Lead Signal
Utah has enacted HB 72, the Virtual Currency Kiosk Regulation, creating a new consumer-protection and reporting regime for crypto-ATM operators in the state. Effective 6 May 2026, the law requires graduated daily transaction limits, mandatory fraud-prevention disclosures, and annual location reporting to the Division of Consumer Protection. The structural point worth underscoring is where this sits: the new regime runs through the consumer-protection track administered by DCP, not through the Anti-Money Laundering licensing apparatus administered by the Department of Financial Institutions. Utah has chosen to address kiosk-channel integrity risk as a deceptive-practices and disclosure matter rather than folding it into its AML/BSA licensing architecture, which continues to be governed separately under the Money Transmitter Act.
That architectural choice is reinforced by a second, older feature of Utah law that remains unchanged: a 2020 amendment to Utah Code Section 7-25-102(9)(b) excludes standalone blockchain-token activity, including node operation, protocol software development, and token-for-token exchange not involving legal tender, from the statutory definition of money transmission. Read together, the kiosk law and the token exclusion describe a jurisdiction drawing a deliberate line, regulating the retail point of cash-to-crypto conversion where consumer harm is most visible, while leaving the underlying token infrastructure layer outside licensing scope. This is best read as a policy design rather than a capacity gap, though the underlying statutory exclusion itself was sourced only from secondary commentary rather than independently verified against primary statutory text.
Other Developments
A disputed remittance tax proposal. Utah HB 141, the International Money Transmission Amendments, would impose a 2 percent tax on international money transmissions from 1 January 2027, collected by licensed money transmitters and remitted quarterly. The bill passed the Utah House 58-15 on 10 February 2026 and moved to the Senate. Sourcing on its ultimate fate is genuinely in conflict: one public-radio report states the bill did not become law this session, while a legislative-tracking aggregator records it as enacted. Neither source is a primary enacted-text confirmation, and this is recorded as a disputed claim rather than resolved in either direction pending confirmation from the Utah Legislature's own bill-status record.
Standing AML architecture. Utah's state-level AML anchor remains the Money Transmitter Act, administered by the Department of Financial Institutions, which conditions licensure on bonding, net-worth requirements, and comprehensive AML/BSA compliance programs. This baseline is unchanged and continues to operate independently of the federal BSA/FinCEN layer, which is not affected by any of the state-level developments described here.
FATF monitoring list, no change. Laos remains under FATF increased monitoring per the 13 February 2026 plenary list. No contrary signal was identified, and the next FATF plenary in October 2026 had not yet reported outcomes at the time of this review.
Cross-Monitor Connections
The HB 72 kiosk regime and the Money Transmitter Act's crypto-token carve-out are both substrate shared with the World Payments Monitor's licensing and market-access tracking, and with the Crypto Monitor's own licensing and consumer-protection modules, where the same HB 72 facts are read through a firm-compliance lens rather than an AML-architecture lens. The disputed HB 141 remittance tax likewise touches payment-corridor economics tracked separately by World Payments. No conflict-finance, sanctions, or beneficial-ownership nexus was identified in Utah-specific material.
Outlook
The near-term question for Utah's AML/CTF regime is not the kiosk law, which is now in force and administratively settled, but the disposition of HB 141. If its enactment is confirmed, licensed money transmitters handling international transfers would face a new tax-collection and quarterly-remittance reporting duty from 1 January 2027, with compliance-operations implications distinct from AML obligations proper. Primary confirmation from the Utah Legislature's bill-status page, rather than secondary reporting, is needed before this moves from a disputed to a confirmed finding. Separately, the token-exclusion architecture at Section 7-25-102(9)(b) is a stable policy anchor as scheduled, but the underlying statutory text has not been independently verified and remains worth confirming against primary sources in a future cycle.