United States – Iowa

Licensing, Authorisation & Market Access

Iowa's crypto-ATM and kiosk market access regime tightened materially this cycle for nonbank operators while a parallel federal determination narrowed it in the opposite direction for nationally chartered banks. Senate File 2296 requires anyone who owns, operates, markets, or facilitates a crypto-ATM or kiosk in Iowa to hold a money-transmission license under Iowa Code Chapter 533C, and it adds location-reporting and fee-disclosure duties beyond the pre-existing licensing test. The underlying licensing baseline that SF2296 builds on remains Chapter 533C's core standard: a net-worth test under section 533C.801, a bond formula under section 533C.802, and permissible-investments constraints under section 533C.803, all of which continue to apply to any nonbank money-transmission licensee, kiosk operators now included explicitly.

Conduct, Safeguarding & Financial Promotions

Iowa has no dedicated EMI-style conduct regulator; the state's conduct backstop for payments runs through general consumer-protection law layered onto Chapter 533C's own conduct provisions. The Iowa Attorney General's Consumer Protection Division enforces the Iowa Consumer Fraud Act (Iowa Code 714.16) alongside Chapter 533C requirements covering timely transmission, refunds and disclosures.

Stablecoins & Digital Money

Iowa's SF 449 has converted what was previously interpretive-guidance-only oversight of digital-asset kiosks into codified statute, capping daily kiosk transactions at $1,000 per consumer and imposing disclosure, receipt, refund-policy and fraud-warning requirements backed by penalties of up to $100,000 per violation. That state-level tightening arrives as the federal GENIUS Act, signed into law July 18, 2025, approaches its own implementation deadline: stablecoin-issuer licensing and supervision rules are generally due July 18, 2026, under a framework that preserves a state-regulated issuer pathway alongside the new federal regime.

Operational Resilience & Critical Infrastructure

Iowa's payments operational-resilience posture continues to rest on general-purpose statute rather than a payments-specific framework: Chapter 715C requires notice to the Attorney General's Consumer Protection Division within five business days of a breach affecting 500 or more Iowa residents, including breaches of financial account data.

Outlook

Absent a payments-specific operational-resilience statute analogous to DORA, Iowa's posture will likely remain anchored in Chapter 715C's general breach-notification requirements; any tightening is more likely to arrive via federal rulemaking than new state legislation.

Scheme & Network Compliance

Iowa also sits within the majority-permissive U.S. surcharging bloc, allowing credit-card surcharging, including by governmental entities, while debit-card surcharging remains barred nationwide under the Durbin Amendment.

Outlook

Iowa's scheme-compliance posture is stable and unlikely to shift absent federal Durbin Amendment reform or a change in the state's permissive surcharging stance; no new scheme-rule developments were identified this cycle.

Payment Corridor Dynamics

On instant payments, more than sixteen Iowa-headquartered banks and credit unions — including Westside State Bank, GreenState Credit Union, MidWestOne and Veridian Credit Union — are live on the FedNow Service. The Federal Reserve's April 2026 proposal would let banks and credit unions use intermediaries to route the international leg of a cross-border payment through FedNow, extending that infrastructure outward.

Industry Structure & Commercial Dynamics

Iowa's payments fintech base is anchored by a Des Moines-metro cluster comprising Dwolla, VizyPay, SHAZAM and Curql, spanning account-to-account infrastructure, merchant acquiring, core banking connectivity and credit-union investment vehicles respectively.

Outlook

Iowa's commercial base remains stable and concentrated in the Des Moines metro; the principal open question is whether VizyPay's private funding and valuation trajectory becomes more visible, a gap flagged in this cycle's research coverage.

Legal & Litigation

In litigation, the U.S. District Court for the Southern District of Iowa has ordered Hiscox Insurance Co. to produce claims and underwriting documents in a $6.8 million computer-fraud coverage dispute tied to fraudulent ACH transactions that exploited Dwolla's payment system, a case still without a determined coverage outcome. Separately, the Iowa Division of Banking contested a converted national trust bank's attempt to surrender its Iowa money transmitter licence — the Fidelity Digital Assets matter — with OCC Interpretive Letter 1192 (May 2026) ultimately siding against Iowa's preemption position.

Merchant Acquiring & Risk

VizyPay operates as an ISO of sponsor bank Pathward, N.A. (Sioux Falls, SD), the standard sponsor-bank structure underlying Iowa's non-bank merchant acquiring.

Outlook

No material new merchant-acquiring risk events were identified this cycle; the ISO/sponsor-bank model remains the operative structure to monitor.

Product Innovation & Market Development

Curql has invested in Stablecore, bringing stablecoin and digital-asset infrastructure capabilities to credit unions — an early credit-union entry point into stablecoin infrastructure. Separately, the FedNow Service passed 1,400 participants at its two-year mark in July 2025, up from 900 participants at the one-year mark, with emerging use cases including instant payroll, auto-loan disbursements and wallet defunding.

Consumer Protection & APP Fraud

Iowa's Attorney General-led Stop the Scammers Tour has generated 211 fraud investigations across 96 Iowa communities since January 1, 2026, run through general consumer-protection and insurance-division channels rather than a dedicated APP-fraud reimbursement scheme.

Outlook

Iowa lacks a UK/PSR-style mandatory APP-fraud reimbursement scheme; consumer protection continues to run through general Attorney General and insurance-division enforcement, a structural gap worth watching for future state-level reimbursement legislation.

AML/CFT & Financial Crime

Per the Sentinel.gi feed, Iowa money transmitters must register with FinCEN as money services businesses and maintain a BSA/AML program covering CTR/SAR filing, a designated compliance officer and staff training, tied to Chapter 533C's own BSA reporting linkage.

Outlook

This module carries Sentinel-sourced AML/CFT surface only, as provenance; original illicit-finance analysis of Iowa's money-transmission sector belongs to FIM, not WPM. Readers seeking deeper AML/CFT analysis should consult the Sentinel.gi feed directly.

Correspondent Banking, Settlement & Access

Smaller Iowa institutions reach FedNow chiefly through correspondent settlement providers such as Bankers' Bank, which settles FedNow credit transactions for more than 600 community banks including Westside State Bank.

Outlook

Correspondent access remains the structural bottleneck determining which Iowa institutions can reach FedNow directly versus through a correspondent; the Federal Reserve's proposed cross-border FedNow intermediary framework would extend this same access-asymmetry dynamic into international settlement.

Commercial Intelligence (M&A, Investment & Product)

Dwolla itself was acquired by Network Merchants on May 19, 2026, in a deal with undisclosed value — the most significant Iowa payments M&A event of the trailing twelve months. That acquisition followed an October 2025 Money20/20 showcase of Dwolla's RTP- and FedNow-based Instant Payments product.

Outlook

With deal value not publicly disclosed, watch for integration announcements from Network Merchants regarding Dwolla's RTP/FedNow product line, the standout Iowa commercial event of the period.