title: United States – California Payments Regulation Monitor | World Payments Monitor canonical: https://payments.gi/jurisdictions/united-states-california/ date_modified: 2026-10-21 publisher: Asymmetric Intelligence # United States – California US-CA schema world-payments-v1 trajectory: not yet assessed Last updated 2026-10-21 · 14 modules · 63 sourced findings · 111 sources in the cumulative register 14 Modules baseline.modules[] 63 Findings modules[].findings[] 17 Tier-1 sources run_metadata.t1_source_count Confidence mix (sums to 14 rendered modules; click to filter) ** United States federal law** that applies in United States – California is covered once, on the [United States](https://payments.gi/jurisdictions/united-states/) page. This page covers United States – California’s own layer: its own law, regulators and enforcement. ## Jurisdiction brief ###### Latest update · 18 October 2026 #### Lead Signal California's Digital Financial Assets Law (DFAL) became fully operative on July 1, 2026, closing the transitional window that had allowed firms with completed applications to keep serving California residents while the Department of Financial Protection and Innovation (DFPI) reviewed them. From that date, a person engaging in, or holding itself out as able to engage in, digital-financial-asset business activity with a California resident must hold a DFPI licence, have a completed application pending, or qualify for an exemption; unlicensed covered activity exposes an operator to DFPI civil penalties reported at up to $100,000 per day. DFPI's PRO 02-23 final regulations, covering licence-application requirements and a conditional Money Transmission Act exemption for fiat legs incidental to DFAL activity, took effect just two days earlier, on June 29, 2026, giving the licensing perimeter and its fiat-leg carve-out a settled, if still partly conditional, shape. In the same window, SB 97, signed June 30, 2026, repealed DFAL's stablecoin-issuer licensing provisions outright, so a stablecoin issuer operating in California no longer needs a DFAL licence at all. Taken together, the sequence reads as California tightening its grip on digital-asset business generally while stepping back from a state-specific stablecoin-licensing lane in deference to the federal GENIUS Act framework, rather than a broad deregulatory turn. #### Other Developments California's institutional architecture for financial oversight also moved this period. The state launched the Business and Consumer Services Agency (BCSA), effective July 1, 2026, restructuring financial- and consumer-services oversight and placing DFPI within it; commentary on the launch names Rohit Chopra in connection with the new agency. Separately, AB 2116, signed September 30, 2026, extends DFPI licensing, conduct and oversight to a broad range of commercial-financing providers and brokers, widening the perimeter of firms now answerable to the same regulator that administers DFAL. #### Cross-Monitor Connections The stablecoin-licensing repeal under SB 97 sits alongside the federal GENIUS Act framework referenced in the DFAL commencement reporting, meaning issuers now look to the federal regime rather than a California-specific licence for stablecoin activity; this is a boundary point worth tracking as federal stablecoin rules mature. The BCSA restructuring and AB 2116's extension of DFPI's commercial-financing perimeter both touch firms that may also carry digital-asset licences under DFAL, so licensing and institutional developments in California should be read together rather than as separate tracks this period. #### Outlook The near-term question is whether DFPI finalizes further Money Transmission Act relief for fiat legs incidental to DFAL activity, a follow-on to the PRO 02-23 regulations expected around the first quarter of 2027 but not yet settled. Firms operating under the DFAL licensing regime should expect the current licensing-application and penalty framework to remain the operative baseline, with the stablecoin carve-out now resting on continued federal GENIUS Act coverage rather than a state-level backstop. _6 earlier updates not shown here._ ###### Standing brief · as of 27 June 2026 _Written before the update above. Where they differ, the update is the more recent position._ #### Lead Signal The defining feature of the California payments environment this cycle is the convergence of two regulatory timelines that together reshape the operating economics for digital-money firms. California regulates digital money via the Digital Financial Assets Law (DFAL — AB 39 + SB 401), signed 13 October 2023, which gives the DFPI authority to license, supervise and examine digital-financial-asset businesses, custodians and stablecoin issuers; AB 1934 extended the core licensing date from 1 July 2025 to 1 July 2026, and applications are now open via NMLS. This creates a hard near-term compliance cliff: any non-exempt person engaging in digital-financial-asset business with a California resident must submit a complete DFAL application by 1 July 2026. That deadline is no longer abstract — the DFPI issued a consent order against Coinme Inc., the first enforcement action under DFAL, after finding it accepted transactions exceeding $1,000 per customer per day and omitted required receipt disclosures, ordering $51,700 restitution and a $300,000 administrative penalty. The licensing horizon and the enforcement posture now reinforce one another. Above the state layer sits the federal framework, where a correction of record matters. The federal GENIUS Act was enacted 18 July 2025; its effective date is the earlier of 18 months after enactment (18 January 2027) or 120 days after the primary federal payment-stablecoin regulators issue final regulations. As of June 2026 OCC, FDIC and Treasury have issued proposed rules but final rules are not yet adopted; there is no statutory July 2026 deadline for final regulations. This corrects an earlier misreading of the federal timeline and pins the operating expectation: federal stablecoin rules remain at NPRM stage, with the binding date governed by a formula rather than a fixed July cutoff. For firms operating across both layers, California's hard 1 July 2026 cliff arrives well ahead of any federal effective date. #### Other Developments The architecture of nonbank settlement access is under active reconstruction at the federal layer. The Federal Reserve Board voted 6-1 to advance a proposal creating a special-purpose 'Payment Account' giving fintechs, stablecoin issuers and nonbanks streamlined direct access to Fedwire, FedNow and NSS for clearing and settlement without a bank intermediary. The proposed Payment Account, proposed 20 May 2026 with comments due 27 July 2026, would let nonbanks settle directly on Fedwire, FedNow and NSS (but not FedACH), with no discount-window access, no intraday credit and closing-balance limits capped at $1bn; it is barred from correspondent banking activity and from settling on behalf of third parties. In parallel, under the 2022 Account Access Guidelines' three-tier framework, the Board is urging Reserve Banks to pause decisions on Tier 2/Tier 3 access requests until its policy-development process completes, with the pause expected to end on or before 31 December 2026. In March 2026 the Kansas City Fed approved a limited-purpose account for Kraken Financial with no intraday credit or discount-window access and an end-of-day balance limit — a template for restricted settlement access pending policy completion. The US-Mexico remittance corridor is under intensifying federal AML pressure. California's principal corridor saw US personal remittances exceed $72bn in 2024, and FinCEN renewed, with modifications, a Southwest Border Geographic Targeting Order on 6 March 2026 requiring certain MSBs to file additional CTRs on currency transactions of $1,000 or more but not more than $10,000, in addition to existing $10,000 CTR and SAR obligations. The 19 May 2026 executive order directs Treasury, FinCEN, the CFPB and federal banking agencies to reassess risks tied to non-work-authorised populations and related cross-border financial activity, with short deadlines driving rapid 2026 supervisory developments affecting remittance corridors. Illicit-finance use of these corridors is routed to the financial-crime monitor; the WPM read is on corridor compliance cost and de-risking pressure for California-origin MSBs. On open banking, the picture is one of regulatory flux. April 1, 2026 was to be the first Section 1033 compliance deadline, but a federal court has enjoined the CFPB from enforcing the rule while it undertakes reconsideration, leaving a rule that exists on paper but not in practice; the CFPB declined to defend the Biden-era rule, prompting the Financial Technology Association to intervene in support of the original rule that barred fees. #### Cross-Monitor Connections The US-Mexico remittance corridor and the broader AML program-reform agenda carry illicit-finance and sanctions significance beyond WPM scope. The renewed Southwest Border GTO, the December 2025 data-driven MSB operation, and the 19 May 2026 cross-border executive order, together with FinCEN's April 2026 AML/CFT program-reform NPRM, are flagged to the financial-crime monitor for original illicit-finance analysis. Separately, the stablecoin M&A and infrastructure build-out captured this cycle — including the Mastercard/BVNK and Ripple/Rail deals and the Rain funding round — carries potential illicit-finance integrity dimensions that are a financial-crime flag, even where payment-instrument trust itself remains a WPM concern. #### Outlook The near-term calendar is dense. The California DFAL licensing deadline falls on 1 July 2026, followed by the FinCEN AML/CFT program-reform NPRM comment close on 9 June 2026 and the Fed Payment Account comment deadline on 27 July 2026. The Tier 2/3 account-access decision pause is expected to lift on or before 31 December 2026, and the federal GENIUS Act effective date is governed by the earlier of 18 January 2027 or 120 days after final rules. Taken together, these point to a tightening California environment overlaid on a fragmenting federal layer, where settlement-access architecture, stablecoin licensing and corridor AML expectations are all in motion simultaneously. The structural direction is toward potentially reduced nonbank reliance on correspondent and sponsor banks for settlement, even as the state layer hardens enforcement against digital-money firms. trust tier: ai_unverified ###### Latest update · 18 October 2026 #### Regulatory Status California's Digital Financial Assets Law (DFAL) became fully operative on July 1, 2026, requiring a DFPI licence, a pending completed application, or an exemption for covered digital-financial-asset business activity with California residents, backed by civil penalties reported at up to $100,000 per day for unlicensed activity. DFPI's PRO 02-23 final regulations, effective June 29, 2026, set licence-application requirements and a conditional Money Transmission Act exemption for incidental fiat legs. SB 97, signed June 30, 2026, repealed DFAL's stablecoin-issuer licensing provisions, removing the DFAL licensing requirement for stablecoin issuers specifically in deference to the federal GENIUS Act. Institutionally, California launched the Business and Consumer Services Agency (BCSA) on July 1, 2026, housing DFPI within a restructured oversight body, and AB 2116, signed September 30, 2026, extended DFPI licensing and conduct oversight to commercial-financing providers and brokers. #### Outlook Whether DFPI finalizes further Money Transmission Act relief for fiat legs incidental to DFAL activity remains open, expected around the first quarter of 2027. The combination of a now fully-operative general digital-asset licensing regime, a repealed state stablecoin-licensing lane, and an expanding DFPI commercial-financing perimeter under AB 2116 and the new BCSA structure marks California's oversight of payments and digital-asset firms as broadening rather than settling into a fixed state. _1 earlier update not shown here._ ###### Standing brief · as of 27 June 2026 _Written before the update above. Where they differ, the update is the more recent position._ #### Regulatory Status California is the canonical US federalised payments case, with a state regulatory layer (DFPI under the MTA, DFAL, SB 478 and the CCFPL) sitting beneath a federal layer (FinCEN, the Federal Reserve and the CFPB). The jurisdiction risk level is elevated and the trajectory escalating, with regulatory direction tightening. Market access for non-bank firms runs through the state Money Transmission Act administered by the DFPI via NMLS, layered