title: United States – Connecticut Payments Regulation Monitor | World Payments Monitor canonical: https://payments.gi/jurisdictions/united-states-connecticut/ date_modified: 2026-10-21 publisher: Asymmetric Intelligence # United States – Connecticut US-CT schema world-payments-v1 trajectory: not yet assessed Last updated 2026-10-21 · 14 modules · 60 sourced findings · 120 sources in the cumulative register 14 Modules baseline.modules[] 60 Findings modules[].findings[] 36 Tier-1 sources run_metadata.t1_source_count Confidence mix (sums to 14 rendered modules; click to filter) ** United States federal law** that applies in United States – Connecticut is covered once, on the [United States](https://payments.gi/jurisdictions/united-states/) page. This page covers United States – Connecticut’s own layer: its own law, regulators and enforcement. ## Jurisdiction brief ###### Latest update · 18 October 2026 #### Lead Signal Connecticut has enacted a new operational-resilience obligation bearing directly on payment service providers chartered or licensed in the state. Public Act 26-51 (HB 5208), effective October 1, 2026, requires Department of Banking licensees, Connecticut-chartered banks, and Connecticut credit unions to file an initial notification with the Department of Banking within three business days of knowing or having reason to know of a qualifying data security incident. The Act further requires covered entities to adopt written information-security programs with standards for developing, implementing and maintaining reasonable data-security safeguards, consistent with the federal Gramm-Leach-Bliley Act Safeguards Rule. Commentary on the Act indicates the notification duty applies broadly: it reaches out-of-state banks operating a Connecticut branch, out-of-state credit unions with a Connecticut office, and nondepository Department of Banking licensees, a category that includes money transmitters and other payment service providers operating under Connecticut authorisation. The three-business-day notification window is short relative to many comparable state and federal breach-notification regimes, and it is triggered on constructive as well as actual knowledge, meaning a licensee's internal incident-detection and escalation processes now carry direct regulatory timing consequences. For payment service providers licensed in Connecticut, this converts what might otherwise be treated as an internal security-operations matter into a supervisory filing obligation with a hard clock attached. #### Other Developments **No other module carried material movement this cycle.** Licensing and market access, conduct and safeguarding, stablecoin and digital-money frameworks, scheme and network compliance, payment-corridor dynamics, industry structure, litigation, merchant acquiring, product innovation, consumer protection, AML/CFT, correspondent banking and commercial intelligence were all assessed as stable for Connecticut this cycle, with no new findings meeting the materiality bar. #### Cross-Monitor Connections The new data-security-incident notification duty under Public Act 26-51 has a direct counterpart in the data protection monitor's sectoral-watch coverage, which tracks the same statute as a financial-sector overlay sitting alongside the Connecticut Data Privacy Act's own obligations. The two monitors describe the same instrument from different functional angles: the payments view treats it as an operational-resilience and incident-response requirement for licensed payment service providers and banks, while the privacy view treats it as a sector-specific notification duty operating in parallel with general consumer-privacy breach rules. Readers responsible for both compliance functions should treat the three-business-day DOB filing clock as a single, shared deadline rather than as two separate obligations. #### Outlook The notification duty under Public Act 26-51 took effect October 1, 2026, and is now in force; covered institutions, including nonbank money transmitters and payment service providers licensed by the Department of Banking, are operating under the three-business-day filing clock from that date forward. No further implementing guidance or enforcement activity under the new provision was identified this cycle. Given the broad scope description in available commentary, continued observation of how the Department of Banking applies the duty to out-of-state institutions with a Connecticut presence, and to nonbank licensees specifically, is warranted in subsequent cycles. _5 earlier updates not shown here._ ###### Standing brief · as of 8 July 2026 _Written before the update above. Where they differ, the update is the more recent position._ #### Lead Signal Connecticut's Public Act 25-66, effective October 1 2025, materially tightens the conduct and safeguarding layer of the state's money-transmission regime, restricting unauthorised use of customer virtual currency, narrowing custody delegation to licensed or Commissioner-approved third parties, constraining FDIC-insurance-related promotional claims to genuinely insured deposit accounts, and adding parental-verification and data-deletion requirements for minors' money-sharing apps. The measure extends the state's existing kiosk-style virtual-currency custody, disclosure, fee-cap and daily-limit regime to digital-wallet-based virtual currency transmission, while separately barring Connecticut government acceptance of or investment in virtual currency. The tightening is not merely legislative: in March 2026 the Department of Banking summarily suspended a virtual-currency kiosk operator's money-transmitter licence and issued a Temporary Cease and Desist for exceeding the statutory 15% kiosk fee cap and daily transaction limits, ordering restitution of consumer scam losses and disgorgement of unsafe-practice revenue -- the first observed use of emergency-suspension power against a Connecticut kiosk operator and a signal that the Digital Assets Act consumer-protection regime now carries active enforcement teeth behind it. #### Other Developments The tightening on the conduct side sits alongside a continued liberalising trend on market access. Connecticut's Innovation Bank Charter, a non-retail-deposit wholesale-bank vehicle requiring $5 million minimum equity capital, Commissioner sole approval, and a $20,000 application fee, has now chartered two entities. Banking Circle US -- corrected this cycle from an initial "nearly nine years" figure to "nearly ten years" as the gap since Connecticut's last new bank charter -- began commercial operations in February/March 2024 as an uninsured wholesale bank focused on cross-border payments and clearing, and has since launched Stamford operations providing cross-border payments and currency access via a proprietary platform. Numisma Bank, also chartered under the Innovation Bank statute, obtained a Federal Reserve master account (conditional approval March 2024, full approval May 2024), becoming the first Tier-3 uninsured institution to do so under the Fed's 2022 account-access guidelines -- though, per a challenger-flagged correction this cycle, not the first uninsured entity ever to hold a Fed master account, a distinction that belongs to the now-defunct Reserve Trust, which obtained one in 2018. Industry participants including Moneycorp have framed this Fed/card-network rail access as a route to reduce correspondent-banking friction for cross-border payments firms domiciled in the state. Enforcement activity beyond the kiosk case remains active: the Department of Banking's Enforcement Division also entered a September 2025 consent order against a personal-injury-advance lender for unlicensed "small loan" activity exceeding the state's 12% usury cap. On the commercial side, four discrete events populate this cycle's trailing-twelve-month record: Jack Henry & Associates' agreement to acquire Glastonbury-based Payrailz to expand real-time person-to-person, bill-pay and account-to-account capabilities (financial terms undisclosed); a Bregal Sagemount strategic growth investment in Greenwich-based PayArc to expand its product suite, sales and marketing, and geographic reach (amount not publicly disclosed); Banking Circle US's Stamford launch under the Innovation Bank Charter; and a $6 million raise by Stamford-based Notable Finance to expand its home-sale credit business. Separately, Connecticut's outright credit-card surcharge ban -- one of only four such bans in the United States, unreversed by any court -- continues to constrain merchant fee pass-through, steering acquirers and independent sales organisations such as PayArc toward cash-discount pricing as the lower-legal-exposure fee design; PayArc itself operates as a registered ISO/service provider of Chesapeake Bank, Evolve Bank & Trust, and Pinnacle/Synovus Bank, and as a registered payment facilitator of Pathward Bank, illustrating the standard bank-sponsorship acquiring model used by Connecticut ISOs. On operational resilience, Connecticut has no DORA-equivalent payments-specific resilience regime; general breach-notification law (notification to the Attorney General and residents within 60 days of discovery) and a safe-harbor statute shielding entities that implement a qualifying cybersecurity framework from punitive damages absent gross negligence or wilful misconduct remain the operative cross-sector backstop. A pending bill, SB 117, would add mandatory forensic-examination duties for breaches affecting 100,000 or more Connecticut residents, with substantial noncompliance penalties, though it remains unenacted as of the cycle's source cutoff. On consumer protection, FBI Internet Crime Complaint Center data recorded $16.6 billion in nationwide fraud losses in 2024, an increase of 388% year-on-year, with Connecticut "false pretense" scams -- disproportionately affecting victims aged 65 and over -- estimated at $31.9 million in losses for 2024; Connecticut has no PSR-style mandatory reimbursement scheme for authorised-push-payment fraud, leaving redress to run through CUTPA and Attorney General channels. On the industry-structure side, fintech now leads all