United States – Oklahoma

Licensing, Authorisation & Market Access

Oklahoma's money-transmission licensing perimeter is being rewritten by the Money Transmission Modernization Act (HB 3521), which repeals the prior statute outright and recodifies it at 6 O.S. §1551 et seq., effective November 1, 2026. The repeal reaches the Oklahoma Financial Transaction Reporting Act provisions at 6 O.S. §§1511-1515. Primary confirmation of the repeal language directly from the Oklahoma Legislature's bill text has not yet been independently retrieved, and that verification gap remains open. Layered onto this recodification is the state's existing digital-asset kiosk regime: since November 1, 2025, kiosk operators have been required under SB 1083 (6 O.S. §1520.1) to hold an Oklahoma money-transmitter licence, backed by a $500,000 surety bond per operator, a $50 per-location fee, quarterly reporting to the Banking Department, a designated compliance officer, and an obligation to refund defrauded customers. On prudential standards, HB 3521 replaces the existing location-count ladder for the net-worth test with a tangible-net-worth sliding scale, increases licensing fees, and rewrites the bond formula applicable to licensees. All of these obligations sit on the non-bank payment-institution/e-money-equivalent side of the market: Oklahoma's money-transmitter licence framework, including both the incoming Act and the existing SB 1083 kiosk regime, applies to non-bank money transmitters rather than to bank-chartered payment providers, which are not affected by these licensing changes. The transition to the new regime is not a clean cutover: existing Oklahoma-licensed money transmitters must apply for licensure under the outgoing regime before November 1, 2026, while being supervised under HB 3521's new framework once it takes effect, producing a dual-regime window in which application and supervision proceed on different statutory baselines. This sequencing is assessed as a near-term compliance-complexity issue for existing licensees rather than a change to the eventual substantive standard they must meet.

Conduct, Safeguarding & Financial Promotions

Customer-fund protection for Oklahoma money transmitters is not built on trust-account segregation, as in the EU/UK model, but on a mandatory surety-bond regime: electronic-means transmitters must maintain a minimum $200,000 security bond under 6 O.S. §1513(E), with required bonding scaling from $50,000 to $500,000 depending on transaction volume, plus per-delegate increments, and net-worth minimums ranging from $275,000 to $3 million. On consumer-facing conduct more broadly, the Oklahoma Consumer Data Privacy Act (Senate Bill 546) was signed 2026-03-20 and takes effect 2027-01-01, with enforcement held exclusively by the Attorney General, a mandatory 30-day cure period, and penalties of up to $7,500 per violation. This conduct/safeguarding layer applies to non-bank money transmitters and e-money issuers rather than to bank-chartered payment service providers, which remain subject to federal prudential conduct requirements instead of the state bond regime. No Oklahoma-specific financial-promotion or advertising enforcement activity targeting payments or fintech firms was surfaced this cycle, consistent with financial-promotion enforcement being a fleet-wide under-indexed vector.

Stablecoins & Digital Money

Oklahoma's incoming Money Transmission Modernization Act redefines "money" for state money-transmission purposes at 6 O.S. §1553, effective November 1, 2026, to expressly include fiat-backed, sovereign-pegged, fully reserve-backed stablecoin that is redeemable by its issuer. The Act deliberately omits the broader virtual-currency provisions contained in the CSBS model act that informed the legislation, so Oklahoma's stablecoin inclusion is narrower than the full scope contemplated by that model framework. The practical effect is to bring stablecoin transmission activity within Oklahoma's money-transmitter licensing perimeter, on the same non-bank payment-institution/e-money-equivalent licensing track used for other money-transmission activity in the state, rather than through a separate stablecoin-specific licence. Oklahoma's combination of this stablecoin-inclusive money definition with the state's existing SB 1083 digital-asset kiosk licensing regime positions it ahead of the median US state in bringing stablecoin transmission explicitly within a money-transmitter licensing perimeter, even as it declines the CSBS model act's wider virtual-currency scope. That scope choice is the module's key analytical point this cycle: Oklahoma has opted for a narrower, reserve-backed-only definition rather than a comprehensive virtual-currency framework.

Operational Resilience & Critical Infrastructure

Oklahoma governs operational resilience for payments and financial-data systems primarily through a data-security and breach-notification lens rather than a dedicated payments-resilience regime. Amendments to the Security Breach Notification Act, effective 2026-01-01, require notification "without unreasonable delay" following a breach, mandate notification to the Attorney General once 500 or more residents are affected, and introduce a "reasonable safeguards" affirmative defense that gives covered entities an incentive to invest in resilience controls ahead of any incident. This resilience/breach-notification framework applies broadly across data holders regardless of bank or non-bank status, though bank-chartered institutions additionally answer to federal safety-and-soundness examiners on operational-resilience matters in a way non-bank money transmitters do not.

Scheme & Network Compliance

Oklahoma formally ended its long-standing card-surcharge ban with Senate Bill 677, effective 2025-11-01, which repealed 14A O.S. §2-417's prohibition and revised §2-211(B)/(C) to permit merchants to add a surcharge of up to 2% on card transactions, subject to disclosure requirements, while preserving a carve-out that keeps money-transmitter differential pricing on a separate track. The change resolves years of legal uncertainty that followed a 2019 Attorney General opinion warning of First Amendment exposure in the old ban. The surcharge permission applies to card-scheme transactions processed by both bank-chartered acquirers and non-bank payment facilitators alike, while the preserved carve-out for money-transmitter differential pricing keeps non-bank remittance pricing on a distinct track from card-network surcharge rules.

