D1 Sanctions
Sanctions is not yet covered for this jurisdiction in this report.
Virginia operates under the federal BSA/AML framework administered by FinCEN (headquartered in Vienna, VA) and OFAC, supplemented by state money-transmitter licensing through the SCC Bureau of Financial Institutions (Richmond).
Sanctions is not yet covered for this jurisdiction in this report.
The durable backdrop against which this cycle's beneficial-ownership and corporate-transparency signal should be read is the architecture of the EU AML Package itself: three distinct instruments operating on three different tracks. The AML Regulation (AMLR, Regulation (EU) 2024/1624) is directly applicable across the EU without national transposition and is on track to take effect EU-wide from 10 July 2027. The sixth AML Directive (6AMLD) operates on a separate, per-Member-State transposition track, the status of which was not independently re-verified this cycle. And the AMLA Regulation (Regulation (EU) 2024/1620) establishes the Anti-Money Laundering Authority itself, the EU-level body now responsible for direct supervision of a defined cohort of high-risk obliged entities. These three instruments together are shifting the EU's AML/CFT supervisory perimeter from a purely national model toward a hybrid EU-national regime, and that structural shift, not any single enforcement action, is the frame within which the developments below sit.
This cycle's concrete development is AMLA's formal absorption of the European Banking Authority's EU-level AML/CFT mandate, effective 1 January 2026, corroborated by two independent EU primary sources at High confidence. The Authority has also opened, and subsequently closed on 27 January 2026, a consultation on the methodology it will use to select the approximately 40 high-risk cross-border entities it intends to supervise directly beginning in 2028. The obligation basis for this build-out is grounded in Article 54 of the AMLA Regulation, which establishes the governance framework for the Authority's direct-supervision powers over cross-border obliged entities, and the control-gap signal on that obligation is recorded as partial, reflecting that implementing detail is still being worked out rather than finalized.
For beneficial-ownership and corporate-transparency purposes specifically, the significance of the mandate transfer is less about a new disclosure requirement and more about who enforces existing ones. A supervisory body with a genuinely EU-wide vantage point, rather than national authorities each supervising their own slice of the market, is structurally better positioned to catch beneficial-ownership obscuration that relies on jurisdiction-shopping across Member States. AMLA's direct-supervision cohort, once selected, will be the test case for whether that structural advantage translates into practice. The Authority has not yet published its final selection criteria, and the Interpreter has logged that gap explicitly.
The AMLR single rulebook remains the other half of this cycle's D2 story. Its EU-wide direct applicability from 10 July 2027 will, for the first time, give every Member State the same beneficial-ownership and due-diligence baseline without relying on transposition choices that have historically produced meaningful divergence across the bloc. That divergence is precisely what 6AMLD's per-state transposition track has left open, and because that transposition status was not independently re-verified this cycle, this brief cannot say with confidence how far any given Member State remains from the AMLR baseline it will eventually be bound by regardless.
For obliged entities operating cross-border within the EEA, the practical near-term implication is preparatory rather than operational: until AMLA publishes its selection methodology and work programme, no institution can yet know with certainty whether it will fall within the approximately 40-entity direct-supervision cohort from 2028. The prudent posture in the interim is to treat the AMLR's 2027 direct-applicability date as the harder near-term deadline, since it applies EU-wide regardless of any institution's eventual supervisory assignment, while treating the AMLA direct-supervision question as a 2027-2028 planning item rather than an immediate compliance deadline.
None of this cycle's D2 finding rests on Tier 3 or Tier 4 sourcing: both the mandate-transfer fact and its Article 54 governance basis trace to Tier 1 EU primary sources, which is the appropriate sourcing standard for a structural finding of this consequence.
Three dated markers define the D2 horizon. AMLA is expected to publish its first work programme and supervisory methodology in 2026 Q4, which should clarify near-term supervisory priorities ahead of any direct-supervision activity. The AMLR's EU-wide direct applicability arrives in 2027 Q3 alongside the 6AMLD transposition deadline, a milestone this brief flags as a genuine state-of-play event rather than a routine date given the historical divergence in Member State transposition. And AMLA's direct supervision of its first cohort of high-risk cross-border entities begins in 2028 Q1, contingent on a selection methodology whose final criteria remain unpublished. Watch for the AMLA work programme publication as the most immediate signal of how the Authority intends to operationalize its new mandate, and for any interim update on 6AMLD transposition status, which remains a logged gap rather than a confirmed null finding.
