Lead Signal
Connecticut's Public Act 25-66, effective October 1 2025, materially tightens the conduct and safeguarding layer of the state's money-transmission regime, restricting unauthorised use of customer virtual currency, narrowing custody delegation to licensed or Commissioner-approved third parties, constraining FDIC-insurance-related promotional claims to genuinely insured deposit accounts, and adding parental-verification and data-deletion requirements for minors' money-sharing apps. The measure extends the state's existing kiosk-style virtual-currency custody, disclosure, fee-cap and daily-limit regime to digital-wallet-based virtual currency transmission, while separately barring Connecticut government acceptance of or investment in virtual currency. The tightening is not merely legislative: in March 2026 the Department of Banking summarily suspended a virtual-currency kiosk operator's money-transmitter licence and issued a Temporary Cease and Desist for exceeding the statutory 15% kiosk fee cap and daily transaction limits, ordering restitution of consumer scam losses and disgorgement of unsafe-practice revenue -- the first observed use of emergency-suspension power against a Connecticut kiosk operator and a signal that the Digital Assets Act consumer-protection regime now carries active enforcement teeth behind it.
Other Developments
The tightening on the conduct side sits alongside a continued liberalising trend on market access. Connecticut's Innovation Bank Charter, a non-retail-deposit wholesale-bank vehicle requiring $5 million minimum equity capital, Commissioner sole approval, and a $20,000 application fee, has now chartered two entities. Banking Circle US -- corrected this cycle from an initial "nearly nine years" figure to "nearly ten years" as the gap since Connecticut's last new bank charter -- began commercial operations in February/March 2024 as an uninsured wholesale bank focused on cross-border payments and clearing, and has since launched Stamford operations providing cross-border payments and currency access via a proprietary platform. Numisma Bank, also chartered under the Innovation Bank statute, obtained a Federal Reserve master account (conditional approval March 2024, full approval May 2024), becoming the first Tier-3 uninsured institution to do so under the Fed's 2022 account-access guidelines -- though, per a challenger-flagged correction this cycle, not the first uninsured entity ever to hold a Fed master account, a distinction that belongs to the now-defunct Reserve Trust, which obtained one in 2018. Industry participants including Moneycorp have framed this Fed/card-network rail access as a route to reduce correspondent-banking friction for cross-border payments firms domiciled in the state.
Enforcement activity beyond the kiosk case remains active: the Department of Banking's Enforcement Division also entered a September 2025 consent order against a personal-injury-advance lender for unlicensed "small loan" activity exceeding the state's 12% usury cap. On the commercial side, four discrete events populate this cycle's trailing-twelve-month record: Jack Henry & Associates' agreement to acquire Glastonbury-based Payrailz to expand real-time person-to-person, bill-pay and account-to-account capabilities (financial terms undisclosed); a Bregal Sagemount strategic growth investment in Greenwich-based PayArc to expand its product suite, sales and marketing, and geographic reach (amount not publicly disclosed); Banking Circle US's Stamford launch under the Innovation Bank Charter; and a $6 million raise by Stamford-based Notable Finance to expand its home-sale credit business. Separately, Connecticut's outright credit-card surcharge ban -- one of only four such bans in the United States, unreversed by any court -- continues to constrain merchant fee pass-through, steering acquirers and independent sales organisations such as PayArc toward cash-discount pricing as the lower-legal-exposure fee design; PayArc itself operates as a registered ISO/service provider of Chesapeake Bank, Evolve Bank & Trust, and Pinnacle/Synovus Bank, and as a registered payment facilitator of Pathward Bank, illustrating the standard bank-sponsorship acquiring model used by Connecticut ISOs.
On operational resilience, Connecticut has no DORA-equivalent payments-specific resilience regime; general breach-notification law (notification to the Attorney General and residents within 60 days of discovery) and a safe-harbor statute shielding entities that implement a qualifying cybersecurity framework from punitive damages absent gross negligence or wilful misconduct remain the operative cross-sector backstop. A pending bill, SB 117, would add mandatory forensic-examination duties for breaches affecting 100,000 or more Connecticut residents, with substantial noncompliance penalties, though it remains unenacted as of the cycle's source cutoff. On consumer protection, FBI Internet Crime Complaint Center data recorded $16.6 billion in nationwide fraud losses in 2024, an increase of 388% year-on-year, with Connecticut "false pretense" scams -- disproportionately affecting victims aged 65 and over -- estimated at $31.9 million in losses for 2024; Connecticut has no PSR-style mandatory reimbursement scheme for authorised-push-payment fraud, leaving redress to run through CUTPA and Attorney General channels. On the industry-structure side, fintech now leads all industries among funded Connecticut startups, concentrated in Fairfield County, Hartford and New Haven, with the state actively marketing the Innovation Bank Charter as a differentiator notwithstanding American Banker's observation that novel special-purpose charters have "largely struggled to take off" elsewhere.
Cross-Monitor Connections
Connecticut-licensed money transmitters and virtual-currency exchangers or administrators qualify as money services businesses and must register with FinCEN and maintain a Bank Secrecy Act compliance programme; the Department of Banking is separately barred from licensing persons on OFAC's Specially Designated Nationals and Blocked Persons List and vets all money-transmitter licensees for financial responsibility and criminal background. This anti-money-laundering surface is carried into this brief via the Sentinel.gi feed as provenance only; deeper illicit-finance typology, sanctions-evasion analysis, or investigative conclusions on the use of any instrument for illicit purposes are matters for the Financial Intelligence Monitor, not a World Payments Monitor conclusion.
Outlook
Connecticut's regulatory trajectory this cycle is genuinely mixed: tightening on conduct, custody and consumer-facing virtual-currency rules under PA 25-66, while simultaneously liberalising on market access and settlement-rail reach through the Innovation Bank Charter. The March 2026 kiosk enforcement action suggests the Department of Banking will continue to test the boundaries of its emergency powers against virtual-currency non-compliance, and SB 117, if enacted, would add a materially more demanding breach-response obligation atop the existing 60-day notification duty. The Innovation Bank Charter's continued uptake -- and the corrections this cycle to both the Banking Circle charter-gap figure and the Numisma "first uninsured" framing -- underscore that Connecticut's flagship fintech-attraction narrative remains an actively developing, and occasionally revised, story worth monitoring closely across coming cycles.