title: United States – Colorado Payments Regulation Monitor | World Payments Monitor canonical: https://payments.gi/jurisdictions/united-states-colorado/ date_modified: 2026-10-21 publisher: Asymmetric Intelligence # United States – Colorado US-CO schema world-payments-v1 trajectory: not yet assessed Last updated 2026-10-21 · 14 modules · 67 sourced findings · 143 sources in the cumulative register 14 Modules baseline.modules[] 67 Findings modules[].findings[] 36 Tier-1 sources run_metadata.t1_source_count Confidence mix (sums to 14 rendered modules; click to filter) No modules moved this cycle. ** United States federal law** that applies in United States – Colorado is covered once, on the [United States](https://payments.gi/jurisdictions/united-states/) page. This page covers United States – Colorado’s own layer: its own law, regulators and enforcement. ## Jurisdiction brief ###### Latest update · 18 October 2026 #### Lead Signal Polygon Labs closed its acquisition of Coinme, and Sequence, on 14 October 2026, in a transaction reportedly worth over 250 million dollars and first announced in January 2026. The deal brought Polygon Labs 37 state money-transmitter licenses and 11 exemptions across 48 US states, including Coinme's Colorado licence. The Colorado licence carries forward an obligation created days earlier, on 8 October 2026, when Coinme entered a multistate BSA/AML consent order requiring it to exit virtual-currency kiosk operations in Colorado by 1 January 2027; that kiosk-exit obligation now attaches to Polygon Labs as the licence's new holder. #### Other Developments **Licence absorption without a fresh application.** The Coinme-to-Polygon transaction illustrates how a crypto money-transmitter's state licence portfolio, including whatever compliance obligations attach to it, moves to an acquirer through corporate acquisition rather than through a new state-level licensing process. No Colorado-specific primary source confirming the mechanics of this particular licence transfer has been located this cycle; the transfer is inferred from the acquisition's reported scope and corroborated by the Colorado Division of Banking's own publication of the underlying consent order. #### Cross-Monitor Connections The underlying BSA/AML consent order against Coinme is an AML/CFT finding properly tracked by financial-integrity; this brief treats only the commercial-intelligence dimension, the acquisition itself and its effect on Colorado's licence-holder of record, without re-analyzing the enforcement substance. The crypto monitor separately tracks the same acquisition from a crypto-licensing and sector-classification angle. #### Outlook The near-term question for Colorado's payments landscape is whether the Division of Banking issues its own confirmation of the licence transfer, and whether Polygon Labs, as the new licence holder, meets the 1 January 2027 kiosk-exit deadline inherited from the consent order. No new movement was found this cycle on a separate pending transaction, TabaPay's planned acquisition of Denver-based Transact Bank N.A., since the prior research anchor of 28 September 2026. _6 earlier updates not shown here._ ###### Standing brief · as of 8 July 2026 _Written before the update above. Where they differ, the update is the more recent position._ #### Lead Signal Colorado has enacted the most consequential overhaul of its money-transmission regime in decades. House Bill 25-1201, the Money Transmission Modernization Act, was signed April 18, 2025 and took effect August 6, 2025, repealing the state's long-standing Money Transmitters Act and replacing it with a licensing framework aligned to the Conference of State Bank Supervisors' multistate model language. Licensees face a minimum net worth of $50,000 plus $25,000 per location or agent, capped at $100,000, and a surety bond starting at $1,000,000 that can be reduced to $250,000 on financial-soundness review or raised to $2,000,000 based on transaction volume. The Act also deems permissible investments held by a licensee, even if commingled, to be held in trust for payment-instrument holders in the event of bankruptcy, and it adds change-of-control notification and review for anyone acquiring a licensee. Its broadened definition of money transmission now reaches "digital money movement," pulling stablecoin-adjacent transfer activity into the state licensing perimeter even though Colorado has no dedicated stablecoin issuance or reserve statute. #### Other Developments Two further threads dominate this cycle. The Tenth Circuit vacated its own November 2025 panel decision and granted en banc rehearing in NAIB et al. v. Weiser, the industry challenge to Colorado's DIDMCA interest-rate opt-out law, with oral argument before the full court scheduled for August 18, 2026; the scope of Colorado's opt-out authority is once again unsettled. Separately, PNC Financial Services Group's acquisition of FirstBank Holding Company, Colorado's largest independent state-chartered bank, is now fully complete: the deal legally closed January 5, 2026, and PNC finished converting 780,000 customers and 95 branches onto its systems on June 22, 2026, concentrating Denver-metro deposit and branch share under a single national acquirer. Western Union's global headquarters in Denver continues to anchor a cross-border remittance agent network spanning more than 200 countries and territories, while FedNow instant-payment access has extended to Colorado institutions through the Kansas City Fed's Denver Branch since the rail's July 2023 launch. Colorado's 2022 shift to a surcharge-permitting regime continues to operate on its own terms: sellers may add a credit-card surcharge of up to 2% of the transaction or the actual merchant discount fee, with mandatory signage and itemized receipt disclosure. Colorado's 30-day security-breach notification law remains the operative backstop for payment-card data incidents, illustrated by the 2022 Savory Spice Shop settlement of $30,000 after two breaches exposed card data belonging to nearly 14,000 customers. No dedicated Colorado chargeback or dispute-resolution statute has been identified beyond federal Regulation E/Z and card-scheme rulebooks. Denver's broader technology sector raised $3.99 billion in 2025, a 68% year-on-year increase, though that figure spans all tech sectors rather than fintech specifically. Earned-wage-access regulation under HB26-1046 remains pending before the legislature, with no enactment or effective date yet confirmed. #### Cross-Monitor Connections The Sentinel.gi payments-context feed that normally supplies this monitor's AML/CFT view of Colorado was not retrievable this collection pass, so no original illicit-finance analysis has been performed for the state this cycle; the gap has been flagged to FIM for independent confirmation of coverage. The completed PNC-FirstBank integration is a correspondent-banking and settlement-access story as much as a commercial one, reshaping which entities sit behind Colorado businesses' treasury and merchant-acquiring relationships. #### Outlook The near-term calendar is dominated by the Tenth Circuit's en banc oral argument on August 18, 2026, which will determine whether Colorado's DIDMCA opt-out authority stands as enacted or is further constrained, a question that matters well beyond Colorado for fintech lenders relying on state opt-out regimes. Watch also for whether HB26-1046 advances to enactment this session, and for the first supervisory cycles under the MTMA's enhanced multistate-examination-reliance authority, which may reduce duplicate examination burden for Colorado-licensed money transmitters operating across state lines. trust tier: ai_unverified ###### Latest update · 22 September 2026 #### Regulatory Status Colorado's payments regulatory landscape shifted materially this cycle with the effective reenactment of its money-transmission statute as the Money Transmission Modernization Act (MTMA), replacing the prior Colorado Money Transmitters Act and harmonizing with the CSBS multistate model law adopted by 31 or more states. This licensing-and-market-access development governs nonbank payment institutions and e-money institutions, including crypto-adjacent businesses whose scope was further clarified via December 2025 interim guidance from the Colorado Division of Banking. Separately, SB26-131's sports-betting funding restrictions, effective August 12, 2026, impose a payments-adjacent constraint on the gambling-payments vertical specifically, banning credit-card funding and capping daily deposits for sports-wagering accounts. #### Outlook Watch for primary-source confirmation of the MTMA's revised financial thresholds and for payment-processor adjustments to Colorado sportsbook funding-method configurations ahead of the SB26-131 effective date. _3 earlier updates not shown here._ ###### Standing brief · as of 8 July 2026 _Written before the update above. Where they differ, the update is the more recent position._ #### Regulatory Status Colorado's payments regulatory posture is tightening: the Money Transmission Modernization Act (HB25-1201) has replaced the state's decades-old money-transmitter law with a CSBS-aligned multistate licensing regime, effective August 6, 2025, materially raising the compliance and reporting burden for non-bank payment institutions. Litigation over the state's DIDMCA interest-rate opt-out law remains unsettled after the Tenth Circuit vacated its own November 2025 panel decision and granted en banc rehearing, with oral argument scheduled for August 18, 2026. Colorado's banking-market structure has been reshaped by PNC's completed acquisition and full customer and branch conversion of FirstBank Holding Company, concentrating Denver-metro deposit and branch share under a single national acquirer. Colorado remains a globally significant remittance corridor by virtue of Western Union's Denver headquarters, and it continues to operate its own statutory surcharge-cap regime alongside card-scheme rules. The Sentinel.gi AML/CFT feed was unavailable for Colorado this collection pass, leaving the module's coverage limited to structural federal MSB-registration context. #### Outlook The near-term Colorado outlook centers on the Tenth Circuit's August 18, 2026 en banc oral argument on the DIDMCA opt-out case, alongside the fate of pending earned-wage-access legislation (HB26-1046) and the first supervisory cycles under the MTMA's enhanced multistate-examination-reliance authority. 