US-CT v13.3.0
content: ai_generated 119 sources retrieved model claude-sonnet-5 · 2026-07-04

United States – Connecticut

US-CT schema world-payments-v1 trajectory: not yet assessed

Last updated · 14 modules · 60 sourced findings · 120 sources in the cumulative register

14Modulesbaseline.modules[]
60Findingsmodules[].findings[]
36Tier-1 sourcesrun_metadata.t1_source_count
Confidence mix (sums to 14 rendered modules; click to filter)

United States federal law that applies in United States – Connecticut is covered once, on the United States page. This page covers United States – Connecticut’s own layer: its own law, regulators and enforcement.

Jurisdiction brief

Latest update · 18 October 2026

Lead Signal

Connecticut has enacted a new operational-resilience obligation bearing directly on payment service providers chartered or licensed in the state. Public Act 26-51 (HB 5208), effective October 1, 2026, requires Department of Banking licensees, Connecticut-chartered banks, and Connecticut credit unions to file an initial notification with the Department of Banking within three business days of knowing or having reason to know of a qualifying data security incident. The Act further requires covered entities to adopt written information-security programs with standards for developing, implementing and maintaining reasonable data-security safeguards, consistent with the federal Gramm-Leach-Bliley Act Safeguards Rule. Commentary on the Act indicates the notification duty applies broadly: it reaches out-of-state banks operating a Connecticut branch, out-of-state credit unions with a Connecticut office, and nondepository Department of Banking licensees, a category that includes money transmitters and other payment service providers operating under Connecticut authorisation.

14 of 14 modules
Signal
Density

Selections OR within a group, AND across groups. Press / to search.

#

US-CT has no bespoke payments/EMI licence; money transmission (including virtual-currency activity, digital wallets, and kiosks) is licensed by the CT Department of Banking under Conn. Gen. Stat. Sec. 36a-595 et seq. via NMLS, with PA 24-146 and PA 25-66 extending scope to digital wallets and virtual-currency kiosks.

Standing sub-brief · as of 8 July 2026251 words · last cycle 2026-09-28

Licensing, Authorisation & Market Access

Connecticut operates a dual-track market-access regime. Money transmission activity connected to the state -- whether through a Connecticut place of business, receipt or transmission to or from a Connecticut person, or the sale or issuance of stored value or payment instruments in-state -- requires an NMLS-filed money transmitter licence under Conn. Gen. Stat. §36a-595 et seq.; the nexus test is broad, built on five alternative triggers, though federally insured banks and credit unions are exempt. This is the standard nonbank payment-institution/EMI-equivalent gate familiar from other US state regimes.

Periodic update · new data 2026-09-28

Licensing, Authorisation & Market Access

Connecticut's Public Act 25-66, effective October 1, 2025, expands the scope of activity subject to money-transmission licensure to explicitly cover digital wallets and mobile money-transmission applications. This is a market-access development for any payments business, bank-affiliated PSP or non-bank payment institution or e-money issuer, whose product includes wallet functionality or virtual-currency handling and that serves Connecticut consumers. Alongside the licensure expansion, the act restricts eligible custodians of customer virtual currency to entities that are themselves licensed money transmitters, FDIC-insured depository institutions, or third parties approved by the state Banking Commissioner, meaning a non-bank payment institution seeking to offer virtual-currency custody in Connecticut must either hold the state money-transmitter licence directly or route custody through a bank or an approved third party rather than self-custody outside that perimeter.

The Connecticut Department of Banking's consumer and industry advisory directly and independently confirms the practical reach of this licensure expansion: persons who exchange virtual currency for fiat currency, and persons who operate virtual-currency ATMs or kiosks, are within scope of the licensure requirement. This is a Tier-1 primary-regulator statement, distinct from the secondary law-firm commentary describing the amendment's broader effect, and it establishes with confidence that the state regulator itself reads the amended statute as reaching exchange and kiosk operators, not merely traditional money-transmission activity.

For market entrants, the practical implication is that the bank-PSP versus non-bank-PI distinction now carries added weight in Connecticut specifically for virtual-currency-adjacent products: a bank or FDIC-insured institution can hold customer virtual currency directly under its existing regulatory status, while a non-bank payment institution or e-money-style operator must either obtain the state money-transmitter licence itself or arrange custody through an approved third party. This narrows the operational options available to non-bank entrants relative to bank-affiliated ones, and it does so specifically in the virtual-currency segment of Connecticut's payments market rather than across money transmission generally.

Outlook

The confidence level on the core licensure-expansion and custody-restriction findings is Probable, based on convergence between one Tier-1 regulator advisory and secondary law-firm summaries, but no direct retrieval of the cga.ct.gov chaptered statute text occurred this cycle. A future direct retrieval of the statute would be the clearest path to upgrading confidence to Confirmed. Watch also for any Banking Commissioner guidance clarifying the approval process for third-party virtual-currency custodians, which would materially affect which non-bank entities can participate in this segment of the Connecticut market.

3 earlier distinct update(s)
Periodic update · new data 2026-09-22

Licensing, Authorisation & Market Access

Connecticut's money-transmission licensing perimeter expanded significantly across two successive enactments. Public Act 24-146, effective October 1, 2024, first brought virtual-currency kiosk (crypto ATM) operators explicitly within the state's money-transmission licensure requirement. Public Act 25-66, effective October 1, 2025, went further, expanding money-transmission licensure to cover digital wallets and mobile-app-based transmission generally, and restricting permissible custodians of customer virtual currency to licensed money transmitters, FDIC- or NCUA-insured institutions, or third parties specifically approved by the Banking Commissioner. Both findings carry Confirmed confidence, corroborated across a T1 regulator FAQ and T3 law-firm secondary reporting.