on FinCEN MSB registration, with no single EMI/PI regime; AB-1116 modernised the MTA effective 1 January 2024 with a Model-Law tangible-net-worth sliding scale. Conduct is governed by the CCFPL's broad UDAAP authority, with safeguarding resting on minimum net worth, eligible-securities backing including FBO accounts, and a surety bond. The escalating centre is digital money. DFAL gives the DFPI authority to license, supervise and examine digital-financial-asset businesses, custodians and stablecoin issuers, with the core licensing date extended to 1 July 2026 and applications now open via NMLS. The DFPI has already issued its first DFAL enforcement action, a consent order against Coinme Inc. ordering $51,700 restitution and a $300,000 administrative penalty. On corridors, California's principal corridor is the US-Mexico remittance corridor (US personal remittances exceeded $72bn in 2024), now under heightened FinCEN scrutiny following the renewed Southwest Border GTO of 6 March 2026 lowering the CTR threshold to $1,000. Scheme compliance combines the Italian Colors surcharge framework with SB 478 all-in pricing (effective 1 July 2024) and the Visa/Mastercard caps and Durbin debit prohibition. Consumer protection lacks an APP-fraud reimbursement mandate, resting on Regulation E, CCFPL UDAAP and the DFPI-801 complaint route, with DFAL adding crypto kiosk caps. Structurally, California is the epicentre of US payments and fintech, with the post-SVB fragmentation of startup banking now an established feature, and the commercial-intelligence picture dominated by stablecoin-payments M&A and large late-stage funding. #### Outlook The near-term calendar is dense and tightening: the DFAL crypto/stablecoin licensing deadline falls on 1 July 2026, with active DFPI enforcement signalling real downside risk, while federal cross-border AML pressure continues to bear on the US-Mexico corridor. The unresolved DFAL-MTA licensing overlap remains a live ambiguity for digital-money firms. The overall direction is a tightening state environment overlaid on a fragmenting federal layer. _Standing brief, as of 27 June 2026._ #### Regulatory Status The US federal layer sits above the California state regime and is itself elevated and escalating, with regulatory direction fragmenting. On stablecoins, the federal GENIUS Act was enacted 18 July 2025, with an effective date governed by the earlier of 18 months after enactment (18 January 2027) or 120 days after the primary federal payment-stablecoin regulators issue final regulations; OCC, FDIC and Treasury have issued NPRMs but final rules are not yet adopted, and there is no statutory July 2026 final-regulation deadline. On settlement access, the Federal Reserve Board voted 6-1 to advance a special-purpose Payment Account giving fintechs, stablecoin issuers and nonbanks direct access to Fedwire, FedNow and NSS without a bank intermediary; the proposal (proposed 20 May 2026, comments due 27 July 2026) excludes FedACH, discount-window access and intraday credit, caps closing balances at $1bn, and bars correspondent and third-party settlement activity. Tier 2/Tier 3 access decisions are paused until policy development completes, expected to end on or before 31 December 2026, with the Kraken Financial limited-purpose approval serving as a template. On open banking, the CFPB's Section 1033 rule, finalized in October 2024 with implementation originally set for April 2026, is enjoined and under reconsideration, leaving US open banking in regulatory flux. On corridors and AML, the 19 May 2026 executive order directs federal agencies to reassess cross-border financial-activity risks, and FinCEN's April 2026 AML/CFT program-reform NPRM (comments due 9 June 2026, sourced from the Sentinel feed) would reform risk-based program and supervision expectations. Operational resilience at the federal layer flows from FedNow's 24x7x365 RTGS service, with 58% of US banks using both RTP and FedNow as a multi-rail resilience strategy. #### Outlook The federal trajectory is fragmenting and escalating. Forward markers cluster in mid-to-late 2026: the FinCEN AML NPRM comment close (9 June 2026), the Fed Payment Account comment deadline (27 July 2026), the Tier 2/3 access pause expected to lift on or before 31 December 2026, and the GENIUS Act effective date governed by the earliest of 18 January 2027 or 120 days post-final-rules. The structural direction is toward broader nonbank settlement access overlaid on unresolved open-banking and stablecoin rulemaking. 14 of 14 modules Signal Density Selections OR within a group, AND across groups. Press / to search. ### W1a Licensing, Authorisation & Market Access moved Confirmed confirmed 2026-06-23 California remains a dual federal/state MTL regime with no single EMI charter. DFAL became statutorily operative Jul 1, 2026 as a distinct crypto-business licensing layer administered by DFPI, running parallel to the pre-existing MTA route. DFPI's implementing rulemaking PRO 02-23 remains disapproved by OAL (May 12, 2026) with a narrower resubmission (Jun 5, 2026) still pending. Practical effect: covered firms must hold a DFAL licence, have a completed application on file, or qualify for an exemption, but operative mechanics rest on bare statutory text pending final regulation. Movement — CHANGED BCSA restructuring launched; AB 2116 extends DFPI oversight to commercial-financing providers._Institutional reorganisation and scope expansion of DFPI licensing authority._ Standing sub-brief · as of 27 June 2026 343 words · last cycle 2026-10-18 #### Licensing, Authorisation & Market Access California is the canonical US federalised payments case for market access. California has no single EMI/PI regime; non-bank payment-firm market access runs through the state Money Transmission Act (Cal. Fin. Code Div. 1.2, §2000 et seq.), administered by the DFPI via NMLS, layered on FinCEN MSB registration. This is the defining structural feature for any non-bank PI/EMI seeking California market access: there is no consolidated payments licence equivalent to a European authorisation, but rather a state money-transmission regime sitting beneath a federal registration requirement. The new-licence filing fee is $5,000 non-refundable, surety bond ranges run $250k–$7m, and a net-worth sliding scale sets entry economics; crypto applicants are directed to the DFPI Crypto Unit. The modernisation of this regime is the key delta. AB-1116, signed 8 October 2023, amended the MTA effective 1 January 2024 to align with the Model Money Transmission Modernization Act, adopting a tangible-net-worth sliding scale (greater of $100,000 or 3% of total assets to $100m, 2% from $100m–$1bn, 0.5% above $1bn), with transition to 1 January 2025. This Model-Law alignment harmonises California with the multistate prudential approach, reducing some of the divergence cost for firms operating across several states while preserving the state-by-state licensing burden. The bank-PSP versus non-bank-PI/EMI distinction is sharp here: the MTA route applies to non-bank money transmitters, whereas chartered banks access the market through their banking authorisation rather than the transmitter regime. A live ambiguity remains in the interaction between the MTA and the digital-financial-asset licensing layer. Proposed regulations would clarify, but not automatically resolve, whether crypto activity requiring a DFAL licence also triggers MTA licensing — a licensing-overlap question of real consequence for California digital-money firms, which may face dual authorisation pathways pending regulatory clarification. #### Outlook The MTA/DFPI route is an established standing position, and AB-1116's Model-Law modernisation is now in force. The forward watch item is resolution of the DFAL-MTA boundary, which proposed regulations are expected to address but not fully settle, leaving non-bank digital-money firms to plan for potential overlapping licensing obligations into the second half of 2026. Periodic update · new data 2026-10-18 #### Licensing, Authorisation & Market Access California restructured its financial-oversight architecture this period with the launch of the Business and Consumer Services Agency (BCSA), effective July 1, 2026. The new agency houses DFPI and reorganizes financial- and consumer-services oversight more broadly; commentary on the launch names Rohit Chopra in connection with the new agency. For payment and digital-asset firms already navigating DFPI licensing, the BCSA launch is an institutional change to track alongside substantive licensing requirements, since it reshapes where oversight authority sits rather than what is required of licensees directly. Separately, AB 2116, signed September 30, 2026, extends DFPI licensing, conduct and oversight to a broad range of commercial-financing providers and brokers. This widens DFPI's regulatory perimeter beyond its existing money-transmission and digital-financial-asset remits to cover commercial-financing market access more generally, a expansion relevant to any payments or fintech group that also provides or brokers commercial financing in California. On product-specific market access, DFPI continues to treat buy-now-pay-later (BNPL) products as sitting within the existing California Financing Law framework rather than carving out a bespoke BNPL licensing regime. This is a standing regulatory position rather than a new development, but it bears on any BNPL provider assessing its California licensing pathway. #### Outlook The BCSA restructuring and AB 2116's expanded commercial-financing perimeter both point toward a California regulator with a broadening scope of licensed activity under one roof. Firms with commercial-financing, money-transmission, or digital-financial-asset lines in California should expect DFPI's oversight reach to continue widening rather than consolidating, and should watch for implementing guidance following the BCSA's institutional stand-up. **6 earlier distinct update(s)** Periodic update · new data 2026-10-09 #### Licensing, Authorisation & Market Access Californias money-transmission and digital-financial-assets licensing perimeters were both touched by regulatory action effective 29 June 2026, when the Department of Financial Protection and Innovation finalised implementing regulations under the Money Transmission Act and the Digital Financial Assets Law. These regulations formalise licence-application requirements for both regimes, which DFPI administers jointly but which remain two structurally distinct licensing perimeters: authorisation under one statute does not confer authorisation under the other. A firm conducting digital-financial-asset business and also transmitting fiat currency in California may therefore need to hold, or qualify for exemption under, both licences depending on the precise nature of its activity. Alongside the finalised regulations, DFPI has proposed, but not yet finalised, an exemption from Money Transmission Act licensing for fiat transmission that is incidental to Digital Financial Assets Law activity. This is a market-access question with direct operational consequence: a firm already licensed under DFAL for its digital-asset business cannot currently treat its associated fiat-transmission flows as automatically exempt from separate MTA licensing, because the exemption remains at the proposal stage. Firms are accordingly advised by market participants to verify their exact flows against DFPI's current, unamended licensing requirements under both statutes rather than anticipate the exemption's adoption. The practical significance of this sequencing is that it narrows rather than resolves the licensing-perimeter question for California digital-asset and payments firms. Before this rulemaking, DFAL's own operative date (1 July 2026) had already established a separate digital-financial-asset licensing requirement; the finalised MTA/DFAL regulations now clarify the application process for both regimes without yet resolving the fiat-incidental-to-DFAL overlap that the proposed exemption is designed to address. This leaves firms navigating two licensing perimeters administered by the same regulator but governed by different statutory tests, a structural feature of the California market-access landscape that merits ongoing monitoring rather than a single compliance action. #### Outlook DFPI's proposed MTA exemption for fiat transmission incidental to DFAL activity has an expected, but highly uncertain, finalisation window in the first quarter of 2027; the uncertainty band on this estimate is wide and should not be treated as a firm date. Until finalisation, or further guidance narrowing the proposal's scope, firms operating in both the money-transmission and