Financial Integrity Monitor

United States — Oregon US-OR

Domains (D1–D6)
1
Sources
14
Role actions
8
Jurisdiction profile
Largely CompliantTier BRisk: IncreasingMixed

Oregon operates entirely within the federal BSA/CTA/FinCEN AML/CFT framework; it has no independent national AML statute.

MoreThe Oregon Division of Financial Regulation (DFR) licenses money transmitters and virtual-currency businesses under ORS Chapter 717, supplementing federal supervision. Since March 2025, FinCEN's CTA rollback exempts Oregon-formed domestic entities from beneficial ownership reporting, and Oregon has no state-level BO registry to backstop this gap.

Key deficiencies
  • No state-level beneficial ownership registry; reliance is entirely on the federal CTA/BOI framework
  • Federal CTA now exempts domestic (Oregon-formed) reporting companies from BOI disclosure since March 2025, reversing prior transparency gains
  • Oregon excluded from FinCEN's 2026 Southwest Border GTO despite fentanyl-transit and cash-to-crypto laundering exposure highlighted by FinCEN's own Portland PROTECT outreach
  • Limited public-domain transparency for Oregon DFR state-level AML supervisory/enforcement actions
Recent developments (18m)
  • FinCEN interim final rule (Mar 21/26, 2025) exempting all US-formed domestic reporting companies, including Oregon entities, from CTA beneficial ownership reporting
  • FinCEN CVC kiosk advisory (Aug 2025) flagging elder-fraud exploitation via crypto ATMs nationally, relevant to Oregon's aging population
  • DOJ 'Blanche Memo' (Apr 2025) narrowing crypto-related BSA prosecutions nationwide, affecting Oregon-licensed VASPs' regulatory exposure
  • OFAC sanctions on Sinaloa Cartel Los Chapitos cash-to-stablecoin laundering network (May 2026), relevant given Oregon's fentanyl overdose burden
  • FATF's Feb 2026 plenary added Kuwait and Papua New Guinea to the grey list; the US remains unlisted

United States federal law that applies in United States – Oregon is covered once, on the United States page. This page covers United States – Oregon’s own layer: its own law, regulators and enforcement.

Brief

Lead signal

Lead Signal

Read full brief

Lead Signal

Oregon's financial-integrity architecture saw one confirmed, dated instrument change this cycle: HB 4116, effective June 5, 2026, closes a rate-export loophole under the federal Depository Institutions Deregulation and Monetary Control Act of 1980 that had allowed internet consumer lenders partnering with out-of-state banks to charge Oregon borrowers interest rates above the state's 36 percent usury cap. This is properly read as an enabler-jurisdiction development rather than a core AML/CTF instrument change: the loophole functioned as a rate-arbitrage pathway that let non-bank lending arrangements route around Oregon's consumer-protection ceiling by leaning on a partner bank's home-state rate authority, and its closure removes one enabling mechanism from the state's consumer-finance landscape.

This sits alongside Oregon's confirmed baseline AML/CTF-adjacent control, the money-transmitter licensing regime under ORS 717.205, which remained unchanged in substance this cycle and continues to operate as the sole state-specific layer beneath the federal Bank Secrecy Act and FinCEN framework that governs Oregon-licensed money-services businesses.

Other Developments

HB 4116's DIDMCA loophole closure is the confirmed development of note. Effective June 5, 2026, the statute closes the rate-export gap that had allowed internet lenders partnering with out-of-state banks to exceed Oregon's 36 percent usury limit, removing a rate-arbitrage enabler pathway that predatory or aggressive consumer-lending operations had relied upon. The Oregon Division of Financial Regulation characterizes the change as closing a loophole that had permitted rates in excess of the state limit.

Oregon's money-transmitter licensing architecture was confirmed but not independently re-verified for change this cycle. ORS 717.205 requires a license from the Division of Financial Regulation for any money transmission business operating in the state, backed by a surety bond under ORS 717.225 and quarterly money-services-business call reports. The statute's definition of money is stated by the state to cover the evolving landscape of virtual currency, including Bitcoin, meaning crypto-asset businesses transmitting value in Oregon fall under this same general licensing regime rather than a bespoke crypto statute.