The practical effect for market access is a narrower field of permissible participants: nonbank entities offering virtual-currency transmission or custody services in Connecticut must now hold a money-transmission licence and structure any custody arrangement to route through one of the three permitted custodian categories. This is a nonbank-focused expansion -- the affected entities are payment companies and virtual-currency businesses rather than depository institutions, which continue to operate under their existing prudential frameworks.

Outlook

No primary CGA bill-text page for Public Act 25-66 (HB 7082) was directly retrieved this cycle, so the underlying statutory language rests on a T1 FAQ and T3 secondary summaries; confirming the primary bill text remains an open item. Market participants should also watch for whether the Banking Commissioner issues further guidance on the third-party custodian approval pathway introduced by PA 25-66, since that pathway's administration will determine how much market access nonbank custody providers retain.

Periodic update · new data 2026-09-14

Licensing, Authorisation & Market Access

Connecticut's Public Act 25-66 represents a material tightening of licensing and market-access requirements around virtual-currency activity, achieved by expanding the existing Money Transmission Act rather than creating a new licence class. The amendments explicitly bring digital wallets and mobile apps that store or route virtual currency or tokenized value on behalf of consumers within the definition of covered money-transmission activity, a probable-confidence finding drawn from legal commentary describing the statute's scope expansion.

Most significantly for market access, the Connecticut Department of Banking has confirmed, through direct primary-source guidance, that any entity engaging in money transmission for Connecticut residents, including virtual-currency custody or exchange activity, requires MTA licensure regardless of the entity's physical presence in the state. This is a confirmed extraterritorial licensure position: an out-of-state nonbank payment-institution-type provider cannot serve Connecticut residents without securing Connecticut MTA licensure, purely on the basis of customer location rather than provider location.

Alongside the scope expansion, PA 25-66 narrows the range of permissible custodians of customer virtual currency to three defined categories: licensed money transmitters, FDIC-insured banks and credit unions, or third parties expressly approved by the Banking Commissioner. This custody restriction is the clearest expression of the bank-PSP versus non-bank PI/EMI distinction in this cycle's findings: a nonbank virtual-currency provider's safeguarding arrangement must now route through one of these approved channels, whereas a bank-affiliated provider's own FDIC-insured status may satisfy the requirement directly.

Outlook

Non-bank payment institutions and e-money-institution-type virtual-currency providers serving Connecticut residents should confirm licensure status under the expanded MTA scope and review custody arrangements against the three-category restriction. Watch for Department of Banking guidance clarifying the scope of Banking-Commissioner-approved custodial parties, and for enforcement activity testing the confirmed extraterritorial licensure position against out-of-state providers.

Periodic update · new data 2026-09-05

Licensing, Authorisation & Market Access

Connecticut's Public Act 25-66 expands the Money Transmission Act's definitions of money transmission and stored value to expressly cover digital wallets and tokenized value, requiring licensure for wallet providers not otherwise exempt, effective October 1, 2025. The amendment also narrows permissible custody arrangements: any entity holding customer virtual currency on behalf of a licensed transmitter must itself be a licensed money transmitter, an FDIC-insured bank or credit union, or a Banking-Commissioner-approved third party. Together these provisions bring the wallet and custody layer of virtual-currency services within Connecticut's licensing perimeter in a way the prior statute did not clearly require.

The Department of Banking has followed the statutory expansion with active supervision. In March 2026 it summarily suspended a virtual-currency kiosk operator's money transmission license and issued a temporary cease-and-desist order for net-worth, fee-cap, and disclosure violations, signaling permanent revocation and civil penalties of up to $100,000 per violation. The enforcement action demonstrates that the licensing expansion is not merely definitional: examiners are applying it with real supervisory consequence within the same cycle the custody restrictions took hold, evidencing a bank-versus-nonbank access asymmetry in which only insured depositories, licensed transmitters, or commissioner-approved third parties may hold customer virtual currency.

Outlook

The near-term question is whether the Department of Banking proceeds to permanent revocation and assesses civil penalties against the suspended operator, and whether other Connecticut virtual-currency businesses adjust custody arrangements to comply with the new restrictions ahead of similarly active supervision. A pattern of enforcement against non-compliant kiosk operators is a plausible next development given the explicit, numerically defined thresholds the amended Act now provides for examiners to apply.

Sources and findings (6)
  1. T1https://portal.ct.gov/DOB/Consumer-Credit-Licensing-Info/Consumer-Credit-Licensing-Information/Money-Transmitter-Licensing-Informationretrieved
  2. T1https://portal.ct.gov/DOB/Consumer-Credit-Licenses/Consumer-Credit-Licenses/Money-Transmitters-Licensed-in-Connecticut
  3. T1https://portal.ct.gov/-/media/dob/consumer-credit-licensing-info/department-of-banking-issues-consumer-and-industry-advisory-on-money-transmission.pdfretrieved
  4. T1https://portal.ct.gov/dob/financial-institutions-division/fid-applications/innovation-charter-applicationretrieved
  5. T3https://ctnewsjunkie.com/2024/09/27/connecticuts-fintech-hub-adds-second-innovation-bank/retrieved
  6. T3https://cornerstonelicensing.com/money-transmitter-laws/connecticut-money-transmitter-regulations/retrieved

#

Sec. 36a-613 imposes detailed pre-account and pre-transaction disclosure duties on virtual-currency kiosk operators, extended by PA 25-66 to all virtual-currency transmitters and now under active enforcement (March 2026 licence suspension).