industries among funded Connecticut startups, concentrated in Fairfield County, Hartford and New Haven, with the state actively marketing the Innovation Bank Charter as a differentiator notwithstanding American Banker's observation that novel special-purpose charters have "largely struggled to take off" elsewhere. #### Cross-Monitor Connections Connecticut-licensed money transmitters and virtual-currency exchangers or administrators qualify as money services businesses and must register with FinCEN and maintain a Bank Secrecy Act compliance programme; the Department of Banking is separately barred from licensing persons on OFAC's Specially Designated Nationals and Blocked Persons List and vets all money-transmitter licensees for financial responsibility and criminal background. This anti-money-laundering surface is carried into this brief via the Sentinel.gi feed as provenance only; deeper illicit-finance typology, sanctions-evasion analysis, or investigative conclusions on the use of any instrument for illicit purposes are matters for the Financial Intelligence Monitor, not a World Payments Monitor conclusion. #### Outlook Connecticut's regulatory trajectory this cycle is genuinely mixed: tightening on conduct, custody and consumer-facing virtual-currency rules under PA 25-66, while simultaneously liberalising on market access and settlement-rail reach through the Innovation Bank Charter. The March 2026 kiosk enforcement action suggests the Department of Banking will continue to test the boundaries of its emergency powers against virtual-currency non-compliance, and SB 117, if enacted, would add a materially more demanding breach-response obligation atop the existing 60-day notification duty. The Innovation Bank Charter's continued uptake -- and the corrections this cycle to both the Banking Circle charter-gap figure and the Numisma "first uninsured" framing -- underscore that Connecticut's flagship fintech-attraction narrative remains an actively developing, and occasionally revised, story worth monitoring closely across coming cycles. trust tier: ai_unverified ###### Latest update · 18 October 2026 #### Regulatory Status Connecticut's payments-relevant regulatory posture this cycle is defined by a single but material development: Public Act 26-51 (HB 5208), effective October 1, 2026, which imposes a three-business-day data-security-incident notification duty on Department of Banking licensees, Connecticut banks and Connecticut credit unions, alongside a requirement to adopt written information-security programs consistent with the federal GLBA Safeguards Rule. The duty's scope is broad, reaching out-of-state banks with a Connecticut branch, out-of-state credit unions with a Connecticut office, and nondepository Department of Banking licensees, including money transmitters and other payment service providers. All thirteen other modules in the payments spine were assessed as stable for Connecticut this cycle, with no new findings on licensing and market access, conduct and safeguarding, stablecoin frameworks, scheme compliance, corridor dynamics, industry structure, litigation, merchant acquiring, product innovation, consumer protection, AML/CFT, correspondent banking, or commercial intelligence. #### Outlook With the notification duty now in force, Connecticut-licensed payment service providers and banks are operating under the new three-business-day Department of Banking filing clock. Continued observation of how the duty is applied to nonbank and out-of-state licensees is warranted in subsequent cycles; no further Connecticut-specific payments development was identified this cycle beyond this operational-resilience change. _1 earlier update not shown here._ ###### Standing brief · as of 8 July 2026 _Written before the update above. Where they differ, the update is the more recent position._ #### Regulatory Status Connecticut's payments-regulatory posture this cycle is genuinely mixed: tightening on conduct, custody and consumer-facing virtual-currency rules, while liberalising on market access and settlement-rail reach. Public Act 25-66, effective October 1 2025, restricts unauthorised use of customer virtual currency, narrows custody delegation to licensed or Commissioner-approved third parties, constrains FDIC-insurance-related promotional claims, and adds parental-verification and data-deletion safeguards for minors' money-sharing apps; it also extends the state's kiosk-style virtual-currency custody, disclosure, fee-cap, and daily-limit regime to digital-wallet-based transmission. That regime now carries active enforcement behind it: in March 2026 the Department of Banking summarily suspended a virtual-currency kiosk operator's licence and issued a Temporary Cease and Desist for fee-cap and daily-limit violations, and in September 2025 the Department entered a consent order against an unlicensed small-loan lender. Set against that tightening, the Innovation Bank Charter continues to open direct Federal Reserve and card-network rail access for wholesale and cross-border payments firms. Banking Circle US, chartered under the statute, began commercial operations in February/March 2024 as an uninsured wholesale bank -- the first new Connecticut bank charter in nearly ten years -- and has since launched Stamford operations. Numisma Bank, also chartered under the statute, obtained a Federal Reserve master account in 2024, the first Tier-3 uninsured institution to do so under the Fed's 2022 guidelines, though not the first uninsured entity ever to hold one (Reserve Trust preceded it in 2018). Connecticut's outright credit-card surcharge ban, one of only four such bans in the United States, remains in force and continues to shape merchant fee pass-through and acquirer program design. No Connecticut-specific corridor rule, chargeback statute, or APP-fraud reimbursement mandate exists; cross-border remittances run through the federal Reg E framework, and consumer redress for authorised-push-payment fraud runs through CUTPA and Attorney General channels. A pending bill, SB 117, would add mandatory forensic-examination duties for massive data breaches but remains unenacted. #### Outlook Connecticut's near-term trajectory points to continued escalation on both fronts: further virtual-currency enforcement actions are plausible following the March 2026 kiosk precedent, and continued Innovation Bank Charter uptake is likely given the state's active marketing of the vehicle as an economic-development differentiator. SB 117 is the key legislative item to track toward its expected 2026 second-quarter horizon, and the standing correction to the Numisma 'first uninsured' framing should be carried into the knowledge base to keep the charter narrative accurate across coming cycles. 14 of 14 modules Signal Density Selections OR within a group, AND across groups. Press / to search. ### W1a Licensing, Authorisation & Market Access Confirmed confirmed 2026-07-04 US-CT has no bespoke payments/EMI licence; money transmission (including virtual-currency activity, digital wallets, and kiosks) is licensed by the CT Department of Banking under Conn. Gen. Stat. Sec. 36a-595 et seq. via NMLS, with PA 24-146 and PA 25-66 extending scope to digital wallets and virtual-currency kiosks. Standing sub-brief · as of 8 July 2026 251 words · last cycle 2026-09-28 #### Licensing, Authorisation & Market Access Connecticut operates a dual-track market-access regime. Money transmission activity connected to the state -- whether through a Connecticut place of business, receipt or transmission to or from a Connecticut person, or the sale or issuance of stored value or payment instruments in-state -- requires an NMLS-filed money transmitter licence under Conn. Gen. Stat. §36a-595 et seq.; the nexus test is broad, built on five alternative triggers, though federally insured banks and credit unions are exempt. This is the standard nonbank payment-institution/EMI-equivalent gate familiar from other US state regimes. Alongside that established licensing track, Connecticut has activated a second, bank-side route: the Innovation Bank Charter. Banking Circle US, chartered via this route, was the first new bank chartered in Connecticut in nearly ten years -- a figure corrected this cycle from an initially reported nine years -- beginning commercial operations in February/March 2024 as an uninsured wholesale bank focused on cross-border payments and clearing. The charter's uptake by a foreign payments institution seeking direct US-dollar clearing access illustrates that Connecticut's market-access spine now runs on two distinct rails: the conventional nonbank MTL gate for payment/e-money-type firms, and a novel wholesale-bank charter increasingly used by cross-border settlement infrastructure providers. #### Outlook The nonbank MTL gate is unlikely to change materially in the near term; the more dynamic story is continued uptake of the Innovation Bank Charter by additional wholesale/cross-border entrants, a trend worth monitoring against American Banker's observation that comparable novel charters elsewhere have largely struggled to gain traction. Periodic update · new data 2026-09-28 #### Licensing, Authorisation & Market Access Connecticut's Public Act 25-66, effective October 1, 2025, expands the scope of activity subject to money-transmission licensure to explicitly cover digital wallets and mobile money-transmission applications. This is a market-access development for any payments business, bank-affiliated PSP or non-bank payment institution or e-money issuer, whose product includes wallet functionality or virtual-currency handling and that serves Connecticut consumers. Alongside the licensure expansion, the act restricts eligible custodians of customer virtual currency to entities that are themselves licensed money transmitters, FDIC-insured depository institutions, or third parties approved by the state Banking Commissioner, meaning a non-bank payment institution seeking to offer virtual-currency custody in Connecticut must either hold the state money-transmitter licence directly or route custody through a bank or an approved third party rather than