14 of 14 modules Signal Density Selections OR within a group, AND across groups. Press / to search. ### W1a Licensing, Authorisation & Market Access Confirmed confirmed 2026-07-04 Colorado regulates money transmission (including fiat-linked virtual-currency transmission) under the MTMA, C.R.S. Title 11 Art. 110 (HB25-1201), effective Aug 6, 2025. Most crypto exchanges need a Colorado MTL per the Division of Banking's Dec 18, 2025 interim guidance. Standing sub-brief · as of 8 July 2026 123 words · last cycle 2026-09-28 #### Licensing, Authorisation & Market Access Colorado's Money Transmission Modernization Act (HB25-1201) was signed April 18, 2025 and took effect August 6, 2025, repealing the prior Money Transmitters Act and replacing it with a CSBS-aligned multistate licensing regime for non-bank money transmitters. Licensees must maintain a minimum net worth of $50,000 plus $25,000 per location or agent, capped at $100,000, and post a surety bond of $1,000,000 that the Banking Board can reduce to $250,000 on financial-soundness review or increase to $2,000,000 based on transaction volume. #### Outlook The MTMA's multistate alignment is likely to ease licensing friction for money transmitters already licensed elsewhere under the CSBS model, while raising the compliance bar for smaller or newly entering non-bank payment institutions operating solely in Colorado. Periodic update · new data 2026-09-28 #### Licensing, Authorisation & Market Access Colorado's licensing and market-access framework for money transmitters, including virtual-currency businesses, was overhauled by the Money Transmission Modernization Act (HB25-1201), effective August 6, 2025. The Act repealed and reenacted C.R.S. Title 11 Article 110, replacing the prior Colorado Money Transmitters Act, and aligned the state's licensing standards with the multistate CSBS model law used across a growing number of US states, a structural move aimed at reducing friction for multistate money-transmitter licensees. The practical scope of this modernized framework for virtual-currency businesses was clarified by the Colorado Division of Banking's interim guidance, issued December 18, 2025, which states that most crypto exchanges transmitting funds on behalf of users, facilitating fiat-to-crypto conversion, or issuing stablecoins require a Colorado Money Transmitter License. This guidance resolves, at least at the interim level, the question of whether Colorado's general money-transmission licensing perimeter extends to crypto-payment intermediaries — the answer is yes for most business models captured by the definition, positioning Colorado among the US states that regulate virtual-currency payment activity through an extended traditional-money-transmission lens rather than a bespoke crypto license. A further reported feature of the modernized framework concerns financial thresholds: one industry source describes new minimum requirements of a $250,000 to $1,000,000 surety bond scaling with an applicant's assets, and a $100,000 minimum net worth, replacing legacy requirements of a flat $50,000 net worth and $1,000,000 bond. This figure comes from a Tier-3 aggregator source and has not been independently corroborated by a Tier-1 source this cycle; it should be treated as a provisional data point pending direct confirmation from the Division of Banking or the statute text, rather than a settled fact for licensing-capital planning purposes. The bank-PSP versus non-bank-PI/EMI distinction is directly relevant here: the interim guidance and the underlying MTMA licensing regime apply to non-bank money transmitters, including non-bank crypto-payment operators, as the class of entity that must obtain state authorization; the guidance does not alter licensing requirements for bank-chartered entities operating under separate federal or state banking authority. #### Outlook Watch for the Division of Banking to move its interim virtual-currency guidance toward final status, which could adjust or confirm the current scope determination for which crypto business models require MTL licensure. Independent Tier-1 confirmation of the reported financial-threshold figures (surety bond and net-worth minimums) would resolve the current sourcing gap and should be sought directly from Division of Banking guidance or the statute text before those figures are relied upon for licensing-capital planning. **5 earlier distinct update(s)** Periodic update · new data 2026-09-22 #### Licensing, Authorisation & Market Access Colorado's Money Transmission Modernization Act, enacted through HB25-1201, repealed and reenacted C.R.S. Title 11, Article 110 effective August 6, 2025, replacing the prior Colorado Money Transmitters Act. The reenacted statute harmonizes Colorado's money-transmission licensing framework with the CSBS multistate model law now adopted by 31 or more states, a structural market-access development for nonbank payment institutions and e-money institutions seeking or holding Colorado licensure. This is a nonbank-PI/EMI-facing development specifically: it governs the licensing and supervisory framework for money transmitters, distinct from bank-chartered payment providers operating under separate prudential oversight, and administered by the Colorado Division of Banking and State Banking Board. Following the reenactment, the Division of Banking issued interim guidance on December 18, 2025 clarifying which virtual-currency business models — buying, selling, or facilitating transfer of virtual currency — require MTMA licensure depending on the specific transaction model involved. This narrows what had previously been an ambiguous licensure-scope question for crypto-adjacent payment-services businesses operating the fiat-conversion leg of virtual-currency transactions, though the underlying MTMA framework does not create a bespoke crypto-licensing category; crypto-touching businesses are captured only where their activity falls within the general money-transmission definition. Secondary commentary this cycle also characterizes the MTMA as introducing new financial thresholds effective August 6, 2025, replacing legacy net-worth and bond requirements that had placed Colorado among the more stringent state bonding regimes historically. This claim carries uncertain confidence, resting on T3 secondary-commentary sources rather than independently confirmed T1 statute text, and the specific threshold figures should be treated as provisional pending primary-source confirmation next cycle. #### Outlook Watch for primary-source confirmation of the MTMA's specific financial-threshold figures, and for whether the December 2025 interim crypto guidance is followed by further Division of Banking rulemaking that more precisely delineates virtual-currency business-model scope under the statute. Periodic update · new data 2026-09-14 #### Licensing, Authorisation & Market Access Colorado's money-transmission licensing regime was recast by the Money Transmission Modernization Act (HB25-1201), effective August 6, 2025, replacing the state's prior money transmitter law. The new regime broadened the definition of regulated money-transmission activity to explicitly cover digital money movement and payroll processing, a material expansion of the licensing perimeter with high impact for non-bank payment companies newly brought within scope. This is a confirmed development, though sourced this cycle via specialist legal-tracker reporting rather than direct fetch of the T1 statute itself. Applications for a Colorado Money Transmitter License are processed via the Nationwide Multistate Licensing System and reportedly require a surety bond scaling from $250,000 to $1,000,000 alongside a $100,000 minimum net worth requirement under the recast regime. This capital-requirement detail carries only probable confidence, resting on a single Tier-4 vendor source not yet independently corroborated against DORA's own primary guidance. The licensing framework draws a clear distinction in practical effect between bank-affiliated payment activity, generally exempt from state MTL requirements, and non-bank payment institutions and e-money-style operators, who fall squarely within the recast MTL perimeter. #### Outlook The key verification item for this module is direct confirmation of the capital-requirement figures against DORA's own primary licensing guidance, since the current $250,000-$1,000,000 surety-bond range and $100,000 net-worth figures rest on a single vendor source. Applicants and existing licensees should also watch for any DORA interpretive guidance clarifying how the broadened digital-money-movement and payroll-processing definitions apply to specific non-bank business models. Periodic update · new data 2026-09-08 #### Licensing, Authorisation & Market Access Colorado's Money Transmission Modernization Act (HB25-1201) has expanded the state's money-transmission licensing scope to cover digital money movement and payroll processing, and, per the Colorado Division of Banking's December 2025 interim guidance, now generally requires a money-transmitter license for virtual-currency buying, selling, or transfer-facilitation businesses operating in the state. This is a confirmed, Tier-1-sourced development: the guidance is a direct regulator interpretation, not secondary commentary, and it settles what had previously been an open question about whether virtual-currency businesses fell within the MTMA's licensing perimeter. The licensing conditions attached to this route are the same as those applicable to any money transmitter under the Act: registration through the Nationwide Multistate Licensing System, a bond requirement, a net-worth threshold, and a BSA/AML-program obligation that includes independent review, regardless of whether the licensee's business is crypto-denominated or fiat-denominated. Secondary law-firm commentary corroborates that the underlying legislative purpose of the MTMA is to align Colorado's licensing and oversight regime with standards adopted in other states, consistent with the Conference of State Bank Supervisors' multistate licensing model. This alignment intent matters for market-access planning: an operator already licensed under a CSBS-model framework in another state may find the compliance lift for Colorado licensure lower than it would be under a wholly bespoke state regime, though this has not been independently confirmed as a formal reciprocity or passporting mechanism this cycle. The practical effect for nonbank payment-institution and e-money-institution type entities engaged in virtual-currency activity is that Colorado