Cross-Monitor Connections

The DIDMCA loophole closure under HB 4116 principally intersects with consumer-protection and lending-conduct oversight rather than a typical AML/CTF typology, but the underlying mechanism, rate arbitrage achieved by routing consumer credit through an out-of-state bank partnership, shares structural features with enabler-jurisdiction analysis tracked elsewhere in the fleet: a permissive cross-border (in this case cross-state) legal architecture being used to route around a stricter home jurisdiction's rule. No direct connection to world-payments or crypto-monitor findings was evidenced this cycle for the Oregon MTL baseline.

Outlook

The practical significance of HB 4116 will depend on how actively Oregon enforces the closed loophole against internet lenders that had previously relied on out-of-state bank partnerships to exceed the 36 percent cap; no enforcement action under the new provision was identified this cycle. Separately, six standing fleet-wide trackers (T1 through T6) were not independently re-verified against the Oregon-specific sweep this cycle, and Oregon's crypto-asset variance under the general MTL regime remains on watch status pending any bespoke state crypto statute or enforcement action, neither of which was identified this cycle.

weekly_brief_draft · JID US-OR
Domain intelligence (D1–D6)

D1 Sanctions

Not covered

Sanctions is not yet covered for this jurisdiction in this report.

D2 Beneficial Ownership

Not covered

Beneficial Ownership is not yet covered for this jurisdiction in this report.

D3 Enabler Jurisdictions and Professional Facilitators

Enabler Jurisdictions and Professional Facilitators

Continue reading

Oregon's D3 signal this cycle centers on HB 4116, effective June 5, 2026, which closes a rate-export loophole under the federal Depository Institutions Deregulation and Monetary Control Act of 1980. That loophole had allowed internet consumer lenders partnering with out-of-state banks to charge Oregon borrowers interest rates in excess of the state's 36 percent usury cap, functioning as a rate-arbitrage enabler pathway: a non-bank lender could structure its product through a partner bank chartered elsewhere and thereby import that bank's home-state rate ceiling rather than Oregon's own. The Oregon Division of Financial Regulation has publicly framed the amendment as closing precisely this loophole.

Read through an enabler-jurisdiction lens, this is a structural correction rather than an enforcement event: it removes a legal architecture that permissive out-of-state bank-partnership arrangements had exploited to route consumer lending around Oregon's own rate protections. Architecture-over-incident framing applies directly here, the significance lies in closing the enabling mechanism itself, not in any single enforcement action against a specific lender. No enforcement action taken under the new provision was identified this cycle, and the amendment's practical bite will only become visible once (or if) it is tested against a lender that previously relied on the DIDMCA rate-export structure.

This development should be read alongside, but distinguished from, Oregon's core AML/CTF architecture under ORS 717.205's money-transmitter licensing regime, which addresses a different facilitator class (money transmission and virtual-currency businesses) and was not itself affected by HB 4116. The two sit in the same general financial-integrity landscape for Oregon but address distinct enabler risks: rate-arbitrage lending structures on one hand, and unlicensed money transmission on the other.

Outlook

The key indicator to watch is whether Oregon regulators or the Attorney General bring an enforcement action against a lender that continues to rely on an out-of-state bank partnership to exceed the 36 percent cap following the June 5, 2026 effective date. Absent such action, the loophole closure remains a confirmed statutory development without yet a demonstrated enforcement track record.

D4 Conflict Finance

Not covered

Conflict Finance is not yet covered for this jurisdiction in this report.

D5 Crypto / Digital Assets / Financial Innovation

Not covered

Crypto / Digital Assets / Financial Innovation is not yet covered for this jurisdiction in this report.

D6 Compliance Technology & Active Defence

Not covered

Compliance Technology & Active Defence is not yet covered for this jurisdiction in this report.

D7 AML/CTF Regime

Not covered

AML/CTF Regime is not yet covered for this jurisdiction in this report.

D8 Commercial Activity

Not covered

Commercial Activity is not yet covered for this jurisdiction in this report.

Regulatory horizon
No dated horizon items this cycle. 4 items tracked without a confirmed date.
4 pending date · baseline fim-2026-07-05
Role action cards
MLRO

No material change this cycle.

No material change for this persona this cycle

Compliance

Oregon closed a DIDMCA rate-export loophole for internet consumer lenders, effective June 5, 2026.