self-custody outside that perimeter. The Connecticut Department of Banking's consumer and industry advisory directly and independently confirms the practical reach of this licensure expansion: persons who exchange virtual currency for fiat currency, and persons who operate virtual-currency ATMs or kiosks, are within scope of the licensure requirement. This is a Tier-1 primary-regulator statement, distinct from the secondary law-firm commentary describing the amendment's broader effect, and it establishes with confidence that the state regulator itself reads the amended statute as reaching exchange and kiosk operators, not merely traditional money-transmission activity. For market entrants, the practical implication is that the bank-PSP versus non-bank-PI distinction now carries added weight in Connecticut specifically for virtual-currency-adjacent products: a bank or FDIC-insured institution can hold customer virtual currency directly under its existing regulatory status, while a non-bank payment institution or e-money-style operator must either obtain the state money-transmitter licence itself or arrange custody through an approved third party. This narrows the operational options available to non-bank entrants relative to bank-affiliated ones, and it does so specifically in the virtual-currency segment of Connecticut's payments market rather than across money transmission generally. #### Outlook The confidence level on the core licensure-expansion and custody-restriction findings is Probable, based on convergence between one Tier-1 regulator advisory and secondary law-firm summaries, but no direct retrieval of the cga.ct.gov chaptered statute text occurred this cycle. A future direct retrieval of the statute would be the clearest path to upgrading confidence to Confirmed. Watch also for any Banking Commissioner guidance clarifying the approval process for third-party virtual-currency custodians, which would materially affect which non-bank entities can participate in this segment of the Connecticut market. **3 earlier distinct update(s)** Periodic update · new data 2026-09-22 #### Licensing, Authorisation & Market Access Connecticut's money-transmission licensing perimeter expanded significantly across two successive enactments. Public Act 24-146, effective October 1, 2024, first brought virtual-currency kiosk (crypto ATM) operators explicitly within the state's money-transmission licensure requirement. Public Act 25-66, effective October 1, 2025, went further, expanding money-transmission licensure to cover digital wallets and mobile-app-based transmission generally, and restricting permissible custodians of customer virtual currency to licensed money transmitters, FDIC- or NCUA-insured institutions, or third parties specifically approved by the Banking Commissioner. Both findings carry Confirmed confidence, corroborated across a T1 regulator FAQ and T3 law-firm secondary reporting. The practical effect for market access is a narrower field of permissible participants: nonbank entities offering virtual-currency transmission or custody services in Connecticut must now hold a money-transmission licence and structure any custody arrangement to route through one of the three permitted custodian categories. This is a nonbank-focused expansion -- the affected entities are payment companies and virtual-currency businesses rather than depository institutions, which continue to operate under their existing prudential frameworks. #### Outlook No primary CGA bill-text page for Public Act 25-66 (HB 7082) was directly retrieved this cycle, so the underlying statutory language rests on a T1 FAQ and T3 secondary summaries; confirming the primary bill text remains an open item. Market participants should also watch for whether the Banking Commissioner issues further guidance on the third-party custodian approval pathway introduced by PA 25-66, since that pathway's administration will determine how much market access nonbank custody providers retain. Periodic update · new data 2026-09-14 #### Licensing, Authorisation & Market Access Connecticut's Public Act 25-66 represents a material tightening of licensing and market-access requirements around virtual-currency activity, achieved by expanding the existing Money Transmission Act rather than creating a new licence class. The amendments explicitly bring digital wallets and mobile apps that store or route virtual currency or tokenized value on behalf of consumers within the definition of covered money-transmission activity, a probable-confidence finding drawn from legal commentary describing the statute's scope expansion. Most significantly for market access, the Connecticut Department of Banking has confirmed, through direct primary-source guidance, that any entity engaging in money transmission for Connecticut residents, including virtual-currency custody or exchange activity, requires MTA licensure regardless of the entity's physical presence in the state. This is a confirmed extraterritorial licensure position: an out-of-state nonbank payment-institution-type provider cannot serve Connecticut residents without securing Connecticut MTA licensure, purely on the basis of customer location rather than provider location. Alongside the scope expansion, PA 25-66 narrows the range of permissible custodians of customer virtual currency to three defined categories: licensed money transmitters, FDIC-insured banks and credit unions, or third parties expressly approved by the Banking Commissioner. This custody restriction is the clearest expression of the bank-PSP versus non-bank PI/EMI distinction in this cycle's findings: a nonbank virtual-currency provider's safeguarding arrangement must now route through one of these approved channels, whereas a bank-affiliated provider's own FDIC-insured status may satisfy the requirement directly. #### Outlook Non-bank payment institutions and e-money-institution-type virtual-currency providers serving Connecticut residents should confirm licensure status under the expanded MTA scope and review custody arrangements against the three-category restriction. Watch for Department of Banking guidance clarifying the scope of Banking-Commissioner-approved custodial parties, and for enforcement activity testing the confirmed extraterritorial licensure position against out-of-state providers. Periodic update · new data 2026-09-05 #### Licensing, Authorisation & Market Access Connecticut's Public Act 25-66 expands the Money Transmission Act's definitions of money transmission and stored value to expressly cover digital wallets and tokenized value, requiring licensure for wallet providers not otherwise exempt, effective October 1, 2025. The amendment also narrows permissible custody arrangements: any entity holding customer virtual currency on behalf of a licensed transmitter must itself be a licensed money transmitter, an FDIC-insured bank or credit union, or a Banking-Commissioner-approved third party. Together these provisions bring the wallet and custody layer of virtual-currency services within Connecticut's licensing perimeter in a way the prior statute did not clearly require. The Department of Banking has followed the statutory expansion with active supervision. In March 2026 it summarily suspended a virtual-currency kiosk operator's money transmission license and issued a temporary cease-and-desist order for net-worth, fee-cap, and disclosure violations, signaling permanent revocation and civil penalties of up to $100,000 per violation. The enforcement action demonstrates that the licensing expansion is not merely definitional: examiners are applying it with real supervisory consequence within the same cycle the custody restrictions took hold, evidencing a bank-versus-nonbank access asymmetry in which only insured depositories, licensed transmitters, or commissioner-approved third parties may hold customer virtual currency. #### Outlook The near-term question is whether the Department of Banking proceeds to permanent revocation and assesses civil penalties against the suspended operator, and whether other Connecticut virtual-currency businesses adjust custody arrangements to comply with the new restrictions ahead of similarly active supervision. A pattern of enforcement against non-compliant kiosk operators is a plausible next development given the explicit, numerically defined thresholds the amended Act now provides for examiners to apply. **Sources and findings (6)** 1. T1 [https://portal.ct.gov/DOB/Consumer-Credit-Licensing-Info/Consumer-Credit-Licensing-Information/Money-Transmitter-Licensing-Information](https://portal.ct.gov/DOB/Consumer-Credit-Licensing-Info/Consumer-Credit-Licensing-Information/Money-Transmitter-Licensing-Information) retrieved 2026-07-04 2. T1 [https://portal.ct.gov/DOB/Consumer-Credit-Licenses/Consumer-Credit-Licenses/Money-Transmitters-Licensed-in-Connecticut](https://portal.ct.gov/DOB/Consumer-Credit-Licenses/Consumer-Credit-Licenses/Money-Transmitters-Licensed-in-Connecticut) 3. T1 [https://portal.ct.gov/-/media/dob/consumer-credit-licensing-info/department-of-banking-issues-consumer-and-industry-advisory-on-money-transmission.pdf](https://portal.ct.gov/-/media/dob/consumer-credit-licensing-info/department-of-banking-issues-consumer-and-industry-advisory-on-money-transmission.pdf) retrieved 2026-07-04 4. T1 [https://portal.ct.gov/dob/financial-institutions-division/fid-applications/innovation-charter-application](https://portal.ct.gov/dob/financial-institutions-division/fid-applications/innovation-charter-application) retrieved 2026-07-04 5. T3 [https://ctnewsjunkie.com/2024/09/27/connecticuts-fintech-hub-adds-second-innovation-bank/](https://ctnewsjunkie.com/2024/09/27/connecticuts-fintech-hub-adds-second-innovation-bank/) retrieved 2026-07-04 6. T3 [https://cornerstonelicensing.com/money-transmitter-laws/connecticut-money-transmitter-regulations/](https://cornerstonelicensing.com/money-transmitter-laws/connecticut-money-transmitter-regulations/) retrieved 2026-07-04 ### W1b Conduct, Safeguarding & Promotions limited signal Confirmed confirmed 2026-07-04 Sec. 36a-613 imposes detailed pre-account and pre-transaction disclosure