Not every instrument is backed by its official text yet. At least one law or rulebook covered here has no official source (tier 1) retrieved for it yet. No finding on this page is shown with confidence above “Probable” until stronger sources are retrieved.

Financial Integrity Monitor

United States — Pennsylvania US-PA

Domains (D1–D6)
1
Sources
11
Role actions
8
Jurisdiction profile
CompliantTier BRisk: StableMixed

PA operates entirely within the federal BSA/AML architecture (FinCEN, OFAC, DOJ EDPA/MDPA/WDPA) layered with state money-transmitter licensing under the PA Department of Banking and Securities.

MoreA March 2025 domestic-company BOI exemption sharply narrowed federal beneficial-ownership visibility into PA-formed entities, while a pending FinCEN AML/CFT program-reform NPRM signals a deregulatory, effectiveness-based supervisory shift.

Key deficiencies
  • Domestic reporting-company BOI exemption removed CTA reporting duty for most PA-formed LLCs/corporations, reopening a beneficial-ownership blind spot
  • Crypto ATM/kiosk elder-fraud exploitation is nationally rising with uneven, patchwork state-level licensing and consumer-protection coverage
  • No independently confirmed PA-specific crypto-ATM consumer-protection statute despite ~18 other states enacting such laws
  • Federal AML/CFT program-reform NPRM proposes to reduce examiner discretion and shift toward reasonably-designed, risk-based programs, with uncertain near-term enforcement-intensity effects
Recent developments (18m)
  • FinCEN domestic reporting-company BOI exemption (interim final rule, March 2025) removed CTA obligations for most PA-formed entities
  • FinCEN issued a Notice on convertible virtual currency (CVC) kiosk exploitation for scam payments (Aug 2025), citing a 99% rise in FBI IC3 kiosk-fraud complaints
  • FinCEN proposed a fundamental reform of AML/CFT program rules for banks and other financial institutions (April 2026), comment period closed June 9, 2026
  • Treasury published the 2026 National Money Laundering, Terrorist Financing, and Proliferation Financing Risk Assessments (March 2026)
  • FinCEN granted Account Opening Exceptive Relief (FIN-2026-R001, Feb 13, 2026) narrowing CDD Rule beneficial-ownership verification at new account opening
  • GENIUS Act stablecoin AML/BSA framework signed into law (July 2025); joint FinCEN/OFAC implementing NPRM issued April 2026

United States federal law that applies in United States – Pennsylvania is covered once, on the United States page. This page covers United States – Pennsylvania’s own layer: its own law, regulators and enforcement.

Brief

Lead signal

Lead Signal

Read full brief

Lead Signal

The Federal Reserve Board moved on two fronts to implement the GENIUS Act's stablecoin regime on 24 September 2026, issuing NPRM Docket R-1899, which sets eligible reserve assets for payment-stablecoin issuers at cash, Federal Reserve balances, insured deposits, Treasuries of 93 days or less remaining maturity, and repo, and Docket R-1900, governing application procedures, each opening a 60-day comment period. Six days later the Treasury Department published what is reported as the first binding, effective-upon-publication GENIUS Act interim final rule. This is the most significant financial-integrity-relevant development of the cycle: it bears on the crypto-laundering and sanctions-evasion risk architecture underlying dollar-denominated stablecoin rails, and it interacts with subnational money-transmission licensing regimes, including Pennsylvania's own Act 7 of 2025 virtual-currency-transmission licensing law, though no Pennsylvania-specific development was located this cycle addressing that interaction directly.

Other Developments

Cambodia reports enforcement figures ahead of anticipated reassessment. Cambodia's Ad-Hoc Commission for Combating Online Scams reports $300 million frozen and 86 scam compounds closed between July 2025 and August 2026, including 27 sanctioned casinos, ahead of an anticipated FATF/APG reassessment. These are self-reported government figures not yet independently confirmed by FATF or APG, and analysts have expressed skepticism given reports of compound relocation into Laos.

OFAC continues its established designation pattern. OFAC's 2 October 2026 SDN list update designates Mexico-nationality individuals and entities under SDGT and Illicit-Drugs Executive Order 14059 authorities, continuing the established pattern of cartel-linked financial-facilitator designations. No divergence from the standing pattern was identified.

Cross-Monitor Connections

The GENIUS Act rulemaking is the architectural development to watch for its bearing on crypto and digital-asset regulatory monitoring broadly: reserve-asset composition and bank-subsidiary approval standards shape the integrity of the stablecoin issuance channel in ways that connect directly to crypto-market-structure tracking. For a subnational jurisdiction such as Pennsylvania, the federal rulemaking sits above an existing state money-transmission licensing perimeter, and the open question of how the Pennsylvania Department of Banking and Securities will reconcile its Act 7 of 2025 licensing regime with the federal stablecoin-issuer framework remains unresearched as of this cycle.