Standing sub-brief · as of 8 July 2026220 words · last cycle 2026-09-28

Conduct, Safeguarding & Financial Promotions

Connecticut's conduct and safeguarding layer for money transmission licensees now sits on two pillars. The older pillar, dating to Public Act 13-253, deems permissible investments made under the money-transmission statute held in trust for claimants against the licensee by operation of law -- immune from creditor or judgment-creditor attachment even where commingled with other licensee assets, a core customer-fund-protection backstop functionally comparable to EU/UK safeguarding regimes.

Periodic update · new data 2026-09-28

Conduct, Safeguarding & Financial Promotions

Public Act 25-66 extends conduct and safeguarding obligations that had previously applied only to virtual-currency kiosk operators to all virtual-currency transmitters operating in Connecticut. Disclosure and receipt requirements, previously a kiosk-specific obligation, now apply across the broader population of virtual-currency money-transmission licensees, and the act separately strengthens advertising restrictions applicable to those licensees. This represents a conduct-regime tightening that runs parallel to, and is enacted within, the same instrument as the licensing and market-access changes described elsewhere in this brief.

A further and distinct safeguarding-adjacent provision codifies customer-held virtual currency as a proportional property interest in the event of a licensee's insolvency. This is a conduct and consumer-safeguarding development with direct relevance to how custodial risk is allocated: rather than customer virtual currency being treated as a general unsecured claim against an insolvent licensee's estate, the statute establishes a proportional property-interest characterization, which is a materially different position for a customer in an insolvency scenario. This provision should be read alongside the custody-eligibility restriction covered under the licensing lens, since together they define both who may hold customer virtual currency and what legal protection that customer retains if the holder becomes insolvent.

The confidence attached to these conduct and safeguarding findings is lower than the licensing findings above: the disclosure-extension and advertising-restriction elements trace to a single Tier-3 secondary source and are held at Uncertain confidence pending independent corroboration or direct statutory retrieval, whereas the underlying custody-eligibility restriction itself carries Probable confidence from multiple corroborating sources. Readers should weight the disclosure and advertising elements of this development accordingly until further verification occurs.

Outlook

The clearest path to resolving the confidence gap on the disclosure and advertising elements of this development is direct retrieval of the PA 25-66 statutory text from cga.ct.gov, which was not queried this cycle. Watch also for the Connecticut Department of Banking to issue further guidance on how the proportional property-interest provision would be administered in an actual insolvency proceeding, since the statutory characterization alone does not resolve procedural questions about how claims would be valued or distributed.

3 earlier distinct update(s)
Periodic update · new data 2026-09-22

Conduct, Safeguarding & Financial Promotions

Connecticut's conduct-and-disclosure framework for virtual-currency kiosk operators, set out in Conn. Gen. Stat. Sec. 36a-613, requires a bolded consumer warning -- in English, and acknowledged by the customer -- that virtual-currency losses from fraud or accident may be unrecoverable and that transactions themselves are irreversible. This is a Confirmed finding sourced from statute text (T2). It functions as a risk-disclosure mechanism rather than a fund-protection or safeguarding mechanism in the traditional sense: it warns the consumer about the nature of the underlying asset's irreversibility rather than protecting customer funds held by the operator.

This disclosure regime is being actively enforced. In March 2026, the Connecticut Department of Banking summarily suspended a virtual-currency kiosk operator's money-transmission licence, with a T1 primary enforcement order confirming the operator had been licensed since July 27, 2022, alleging violations of Sec. 36a-613 disclosure, fee-cap, transaction-limit, receipt-content, senior-customer-call and refund requirements. This is a Confirmed finding directly evidencing that Connecticut's conduct rules for this nonbank licensee category carry operational enforcement weight rather than remaining declaratory.

Outlook

The disposition of the March 2026 suspension matter -- whether the licence is ultimately revoked or reinstated -- remains unconfirmed this cycle. That outcome, together with whether the Department of Banking pursues comparable action against other kiosk operators under the same conduct provisions, will indicate how systematically this disclosure and fee-cap regime is being enforced across the nonbank virtual-currency kiosk sector statewide.

Periodic update · new data 2026-09-14

Conduct, Safeguarding & Financial Promotions

Connecticut's conduct-side requirements for virtual-currency transmitters have expanded materially this cycle, running in parallel with the licensing-side tightening under W1a. Detailed disclosure and receipt requirements, covering fee transparency, unauthorized-transfer liability, and irreversibility warnings, now apply to all virtual-currency transmitters operating in the state rather than solely to kiosk operators, a probable-confidence finding representing a genuine broadening of consumer-facing conduct obligations.

The operative mechanism for this expansion is the Digital Currency Kiosk Consumer Protection Regime, codified at Conn. Gen. Stat. §36a-613, whose fee, transaction-limit, refund, and kiosk-control amendments became fully operative June 9, 2026. What had previously been a kiosk-specific consumer-protection regime now functions as the general conduct standard for the state's entire virtual-currency-transmitter population, a probable-confidence finding confirming the operative date of this tightening.

The safeguarding dimension of this cycle's findings, discussed in more depth under W1a, is directly relevant here as well: the custody restriction to licensed transmitters, FDIC-insured institutions, or Banking-Commissioner-approved parties functions as a de facto safeguarding mechanism, with customer virtual currency held via fdic_pass_through-style arrangements where the underlying provider is not itself a bank.

Outlook

Virtual-currency transmitters serving Connecticut residents should review onboarding and per-transaction disclosure workflows against the fee-transparency, unauthorized-transfer-liability, and irreversibility-warning requirements that now apply statewide. Watch for Department of Banking enforcement activity testing compliance with the newly extended disclosure regime, now that the June 9, 2026 operative date has passed.

