Financial Integrity Monitor

United States — Maryland US-MD

Domains (D1–D6)
2
Sources
12
Role actions
8
Horizon <90d
1
Jurisdiction profile
CompliantTier ARisk: IncreasingMixed

Maryland operates under the federal Bank Secrecy Act/FinCEN AML/CFT architecture (BSA, CTA, OFAC sanctions) with no independent state AML statute; the state layer consists of money-transmitter licensing under the Maryland Financial Institutions Article administered by the Office of the Commissioner of Financial Regulation.

MoreFederal 2025 deregulatory moves (CTA domestic BOI exemption) materially thinned the transparency layer applicable to Maryland-registered entities.

Key deficiencies
  • Domestic beneficial-ownership reporting to FinCEN eliminated for U.S.-formed entities (including Maryland LLCs/trusts historically used in real-estate layering), reopening a shell-company opacity vector
  • No Maryland-specific AML statute for crypto kiosks/ATMs comparable to Iowa, Massachusetts, or D.C., despite a documented Baltimore bitcoin-kiosk-to-darknet-market laundering precedent
  • Real estate settlement professionals (title agents, attorneys) remain outside BSA AML program requirements pending the delayed nationwide Residential Real Estate Rule
Recent developments (18m)
  • FinCEN interim final rule (March 21/26, 2025) exempted all U.S.-formed 'domestic reporting companies' — including Maryland entities — from Corporate Transparency Act beneficial-ownership reporting
  • FinCEN renewed Residential Real Estate GTOs (Oct 9, 2025) continuing to cover Maryland/Baltimore-area non-financed legal-entity purchases pending the delayed nationwide RRE Rule
  • FinCEN postponed RRE Rule reporting requirements to March 1, 2026, extending the GTO-based interim regime
  • FinCEN issued a national CVC kiosk advisory (Aug 4, 2025) addressing scam/fraud typologies structurally identical to the historic Baltimore kiosk-to-AlphaBay case
  • Treasury/OFAC 'maximum pressure' campaign on Iran (NSPM-2, Feb 4, 2025) tightened the federal sanctions architecture Maryland-domiciled financial institutions must screen against
  • Maryland's junior U.S. Senator co-negotiated stablecoin/DeFi provisions in the Senate CLARITY Act markup (May 2026), directly shaping the digital-asset compliance perimeter

United States federal law that applies in United States – Maryland is covered once, on the United States page. This page covers United States – Maryland’s own layer: its own law, regulators and enforcement.

Brief

Lead signal

Lead Signal

Read full brief

Lead Signal

Maryland finalised and then expanded a state-level virtual currency kiosk control layer this cycle. COMAR 09.03.16 took permanent effect March 30, 2026, requiring NMLS-based registration of kiosk operators, blockchain-analytics wallet screening, and a designated compliance officer. SB741, Chapter 417, signed May 12, 2026 and effective October 1, 2026, broadens the definition of virtual currency kiosk operator to reach installers and operators of software that enables a stand-alone automated device to provide virtual currency services, closing a device-agnostic gap that had separated software-enabled kiosks from hardware-centric ones.

The architecture is significant beyond Maryland itself: it is a state building an AML-adjacent screening perimeter around a cash-to-crypto conversion channel that sits outside the ordinary Money Transmission Act framework, at a moment when federal beneficial-ownership transparency is narrowing rather than widening.

Other Developments

Federal beneficial-ownership scope narrowed. FinCEN's final rule, effective August 14, 2026, permanently narrows Corporate Transparency Act beneficial-ownership-information reporting to foreign reporting companies only, closing a period of interim-rule volatility that began with the March 2025 interim final rule. The statute itself remains under review before the Supreme Court in National Small Business United v. Bessent, so the narrowing is a regulatory settlement layered atop unresolved constitutional exposure, not a final word on the CTA's scope.

FATF grey list composition shifted at the June 2026 plenary. Bosnia and Herzegovina and Iraq were added; Algeria and Namibia were removed following successful on-site visits, leaving 22 jurisdictions listed. The next plenary is scheduled for October 2026 under the incoming UK Presidency.

Cambodia grey-list re-listing risk flagged, not confirmed. The National Bank of Cambodia's governor publicly warned in January 2026 of a risk of a third FATF grey-listing tied to casino-linked scam-centre finance. This is a public statement of risk, not a FATF action; it was not reflected in any FATF listing decision as of the June 2026 plenary.

