

UCC Article 12 continues in force alongside, rather than in tension with, the enforcement posture. Oregon's 2025 enactment of UCC Article 12 via SB 167, which establishes digital assets as usable commercial-law collateral, remains a separate and unaffected instrument, sourced this cycle at Tier 3. The state has therefore built an enabling commercial-law framework for digital-asset transactions at the same time it pursues an unresolved securities theory against a major exchange — two structurally distinct postures coexisting rather than resolving one another, and each should be read on its own terms rather than netted against the other.

Cross-Monitor Connections

The Block/Cash App settlement is a shared finding with the World Payments Monitor, which addresses the same underlying facts from a payments-conduct and consumer-protection lens; this brief's framing foregrounds the enabler-jurisdiction gap-filling dimension of the same enforcement action. The Coinbase enforcement action and the UCC Article 12 framework are likewise shared findings with the Crypto monitor's token-classification and on-chain-activity-regime coverage; here the emphasis is the financial-integrity dimension of a state-level securities theory diverging from federal posture, relevant to firms assessing jurisdiction-specific compliance exposure rather than token-level classification risk alone.

Outlook

The single most consequential near-term event for Oregon's crypto posture is the outcome of the March 16, 2026 joint status report in State of Oregon v. Coinbase: either the stay lifts and the underlying securities theory proceeds toward substantive resolution, or the litigation's present uncertainty persists. A related open item is Coinbase's separate public-records suit against Governor Kotek, which could surface material affecting the state's broader crypto-policy narrative. On the enabler-jurisdiction side, the Economic Justice Section is the structural item to watch: whether its case selection over coming cycles constitutes a sustained pattern of state-level backstop enforcement against payments and crypto firms, or a one-off intervention tied to the Block settlement specifically, will determine whether Oregon's enabler-jurisdiction profile continues escalating. Both the broader enabler-jurisdiction sweep beyond the Block settlement, and the substantive outcome of the Coinbase stay, remain explicitly flagged evidentiary gaps this cycle pending further primary-source confirmation.

weekly_brief_draft · JID US-OR
Domain intelligence (D1–D6)

D1 Sanctions

Not covered

Sanctions is not yet covered for this jurisdiction in this report.

D2 Beneficial Ownership

Not covered

Beneficial Ownership is not yet covered for this jurisdiction in this report.

D3 Enabler Jurisdictions

Enabler Jurisdictions

Continue reading

Oregon's Department of Justice led a 46-state, $45 million settlement with Block, Inc. resolving allegations that Cash App misrepresented account-safety features and failed to deliver required fraud-protection and resolution services to users; Oregon's own share of the settlement is $3 million. The state explicitly framed the action as compensating for reduced enforcement capacity at the federal Consumer Financial Protection Bureau, a framing this brief treats as an assessed, high-confidence institutional signal rather than an isolated incident. Read through the enabler-jurisdiction lens, Oregon is not functioning as a facilitator of gaps in the financial system here — it is the enforcer stepping into a gap left by a receding federal counterpart, an important distinction for how this finding should inform any jurisdiction-risk assessment of Oregon itself.

This cycle's signal on Oregon's enabler-jurisdiction posture is otherwise limited to one structural indicator alongside the settlement itself: the 2025 creation of an Economic Justice Section within Oregon DOJ, explicitly positioned to bring further payments- or crypto-adjacent enforcement matters. No independent sweep of Oregon's broader enabler-jurisdiction exposure — beyond this settlement — was conducted this cycle, and that gap is carried forward rather than papered over. The overall signal is assessed as a genuine, if narrow, structural development rather than a one-off incident, consistent with a "watch" trajectory for this domain.

Outlook

The Economic Justice Section's future case selection is the structural item to watch: whether it produces a sustained pattern of state-level backstop enforcement against payments and crypto firms, consistent with the Block settlement, or proves to be a one-off intervention, will determine whether Oregon's enabler-jurisdiction profile continues on its current watch trajectory or stabilizes. A broader independent enabler-jurisdiction sweep for Oregon, beyond the Block/Cash App settlement, remains an explicitly flagged gap for a future cycle.

D4 Conflict Finance

Not covered

Conflict Finance is not yet covered for this jurisdiction in this report.