market access now runs unambiguously through the money-transmitter licensing gate, with the accompanying prudential and AML-program conditions, rather than through any lighter-touch or unregulated pathway. This bank-versus-nonbank distinction is squarely a nonbank-PI/EMI matter: banks conducting equivalent activity would typically operate under prudential bank supervision rather than this money-transmitter licensing route. #### Outlook The interim character of the Division of Banking's December 2025 guidance is the key open item: whether it is finalized into permanent rule, and on what timeline, was not confirmed this cycle. Firms currently operating or planning market entry in Colorado's virtual-currency space should treat the licensing requirement as the operative compliance baseline now, while watching for the guidance's conversion to final rule as the next material development in this module. Periodic update · new data 2026-08-25 #### Licensing, Authorisation & Market Access Colorado's licensing and market-access regime for money transmitters underwent its most significant overhaul in years this cycle. The Colorado Money Transmission Modernization Act (HB25-1201) repealed the prior Colorado Money Transmitters Act and enacted a replacement built on the Conference of State Bank Supervisors multistate-licensing model, effective 2026-08-12. The new statute expands the definition of regulated activity to expressly cover digital money movement and payroll processing, materially expanding the pool of entities that must hold a Colorado money-transmitter licence beyond those previously captured under the narrower prior statute. The Colorado Division of Banking, within the Department of Regulatory Agencies, administers the licensing regime under Title 11, Article 110 of the Colorado Revised Statutes, and this authority now extends over the expanded regulated-activity definition, including fiat-linked virtual-currency transmission. The move to the CSBS multistate model is structurally significant for market access: it aligns Colorado's licensing standard with a template increasingly adopted across other US states, which in principle reduces the compliance burden for money-services businesses seeking licensure across multiple CSBS-model jurisdictions simultaneously. For nonbank payment institutions and electronic-money issuers, the practical market-access question raised by this cycle's development is one of scope rather than process: entities engaged in digital money movement or payroll processing that did not previously require a Colorado money-transmitter licence under the narrower prior definition must now assess whether their activities fall within the expanded regulated-activity definition and, if so, pursue licensure under the modernized framework. Depository institutions operating under separate bank-charter supervision are not directly implicated in the same way, since the modernized statute's expanded scope targets nonbank money-transmission and payment activity specifically. The Division of Banking has also gained modernized enforcement tools alongside the licensing overhaul. No enforcement action under the modernized framework has yet been identified this cycle, which is unsurprising given the framework's 2026-08-12 effective date, but the existence of strengthened tools is itself a market-access-relevant fact for firms evaluating the compliance cost of holding, or newly obtaining, a Colorado money-transmitter licence. This shift also has implications for the bank-versus-nonbank distinction that structures much of this monitor's licensing analysis: nonbank payment institutions and electronic-money issuers face the primary compliance burden from the expanded regulated-activity definition, since banks and other depository institutions typically operate under separate prudential supervision that already covers a broader range of money-movement activity. Colorado's decision to adopt the CSBS multistate model rather than retain a fully bespoke state framework is also a data point relevant to the broader industry-structure question of whether US state money-transmission regulation is converging toward a common standard. #### Outlook The Colorado Division of Banking is anticipated to issue implementation guidance on the scope and enforcement of the modernized money-transmission framework in the third quarter of 2026. This guidance is the most consequential near-term marker for market-access analysis: it should clarify how broadly the expanded regulated-activity definition will be applied and enforced in practice, and whether firms operating adjacent products not explicitly named in the statute will be swept into scope. Firms currently outside Colorado's money-transmitter licensing perimeter but engaged in payroll-processing or digital-money-movement-adjacent activity should treat the coming guidance as the point at which their own licensing exposure in Colorado becomes clearer. Periodic update · new data 2026-08-11 #### Licensing, Authorisation & Market Access Colorado replaced its legacy Money Transmitters Act with the Conference of State Bank Supervisors' model Money Transmission Modernization Act via House Bill 25-1201, codified at Title 11, Article 110 of the Colorado Revised Statutes, with a legislative declaration at section 11-110-102 and consolidated definitions at section 11-110-201. The enacted bill text confirms the repeal of the prior Money Transmitters Act in full, with the MTMA establishing revised licensing, application, suspension and revocation, reporting, and prudential-standards architecture in its place. The legislative declaration itself frames the MTMA's purpose in explicitly multistate terms: enabling multistate regulatory coordination, protecting the public from financial crime, standardizing licensing and exemption categories, and modernizing safety-and-soundness requirements — language that positions Colorado's overhaul within the broader, thirty-one-state CSBS model-law adoption movement rather than as a Colorado-specific policy innovation. The licensing conditions themselves are substantial. Colorado money-transmitter licensees face a fixed one-million-dollar surety bond requirement, among the highest fixed bond requirements identified nationally, alongside personal financial disclosures, fingerprinting and background checks, a business plan, and proof of FinCEN money-services-business registration. This bond figure is sourced this cycle to a Tier 4 vendor compilation rather than primary Division of Banking guidance, and should be treated as assessed rather than confirmed pending independent verification, though it is consistent with the capital-intensity signal implied by the MTMA's broader safety-and-soundness modernization language. A notable exclusion defines Colorado's digital-asset posture within this licensing framework: Colorado's enacted MTMA excludes the model law's optional virtual-currency provisions, which in other CSBS-model-adopting states expressly extend money-transmission licensing treatment to certain virtual-currency activities. This is a deliberate narrowing relative to the model law's full optional scope, and it means Colorado's money-transmission licensing perimeter does not automatically capture virtual-currency activity in the way some peer MTMA states' frameworks do — a material diligence point for any crypto-adjacent payment firm assessing Colorado licensing requirements, since the absence of express virtual-currency coverage does not necessarily mean such activity falls outside licensing scope entirely, only that the MTMA's specific optional mechanism for capturing it was not adopted. Colorado's position within the broader multistate licensing landscape is also relevant to market-access planning: Colorado is one of thirty-one states that have enacted the CSBS model MTMA legislation in full or in part, and MTMA-adopting states collectively account for the large majority of reported US money-transmission activity. For a nonbank payment institution or e-money-institution-class entity planning multistate licensure, Colorado's adoption of the model framework — with the virtual-currency carve-out as the principal point of divergence — simplifies compliance-program design relative to a fully bespoke Colorado-specific regime, while still requiring Colorado-specific attention to the bond, disclosure, and background-check conditions detailed above. Content-tier classification also matters for how this baseline should be read: the legislative-declaration and enacted-statute claims underlying this module are standing-brief-tier findings warranting full explanatory treatment, given their multistate-standardization significance, while the surety-bond figure and the multistate-adoption-count context are treated as dashboard-tier, dated data points pending primary-source confirmation rather than as standalone explainers in their own right. #### Outlook The near-term monitoring priority for Colorado's W1a baseline is confirming whether the Division of Banking has issued or plans to issue implementing rules or guidance interpreting the MTMA's revised licensing, application, and prudential-standards provisions, since the enacted statute establishes the framework but implementing detail was not independently verified this cycle. Firms already licensed under the prior Money Transmitters Act should confirm their transition status and any re-application or grandfathering requirements under the repeal-and-replace structure, a detail not established in the evidence reviewed this cycle and flagged as a gap. Watch also for whether Colorado revisits its exclusion of the MTMA's optional virtual-currency provisions in a future session, particularly if peer MTMA-adopting states' virtual-currency treatment diverges further from Colorado's narrower perimeter, and for whether the one-million-dollar surety bond figure is confirmed against primary Division of Banking sourcing in a subsequent cycle. **Sources and findings (6)** 1. T1 [https://banking.colorado.gov/sites/banking/files/documents/HB25-1201_Update_to_Colorados_Money_Transmitter_Act.pdf](https://banking.colorado.gov/sites/banking/files/documents/HB25-1201_Update_to_Colorados_Money_Transmitter_Act.pdf) retrieved 2026-07-04 2. T3 [https://www.sheppard.com/insights/blogs/colorado-overhauls-money-transmission-law-to-align-with-multistate-licensing-standards](https://www.sheppard.com/insights/blogs/colorado-overhauls-money-transmission-law-to-align-with-multistate-licensing-standards) retrieved 2026-07-04 3. T1 [https://www.law.cornell.edu/regulations/colorado/title-3/agency-701/division-7](https://www.law.cornell.edu/regulations/colorado/title-3/agency-701/division-7) retrieved 2026-07-04 4. T3 [https://suretygroup.com/surety-bond/colorado-money-transmitter-bond/](https://suretygroup.com/surety-bond/colorado-money-transmitter-bond/) retrieved 2026-07-04 5. T1 [https://leg.colorado.gov/bills/sb19-023](https://leg.colorado.gov/bills/sb19-023) retrieved 2026-07-04 6. T1 [https://coag.gov/office-sections/consumer-protection/consumer-credit-unit/uniform-consumer-credit-code/](https://coag.gov/office-sections/consumer-protection/consumer-credit-unit/uniform-consumer-credit-code/) retrieved 2026-07-04 ### W1b Conduct, Safeguarding & Promotions Confirmed confirmed 2026-07-04 Colorado's money-transmission safeguarding regime relies on permissible-investment/surety-bond trust protection for payment-instrument holders, coupled with MTMA customer-protection provisions (timely forwarding, receipts, refunds, plain-language disclosure) and mandatory consumer-notice posting. Change-of-control in a licensee requires Division notice/approval and financial and character review. Standing sub-brief · as of 8 July 2026 118 words · last cycle 2026-07-08 #### Conduct, Safeguarding & Promotions Under the MTMA, permissible investments held by a Colorado-licensed money transmitter, even if commingled, are deemed by operation of law to be held in trust for the benefit of purchasers and holders of outstanding payment instruments in the event of the licensee's bankruptcy. Entities seeking to acquire control of a licensee, or to add key individuals to its management, must notify or obtain approval from the Division of Banking, subject to financial and character review. #### Outlook The trust-based safeguarding mechanism gives Colorado consumers a bankruptcy-remote claim on customer funds comparable to leading multistate frameworks, while the change-of-control regime creates a new compliance checkpoint for any M&A or investment activity touching Colorado-licensed non-bank payment institutions. no periodic updates on record for this sub-brief ** Sources and findings (5)** 1. T1 [https://banking.colorado.gov/sites/banking/files/Early_Stakeholder_Engagement_Memo_Money_Transmitters_Rule.pdf](https://banking.colorado.gov/sites/banking/files/Early_Stakeholder_Engagement_Memo_Money_Transmitters_Rule.pdf) retrieved 2026-07-04 2. T3 [https://www.consumerfinanceandfintechblog.com/2025/05/colorado-overhauls-money-transmission-law-to-align-with-multistate-licensing-standards/](https://www.consumerfinanceandfintechblog.com/2025/05/colorado-overhauls-money-transmission-law-to-align-with-multistate-licensing-standards/) retrieved 2026-07-04 3. T3 [https://www.sheppard.com/insights/blogs/colorado-overhauls-money-transmission-law-to-align-with-multistate-licensing-standards](https://www.sheppard.com/insights/blogs/colorado-overhauls-money-transmission-law-to-align-with-multistate-licensing-standards) retrieved 2026-07-04 4. T1 [https://www.law.cornell.edu/regulations/colorado/title-3/agency-701/division-7](https://www.law.cornell.edu/regulations/colorado/title-3/agency-701/division-7) retrieved 2026-07-04 5. T3 [https://www.hudsoncook.com/article/colorado-uccc-administrator-offers-guidance-on-payday-loan-rate-cap-and-alternative-loan-charges/](https://www.hudsoncook.com/article/colorado-uccc-administrator-offers-guidance-on-payday-loan-rate-cap-and-alternative-loan-charges/) retrieved 2026-07-04 ### W2 Stablecoins & Digital Money Probable confirmed 2026-07-04 Colorado has no dedicated stablecoin issuance/reserve/redemption statute. Its principal digital-asset instrument is the 2019 Digital Token Act securities exemption; the 2025 MTMA separately expands money-transmission scope to "digital money movement," pulling some stablecoin-adjacent transmission activity into the licensing perimeter without creating a bespoke stablecoin regime. Standing sub-brief · as of 8 July 2026 95 words · last cycle 2026-07-08 #### Stablecoins & Digital Money Colorado has no dedicated stablecoin issuance, reserve, or redemption statute; the primary state vehicle remains the 2019 Digital Token Act, which provides a notice-filing securities-registration exemption for qualifying "consumptive" digital tokens. The MTMA separately broadens the money-transmission definition to cover "digital money movement," pulling stablecoin-adjacent transfer activity into the state licensing perimeter without creating a bespoke stablecoin regime. #### Outlook Absent new legislation, Colorado's stablecoin exposure will continue to be governed indirectly through the Digital Token Act's securities exemption and the MTMA's expanded transmission definition rather than through a purpose-built reserve-and-redemption framework. no periodic updates on record for this sub-brief ** Sources and findings (4)** 1. T1 [https://content.leg.colorado.gov/sites/default/files/documents/2019A/bills/2019a_023_01.pdf](https://content.leg.colorado.gov/sites/default/files/documents/2019A/bills/2019a_023_01.pdf) retrieved 2026-07-04 2. T3 [https://cryptoslate.com/colorados-digital-token-act-provides-securities-exemptions-to-businesses-leveraging-utility-tokens/](https://cryptoslate.com/colorados-digital-token-act-provides-securities-exemptions-to-businesses-leveraging-utility-tokens/) retrieved 2026-07-04 3. T3 [https://www.sheppard.com/insights/blogs/colorado-overhauls-money-transmission-law-to-align-with-multistate-licensing-standards](https://www.sheppard.com/insights/blogs/colorado-overhauls-money-transmission-law-to-align-with-multistate-licensing-standards) retrieved 2026-07-04 4. T3 [https://www.carltonfields.com/insights/publications/2021/state-regulations-virtual-currency-blockchain-tech](https://www.carltonfields.com/insights/publications/2021/state-regulations-virtual-currency-blockchain-tech) retrieved 2026-07-04 ### W3 Operational Resilience & Critical Infra Probable confirmed 2026-07-04 Operational resilience for Colorado payment entities is embedded in the money-transmitter examination/recordkeeping regime (quarterly NMLS reporting, agent-roster reporting, record-retention rules) rather than a dedicated op-res statute, supplemented by a general cross-sector data-security duty requiring reasonable security procedures for personal/financial information. Kept on Dataprotection.gi, not restated here: data and cloud switching obligations on service providers, including notice periods and charges. [Open its jurisdiction pages on Dataprotection.gi →](https://dataprotection.gi/jurisdictions/) Standing sub-brief · as of 8 July 2026 82 words · last cycle 2026-07-08 #### Operational Resilience & Critical Infra Colorado-licensed money transmitters must file a quarterly Money Service Business Call Report and an Authorized Agent Roster Report through the NMLS portal. Under the MTMA's enhanced supervisory authority, the Division of Banking may participate in multistate examinations and rely on other accredited states' examination reports. #### Outlook Operational-resilience oversight in Colorado will likely continue to run through the licensing and multistate-examination channel rather than a standalone resilience statute, reducing duplicate examination burden for licensees operating across several states. no periodic updates on record for this sub-brief ** Sources and findings (5)** 1. T1 [https://banking.colorado.gov/sites/banking/files/Early_Stakeholder_Engagement_Memo_Money_Transmitters_Rule.pdf](https://banking.colorado.gov/sites/banking/files/Early_Stakeholder_Engagement_Memo_Money_Transmitters_Rule.pdf) retrieved 2026-07-04 2. T1 [https://www.law.cornell.edu/regulations/colorado/title-3/agency-701/division-7](https://www.law.cornell.edu/regulations/colorado/title-3/agency-701/division-7) retrieved 2026-07-04 3. T3 [https://www.sheppard.com/insights/blogs/colorado-overhauls-money-transmission-law-to-align-with-multistate-licensing-standards](https://www.sheppard.com/insights/blogs/colorado-overhauls-money-transmission-law-to-align-with-multistate-licensing-standards) retrieved 2026-07-04 4. T2 [https://www.recordinglaw.com/us-laws/data-privacy-laws/colorado-data-privacy-laws/data-breach-notification/](https://www.recordinglaw.com/us-laws/data-privacy-laws/colorado-data-privacy-laws/data-breach-notification/) retrieved 2026-07-04 5. T1 [https://banking.colorado.gov/sites/banking/files/documents/HB25-1201_Update_to_Colorados_Money_Transmitter_Act.pdf](https://banking.colorado.gov/sites/banking/files/documents/HB25-1201_Update_to_Colorados_Money_Transmitter_Act.pdf) retrieved 2026-07-04 ### W4 Scheme & Network Compliance Confirmed confirmed 2026-07-04 Colorado is one of the few states with its own statutory surcharge regime governing card-scheme interchange pass-through: C.R.S. 5-2-212 permits credit/charge-card surcharging up to 2% or actual merchant discount fee, with mandatory disclosure, signage and line-item receipt rules, while excluding debit, cash and check from surchargeable transactions. Standing sub-brief · as of 8 July 2026 100 words · last cycle 2026-07-08 #### Scheme & Network Compliance Under C.R.S. 5-2-212, sellers and lessors may surcharge credit and charge-card transactions up to 2% of the total cost or the actual merchant discount fee, at the merchant's choice, while debit, cash, and check payments remain excluded from surcharging. Colorado shifted from a surcharge-ban state to a surcharge-permitting state effective July 1, 2022, after the law was signed July 9, 2021, layering state-specific rules on top of card-brand surcharge rules. #### Outlook The dual-track surcharge regime, state statute alongside card-scheme rulebooks, remains a distinguishing feature of Colorado's merchant-acquiring environment relative to states without their own surcharge statute. no periodic updates on record for this sub-brief ** Sources and findings (5)** 1. T1 [https://law.justia.com/codes/colorado/title-5/consumer-credit-code/article-2/part-2/section-5-2-212/](https://law.justia.com/codes/colorado/title-5/consumer-credit-code/article-2/part-2/section-5-2-212/) retrieved 2026-07-04 2. T3 [https://www.agg.com/news-insights/publications/colorado-opens-the-door-to-surcharging-five-key-takeaways/](https://www.agg.com/news-insights/publications/colorado-opens-the-door-to-surcharging-five-key-takeaways/) retrieved 2026-07-04 3. T3 [https://www.cwpma.org/cpages/article-5033-co-ag-surcharge](https://www.cwpma.org/cpages/article-5033-co-ag-surcharge) retrieved 2026-07-04 4. T1 [https://coag.gov/app/uploads/2019/07/2002-12-02_fees_for_electronic_debits_and_pmts.pdf](https://coag.gov/app/uploads/2019/07/2002-12-02_fees_for_electronic_debits_and_pmts.pdf) retrieved 2026-07-04 5. T3 [https://www.bassberry.com/news/colorado-surcharge-ban/](https://www.bassberry.com/news/colorado-surcharge-ban/) retrieved 2026-07-04 ### W5 Payment Corridor Dynamics Confirmed confirmed 2026-07-04 Colorado is a globally significant corridor hub because Western Union, the world's largest cross-border money-transfer business, is headquartered in Denver, operating a vast agent network spanning 200+ countries and territories with substantial local remittance flow originating from the Denver metro region itself. Standing sub-brief · as of 8 July 2026 89 words · last cycle 2026-07-08 #### Payment Corridor Dynamics Western Union's global headquarters in Denver operates a cross-border remittance agent network spanning more than 200 countries and territories, with substantial local Denver-metro origination volume. The FedNow Service, launched July 20, 2023, extends domestic instant-payment rail access to Colorado-chartered and operating financial institutions through the Kansas City Fed's Denver Branch footprint. #### Outlook Colorado's corridor position rests on two distinct pillars, Western Union's remittance infrastructure and expanding FedNow instant-payment access, that are likely to keep the state disproportionately significant in both cross-border and domestic real-time payment flows. no periodic updates on record for this sub-brief ** Sources and findings (4)** 1. T2 [https://ir.westernunion.com/news/archived-press-releases/press-release-details/2018/Western-Union-Completes-Relocation-to-New-Global-Headquarters-in-Denver/default.aspx](https://ir.westernunion.com/news/archived-press-releases/press-release-details/2018/Western-Union-Completes-Relocation-to-New-Global-Headquarters-in-Denver/default.aspx) retrieved 2026-07-04 2. T2 [https://ir.westernunion.com/news/archived-press-releases/press-release-details/2018/Western-Union-Completes-Relocation-to-New-Global-Headquarters-in-Denver/default.aspx](https://ir.westernunion.com/news/archived-press-releases/press-release-details/2018/Western-Union-Completes-Relocation-to-New-Global-Headquarters-in-Denver/default.aspx) retrieved 2026-07-04 3. T3 [https://www.zoominfo.com/hq/western-union-holdings-inc-office-address/223117343](https://www.zoominfo.com/hq/western-union-holdings-inc-office-address/223117343) retrieved 2026-07-04 4. T1 [https://www.kansascityfed.org/newsroom/2023-news-releases/fednow-service-is-now-live/](https://www.kansascityfed.org/newsroom/2023-news-releases/fednow-service-is-now-live/) retrieved 2026-07-04 ### W6 Industry Structure & Commercial Probable confirmed 2026-07-04 Colorado's payments industry structure blends one dominant global incumbent (Western Union), a large regional bank now fully absorbed into a national acquirer (FirstBank was acquired by PNC, legally closing January 5, 2026, with customer/branch conversion completed June 22, 2026), and a dense cluster of Denver/Boulder/Fort Collins fintechs spanning embedded finance, PayFac-as-a-service, bill-pay and payroll, within a fast-growing regional venture-funding environment. Standing sub-brief · as of 8 July 2026 119 words · last cycle 2026-09-14 #### Industry Structure & Commercial Dynamics PNC Financial Services Group's acquisition of FirstBank Holding Company, Colorado's largest independent state-chartered bank, legally closed January 5, 2026, and PNC completed the customer and branch conversion, 780,000 customers and 95 branches, on June 22, 2026, finalizing an integration that is now complete rather than ongoing. Denver's technology sector raised $3.99 billion in 2025, a 68% year-on-year increase, though that figure is an aggregate cross-sector tech-funding statistic rather than a fintech-specific one. #### Outlook With the FirstBank integration finalized, Colorado's banking landscape concentrates further around PNC as a national acquirer, even as a dense Denver-Boulder-Fort Collins fintech cluster continues to draw regional venture funding, albeit measured mostly through aggregate tech-sector figures rather than fintech-specific data. Periodic update · new data 2026-09-14 #### Industry Structure & Commercial Dynamics Colorado's payments and banking industry structure moved materially this cycle through consolidation and enforcement pressure occurring in parallel. PNC Bank, National Association, completed its acquisition of FirstBank, a Colorado-chartered bank, effective June 18, 2026, a confirmed development directly sourced from a Colorado Division of Banking public notice. The acquisition's financial terms were not publicly disclosed. The transaction moves FirstBank's regulatory oversight from the Colorado Division of Banking to the Office of the Comptroller of the Currency, reducing the population of state-chartered institutions directly supervised by Colorado's own banking regulator. This structural consolidation coincides with active MSB AML/CFT enforcement activity within the state and an involuntary dissolution proceeding for a Denver-based custody entity, together suggesting a period of heightened supervisory and market-structure activity across Colorado's payments and banking sector rather than an isolated event confined to any single institution type. #### Outlook The item to watch is whether the shift of FirstBank from state to federal oversight produces any visible change in Colorado's banking-market concentration or in the Division of Banking's own supervisory workload and priorities in subsequent cycles, given that the state has one fewer state-chartered institution to directly examine. **Sources and findings (5)** 1. T3 [https://www.builtincolorado.com/articles/colorado-fintech-startups](https://www.builtincolorado.com/articles/colorado-fintech-startups) retrieved 2026-07-04 2. T3 [https://www.inven.ai/company-lists/top-21-fintech-companies-in-colorado](https://www.inven.ai/company-lists/top-21-fintech-companies-in-colorado) retrieved 2026-07-04 3. T3 [https://www.inven.ai/company-lists/top-21-fintech-companies-in-colorado](https://www.inven.ai/company-lists/top-21-fintech-companies-in-colorado) retrieved 2026-07-04 4. T3 [https://www.builtincolorado.com/companies/type/fintech-companies/reputation/stability-growth](https://www.builtincolorado.com/companies/type/fintech-companies/reputation/stability-growth) retrieved 2026-07-04 5. T3 [https://growthlist.co/denver-startups/](https://growthlist.co/denver-startups/) retrieved 2026-07-04 ### W7 Legal & Litigation Confirmed confirmed 2026-07-04 The dominant live payments/consumer-credit litigation in Colorado is NAIB et al. v. Weiser, the fintech-industry challenge to the state's 2024 DIDMCA opt-out interest-rate-cap law. After the district court granted a preliminary injunction against Colorado in 2024 and a Tenth Circuit panel reversed 2-1 in November 2025, the full Tenth Circuit vacated that panel decision and granted en banc rehearing on April 7, 2026; the case is now pending en banc consideration with oral argument scheduled for August 18, 2026, and the scope of Colorado's opt-out authority remains unsettled. Alongside this, the Attorney General/UCCC Administrator continues active enforcement against payments-adjacent consumer-finance conduct (debt collection, credit repair). Horizon · 2026-08-18 (±quarter) Tenth Circuit en banc oral argument in NAIB v. Weiser (DIDMCA opt-out)_ · TT3_ Horizon · 2026-08-18 (±quarter) Tenth Circuit en banc oral argument in NAIB v. Weiser (Colorado DIDMCA opt-out case)_ · TT3_ Standing sub-brief · as of 8 July 2026 119 words · last cycle 2026-07-08 #### Legal & Litigation The Tenth Circuit granted en banc rehearing on April 7, 2026, vacating the November 2025 panel decision that had reversed the district court's 2024 preliminary injunction against Colorado's DIDMCA opt-out law, with oral argument now scheduled for August 18, 2026, in NAIB et al. v. Weiser. The Colorado Attorney General's UCCC Administrator separately settled with a collection agency over deceptive debt-collection practices, including Regulation F seven-in-seven call-frequency violations, resulting in a $43,500 payment to the AG's office. #### Outlook The scope of Colorado's DIDMCA opt-out authority remains unsettled pending the August 2026 en banc argument, a live issue for any fintech lender operating in the state, while the AG's office continues active enforcement against payments-adjacent consumer-finance conduct. no periodic updates on record for this sub-brief ** Sources and findings (4)** 1. T3 [https://www.bankingdive.com/news/colorado-law-virginia-sb1252-legislation-would-impact-fintech-lending/741044/](https://www.bankingdive.com/news/colorado-law-virginia-sb1252-legislation-would-impact-fintech-lending/741044/) retrieved 2026-07-04 2. T3 [https://www.consumerfinancemonitor.com/state-enforcement/](https://www.consumerfinancemonitor.com/state-enforcement/) retrieved 2026-07-04 3. T3 [https://www.hudsoncook.com/article/state-watch-consumer-protection-enforcement-update-4/](https://www.hudsoncook.com/article/state-watch-consumer-protection-enforcement-update-4/) retrieved 2026-07-04 4. T3 [https://getoutofdebt.org/241638/state-ag-consumer-protection-enforcement-february-2026](https://getoutofdebt.org/241638/state-ag-consumer-protection-enforcement-february-2026) retrieved 2026-07-04 ### W8 Merchant Acquiring & Risk Probable confirmed 2026-07-04 Colorado enacted SB26-131 (Sports Betting Protections), effective 2026-08-12, which bans internet sports-betting operators from accepting deposits by credit card - directly or indirectly - and caps an individual bettor at six deposits per 24-hour gaming day, a payment-rail-level restriction on a licensed high-risk merchant category. Standing sub-brief · as of 8 July 2026 80 words · last cycle 2026-09-05 #### Merchant Acquiring & Risk Under C.R.S. 5-2-212, sellers imposing a card surcharge must post visible signage and itemize the surcharge as a separate line item on the customer receipt. No dedicated Colorado chargeback or dispute-resolution statute has been identified beyond federal Regulation E and Z and card-scheme rulebooks. #### Outlook Acquirers and merchants operating in Colorado will continue to rely on federal and scheme-level dispute-resolution frameworks absent any state-specific chargeback statute, keeping the surcharge-disclosure regime as the state's principal acquiring-side rule. Periodic update · new data 2026-09-08 #### Merchant Acquiring & Risk Colorado's SB26-131, the Sports Betting Protections Act, took