Outlook

The federal GENIUS Act rulemaking's 60-day comment periods, opened 24 September 2026, will run into late November 2026, ahead of a tri-agency implementation trajectory expected around the first quarter of 2027. Whether Pennsylvania issues state-level guidance addressing the interaction between its existing Act 7 licensing regime and the federal stablecoin framework before full federal implementation is the open item for this jurisdiction. Separately, Cambodia's anticipated FATF/APG reassessment remains a marker to watch for independent confirmation of the self-reported enforcement figures.

weekly_brief_draft · JID US-PA
Domain intelligence (D1–D6)

D1 Sanctions

Not covered

Sanctions is not yet covered for this jurisdiction in this report.

D2 Beneficial Ownership

Not covered

Beneficial Ownership is not yet covered for this jurisdiction in this report.

D3 Enabler Jurisdictions

Not covered

Enabler Jurisdictions is not yet covered for this jurisdiction in this report.

D4 Conflict Finance

Not covered

Conflict Finance is not yet covered for this jurisdiction in this report.

D5 Crypto / Digital Assets / Financial Innovation

Crypto / Digital Assets / Financial Innovation

Continue reading

The cycle's defining D5 development is the Federal Reserve Board's dual GENIUS Act rulemaking on 24 September 2026. NPRM Docket R-1899 sets the eligible reserve-asset universe for payment-stablecoin issuers to cash, Federal Reserve balances, insured deposits, Treasury securities with 93 days or less remaining maturity, and repo arrangements, while NPRM Docket R-1900 establishes application procedures for state member banks seeking to issue payment stablecoins through a subsidiary. Both opened 60-day comment periods. Six days later, on 30 September 2026, the Treasury Department published its first binding, effective-upon-publication GENIUS Act interim final rule, reported as the first instance of operative rather than merely proposed federal stablecoin regulation. The reserve-asset eligibility standard set by R-1899 is directly relevant to the integrity architecture of dollar-denominated stablecoin rails: a reserve composition restricted to cash, central-bank balances, insured deposits, and short-dated Treasuries narrows the asset pool available for a payment-stablecoin issuer and, by extension, narrows the channels through which reserve assets could be structured opaquely for laundering or sanctions-evasion purposes. The application-procedure rule under R-1900 similarly bears on the integrity architecture by formalizing a supervised bank-subsidiary pathway for stablecoin issuance, which creates a more traceable issuance channel than an unsupervised non-bank issuer pathway.

For this bound jurisdiction, the Pennsylvania-specific interaction with this federal architecture was not established this cycle: whether the Pennsylvania Department of Banking and Securities has issued or intends to issue guidance reconciling its own Act 7 of 2025 virtual-currency-transmission licensing law with the emerging federal stablecoin-issuer framework remains an open gap in the record. The existing Act 7 licensing perimeter, which independently requires a state licence for money transmission or virtual-currency transmission by means of a transmittal instrument for a fee, continues to apply to Pennsylvania-licensed entities regardless of the federal rulemaking's progress, but how the two layers will interact procedurally for an entity that is both a Pennsylvania-licensed transmitter and a prospective federal payment-stablecoin issuer has not yet been addressed.

Outlook

The 60-day comment periods on Dockets R-1899 and R-1900, opened 24 September 2026, will close in late November 2026. The broader implementation trajectory, spanning the Federal Reserve, OCC, and FDIC, is expected to reach fuller form around the first quarter of 2027, at which point payment-stablecoin issuers supervised by any of those three agencies will face finalized reserve-asset eligibility limits, capital and risk-management requirements, and a formal application and approval pathway. Whether Pennsylvania's Department of Banking and Securities issues guidance addressing the interaction between Act 7 licensure and the federal framework before that point remains the open item to watch for this jurisdiction.

D6 Compliance Technology & Active Defence

Not covered

Compliance Technology & Active Defence is not yet covered for this jurisdiction in this report.

D7 AML/CTF Regime

Not covered

AML/CTF Regime is not yet covered for this jurisdiction in this report.

D8 Commercial Activity

Not covered

Commercial Activity is not yet covered for this jurisdiction in this report.

Regulatory horizon
No dated horizon items this cycle. 4 items tracked without a confirmed date.
4 pending date · baseline fim-2026-07-10
Role action cards
MLRO

Federal Reserve GENIUS Act reserve-asset and application-procedure rulemaking advances alongside Treasury's first binding interim final rule.

Reserve-asset composition limits and a formal bank-subsidiary approval pathway for payment-stablecoin issuance narrow the structural channels available for opaque reserve structuring, which is directly relevant to SAR-trigger analysis for any institution engaged with stablecoin issuance or transmission.