D5 Crypto / Digital Assets / Financial Innovation

Crypto / Digital Assets / Financial Innovation

Continue reading

Oregon's stayed enforcement action against Coinbase continues to anchor this cycle's crypto posture. The state's original complaint alleges the unregistered offer and sale of 31 tokens, including XRP, in violation of Oregon securities law. Removed to federal court, the case is presently stayed until March 16, 2026, with a joint status report due from the parties at that point. This assessed-confidence finding — corroborated by an Oregon Department of Justice press release at Tier 1, with the procedural docket detail sourced at Tier 2 — represents a genuine architecture-level divergence rather than an isolated incident: Oregon's securities-enforcement theory against a major digital-asset exchange runs directly counter to the federal Securities and Exchange Commission's current de-regulatory posture toward digital-asset platforms nationally. For any digital-asset firm serving Oregon residents, that divergence translates into continued state-specific compliance uncertainty until the stay resolves one way or the other.

Running alongside, rather than resolving, that enforcement tension is Oregon's 2025 enactment of UCC Article 12 via SB 167, which establishes legal recognition of digital assets as commercial-law collateral. This is a Tier-3-sourced finding this cycle, and it should be read as a distinct, enabling commercial-law instrument rather than as an indication of the state's substantive posture on token classification. Oregon has, in effect, built infrastructure making digital assets usable as collateral in commercial transactions at the same time state prosecutors pursue an unresolved securities theory against a major exchange operating in the state. These two postures illustrate a state financial-integrity posture that is simultaneously enabling of digital-asset commercial use and unresolved on digital-asset securities classification — a duality, rather than either fact read in isolation, that is analytically significant this cycle.

Outlook

The single most consequential near-term development for Oregon's crypto posture is the outcome of the March 16, 2026 joint status report in State of Oregon v. Coinbase. A lifted stay moving the securities theory toward substantive resolution, a further extension preserving the present uncertainty, or a narrowing or dismissal of the underlying claims would each carry materially different implications for digital-asset platforms serving Oregon residents. A related, separately flagged item is Coinbase's own public-records suit against Governor Kotek, which could surface documents materially affecting the narrative around Oregon's broader crypto-policy posture; neither outcome is yet available, and both are carried forward as explicit gaps rather than resolved this cycle.

D6 Compliance Technology & Active Defence

Not covered

Compliance Technology & Active Defence is not yet covered for this jurisdiction in this report.

D7 AML/CTF Regime

Not covered

AML/CTF Regime is not yet covered for this jurisdiction in this report.

Regulatory horizon
No dated horizon items this cycle. 4 items tracked without a confirmed date.
4 pending date · baseline fim-2026-07-05
Role action cards
MLROAssessed

Oregon-led multistate settlement over payments-app fraud-protection failures carries AML-adjacent control implications for consumer-facing payment platforms.

The Block/Cash App settlement centers on fraud-protection and resolution failures rather than a formal AML finding, but MLROs at payment platforms should note that state attorneys general are actively scrutinizing the adequacy of consumer-facing fraud controls, a category that often overlaps with suspicious-activity detection infrastructure.

1 evidence refs
ComplianceHigh

Oregon is simultaneously tightening payments-consumer-protection enforcement and maintaining an unresolved state-level securities theory against a major crypto exchange.

Compliance functions serving Oregon residents face two live, distinct regulatory-change vectors this cycle: heightened multistate consumer-protection enforcement risk for payments apps, and continued classification uncertainty for platforms listing tokens named in the stayed Coinbase action.

4 evidence refs
LegalHigh

Oregon's stayed Coinbase securities action and the Block/Cash App settlement both carry active liability-trajectory implications pending a March 2026 status report.

Legal counsel should track the March 16, 2026 joint status report as the key event that will determine whether Oregon's securities theory against a broad token basket proceeds toward substantive ruling; the Block settlement itself is now resolved liability, but its explicit gap-filling framing may inform future state-AG litigation strategy.

3 evidence refs
BoardAssessed

Oregon's dual enforcement posture — consumer-payments backstop and unresolved crypto-securities theory — represents rising, not stable, state-level financial-crime-adjacent exposure.

The board should be aware that Oregon's overall risk direction this cycle is assessed as increasing, driven by active enforcement rather than passive enablement, with reputational and financial exposure concentrated in payments-app conduct and digital-asset securities classification.

2 evidence refs
CTOAssessed

Oregon's UCC Article 12 collateral framework and its unresolved token-classification litigation create a bifurcated technical-architecture posture for digital-asset platforms.

