United States – Idaho

The combined picture for market access is one of continuity and clarification rather than a wholesale regime change: the licensing gateway was already the operative control, and this cycle shows the Department exercising it against both an unlicensed incumbent and an under-capitalised new entrant, while the Legislature has separately carved out and protected a zone of individual self-custody and node-operation activity that sits outside the licensing perimeter altogether.

Other Developments

The Money Transmitters Act's licensing requirement is unchanged and remains the operative statute for market access. Idaho Code Section 26-2903(1) requires a licence for the business of money transmission in Idaho absent a Section 26-2904 exemption; this is standing context against which this cycle's two enforcement and licensing decisions were made, rather than a new development in itself.

The DLT Act's self-custody and node-operation protections create a carve-out that does not reach licensed money-transmission businesses. The new statute bars state and local government from enacting rules that prohibit, restrict, or impair an individual's ability to self-custody a wallet or run a node, a protection framed around individual activity rather than commercial money-transmission services, which continue to require licensure.

Cross-Monitor Connections

The same Department of Finance orders against Rockwallet and PayKES are read in the financial-integrity monitor's output through an AML/CFT and licensing-enforcement lens, and in the crypto monitor's licensing module through a digital-asset-regime lens; all three readings rest on the identical primary-source orders. The DLT Act's self-custody protections also carry directly into the crypto monitor's on-chain-activity module, where the same statute is assessed for its node-operation and wallet-custody implications rather than its payments-market-access implications.

Outlook

Idaho's licensing gateway is likely to remain the primary lever for market access control in the near term, with the Department continuing to apply the net-worth and financial-responsibility tests that defeated the PayKES application and the unlicensed-operation standard that produced the Rockwallet order. The DLT Act's self-custody protections took effect July 1, 2026 and are now in force, establishing a durable boundary between protected individual activity and licensed commercial money transmission that future licensing decisions will need to respect.

2 earlier updates not shown here.

Standing brief · as of 7 July 2026

Written before the update above. Where they differ, the update is the more recent position.

Lead Signal

Idaho's first full baseline cycle surfaces a sharpening contradiction at the centre of the state's payments-regulatory posture: an executive branch that vetoed a bipartisan consumer-protection bill even as its own securities regulator continues to signal accommodation for the instrument most implicated in the state's fastest-growing fraud vector. Governor Brad Little vetoed the Virtual Currency Kiosk Fraud Prevention Act (Senate Bill 1359) on April 2/3, 2026, despite passage through both the House and Senate; AARP Idaho publicly disputed the veto rationale, and sponsors indicated intent to bring revised legislation in a future session. The vetoed bill would have imposed new-customer transaction limits of $2,000 per 24 hours and $10,000 per 30 days, a 72-hour settlement delay on first transactions, mandatory fraud warnings, and fee refunds for fraud victims -- none of which are now in force. SB 1359 would also have nested crypto-kiosk oversight inside the existing Money Transmitters Act (Title 26, Chapter 29), requiring kiosk operators to hold an Idaho money-transmitter licence; that licensing extension is now stalled alongside the consumer-protection provisions. The veto lands against Attorney General data showing cryptocurrency-related consumer fraud losses rising from $19 million in 2023 to over $35 million in 2024, with seniors the largest victim group and crypto-ATM/kiosk scams a substantial driver; FBI Internet Crime Complaint Center data for 2025 puts Idaho crypto-fraud losses above $48 million. The same Idaho Department of Finance that would have gained enforcement tools under SB 1359 had already moved in a more accommodative direction eight months earlier, publishing a September 2025 Crypto ATM Framework Keys paper that frames a right-sized oversight approach intended to let crypto-ATM operators keep operating in Idaho while protecting consumers. The juxtaposition of an escalating, well-documented harm, a legislature that acted on it with bipartisan support, and an executive veto that leaves the substantive protection gap open, makes Idaho's kiosk-fraud file the most consequential single development of this baseline cycle.