digital-financial-asset space in California should expect to maintain separate compliance postures for each licensing perimeter. Any future DFPI guidance clarifying which fiat flows qualify as incidental to DFAL activity would be the clearest signal that the market-access question this cycle raised is moving toward resolution. Periodic update · new data 2026-10-04 #### Licensing, Authorisation & Market Access California's Digital Financial Assets Law licensing deadline of July 1, 2026 has passed, but the rulemaking meant to give the licence its implementing mechanics, PRO 02-23, remains disapproved by the Office of Administrative Law and has not been adopted. DFPI's own published FAQ material confirms that some DFAL requirements relevant to kiosk operators were already effective from January 1, 2024, and states plainly that covered digital-asset firms serving California residents must hold a DFAL licence, a completed application, or a qualifying exemption. The practical effect is that the obligation to be licensed, in application, or exempt is already in force, while the detailed rules that would normally specify how a firm demonstrates compliance are not yet finalised. This leaves covered firms operating against bare statutory text, a structurally different position from a jurisdiction where licensing obligation and implementing detail commence together. DFPI's September 2026 monthly bulletin, read alongside this, shows ordinary licensee-activity reporting with no DFAL-specific enforcement action disclosed, suggesting the regulator has not yet converted the rulemaking gap into visible enforcement pressure through that channel. The structure also sits alongside California's pre-existing Money Transmission Act licensing track, producing a dual-track regime in which digital-asset businesses must assess exposure under both frameworks without a settled picture of how DFAL's implementing rules will ultimately interact with MTA obligations. #### Outlook The variable to track is whether and when PRO 02-23 clears OAL review and is adopted; until it does, the compliance ambiguity created by an in-force licensing deadline without finalised implementing rules persists. A shift from DFPI's routine bulletin cadence toward disclosed DFAL-specific enforcement activity would be the signal that this gap has begun to bind in practice rather than remaining a latent structural ambiguity. Periodic update · new data 2026-09-22 #### Licensing, Authorisation & Market Access California's DFPI finalised the rulemaking governing the interplay between the general Money Transmission Act and the digital-asset-specific Digital Financial Assets Law, exempting DFAL-covered persons from separate MTA licensing for digital-financial-asset-related money transmission where DFAL licensing conditions are satisfied. This is a material market-access development: it removes what had been a dual-licensing burden for digital-asset payment businesses, which previously risked needing both an MTA licence and a DFAL licence to conduct overlapping activity in the state. The rulemaking arrived alongside a second post-OAL-disapproval modification to the DFAL implementing regulations, submitted to the Office of Administrative Law on March 30, 2026. That modification addresses the mechanics of the NMLS application process, surety-bond requirements, token-listing certification procedures, and ongoing reporting obligations, refining the operational detail of a licensing regime whose broad statutory shape was already settled. DFPI had opened the licence-application window on March 9, 2026 via the Nationwide Multistate Licensing System, ahead of the July 1, 2026 DFAL licensing deadline, giving applicants roughly four months to file before the deadline that has now passed. Separately, and on a distinct legislative track, the general Money Transmission Act was itself amended to adopt portions of the Model Money Transmission Modernization Act. Those amendments simplify the treatment of eligible securities held in for-benefit-of accounts and codify a requirement that a licensee provide DFPI notice within fifteen days of appointing a "key individual." This is a non-bank-PI/EMI-relevant modernisation of the general money-transmission licensing framework, distinct from but running in parallel with the DFAL-specific interplay rulemaking; both tracks pass through DFPI licensing supervision, but they address different regulatory questions, one closing a digital-asset-specific dual-licensing gap, the other modernising the baseline money-transmission licence conditions that apply to bank and non-bank payment institutions alike. Taken together, these developments consolidate California's digital-asset payments licensing regime into a clearer single-track structure for non-bank payment institutions and e-money-type intermediaries, while the underlying substantive DFAL requirements, licensing conditions, reserve rules, and consumer protections, continue to be defined through the still-active OAL modification cycle rather than a single finalised rule text. #### Outlook The rulemaking's exemption language will need to be tested against real applicant fact patterns to see how cleanly it resolves at the margins, particularly for entities engaged in activity that could plausibly fall under either statute. Continued OAL modification cycles for the DFAL implementing regulations suggest the operational detail of the licensing regime is not yet fully settled, meaning further procedural refinement to the NMLS process, bonding, or reporting requirements should be expected in coming cycles. Periodic update · new data 2026-09-14 #### Licensing, Authorisation & Market Access California's Digital Financial Assets Law reached full licensing-operative status on 2026-07-01. Digital financial asset businesses serving California residents must now hold a DFPI DFAL license or a complete pending application, absent an applicable exemption; unlicensed activity risks civil penalties of up to $100,000 per day. This is a significant new market-access gate for non-bank digital-asset businesses operating in the state, and it arrived through a multi-stage lifecycle. NMLS-based application intake for the license opened 2026-03-09, giving firms a roughly four-month window to secure licensure or a pending application ahead of the July 1 effective date. Beneath the statutory threshold, the implementing regulations that give the licensing regime its operational detail followed their own separate approval timeline: the Office of Administrative Law disapproved DFPI's proposed implementing regulations (PRO 02-23) on 2026-05-12 for technical reasons, and the revised regulations were approved on 2026-06-29, just two days before the statutory effective date took hold. This sequencing means firms preparing for the July 1 threshold were working against a regulatory-detail picture that itself was still being finalized in the final weeks before go-live, a pattern worth flagging for market-access risk assessment purposes. The practical effect of this licensing regime bears distinctly on non-bank participants. Depository institutions offering digital-asset-adjacent services typically operate under existing federal or state banking charters and are not newly captured by this licensing gate in the same way as non-bank payment institutions and e-money-type digital-asset businesses, for whom DFAL now represents the primary state-level authorisation pathway into the California market. Firms in the latter category should treat license-in-hand or a complete pending application as a hard precondition for continued or new market access as of the operative date. #### Outlook Watch for DFPI's approach to firms that submitted applications before 2026-07-01 but whose applications remain pending; the licensing regime's treatment of the pending-application safe harbor will materially affect how quickly the non-bank digital-asset market in California consolidates around licensed participants. Also watch for whether the implementing regulations' late finalization (2026-06-29) produces any transitional compliance relief or enforcement forbearance in the immediate post-effective-date period. Periodic update · new data 2026-09-08 #### Licensing, Authorisation & Market Access California's SB 505 (Money Transmission Act: authentication) advanced to third reading in the state Senate as of August 6, 2026. The bill proposes new Financial Code Division 16 provisions imposing digital-wallet-security requirements on money transmitters, with civil penalties of $5,000 per day for noncompliance attached to the new authentication mandate. This is a distinct legislative track from the DFAL crypto-licensing regime covered elsewhere on this page; SB 505 operates within the existing Money Transmission Act framework rather than creating a new licensing category. The relevant baseline against which SB 505 should be read is California's 2023 MTA modernization, enacted via AB-1116, which introduced a sliding-scale tangible net-worth requirement and expanded the statutory definition of 'key individual' for money transmitter licensees. That modernization did not directly address digital-wallet security, and SB 505 is best understood as filling that specific gap rather than superseding the broader 2023 framework. For non-bank money transmitters and payment institutions specifically — as distinct from bank-affiliated payment service providers, which sit under a different supervisory track — SB 505's authentication mandate would represent a new, specific compliance obligation layered onto the existing net-worth and key-individual requirements. As of this cycle, SB 505 remains at the third-reading stage rather than enacted; its final language, including the precise scope of the digital-wallet-security requirement and the civil-penalty mechanism, remains subject to further legislative amendment. The bill's current trajectory nonetheless signals a tightening baseline for money transmitter licensing and market access in California specifically around digital-wallet authentication. #### Outlook The development to watch is whether SB 505 clears the Senate and Assembly and reaches the Governor's desk before the end of the current legislative session, which would set a concrete effective-date timeline, estimated at 2026-Q4, for the new authentication requirements. Non-bank money transmitters and payment institutions with digital-wallet products should track the bill's final Financial Code Division 16 language closely, given the daily civil-penalty exposure currently proposed for noncompliance. Periodic update · new data 2026-08-25 #### Licensing, Authorisation & Market Access California's Digital Financial Assets Law licensing requirements became fully operative on July 1, 2026, with the application window having opened March 9, 2026 through the Nationwide Multistate Licensing System. Persons conducting digital-financial-asset business activity with California residents must now hold a DFPI license, maintain a complete pending application, or qualify for an exemption. The rulemaking path to this effective date was not smooth: the Office of Administrative Law disapproved DFPI's first final DFAL/Money Transmission Act rule in May 2026 on technical grounds. DFPI responded with a second modified rulemaking text issued June 5, 2026, accepting comments through June 22, 2026, and the Office of Administrative Law approved the revised text on June 29, 2026, just two days before the licensing regime's effective date. A significant market-access feature of the revised rule is its treatment of the Money Transmission Act overlap. DFPI's modified regulations exempt DFAL-licensed persons from separately obtaining a Money Transmission Act license for payment or proceeds transmission that is directly tied to digital-asset purchase or exchange activity, subject to a $50,000 average-daily-liability threshold and continued compliance with Money Transmission Act Chapter 5 provisions. This exemption is a material simplification of the licensing burden for digital-asset businesses whose core activity would otherwise have triggered dual licensing requirements under both frameworks, and it reflects a deliberate design choice by DFPI to avoid duplicative authorization gates for closely related activity. The bank-versus-non-bank distinction carried explicitly across this module matters directly here: DFAL's licensing gate and its MTA exemption are structured around non-bank payment institutions and e-money-equivalent digital-asset businesses rather than depository institutions, consistent with the underlying claims' tagging of nonbank_pi_emi for both the core licensing requirement and the MTA exemption. A California-chartered or federally chartered