CTOs at digital-asset firms should treat Oregon's commercial-law recognition of digital assets as collateral (SB 167) as a distinct, enabling infrastructure layer separate from the unresolved question of whether specific tokens, including XRP, are securities under the state's stayed Coinbase theory.

2 evidence refs
RiskAssessed

Oregon's risk profile this cycle is assessed as increasing, with a mixed structural-episodic character spanning payments enforcement and crypto-securities litigation.

Risk functions should treat the newly established Economic Justice Section as a forward-looking exposure-concentration signal for payments and crypto firms operating in Oregon, alongside the unresolved Coinbase litigation as a live classification-risk driver.

3 evidence refs
OperationsAssessed

Fraud-resolution and account-safety control adequacy is the operational focal point arising from the Block/Cash App settlement.

Operations teams at consumer payment platforms should note that the settlement centered on a gap between marketed account-safety representations and actual fraud-resolution performance, a control area subject to heightened state-level scrutiny.

1 evidence refs
AuditAssessed

The Block/Cash App settlement and the new Economic Justice Section both point to an evolving state-level control-testing and evidence-documentation expectation.

Internal audit should note that the settlement's findings on fraud-protection control gaps, combined with a newly resourced state enforcement section, suggest documented control-testing scope for consumer-payment platforms operating in Oregon should be revisited.

2 evidence refs
Decision lens
MLRO

Oregon-led multistate settlement over payments-app fraud-protection failures carries AML-adjacent control implications for consumer-facing payment platforms.

Compliance

Oregon is simultaneously tightening payments-consumer-protection enforcement and maintaining an unresolved state-level securities theory against a major crypto exchange.

Legal

Oregon's stayed Coinbase securities action and the Block/Cash App settlement both carry active liability-trajectory implications pending a March 2026 status report.

Board

Oregon's dual enforcement posture — consumer-payments backstop and unresolved crypto-securities theory — represents rising, not stable, state-level financial-crime-adjacent exposure.

CTO

Oregon's UCC Article 12 collateral framework and its unresolved token-classification litigation create a bifurcated technical-architecture posture for digital-asset platforms.

Risk

Oregon's risk profile this cycle is assessed as increasing, with a mixed structural-episodic character spanning payments enforcement and crypto-securities litigation.

Operations

Fraud-resolution and account-safety control adequacy is the operational focal point arising from the Block/Cash App settlement.

Audit

The Block/Cash App settlement and the new Economic Justice Section both point to an evolving state-level control-testing and evidence-documentation expectation.

Shared evidence: 4 refs
Scenario sketches

AMLA Direct/Indirect Supervision Transition and Cross-Border Obliged-Entity Evasion Pathways

As the AMLA Regulation (Reg (EU) 2024/1620) transitions cross-border obliged entities from purely national AML supervision toward direct or indirect EU-level supervision, alongside the directly-applicable AMLR (Reg (EU) 2024/1624) and per-state transposition of the sixth AML Directive, illustrative orientation suggests evasion strategies could shift toward jurisdictions and entity structures that fall outside AMLA's initial direct-supervision perimeter, potentially increasing reliance on non-EEA correspondent and payment relationships of the kind that structurally resemble this cycle's Oregon findings, where state-level enforcement has substituted for contracting federal oversight. This is an illustrative structural sketch orienting analysis toward the EU supervisory transition; it does not draw on any Oregon claim as evidence of EU AML Package interaction and is not an assessment of Oregon-specific risk.

Illustrative scenario for analytical orientation only. Not compliance advice, not a prediction, and not a statement of observed fact.

Standing trackers (T1–T6)
TrackerStatusNote
T1 · Russian Sanctions-Evasion ArchitecturestableNo material change found with an Oregon nexus this cycle.
T2 · EU AML Package / AMLAno_changeNot applicable at the US-OR subnational level.
T3 · FATF Grey Listno_changeNo US-OR-specific mutual-evaluation or grey-list movement; FATF status is set at the US federal level.
T4 · Beneficial-Ownership Register Statusno_changeBO registry policy is federally administered; no Oregon-specific variance identified.
T5 · Crypto & Digital-Asset IntegritywatchOregon's stayed Coinbase enforcement action and UCC Article 12 (SB 167) continue to shape a distinct state-level crypto posture.
T6 · Sanctions Regime Divergenceno_changeNo Oregon-specific sanctions-divergence signal this cycle.
Registers