duties on virtual-currency kiosk operators, extended by PA 25-66 to all virtual-currency transmitters and now under active enforcement (March 2026 licence suspension). Standing sub-brief · as of 8 July 2026 220 words · last cycle 2026-09-28 #### Conduct, Safeguarding & Financial Promotions Connecticut's conduct and safeguarding layer for money transmission licensees now sits on two pillars. The older pillar, dating to Public Act 13-253, deems permissible investments made under the money-transmission statute held in trust for claimants against the licensee by operation of law -- immune from creditor or judgment-creditor attachment even where commingled with other licensee assets, a core customer-fund-protection backstop functionally comparable to EU/UK safeguarding regimes. The newer pillar is Public Act 25-66, effective October 1 2025, which bars unauthorised use of customer virtual currency, restricts custody delegation to licensed, insured, or Commissioner-approved third parties, restricts FDIC-insurance-related promotional claims to genuinely insured deposit accounts, and adds parental-verification and data-deletion requirements for minors' money-sharing apps. This is Connecticut's most substantive money-transmission-law overhaul since the 2017 virtual-currency amendments, and it materially raises the compliance burden for CT-licensed virtual-currency transmitters while constraining FDIC-insurance marketing language that has historically been a source of consumer-protection enforcement risk. #### Outlook PA 25-66's detailed custody and disclosure provisions remain corroborated mainly through secondary legal-alert sources rather than a direct citation to enacted statutory text; a stronger primary-text anchor is needed before module confidence can move from High to Confirmed. Watch for the first enforcement action tested directly against PA 25-66's new custody and promotional-claims restrictions, as distinct from the pre-existing kiosk-fee-cap enforcement track. Periodic update · new data 2026-09-28 #### Conduct, Safeguarding & Financial Promotions Public Act 25-66 extends conduct and safeguarding obligations that had previously applied only to virtual-currency kiosk operators to all virtual-currency transmitters operating in Connecticut. Disclosure and receipt requirements, previously a kiosk-specific obligation, now apply across the broader population of virtual-currency money-transmission licensees, and the act separately strengthens advertising restrictions applicable to those licensees. This represents a conduct-regime tightening that runs parallel to, and is enacted within, the same instrument as the licensing and market-access changes described elsewhere in this brief. A further and distinct safeguarding-adjacent provision codifies customer-held virtual currency as a proportional property interest in the event of a licensee's insolvency. This is a conduct and consumer-safeguarding development with direct relevance to how custodial risk is allocated: rather than customer virtual currency being treated as a general unsecured claim against an insolvent licensee's estate, the statute establishes a proportional property-interest characterization, which is a materially different position for a customer in an insolvency scenario. This provision should be read alongside the custody-eligibility restriction covered under the licensing lens, since together they define both who may hold customer virtual currency and what legal protection that customer retains if the holder becomes insolvent. The confidence attached to these conduct and safeguarding findings is lower than the licensing findings above: the disclosure-extension and advertising-restriction elements trace to a single Tier-3 secondary source and are held at Uncertain confidence pending independent corroboration or direct statutory retrieval, whereas the underlying custody-eligibility restriction itself carries Probable confidence from multiple corroborating sources. Readers should weight the disclosure and advertising elements of this development accordingly until further verification occurs. #### Outlook The clearest path to resolving the confidence gap on the disclosure and advertising elements of this development is direct retrieval of the PA 25-66 statutory text from cga.ct.gov, which was not queried this cycle. Watch also for the Connecticut Department of Banking to issue further guidance on how the proportional property-interest provision would be administered in an actual insolvency proceeding, since the statutory characterization alone does not resolve procedural questions about how claims would be valued or distributed. **3 earlier distinct update(s)** Periodic update · new data 2026-09-22 #### Conduct, Safeguarding & Financial Promotions Connecticut's conduct-and-disclosure framework for virtual-currency kiosk operators, set out in Conn. Gen. Stat. Sec. 36a-613, requires a bolded consumer warning -- in English, and acknowledged by the customer -- that virtual-currency losses from fraud or accident may be unrecoverable and that transactions themselves are irreversible. This is a Confirmed finding sourced from statute text (T2). It functions as a risk-disclosure mechanism rather than a fund-protection or safeguarding mechanism in the traditional sense: it warns the consumer about the nature of the underlying asset's irreversibility rather than protecting customer funds held by the operator. This disclosure regime is being actively enforced. In March 2026, the Connecticut Department of Banking summarily suspended a virtual-currency kiosk operator's money-transmission licence, with a T1 primary enforcement order confirming the operator had been licensed since July 27, 2022, alleging violations of Sec. 36a-613 disclosure, fee-cap, transaction-limit, receipt-content, senior-customer-call and refund requirements. This is a Confirmed finding directly evidencing that Connecticut's conduct rules for this nonbank licensee category carry operational enforcement weight rather than remaining declaratory. #### Outlook The disposition of the March 2026 suspension matter -- whether the licence is ultimately revoked or reinstated -- remains unconfirmed this cycle. That outcome, together with whether the Department of Banking pursues comparable action against other kiosk operators under the same conduct provisions, will indicate how systematically this disclosure and fee-cap regime is being enforced across the nonbank virtual-currency kiosk sector statewide. Periodic update · new data 2026-09-14 #### Conduct, Safeguarding & Financial Promotions Connecticut's conduct-side requirements for virtual-currency transmitters have expanded materially this cycle, running in parallel with the licensing-side tightening under W1a. Detailed disclosure and receipt requirements, covering fee transparency, unauthorized-transfer liability, and irreversibility warnings, now apply to all virtual-currency transmitters operating in the state rather than solely to kiosk operators, a probable-confidence finding representing a genuine broadening of consumer-facing conduct obligations. The operative mechanism for this expansion is the Digital Currency Kiosk Consumer Protection Regime, codified at Conn. Gen. Stat. §36a-613, whose fee, transaction-limit, refund, and kiosk-control amendments became fully operative June 9, 2026. What had previously been a kiosk-specific consumer-protection regime now functions as the general conduct standard for the state's entire virtual-currency-transmitter population, a probable-confidence finding confirming the operative date of this tightening. The safeguarding dimension of this cycle's findings, discussed in more depth under W1a, is directly relevant here as well: the custody restriction to licensed transmitters, FDIC-insured institutions, or Banking-Commissioner-approved parties functions as a de facto safeguarding mechanism, with customer virtual currency held via fdic_pass_through-style arrangements where the underlying provider is not itself a bank. #### Outlook Virtual-currency transmitters serving Connecticut residents should review onboarding and per-transaction disclosure workflows against the fee-transparency, unauthorized-transfer-liability, and irreversibility-warning requirements that now apply statewide. Watch for Department of Banking enforcement activity testing compliance with the newly extended disclosure regime, now that the June 9, 2026 operative date has passed. Periodic update · new data 2026-09-05 #### Conduct, Safeguarding & Financial Promotions Connecticut's kiosk-specific conduct regime under Conn. Gen. Stat. Sec. 36a-613 requires a bolded warning, prior to a customer's first transaction, that losses from fraud or error may be unrecoverable and that virtual-currency transactions are irreversible, together with itemized receipt content requirements and a cap on kiosk transaction fees. The March 2026 Department of Banking enforcement bulletin found that a suspended kiosk operator breached the fee cap across more than 500 consumers and over 1,000 transactions, exceeded applicable daily transaction limits, and failed to refund new-customer fraud victims as the statute requires. This is not a novel rulemaking but a direct enforcement test of an existing conduct regime's fee-cap and fraud-refund provisions, and the finding indicates that at least one non-bank kiosk operator's conduct practices had diverged materially from the statutory baseline. The enforcement record does not identify the operator, which limits the extent to which other market participants can benchmark their own practices against the specific facts, but the statutory provisions engaged -- the fee cap, the daily transaction limit, and the fraud-refund duty -- are each independently actionable grounds under the current statute, meaning a similar fact pattern at another operator would likely trigger a comparable response. #### Outlook Watch for whether the Department of Banking's enforcement approach extends to other Connecticut kiosk operators, given the numerically explicit and therefore readily auditable nature of the fee-cap and daily-limit thresholds. A