Cambodia's central bank put a specific warning on the record this cycle. The Governor of the National Bank of Cambodia publicly warned that persistent scam-centre and illegal online-gambling proceeds could trigger a third FATF grey-list placement for the country, and disclosed that a second national risk assessment is now underway (Assessed confidence, Tier 3, corroborated by two independent trade-press sources). This is a comparatively thin evidentiary base for this cycle - a single primary claim resting on Tier 3 sourcing rather than a Tier 1 FATF statement - and this brief flags that limitation rather than overstating what the warning establishes.
What the warning does establish, on the architecture-over-incident principle this monitor applies, is that Cambodia's casino- and remittance-sector laundering exposure has not resolved despite reported enforcement activity including licence revocations and asset freezes. A regulator volunteering its own re-listing risk in public, ahead of any FATF determination, is itself an enablement-versus-enforcement signal worth weighting independently: it suggests the National Bank assesses its own enforcement capacity as still inadequate against an entrenched scam-compound ecosystem, rather than resolved by the enforcement actions already reported. No FATF re-listing has actually occurred as of this cycle, and this brief does not treat the Governor's warning as equivalent to a determination.
The item to watch is the outcome of Cambodia's second national risk assessment, which is the mechanism through which any actual re-listing risk would be substantiated ahead of a FATF Plenary determination. No dated horizon marker for this specific development was available in the Interpreter's regulatory-horizon set this cycle; this brief will look for either a Tier 1 FATF statement or confirmation of the national risk assessment's completion in a future cycle before upgrading this finding beyond Assessed confidence.
Conflict Finance is not yet covered for this jurisdiction in this report.
US federal stablecoin regulation advanced on two separate agency tracks this cycle, converging on the same statutory mandate but proceeding independently. The FDIC's Board of Directors approved a notice of proposed rulemaking on 7 April 2026 implementing GENIUS Act requirements and standards for payment stablecoin issuers, and the OCC issued its own implementing bulletin on 25 February 2026 (High confidence, Tier 1, corroborated by two independent federal primary sources). Together, the two proposals establish prudential, reserve, redemption, and custodial-safekeeping standards for permitted payment stablecoin issuers, with the underlying statutory obligation traced to 12 U.S.C. 5904(c) and recorded at an in-force-pending citation stage with a partial control-gap signal, reflecting that the implementing detail is still being finalized rather than settled.
The architecture-over-incident read here is that this is not a single enforcement action against a specific stablecoin issuer, but the build-out of the prudential perimeter that will eventually govern the entire payment-stablecoin sector in the United States. That the perimeter is being built by two separate prudential regulators rather than one is itself structurally significant: it means payment stablecoin issuers touching both FDIC-supervised and OCC-supervised institutions face two rulemaking tracks that must eventually be reconciled.
Timing is the second half of this cycle's D5 story. The GENIUS Act's own statutory implementation clock called for final rules within roughly one year of enactment in July 2025; neither the FDIC's nor the OCC's proposal has yet finalized, and the Interpreter's own gap assessment records that the statutory one-year deadline is likely to slip into 2027 based on industry retrospective analysis, with the OCC's own comment period on its rulemaking having closed 1 May 2026. This is a genuine and disclosed regulatory delay, and this brief treats it as such rather than characterizing the delay as more consequential than the record supports.
For payment stablecoin issuers and the banks that support them, the practical effect of a dual-track, not-yet-final rulemaking process is an extended compliance-planning window under uncertainty: reserve, redemption, and custodial-safekeeping standards can be anticipated in broad outline from the proposed rules, but firms cannot yet build to a finalized standard. The absence of a finalized rule also has a knock-on effect for state-level money-transmission regimes that intersect with stablecoin activity: institutions operating across both federal and state licensing perimeters must currently track a moving federal target while state regimes proceed on their own timelines.
No sanctions or illicit-finance typology observation was tied to either the FDIC or OCC rulemaking this cycle; the D5 finding here is exclusively a prudential-architecture development, and this brief does not extend it into an illicit-finance risk assessment beyond what the underlying claim supports. Confidence in both the FDIC and OCC developments is High, reflecting two independent Tier 1 federal primary sources rather than secondary reporting, which is the appropriate confidence level for a structural rulemaking development of this consequence; this brief does not extend that confidence to any inference about the eventual content of the final rules, which remain, by definition, proposed rather than settled as of this cycle.