Enforcement actions

  • FinCEN issued an interim final rule revising the CTA's 'reporting company' definition to cover only foreign entities, formally exempting all US-formed domestic reporting companies and their beneficial owners from BOI reporting requirements. 21 Mar 2025
  • OFAC designated more than a dozen individuals and entities responsible for converting bulk cash proceeds of US fentanyl sales into stablecoins for cross-border transfer to Mexico, dismantling a specialized cash-to-crypto laundering cell. 20 May 2026
  • Deputy Attorney General Todd Blanche issued a memorandum disbanding the National Cryptocurrency Enforcement Team and directing prosecutors to deprioritize standalone BSA/regulatory violations absent willful misconduct, refocusing resources on fraud, cartels, and terrorism financing where digital assets are used as a tool. 7 Apr 2025

Sanctions changes

  • OFAC designated the Sinaloa Cartel Los Chapitos cash-to-stablecoin laundering cell, targeting brokers who converted US fentanyl-sale cash proceeds into cryptocurrency for cross-border transfer. 20 May 2026
  • Following the White House's designation of international cartels as Foreign Terrorist Organizations and Specially Designated Global Terrorists (Jan/Feb 2025), OFAC and the State Department issued follow-on alerts targeting cartel financial networks, including fuel-theft and fentanyl-proceeds laundering schemes. 18 Mar 2025
  • FinCEN designated Huione Group, a Cambodian conglomerate, as a foreign financial institution of primary money-laundering concern under Section 311, severing it and successor entities from the US financial system after it processed over $39.6 billion in 2025. 1 Oct 2025

Regulatory horizon (register)

  • GENIUS Act stablecoin Customer Identification Program rule
  • FinCEN Investment Adviser AML Rule effective date postponed
  • Next FATF Plenary grey-list review (October 2026)
  • Potential federal marijuana rescheduling affecting Oregon cannabis banking

Active schemes

  • [HIGH] Cartel fentanyl cash-to-stablecoin laundering pipeline
  • Oregon LLC shell-company fraud layering
  • [HIGH] Crypto-kiosk elder-fraud cash-out network
  • [CRITICAL] DPRK crypto-theft proliferation financing corridor
  • [HIGH] Sanctioned terror-group crypto wallet attribution
Sources
  1. Oregon Department of Consumer and Business Services, Division of Financial Regulation
  2. Financial Crimes Enforcement Network (FinCEN)
  3. Financial Crimes Enforcement Network (FinCEN)
  4. Financial Crimes Enforcement Network (FinCEN)
  5. Chainalysis
  6. Financial Crimes Enforcement Network (FinCEN)
  7. International Consortium of Investigative Journalists (ICIJ)
  8. Organized Crime and Corruption Reporting Project (OCCRP)
  9. TRM Labs
  10. Financial Crimes Enforcement Network (FinCEN)
  11. Financial Crimes Enforcement Network (FinCEN)
  12. Financial Crimes Enforcement Network (FinCEN)
  13. Chainalysis
  14. European Commission
Coverage gaps
Publicly available federal and state enforcement-action repo…
Publicly available federal and state enforcement-action reporting specific to Oregon within the 18-month baseline window is sparse. Most identifiable enforcement touchpoints are national-level actions (CTA rule change, OFAC cartel designations, DOJ policy memo) with indirect Oregon relevance rather than Oregon-situated prosecutions or DFR supervisory orders.
FinCEN's March 2025 CTA rollback exempting all US-formed dom…
FinCEN's March 2025 CTA rollback exempting all US-formed domestic reporting companies from beneficial ownership reporting undermines transparency for Oregon-registered LLCs and corporations, which now face no federal or state-level BO disclosure obligation.
Oregon is excluded from FinCEN's expanded Southwest Border G…
Oregon is excluded from FinCEN's expanded Southwest Border Geographic Targeting Order (covering Arizona, California, New Mexico, and Texas counties), despite FinCEN's own 2024 Portland PROTECT outreach having flagged fentanyl-related BSA reporting and cash-to-crypto laundering exposure in the Pacific Northwest.
Oregon has no dedicated state-level beneficial ownership reg…
Oregon has no dedicated state-level beneficial ownership registry or public UBO transparency mechanism, unlike some peer states exploring such registries following the federal CTA's 2025 domestic-company exemption.

Evidence

Confidence-tiered claims

No structured claims published for this jurisdiction yet.