Other Developments

Idaho's core non-bank payments licensing gateway is a single unified regime: the Idaho Money Transmitters Act (Idaho Code Title 26, Chapter 29), administered by the Securities Bureau of the Idaho Department of Finance, covers money transmitters, stored-value issuers/sellers, and virtual-currency exchangers alike. Minimum thresholds under the Act require net worth of at least $50,000 (rising $25,000 per branch to a $250,000 cap) and a surety bond of at least $10,000 (rising $5,000 per branch to a $500,000 cap); that same scaled bond -- formally a security device under Idaho Code 26-2908 -- doubles as the state's safeguarding mechanism for customer funds, a materially different architecture from a UK/EU-style client-money trust or segregation regime. Conduct and promotions sit outside any payments-specific regime, backstopped instead by the Idaho Consumer Protection Act (Title 48, Chapter 6) via Attorney General civil enforcement and private rights of action. Licensing enforcement is live: the Department of Finance denied Apex Capital Enterprises LLC's money-transmitter licence application for failing net-worth qualification requirements under Idaho Code 26-2916, though an independent verification challenge has flagged an unresolved discrepancy between the cited order's stated date and the Department's administrative-action page metadata, leaving the precise date -- though not the underlying denial -- unconfirmed pending re-verification.

On digital money, Idaho has no enacted stablecoin-specific statute. A GENIUS-Act-aligned framework was introduced repeatedly in the 2026 session -- four bills in total (HB 586, HB 821, HB 901, and SB 1423) -- with SB 1423 passing the Senate before dying without a House hearing. A separate, already-enacted framework, Senate Bill 1296 (2024), establishes in-force rights to self-custody, Bitcoin mining, and Bitcoin node-running free of state or local restriction, functioning as the state's only enacted digital-money-adjacent statute even as the stablecoin track remains unresolved.

Operational resilience relies entirely on the federal examination stack: Idaho-chartered banks and credit unions are examined for IT/cyber risk through the interagency InTREx programme (FDIC/CSBS/Federal Reserve) rather than any state-specific resilience statute, and the FFIEC's Cybersecurity Assessment Tool sunset on August 31, 2025, redirecting institutions toward the NIST Cybersecurity Framework 2.0 and sector tools such as the Cyber Risk Institute Profile.

Scheme and network compliance remains permissive: Idaho merchants may surcharge subject only to federal card-network caps (Visa 3%/Mastercard 4% or actual cost, whichever is lower), with no state-specific surcharge statute. A second consecutive attempt to restrict interchange scope, Senate Bill 1055 (2025), which would have barred processors from charging interchange on the tax or gratuity portion of a transaction, failed to pass, following a near-identical failed 2023 bill (SB 1066).

Corridor dynamics are shaped by a single load-bearing precedent: the U.S. District Court for the District of Idaho held, in PayServices Bank v. Federal Reserve Bank of San Francisco, that FRBSF properly exercised discretion under 12 U.S.C. 342 to deny a master-account application, dismissing APA, Mandamus Act, and Due Process claims on March 30, 2024. That ruling confirms Federal Reserve Banks' near-unfettered discretion over direct settlement-rail access nationally, and it is the reason Idaho community banks access Fed rails predominantly via correspondent relationships -- such as with Bankers' Bank of the West, which also supports FedNow onboarding -- rather than direct master accounts. The Idaho Bank Act reinforces that federal integration by permitting the Director of the Department of Finance to rely on federal examination reports (Federal Reserve, OCC, FDIC) in lieu of independent state holding-company examination. The Money Transmitters Act separately licenses money transmission both within the United States and to locations outside the United States, bringing outbound cross-border remittance corridors within the state's licensing scope even though no state-run corridor or rail exists.

Industry structure shows a consolidating, competitively tense picture: Idaho Central Credit Union, with approximately $10 billion in assets, ranks among the top 20 U.S. credit unions and is a structurally significant nonbank deposit/payments competitor to community banks, while the Idaho Bankers Association actively contests the credit-union tax-exempt model as a competitive-structure issue. Community-bank consolidation continued with Glacier Bancorp's completed acquisition of Bank of Idaho Holding Co. for $245.4 million, adding roughly $1.3 billion in assets and 15 locations across Eastern Idaho, Boise, and Eastern Washington -- Glacier's 26th bank acquisition since 2000.