Periodic update · new data 2026-09-05

Conduct, Safeguarding & Financial Promotions

Connecticut's kiosk-specific conduct regime under Conn. Gen. Stat. Sec. 36a-613 requires a bolded warning, prior to a customer's first transaction, that losses from fraud or error may be unrecoverable and that virtual-currency transactions are irreversible, together with itemized receipt content requirements and a cap on kiosk transaction fees. The March 2026 Department of Banking enforcement bulletin found that a suspended kiosk operator breached the fee cap across more than 500 consumers and over 1,000 transactions, exceeded applicable daily transaction limits, and failed to refund new-customer fraud victims as the statute requires. This is not a novel rulemaking but a direct enforcement test of an existing conduct regime's fee-cap and fraud-refund provisions, and the finding indicates that at least one non-bank kiosk operator's conduct practices had diverged materially from the statutory baseline.

The enforcement record does not identify the operator, which limits the extent to which other market participants can benchmark their own practices against the specific facts, but the statutory provisions engaged -- the fee cap, the daily transaction limit, and the fraud-refund duty -- are each independently actionable grounds under the current statute, meaning a similar fact pattern at another operator would likely trigger a comparable response.

Outlook

Watch for whether the Department of Banking's enforcement approach extends to other Connecticut kiosk operators, given the numerically explicit and therefore readily auditable nature of the fee-cap and daily-limit thresholds. A broader compliance sweep of the kiosk sector is a plausible near-term development following this cycle's enforcement action.

Sources and findings (4)
  1. T1https://www.cga.ct.gov/2013/act/pa/2013PA-00253-R00SB-00911-PA.htmretrieved
  2. T3https://www.shipkevich.com/connecticut-enacts-broad-amendments-to-money-transmission-law-targeting-virtual-currency-and-digital-assets/
  3. T3https://www.consumerfinanceandfintechblog.com/2025/07/connecticut-updates-money-transmission-law-to-cover-digital-wallets-and-virtual-currency/
  4. T3https://www.shipkevich.com/connecticut-enacts-broad-amendments-to-money-transmission-law-targeting-virtual-currency-and-digital-assets/

#

Connecticut treats virtual currency as within scope of money transmission (2017/2018 amendments), operates a distinct kiosk licensing/disclosure regime (Digital Assets Act) with 15% fee cap and daily limits actively enforced (Bulletin 3238, Mar 2026), and PA 25-66 (Oct 1 2025) extends custody/disclosure/fee/limit rules to digital-wallet-based virtual currency transmission while barring state government acceptance/investment in virtual currency.

Standing sub-brief · as of 8 July 2026206 words · last cycle 2026-07-08

Stablecoins & Digital Money

Connecticut treats virtual currency -- any digital medium of exchange, stored value, or payment-system-incorporated unit -- similarly to fiat under the money-transmission statute. Kiosk operators must hold a money transmitter licence subject to a 15% fee cap, daily transaction limits of $2,500 for general customers and $2,000 for new customers, mandatory disclosures, and new-customer fraud-refund duties. Public Act 25-66 extends analogous custody and disclosure duties to digital-wallet-based virtual currency transmission and separately bars Connecticut government acceptance of or investment in virtual currency, making Connecticut one of the more prescriptive US state-level virtual-currency consumer-protection regimes.

no periodic updates on record for this sub-brief

Sources and findings (6)
  1. T1https://portal.ct.gov/DOB/Consumer-Credit-Licensing-Info/Consumer-Credit-Licensing-Information/Virtual-Currency-MTRA-FAQsretrieved
  2. T3https://cryptoslate.com/crypto-laws/connecticut-digital-currency-kiosk-consumer-protection-regime/retrieved
  3. T1https://www.cga.ct.gov/2024/rpt/pdf/2024-R-0183.pdfretrieved
  4. T1https://legiscan.com/CT/text/HB07082/id/3253869/Connecticut-2025-HB07082-Chaptered.pdfretrieved
  5. T3https://moneytransmitterlaw.com/state-laws/connecticut/retrieved
  6. T1https://portal.ct.gov/dob/bulletin/2026/bulletin-3238-march-13-2026retrieved

#

Connecticut lacks a DORA-style dedicated payments operational-resilience regime; resilience obligations arise via the state's data-breach-notification statute, a NIST/ISO/CIS-based cybersecurity safe-harbor law, and PCI DSS as applied to any business handling card data, alongside sectoral (GLBA/NAIC) frameworks for financial institutions.

Movement — NEWCT PA 26-51 data-security-incident notification duty, effective Oct 1, 2026New statute identified this cycle imposing a 3-business-day incident notification duty on DOB licensees.

Kept on Dataprotection.gi, not restated here: data and cloud switching obligations on service providers, including notice periods and charges. Open its jurisdiction pages on Dataprotection.gi →

Horizon · 2026-Q2 (±half_year)Connecticut SB 117 massive-breach forensic-examination mandate (pending)proposed · TT3
Horizon · 2026-Q2 (±half_year)Connecticut SB 117 massive-breach forensic-examination mandate (pending)proposed · T
Standing sub-brief · as of 8 July 2026187 words · last cycle 2026-10-18

Operational Resilience & Critical Infrastructure

No DORA-equivalent payments-specific resilience regime exists in Connecticut. Entities owning, licensing, or maintaining Connecticut residents' computerised personal data must notify the Attorney General and affected residents without unreasonable delay, and no later than 60 days from discovery. Public Act 21-119 separately bars punitive damages absent gross negligence or wilful misconduct for entities that have implemented a qualifying cybersecurity framework -- NIST, FedRAMP, CIS, or PCI-DSS combined with another recognised standard. PCI DSS and the Gramm-Leach-Bliley Act apply as industry and sectoral standards rather than a Connecticut-specific payments-resilience mandate, leaving general breach-notification law and the safe-harbor statute as the operative cross-sector backstop for payments firms.