broader compliance sweep of the kiosk sector is a plausible near-term development following this cycle's enforcement action. **Sources and findings (4)** 1. T1 [https://www.cga.ct.gov/2013/act/pa/2013PA-00253-R00SB-00911-PA.htm](https://www.cga.ct.gov/2013/act/pa/2013PA-00253-R00SB-00911-PA.htm) retrieved 2026-07-04 2. T3 [https://www.shipkevich.com/connecticut-enacts-broad-amendments-to-money-transmission-law-targeting-virtual-currency-and-digital-assets/](https://www.shipkevich.com/connecticut-enacts-broad-amendments-to-money-transmission-law-targeting-virtual-currency-and-digital-assets/) 3. T3 [https://www.consumerfinanceandfintechblog.com/2025/07/connecticut-updates-money-transmission-law-to-cover-digital-wallets-and-virtual-currency/](https://www.consumerfinanceandfintechblog.com/2025/07/connecticut-updates-money-transmission-law-to-cover-digital-wallets-and-virtual-currency/) 4. T3 [https://www.shipkevich.com/connecticut-enacts-broad-amendments-to-money-transmission-law-targeting-virtual-currency-and-digital-assets/](https://www.shipkevich.com/connecticut-enacts-broad-amendments-to-money-transmission-law-targeting-virtual-currency-and-digital-assets/) ### W2 Stablecoins & Digital Money Confirmed confirmed 2026-07-04 Connecticut treats virtual currency as within scope of money transmission (2017/2018 amendments), operates a distinct kiosk licensing/disclosure regime (Digital Assets Act) with 15% fee cap and daily limits actively enforced (Bulletin 3238, Mar 2026), and PA 25-66 (Oct 1 2025) extends custody/disclosure/fee/limit rules to digital-wallet-based virtual currency transmission while barring state government acceptance/investment in virtual currency. Standing sub-brief · as of 8 July 2026 206 words · last cycle 2026-07-08 #### Stablecoins & Digital Money Connecticut treats virtual currency -- any digital medium of exchange, stored value, or payment-system-incorporated unit -- similarly to fiat under the money-transmission statute. Kiosk operators must hold a money transmitter licence subject to a 15% fee cap, daily transaction limits of $2,500 for general customers and $2,000 for new customers, mandatory disclosures, and new-customer fraud-refund duties. Public Act 25-66 extends analogous custody and disclosure duties to digital-wallet-based virtual currency transmission and separately bars Connecticut government acceptance of or investment in virtual currency, making Connecticut one of the more prescriptive US state-level virtual-currency consumer-protection regimes. That prescriptive regime is now being actively enforced. In March 2026 the Department of Banking summarily suspended a kiosk operator's money-transmitter licence and issued a Temporary Cease and Desist, under Bulletin 3238, for exceeding the statutory 15% fee cap and daily transaction limits, ordering restitution of consumer scam losses and disgorgement of unsafe-practice revenue -- the first observed use of emergency-suspension power against a Connecticut kiosk operator. #### Outlook With digital-wallet VC transmission now folded into the same custody/disclosure/fee-cap architecture as kiosks, expect continued escalation on this tracker: further kiosk-style enforcement actions are plausible, and the digital-wallet extension itself has not yet been tested in a live enforcement case. no periodic updates on record for this sub-brief ** Sources and findings (6)** 1. T1 [https://portal.ct.gov/DOB/Consumer-Credit-Licensing-Info/Consumer-Credit-Licensing-Information/Virtual-Currency-MTRA-FAQs](https://portal.ct.gov/DOB/Consumer-Credit-Licensing-Info/Consumer-Credit-Licensing-Information/Virtual-Currency-MTRA-FAQs) retrieved 2026-07-04 2. T3 [https://cryptoslate.com/crypto-laws/connecticut-digital-currency-kiosk-consumer-protection-regime/](https://cryptoslate.com/crypto-laws/connecticut-digital-currency-kiosk-consumer-protection-regime/) retrieved 2026-07-04 3. T1 [https://www.cga.ct.gov/2024/rpt/pdf/2024-R-0183.pdf](https://www.cga.ct.gov/2024/rpt/pdf/2024-R-0183.pdf) retrieved 2026-07-04 4. T1 [https://legiscan.com/CT/text/HB07082/id/3253869/Connecticut-2025-HB07082-Chaptered.pdf](https://legiscan.com/CT/text/HB07082/id/3253869/Connecticut-2025-HB07082-Chaptered.pdf) retrieved 2026-07-04 5. T3 [https://moneytransmitterlaw.com/state-laws/connecticut/](https://moneytransmitterlaw.com/state-laws/connecticut/) retrieved 2026-07-04 6. T1 [https://portal.ct.gov/dob/bulletin/2026/bulletin-3238-march-13-2026](https://portal.ct.gov/dob/bulletin/2026/bulletin-3238-march-13-2026) retrieved 2026-07-04 ### W3 Operational Resilience & Critical Infrastructure moved Probable confirmed 2026-07-04 Connecticut lacks a DORA-style dedicated payments operational-resilience regime; resilience obligations arise via the state's data-breach-notification statute, a NIST/ISO/CIS-based cybersecurity safe-harbor law, and PCI DSS as applied to any business handling card data, alongside sectoral (GLBA/NAIC) frameworks for financial institutions. Movement — NEW CT PA 26-51 data-security-incident notification duty, effective Oct 1, 2026_New statute identified this cycle imposing a 3-business-day incident notification duty on DOB licensees._ Kept on Dataprotection.gi, not restated here: data and cloud switching obligations on service providers, including notice periods and charges. [Open its jurisdiction pages on Dataprotection.gi →](https://dataprotection.gi/jurisdictions/) Horizon · 2026-Q2 (±half_year) Connecticut SB 117 massive-breach forensic-examination mandate (pending)_proposed · TT3_ Horizon · 2026-Q2 (±half_year) Connecticut SB 117 massive-breach forensic-examination mandate (pending)_proposed · T_ Standing sub-brief · as of 8 July 2026 187 words · last cycle 2026-10-18 #### Operational Resilience & Critical Infrastructure No DORA-equivalent payments-specific resilience regime exists in Connecticut. Entities owning, licensing, or maintaining Connecticut residents' computerised personal data must notify the Attorney General and affected residents without unreasonable delay, and no later than 60 days from discovery. Public Act 21-119 separately bars punitive damages absent gross negligence or wilful misconduct for entities that have implemented a qualifying cybersecurity framework -- NIST, FedRAMP, CIS, or PCI-DSS combined with another recognised standard. PCI DSS and the Gramm-Leach-Bliley Act apply as industry and sectoral standards rather than a Connecticut-specific payments-resilience mandate, leaving general breach-notification law and the safe-harbor statute as the operative cross-sector backstop for payments firms. A pending bill, SB 117, would create mandatory forensic-examination requirements for entities experiencing a 'massive breach of security' affecting 100,000 or more Connecticut residents, with substantial noncompliance penalties. It remains unenacted as of the cycle's source cutoff. #### Outlook SB 117 is a horizon item rather than settled law; if enacted it would meaningfully raise the operational and cost burden of large-scale breach response beyond the existing notification duty, and is worth tracking toward its expected 2026 second-quarter horizon. Periodic update · new data 2026-10-18 #### Operational Resilience & Critical Infrastructure Connecticut has tightened its operational-resilience and incident-notification framework for licensed financial institutions and payment service providers through Public Act 26-51 (HB 5208), which took effect October 1, 2026. The Act requires Department of Banking licensees, Connecticut-chartered banks, and Connecticut credit unions to file an initial notification with the Department of Banking within three business days of knowing or having reason to know of a qualifying data security incident. The trigger is framed in terms of actual or constructive knowledge, placing weight on the adequacy and speed of a covered entity's internal incident-detection processes, since the clock begins not only on confirmed discovery but on the point at which the entity should reasonably have known of a qualifying incident. Alongside the notification duty, the Act requires covered entities to adopt written information-security programs establishing standards for developing, implementing and maintaining reasonable data-security safeguards. The legislative summary confirms this safeguards-program requirement is framed as consistent with the federal Gramm-Leach-Bliley Act Safeguards Rule, meaning institutions already building GLBA-aligned information-security programs have a template for Connecticut-specific compliance, rather than facing an entirely novel standard. Scope is a material feature of this obligation for payment service providers. Law-firm commentary on the Act indicates the notification duty applies broadly, reaching not only Connecticut-domiciled banks and credit unions but also out-of-state banks operating a branch in Connecticut, out-of-state credit unions with a Connecticut office, and nondepository Department of Banking licensees. This last category is the one of greatest relevance to payment service providers: money transmitters and other nonbank payment companies licensed by the Department of Banking fall within the notification duty's reach on the same three-business-day timeline as depository institutions. For a multistate payment service provider licensed in Connecticut alongside other states, this adds a Connecticut-specific filing obligation to whatever federal or other state breach-notification duties already apply, with a notably short window relative to many general consumer breach-notification statutes, which commonly allow thirty days or more. The operational implication is that incident-response playbooks for Connecticut-licensed entities need a Department of Banking filing step built in on a three-business-day clock, distinct from, and likely faster than, other jurisdictions' breach-notification deadlines the same entity may also be subject to. Because the duty is triggered on a security incident generally, not solely a confirmed data breach, firms must also calibrate their internal thresholds for what constitutes a reportable incident under the Connecticut standard, which may sweep in events that would