On merchant acquiring, Idaho has no dedicated acquiring statute; Idaho Central Credit Union delivers merchant-acquiring services through a partnership with Fiserv/Clover, with high-risk-MCC treatment governed by processor and network policy rather than state law. On product innovation, credit-union vendor partnerships are the dominant pattern: alongside the Department of Finance's accommodative Crypto ATM Framework Keys paper, Idaho Central Credit Union has deployed Zest AI for automated credit underwriting, reporting a 30%+ increase in loan approvals across auto, personal, and credit-card lending with bias testing built into the model.

On the AML/CFT overlay, Idaho-licensed money transmitters must register with FinCEN as Money Services Businesses on Form 107, renewing every two years, maintaining a written BSA/AML compliance programme with a designated compliance officer, and filing Suspicious Activity Reports for transactions of $2,000 or more that are known or suspected to be suspicious; this module carries only the Sentinel.gi payments-context AML posture, since direct Sentinel.gi feed content for US-ID was not accessible this cycle.

Commercial activity in the baseline window is dominated by product and partnership events rather than fresh deal-making: Alkami Technology deployed its ORB digital-banking platform at Idaho Central Credit Union, integrating with ICCU's Fiserv DNA core to add ACH and wire capabilities, and Upstart partnered with ICCU to expand personal-loan origination across Idaho, Washington, and eastern Oregon via its AI lending marketplace. Separately, World Liberty Financial disclosed lobbying spend of roughly $18,000 in travel and lodging plus $450-900 in meals for a Mar-a-Lago dinner hosting three Idaho legislators between February and April 2026, in support of the stablecoin bills.

Cross-Monitor Connections

The kiosk-fraud and AML findings in this cycle carry significance beyond WPM's consumer-protection and licensing framing. Idaho's crypto-ATM/kiosk fraud losses -- Attorney General data showing a rise from $19 million to over $35 million between 2023 and 2024, and FBI IC3 data placing 2025 losses above $48 million -- together with a pending 2026 FinCEN AML/CFT programme-modernisation rulemaking, carry illicit-finance and AML significance that sits outside this monitor's remit. This module (W11) carries only the Sentinel.gi-sourced payments-context AML posture rather than original illicit-finance analysis; readers seeking the illicit-finance dimension of Idaho's crypto-kiosk fraud problem should consult the Financial Intelligence Monitor.

Outlook

Idaho's payments-regulatory trajectory into the next cycle is defined by three open questions rather than settled positions. First, the stablecoin track: four consecutive legislative attempts have failed to produce an enacted GENIUS-Act-aligned framework, and whether a fifth attempt emerges -- amid continuing lobbying activity such as World Liberty Financial's -- will determine whether Idaho joins the ranks of states with a codified stablecoin regime or remains reliant on the 2024 digital-asset-rights statute alone. Second, the kiosk-fraud gap: sponsors of the vetoed SB 1359 have indicated intent to bring revised legislation in a future session, and continuing AG- and FBI-reported loss escalation makes some legislative or administrative response likely, though the accommodative posture in the Department of Finance's Crypto ATM Framework Keys paper suggests any future fix may arrive through guidance rather than statute. Third, the master-account precedent: PayServices Bank v. FRBSF stands as settled law shaping correspondent-dependency for Idaho's community banks, and no countervailing litigation or federal rulemaking is currently in view that would loosen Federal Reserve discretion over direct settlement-rail access. Verification of the Apex Capital Enterprises order date remains an open item for the next cycle.

Outlook

Idaho's payments regime should be read as stable at the licensing-and-bonding level, with one live watch item: whether S1440's excise-tax structure is reintroduced in a future session. Because the bill stalled procedurally at committee referral rather than being voted down, the same or a similar transaction-tax mechanism targeting international money transmissions remains available to be brought back, and firms with Idaho-licensed transmission operations touching cross-border transfers should monitor the next legislative session for its reappearance.

1 earlier update not shown here.