effect on August 12, 2026, banning credit-card funding of sports-betting accounts and capping customer deposits at six per gaming day. This is a direct payment-acceptance restriction with immediate relevance to acquirers and payment service providers serving Colorado's regulated sports-betting vertical: credit-card rails must be excluded from the accepted-funding-method set for this product category, and deposit-velocity controls must enforce the per-gaming-day ceiling. This development is corroborated across Tier-2 secondary reporting describing the same effective date and provisions, though it has not been independently verified against primary bill text this cycle. Separately, the Colorado Vending of Digital Assets Act (SB25-079) imposes disclosure and refund duties on virtual-currency kiosk operators, a Tier-1-sourced, confirmed development. Kiosk operators must provide certain disclosures to customers as a condition of operation, a merchant-risk-adjacent requirement distinct from the sports-betting payment restriction but similarly channel-specific in its application, targeting the physical kiosk point of transaction rather than online payment acceptance generally. Both developments narrow the range of acceptable payment configurations for their respective regulated verticals in Colorado: sports-betting operators must reconfigure funding-method acceptance and deposit-velocity logic, while virtual-currency kiosk operators must build disclosure functionality into their customer-facing transaction flow. Neither development changes the underlying merchant-category classification of either vertical; both operate as acceptance-and-risk-control-layer restrictions on already-regulated activity. #### Outlook For the sports-betting payment restriction, the near-term watch item is whether enforcement activity follows the August 12, 2026 effective date, and whether further legislative refinement of deposit or funding-method rules emerges in subsequent Colorado sessions. For the kiosk-channel disclosure and refund duties, the open item is confirmation of SB25-079's precise effective date, which was not independently verified this cycle. Acquirers and PSPs active in either vertical should treat both restrictions as now-operative compliance requirements rather than pending developments. **2 earlier distinct update(s)** Periodic update · new data 2026-08-25 #### Merchant Acquiring & Risk SB26-131, the Colorado Sports Betting Protections Act, banned direct or indirect credit-card funding of sports-betting accounts, including funding routed through intermediary accounts, effective 2026-08-12. The prohibition is enforceable as a class 2 misdemeanor plus a civil penalty of up to 25,000 dollars per violation under the Colorado Limited Gaming Control Commission's authority. The same statute separately caps sports-betting deposits at six per 24-hour gaming period, codified at C.R.S. 44-30-1506, a distinct deposit-frequency control layered onto the payment-instrument restriction. Both provisions apply to bank-affiliated and non-bank-affiliated payment flows into regulated sports-betting accounts alike. #### Outlook No enforcement action under either the credit-card funding ban or the deposit-frequency cap has yet been identified. The practical test for merchant-acquiring compliance will be how intermediary-account funding, the routing method the statute specifically targets alongside direct card use, is monitored and enforced in practice. Periodic update · new data 2026-08-11 #### Merchant Acquiring & Risk SB26-131 introduces Colorado's first payment-rail-level restriction captured under this monitor's merchant-acquiring and risk lens: internet sports-betting operators are prohibited from accepting credit-card deposits either directly or indirectly, including through credit-card-funded e-wallets, effective August 12, 2026. This is a statutory restriction on a licensed high-risk merchant category — sports-betting operators — rather than a card-network rule or an acquirer-level underwriting policy, meaning compliance is a legal obligation on the licensed operator rather than a discretionary acquiring decision. Enforcement carries real weight: violation is a class 2 misdemeanor, and the Colorado Limited Gaming Control Commission may assess administrative penalties of up to twenty-five thousand dollars per violation, a durable statutory penalty structure rather than card-network guidance. Colorado's action is comparatively significant within the national sportsbook-payment-restriction landscape: Colorado becomes the tenth state to ban credit-card deposits at sportsbooks, and the first state to combine a credit-card ban, a daily deposit cap of six deposits per individual per twenty-four-hour gaming day, and a push-notification and text-message marketing ban simultaneously in a single legislative package. For acquirers, payment facilitators, and payment-technology providers serving Colorado-licensed sportsbooks, this means the credit-card funding channel must be identified and blocked comprehensively — the statute reaches indirect funding routes such as credit-card-funded e-wallets, not merely direct card-present or card-not-present transactions at the point of deposit, which is a broader technical-compliance scope than a simple card-brand-level block would achieve. The bank-versus-nonbank distinction carries through this module as well: SB26-131's restriction applies to the sports-betting operator as the regulated entity and, by extension, to whichever payment rails — bank-issued or nonbank-issued cards, bank-provided or nonbank e-wallet infrastructure — are used to fund betting accounts, rather than targeting a specific class of payment-service provider directly. This means the practical compliance burden of identifying and blocking prohibited funding pathways likely falls on payment facilitators and acquiring relationships serving the sportsbook merchant category regardless of whether the underlying rail is bank- or nonbank-provided. #### Outlook The immediate compliance question ahead of the August 12, 2026 effective date is technical: payment facilitators and acquirers serving Colorado sportsbooks need mechanisms capable of identifying not just direct credit-card transactions but indirect credit-card funding through e-wallets, a detection scope broader than standard card-brand-level merchant-category-code blocking typically achieves. Watch for whether Colorado's Division of Gaming issues implementing guidance clarifying what counts as "indirect" credit-card funding for compliance purposes, since the statutory text was not accompanied by regulator interpretive guidance in the evidence reviewed this cycle. More broadly, Colorado's status as the first state to combine three separate consumer-protection payment and marketing restrictions simultaneously makes it a bellwether worth tracking for whether other states move toward similarly combined restriction packages rather than adopting credit-card bans, deposit caps, or marketing restrictions individually. **Sources and findings (4)** 1. T1 [https://codes.findlaw.com/co/title-5-consumer-credit-code/co-rev-st-sect-5-2-212/](https://codes.findlaw.com/co/title-5-consumer-credit-code/co-rev-st-sect-5-2-212/) retrieved 2026-07-04 2. T1 [https://law.justia.com/codes/colorado/title-5/consumer-credit-code/article-2/part-2/section-5-2-212/](https://law.justia.com/codes/colorado/title-5/consumer-credit-code/article-2/part-2/section-5-2-212/) retrieved 2026-07-04 3. T3 [https://www.dwmk.com/sellers-and-lessors-limited-in-credit-card-surcharges-to-consumers-and-lessees](https://www.dwmk.com/sellers-and-lessors-limited-in-credit-card-surcharges-to-consumers-and-lessees) retrieved 2026-07-04 4. T1 [https://coag.gov/app/uploads/2019/07/2002-12-02_fees_for_electronic_debits_and_pmts.pdf](https://coag.gov/app/uploads/2019/07/2002-12-02_fees_for_electronic_debits_and_pmts.pdf) retrieved 2026-07-04 ### W9 Product Innovation & Market Development limited signal Probable confirmed 2026-07-04 Colorado's product-innovation posture centers on its 2019 crypto-friendly Digital Token Act, a state IT mandate to evaluate blockchain/DLT for government projects, growing FedNow instant-payments adoption among Colorado banks, and a pending (not yet enacted) 2026 bill to regulate earned-wage-access services. Standing sub-brief · as of 8 July 2026 96 words · last cycle 2026-09-21 #### Product Innovation & Market Development FirstBank launched FedNow instant-payments capability as part of its platform-investment initiatives, a capability now folded into PNC's national platform following the completed acquisition and conversion. House Bill 26-1046 would allow the UCCC Administrator to bring a civil action for penalties of up to $5,000, rising to $10,000 for repeated willful violations, against earned-wage-access services, but the bill has not yet been enacted. #### Outlook Earned-wage-access regulation is the clearest pending product-innovation question in Colorado; its enactment status and effective date remain unconfirmed, and no in-force earned-wage-access regime currently exists in the state. Periodic update · new data 2026-09-22 #### Product Innovation & Market Development SB26-131, effective August 12, 2026, bans credit-card funding of Colorado sports-betting accounts and caps deposits at six per 24-hour period. Read through a payments-product lens, this is a funding-rail restriction that directly narrows the accepted-method configuration available to payment processors, acquirers, and platform providers serving the Colorado sports-betting vertical: credit-card acceptance, a standard funding rail in the sector, is being statutorily removed for this specific product category, and daily deposit velocity is capped regardless of funding method. Payment-services providers supporting sportsbook operators in Colorado will need to reconfigure accepted-method rails and implement deposit-velocity controls ahead of the effective date. This finding carries lower confidence this cycle, resting on a single T4 secondary source (PlayUSA) rather than directly retrieved primary statutory text; the underlying policy rationale for the restriction is gambling-sector consumer protection, a domain owned by the advennt monitor, and is not re-analyzed here. The payments-adjacent reading is limited strictly to the funding-rail and deposit-velocity mechanics and their operational implications for payment-services providers in the sector. #### Outlook Watch for confirmation of the SB26-131 funding-restriction mechanics against primary