Cross-Monitor Connections

The Maryland kiosk-registration and wallet-screening regime is the same underlying fact set that the crypto monitor will read through a licensing-and-consumer-protection lens and that the world-payments monitor may read through a money-transmission-perimeter lens; here the salient point is the AML-adjacent screening obligation itself, layered on top of, not substituting for, general money-transmitter licensing. The federal CTA narrowing interacts with state-level transparency measures: as the federal beneficial-ownership reporting population shrinks to foreign entities only, state-level control layers such as Maryland's kiosk registration and screening regime take on relatively greater weight within the domestic financial-integrity architecture for the products they cover.

Outlook

Watch for the October 1, 2026 effective date of SB741's kiosk-operator scope expansion in Maryland, and for whether the Commission adopts implementing guidance addressing software-only kiosk enablers ahead of that date. At the federal level, the Supreme Court's disposition of National Small Business United v. Bessent will determine whether the narrowed BOI reporting population is a durable settlement or an interim state pending further litigation. On the international side, watch the October 2026 FATF plenary under the incoming UK Presidency for whether Cambodia's publicly flagged re-listing risk materialises into a formal grey-list action, or remains an unconfirmed warning.

weekly_brief_draft · JID US-MD
Domain intelligence (D1–D6)

D1 Sanctions

Not covered

Sanctions is not yet covered for this jurisdiction in this report.

D2 Beneficial Ownership and Corporate Transparency

Beneficial Ownership and Corporate Transparency

Continue reading

FinCEN's August 11, 2026 final rule, effective August 14, 2026, makes permanent the exemption first introduced by the March 2025 interim final rule, limiting Corporate Transparency Act beneficial-ownership-information reporting to foreign reporting companies registered to do business in the United States. Domestic US companies and US persons are exempted outright. This is a structural narrowing of the federal beneficial-ownership transparency perimeter: a regime originally designed to capture beneficial-ownership data on a broad population of US-formed entities now reaches only the foreign-entity subset of that population. Litigation challenging the CTA's constitutionality, National Small Business United v. Bessent, remains pending before the Supreme Court, so the narrowed reporting population sits atop an unresolved question about the statute's ultimate validity.

Against this federal backdrop sits the durable structural architecture of the EU AML Package, relevant here as backdrop rather than as the primary subject matter for a US jurisdiction. The Package comprises three distinct instruments: the AML Regulation (Regulation (EU) 2024/1624, the AMLR), which is directly applicable across Member States without transposition; the sixth AML Directive (6AMLD), which each Member State transposes into national law; and the AMLA Regulation (Regulation (EU) 2024/1620), which establishes the Anti-Money Laundering Authority and shifts a portion of the supervisory perimeter for cross-border obliged entities from purely national authorities toward a hybrid EU-level regime combining direct AMLA supervision of the highest-risk entities with indirect AMLA oversight of national supervisors for the remainder. Globally, this EU architecture sets the direction of travel for cross-border beneficial-ownership and AML supervisory convergence; in the United States, and specifically in Maryland, the directly relevant development this cycle is the federal CTA narrowing described above rather than any EU-instrument-driven change, and no AMLA horizon anchor specific to this jurisdiction was surfaced this cycle.

The practical effect of the CTA narrowing is to shift proportional weight within the domestic transparency architecture toward state-level and sector-specific control layers, since a shrinking share of domestically formed entities now falls within federal beneficial-ownership reporting scope. No Maryland-specific beneficial-ownership registry or state-level BOI reporting obligation was identified this cycle to fill that gap; the state-level development with the most direct beneficial-ownership-adjacent relevance this cycle is instead the virtual currency kiosk registration regime, which operates through operator-level registration and screening rather than beneficial-ownership disclosure as such.

Outlook

The Supreme Court's eventual ruling in National Small Business United v. Bessent is the single development most likely to alter this picture, either by upholding the CTA and its narrowed scope as settled, or by invalidating the statute altogether and removing federal BOI reporting entirely. No date for that ruling was available this cycle. Separately, watch whether the EU's AMLA direct/indirect-supervision perimeter, once operational, generates comparative pressure on US policymakers to revisit federal beneficial-ownership scope, though no such development was evidenced this cycle.