not meet the bar for notification under other, narrower-drafted statutes. #### Outlook The notification duty is now in force as of October 1, 2026, and covered institutions, including nonbank Department of Banking licensees such as money transmitters, should already be operating incident-response procedures calibrated to the three-business-day filing window. No Department of Banking implementing guidance, FAQ, or enforcement action under the new provision was identified this cycle. Given the breadth of scope described in available commentary, particularly the inclusion of out-of-state institutions with a Connecticut presence, continued monitoring of how the Department of Banking applies and enforces this duty in practice is warranted, as is attention to whether the three-business-day window proves workable for nonbank licensees without the dedicated compliance infrastructure of larger depository institutions. **Sources and findings (4)** 1. T1 [https://portal.ct.gov/AG/General/Report-a-Breach-of-Security-Involving-Computerized-Data](https://portal.ct.gov/AG/General/Report-a-Breach-of-Security-Involving-Computerized-Data) retrieved 2026-07-04 2. T3 [https://www.akingump.com/en/insights/blogs/ag-data-dive/connecticut-expands-breach-reporting-and-creates-cybersecurity-safe-harbor](https://www.akingump.com/en/insights/blogs/ag-data-dive/connecticut-expands-breach-reporting-and-creates-cybersecurity-safe-harbor) retrieved 2026-07-04 3. T4 [https://pivitstrategy.com/connecticut-cybersecurity-laws-you-should-know-2026/](https://pivitstrategy.com/connecticut-cybersecurity-laws-you-should-know-2026/) retrieved 2026-07-04 4. T3 [https://www.cyberadviserblog.com/2026/02/connecticut-senate-bill-raises-the-stakes-on-data-breach-response/](https://www.cyberadviserblog.com/2026/02/connecticut-senate-bill-raises-the-stakes-on-data-breach-response/) retrieved 2026-07-04 ### W4 Scheme & Network Compliance Confirmed confirmed 2026-07-04 Connecticut is one of a small number of US states with an outright statutory ban on credit-card surcharging (Conn. Gen. Stat. §42-133ff), while permitting disclosed cash discounts; enforcement sits with the Department of Consumer Protection/Attorney General under CUTPA. PCI DSS applies as an industry standard rather than a state mandate. Standing sub-brief · as of 8 July 2026 143 words · last cycle 2026-07-08 #### Scheme & Network Compliance Connecticut's credit-card surcharge ban, codified at §42-133ff and amended by Public Act 24-142, prohibits any person from imposing a surcharge on card transactions, while cash and check discounts remain permitted; municipalities and courts are exempted for tax, fine, and registration card payments. Violations are deemed violations of the Connecticut Unfair Trade Practices Act, enforceable by the Department of Consumer Protection Commissioner or the Attorney General through injunctive relief, restitution, and civil penalties. Connecticut is one of only four US states with an outright, judicially-unreversed surcharge ban, a structural constraint that materially shapes merchant fee pass-through design for Connecticut acquirers and independent sales organisations. #### Outlook Absent federal preemption or a successful court challenge, the surcharge ban is a stable, structural feature of the Connecticut card-acceptance landscape; acquirers and ISOs should expect continued CUTPA-based enforcement risk rather than any near-term liberalisation. no periodic updates on record for this sub-brief ** Sources and findings (4)** 1. T1 [https://law.justia.com/codes/connecticut/title-42/chapter-739/section-42-133ff/](https://law.justia.com/codes/connecticut/title-42/chapter-739/section-42-133ff/) retrieved 2026-07-04 2. T3 [https://www.wiggin.com/publication/connecticut-makes-significant-changes-to-its-credit-card-surcharge-law-effective-immediately/](https://www.wiggin.com/publication/connecticut-makes-significant-changes-to-its-credit-card-surcharge-law-effective-immediately/) retrieved 2026-07-04 3. T1 [https://portal.ct.gov/dcp/legal/credit-card-surcharge](https://portal.ct.gov/dcp/legal/credit-card-surcharge) retrieved 2026-07-04 4. T4 [https://merchantcostconsulting.com/lower-credit-card-processing-fees/connecticut-surcharge-laws/](https://merchantcostconsulting.com/lower-credit-card-processing-fees/connecticut-surcharge-laws/) retrieved 2026-07-04 ### W5 Payment Corridor Dynamics Probable confirmed 2026-07-04 Connecticut has no state-specific corridor regulation; cross-border consumer remittance activity out of Connecticut is governed by the federal Dodd-Frank remittance transfer rule (Reg E), while the state's Innovation Bank Charter has begun attracting cross-border settlement/clearing infrastructure providers seeking direct Fed and card-network rail access. Standing sub-brief · as of 8 July 2026 119 words · last cycle 2026-07-08 #### Payment Corridor Dynamics Connecticut-originated consumer cross-border remittances are governed by the federal Dodd-Frank Remittance Rule under Regulation E rather than any state-specific corridor rule. Separately, the Innovation Bank Charter has begun attracting cross-border settlement and clearing infrastructure providers, including Banking Circle US, seeking direct Federal Reserve or card-network rail access to reduce correspondent-banking friction. No Connecticut-specific corridor-volume data has been identified this cycle, leaving the state's cross-border footprint to be inferred from charter-recipient activity rather than published flow statistics. #### Outlook Expect the federal Reg E framework to remain the operative consumer-remittance rule for Connecticut-originated flows, while the more consequential development remains the Innovation Bank Charter's growing draw for wholesale cross-border settlement infrastructure rather than any state-level corridor policy change. no periodic updates on record for this sub-brief ** Sources and findings (3)** 1. T1 [https://www.consumercomplianceoutlook.org/2016/second-issue/an-overview-of-the-regulation-e-requirements-for-foreign-remittance-transfers/](https://www.consumercomplianceoutlook.org/2016/second-issue/an-overview-of-the-regulation-e-requirements-for-foreign-remittance-transfers/) retrieved 2026-07-04 2. T3 [https://www.americanbanker.com/news/connecticuts-special-banking-charter-finds-a-new-purpose](https://www.americanbanker.com/news/connecticuts-special-banking-charter-finds-a-new-purpose) retrieved 2026-07-04 3. T3 [https://hartfordbusiness.com/article/ct-revives-long-dormant-banking-charter-to-woo-fintech-companies/](https://hartfordbusiness.com/article/ct-revives-long-dormant-banking-charter-to-woo-fintech-companies/) retrieved 2026-07-04 ### W6 Industry Structure & Commercial Probable confirmed 2026-07-04 Connecticut's payments/fintech industry structure is anchored in Fairfield County (Stamford/Greenwich) proximity to NYC, Hartford's legacy insurance/finance base, and a deliberate state strategy (Innovation Bank Charter, DOB engagement) to attract wholesale/payments-infrastructure fintechs; financial services leads all sectors for funded CT startups. Standing sub-brief · as of 8 July 2026 114 words · last cycle 2026-07-08 #### Industry Structure & Commercial Dynamics FinTech leads all industries among funded Connecticut startups, with 15 funded firms compared with 10 in IT services, concentrated in Fairfield County (Stamford and Greenwich), Hartford, and New Haven. The state actively markets the Innovation Bank Charter as a differentiator, notwithstanding American Banker's observation that novel special-purpose charters have largely struggled to take off elsewhere, including the OCC's fintech charter and comparable charters in other states. #### Outlook Connecticut's fintech concentration and charter-based differentiation strategy are likely to continue attracting funded startups and charter applicants in the near term, though the American Banker comparator suggests the state's novel-charter bet carries structural adoption risk seen elsewhere in the US charter landscape. no periodic updates on record for this sub-brief ** Sources and findings (4)** 1. T4 [https://fundraiseinsider.com/blog/connecticut-startups/](https://fundraiseinsider.com/blog/connecticut-startups/) retrieved 2026-07-04 2. T3 [https://www.advancect.org/news-and-media/p/item/66373/connecticuts-innovation-bank-charter-offers-a-competitive-path-for-fintech-growth](https://www.advancect.org/news-and-media/p/item/66373/connecticuts-innovation-bank-charter-offers-a-competitive-path-for-fintech-growth) retrieved 2026-07-04 3. T3 [https://www.americanbanker.com/news/connecticuts-special-banking-charter-finds-a-new-purpose](https://www.americanbanker.com/news/connecticuts-special-banking-charter-finds-a-new-purpose) retrieved 2026-07-04 4. T4 [https://www.inven.ai/company-lists/top-19-fintech-companies-in-connecticut](https://www.inven.ai/company-lists/top-19-fintech-companies-in-connecticut) retrieved 2026-07-04 ### W7 Legal & Litigation limited signal Confirmed confirmed 2026-07-04 The Department of Banking actively enforces money transmission and consumer-credit law via consent orders and administrative proceedings, with recent (2025-2026) actions against unlicensed small-loan lending and virtual-currency-kiosk fee/limit violations, alongside the CT Attorney General's active CUTPA/data-privacy enforcement track. Standing sub-brief · as of 8 July 2026 133 words · last cycle 2026-09-05 #### Legal & Litigation The Department of Banking's Enforcement Division ran an active 2025-2026 track. In March 2026, the Department issued an emergency licence suspension and Temporary Cease and Desist against a virtual-currency kiosk operator for fee-cap and daily-limit violations, with restitution and disgorgement ordered. On September 24 2025, the Department entered a consent order against a personal-injury-advance lender for unlicensed 'small loan' activity exceeding the state's 12% usury cap. Together the two actions demonstrate the Department's willingness to deploy both emergency-suspension and negotiated-settlement enforcement tools within the same enforcement cycle. #### Outlook The March 2026 kiosk suspension is the