Coinme Inc., a Seattle-based cryptocurrency money transmitter and kiosk operator, has reached a $2.5 million settlement with the Illinois Department of Financial and Professional Regulation (IDFPR) and 33 other state financial regulatory agencies over violations of the Bank Secrecy Act (BSA) and anti-money laundering (AML) laws.
The settlement introduces significant operational and compliance requirements for the company, including a deadline to terminate its virtual currency kiosk operations, an independent assessment of its BSA/AML programme and a prescribed period for correcting identified deficiencies.
Under the agreement, Coinme must discontinue its virtual currency kiosk operations by January 1, 2027. Failure to meet the deadline could trigger an additional $4 million penalty. The settlement amount will be distributed among the participating states based on transaction volume.
The coordinated action underscores the importance of applying established financial crime prevention requirements to cryptocurrency businesses and other financial service providers, regardless of the technologies or business models they use.
Independent review to assess AML programme effectiveness
A central requirement of the settlement is Coinme’s obligation to engage an independent consultant to evaluate the comprehensiveness and effectiveness of its BSA/AML compliance programme.
The consultant must submit a report to the participating states within six months. Following the filing of that report, Coinme will have 12 months to remediate any deficiencies identified during the review.
The assessment is intended to provide an independent examination of the company’s compliance arrangements and identify areas requiring corrective action.
For cryptocurrency businesses, an effective AML programme generally involves appropriate customer identification and verification, transaction monitoring, suspicious activity reporting, recordkeeping and risk-based controls. The precise requirements depend on the applicable laws and the nature of the regulated activities.
Virtual currency kiosks can introduce particular compliance challenges because they facilitate transactions between customers and digital assets through physical locations. Depending on how the service operates, risks may involve customer identity verification, transaction patterns, the movement of funds and the potential use of digital assets to transfer illicit proceeds.
An independent review can help establish whether a company’s controls are appropriately designed and operating effectively, rather than merely existing as documented policies.
Regulators emphasise consumer protection and financial system integrity
IDFPR Secretary Mario Treto Jr. highlighted the role of enforcement in protecting consumers and maintaining confidence in the financial system as new financial products and technologies emerge.
He also emphasised cooperation between state and federal regulatory partners, noting that innovation in financial services should not come at the expense of consumer safety.
IDFPR Director of Financial Institutions Francisco Menchaca similarly stressed that compliance with financial laws, including the BSA, is essential to protecting the financial system and Illinois consumers.
His remarks reinforced the principle that financial crime compliance obligations extend across the financial services sector, irrespective of the technology or business model involved.
The coordinated settlement reflects the role of state regulators in supervising money transmitters and addressing compliance concerns within their respective jurisdictions.
A January 2027 deadline for kiosk operations
The requirement to terminate virtual currency kiosk operations by January 1, 2027, is a significant operational consequence of the settlement.
Coinme must meet the deadline to avoid the additional $4 million penalty specified in the agreement. The requirement applies specifically to its virtual currency kiosk operations, as described in the announcement.
The settlement also establishes a defined remediation process for any weaknesses identified by the independent consultant. The six-month reporting deadline and subsequent 12-month corrective-action period provide a structured timeline for reviewing and addressing the programme’s deficiencies.
These requirements illustrate how regulatory enforcement can extend beyond monetary penalties to include changes in business operations, independent oversight and formal remediation obligations.
Implications for cryptocurrency and money transmission businesses
The action serves as a reminder that cryptocurrency-related services remain subject to applicable financial crime prevention requirements when they fall within regulated activities.
For virtual currency kiosk operators and other money transmitters, effective compliance requires a clear understanding of their exposure to money laundering and other illicit financial activity. Controls must be proportionate to the nature of their services, transaction volumes, customer base and operating environment.
The settlement also highlights the importance of independent testing and remediation. Organisations need processes that can identify weaknesses, document corrective measures and demonstrate that deficiencies have been addressed.
For compliance teams, key priorities include maintaining appropriate customer verification procedures, monitoring transactions for suspicious patterns, ensuring that reporting obligations are met and reviewing whether internal controls remain effective as products and services evolve.
Broader significance for financial crime compliance
The Coinme settlement illustrates the growing regulatory focus on accountability across emerging financial services. Although digital assets and cryptocurrency kiosks introduce technologies and transaction methods that differ from traditional banking, applicable BSA/AML obligations remain an important part of the regulatory framework.
The combined monetary penalty, operational deadline and independent programme review demonstrate the range of measures regulators may use to address compliance failures.
For the wider financial services industry, the central message is that innovation does not replace the need for effective risk management. Financial institutions, money transmitters and cryptocurrency service providers must ensure that their compliance programmes are appropriately designed, independently assessed where required and supported by timely corrective action.
With the January 1, 2027 deadline approaching, Coinme’s implementation of the settlement requirements will be an important part of its regulatory remediation process.
By FCCT Editorial Team
, an independent military force, and allied militias in Sudan raped several dozen women and girls in West Darfur’s capital, El Geneina, and those fleeing to Chad between late April and late June 2023, Human Rights Watch said today. The assailants appear to have targeted people because of their Massalit ethnicity and, in some cases, because they were known activists.){kind=link}