statutory text, and for how payment processors and acquirers serving the Colorado sports-betting vertical adjust accepted-method configurations ahead of the August 12, 2026 effective date. **1 earlier distinct update(s)** Periodic update · new data 2026-08-25 #### Product Innovation & Market Development The Colorado Vending of Digital Assets Act (SB25-079) created the state's first dedicated regulatory product for virtual-currency kiosks, effective 2026-08-12. Kiosk operators must provide disclosures and an electronic receipt for each virtual-currency transaction, and must refund a customer's first transaction in full where funds moved to a wallet or exchange located outside the United States and the customer reports suspected fraud within 60 days with law-enforcement contact. This is a bespoke regulatory category layered on top of, not in place of, any money-transmitter licensing obligation that otherwise applies to a kiosk operator's fiat-linked virtual-currency activity. #### Outlook The Colorado Division of Banking is anticipated to issue implementation guidance addressing this kiosk regime, alongside the broader money-transmission modernization, in the third quarter of 2026. No enforcement action under the kiosk regime has yet been identified this cycle. **Sources and findings (4)** 1. T3 [https://tokenist.com/colorado-signs-digital-token-act-into-law-some-digital-assets-exempt-from-securities-requirements/](https://tokenist.com/colorado-signs-digital-token-act-into-law-some-digital-assets-exempt-from-securities-requirements/) retrieved 2026-07-04 2. T1 [https://oedit.colorado.gov/sites/coedit/files/documents/blockchainreport_final_2-6-2019.pdf](https://oedit.colorado.gov/sites/coedit/files/documents/blockchainreport_final_2-6-2019.pdf) retrieved 2026-07-04 3. T3 [https://www.builtincolorado.com/companies/type/fintech-companies/reputation/stability-growth](https://www.builtincolorado.com/companies/type/fintech-companies/reputation/stability-growth) retrieved 2026-07-04 4. T1 [https://leg.colorado.gov/bills/HB26-1046](https://leg.colorado.gov/bills/HB26-1046) retrieved 2026-07-04 ### W10 Consumer Protection & APP Fraud Confirmed confirmed 2026-07-04 SB26-131 (Sports Betting Protections Act), effective Aug 12, 2026, imposes payments-adjacent consumer-protection restrictions: credit-card funding ban, six-deposit-per-day cap, and solicitation notification ban. Standing sub-brief · as of 8 July 2026 110 words · last cycle 2026-09-28 #### Consumer Protection & APP Fraud Under C.R.S. 6-1-716, Colorado requires notice of a security breach within 30 days of a breach determination, with Attorney General notification required if 500 or more Coloradans are affected and credit-bureau notification required if 1,000 or more are affected. Denver merchant Savory Spice Shop paid a $30,000 settlement in 2022 after two breaches exposed the payment-card data of 13,888 Colorado customers, under a penalty structure of up to $20,000 per violation with no cap on the total. #### Outlook The 30-day breach-notification regime and the Savory Spice Shop enforcement precedent together signal that Colorado will continue treating payment-card data breaches as a priority consumer-protection enforcement area. Periodic update · new data 2026-09-28 #### Consumer Protection & APP Fraud Colorado's Sports Betting Protections Act (SB26-131), effective August 12, 2026, introduces a set of payments-adjacent consumer-protection restrictions directly affecting how internet sports betting operators structure deposit acceptance. The Act prohibits an internet sports betting operator from accepting deposits made by credit card, with a violation of this prohibition classified as a class 2 misdemeanor — a criminal, not merely civil or licence-conditions, consequence for non-compliant payment-acceptance design. This is a materially significant payments-consumer-protection development because it removes a funding method entirely from the permitted deposit rails for a regulated payments use case, rather than merely restricting its terms. The Act separately limits users to six deposits per gaming day, a deposit-frequency cap intended to constrain rapid, repeated funding behavior associated with problem gambling, and prohibits operators from directing advertising to persons under the age of 21. While the deposit cap and advertising restriction are gambling-harm-reduction measures more than payments-fraud controls in the traditional APP-fraud sense, they nonetheless require payment and marketing-system changes: transaction-monitoring logic to detect and block a seventh same-day deposit, and audience-targeting controls to exclude under-21 recipients from sports-betting marketing. Taken together, these restrictions represent a state-level tightening of consumer protection specifically in the payments dimension of sports betting, distinct from broader gambling-regulatory consumer protection (which sits with other monitors' coverage). The credit-card ban in particular is a notable instrument because it directly constrains payment-rail choice for a regulated financial activity, a pattern payments-compliance teams should track as a template that could recur in other US states' sports-betting consumer-protection legislation. #### Outlook Watch for enforcement or guidance clarifying practical application of the credit-card ban to payment processors and payment facilitators serving Colorado sports-betting operators, particularly around edge cases such as credit-card-funded digital wallets used to fund betting accounts indirectly. No enforcement action testing this provision has been identified this cycle. **Sources and findings (5)** 1. T1 [https://codes.findlaw.com/co/title-6-consumer-and-commercial-affairs/co-rev-st-sect-6-1-716/](https://codes.findlaw.com/co/title-6-consumer-and-commercial-affairs/co-rev-st-sect-6-1-716/) retrieved 2026-07-04 2. T2 [https://www.recordinglaw.com/us-laws/data-privacy-laws/colorado-data-privacy-laws/data-breach-notification/](https://www.recordinglaw.com/us-laws/data-privacy-laws/colorado-data-privacy-laws/data-breach-notification/) retrieved 2026-07-04 3. T1 [https://coag.gov/resources/data-protection-laws/](https://coag.gov/resources/data-protection-laws/) retrieved 2026-07-04 4. T1 [https://cbi.colorado.gov/investigations/crime-scene-investigation/economic-crimes/identity-theft-fraud-and-cyber-crimes](https://cbi.colorado.gov/investigations/crime-scene-investigation/economic-crimes/identity-theft-fraud-and-cyber-crimes) retrieved 2026-07-04 5. T1 [https://coag.gov/protecting-consumers/](https://coag.gov/protecting-consumers/) retrieved 2026-07-04 ### W11 AML/CFT & Financial Crime [Sourced from Sentinel.gi ↗](https://sentinel.gi/jurisdictions/united-states-colorado/#sec-dom-D7) limited signal Uncertain confirmed 2026-07-04 W11 is Sentinel.gi-fed by design; this collection pass could not retrieve a Sentinel.gi payments-context feed item for US-CO. Structural federal/state AML architecture applicable to Colorado money-transmission licensees (FinCEN MSB registration, BSA program obligations) is noted as factual context only, not as original illicit-finance analysis. Standing sub-brief · as of 8 July 2026 86 words · last cycle 2026-09-14 #### AML/CFT & Financial Crime The Sentinel.gi payments-context feed for US-CO AML/CFT intelligence was not retrievable this collection pass, so no original illicit-finance analysis has been performed for Colorado this cycle; readers seeking illicit-finance context should consult Sentinel.gi directly. Colorado money-transmitter applicants must separately register as money-services businesses with FinCEN alongside state licensure. #### Outlook AML/CFT coverage for Colorado depends on the Sentinel.gi feed resuming; until then, the federal MSB-registration overlay remains the only confirmed structural anchor for this module, and no independent WPM illicit-finance judgment is offered. Periodic update · new data 2026-09-14 #### AML/CFT & Financial Crime This module's Colorado finding is sourced via the Sentinel.gi feed: a joint Colorado-Texas AML/CFT consent order was entered against a Colorado-licensed money transmitter, carrying a $200,000 penalty split between the two states, for Bank Secrecy Act filing delinquency and AML/CFT program deficiencies. This finding is attributed to the Sentinel feed and to financial-integrity's underlying analysis; this brief does not independently re-analyse the illicit-finance typology detail behind the action, which readers should consult directly in the financial-integrity brief. #### Outlook For the payments-specific read on this action, the relevant forward marker is whether the affected money transmitter's mandated remediation, including an independent compliance consultant and quarterly reporting, produces any visible change in its Colorado licensing status in subsequent cycles. **Sources and findings (7)** 1. T1 [https://banking.colorado.gov/sites/banking/files/Early_Stakeholder_Engagement_Memo_Money_Transmitters_Rule.pdf](https://banking.colorado.gov/sites/banking/files/Early_Stakeholder_Engagement_Memo_Money_Transmitters_Rule.pdf) retrieved 2026-07-04 2. T? FIM (sentinel.gi) per-JID baseline profile — United States — Colorado — Colorado operates under the federal Bank Secrecy Act/AML framework administered by FinCEN, overlaid by state money-transmitter licensing (Colorado Money Transmitters Act, C.R.S. Title 11-110) supervised by the Colorado Division of Banking (DORA). Federal Corporate Transparency Act BOI reporting for domestic entities was rescinded in March 2025, removing a key transparency backstop for Colorado-formed LLCs; state cannabis banking remains cash-intensive due to persistent federal-state conflict. 