D3 Enabler Jurisdictions

Not covered

Enabler Jurisdictions is not yet covered for this jurisdiction in this report.

D4 Conflict Finance

Not covered

Conflict Finance is not yet covered for this jurisdiction in this report.

D5 Crypto, Digital Assets, and Financial Innovation

Crypto, Digital Assets, and Financial Innovation

Continue reading

Maryland finalised a state-level, AML-adjacent control layer specific to virtual currency kiosks this cycle and then acted to broaden it before its first scope-expanding amendment even took effect. COMAR 09.03.16, the Virtual Currency Kiosks rule administered by the Maryland Office of Financial Regulation, took permanent effect March 30, 2026. It requires kiosk operators to register through the Nationwide Multistate Licensing System, to screen transactions against high-risk or sanctioned wallets using blockchain-analytics providers, and to designate a compliance officer responsible for the kiosk operation's AML-adjacent obligations. This sits alongside, and does not replace, the general licensing backstop of the Maryland Money Transmission Act (Financial Institutions Article, Title 12, Subtitle 4), which continues to apply to virtual-currency money transmission absent a kiosk-specific carve-out.

SB741, enacted as Chapter 417 and signed May 12, 2026, takes effect October 1, 2026 and closes a definitional gap in that same regime: it broadens the statutory definition of virtual currency kiosk operator to capture a person who installs or operates software enabling a stand-alone automated device to provide virtual currency services, rather than limiting the registration and screening obligations to operators of dedicated hardware kiosks. The practical effect is to bring software-enabled, device-agnostic virtual-currency dispensing arrangements within the same NMLS registration and wallet-screening perimeter that hardware kiosk operators have faced since March 2026.

The wallet-screening requirement is the clearest AML-relevant control in this regime: blockchain-analytics screening for high-risk or sanctioned wallets functions as a targeted sanctions and illicit-finance control at the cash-to-crypto conversion point, a channel that has historically drawn scrutiny for its use in laundering proceeds of scam-centre and fraud operations. Maryland's approach layers a narrow, product-specific registration and screening regime on top of general money-transmission licensing rather than adopting a comprehensive state crypto-asset statute, a pattern consistent with several other US states addressing kiosk-specific risk without legislating a general digital-asset framework.

Outlook

The most immediate date to track is October 1, 2026, when SB741's broadened kiosk-operator definition takes effect and software-enabled stand-alone device operators become subject to the same registration and screening regime as hardware kiosk operators. Whether the Office of Financial Regulation issues implementing guidance addressing the practical mechanics of software-enabled kiosk registration ahead of that date was not established this cycle. No enforcement action under COMAR 09.03.16 was identified this cycle, so the regime's practical enforcement posture remains untested in public record as at this cycle's research.

D6 Compliance Technology & Active Defence

Not covered

Compliance Technology & Active Defence is not yet covered for this jurisdiction in this report.

D7 AML/CTF Regime

Not covered

AML/CTF Regime is not yet covered for this jurisdiction in this report.

D8 Commercial Activity

Not covered

Commercial Activity is not yet covered for this jurisdiction in this report.

Regulatory horizon
In Force Pending1 Oct 2026 · ±quarter

Maryland Virtual Currency Kiosk law scope expansion effective

From October 1, 2026, entities that merely install/operate enabling software for a virtual-currency-dispensing device fall within Maryland's registration and AML-adjacent fraud-control regime.
Source
1 dated · 4 pending date · baseline financial-integrity-2026-07-05
Role action cards
MLRO

Maryland's kiosk wallet-screening mandate under COMAR 09.03.16 adds a blockchain-analytics screening control point outside standard MTL AML programs.

MLROs overseeing Maryland-touching kiosk operations should confirm blockchain-analytics screening coverage extends to any software-enabled stand-alone devices ahead of the October 1, 2026 scope expansion under SB741.

2 evidence refs
Compliance

Federal CTA beneficial-ownership reporting scope permanently narrowed to foreign reporting companies as of August 14, 2026.

Compliance functions relying on CTA BOI filings for domestic US-entity beneficial-ownership diligence should recognize that data source no longer covers domestic companies, and should identify alternative diligence sources for that population.