Periodic update · new data 2026-10-18

Operational Resilience & Critical Infrastructure

Connecticut has tightened its operational-resilience and incident-notification framework for licensed financial institutions and payment service providers through Public Act 26-51 (HB 5208), which took effect October 1, 2026. The Act requires Department of Banking licensees, Connecticut-chartered banks, and Connecticut credit unions to file an initial notification with the Department of Banking within three business days of knowing or having reason to know of a qualifying data security incident. The trigger is framed in terms of actual or constructive knowledge, placing weight on the adequacy and speed of a covered entity's internal incident-detection processes, since the clock begins not only on confirmed discovery but on the point at which the entity should reasonably have known of a qualifying incident.

Alongside the notification duty, the Act requires covered entities to adopt written information-security programs establishing standards for developing, implementing and maintaining reasonable data-security safeguards. The legislative summary confirms this safeguards-program requirement is framed as consistent with the federal Gramm-Leach-Bliley Act Safeguards Rule, meaning institutions already building GLBA-aligned information-security programs have a template for Connecticut-specific compliance, rather than facing an entirely novel standard.

Scope is a material feature of this obligation for payment service providers. Law-firm commentary on the Act indicates the notification duty applies broadly, reaching not only Connecticut-domiciled banks and credit unions but also out-of-state banks operating a branch in Connecticut, out-of-state credit unions with a Connecticut office, and nondepository Department of Banking licensees. This last category is the one of greatest relevance to payment service providers: money transmitters and other nonbank payment companies licensed by the Department of Banking fall within the notification duty's reach on the same three-business-day timeline as depository institutions. For a multistate payment service provider licensed in Connecticut alongside other states, this adds a Connecticut-specific filing obligation to whatever federal or other state breach-notification duties already apply, with a notably short window relative to many general consumer breach-notification statutes, which commonly allow thirty days or more.

The operational implication is that incident-response playbooks for Connecticut-licensed entities need a Department of Banking filing step built in on a three-business-day clock, distinct from, and likely faster than, other jurisdictions' breach-notification deadlines the same entity may also be subject to. Because the duty is triggered on a security incident generally, not solely a confirmed data breach, firms must also calibrate their internal thresholds for what constitutes a reportable incident under the Connecticut standard, which may sweep in events that would not meet the bar for notification under other, narrower-drafted statutes.

Outlook

The notification duty is now in force as of October 1, 2026, and covered institutions, including nonbank Department of Banking licensees such as money transmitters, should already be operating incident-response procedures calibrated to the three-business-day filing window. No Department of Banking implementing guidance, FAQ, or enforcement action under the new provision was identified this cycle. Given the breadth of scope described in available commentary, particularly the inclusion of out-of-state institutions with a Connecticut presence, continued monitoring of how the Department of Banking applies and enforces this duty in practice is warranted, as is attention to whether the three-business-day window proves workable for nonbank licensees without the dedicated compliance infrastructure of larger depository institutions.

Sources and findings (4)
  1. T1https://portal.ct.gov/AG/General/Report-a-Breach-of-Security-Involving-Computerized-Dataretrieved
  2. T3https://www.akingump.com/en/insights/blogs/ag-data-dive/connecticut-expands-breach-reporting-and-creates-cybersecurity-safe-harborretrieved
  3. T4https://pivitstrategy.com/connecticut-cybersecurity-laws-you-should-know-2026/retrieved
  4. T3https://www.cyberadviserblog.com/2026/02/connecticut-senate-bill-raises-the-stakes-on-data-breach-response/retrieved

#

Connecticut is one of a small number of US states with an outright statutory ban on credit-card surcharging (Conn. Gen. Stat. §42-133ff), while permitting disclosed cash discounts; enforcement sits with the Department of Consumer Protection/Attorney General under CUTPA. PCI DSS applies as an industry standard rather than a state mandate.

Standing sub-brief · as of 8 July 2026143 words · last cycle 2026-07-08

Scheme & Network Compliance

Connecticut's credit-card surcharge ban, codified at §42-133ff and amended by Public Act 24-142, prohibits any person from imposing a surcharge on card transactions, while cash and check discounts remain permitted; municipalities and courts are exempted for tax, fine, and registration card payments. Violations are deemed violations of the Connecticut Unfair Trade Practices Act, enforceable by the Department of Consumer Protection Commissioner or the Attorney General through injunctive relief, restitution, and civil penalties. Connecticut is one of only four US states with an outright, judicially-unreversed surcharge ban, a structural constraint that materially shapes merchant fee pass-through design for Connecticut acquirers and independent sales organisations.

no periodic updates on record for this sub-brief

Sources and findings (4)
  1. T1https://law.justia.com/codes/connecticut/title-42/chapter-739/section-42-133ff/retrieved
  2. T3https://www.wiggin.com/publication/connecticut-makes-significant-changes-to-its-credit-card-surcharge-law-effective-immediately/retrieved
  3. T1https://portal.ct.gov/dcp/legal/credit-card-surchargeretrieved
  4. T4https://merchantcostconsulting.com/lower-credit-card-processing-fees/connecticut-surcharge-laws/retrieved

#

Connecticut has no state-specific corridor regulation; cross-border consumer remittance activity out of Connecticut is governed by the federal Dodd-Frank remittance transfer rule (Reg E), while the state's Innovation Bank Charter has begun attracting cross-border settlement/clearing infrastructure providers seeking direct Fed and card-network rail access.