more structurally significant of the two actions, since it is the first observed use of emergency-suspension power against a Connecticut virtual-currency kiosk operator; expect this precedent to be cited in any future kiosk-sector enforcement matters. Periodic update · new data 2026-09-05 #### Legal & Litigation In litigation with payments and derivatives-classification significance beyond its gambling-regulatory origin, the District of Connecticut twice denied Kalshi's bids for a preliminary injunction against the Department of Consumer Protection's cease-and-desist orders. The August 2026 ruling, issued by Judge Vernon D. Oliver, held that the sports event contracts at issue do not qualify as swaps and would not be preempted by the Commodity Exchange Act even if they did. The ruling is directly relevant to how state financial and gambling regulators may treat CFTC-registered platforms operating wagering-adjacent products, since it establishes a judicial precedent for classifying certain event contracts as the underlying regulated activity -- here, sports wagering -- rather than as federally preempted derivatives. The dispute originated from Connecticut Department of Consumer Protection cease-and-desist orders, and the payments-relevant contribution of the ruling is narrowly the classification reasoning rather than the gambling-law merits of the underlying dispute, which fall outside this monitor's remit. Other CFTC-registered platforms and the state regulators assessing them may look to this reasoning as persuasive authority in comparable classification disputes. #### Outlook Watch for whether Kalshi appeals the ruling, whether the parallel CFTC and DOJ suit against Connecticut officials produces a countervailing federal determination, and whether other state regulators cite the Connecticut ruling's classification reasoning in their own enforcement postures toward CFTC-registered platforms. **Sources and findings (4)** 1. T1 [https://portal.ct.gov/dob/bulletin/2026/bulletin-3238-march-13-2026](https://portal.ct.gov/dob/bulletin/2026/bulletin-3238-march-13-2026) retrieved 2026-07-04 2. T3 [https://www.consumerfinanceandfintechblog.com/2025/10/connecticut-department-of-banking-issues-consent-order-for-alleged-unlicensed-small-loan-activity/](https://www.consumerfinanceandfintechblog.com/2025/10/connecticut-department-of-banking-issues-consent-order-for-alleged-unlicensed-small-loan-activity/) retrieved 2026-07-04 3. T1 [https://portal.ct.gov/DOB/Legal-Resources/Legal-Resources/Enforcement-of-Laws-Adminstered-by-the-Department-of-Banking](https://portal.ct.gov/DOB/Legal-Resources/Legal-Resources/Enforcement-of-Laws-Adminstered-by-the-Department-of-Banking) retrieved 2026-07-04 4. T1 [https://portal.ct.gov/-/media/ag/press_releases/2025/updated-enforcement-report-pursuant-to-connecticut-data-privacy-act-conn-gen-stat--42515-et-seq.pdf](https://portal.ct.gov/-/media/ag/press_releases/2025/updated-enforcement-report-pursuant-to-connecticut-data-privacy-act-conn-gen-stat--42515-et-seq.pdf) retrieved 2026-07-04 ### W8 Merchant Acquiring & Risk Probable confirmed 2026-07-04 Merchant acquiring in Connecticut operates under the general bank-sponsorship/ISO model (no CT-specific acquirer charter), overlaid by the state's strict no-surcharge law which materially shapes merchant fee pass-through options; Greenwich-based ISO PayArc is a notable homegrown acquiring-technology player. Standing sub-brief · as of 8 July 2026 106 words · last cycle 2026-07-08 #### Merchant Acquiring & Risk PayArc, a Greenwich, Connecticut payment facilitator founded in 2016, illustrates the standard bank-sponsorship acquiring model used by Connecticut independent sales organisations: it operates as a registered ISO/service provider of Chesapeake Bank, Evolve Bank & Trust, and Pinnacle/Synovus Bank, and as a registered payment facilitator of Pathward Bank. Connecticut's surcharge ban steers merchants and acquirers toward cash-discount pricing as the lowest-legal-exposure fee option, since surcharging itself remains prohibited statewide. #### Outlook Expect the bank-sponsorship ISO model to remain the dominant Connecticut acquiring structure, with cash-discount program design continuing to be the default fee-recovery mechanism for as long as the surcharge ban remains in force. no periodic updates on record for this sub-brief ** Sources and findings (3)** 1. T3 [https://www.payarc.com/about-us](https://www.payarc.com/about-us) retrieved 2026-07-04 2. T4 [https://intellipay.com/is-it-legal-to-pass-on-credit-card-fees-to-customers/](https://intellipay.com/is-it-legal-to-pass-on-credit-card-fees-to-customers/) retrieved 2026-07-04 3. T4 [https://www.privsource.com/acquisitions/payments-fintech/state/connecticut](https://www.privsource.com/acquisitions/payments-fintech/state/connecticut) retrieved 2026-07-04 ### W9 Product Innovation & Market Development Confirmed confirmed 2026-07-04 Connecticut's flagship payments-innovation vehicle is the Innovation Bank Charter (renamed 2024 from the dormant 'uninsured bank charter'), which has drawn cross-border clearing/settlement fintechs (Banking Circle US, Numisma Bank) seeking direct Fed and card-network rail access without a sponsor bank intermediary. Standing sub-brief · as of 8 July 2026 134 words · last cycle 2026-07-08 #### Product Innovation & Market Development Connecticut's Innovation Bank Charter, established under Section 36a-70(t), permits organisation of a non-retail-deposit innovation bank that does not require FDIC insurance, subject to Commissioner sole approving authority, $5 million minimum equity capital, and a $20,000 application fee. Banking Commissioner Jorge Perez has framed the charter as part of a deliberate strategic plan for economic opportunity via charter and licensing innovation, positioning Connecticut as a jurisdiction actively competing for wholesale and cross-border fintech entrants rather than only conventional retail-deposit banks. #### Outlook The Innovation Bank Charter remains Connecticut's flagship payments-innovation vehicle and the clearest driver of direct Fed and card-network rail access sought by cross-border payments firms; continued charter uptake is the key tracker to watch, tempered by the broader US experience that novel special-purpose charters have often struggled to scale. no periodic updates on record for this sub-brief ** Sources and findings (4)** 1. T1 [https://portal.ct.gov/DOB/Financial-Institutions-Division/FID/Organization-of-a-Connecticut-Bank](https://portal.ct.gov/DOB/Financial-Institutions-Division/FID/Organization-of-a-Connecticut-Bank) retrieved 2026-07-04 2. T3 [https://www.klaros.com/post/an-updated-bank-charter-primer](https://www.klaros.com/post/an-updated-bank-charter-primer) retrieved 2026-07-04 3. T3 [https://ctnewsjunkie.com/2024/09/27/connecticuts-fintech-hub-adds-second-innovation-bank/](https://ctnewsjunkie.com/2024/09/27/connecticuts-fintech-hub-adds-second-innovation-bank/) retrieved 2026-07-04 4. T3 [https://hartfordbusiness.com/article/ct-revives-long-dormant-banking-charter-to-woo-fintech-companies/](https://hartfordbusiness.com/article/ct-revives-long-dormant-banking-charter-to-woo-fintech-companies/) retrieved 2026-07-04 ### W10 Consumer Protection & APP Fraud Probable confirmed 2026-07-04 Connecticut has no PSR-style mandatory APP-fraud reimbursement scheme; consumer protection for payments fraud runs through CUTPA enforcement, the Attorney General's Elder Justice Hotline/Consumer Assistance Unit, and PA 25-66's new minors' money-sharing-app safeguards, against a backdrop of sharply rising elder financial-fraud losses. Standing sub-brief · as of 8 July 2026 136 words · last cycle 2026-07-08 #### Consumer Protection & APP Fraud The FBI's Internet Crime Complaint Center recorded $16.6 billion in nationwide fraud losses in 2024, an increase of 388% year-on-year. Connecticut 'false pretense' scams, disproportionately affecting victims aged 65 and over, cost Connecticut victims an estimated $31.9 million in 2024. Public Act 25-66 separately adds parental-verification and identity-check requirements and account-deletion rights for minors' money-sharing app accounts. Connecticut has no PSR-style mandatory reimbursement scheme for authorised-push-payment fraud; consumer redress runs through the Connecticut Unfair Trade Practices Act and Attorney General channels rather than a dedicated reimbursement mandate. #### Outlook Rising elder-fraud losses alongside the absence of a mandatory APP-reimbursement scheme suggest Connecticut consumer redress will continue to rely on CUTPA enforcement rather than a UK/EU-style reimbursement mandate; the minors'-app safeguards under PA 25-66 are the more concrete near-term protective development to track. no periodic updates on record for this sub-brief ** Sources and findings (4)** 1. T1 [https://portal.ct.gov/ag/elderhotline](https://portal.ct.gov/ag/elderhotline) retrieved 2026-07-04 2. T1 [https://www.woodstockct.gov/home/news/preventing-financial-scams-among-connecticut-seniors](https://www.woodstockct.gov/home/news/preventing-financial-scams-among-connecticut-seniors) retrieved 2026-07-04 3. T1 [https://www.cga.ct.gov/2025/SUM/PDF/2025SUM00066-R03HB-07082-SUM.PDF](https://www.cga.ct.gov/2025/SUM/PDF/2025SUM00066-R03HB-07082-SUM.PDF) retrieved 2026-07-04 4. T2 [https://www.bbb.org/local/0111/elder-justice-ct](https://www.bbb.org/local/0111/elder-justice-ct) retrieved 2026-07-04 ### W11 AML/CFT & Financial Crime [Sourced from Sentinel.gi ↗](https://sentinel.gi/jurisdictions/united-states-connecticut/#sec-dom-D7) Probable confirmed 2026-07-04 Sentinel.gi payments-context position: Connecticut money transmitters and virtual-currency businesses operate as MSBs under the federal Bank Secrecy Act/FinCEN framework, layered with state-level BSA/AML examination by the Department of Banking; no CT-specific AML statute displaces the federal BSA/AML program requirement. Standing sub-brief · as of 8 July 2026 132 words · last cycle 2026-07-08 #### AML/CFT & Financial Crime This module surfaces Sentinel.gi-sourced anti-money-laundering intelligence for Connecticut; original illicit-finance typology and