1 evidence refs
Legal

The Corporate Transparency Act's constitutionality remains before the Supreme Court in National Small Business United v. Bessent even as FinCEN's narrowed reporting rule takes effect.

Legal counsel should treat the narrowed BOI reporting scope as a regulatory settlement layered atop unresolved constitutional exposure, not a final resolution of the statute's validity.

1 evidence refs
Board

No material change this cycle.

No material change for this persona this cycle

CTO

Maryland's kiosk regime requires blockchain-analytics wallet screening and will reach software-enabled stand-alone devices from October 1, 2026.

Technology teams supporting kiosk or virtual-currency-dispensing device deployments in Maryland should confirm wallet-screening integration covers software-enabled deployments ahead of the October 1, 2026 effective date.

2 evidence refs
Risk

Cambodia's National Bank governor publicly warned of a third FATF grey-listing risk tied to casino-linked scam-centre finance, unconfirmed by FATF as of the June 2026 plenary.

Risk functions with Cambodia exposure should treat this as an unconfirmed forward risk signal rather than an active listing, pending the October 2026 plenary.

2 evidence refs
Operations

No material change this cycle.

No material change for this persona this cycle

Audit

Maryland's kiosk registration and screening obligations under COMAR 09.03.16 create a new auditable control point layered on general money-transmitter licensing.

Internal audit scope for Maryland kiosk operations should incorporate NMLS registration status, wallet-screening evidence, and designated compliance-officer records as distinct audit items from general MTL compliance testing.

1 evidence refs
Decision lens
MLRO

Maryland's kiosk wallet-screening mandate under COMAR 09.03.16 adds a blockchain-analytics screening control point outside standard MTL AML programs.

Compliance

Federal CTA beneficial-ownership reporting scope permanently narrowed to foreign reporting companies as of August 14, 2026.

Legal

The Corporate Transparency Act's constitutionality remains before the Supreme Court in National Small Business United v.

Board

No material change this cycle.

CTO

Maryland's kiosk regime requires blockchain-analytics wallet screening and will reach software-enabled stand-alone devices from October 1, 2026.

Risk

Cambodia's National Bank governor publicly warned of a third FATF grey-listing risk tied to casino-linked scam-centre finance, unconfirmed by FATF as of the June 2026 plenary.

Operations

No material change this cycle.

Audit

Maryland's kiosk registration and screening obligations under COMAR 09.03.16 create a new auditable control point layered on general money-transmitter licensing.

Shared evidence: 5 refs
Scenario sketches

AMLA transition and cross-border supervisory reshaping

Illustrative orientation only: as the AMLA Regulation's direct/indirect-supervision perimeter becomes operational alongside the directly-applicable AMLR and per-state 6AMLD transposition, a shift from purely national AML supervision toward a hybrid EU-level regime could alter where cross-border obliged entities locate their most sensitive compliance functions, and could change the comparative attractiveness of jurisdictions offering lighter national-only supervision. This is illustration of a structural mechanism, not an observed development in any specific jurisdiction this cycle.

Illustrative scenario for analytical orientation only. Not compliance advice, not a prediction, and not a statement of observed fact.

Standing trackers (T1–T6)
TrackerStatusNote
T1 · Russian Sanctions-Evasion ArchitecturestableNo material change found within this cycle's limited pass; routine OFAC designation activity observed.
T2 · EU AML Package / AMLAno_changeNot substantively researched this cycle.
T3 · FATF Grey Listmaterial_changeJune 17-19, 2026 plenary added Bosnia and Herzegovina and Iraq to the grey list, removed Algeria and Namibia (22 jurisdictions listed); blacklist unchanged. Next plenary October 2026 under incoming UK Presidency.
T4 · Beneficial-Ownership Register Statusmaterial_changeUS federal BOI reporting population narrowed to foreign reporting companies only via FinCEN's August 2026 final rule; constitutional challenge pending before the Supreme Court.
T5 · Crypto & Digital-Asset Integritymaterial_changeMaryland finalized COMAR 09.03.16 (Virtual Currency Kiosks), effective March 30, 2026, and SB741/Chapter 417 broadening kiosk-operator scope, effective October 1, 2026.
T6 · Sanctions Regime DivergencestableNo new EU/US/UK autonomous-listing divergence finding substantively researched this cycle beyond routine OFAC updates.
Registers