Standing sub-brief · as of 8 July 2026119 words · last cycle 2026-07-08

Payment Corridor Dynamics

Connecticut-originated consumer cross-border remittances are governed by the federal Dodd-Frank Remittance Rule under Regulation E rather than any state-specific corridor rule. Separately, the Innovation Bank Charter has begun attracting cross-border settlement and clearing infrastructure providers, including Banking Circle US, seeking direct Federal Reserve or card-network rail access to reduce correspondent-banking friction. No Connecticut-specific corridor-volume data has been identified this cycle, leaving the state's cross-border footprint to be inferred from charter-recipient activity rather than published flow statistics.

no periodic updates on record for this sub-brief

Sources and findings (3)
  1. T1https://www.consumercomplianceoutlook.org/2016/second-issue/an-overview-of-the-regulation-e-requirements-for-foreign-remittance-transfers/retrieved
  2. T3https://www.americanbanker.com/news/connecticuts-special-banking-charter-finds-a-new-purposeretrieved
  3. T3https://hartfordbusiness.com/article/ct-revives-long-dormant-banking-charter-to-woo-fintech-companies/retrieved

#

Connecticut's payments/fintech industry structure is anchored in Fairfield County (Stamford/Greenwich) proximity to NYC, Hartford's legacy insurance/finance base, and a deliberate state strategy (Innovation Bank Charter, DOB engagement) to attract wholesale/payments-infrastructure fintechs; financial services leads all sectors for funded CT startups.

Standing sub-brief · as of 8 July 2026114 words · last cycle 2026-07-08

Industry Structure & Commercial Dynamics

FinTech leads all industries among funded Connecticut startups, with 15 funded firms compared with 10 in IT services, concentrated in Fairfield County (Stamford and Greenwich), Hartford, and New Haven. The state actively markets the Innovation Bank Charter as a differentiator, notwithstanding American Banker's observation that novel special-purpose charters have largely struggled to take off elsewhere, including the OCC's fintech charter and comparable charters in other states.

no periodic updates on record for this sub-brief

Sources and findings (4)
  1. T4https://fundraiseinsider.com/blog/connecticut-startups/retrieved
  2. T3https://www.advancect.org/news-and-media/p/item/66373/connecticuts-innovation-bank-charter-offers-a-competitive-path-for-fintech-growthretrieved
  3. T3https://www.americanbanker.com/news/connecticuts-special-banking-charter-finds-a-new-purposeretrieved
  4. T4https://www.inven.ai/company-lists/top-19-fintech-companies-in-connecticutretrieved

The Department of Banking actively enforces money transmission and consumer-credit law via consent orders and administrative proceedings, with recent (2025-2026) actions against unlicensed small-loan lending and virtual-currency-kiosk fee/limit violations, alongside the CT Attorney General's active CUTPA/data-privacy enforcement track.

Standing sub-brief · as of 8 July 2026133 words · last cycle 2026-09-05

Legal & Litigation

The Department of Banking's Enforcement Division ran an active 2025-2026 track. In March 2026, the Department issued an emergency licence suspension and Temporary Cease and Desist against a virtual-currency kiosk operator for fee-cap and daily-limit violations, with restitution and disgorgement ordered. On September 24 2025, the Department entered a consent order against a personal-injury-advance lender for unlicensed 'small loan' activity exceeding the state's 12% usury cap. Together the two actions demonstrate the Department's willingness to deploy both emergency-suspension and negotiated-settlement enforcement tools within the same enforcement cycle.

Periodic update · new data 2026-09-05

Legal & Litigation

In litigation with payments and derivatives-classification significance beyond its gambling-regulatory origin, the District of Connecticut twice denied Kalshi's bids for a preliminary injunction against the Department of Consumer Protection's cease-and-desist orders. The August 2026 ruling, issued by Judge Vernon D. Oliver, held that the sports event contracts at issue do not qualify as swaps and would not be preempted by the Commodity Exchange Act even if they did. The ruling is directly relevant to how state financial and gambling regulators may treat CFTC-registered platforms operating wagering-adjacent products, since it establishes a judicial precedent for classifying certain event contracts as the underlying regulated activity -- here, sports wagering -- rather than as federally preempted derivatives.

The dispute originated from Connecticut Department of Consumer Protection cease-and-desist orders, and the payments-relevant contribution of the ruling is narrowly the classification reasoning rather than the gambling-law merits of the underlying dispute, which fall outside this monitor's remit. Other CFTC-registered platforms and the state regulators assessing them may look to this reasoning as persuasive authority in comparable classification disputes.

Outlook

Watch for whether Kalshi appeals the ruling, whether the parallel CFTC and DOJ suit against Connecticut officials produces a countervailing federal determination, and whether other state regulators cite the Connecticut ruling's classification reasoning in their own enforcement postures toward CFTC-registered platforms.

Sources and findings (4)
  1. T1https://portal.ct.gov/dob/bulletin/2026/bulletin-3238-march-13-2026retrieved
  2. T3https://www.consumerfinanceandfintechblog.com/2025/10/connecticut-department-of-banking-issues-consent-order-for-alleged-unlicensed-small-loan-activity/retrieved
  3. T1https://portal.ct.gov/DOB/Legal-Resources/Legal-Resources/Enforcement-of-Laws-Adminstered-by-the-Department-of-Bankingretrieved
  4. T1https://portal.ct.gov/-/media/ag/press_releases/2025/updated-enforcement-report-pursuant-to-connecticut-data-privacy-act-conn-gen-stat--42515-et-seq.pdfretrieved

#

Merchant acquiring in Connecticut operates under the general bank-sponsorship/ISO model (no CT-specific acquirer charter), overlaid by the state's strict no-surcharge law which materially shapes merchant fee pass-through options; Greenwich-based ISO PayArc is a notable homegrown acquiring-technology player.