2 evidence refs
Compliance

Federal stablecoin rulemaking interacts with subnational money-transmission licensing regimes, including Pennsylvania's Act 7 of 2025, without a confirmed reconciliation.

Entities licensed as virtual-currency transmitters under state regimes and also pursuing federal payment-stablecoin issuance face two layers of obligation whose procedural interaction has not been clarified this cycle, representing an open compliance-mapping gap.

2 evidence refs
Legal

No material change this cycle.

No material change for this persona this cycle

Board

Treasury's first binding GENIUS Act rule marks a structural shift from proposed to operative federal stablecoin regulation.

This is the first instance of binding, effective-upon-publication federal stablecoin regulation, a strategic-level regulatory-architecture change relevant to any institution with digital-asset exposure.

1 evidence refs
CTO

Federal Reserve reserve-asset eligibility rule sets technical composition standards for payment-stablecoin reserves.

Docket R-1899's restriction of eligible reserves to cash, Fed balances, insured deposits, short-dated Treasuries, and repo defines the technical architecture any stablecoin-issuing infrastructure must be built to support if pursuing Fed-supervised issuance.

1 evidence refs
Risk

GENIUS Act rulemaking is the most significant crypto/digital-asset risk-architecture movement this cycle, with an unresolved subnational interaction gap.

The reserve-asset and application-procedure rules bear on sanctions-evasion and laundering risk architecture for stablecoin rails, and the interaction with Pennsylvania's existing licensing regime is an identified gap rather than a resolved exposure.

2 evidence refs
Operations

No material change this cycle.

No material change for this persona this cycle

Audit

Treasury's binding interim final rule was reported but its full text was not independently retrieved this cycle.

The description of the rule as binding and effective-upon-publication rests on secondary reporting rather than direct verification of the Federal Register document, a documented evidentiary gap relevant to audit-trail adequacy for any finding built on this development.

1 evidence refs
Decision lens
MLRO

Federal Reserve GENIUS Act reserve-asset and application-procedure rulemaking advances alongside Treasury's first binding interim final rule.

Compliance

Federal stablecoin rulemaking interacts with subnational money-transmission licensing regimes, including Pennsylvania's Act 7 of 2025, without a confirmed reconciliation.

Legal

No material change this cycle.

Board

Treasury's first binding GENIUS Act rule marks a structural shift from proposed to operative federal stablecoin regulation.

CTO

Federal Reserve reserve-asset eligibility rule sets technical composition standards for payment-stablecoin reserves.

Risk

GENIUS Act rulemaking is the most significant crypto/digital-asset risk-architecture movement this cycle, with an unresolved subnational interaction gap.

Operations

No material change this cycle.

Audit

Treasury's binding interim final rule was reported but its full text was not independently retrieved this cycle.

Shared evidence: 2 refs
Scenario sketches

AMLA direct/indirect supervision transition and cross-border evasion architecture

Illustrative only: as the AMLA Regulation (Reg (EU) 2024/1620) moves EU cross-border obliged entities from purely national AML supervision toward a hybrid EU-level direct/indirect supervisory model, alongside the directly-applicable AMLR (Reg (EU) 2024/1624) and per-state 6AMLD transposition, the supervisory perimeter for cross-border obliged entities could shift in ways that reshape where evasion-layering activity migrates. This is architecture-over-incident framing under the intelligence register, illustrating a possible structural mechanism, not an observed fact for this cycle or this jurisdiction.

Illustrative scenario for analytical orientation only. Not compliance advice, not a prediction, and not a statement of observed fact.

Standing trackers (T1–T6)
TrackerStatusNote
T1 · Russian Sanctions-Evasion Architecturestable
T2 · EU AML Package / AMLAno_change
T3 · FATF Grey Listwatch
T4 · Beneficial-Ownership Register Statusno_change
T5 · Crypto & Digital-Asset Integritymaterial_change
T6 · Sanctions Regime Divergenceno_change
Registers

Enforcement actions

  • FinCEN consent order finding Brink's operated as an unregistered money transmitter, conducting bulk cross-border and domestic currency shipments between MSBs (including a New Jersey-registered money transmitter) without BSA/AML compliance, resolved alongside a DOJ non-prosecution agreement. 6 Feb 2025
  • Consent order finding Canaccord willfully failed to implement adequate AML trade-surveillance and CDD processes in its microcap/OTC market-making business over multiple years, despite repeated FINRA warnings dating to 2014, 2017 and 2018, enabling securities-fraud and market-manipulation proceeds to pass unreported. 1 Mar 2026
  • OFAC settlement with an attorney who maintained a professional relationship administering trust structures for a Russian oligarch after the oligarch became a Specially Designated National, illustrating how trust and legal-services gatekeepers can be used to conceal a blocked person's property interest. 9 Dec 2025
  • FinCEN granted exceptive relief (FIN-2026-R001) from the CDD Rule's requirement to identify and verify beneficial owners of legal-entity customers at each new account opening, narrowing a key backstop for beneficial-ownership visibility left vulnerable by the 2025 CTA domestic-company exemption. 13 Feb 2026