The GENIUS Act implementing rules are expected to finalize in 2027 Q1 at the earliest. Watch for either agency issuing a final rule ahead of the other, which would itself signal how the FDIC-OCC reconciliation question is likely to resolve, and for any Federal Reserve action joining the FDIC and OCC on the implementing-rules track, since the Interpreter's horizon entry for this development names all three prudential regulators as eventual parties to finalization.
Compliance Technology & Active Defence is not yet covered for this jurisdiction in this report.
AML/CTF Regime is not yet covered for this jurisdiction in this report.
The EU supervisory perimeter for the highest-risk cross-border entities is beginning a multi-year shift toward AMLA direct supervision from 2028, while Cambodia's central bank has publicly acknowledged renewed grey-list risk tied to scam-centre and illegal online-gambling proceeds, both of which are relevant to ongoing jurisdictional and entity-level risk assessment.
AMLA formally took over the EBA's EU-level AML/CFT tasks effective 1 January 2026, with a consultation closed on direct-supervision selection methodology; separately, Cambodia's public grey-list warning is a jurisdictional risk signal for any control framework weighting enabler-jurisdiction exposure.
No material change for this persona this cycle
From 2028, the highest-risk cross-border obliged entities will answer to AMLA directly rather than solely to national regulators, a strategic-level shift in the EU AML supervisory landscape that institutions with EU cross-border exposure should track.
Proposed prudential, reserve, redemption, and custodial-safekeeping standards for payment stablecoin issuers are advancing via two agencies rather than one, meaning any stablecoin-adjacent infrastructure should be built with awareness that reconciliation between the two proposals has not yet occurred and neither rule is final.
Cambodia's central bank publicly assessed its own renewed grey-list risk as unresolved despite enforcement activity, and US stablecoin prudential rules remain in proposed form roughly a year past the statute's original implementation clock, both representing exposure concentrations to monitor rather than resolved risks.
No material change for this persona this cycle
The Authority's direct-supervision selection methodology, tied to Article 54 governance obligations, remains at a partial control-gap stage, which is relevant to audit scoping for institutions assessing eventual EU-level supervisory exposure.
AMLA absorbed the EBA AML/CFT mandate and Cambodia flagged its own grey-list exposure this cycle.
AMLA's mandate absorption and Cambodia's risk warning both signal jurisdictional-supervision change.
No material change this cycle.
AMLA's absorption of the EBA mandate marks a structural first step toward EU-level AML supervision.
FDIC and OCC advanced GENIUS Act stablecoin rulemakings on separate tracks this cycle.
Cambodia's grey-list warning and the GENIUS Act's dual-track rulemaking are both emerging exposure signals.
No material change this cycle.
AMLA's supervisory methodology consultation closed without published final selection criteria.
Illustrative scenario for analytical orientation: as AMLA moves from mandate absorption toward direct supervision of a first cohort of high-risk cross-border obliged entities from 2028, the supervisory perimeter shifts from a purely national model toward a hybrid EU-level regime. This could, illustratively, alter where evasion pressure concentrates - potentially toward entities and jurisdictions positioned just outside the eventual direct-supervision cohort, where national-only supervision persists longer. This is architecture-over-incident framing, not a prediction of any specific evasion event.
Illustrative scenario for analytical orientation only. Not compliance advice, not a prediction, and not a statement of observed fact.
| Tracker | Status | Note |
|---|---|---|
| T1 · Russian Sanctions-Evasion Architecture | no_change | No material Russia-sanctions-evasion signal surfaced for the US-VA-bound cycle; dedicated OFAC/OFSI/UN Panel search not run this cycle. |
| T2 · EU AML Package / AMLA | no_change | Not directly applicable to the US-VA-bound cycle; no AMLR/6AMLD/AMLA developments in scope. |
| T3 · FATF Grey List | no_change | No FATF plenary or grey-list movement surfaced this cycle; not independently re-verified. |
| T4 · Beneficial-Ownership Register Status | no_change | No US federal or Virginia-specific beneficial-ownership registry development surfaced this cycle. |
| T5 · Crypto & Digital-Asset Integrity | watch | Virginia's Chapter 19.1 recodification narrows state MTL reach over virtual-currency-only platforms (excluded from 'money'), a state-level digital-asset integrity development worth tracking against federal BSA/MSB coverage of the same actors. |
| T6 · Sanctions Regime Divergence | no_change | No EU/US/UK autonomous-listing divergence signal surfaced for this cycle. |