Standing sub-brief · as of 8 July 2026106 words · last cycle 2026-07-08

Merchant Acquiring & Risk

PayArc, a Greenwich, Connecticut payment facilitator founded in 2016, illustrates the standard bank-sponsorship acquiring model used by Connecticut independent sales organisations: it operates as a registered ISO/service provider of Chesapeake Bank, Evolve Bank & Trust, and Pinnacle/Synovus Bank, and as a registered payment facilitator of Pathward Bank. Connecticut's surcharge ban steers merchants and acquirers toward cash-discount pricing as the lowest-legal-exposure fee option, since surcharging itself remains prohibited statewide.

no periodic updates on record for this sub-brief

Sources and findings (3)
  1. T3https://www.payarc.com/about-usretrieved
  2. T4https://intellipay.com/is-it-legal-to-pass-on-credit-card-fees-to-customers/retrieved
  3. T4https://www.privsource.com/acquisitions/payments-fintech/state/connecticutretrieved

#

Connecticut's flagship payments-innovation vehicle is the Innovation Bank Charter (renamed 2024 from the dormant 'uninsured bank charter'), which has drawn cross-border clearing/settlement fintechs (Banking Circle US, Numisma Bank) seeking direct Fed and card-network rail access without a sponsor bank intermediary.

Standing sub-brief · as of 8 July 2026134 words · last cycle 2026-07-08

Product Innovation & Market Development

Connecticut's Innovation Bank Charter, established under Section 36a-70(t), permits organisation of a non-retail-deposit innovation bank that does not require FDIC insurance, subject to Commissioner sole approving authority, $5 million minimum equity capital, and a $20,000 application fee. Banking Commissioner Jorge Perez has framed the charter as part of a deliberate strategic plan for economic opportunity via charter and licensing innovation, positioning Connecticut as a jurisdiction actively competing for wholesale and cross-border fintech entrants rather than only conventional retail-deposit banks.

no periodic updates on record for this sub-brief

Sources and findings (4)
  1. T1https://portal.ct.gov/DOB/Financial-Institutions-Division/FID/Organization-of-a-Connecticut-Bankretrieved
  2. T3https://www.klaros.com/post/an-updated-bank-charter-primerretrieved
  3. T3https://ctnewsjunkie.com/2024/09/27/connecticuts-fintech-hub-adds-second-innovation-bank/retrieved
  4. T3https://hartfordbusiness.com/article/ct-revives-long-dormant-banking-charter-to-woo-fintech-companies/retrieved

#

Connecticut has no PSR-style mandatory APP-fraud reimbursement scheme; consumer protection for payments fraud runs through CUTPA enforcement, the Attorney General's Elder Justice Hotline/Consumer Assistance Unit, and PA 25-66's new minors' money-sharing-app safeguards, against a backdrop of sharply rising elder financial-fraud losses.

Standing sub-brief · as of 8 July 2026136 words · last cycle 2026-07-08

Consumer Protection & APP Fraud

The FBI's Internet Crime Complaint Center recorded $16.6 billion in nationwide fraud losses in 2024, an increase of 388% year-on-year. Connecticut 'false pretense' scams, disproportionately affecting victims aged 65 and over, cost Connecticut victims an estimated $31.9 million in 2024. Public Act 25-66 separately adds parental-verification and identity-check requirements and account-deletion rights for minors' money-sharing app accounts. Connecticut has no PSR-style mandatory reimbursement scheme for authorised-push-payment fraud; consumer redress runs through the Connecticut Unfair Trade Practices Act and Attorney General channels rather than a dedicated reimbursement mandate.

no periodic updates on record for this sub-brief

Sources and findings (4)
  1. T1https://portal.ct.gov/ag/elderhotlineretrieved
  2. T1https://www.woodstockct.gov/home/news/preventing-financial-scams-among-connecticut-seniorsretrieved
  3. T1https://www.cga.ct.gov/2025/SUM/PDF/2025SUM00066-R03HB-07082-SUM.PDFretrieved
  4. T2https://www.bbb.org/local/0111/elder-justice-ctretrieved

#

Sentinel.gi payments-context position: Connecticut money transmitters and virtual-currency businesses operate as MSBs under the federal Bank Secrecy Act/FinCEN framework, layered with state-level BSA/AML examination by the Department of Banking; no CT-specific AML statute displaces the federal BSA/AML program requirement.

Standing sub-brief · as of 8 July 2026132 words · last cycle 2026-07-08

AML/CFT & Financial Crime

This module surfaces Sentinel.gi-sourced anti-money-laundering intelligence for Connecticut; original illicit-finance typology and sanctions-evasion analysis remain with the Financial Intelligence Monitor per the World Payments Monitor scope guardrail. Connecticut-licensed money transmitters and virtual-currency exchangers or administrators qualify as money services businesses and must register with FinCEN and maintain a Bank Secrecy Act compliance programme. Separately, the Department of Banking may not license persons on OFAC's Specially Designated Nationals and Blocked Persons List, and all money-transmitter licensees undergo vetting for financial responsibility and criminal background.

no periodic updates on record for this sub-brief

Sources and findings (6)
  1. T1https://portal.ct.gov/-/media/dob/consumer-credit-licensing-info/department-of-banking-issues-consumer-and-industry-advisory-on-money-transmission.pdfretrieved
  2. T?FIM (sentinel.gi) per-JID baseline profile — United States — Connecticut — Connecticut regulates money transmission and virtual-currency kiosks through its Department of Banking under state licensing statutes, operating inside the uniform federal BSA/FinCEN framework. State licensing power permits suspension of money-transmitter licenses (demonstrated against Bitcoin Depot). Connecticut hosts a dense Fairfield County hedge-fund/private-equity complex and a major Hartford reinsurance sector, both subject to federal AML rules but limited state-level enhanced due diligence beyond licensing and consumer-complaint response.
  3. T?FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-003) — Gap: sourcing-thinness
  4. T2FIM (sentinel.gi) sanctions_change_register (issue FIM-BASE-SANC-002) — Sanctions: OFAC listing
  5. T?FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-001) — Gap: legal-gap
  6. T?FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-002) — Gap: regulatory-failure

#

Connecticut's Innovation Bank Charter is materially reshaping correspondent-banking/settlement access for payments firms domiciled in the state; Numisma Bank became the first Tier-3 (uninsured) institution to obtain a Federal Reserve master account under the Fed's 2022 access guidelines (conditional approval Mar 2024, full approval May 2024) -- though not the first uninsured entity ever to hold one (Reserve Trust obtained a master account in 2018 before ceasing operations).