bank offering equivalent digital-asset services would sit outside this specific DFAL/MTA overlap analysis, though the underlying claims do not evidence a parallel bank-specific licensing pathway this cycle. The overall effect is a licensing and market-access regime that is now fully operative but was finalized only weeks before taking effect. #### Outlook The next cycle should clarify how DFPI applies the $50,000 average-daily-liability threshold in practice to businesses operating close to that boundary, and whether any further technical corrections to the DFAL/MTA rule text emerge now that the regime is in force. Market-access questions for non-bank payment institutions and e-money issuers entering California's digital-asset space will likely center on how cleanly the MTA exemption interacts with existing money-transmission licenses already held by multi-state payment companies. **Sources and findings (4)** 1. T1 [https://dfpi.ca.gov/regulated-industries/money-transmitters/](https://dfpi.ca.gov/regulated-industries/money-transmitters/) retrieved 2026-06-23 2. T3 [https://www.mcdermottlaw.com/insights/california-passes-portions-of-the-model-money-transmission/](https://www.mcdermottlaw.com/insights/california-passes-portions-of-the-model-money-transmission/) retrieved 2026-06-23 3. T3 [https://www.brico.ai/post/california-money-transmitter-license-step-by-step-2026-guide](https://www.brico.ai/post/california-money-transmitter-license-step-by-step-2026-guide) retrieved 2026-06-23 4. T3 [https://www.lancesuretybonds.com/blog/how-to-get-a-money-transmitter-license-in-california](https://www.lancesuretybonds.com/blog/how-to-get-a-money-transmitter-license-in-california) retrieved 2026-06-23 ### W1b Conduct, Safeguarding & Promotions Confirmed confirmed 2026-06-23 California protects payment-service users through a net-worth/surety-bond safeguarding model under the MTA and a broad conduct regime under the California Consumer Financial Protection Law (CCFPL), which empowers the DFPI to police unlawful, unfair, deceptive or abusive acts and practices (UDAAP) by financial-service providers including fintechs. Safeguarding for transmitters rests on minimum tangible net worth (historically $500,000), eligible-securities backing of outstanding obligations, and surety bonds; DFAL adds bond/trust and capital-and-liquidity requirements for crypto licensees. Standing sub-brief · as of 27 June 2026 295 words · last cycle 2026-09-05 #### Conduct, Safeguarding & Promotions California's conduct regime rests on the California Consumer Financial Protection Law (CCFPL), the foundational statute creating the modern DFPI, which grants broad authority to police unlawful, unfair, deceptive or abusive acts or practices (UDAAP) across financial-service providers, including previously unregulated fintechs. The CCFPL functions as California's de facto state-level conduct regime and analogue to the UK Consumer Duty, extending DFPI reach to firms that previously sat outside formal supervision. This authority applies to both bank-PSPs and non-bank PI/EMI providers, making it a cross-cutting conduct backstop. Safeguarding of customer funds is structured differently from European safeguarding models and is anchored in the money-transmission framework. Safeguarding for California transmitters rests on minimum net worth (commonly cited $500,000, higher for stored value or virtual currency), eligible-securities backing including FBO accounts titled for the benefit of customers, and a surety bond that must remain active for the licence period; falling below the threshold can trigger suspension. The mechanism is therefore a combination of a net-worth floor, eligible-securities backing — with FBO/trust accounts titled for the benefit of customers recognised as eligible securities — and a regulator-set surety bond in the $250k–$7m range. AB-1116 tightened the regime by including FBO-account treatment as eligible securities and adding a 15-day key-individual notice requirement. This is principally a non-bank PI/EMI safeguarding model; banks safeguard customer funds through deposit-insurance and prudential capital rather than the transmitter net-worth/surety construct. #### Outlook The CCFPL UDAAP authority and the MTA net-worth/surety/FBO-eligible-securities safeguarding model are both established standing positions. The forward direction is continued active DFPI use of UDAAP authority against fintech and crypto consumer harm, with safeguarding thresholds providing the prudential floor that can trigger suspension where breached. No new safeguarding rule change is flagged this cycle beyond the AB-1116 tightening already in force. Periodic update · new data 2026-09-08 #### Conduct, Safeguarding & Financial Promotions DFPI convened the first meeting of California's Tech Fraud Task Force on June 22, 2026, an interagency initiative operating under the Governor's Innovation Council. The Task Force brings together state agencies, technology-sector leaders, and consumer advocates specifically to address technology-enabled financial fraud, a scope that spans payments and fintech conduct issues broadly rather than being confined to any single product category or licensing regime. Read as a conduct and consumer-protection development, the Task Force's formation signals DFPI's intent to build coordinated, cross-agency infrastructure around fraud-prevention rather than relying solely on product-specific enforcement actions taken independently by different regulatory tracks. This is a distinct thread from SB 505's authentication-focused licensing amendment covered under W1a; where SB 505 targets a specific technical requirement (digital-wallet authentication) within the money transmitter licensing framework, the Task Force's remit is broader and coordination-oriented, targeting technology-enabled fraud conduct wherever it appears across the payments and fintech landscape. The Task Force's first meeting is itself the extent of the sourced development this cycle; no concrete rulemaking, guidance, or enforcement action flowing from it has yet been reported. Its practical significance for now is as a signal of sustained executive-branch attention to fraud vectors in payments and fintech, rather than as an immediately binding conduct requirement. #### Outlook The question to watch next cycle is whether the Tech Fraud Task Force produces a substantive work product — proposed conduct rules, an interagency fraud-data-sharing protocol, or coordinated enforcement guidance — or whether it remains primarily a coordination and messaging body in its early phase. Given its broad interagency composition, any concrete output is more likely to take the form of coordinated guidance across multiple regulators than a single-agency rulemaking. **Sources and findings (4)** 1. T3 [https://uslawexplained.com/california_department_of_financial_protection_and_innovation](https://uslawexplained.com/california_department_of_financial_protection_and_innovation) retrieved 2026-06-23 2. T3 [https://www.jwsuretybonds.com/states/california/money-transmitter-bond](https://www.jwsuretybonds.com/states/california/money-transmitter-bond) retrieved 2026-06-23 3. T3 [https://www.mcdermottlaw.com/insights/california-passes-portions-of-the-model-money-transmission/](https://www.mcdermottlaw.com/insights/california-passes-portions-of-the-model-money-transmission/) retrieved 2026-06-23 4. T3 [https://www.goodwinlaw.com/en/insights/publications/2024/04/insights-finance-ftec-significant-state-regulatory-development](https://www.goodwinlaw.com/en/insights/publications/2024/04/insights-finance-ftec-significant-state-regulatory-development) retrieved 2026-06-23 ### W2 Stablecoins & Digital Money moved Confirmed confirmed 2026-06-23 California regulates digital money primarily through the Digital Financial Assets Law (DFAL — AB 39 + SB 401, codified at Cal. Fin. Code §3101 et seq.), signed 13 Oct 2023, a BitLicense-style regime whose core licensing requirement takes effect 1 July 2026 (extended from 2025 by AB 1934). DFAL gives the DFPI authority to license, supervise and examine digital-financial-asset businesses, custodians and stablecoin issuers. Stablecoin activity is constrained to issuers that are DFAL-licensed/applicant or a bank/trust company, with full eligible-securities reserve backing; federal layer (GENIUS Act framework) sits above. Federally, a stablecoin framework is due from banking agencies by 18 July 2026. Movement — CHANGED DFAL fully operative; SB 97 repealed stablecoin-issuer licensing provisions._Commencement of DFAL licensing regime plus statutory repeal of stablecoin licensing in deference to the federal GENIUS Act._ Horizon · 2026-07-01 (±quarter) California DFAL crypto/stablecoin licensing deadline_in_force_pending · T3_ Horizon · 2026-07-01 (±quarter) California DFAL crypto/stablecoin licensing deadline_in_force_pending · T3_ Horizon · 2027-01 (±half_year) Federal GENIUS Act stablecoin framework effective date_consultation · T1_ Standing sub-brief · as of 27 June 2026 391 words · last cycle 2026-10-18 #### Stablecoins & Digital Money California's digital-money regime is the escalating centre of gravity this cycle. DFAL, signed 13 October 2023 (Cal. Fin. Code §3101 et seq.), gives the DFPI authority to license, supervise and examine digital-financial-asset businesses, custodians and stablecoin issuers; AB 1934 extended the core licensing date from 1 July 2025 to 1 July 2026, and applications are now open via NMLS. This is a BitLicense-style regime, and its interaction with the MTA is to be clarified — not automatically resolved — by proposed regulations. The reserve and eligible-issuer constraints are the substantive core for stablecoin transacting. DFAL bars licensees from transacting in a stablecoin unless the issuer is a DFAL applicant/licensee or a bank/trust company authorised for trust banking, and the issuer at all times owns eligible securities with aggregate market value not less than all outstanding stablecoins; issuers may not represent the stablecoin is as safe as a bank credit or stored-value product. Reserve backing is constrained to MTA-listed eligible securities, and covered exchanges must self-certify a risk assessment before listing. The federal layer sits above California DFAL, and its timeline was corrected this cycle. The federal GENIUS Act was enacted 18 July 2025; its effective date is the earlier of 18 months after enactment (18 January 2027) or 120 days after the primary federal payment-stablecoin regulators issue final regulations. As of June 2026 OCC, FDIC and Treasury have issued proposed rules (NPRMs) but final rules are not yet adopted; there is no statutory July 2026 deadline for final regulations. This correction matters operationally: firms should not plan against a July 2026 federal final-rule date, because none exists in statute. The binding near-term cliff is the California 1 July 2026 licensing deadline, which precedes any plausible federal effective date. Both bank and non-bank entities are in scope of DFAL and the federal framework, though the eligible-issuer rule privileges banks and trust companies authorised for trust banking as permitted stablecoin issuers. #### Outlook The trajectory is escalating. The California DFAL deadline (1 July 2026) is a hard, near-term horizon with applications open; the federal GENIUS Act effective date is governed by the formula of earliest of 18 January 2027 or 120 days post-final-rules, with federal rules at NPRM stage. The residual uncertainty is federal final-regulation timing, which cannot be pinned beyond the statutory formula, and the unresolved DFAL-MTA licensing overlap. Periodic update · new data 2026-10-18 #### Stablecoins & Digital Money California's Digital Financial Assets Law (DFAL) licensing requirement for digital-financial-asset business activity with California residents took full effect on July 1, 2026. From that date, a person may not engage in, or hold itself out as able to engage in, covered activity with a California resident unless it holds a DFPI licence, has a completed application pending, or qualifies for an exemption; unlicensed covered activity exposes an operator to DFPI civil penalties reported at up to $100,000 per day. DFPI's PRO 02-23 final regulations, which set out licence-application requirements and establish a conditional Money Transmission Act exemption for fiat legs incidental to DFAL activity, became effective on June 29, 2026 — two days ahead of DFAL's own commencement, giving licensees a settled application framework at the point the substantive obligation began to bite. Against that backdrop, the stablecoin-specific lane of the regime moved in the opposite direction. SB 97, signed June 30, 2026, repealed DFAL's