D1 Sanctions
Sanctions is not yet covered for this jurisdiction in this report.
Iowa AML/CTF oversight is federally anchored: money transmitters/MSBs register with FinCEN and license under Iowa Code ch.
United States federal law that applies in United States – Iowa is covered once, on the United States page. This page covers United States – Iowa’s own layer: its own law, regulators and enforcement.
Sanctions is not yet covered for this jurisdiction in this report.
Beneficial Ownership is not yet covered for this jurisdiction in this report.
Enabler Jurisdictions is not yet covered for this jurisdiction in this report.
Conflict Finance is not yet covered for this jurisdiction in this report.
Iowa's digital-financial-asset-kiosk regime centres on Iowa Code section 533C.1004, enforceable since 1 July 2025 and amended by SF 2296 on 6 May 2026. The statute requires kiosk operators to verify that the receiving wallet belongs to the customer for every transaction and caps daily transaction and fee amounts, functioning as a targeted anti-fraud control at the point of a kiosk transaction. Underpinning this is a broader classification question that guidance from the Iowa Division of Banking has now settled: virtual-currency kiosk operators are money transmitters under section 533C.301(1) and section 533C.102(19) and (28), absent an enumerated exemption. That places kiosk operators inside Iowa's general Chapter 533C money-transmission licensing perimeter rather than leaving them in a regulatory grey zone, and it is the clearest statement to date of how the state's existing financial-services licensing architecture extends to digital-asset infrastructure.
The more consequential development for the innovation and enforcement-design angle is a pending study bill, SSB3086, which would restructure how a section 533C.1004 violation is punished. Currently, the statute carries its own bespoke civil penalty of $10,000 per violation. SSB3086 would strike that bespoke schedule and instead fold enforcement into Iowa's general consumer-fraud statute, section 714.16, under which violating an Attorney General-obtained injunction carries penalties of up to $100,000. This is a study bill at the pre-enactment stage, and its primary text has not been independently retrieved this cycle; the description here rests on secondary bill-tracking coverage.
Read architecturally rather than as an isolated incident, this pairing — a settled money-transmitter classification alongside an open question about enforcement design — describes a state regulator and legislature treating digital-asset kiosks as a distinct financial-innovation surface requiring bespoke rules, even while routing licensing itself through the pre-existing general money-transmission framework rather than creating a parallel crypto-specific licence. That is a structurally significant choice: Iowa is not building new licensing infrastructure for digital assets, but it is willing to legislate bespoke substantive protections and, potentially, bespoke enforcement mechanics on top of the general licence.
The primary open question is whether SSB3086 advances past the study-bill stage, with an estimated but wide-uncertainty-band horizon of 2027 Q1. Its enactment would not alter the underlying wallet-verification or fee-cap duties, which remain fixed obligations regardless of enforcement mechanics, but it would materially raise the ceiling on penalty exposure for a violation from a fixed $10,000 figure to an injunction-backed framework capable of reaching $100,000. Confirmation of primary bill text and tracking of the bill's progress through the Iowa General Assembly are the two items most likely to resolve this uncertainty in a future cycle.
Compliance Technology & Active Defence is not yet covered for this jurisdiction in this report.
AML/CTF Regime is not yet covered for this jurisdiction in this report.
Commercial Activity is not yet covered for this jurisdiction in this report.
For MLRO oversight of any Iowa-licensed money-transmitter operating digital-asset kiosks, the underlying BSA/AML programme obligation under Chapter 533C is unaffected, but the penalty exposure for kiosk-statute violations specifically would change if SSB3086 is enacted, raising the ceiling from $10,000 to a potential $100,000 injunction-violation penalty.
Compliance functions overseeing Iowa-facing kiosk operations should treat the money-transmitter licensing obligation as confirmed and settled, while tracking SSB3086 as a live item that would change the kiosk statute's enforcement mechanics but not its substantive wallet-verification or fee-cap requirements.
Legal counsel advising Iowa-facing digital-asset kiosk operators should note that SSB3086 remains a pre-enactment study bill, and its primary text has not been independently retrieved; the legal exposure change it would introduce, if enacted, is a shift to injunction-backed penalties reaching $100,000 rather than a fixed $10,000 figure.
No material change for this persona this cycle
Technical teams supporting kiosk infrastructure touching Iowa customers should note that the wallet-verification duty under the kiosk statute is confirmed and in force; no technical architecture change is required by SSB3086 itself, since that bill addresses enforcement mechanics rather than the underlying technical control.
Risk functions modelling regulatory exposure for Iowa digital-asset kiosk operations should flag SSB3086 as a pending change that would raise the penalty ceiling for statutory violations from a fixed $10,000 figure to an injunction-backed framework reaching $100,000, while the underlying probability of enactment remains uncertain given the bill's pre-enactment stage.
No material change for this persona this cycle
Internal audit scoping control-testing for Iowa-licensed money transmitters, including digital-asset kiosk operators, should confirm the BSA/AML programme requirement is current and unaffected by SSB3086, which addresses a separate, kiosk-specific consumer-protection enforcement mechanism.
Iowa's kiosk-law enforcement mechanism may shift from a fixed civil penalty to an injunction-backed consumer-fraud framework under pending SSB3086.
IDOB guidance confirms virtual-currency kiosk operators are money transmitters under Chapter 533C absent an exemption.
SSB3086 would move kiosk-law enforcement from a bespoke civil-penalty schedule into Iowa's general consumer-fraud statute, section 714.16.
No material change this cycle.
Wallet-ownership verification remains a live technical control requirement for Iowa digital-asset kiosk infrastructure.
Iowa's kiosk-statute penalty exposure could rise materially if SSB3086 is enacted.
No material change this cycle.
Iowa money-transmitter licensees remain required to operate a BSA/AML compliance programme under the general Chapter 533C framework.
Illustrative sketch: as the AMLA Regulation (Reg (EU) 2024/1620) moves cross-border obliged entities toward direct or indirect EU-level supervision, alongside the directly-applicable AMLR (Reg 2024/1624) and per-state 6AMLD transposition, the evasion landscape could shift toward jurisdictions and entity types that remain outside AMLA's direct-supervision perimeter, testing the boundary between EU-level and national-level oversight. This is architecture-over-incident framing about a structural transition, not a description of any observed event in Iowa or elsewhere this cycle.
Illustrative scenario for analytical orientation only. Not compliance advice, not a prediction, and not a statement of observed fact.
| Tracker | Status | Note |
|---|---|---|
| T1 · Russian Sanctions-Evasion Architecture | no_change | No US-IA-specific material found this cycle. |
| T2 · EU AML Package / AMLA | no_change | Not applicable at US-IA subnational level. |
| T3 · FATF Grey List | no_change | Not applicable at US-IA subnational level. |
| T4 · Beneficial-Ownership Register Status | no_change | US federal CTA/BO regime governs; no Iowa-specific BO registry change found. |
| T5 · Crypto & Digital-Asset Integrity | material_change | Iowa's kiosk statute (533C.1004) enforcement mechanism is being amended via SSB3086; wallet-verification duty active since 1 July 2025. |
| T6 · Sanctions Regime Divergence | no_change | Not applicable at US-IA subnational level. |