Standing sub-brief · as of 8 July 2026211 words · last cycle 2026-07-08

Correspondent Banking, Settlement & Access

Connecticut's Innovation Bank Charter is structurally reshaping correspondent-banking and settlement access for payments firms domiciled in the state, and the module's analytical spine remains the asymmetry between bank and non-bank access to direct settlement rails. Numisma Bank, chartered under the Innovation Bank statute, obtained a Federal Reserve master account with conditional approval in March 2024 and full approval in May 2024, becoming the first Tier-3 (uninsured) institution to do so under the Fed's 2022 account-access guidelines. This is not, however, the first uninsured entity ever to hold a Fed master account: Reserve Trust, now defunct, obtained one in 2018, a challenger-flagged correction (hard-flag finding f-002) to this cycle's standing narrative. Industry participants, including Moneycorp, have explicitly framed Fed master-account access via the Innovation Bank Charter as a route to reduce correspondent-banking friction for cross-border payments firms.

no periodic updates on record for this sub-brief

Sources and findings (4)
  1. T3https://www.freshfields.com/en/our-thinking/blogs/a-fresh-take/chartering-a-new-path-toward-banking-how-the-rise-of-novel-charters-is-reshaping-102l4fkretrieved
  2. T3https://hartfordbusiness.com/article/ct-revives-long-dormant-banking-charter-to-woo-fintech-companies/retrieved
  3. T4https://www.pcbb.com/bid/2024-09-03-the-impact-of-uninsured-and-novel-bank-chartersretrieved
  4. T3https://www.advancect.org/news-and-media/p/item/64944/how-is-connecticut-expanding-as-a-fintech-hub-with-strategic-advantagesretrieved

#

Trailing-12-month commercial activity centered on Connecticut-based payments/fintech firms includes an acquisition of a Glastonbury digital-payments platform by a national core-banking provider, a growth investment in a Greenwich-based payments ISO, and continued build-out of Stamford's Innovation-Bank-Charter cross-border payments cluster.

Standing sub-brief · as of 8 July 2026157 words · last cycle 2026-07-08

Commercial Intelligence (M&A, Investment & Product)

Four discrete commercial events populate Connecticut's trailing-twelve-month payments record. Jack Henry & Associates entered a definitive agreement to acquire Payrailz, the Glastonbury-based digital payments platform, to expand real-time person-to-person, bill-pay, and account-to-account capabilities; financial terms were not publicly disclosed. Bregal Sagemount made a strategic growth investment in Greenwich-based PayArc to expand its product suite, sales and marketing, and geographic reach; the amount was not publicly disclosed. Banking Circle US launched its US operations in Stamford under the Innovation Bank Charter, providing cross-border payments and currency access via a proprietary platform. Stamford-based fintech Notable Finance raised $6 million to expand its home-sale credit and short-term line-of-credit business for home sellers.

no periodic updates on record for this sub-brief

Sources and findings (4)
  1. T3https://www.privsource.com/acquisitions/payments-fintech/state/connecticutretrieved
  2. T3https://www.privsource.com/acquisitions/payments-fintech/state/connecticutretrieved
  3. T3https://www.advancect.org/news-and-media/p/item/64944/how-is-connecticut-expanding-as-a-fintech-hub-with-strategic-advantagesretrieved
  4. T3https://hartfordbusiness.com/article/stamford-fintech-notable-finance-raises-6m-to-expand-its-home-sale-credit-business/retrieved
No modules match.

Filters combine as OR inside a group and AND across groups.

Editorial metadata

Provenance only. Nothing below gates publication or affects the render.

Editorial metadata for United States – Connecticut
FieldValue
trust.lawyer_review.statusnever_reviewed
trust.lawyer_review.reviewerno reviewer on record
trust.content_sourceai_generated

Provenance and declared absence

Disclosure model: module cards load OPEN; standing positions render in full; sub-briefs and jurisdiction briefs load as a clamped teaser with an explicit “read full” control carrying the true word count; earlier updates stay collapsed behind a counted summary. No text is hidden without disclosing how much of it there is.

Sentinel-fed modules receive no special rendering treatment. sentinel_feed is an attribution chip only: it does not suppress content, does not generate an absence reason code, and does not exclude the module from any count, filter, search index or export on this page.

Family taxonomy is renderer-level presentation config, not a JID field. Colour is always duplicated in text and is never the sole carrier of meaning.

Suppressed by doctrine: derived risk score; per-module RAG traffic light; derived_scores = {}.

Band honesty: uncertainty bands are computed against a frozen build clock of 2026-10-21. A year-precision row is never promoted into a tighter band.

Orphan deltas: 0 cycle_delta row(s) target non-module objects and are listed in the rail rather than attached to a card.

Envelope: baseline resolved at jurisdiction_json.baseline; 14 module(s), 60 finding(s), 120 source(s) in the cumulative register.

Think something on this page is wrong? Report an error.