3. T? FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-004) — Gap: sourcing-thinness 4. T1 FIM (sentinel.gi) enforcement_action_register (issue FIM-BASE-ENF-003) — Enforcement: OFAC / FinCEN / U.S. Department of State — Mexico-based cartel fiscal fuel theft and trafficking networks operating along US supply corridors including Colorado's I-25/I-70 distribution routes 5. T? FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-001) — Gap: enforcement-absence 6. T? FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-003) — Gap: capacity-deficit 7. T? FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-002) — Gap: regulatory-failure ### W12 Correspondent Banking, Settlement & Access limited signal Confirmed confirmed 2026-07-04 Colorado's correspondent-banking/settlement access runs through the Federal Reserve Bank of Kansas City's Denver Branch, which supervises state member banks, distributes coin/currency, and channels FedNow/Fedwire/FedACH access across Colorado, Wyoming and northern New Mexico. The pending absorption of Colorado's largest state-chartered bank (FirstBank) into a national bank charter (PNC) is reshaping in-state correspondent and settlement relationships. Standing sub-brief · as of 8 July 2026 104 words · last cycle 2026-09-14 #### Correspondent Banking, Settlement & Access The Federal Reserve Bank of Kansas City's Denver Branch supervises state member banks, distributes coin and currency, and channels FedNow, Fedwire, and FedACH access across Colorado, Wyoming, and northern New Mexico. The Federal Reserve, the OCC, and the Colorado Division of Banking approved PNC's acquisition of FirstBank, which legally completed January 5, 2026, reshaping in-state correspondent and settlement relationships as FirstBank converts to PNC's national charter. #### Outlook Colorado's correspondent-banking architecture will continue to run through the KC Fed's Denver Branch as the settlement-access anchor, even as the PNC-FirstBank consolidation concentrates in-state correspondent relationships under a single national acquirer's charter. Periodic update · new data 2026-09-14 #### Correspondent Banking, Settlement & Access Colorado's correspondent-banking and settlement-access landscape saw a disruption event this cycle: an involuntary dissolution or liquidation order has been issued for Etana Custody Inc., a Denver-based custody entity, per a Colorado Division of Banking public notice. This finding carries probable rather than confirmed confidence, resting on a single T1 regulator-notice source with limited surrounding detail available this cycle. The analytical spine for this module remains the structural asymmetry between bank and non-bank access to settlement infrastructure; a non-bank custody entity's involuntary dissolution is consistent with the generally thinner capital and continuity buffers available to non-bank participants relative to bank-chartered institutions in the correspondent and settlement layer. #### Outlook Further detail on the scope, cause, and affected-counterparty impact of the Etana Custody dissolution is the key open item for this module, since the current single-source finding leaves these questions largely unanswered. Any follow-on regulator notice detailing the wind-down process would be the next material development to track. **Sources and findings (5)** 1. T1 [https://www.kansascityfed.org/denver/about-the-denver-branch/](https://www.kansascityfed.org/denver/about-the-denver-branch/) retrieved 2026-07-04 2. T1 [https://www.kansascityfed.org/denver/about-the-denver-branch/](https://www.kansascityfed.org/denver/about-the-denver-branch/) retrieved 2026-07-04 3. T1 [https://www.federalreserve.gov/aboutthefed/federal-reserve-system-kansas-city.htm](https://www.federalreserve.gov/aboutthefed/federal-reserve-system-kansas-city.htm) retrieved 2026-07-04 4. T1 [https://www.sec.gov/Archives/edgar/data/0000713676/000071367625000137/a2025_1212xrlsxpncxfirst.htm](https://www.sec.gov/Archives/edgar/data/0000713676/000071367625000137/a2025_1212xrlsxpncxfirst.htm) retrieved 2026-07-04 5. T1 [https://www.kansascityfed.org/ten/fednow-service-continues-momentum/](https://www.kansascityfed.org/ten/fednow-service-continues-momentum/) retrieved 2026-07-04 ### W13 Commercial Intelligence (M&A, Investment & Product) limited signal Confirmed confirmed 2026-07-04 The dominant trailing-12-month commercial event for Colorado payments/banking is PNC's acquisition of Colorado's largest independent state-chartered bank, FirstBank Holding Company — announced September 2025 and completed January 2026 — which materially reshapes deposit and branch concentration in the Denver metro payments/banking market. Standing sub-brief · as of 8 July 2026 106 words · last cycle 2026-10-18 #### Commercial Intelligence (M&A, Investment & Product) 2026-01-05: PNC Financial Services Group completed its acquisition of FirstBank Holding Company ($26.8bn in assets, 95 branches); the deal was announced September 8, 2025, and the transaction value was not publicly disclosed. 2026-06-22: PNC completed the customer and branch conversion of 780,000 FirstBank customers and 95 branches to PNC Bank, finalizing the integration; the transaction value was not publicly disclosed. #### Outlook With the PNC-FirstBank deal fully closed and converted, the next commercial-intelligence watch point for Colorado is whether further in-state bank consolidation follows, or whether Denver's fintech cluster produces new funding or M&A events distinct from this trailing-twelve-month banking transaction. Periodic update · new data 2026-10-18 #### Commercial Intelligence & Fintech Polygon Labs closed its acquisition of Coinme, and Sequence, on 14 October 2026, in a deal reportedly worth over 250 million dollars, first announced in January 2026. The transaction brought Polygon Labs 37 state money-transmitter licenses and 11 exemptions across 48 US states, including Coinme's Colorado licence, identified in secondary reporting as NMLS number 500280. That Colorado licence carries forward an obligation created only days before the acquisition closed: on 8 October 2026, Coinme entered a Settlement Agreement and Consent Order with the Colorado Division of Banking and other state regulators, under which it agreed to exit virtual-currency kiosk operations in Colorado by 1 January 2027. That kiosk-exit obligation now attaches to Polygon Labs as the new holder of the licence. No Colorado-specific primary source has been retrieved this cycle confirming the precise mechanics of the licence transfer itself; the transfer is inferred from the acquisition's reported scope, corroborated by the Colorado Division of Banking's own public-notices publication of the underlying consent order, which confirms the enforcement action occurred but does not itself address the subsequent acquisition. Separately, no new movement was found this cycle on TabaPay's planned acquisition of Denver-based Transact Bank N.A., a transaction announced 2 September 2026 and targeted for a fourth-quarter 2026 close; this brief notes the absence of new developments since the prior research anchor of 28 September 2026 rather than treating the deal as advancing further this cycle. #### Outlook The clearest open item is whether the Colorado Division of Banking issues its own confirmation addressing the Coinme-to-Polygon licence transfer specifically, which would close the sourcing gap in this cycle's record. The 1 January 2027 kiosk-exit deadline, now Polygon Labs' obligation as licence holder, is the next dated milestone for this thread. On the TabaPay side, the fourth-quarter 2026 target close for the Transact Bank acquisition remains the development to watch, pending any further movement beyond the 28 September 2026 anchor point. **1 earlier distinct update(s)** Periodic update · new data 2026-09-14 #### Commercial Intelligence & Fintech One discrete commercial event was identified for Colorado this cycle: PNC Bank, National Association's completed acquisition of FirstBank, a Colorado-chartered bank, effective June 18, 2026. The transaction's amount was not publicly disclosed. This is a confirmed, directly-sourced M&A event, distinct from any structural market-trend analysis of Colorado's banking sector, which is instead addressed under the W6 module. #### Outlook No further discrete commercial events, such as funding rounds or product launches, were identified for Colorado this cycle. The item to watch is whether the completed PNC-FirstBank transaction is followed by any additional disclosed terms or integration announcements in subsequent cycles. **Sources and findings (4)** 1. T1 [https://www.prnewswire.com/news-releases/pnc-announces-agreement-to-acquire-firstbank-significantly-growing-its-presence-in-colorado-and-arizona-302549032.html](https://www.prnewswire.com/news-releases/pnc-announces-agreement-to-acquire-firstbank-significantly-growing-its-presence-in-colorado-and-arizona-302549032.html) retrieved 2026-07-04 2. T1 [https://www.prnewswire.com/news-releases/pnc-announces-agreement-to-acquire-firstbank-significantly-growing-its-presence-in-colorado-and-arizona-302549032.html](https://www.prnewswire.com/news-releases/pnc-announces-agreement-to-acquire-firstbank-significantly-growing-its-presence-in-colorado-and-arizona-302549032.html) retrieved 2026-07-04 3. T1 [https://pnc.mediaroom.com/2026-01-05-PNC-Completes-Acquisition-of-FirstBank](https://pnc.mediaroom.com/2026-01-05-PNC-Completes-Acquisition-of-FirstBank) retrieved 2026-07-04 4. T3 [https://growthlist.co/denver-startups/](https://growthlist.co/denver-startups/) retrieved 2026-07-04 ** No modules match.** Filters combine as OR inside a group and AND across groups. ## Editorial metadata Provenance only. Nothing below gates publication or affects the render. Editorial metadata for United States – Colorado| Field | Value | |---|---| | `trust.lawyer_review.status` | never_reviewed | | `trust.lawyer_review.reviewer` | no reviewer on record | | ` trust.content_source` | ai_generated | ## Provenance and declared absence **Disclosure model:** module cards load OPEN; standing positions render in full; sub-briefs and jurisdiction briefs load as a clamped teaser with an explicit “read full” control carrying the true word count; earlier updates stay collapsed behind a counted summary. No text is hidden without disclosing how much of it there is. **Sentinel-fed modules** receive no special rendering treatment. `sentinel_feed` is an attribution chip only: it does not suppress content, does not generate an absence reason code, and does not exclude the module from any count, filter, search index or export on this page. **Family taxonomy** is renderer-level presentation config, not a JID field. Colour is always duplicated in text and is never the sole carrier of meaning. **Suppressed by doctrine:** derived risk score; per-module RAG traffic light; `derived_scores` = `{}`. **Band honesty:** uncertainty bands are computed against a frozen build clock of 2026-10-21. A year-precision row is never promoted into a tighter band. **Orphan deltas:** 1 cycle_delta row(s) target non-module objects and are listed in the rail rather than attached to a card. **Envelope:** baseline resolved at `jurisdiction_json.baseline`; 14 module(s), 67 finding(s), 143 source(s) in the cumulative register. Think something on this page is wrong? [Report an error](https://payments.gi/legal/#contact).