Lending arrangements structured through out-of-state bank partnerships to exceed Oregon's 36 percent usury cap are no longer permitted under HB 4116, requiring a review of any Oregon consumer-lending product built on that structure.

1 evidence refs
Legal

HB 4116 removes a rate-arbitrage legal pathway that had been available to internet lenders partnering with out-of-state banks.

Legal structures relying on the closed DIDMCA rate-export gap to justify rates above Oregon's 36 percent cap carry materially higher exposure as of June 5, 2026, though no enforcement action under the new provision has yet been identified.

1 evidence refs
Board

No material change this cycle.

No material change for this persona this cycle

CTO

Oregon's money-transmitter statute continues to define money to cover virtual currency including Bitcoin, confirming crypto-asset businesses fall under the general MTL regime.

Crypto-asset transmission architecture operating in Oregon must continue to satisfy the same licensing, surety-bond, and call-report infrastructure as traditional money transmitters under ORS 717, since no bespoke crypto statute exists.

1 evidence refs
Risk

The closure of Oregon's DIDMCA rate-export loophole removes an enabler-jurisdiction risk pathway for consumer-lending rate arbitrage.

Exposure concentration tied to out-of-state bank-partnership lending structures in Oregon is reduced, though the practical risk reduction depends on subsequent enforcement uptake, which has not yet been observed.

1 evidence refs
Operations

No material change this cycle.

No material change for this persona this cycle

Audit

No material change this cycle.

No material change for this persona this cycle

Decision lens
MLRO

No material change this cycle.

Compliance

Oregon closed a DIDMCA rate-export loophole for internet consumer lenders, effective June 5, 2026.

Legal

HB 4116 removes a rate-arbitrage legal pathway that had been available to internet lenders partnering with out-of-state banks.

Board

No material change this cycle.

CTO

Oregon's money-transmitter statute continues to define money to cover virtual currency including Bitcoin, confirming crypto-asset businesses fall under the general MTL regime.

Risk

The closure of Oregon's DIDMCA rate-export loophole removes an enabler-jurisdiction risk pathway for consumer-lending rate arbitrage.

Operations

No material change this cycle.

Audit

No material change this cycle.

Shared evidence: 1 refs
Standing trackers (T1–T6)
TrackerStatusNote
T1 · Russian Sanctions-Evasion Architectureno_changeNot independently re-verified this cycle; budget concentrated on bound-JID US-OR sweep.
T2 · EU AML Package / AMLAno_changeNot applicable to bound jurisdiction US-OR; not independently re-verified this cycle.
T3 · FATF Grey Listno_changeNot independently re-verified this cycle.
T4 · Beneficial-Ownership Register Statusno_changeOregon has no state-level BO registry; operative layer is the federal Corporate Transparency Act regime.
T5 · Crypto & Digital-Asset IntegritywatchUS-OR variance confirmed: crypto businesses fall under general MTL regime (ORS 717); DFR has issued public consumer warnings on crypto/NFT scam exposure but no enforcement action was located this cycle.
T6 · Sanctions Regime Divergenceno_changeNot applicable to bound jurisdiction US-OR at state level; not independently re-verified this cycle.
Registers

Enforcement actions

  • FinCEN issued an interim final rule revising the CTA's 'reporting company' definition to cover only foreign entities, formally exempting all US-formed domestic reporting companies and their beneficial owners from BOI reporting requirements. 21 Mar 2025
  • OFAC designated more than a dozen individuals and entities responsible for converting bulk cash proceeds of US fentanyl sales into stablecoins for cross-border transfer to Mexico, dismantling a specialized cash-to-crypto laundering cell. 20 May 2026
  • Deputy Attorney General Todd Blanche issued a memorandum disbanding the National Cryptocurrency Enforcement Team and directing prosecutors to deprioritize standalone BSA/regulatory violations absent willful misconduct, refocusing resources on fraud, cartels, and terrorism financing where digital assets are used as a tool. 7 Apr 2025

Sanctions changes

  • OFAC designated the Sinaloa Cartel Los Chapitos cash-to-stablecoin laundering cell, targeting brokers who converted US fentanyl-sale cash proceeds into cryptocurrency for cross-border transfer. 20 May 2026
  • Following the White House's designation of international cartels as Foreign Terrorist Organizations and Specially Designated Global Terrorists (Jan/Feb 2025), OFAC and the State Department issued follow-on alerts targeting cartel financial networks, including fuel-theft and fentanyl-proceeds laundering schemes. 18 Mar 2025
  • FinCEN designated Huione Group, a Cambodian conglomerate, as a foreign financial institution of primary money-laundering concern under Section 311, severing it and successor entities from the US financial system after it processed over $39.6 billion in 2025. 1 Oct 2025