Sanctions changes

  • Executive Order (Jan 20, 2025) designated major cartels and other criminal organizations (including fentanyl-trafficking organizations active in the Mexico-US corridor affecting Pennsylvania communities) as Foreign Terrorist Organizations and Specially Designated Global Terrorists, materially expanding sanctions/material-support exposure for US financial institutions. 20 Jan 2025
  • Treasury sanctioned Iranian regime officials for violent repression and corruption (Jan 30, 2026), part of a continued maximum-pressure campaign that also touches IRGC-linked crypto/stablecoin flows flagged in FinCEN's 2026 IRGC alert. 30 Jan 2026
  • The GENIUS Act (signed July 2025) establishes the first federal stablecoin framework, treating permitted payment stablecoin issuers as BSA financial institutions and mandating OFAC sanctions-screening and AML programs; a joint FinCEN/OFAC implementing NPRM followed in April 2026. 1 Jul 2025

Regulatory horizon (register)

  • FinCEN AML/CFT Program Reform final rule
  • GENIUS Act stablecoin regime full implementation deadline
  • Next FATF Plenary review of US AML/CFT posture
  • Joint FinCEN/OFAC PPSI AML rule finalization

Active schemes

  • [HIGH] Domestic BOI exemption reopens PA shell-entity opacity
  • [HIGH] Crypto ATM/kiosk elder-fraud money-mule pipeline
  • [HIGH] Chinese money-laundering mirror-transaction cartel-cash networks
  • Broker-dealer trade-surveillance gatekeeper failure typology
Sources
  1. U.S. Department of the Treasury
  2. FinCEN
  3. FinCEN
  4. FinCEN
  5. FinCEN
  6. FinCEN
  7. OFAC
  8. Financial Action Task Force
  9. FinCEN
  10. International Consortium of Investigative Journalists (ICIJ)
  11. Pennsylvania Department of Banking and Securities
Coverage gaps
FinCEN's March 2025 exemption of domestic reporting companie…
FinCEN's March 2025 exemption of domestic reporting companies from CTA beneficial-ownership reporting removed federal BO visibility into the large stock of PA-formed LLCs and corporations; Pennsylvania itself does not maintain a state-level beneficial-ownership registry, leaving no substitute mechanism.
Approximately 18 US states have passed crypto-ATM consumer-p…
Approximately 18 US states have passed crypto-ATM consumer-protection laws or regulations as of late 2025, per AARP tracking cited in ICIJ reporting; available sourcing for this baseline could not independently confirm whether Pennsylvania is among them, nor locate PA Department of Banking and Securities enforcement statistics specific to crypto kiosk operators.
FinCEN's proposed AML/CFT program-reform rule explicitly ref…
FinCEN's proposed AML/CFT program-reform rule explicitly reframes supervisory posture toward reduced compliance burden and examiner deference to institutions' own risk-based judgment, with a stated general presumption against enforcement action where a program is properly established.
No PA-specific FATF Mutual Evaluation, ICRG follow-up, or in…
No PA-specific FATF Mutual Evaluation, ICRG follow-up, or independently published PA Department of Banking and Securities enforcement-action log was located within the available research window; FATF evaluates the United States only at the national level, and PA-specific state supervisory enforcement statistics were not independently retrievable.

Evidence

Confidence-tiered claims

NPRM Docket R-1899 sets eligible reserve assets for payment stablecoin issuers (cash, Fed balances, insured deposits, Treasuries <=93 days maturity, repo) with a 60-day comment period. SRC-fim-US-001
Probable · 1 source
Treasury published its first binding, effective-upon-publication GENIUS Act interim final rule (Fed. Reg. 2026-19966) on Sept 30, 2026. SRC-fim-US-002
Probable · 1 source
Cambodia reports $300M frozen and 86 scam compounds closed (Jul 2025-Aug 2026), including 27 sanctioned casinos, ahead of an anticipated FATF/APG reassessment. SRC-fim-KH-002
Probable · 1 source
OFAC's Oct 2, 2026 SDN list update designates Mexico-nationality individuals and entities under SDGT/ILLICIT-DRUGS-EO14059 authorities, continuing the cartel-linked financial-facilitator designation pattern. SRC-fim-MX-001
Confirmed · 1 source