Enforcement actions

  • FinCEN renewed its Residential Real Estate Geographic Targeting Orders, continuing to require title insurance companies to identify and report beneficial owners of legal entities making non-financed residential real estate purchases in covered Maryland jurisdictions pending the nationwide RRE Rule. 9 Oct 2025
  • FinCEN postponed the effective reporting date of its Anti-Money Laundering Regulations for Residential Real Estate Transfers Rule, extending reliance on the interim GTO regime. 30 Sep 2025
  • FinCEN issued a Notice urging financial institutions to identify and report suspicious activity involving convertible virtual currency kiosks, citing fraud, cybercrime, and drug-trafficking-linked abuse patterns consistent with prior Maryland cases. 4 Aug 2025
  • OFAC issued a sanctions advisory on sham transactions used to evade sanctions, providing factors for evaluating whether property is the subject of a sham transaction — directly relevant to Maryland-based trust/corporate-services and real-estate gatekeepers. 31 Mar 2026

Sanctions changes

  • Presidential National Security Presidential Memorandum-2 directed a 'maximum pressure' campaign on Iran, reaffirming that the Government of Iran and Iranian financial institutions remain blocked persons under Executive Order 13599 and the Iranian Transactions and Sanctions Regulations, broadly prohibiting Maryland-domiciled U.S. financial institutions from any dealings with Iranian counterparties. 4 Feb 2025
  • OFAC recent-actions listings show a pattern of Russia-related designation removals alongside continued new counter-narcotics and transnational-criminal-organization designations, altering the sanctions-screening landscape for Maryland financial institutions and asset managers with global counterparty exposure. 1 Jun 2026

Regulatory horizon (register)

  • Nationwide Residential Real Estate Rule reporting takes effect
  • FinCEN AML/CFT Program NPRM comment period closes, rule refocus expected
  • CLARITY Act Senate floor vote and digital-asset market-structure regime
  • Next FATF plenary review of Jurisdictions Under Increased Monitoring

Active schemes

  • [HIGH] Real-estate layering via shell/trust structures in Maryland suburbs
  • Convertible-virtual-currency kiosk laundering/scam conduit
  • Real-estate settlement-agent gatekeeper gap in AML coverage
Sources
  1. FinCEN (U.S. Department of the Treasury)
  2. FinCEN (U.S. Department of the Treasury)
  3. FinCEN (U.S. Department of the Treasury)
  4. OCCRP
  5. OFAC (U.S. Department of the Treasury)
  6. FinCEN (U.S. Department of the Treasury)
  7. ICIJ
  8. Elliptic
  9. TRM Labs
  10. U.S. Department of the Treasury
  11. Maryland Office of the Commissioner of Financial Regulation (Maryland Department of Labor)
  12. FinCEN (U.S. Department of the Treasury)
Coverage gaps
FinCEN's March 2025 interim final rule exempted all U.S.-for…
FinCEN's March 2025 interim final rule exempted all U.S.-formed 'domestic reporting companies' and their beneficial owners from Corporate Transparency Act BOI reporting, meaning Maryland-formed LLCs and trusts — the same category of vehicle used in the Potomac real-estate laundering case — are no longer required to disclose beneficial ownership to FinCEN.
Unlike Iowa, Massachusetts, Connecticut, and the District of…
Unlike Iowa, Massachusetts, Connecticut, and the District of Columbia, Maryland has not brought a state-level enforcement action or dedicated statute against crypto-ATM/kiosk operators despite the historic Baltimore bitcoin-kiosk-to-AlphaBay case and a national surge in kiosk-facilitated elder-fraud losses.
Publicly available English-language reporting on Maryland-sp…
Publicly available English-language reporting on Maryland-specific state-level AML enforcement actions (Office of the Commissioner of Financial Regulation licensing actions, cease-and-desist orders) is sparse relative to federal FinCEN/OFAC/DOJ (D. Md.) sourcing; this baseline relies predominantly on federal primary sources supplemented by investigative journalism rather than state regulator enforcement dockets.

Evidence

Confidence-tiered claims

Maryland has no bespoke crypto- or gambling-specific AML statute; money-services and virtual-currency businesses are captured under the state's general money-transmitter licensing law, administered via NMLS, with FinCEN/BSA as the federal layer. SRC-fim-US-MD-001
Probable · 1 source