sanctions-evasion analysis remain with the Financial Intelligence Monitor per the World Payments Monitor scope guardrail. Connecticut-licensed money transmitters and virtual-currency exchangers or administrators qualify as money services businesses and must register with FinCEN and maintain a Bank Secrecy Act compliance programme. Separately, the Department of Banking may not license persons on OFAC's Specially Designated Nationals and Blocked Persons List, and all money-transmitter licensees undergo vetting for financial responsibility and criminal background. #### Outlook No Connecticut-specific AML statute displaces the federal BSA/MSB framework; expect this surface to remain stable, with any material development more likely to originate from federal FinCEN rulemaking or OFAC list updates than from state-level action. Refer to the Sentinel.gi feed for deeper illicit-finance analysis. no periodic updates on record for this sub-brief ** Sources and findings (6)** 1. T1 [https://portal.ct.gov/-/media/dob/consumer-credit-licensing-info/department-of-banking-issues-consumer-and-industry-advisory-on-money-transmission.pdf](https://portal.ct.gov/-/media/dob/consumer-credit-licensing-info/department-of-banking-issues-consumer-and-industry-advisory-on-money-transmission.pdf) retrieved 2026-07-04 2. T? FIM (sentinel.gi) per-JID baseline profile — United States — Connecticut — Connecticut regulates money transmission and virtual-currency kiosks through its Department of Banking under state licensing statutes, operating inside the uniform federal BSA/FinCEN framework. State licensing power permits suspension of money-transmitter licenses (demonstrated against Bitcoin Depot). Connecticut hosts a dense Fairfield County hedge-fund/private-equity complex and a major Hartford reinsurance sector, both subject to federal AML rules but limited state-level enhanced due diligence beyond licensing and consumer-complaint response. 3. T? FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-003) — Gap: sourcing-thinness 4. T2 FIM (sentinel.gi) sanctions_change_register (issue FIM-BASE-SANC-002) — Sanctions: OFAC listing 5. T? FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-001) — Gap: legal-gap 6. T? FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-002) — Gap: regulatory-failure ### W12 Correspondent Banking, Settlement & Access Confirmed confirmed 2026-07-04 Connecticut's Innovation Bank Charter is materially reshaping correspondent-banking/settlement access for payments firms domiciled in the state; Numisma Bank became the first Tier-3 (uninsured) institution to obtain a Federal Reserve master account under the Fed's 2022 access guidelines (conditional approval Mar 2024, full approval May 2024) -- though not the first uninsured entity ever to hold one (Reserve Trust obtained a master account in 2018 before ceasing operations). Standing sub-brief · as of 8 July 2026 211 words · last cycle 2026-07-08 #### Correspondent Banking, Settlement & Access Connecticut's Innovation Bank Charter is structurally reshaping correspondent-banking and settlement access for payments firms domiciled in the state, and the module's analytical spine remains the asymmetry between bank and non-bank access to direct settlement rails. Numisma Bank, chartered under the Innovation Bank statute, obtained a Federal Reserve master account with conditional approval in March 2024 and full approval in May 2024, becoming the first Tier-3 (uninsured) institution to do so under the Fed's 2022 account-access guidelines. This is not, however, the first uninsured entity ever to hold a Fed master account: Reserve Trust, now defunct, obtained one in 2018, a challenger-flagged correction (hard-flag finding f-002) to this cycle's standing narrative. Industry participants, including Moneycorp, have explicitly framed Fed master-account access via the Innovation Bank Charter as a route to reduce correspondent-banking friction for cross-border payments firms. #### Outlook The Numisma correction should be carried forward into the standing knowledge base to avoid conflating 'first Tier-3 institution under the 2022 guidelines' with 'first uninsured entity ever' -- a distinction the reviewer has flagged as a recurring source of confusion in this module's trackers. Direct Fed master-account access via a state innovation charter remains a structurally significant precedent worth monitoring for further charter recipients seeking to bypass sponsor-bank intermediation. no periodic updates on record for this sub-brief ** Sources and findings (4)** 1. T3 [https://www.freshfields.com/en/our-thinking/blogs/a-fresh-take/chartering-a-new-path-toward-banking-how-the-rise-of-novel-charters-is-reshaping-102l4fk](https://www.freshfields.com/en/our-thinking/blogs/a-fresh-take/chartering-a-new-path-toward-banking-how-the-rise-of-novel-charters-is-reshaping-102l4fk) retrieved 2026-07-04 2. T3 [https://hartfordbusiness.com/article/ct-revives-long-dormant-banking-charter-to-woo-fintech-companies/](https://hartfordbusiness.com/article/ct-revives-long-dormant-banking-charter-to-woo-fintech-companies/) retrieved 2026-07-04 3. T4 [https://www.pcbb.com/bid/2024-09-03-the-impact-of-uninsured-and-novel-bank-charters](https://www.pcbb.com/bid/2024-09-03-the-impact-of-uninsured-and-novel-bank-charters) retrieved 2026-07-04 4. T3 [https://www.advancect.org/news-and-media/p/item/64944/how-is-connecticut-expanding-as-a-fintech-hub-with-strategic-advantages](https://www.advancect.org/news-and-media/p/item/64944/how-is-connecticut-expanding-as-a-fintech-hub-with-strategic-advantages) retrieved 2026-07-04 ### W13 Commercial Intelligence (M&A, Investment & Product) Probable confirmed 2026-07-04 Trailing-12-month commercial activity centered on Connecticut-based payments/fintech firms includes an acquisition of a Glastonbury digital-payments platform by a national core-banking provider, a growth investment in a Greenwich-based payments ISO, and continued build-out of Stamford's Innovation-Bank-Charter cross-border payments cluster. Standing sub-brief · as of 8 July 2026 157 words · last cycle 2026-07-08 #### Commercial Intelligence (M&A, Investment & Product) Four discrete commercial events populate Connecticut's trailing-twelve-month payments record. Jack Henry & Associates entered a definitive agreement to acquire Payrailz, the Glastonbury-based digital payments platform, to expand real-time person-to-person, bill-pay, and account-to-account capabilities; financial terms were not publicly disclosed. Bregal Sagemount made a strategic growth investment in Greenwich-based PayArc to expand its product suite, sales and marketing, and geographic reach; the amount was not publicly disclosed. Banking Circle US launched its US operations in Stamford under the Innovation Bank Charter, providing cross-border payments and currency access via a proprietary platform. Stamford-based fintech Notable Finance raised $6 million to expand its home-sale credit and short-term line-of-credit business for home sellers. #### Outlook The Jack Henry/Payrailz acquisition is the most structurally significant of the four events, consolidating a Connecticut-founded real-time payments platform into a national core-banking-technology vendor; the remaining events point to continued investor interest in Connecticut-domiciled acquiring, cross-border settlement, and consumer-credit fintech niches. no periodic updates on record for this sub-brief ** Sources and findings (4)** 1. T3 [https://www.privsource.com/acquisitions/payments-fintech/state/connecticut](https://www.privsource.com/acquisitions/payments-fintech/state/connecticut) retrieved 2026-07-04 2. T3 [https://www.privsource.com/acquisitions/payments-fintech/state/connecticut](https://www.privsource.com/acquisitions/payments-fintech/state/connecticut) retrieved 2026-07-04 3. T3 [https://www.advancect.org/news-and-media/p/item/64944/how-is-connecticut-expanding-as-a-fintech-hub-with-strategic-advantages](https://www.advancect.org/news-and-media/p/item/64944/how-is-connecticut-expanding-as-a-fintech-hub-with-strategic-advantages) retrieved 2026-07-04 4. T3 [https://hartfordbusiness.com/article/stamford-fintech-notable-finance-raises-6m-to-expand-its-home-sale-credit-business/](https://hartfordbusiness.com/article/stamford-fintech-notable-finance-raises-6m-to-expand-its-home-sale-credit-business/) retrieved 2026-07-04 ** No modules match.** Filters combine as OR inside a group and AND across groups. ## Editorial metadata Provenance only. Nothing below gates publication or affects the render. Editorial metadata for United States – Connecticut| Field | Value | |---|---| | `trust.lawyer_review.status` | never_reviewed | | `trust.lawyer_review.reviewer` | no reviewer on record | | ` trust.content_source` | ai_generated | ## Provenance and declared absence **Disclosure model:** module cards load OPEN; standing positions render in full; sub-briefs and jurisdiction briefs load as a clamped teaser with an explicit “read full” control carrying the true word count; earlier updates stay collapsed behind a counted summary. No text is hidden without disclosing how much of it there is. **Sentinel-fed modules** receive no special rendering treatment. `sentinel_feed` is an attribution chip only: it does not suppress content, does not generate an absence reason code, and does not exclude the module from any count, filter, search index or export on this page. **Family taxonomy** is renderer-level presentation config, not a JID field. Colour is always duplicated in text and is never the sole carrier of meaning. **Suppressed by doctrine:** derived risk score; per-module RAG traffic light; `derived_scores` = `{}`. **Band honesty:** uncertainty bands are computed against a frozen build clock of 2026-10-21. A year-precision row is never promoted into a tighter band. **Orphan deltas:** 0 cycle_delta row(s) target non-module objects and are listed in the rail rather than attached to a card. **Envelope:** baseline resolved at `jurisdiction_json.baseline`; 14 module(s), 60 finding(s), 120 source(s) in the cumulative register. Think something on this page is wrong? [Report an error](https://payments.gi/legal/#contact).