Regulatory horizon (register)

  • GENIUS Act stablecoin Customer Identification Program rule
  • FinCEN Investment Adviser AML Rule effective date postponed
  • Next FATF Plenary grey-list review (October 2026)
  • Potential federal marijuana rescheduling affecting Oregon cannabis banking

Active schemes

  • [HIGH] Cartel fentanyl cash-to-stablecoin laundering pipeline
  • Oregon LLC shell-company fraud layering
  • [HIGH] Crypto-kiosk elder-fraud cash-out network
  • [CRITICAL] DPRK crypto-theft proliferation financing corridor
  • [HIGH] Sanctioned terror-group crypto wallet attribution
Sources
  1. Oregon Department of Consumer and Business Services, Division of Financial Regulation
  2. Financial Crimes Enforcement Network (FinCEN)
  3. Financial Crimes Enforcement Network (FinCEN)
  4. Financial Crimes Enforcement Network (FinCEN)
  5. Chainalysis
  6. Financial Crimes Enforcement Network (FinCEN)
  7. International Consortium of Investigative Journalists (ICIJ)
  8. Organized Crime and Corruption Reporting Project (OCCRP)
  9. TRM Labs
  10. Financial Crimes Enforcement Network (FinCEN)
  11. Financial Crimes Enforcement Network (FinCEN)
  12. Financial Crimes Enforcement Network (FinCEN)
  13. Chainalysis
  14. European Commission
Coverage gaps
Publicly available federal and state enforcement-action repo…
Publicly available federal and state enforcement-action reporting specific to Oregon within the 18-month baseline window is sparse. Most identifiable enforcement touchpoints are national-level actions (CTA rule change, OFAC cartel designations, DOJ policy memo) with indirect Oregon relevance rather than Oregon-situated prosecutions or DFR supervisory orders.
FinCEN's March 2025 CTA rollback exempting all US-formed dom…
FinCEN's March 2025 CTA rollback exempting all US-formed domestic reporting companies from beneficial ownership reporting undermines transparency for Oregon-registered LLCs and corporations, which now face no federal or state-level BO disclosure obligation.
Oregon is excluded from FinCEN's expanded Southwest Border G…
Oregon is excluded from FinCEN's expanded Southwest Border Geographic Targeting Order (covering Arizona, California, New Mexico, and Texas counties), despite FinCEN's own 2024 Portland PROTECT outreach having flagged fentanyl-related BSA reporting and cash-to-crypto laundering exposure in the Pacific Northwest.
Oregon has no dedicated state-level beneficial ownership reg…
Oregon has no dedicated state-level beneficial ownership registry or public UBO transparency mechanism, unlike some peer states exploring such registries following the federal CTA's 2025 domestic-company exemption.

Evidence

Confidence-tiered claims

Sinaloa Cartel (Los Mayos faction) leadership and corruption-network individuals added to SDN List under IEEPA/EO 14059 narcotics-trafficking authority SRC-fim-MX-001
Probable · 1 source
Designated 11 individuals/entities incl. two Mexico-based companies and seven TRON blockchain addresses tied to a Tren de Aragua ATM-jackpotting/crypto-laundering scheme that stole over USD 40 million from US banks SRC-fim-MX-002
Probable · 1 source
US-OR AML/CTF standing regime rests on the federal Bank Secrecy Act (31 U.S.C. 5311 et seq.) with FinCEN as FIU, layered with Oregon's own money-transmission licensing statute (ORS Chapter 717) covering virtual-currency transmission by regulatory interpretation; no amendment identified this cycle. SRC-fim-US-OR-001
Probable · 1 source
Grey list unchanged at the June 2026 Plenary configuration (22 jurisdictions under increased monitoring); next Plenary (first under UK Presidency) expected October 2026, after this cycle's window. SRC-fim-GLOBAL-001
Probable · 1 source
increasing SRC-fim-MX-002
Probable · 1 source