Standing brief · as of 7 July 2026

Written before the update above. Where they differ, the update is the more recent position.

Regulatory Status

Idaho's payments-regulatory architecture, established as a full baseline in this cycle, rests on a single non-bank licensing gateway -- the Idaho Money Transmitters Act (Title 26, Chapter 29), administered by the Securities Bureau of the Idaho Department of Finance -- that covers money transmitters, stored-value issuers/sellers, and virtual-currency exchangers (W1a), backstopped by a scaled bond/security-device safeguarding model under Idaho Code 26-2908 rather than a UK/EU-style trust regime, with conduct and promotions governed generically by the Idaho Consumer Protection Act (W1b). Digital-money regulation is unsettled: no stablecoin-specific statute has been enacted despite four legislative attempts in the 2026 session alone (HB 586, HB 821, HB 901, SB 1423), while a 2024 digital-asset-rights statute (SB 1296) covering self-custody and Bitcoin mining/node-running is in force (W2). Operational resilience and merchant acquiring both rely on federal/network frameworks rather than state-specific statute -- InTREx/FFIEC examination for resilience (W3) and processor/network policy for acquiring (W8) -- while scheme and network compliance remains permissive, with two consecutive legislative attempts to restrict interchange on tax/gratuity having failed (W4).

Corridor and correspondent dynamics are shaped by a single load-bearing federal-court precedent, PayServices Bank v. Federal Reserve Bank of San Francisco, decided in the District of Idaho, which confirms broad Federal Reserve discretion over master-account access and explains why Idaho community banks remain correspondent-dependent (via relationships such as Bankers' Bank of the West) rather than holding direct Fed master accounts (W5/W12); the Idaho Bank Act reinforces this federal integration by permitting reliance on federal examination reports in lieu of independent state holding-company examination (W12). Industry structure shows a fast-growing, structurally significant credit-union sector (Idaho Central Credit Union, ~$10 billion in assets) alongside consolidating community banks (Glacier Bancorp's $245.4 million acquisition of Bank of Idaho), against a backdrop of bank-versus-credit-union tax-exemption tension voiced by the Idaho Bankers Association (W6). The state's litigation and enforcement register combines the PayServices Bank precedent, an MTL licence denial (Apex Capital Enterprises, order date under re-verification), and the 2026 gubernatorial veto of bipartisan crypto-kiosk fraud legislation (W7). Product innovation runs through regulatory accommodation for crypto ATMs (the Department of Finance's September 2025 Crypto ATM Framework Keys paper) and credit-union AI/digital-banking vendor deployments including Zest AI, Alkami's ORB platform, and Upstart (W9/W13). AML/CFT posture layers the federal BSA/FinCEN Money Services Business framework onto state MTL licensing, carried here via Sentinel.gi payments-context sourcing rather than original illicit-finance analysis (W11).

The most acute consumer-harm vector is cryptocurrency-related fraud: Attorney General data shows losses rising from $19 million (2023) to over $35 million (2024), with FBI IC3 data placing 2025 losses above $48 million, concentrated among senior victims of crypto-ATM/kiosk scams. A bipartisan bill (SB 1359) that would have addressed both the consumer-protection gap and nested kiosk licensing within the MTL regime passed both chambers but was vetoed by Governor Brad Little in April 2026, leaving the gap open (W10/W1a/W7).

Outlook

Idaho's overall regulatory trajectory combines a stable, long-established core (the MTL licensing/safeguarding regime, the federal-reliant resilience and correspondent-banking postures, the permissive scheme/surcharge regime) with three areas of active volatility: the unresolved stablecoin legislative track, the vetoed and potentially revived crypto-kiosk consumer-protection and licensing package, and continuing industry consolidation and credit-union/bank competitive tension. The jurisdiction's risk profile is assessed as elevated, with an uncertain regulatory direction driven primarily by the stablecoin (W2), licensing (W1a), litigation (W7), and consumer-protection (W10) modules. Verification of the Apex Capital Enterprises order date is an open item for the next cycle, as is direct Sentinel.gi feed integration for W11 and confirmation of any in-window Idaho fintech funding activity for W13.