stablecoin-issuer licensing provisions, so a stablecoin issuer operating in California is no longer required to obtain a DFAL licence. The repeal reflects deference to the federal GENIUS Act framework: rather than maintaining a parallel state licensing lane for stablecoin issuance, California has stepped back from that specific slice of DFAL's scope while leaving the general digital-financial-asset licensing regime fully in force for other covered activity. #### Outlook The open question is whether DFPI finalizes further Money Transmission Act relief for fiat legs incidental to DFAL activity, a follow-on to the PRO 02-23 regulations expected around the first quarter of 2027 but not yet settled, with the timing carrying a half-year uncertainty band. Firms handling fiat legs alongside digital-financial-asset activity should treat the current conditional exemption as the operative position until that rulemaking concludes. Stablecoin issuers should expect their California-specific compliance burden to continue to run through the federal GENIUS Act framework rather than a state DFAL licence, absent any reversal of SB 97's repeal. **Sources and findings (5)** 1. T1 [https://dfpi.ca.gov/regulated-industries/digital-financial-assets/digital-financial-assets-law-frequently-asked-questions/](https://dfpi.ca.gov/regulated-industries/digital-financial-assets/digital-financial-assets-law-frequently-asked-questions/) retrieved 2026-06-23 2. T3 [https://www.goodwinlaw.com/en/insights/publications/2024/04/insights-finance-ftec-significant-state-regulatory-development](https://www.goodwinlaw.com/en/insights/publications/2024/04/insights-finance-ftec-significant-state-regulatory-development) retrieved 2026-06-23 3. T3 [https://www.paulhastings.com/insights/client-alerts/seven-things-to-know-about-californias-new-crypto-licensing-bill](https://www.paulhastings.com/insights/client-alerts/seven-things-to-know-about-californias-new-crypto-licensing-bill) retrieved 2026-06-23 4. T3 [https://www.goodwinlaw.com/en/insights/publications/2026/04/alerts-finance-dcb-california-dfal-license-application-open](https://www.goodwinlaw.com/en/insights/publications/2026/04/alerts-finance-dcb-california-dfal-license-application-open) retrieved 2026-06-23 5. T3 [https://blog.freshfields.us/post/102lymd/2025-bank-regulatory-roundup-and-what-to-look-for-in-2026](https://blog.freshfields.us/post/102lymd/2025-bank-regulatory-roundup-and-what-to-look-for-in-2026) retrieved 2026-06-23 ### W3 Operational Resilience & Critical Infra Confirmed confirmed 2026-06-23 There is no California-specific operational-resilience regime; resilience for payments in California flows from the federal layer — the Federal Reserve's instant-payments infrastructure (FedNow) and the private RTP network, both ISO 20022-based, plus federal banking-agency operational-risk supervision. FedNow promotes resilience through redundancy/backup connections, and the dominant institutional pattern is a multi-rail (RTP + FedNow) strategy explicitly adopted for continuity. DFAL adds NIST CSF 2.0-aligned information-security expectations for crypto licensees. Kept on Dataprotection.gi, not restated here: data and cloud switching obligations on service providers, including notice periods and charges. [Open this jurisdiction's page on Dataprotection.gi →](https://dataprotection.gi/jurisdictions/united-states-california/) Standing sub-brief · as of 27 June 2026 233 words · last cycle 2026-06-27 #### Operational Resilience & Critical Infrastructure California has no dedicated state-level operational-resilience statute for payments; resilience flows primarily from the federal layer and from a single state-specific overlay attached to crypto licensing. At the federal level, FedNow is a 24x7x365 interbank RTGS service with integrated clearing that enhances payment-system safety through redundancy, allowing institutions joining multiple services to establish backup connections in case of an operational outage; 58% of US banks use both RTP and FedNow as an explicit multi-rail resilience strategy. FedNow operates under Regulation J Subpart C plus Operating Circular No. 8. This multi-rail adoption is the principal resilience mechanism available to bank-PSPs, where redundancy across instant-payment rails functions as the operating-continuity strategy. The only California-specific resilience overlay attaches to digital-financial-asset firms. A DFAL applicant must develop and maintain an information-security and operational-security program, with the DFPI assessing sufficiency following the NIST Cybersecurity Framework 2.0 — the closest California-specific operational-resilience overlay for payments-adjacent crypto firms. This applies to non-bank crypto licensees and is the state's nearest analogue to a dedicated resilience regime. #### Outlook The trajectory is established. There remains a structural gap relative to DORA-style frameworks: California resilience is inferred from federal FedNow/RTP multi-rail adoption plus the DFAL NIST CSF 2.0 infosec overlay rather than a dedicated state regime. No new state resilience statute is signalled this cycle, leaving the federal layer and the DFAL infosec requirement as the operative resilience architecture. no periodic updates on record for this sub-brief ** Sources and findings (4)** 1. T1 [https://www.federalreserve.gov/paymentsystems/fednow-additional-questions-and-answers.htm](https://www.federalreserve.gov/paymentsystems/fednow-additional-questions-and-answers.htm) retrieved 2026-06-23 2. T3 [https://www.wolterskluwer.com/en/expert-insights/navigating-fednow-and-rtp-systems](https://www.wolterskluwer.com/en/expert-insights/navigating-fednow-and-rtp-systems) retrieved 2026-06-23 3. T3 [https://www.pymnts.com/real-time-payments/2025/58percent-of-us-banks-use-both-rtp-and-fednow-for-instant-payments](https://www.pymnts.com/real-time-payments/2025/58percent-of-us-banks-use-both-rtp-and-fednow-for-instant-payments) retrieved 2026-06-23 4. T3 [https://www.goodwinlaw.com/en/insights/publications/2026/04/alerts-finance-dcb-california-dfal-license-application-open](https://www.goodwinlaw.com/en/insights/publications/2026/04/alerts-finance-dcb-california-dfal-license-application-open) retrieved 2026-06-23 ### W4 Scheme & Network Compliance Probable confirmed 2026-06-23 Card-scheme and surcharging compliance in California is shaped by a tangle of the federal Durbin Amendment (debit interchange cap and debit-surcharge prohibition), Visa/Mastercard network rules (credit surcharge caps of 3%/4%), and California-specific law. California's 1985 surcharge ban (Civil Code §1748.1) was held unenforceable after Italian Colors v. Becerra, but SB 478 (drip-pricing / 'junk fees', effective 1 July 2024) now restricts surcharges shown as separate line items, requiring all-in pricing. Debit-card surcharging remains prohibited nationwide. PCI DSS governs cardholder-data security. Standing sub-brief · as of 27 June 2026 247 words · last cycle 2026-06-27 #### Scheme & Network Compliance California surcharge compliance sits at the intersection of state law, federal statute and scheme rules. California's 1985 credit-surcharge ban (Civil Code §1748.1) was held unenforceable against similarly situated merchants by the Ninth Circuit in Italian Colors v. Becerra (2018); the Attorney General generally applies that decision while merchants remain barred from misleading customers. SB 478 (drip-pricing, effective 1 July 2024) now requires all-in pricing, restricting surcharges shown as separate line items. The combined effect is that surcharging is permitted under the Italian Colors framework but constrained in visibility by the SB 478 all-in-pricing requirement. Layered over the state position are the scheme-global and federal caps. Network rules cap credit-card surcharges at 3% (Visa) and 4% (Mastercard) — 3% effective for merchants accepting both — while debit and prepaid card surcharging is prohibited nationwide under the Durbin Amendment and card-network rules, even when debit is run as credit. This produces a tangle of federal Durbin Amendment provisions (debit cap plus debit-surcharge prohibition), Visa/Mastercard caps, and California-specific law that any merchant or acquirer must reconcile. Both bank and non-bank entities are subject to these scheme and federal constraints. #### Outlook The trajectory is stable. SB 478 all-in pricing is in force and Italian Colors governs surcharge enforceability; the scheme caps and Durbin debit prohibition are settled background rules. No new scheme rule change or surcharge-law development is flagged this cycle, but the interaction of SB 478 with the network caps continues to push surcharge visibility downward. no periodic updates on record for this sub-brief ** Sources and findings (4)** 1. T1 [https://oag.ca.gov/consumers/general/credit-card-surcharges](https://oag.ca.gov/consumers/general/credit-card-surcharges) retrieved 2026-06-23 2. T3 [https://merchantcostconsulting.com/lower-credit-card-processing-fees/california-surcharge-laws/](https://merchantcostconsulting.com/lower-credit-card-processing-fees/california-surcharge-laws/) retrieved 2026-06-23 3. T3 [https://allaypay.com/blog/credit-card-surcharge-laws-by-state/](https://allaypay.com/blog/credit-card-surcharge-laws-by-state/) 4. T3 [https://ebizcharge.com/blog/credit-card-surcharging-a-state-by-state-legal-analysis/](https://ebizcharge.com/blog/credit-card-surcharging-a-state-by-state-legal-analysis/) retrieved 2026-06-23 ### W5 Payment Corridor Dynamics Confirmed confirmed 2026-06-23 California's principal payment corridor is the US–Mexico remittance corridor (US personal remittances exceeded $72bn in 2024), with California a major origination state. Cross-border MSB activity is governed federally by FinCEN/BSA, and the corridor is under heightened scrutiny: a FinCEN Southwest Border Geographic Targeting Order (renewed March 2026) imposes a lowered CTR threshold ($1,000–$10,000) on covered MSBs, and a December 2025 'data-driven border operation' targeted 100+ MSBs. Domestic rails (ACH, Fedwire, FedNow, RTP) and a 19 May 2026 executive order on cross-border activity shape the corridor environment. Standing sub-brief · as of 27 June 2026 252 words · last cycle 2026-06-27 #### Payment Corridor Dynamics The US-Mexico remittance corridor is the principal California corridor and the escalating focus of federal supervisory pressure. California's principal corridor is the US-Mexico remittance corridor, with US personal remittances exceeding $72bn in 2024. FinCEN renewed, with modifications, a Southwest Border Geographic Targeting Order on 6 March 2026 requiring certain MSBs to file additional CTRs on currency transactions of $1,000 or more but not more than $10,000, in addition to existing $10,000 CTR and SAR obligations. This lowering of the reporting threshold materially raises the compliance burden on corridor MSBs, most of which are non-bank PI/EMI operators. The broader supervisory driver is the May 2026 executive order. The 19 May 2026 executive order directs Treasury, FinCEN, the CFPB and federal banking agencies to reassess risks tied to non-work-authorised populations and related cross-border financial activity, citing low-dollar cross-border transfers linked to illicit finance, with short deadlines driving rapid 2026 supervisory developments affecting remittance corridors. A December 2025 data-driven operation targeted 100-plus MSBs, and the May 2026 cross-border executive order drives rapid 2026 supervisory change. The WPM read is on corridor compliance cost, reporting burden and de-risking pressure; the illicit-finance use of the corridor is routed to the financial-crime monitor as a cross-reference rather than a WPM conclusion. #### Outlook The trajectory is escalating. The renewed GTO with its $1,000 CTR threshold, the December 2025 MSB operation, and the short-deadline executive order point to continued rapid supervisory change through 2026, raising compliance cost and de-risking risk for California-origin MSBs serving the US-Mexico corridor. no periodic updates on record for this sub-brief ** Sources and findings (4)** 1. T1 [https://www.fincen.gov/system/files/FinCEN_Alert_Cross_Border_FINAL508.pdf](https://www.fincen.gov/system/files/FinCEN_Alert_Cross_Border_FINAL508.pdf) retrieved 2026-06-23 2. T1 [https://www.fincen.gov/system/files/2026-03/SWB-GTO-FAQs.pdf](https://www.fincen.gov/system/files/2026-03/SWB-GTO-FAQs.pdf) retrieved 2026-06-23 3. T1 [https://home.treasury.gov/news/press-releases/sb0344](https://home.treasury.gov/news/press-releases/sb0344) retrieved 2026-06-23 4. T3 [https://www.consumerfinancemonitor.com/2026/06/01/executive-order-signals-major-shift-in-federal-expectations-for-aml-customer-identification-and-credit-underwriting/](https://www.consumerfinancemonitor.com/2026/06/01/executive-order-signals-major-shift-in-federal-expectations-for-aml-customer-identification-and-credit-underwriting/) retrieved 2026-06-23 ### W6 Industry Structure & Commercial Probable confirmed 2026-06-23 California (Silicon Valley / Bay Area) is the structural epicentre of US payments and fintech: home to Stripe, Square (Block), PayPal, Coinbase, Visa (Foster City) and a deep private-fintech base, with the market split between large platform incumbents and venture-backed infrastructure firms (embedded payments, card issuing, AI compliance). The DFPI is the state-chartered bank/credit-union regulator; the 2023 DFPI seizure of state-chartered Silicon Valley Bank reshaped the startup-banking landscape, now largely served by SVB (a division of First Citizens) and a fragmented set of state and national banks. Standing sub-brief · as of 27 June 2026 234 words · last cycle 2026-09-14 #### Industry Structure & Commercial California is the structural epicentre of US payments and fintech. California (Silicon Valley/Bay Area) is home to Stripe, Square (Block), PayPal, Coinbase and Visa (Foster City), with the market split between large platform incumbents and venture-backed infrastructure firms (embedded payments, card issuing, AI compliance). This structural and competitive landscape view is distinct from the discrete commercial events tracked in the commercial-intelligence module: the concentration of platform incumbents and infrastructure challengers in one geography is itself the analytical feature, irrespective of any individual deal. The most consequential structural shock in the recent period reshaped startup banking. Silicon Valley Bank, a California state-chartered bank that was the preferred bank of nearly half of all venture-backed tech startups, suffered a bank run and was seized on 10 March 2023 by the DFPI for inadequate liquidity and insolvency; it now operates as a division of First Citizens BancShares, with startup banking now fragmented across state and national banks. The DFPI is the state-chartered bank and credit-union regulator, and the SVB seizure reshaped the startup-banking landscape, fragmenting what had been a concentrated bank-PSP relationship across multiple institutions. #### Outlook The trajectory is stable. The Bay Area remains the structural epicentre, and the post-SVB fragmentation of startup banking is now an established feature of the landscape rather than an active disruption. Structural M&A trends are observed here, while specific announced deals are tracked in the commercial-intelligence module. Periodic update · new data 2026-09-14 #### Industry Structure & Commercial Dynamics DFPI enforcement activity intensified around the DFAL operative date in a pattern that is reshaping the competitive landscape for non-bank digital-asset businesses in California. A settlement required the operator of 42 Bitcoin ATMs to cease all California kiosk operations by 2026-05-20, following allegations spanning DFAL, the California Consumer Financial Protection Law, and AML-related concerns. This is a direct market-exit outcome driven by the newly-tightening licensing and enforcement environment, and it illustrates a broader dynamic: undercapitalized or non-compliant non-bank entrants are facing tightening market-access conditions as DFPI operationalizes its DFAL enforcement mandate around the July 2026 effective date. The bank-versus-non-bank distinction is central to reading this cycle's industry-structure signal correctly. The entities facing exit pressure and consent-order-driven market withdrawal are non-bank payment institutions and e-money-type digital-asset businesses, specifically a physical kiosk/ATM operator model, rather than depository institutions. This suggests DFPI's enforcement priorities this cycle are concentrated on the retail-facing, cash-adjacent segment of the non-bank digital-asset market, a segment that carries distinct consumer-protection and AML-adjacent risk characteristics relative to purely digital exchange or custody operations. #### Outlook The question for industry structure going into the next cycle is whether this kiosk-operator market exit is an isolated case or the first of a broader consolidation wave among non-bank digital-asset participants as DFAL's licensing and enforcement regime matures. Watch for whether other kiosk operators or smaller non-bank digital-asset businesses follow a similar exit pattern, which would signal a structural thinning of the retail-facing segment of California's non-bank digital-asset market. **Sources and findings (4)** 1. T3 [https://www.innreg.com/blog/top-fintech-companies-in-san-francisco](https://www.innreg.com/blog/top-fintech-companies-in-san-francisco) retrieved 2026-06-23 2. T3 [https://en.wikipedia.org/wiki/Silicon_Valley_Bank](https://en.wikipedia.org/wiki/Silicon_Valley_Bank) retrieved 2026-06-23 3. T3 [https://www.svb.com/](https://www.svb.com/) retrieved 2026-06-23 4. T4 [https://www.damalion.com/silicon-valley-fintech-startup-ecosystem-2026/](https://www.damalion.com/silicon-valley-fintech-startup-ecosystem-2026/) retrieved 2026-06-23 ### W7 Legal & Litigation Probable confirmed 2026-06-23 Payments litigation and enforcement affecting California spans state DFAL/CCFPL enforcement, federal open-banking litigation, and federal-access litigation. The DFPI brought its first DFAL enforcement action (Coinme, 2025) and ordered Bitcoin-ATM operators to cease operating. The CFPB's Section 1033 open-banking rule is enjoined/stayed and under reconsideration amid bank-industry litigation. Fed master-account litigation (Custodia v. FRB, 10th Cir. 2025; Banco San Juan, 2d Cir. 2026) shapes nonbank rail access. Surcharge constitutional rulings (Italian Colors) continue to govern card-acceptance practice. Standing sub-brief · as of 27 June 2026 274 words · last cycle 2026-06-27 #### Legal & Litigation Litigation and enforcement across the California payments environment are escalating on three fronts. First, enforcement: the DFPI issued a consent order against Coinme Inc. — the first enforcement action under DFAL — after finding it accepted transactions exceeding $1,000 per customer per day and omitted required receipt disclosures, ordering $51,700 restitution and a $300,000 administrative penalty. This signals an active DFPI enforcement posture on crypto-kiosk consumer harm ahead of the full licensing deadline. Second, open banking: April 1, 2026 was to be the first Section 1033 compliance deadline, but a federal court has enjoined the CFPB from enforcing the rule while it undertakes reconsideration, leaving a rule that exists on paper but not in practice; the CFPB under Vought declined to defend the Biden-era rule, prompting the Financial Technology Association to intervene in support of the original rule that barred fees. This pushes data-rights questions toward private and state-level litigation. Third, settlement access: recent appellate decisions — Custodia Bank v. Federal Reserve Board (10th Cir. 2025) and Banco San Juan Internacional v. FRB of New York (2d Cir., 13 May 2026) — frame the contested question of nonbank/novel-institution access to Federal Reserve accounts and services. This cross-links directly to the correspondent-banking and settlement-access module, where the same access question is being addressed through the Fed's Payment Account proposal. #### Outlook The trajectory is escalating across all three fronts. The Coinme action establishes an enforcement template likely to extend as the DFAL deadline approaches; the 1033 litigation leaves data-rights questions unresolved and migrating to state-level and private litigation; and the master-account litigation will continue to shape the contested boundary of nonbank settlement access. no periodic updates on record for this sub-brief ** Sources and findings (4)** 1. T3 [https://www.consumerfinancialserviceslawmonitor.com/2025/07/first-enforcement-action-taken-by-californias-department-of-financial-protection-and-innovation-under-dfal/](https://www.consumerfinancialserviceslawmonitor.com/2025/07/first-enforcement-action-taken-by-californias-department-of-financial-protection-and-innovation-under-dfal/) retrieved 2026-06-23 2. T3 [https://www.cozen.com/news-resources/publications/2026/section-1033-compliance-date-open-banking-rule-enjoined-and-under-reconsideration](https://www.cozen.com/news-resources/publications/2026/section-1033-compliance-date-open-banking-rule-enjoined-and-under-reconsideration) retrieved 2026-06-23 3. T3 [https://www.freshfields.com/en/our-thinking/blogs/a-fresh-take/knocking-at-the-feds-door-recent-executive-order-and-regulatory-proposals-signa-102n0qo](https://www.freshfields.com/en/our-thinking/blogs/a-fresh-take/knocking-at-the-feds-door-recent-executive-order-and-regulatory-proposals-signa-102n0qo) retrieved 2026-06-23 4. T3 [https://www.americanbanker.com/news/cfpb-to-issue-interim-final-rule-on-1033-open-banking](https://www.americanbanker.com/news/cfpb-to-issue-interim-final-rule-on-1033-open-banking) retrieved 2026-06-23 ### W8 Merchant Acquiring & Risk Probable confirmed 2026-06-23 Merchant acquiring in California operates under federal card-network rules (Visa/Mastercard), the Durbin Amendment for debit, PCI DSS for cardholder-data security, and California's SB 478 all-in-pricing constraint on surcharging/fee disclosure. Acquirers must block debit/prepaid surcharges automatically, cannot exceed actual cost of acceptance, and face California's aggressive consumer-protection enforcement (AG / Dept. of Consumer Affairs) on improper fees. Chargeback/dispute mechanics follow network rules; high-risk MCC treatment and merchant onboarding/KYC are governed by acquirer-bank policy under BSA. Standing sub-brief · as of 27 June 2026 194 words · last cycle 2026-08-21 #### Merchant Acquiring & Risk Merchant acquiring in California is shaped by the interaction of surcharge rules, federal debit prohibitions and the SB 478 all-in-pricing regime. A compliant surcharge program in California must detect and block debit and prepaid cards (prohibited nationwide, including signature debit run as credit) and cap the surcharge at the lower of actual cost of acceptance or network caps of 3% Visa / 4% Mastercard; SB 478 all-in pricing strictly limits surcharge visibility, pushing acquirers toward interchange-plus or all-in compliant pricing. The practical effect for acquirers is a tightening of permissible surcharge mechanics, requiring card-type detection at the point of acceptance and pricing structures that do not rely on visible separate-line-item surcharges. This affects both bank and non-bank acquiring participants, and California consumer-protection enforcement by the Attorney General and the Department of Consumer Affairs on improper fees is aggressive, raising the enforcement stakes for non-compliant surcharge programs. #### Outlook The trajectory is stable. SB 478 continues to push acquirers toward interchange-plus or all-in compliant pricing, with the debit and prepaid surcharge block remaining a mandatory control. The forward risk is enforcement-driven rather than rule-change-driven, given aggressive state consumer-protection posture on improper fees. Periodic update · new data 2026-08-25 #### Merchant Acquiring & Risk AB 831 amended Penal Code section 337o and Business and Professions Code section 17539.1, in force since January 1, 2026, to impose criminal misdemeanor exposure, of up to $25,000 per violation and up to one year in jail, on payment processors and affiliates found to knowingly support banned dual-currency sweepstakes-casino platforms. This is a dated, discrete merchant-acquiring risk development rather than a structural shift in California's payments-licensing architecture, extending direct liability to payment intermediaries servicing a now-prohibited product category. #### Outlook Payment processors and acquirers with merchant relationships touching sweepstakes-style gaming products should treat AB 831's accessory-liability provisions as an active screening consideration; no further merchant-acquiring developments were evidenced this cycle. **Sources and findings (4)** 1. T3 [https://ebizcharge.com/blog/debit-card-surcharging-is-it-legal/](https://ebizcharge.com/blog/debit-card-surcharging-is-it-legal/) retrieved 2026-06-23 2. T3 [https://allaypay.com/blog/credit-card-surcharge-laws-by-state/](https://allaypay.com/blog/credit-card-surcharge-laws-by-state/) 3. T4 [https://www.getflexpoint.com/credit-card-surcharging-us-states/california](https://www.getflexpoint.com/credit-card-surcharging-us-states/california) retrieved 2026-06-23 4. T4 [https://intellipay.com/is-it-legal-to-pass-on-credit-card-fees-to-customers/](https://intellipay.com/is-it-legal-to-pass-on-credit-card-fees-to-customers/) retrieved 2026-06-23 ### W9 Product Innovation & Market Development Confirmed confirmed 2026-06-23 California sits at the front of US payments product innovation: FedNow and RTP instant rails are live and scaling (both ISO 20022), the DFAL crypto licensing regime (live applications, 1 July 2026 deadline) is driving stablecoin and digital-asset product build-out, and open banking under CFPB Section 1033 is in flux (rule enjoined, payment-initiation scope contested). Federal moves in 2026 — an Executive Order on fintech innovation and a proposed Fed 'Payment Account' for nonbanks — are reshaping the product roadmap, alongside heavy venture funding into stablecoin, embedded-payments and AI-compliance infrastructure. Standing sub-brief · as of 27 June 2026 244 words · last cycle 2026-09-14 #### Product Innovation & Market Development Product innovation in the California and US market is being shaped by two contested regulatory threads. On open banking, the CFPB finalized its Section 1033 personal-financial-data-rights rule in October 2024 with implementation originally set to begin April 2026, but the rule is currently under litigation and reconsideration — leaving US open banking development in regulatory flux. Payment-initiation scope is contested, given the two largest global card issuers (Visa, Mastercard) are American. This regulatory uncertainty is a key constraint on US pay-by-bank product development, leaving the data-access foundation for account-to-account products unsettled. On settlement access, the Federal Reserve Board voted 6-1 to advance a proposal creating a special-purpose 'Payment Account' giving fintechs, stablecoin issuers and nonbanks streamlined direct access to Fedwire, FedNow and NSS for clearing and settlement without a bank intermediary — opening new product and infrastructure use cases. This is a thematic product-access regulatory view: the proposal could enable a new class of nonbank settlement products and infrastructure, and cross-links to the correspondent-banking module, where it could displace traditional correspondent relationships. #### Outlook The trajectory is escalating. FedNow and RTP scaling, the DFAL crypto build-out, and the Fed Payment Account proposal together open new product use cases, while the 1033 open-banking rule remains in flux. The forward watch items are resolution of the 1033 reconsideration and the progression of the Payment Account proposal from comment to rule, both of which condition the product-development landscape for account-to-account and pay-by-bank offerings. Periodic update · new data 2026-09-14 #### Product Innovation & Market Development SB 97, a California urgency statute signed 2026-06-30, repealed DFAL's provisions governing stablecoins, removing the DFAL licensing requirement for stablecoin issuers. This is a direct rail-trust-architecture change: stablecoin issuance, viewed as a payments-rail and trust-instrument category rather than purely a token-classification question, is being released from California's state-level licensing perimeter and deferred instead to the federal GENIUS Act framework. From a product-development perspective, this repeal potentially lowers the near-term state-compliance barrier to launching or continuing stablecoin issuance activity touching California, since issuers are no longer required to secure a DFAL license specifically for that activity. The repeal's product-market implication cuts in two directions simultaneously. On one hand, it removes a state-level licensing friction point that could have slowed stablecoin product development or market entry in California specifically. On the other hand, it substitutes a federal framework, the GENIUS Act, that is still in its early implementation and certification phase, meaning the regulatory certainty stablecoin issuers gain by avoiding DFAL licensing is offset by dependence on a federal certification pathway that has not yet fully matured. For product teams evaluating California market strategy for stablecoin-based payment rails, the near-term read is one of reduced state friction paired with unresolved federal-track timing. #### Outlook Watch for the pace of federal GENIUS Act certification activity as the practical determinant of how quickly stablecoin issuers can rely on the newly-cleared California pathway with full regulatory confidence. Any DFPI guidance addressing the transition period between the DFAL repeal and full federal certification would also be a significant signal for stablecoin product development strategy targeting the California market. **Sources and findings (4)** 1. T1 [https://www.congress.gov/crs-product/IF13117](https://www.congress.gov/crs-product/IF13117) retrieved 2026-06-23 2. T1 [https://www.federalreserve.gov/paymentsystems/fednow_faq.htm](https://www.federalreserve.gov/paymentsystems/fednow_faq.htm) retrieved 2026-06-23 3. T3 [https://www.foxrothschild.com/publications/the-fed-just-proposed-a-fast-track-for-fintechs-to-access-its-payment-system](https://www.foxrothschild.com/publications/the-fed-just-proposed-a-fast-track-for-fintechs-to-access-its-payment-system) retrieved 2026-06-23 4. T3 [https://www.americanbanker.com/news/the-cfpb-plans-to-kill-the-1033-rule-open-banking-lives-on](https://www.americanbanker.com/news/the-cfpb-plans-to-kill-the-1033-rule-open-banking-lives-on) retrieved 2026-06-23 ### W10 Consumer Protection & APP Fraud Confirmed confirmed 2026-06-23 Unlike the UK, the US/California has no APP-fraud mandatory-reimbursement regime; consumer protection rests on federal Regulation E (EFTA) for unauthorised electronic fund transfers and, at state level, the CCFPL's UDAAP authority plus the DFPI Consumer Services Office complaint/dispute process. The DFPI actively pursues fintech and crypto consumer harm (e.g. Coinme DFAL action; Bitcoin-ATM cease orders; Yotta fintech action). DFAL adds crypto-specific disclosure, receipt and kiosk transaction-cap consumer protections. Standing sub-brief · as of 27 June 2026 205 words · last cycle 2026-06-27 #### Consumer Protection & APP Fraud California consumer protection for payments differs structurally from the UK model on authorised-push-payment fraud. Unlike the UK, California/the US has no APP-fraud mandatory-reimbursement regime; consumer protection rests on federal Regulation E (EFTA) for unauthorised EFTs and the CCFPL's UDAAP authority plus the DFPI Consumer Services Office complaint process (Form DFPI-801). This means the consumer-protection backstop is a combination of federal unauthorised-transaction rules, state UDAAP authority and an administrative complaint route, rather than a mandated reimbursement framework for push-payment fraud. Enforcement is active across fintech and crypto. The DFPI actively pursues fintech and crypto consumer harm — including the Coinme action, Bitcoin-ATM cease orders, and the Yotta fintech action. DFAL adds crypto-specific disclosure, receipt and kiosk transaction-cap consumer protections, including a $1,000 daily cap and a fee limit of the greater of 15% or $5. These protections apply across both bank and non-bank providers, with the kiosk-specific caps targeting crypto-ATM consumer harm. #### Outlook The trajectory is established. The absence of an APP-fraud reimbursement mandate persists, with Regulation E, CCFPL UDAAP and the DFPI-801 complaint route as the operative consumer-protection architecture. The forward direction is continued active DFPI enforcement and the layering of DFAL kiosk caps as the digital-financial-asset regime takes effect. no periodic updates on record for this sub-brief ** Sources and findings (4)** 1. T1 [https://dfpi.ca.gov/](https://dfpi.ca.gov/) retrieved 2026-06-23 2. T3 [https://www.wolterskluwer.com/en/expert-insights/navigating-fednow-and-rtp-systems](https://www.wolterskluwer.com/en/expert-insights/navigating-fednow-and-rtp-systems) retrieved 2026-06-23 3. T4 [https://www.innreg.com/blog/digital-financial-assets-law](https://www.innreg.com/blog/digital-financial-assets-law) retrieved 2026-06-23 4. T1 [https://dfpi.ca.gov/wp-content/uploads/sites/337/forms/bank/DFPI-801.pdf](https://dfpi.ca.gov/wp-content/uploads/sites/337/forms/bank/DFPI-801.pdf) retrieved 2026-06-23 ### W11 AML/CFT & Financial Crime (Sentinel.gi-fed) [Sourced from Sentinel.gi ↗](https://sentinel.gi/jurisdictions/united-states-california/#sec-dom-D7) Confirmed confirmed 2026-06-23 [SENTINEL-FED] Sentinel.gi payments-context position for US-CA: AML/CFT for California payment firms is BSA-driven at the federal level (FinCEN MSB registration, AML program, SAR/CTR filing), with the US–Mexico southwest-border corridor a current high-intensity focus (renewed GTO, December 2025 data-driven MSB operation, May 2026 cross-border EO). FinCEN's April 2026 AML/CFT program-reform NPRM and CDD relief reshape program expectations. Sentinel carries this position for payments context; no original illicit-finance analysis performed here (that is FIM). Horizon · 2026-06-09 (±quarter) FinCEN AML/CFT program-reform NPRM comment close_consultation · T1_ Horizon · 2026-06-09 (±quarter) FinCEN AML/CFT program-reform NPRM comment close_consultation · T1_ Standing sub-brief · as of 27 June 2026 243 words · last cycle 2026-06-27 #### AML/CFT & Financial Crime This module is sourced from the Sentinel feed; the intelligence below is attributed to Sentinel and no original illicit-finance analysis is performed here. Per the Sentinel feed, every MSB must register with FinCEN (Form 107, renewing every two years), develop and implement a written risk-based AML program designating a compliance officer with policies, training and independent review, and file SARs for suspicious transactions of $2,000 or more — the baseline AML posture for California payment firms. This is the foundational compliance floor for the non-bank PI/EMI population that dominates California money transmission. Also per the Sentinel feed, FinCEN's April 2026 proposed rule (comments due 9 June 2026) would fundamentally reform AML/CFT program requirements to ensure 'effective' risk-based programs and modernise federal supervision in coordination with banking regulators, reflecting the AML Act 2020 mandate and recent CDD exceptive relief (February 2026). This reshapes program expectations for California payment firms across both bank and non-bank categories. Original illicit-finance analysis on these developments is routed to the financial-crime monitor; the WPM treatment is limited to the payments-context position carried from the Sentinel feed, with full detail available via the Sentinel source links. #### Outlook The trajectory is escalating per the Sentinel feed. The BSA/MSB baseline remains the standing compliance floor, while the FinCEN April 2026 AML program-reform NPRM (comment close 9 June 2026) and continued southwest-border MSB scrutiny point to evolving program expectations through 2026. Substantive illicit-finance analysis remains with the financial-crime monitor. no periodic updates on record for this sub-brief ** Sources and findings (10)** 1. T3 sentinel://https://www.buchalter.com/insights/fincen-announces-data-driven-border-operation-to-address-potential-money-laundering/ 2. T? FIM (sentinel.gi) per-JID baseline profile — United States — California — California operates under the federal BSA/AML framework (FinCEN, OFAC) plus a state overlay via the Department of Financial Protection and Innovation (DFPI), which enforces the Money Transmission Act and, from July 1, 2026, the Digital Financial Assets Law (DFAL). The state is the largest US crypto/fraud-loss jurisdiction and a major node for cartel-linked Chinese money laundering networks, DPRK IT-worker infiltration of its tech sector, and residential-real-estate/GTO-covered laundering typologies. 3. T? FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-003) — Gap: sourcing-thinness 4. T1 FIM (sentinel.gi) sanctions_change_register (issue FIM-BASE-SANC-003) — Sanctions: national listing 5. T? FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-002) — Gap: enforcement-absence 6. T2 FIM (sentinel.gi) enforcement_action_register (issue FIM-BASE-ENF-002) — Enforcement: US Attorney's Office, Northern District of California / DOJ — GOTBIT, Vortex, Antier/Contrarian principals (Operation Token Mirrors) 7. T2 FIM (sentinel.gi) enforcement_action_register (issue FIM-BASE-ENF-004) — Enforcement: OFAC — DPRK IT-worker facilitator network (six individuals, two entities including Amnokgang Technology Development Company) 8. T1 FIM (sentinel.gi) sanctions_change_register (issue FIM-BASE-SANC-004) — Sanctions: national wind-down 9. T1 FIM (sentinel.gi) enforcement_action_register (issue FIM-BASE-ENF-003) — Enforcement: US District Court, Central District of California / DOJ — Individual defendant (United States v. Su) 10. T? FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-001) — Gap: legal-gap ### W12 Correspondent Banking, Settlement & Access Probable confirmed 2026-06-23 Settlement and central-bank access for California payment firms runs through the federal Reserve Bank system: full Master Accounts (discretionary, evaluated under the 2022 Account Access Guidelines' three-tier framework) and, newly, a proposed limited-purpose 'Payment Account' for nonbanks/fintechs (proposed 20 May 2026, comments due 27 July 2026) giving direct Fedwire/FedNow/NSS settlement without intraday credit or FedACH. Nonbanks historically rely on correspondent/sponsor banks; the Payment Account could reduce that reliance. The Fed has paused Tier 2/3 access decisions until ~31 Dec 2026, and de-risking/debanking pressures are being reframed alongside BSA reform. Horizon · 2026-07-27 (±quarter) Fed 'Payment Account' proposal comment deadline_proposed · T3_ Horizon · 2026-12-31 (±half_year) Fed Tier 2/3 account-access decision pause end_in_force_pending · T3_ Standing sub-brief · as of 27 June 2026 326 words · last cycle 2026-06-27 #### Correspondent Banking, Settlement & Access The analytical spine of this module is the bank versus non-bank access asymmetry to central-bank settlement — and that asymmetry is under active reconstruction. The proposed Payment Account (proposed 20 May 2026, comments due 27 July 2026) would let fintechs and nonbanks settle directly on Fedwire, FedNow and NSS (but not FedACH), with no discount-window access, no intraday credit and closing-balance limits capped at $1bn; it is barred from correspondent banking activity and from settling on behalf of third parties — a deliberate risk-limiting constraint distinct from full Master Accounts. The design is significant: it narrows but does not eliminate the asymmetry, granting non-bank PI/EMI firms direct settlement access while withholding the credit and correspondent functions reserved to full Master Account holders. Multiple commenters noted that direct access would reduce counterparty risk and could displace traditional correspondent relationships. The access pathway for novel institutions is meanwhile partly paused. Under the 2022 Account Access Guidelines' three-tier framework, the Board is urging Reserve Banks to pause decisions on Tier 2/Tier 3 access requests until its policy-development process completes, with the pause expected to end on or before 31 December 2026. In March 2026 the Kansas City Fed approved a limited-purpose account for Kraken Financial with no intraday credit or discount-window access and an end-of-day balance limit — a template for restricted settlement access pending policy completion. For non-bank firms, the practical position is a partial freeze on full-tier access decisions, mitigated by limited-purpose templates such as the Kraken Financial approval. #### Outlook The trajectory is escalating. The Payment Account comment deadline (27 July 2026) and the Tier 2/3 access pause expected to lift on or before 31 December 2026 are the forward markers. The structural direction is toward a narrowing of the bank/non-bank settlement asymmetry, with the potential to reduce non-bank reliance on correspondent and sponsor banks for settlement — though the deliberate risk-limiting constraints preserve a meaningful gap relative to full Master Accounts. no periodic updates on record for this sub-brief ** Sources and findings (4)** 1. T3 [https://www.sullcrom.com/insights/2026/May/Executive-Order-Fintech-Innovation-Access-Federal-Reserve-Payment-Accounts](https://www.sullcrom.com/insights/2026/May/Executive-Order-Fintech-Innovation-Access-Federal-Reserve-Payment-Accounts) retrieved 2026-06-23 2. T3 [https://www.foxrothschild.com/publications/the-fed-just-proposed-a-fast-track-for-fintechs-to-access-its-payment-system](https://www.foxrothschild.com/publications/the-fed-just-proposed-a-fast-track-for-fintechs-to-access-its-payment-system) retrieved 2026-06-23 3. T3 [https://www.mayerbrown.com/en/insights/publications/2026/05/federal-reserve-access-for-fintechs-executive-order-and-federal-reserve-payment-account-proposal-signal-potential-new-era-for-fintech-payment-access](https://www.mayerbrown.com/en/insights/publications/2026/05/federal-reserve-access-for-fintechs-executive-order-and-federal-reserve-payment-account-proposal-signal-potential-new-era-for-fintech-payment-access) retrieved 2026-06-23 4. T3 [https://www.cadwalader.com/fin-news/getPDF.php?nid=143](https://www.cadwalader.com/fin-news/getPDF.php?nid=143) retrieved 2026-06-23 ### W13 Commercial Intelligence (M&A, Investment & Product) limited signal Probable confirmed 2026-06-23 Trailing-12-month (approx. June 2025–June 2026) California-relevant payments commercial activity: stablecoin and crypto-payments M&A dominated (Ripple/Rail; Mastercard/BVNK; Capital One/Brex), with large infrastructure and digital-banking funding rounds (Mercury Series D; Rain stablecoin Series C). California-headquartered targets and acquirers feature prominently (San Francisco Car IQ; LA Fasset; SF Indiegogo). Global fintech funding concentrated into fewer, larger, later-stage deals with stablecoins/agentic-payments/AI commanding outsized share. Standing sub-brief · as of 27 June 2026 283 words · last cycle 2026-09-21 #### Commercial Intelligence (M&A, Investment & Product) The commercial events this cycle cluster around stablecoin and crypto-payments infrastructure. On M&A, Mastercard announced a definitive agreement (March 2026) to acquire stablecoin start-up BVNK in a deal worth up to $1.8 billion including $300 million in contingent payments, expected to close before end of year subject to regulatory review — a stablecoin-payments acquisition by a global card scheme that signals scheme consolidation into stablecoin infrastructure. Separately, Ripple agreed to acquire Rail, a stablecoin-powered global payments platform, for $200 million, expected to close Q4 2025 subject to regulatory approvals. On funding, business banking fintech Mercury raised a $200 million Series D led by TCV (May 2026) valuing it at $5.2 billion, up 48.6% on its prior $3.5 billion valuation; Mercury landed conditional OCC approval for a US national bank charter in April 2026 — a signal of bank-PSP convergence as a non-bank PI moves toward a national bank charter. And Rain, building stablecoin payments infrastructure, raised a $250 million Series C led by Iconiq Capital (January 2026) at a $1.95 billion post-money valuation, up 17x from the prior March, amid Q1 2026 fintech funding of $12 billion across 751 deals. All four events carry disclosed values. Coverage of private-company California-relevant deals is partial: some trailing-twelve-month events with undisclosed terms were not captured as structured commercial events due to insufficient amount or party data. #### Outlook The trajectory is escalating. Stablecoin and crypto-payments M&A dominate (Mastercard/BVNK at $1.8bn and Ripple/Rail at $200m), alongside large late-stage funding rounds concentrating into fewer, larger deals (Mercury, Rain). The forward direction is continued scheme and infrastructure consolidation into stablecoin payments, with bank-charter convergence (Mercury's conditional OCC approval) as a related signal to watch. Periodic update · new data 2026-09-22 #### Commercial Intelligence & Fintech California's consolidation of its digital-asset licensing regime, through the finalised MTA/DFAL interplay rulemaking and the ongoing DFAL implementing-regulation modification cycle, is being read by industry press as a market-structure event with outsized national significance. One trade-press account describes California as home to roughly one quarter of the nation's blockchain firms, framing the state's licensing decisions as carrying influence over national digital-asset-payments market structure disproportionate to any single state's typical regulatory weight. This estimate currently rests on a single source and is held at Uncertain confidence; it has not been independently corroborated against a primary count of blockchain-firm headcount or location data, and should be treated as directional commercial context rather than a verified market-share statistic. No specific M&A transactions, funding rounds, or product launches tied to the California licensing consolidation were identified in the evidence available this cycle. The commercial-intelligence signal here is structural rather than event-based: a state licensing-regime consolidation of this kind typically precedes, rather than accompanies, discrete commercial announcements, as affected firms first resolve licensing-track questions before making public commercial commitments contingent on regulatory certainty. #### Outlook The commercial-intelligence question to watch is whether the licensing consolidation event materialises into discrete, reportable commercial activity, such as new market entrants confirming California operations under the clarified single-track licence, or existing licensees announcing expansion contingent on the now-resolved MTA/DFAL exemption. Given the scale claim attached to California's blockchain-firm concentration, even a modest wave of licensing-triggered commercial announcements would be a natural next-cycle development to track under this module. **1 earlier distinct update(s)** Periodic update · new data 2026-08-25 #### Commercial Intelligence & Fintech Governor Newsom convened the first meeting of California's Tech Fraud Task Force on June 22, 2026, co-led by DFPI. This is a dated commercial-intelligence development marking new state-level coordination on technology-enabled financial fraud rather than a specific enforcement or product event; the claim rests on a single secondary source this cycle. #### Outlook Whether the Tech Fraud Task Force produces concrete enforcement referrals, rulemaking recommendations, or public reporting in subsequent cycles is the key development to track for this module. **Sources and findings (4)** 1. T4 [https://www.privsource.com/acquisitions/payments-fintech/state/california](https://www.privsource.com/acquisitions/payments-fintech/state/california) retrieved 2026-06-23 2. T3 [https://www.fintechfutures.com/m-a/march-2026-top-five-fintech-m-a-stories-of-the-month](https://www.fintechfutures.com/m-a/march-2026-top-five-fintech-m-a-stories-of-the-month) retrieved 2026-06-23 3. T3 [https://www.fintechfutures.com/venture-capital-funding/may-2026-top-five-fintech-funding-rounds-of-the-month](https://www.fintechfutures.com/venture-capital-funding/may-2026-top-five-fintech-funding-rounds-of-the-month) retrieved 2026-06-23 4. T3 [https://news.crunchbase.com/fintech/global-startup-venture-funding-up-deals-down-q1-2026/](https://news.crunchbase.com/fintech/global-startup-venture-funding-up-deals-down-q1-2026/) retrieved 2026-06-23 ** No modules match.** Filters combine as OR inside a group and AND across groups. ## Editorial metadata Provenance only. Nothing below gates publication or affects the render. Editorial metadata for United States – California| Field | Value | |---|---| | `trust.lawyer_review.status` | never_reviewed | | `trust.lawyer_review.reviewer` | no reviewer on record | | ` trust.content_source` | ai_generated | ## Provenance and declared absence **Disclosure model:** module cards load OPEN; standing positions render in full; sub-briefs and jurisdiction briefs load as a clamped teaser with an explicit “read full” control carrying the true word count; earlier updates stay collapsed behind a counted summary. No text is hidden without disclosing how much of it there is. **Sentinel-fed modules** receive no special rendering treatment. `sentinel_feed` is an attribution chip only: it does not suppress content, does not generate an absence reason code, and does not exclude the module from any count, filter, search index or export on this page. **Family taxonomy** is renderer-level presentation config, not a JID field. Colour is always duplicated in text and is never the sole carrier of meaning. **Suppressed by doctrine:** derived risk score; per-module RAG traffic light; `derived_scores` = `{}`. **Band honesty:** uncertainty bands are computed against a frozen build clock of 2026-10-21. A year-precision row is never promoted into a tighter band. **Orphan deltas:** 0 cycle_delta row(s) target non-module objects and are listed in the rail rather than attached to a card. **Envelope:** baseline resolved at `jurisdiction_json.baseline`; 14 module(s), 63 finding(s), 111 source(s) in the cumulative register. Think something on this page is wrong? [Report an error](https://payments.gi/legal/#contact).