Payment Corridor Dynamics

The US-Mexico remittance corridor remains dominant for Oklahoma's Hispanic-origin senders, and fee compression continues: World Bank data for Q1 2025 puts the average cost of sending $200 through the corridor at slightly below 5%, still above the United Nations' 3%-by-2030 target, though digital-first providers are gaining ground — Remitly overtook Western Union for corridor market-share leadership by 2024. Separately, on the domestic infrastructure side, the Oklahoma Turnpike Authority completed the conversion of its entire eleven-turnpike network to fully cashless tolling in 2024, eliminating cash booths in favor of transponder and license-plate-recognition billing across PIKEPASS/PlatePay.

Industry Structure & Commercial Dynamics

Oklahoma's payments-adjacent industry structure is anchored by two very different institutions: BancFirst Corporation, the state's largest state-chartered bank, is NASDAQ-listed with roughly $14bn in total assets and was ranked in the top 20 of Forbes' 2025 Best Banks list. Oklahoma City-based Paycom Software, NYSE-listed since 2014, reported FY2025 revenue of $2.052bn, up from $1.883bn in FY2024, cementing its position as a major payments-adjacent employer through its payroll and human-capital-management platform. Beneath these anchor institutions, the state's cannabis-banking niche persists as a structurally distinct segment operating largely outside the mainstream correspondent-banking system.

Legal & Litigation

The state's most significant supervisory episode closed out this cycle: the OCC's 2023 consent order against Vast Bank, N.A. of Tulsa over crypto-custody safety-and-soundness deficiencies was formally terminated in September 2025, following the bank's January 2024 exit from crypto banking altogether. Separately, in a shorter-dated individual enforcement matter, the OCC issued a February 2025 Order of Prohibition against a former Chief Lending Officer at BancCentral, N.A. in Alva, Oklahoma, for failing to secure required cash collateral on new-market-tax-credit loans, a lapse that caused a legal-lending-limit breach.

Merchant Acquiring & Risk

Merchant-acquiring risk practice in Oklahoma has been reshaped from two directions simultaneously: effective 2025-11-01, Senate Bill 677 allows merchants to impose card surcharges of up to 2% with mandatory disclosure, ending the legal uncertainty that had constrained acquirers' pricing guidance for years. At the same time, Senate Bill 1083 imposes new risk controls specifically on digital-asset kiosk operators from the same effective date: new-customer transactions are capped at $2,000 per day, and aggregate fees are capped at 15% of the transaction amount, directly targeting the high-fraud cash-to-crypto channel that kiosks represent.

Product Innovation & Market Development

Vast Bank launched a crypto-custody platform in 2021 offering custody of eight cryptocurrencies directly through national-bank checking accounts, an early and ambitious bank-led crypto-banking product, before disabling and removing it on 2024-01-31 following the OCC's consent order, liquidating customers' digital assets as part of the wind-down.

Outlook

No successor bank-led crypto-custody product has emerged in Oklahoma since Vast Bank's exit; this module will track whether any other in-state institution attempts a similar offering under a more conservative compliance posture.

Consumer Protection & APP Fraud

The Oklahoma Consumer Data Privacy Act (Senate Bill 546), in force 2027-01-01, grants consumers rights to access, correct, and delete their personal data and to opt out of targeted advertising, data sales, and profiling, backed by Attorney-General-exclusive enforcement and penalties of up to $7,500 per violation. Separately, Senate Bill 1083's digital-asset kiosk provisions require refunds to defrauded new and existing customers, mandatory fraud-warning disclosures, and live customer-support hours, directly addressing the cash-to-crypto authorized-push-payment fraud vector. Oklahoma still lacks a bespoke bank-transfer APP-fraud reimbursement mandate comparable to the UK Payment Systems Regulator's regime; consumer protection against push-payment fraud in traditional bank transfers remains reliant on general fraud and banking law rather than a dedicated reimbursement rule.

AML/CFT & Financial Crime

This module's Oklahoma-specific coverage is sourced from the Sentinel.gi feed, and no jurisdiction-specific feed content for US-OK has yet been integrated; what follows is generic contextual backdrop rather than original illicit-finance analysis, and confidence is capped at Possible pending feed integration. Oklahoma money-transmitter licence applicants must demonstrate FinCEN money-services-business registration and OFAC list-screening procedures as part of their NMLS applications. Cannabis-related banking relationships in the state require enhanced due diligence and mandatory suspicious-activity-report filings under FinCEN guidance, given the sector's continued federal illegality despite OMMA state licensing. For deeper illicit-finance analysis of the cannabis-banking and digital-asset-kiosk vectors, see the Financial Integrity Monitor's cross-referenced coverage; this module does not perform that analysis directly.

Correspondent Banking, Settlement & Access

The defining feature of Oklahoma's correspondent-banking landscape is a persistent access asymmetry between mainstream bank-chartered institutions and a state-licensed but federally disfavored sector: medical cannabis businesses, which despite Oklahoma Medical Marijuana Authority state licensing continue to face de-risking from correspondent-banking networks reluctant to serve a federally illegal product line, forcing much of the sector into largely cash-only operation. This access gap has not gone unaddressed at the policy level: Oklahoma Attorney General Gentner Drummond joined a bipartisan 32-state coalition of attorneys general in August 2025 urging Congress to pass the SAFER Banking Act, which would allow financial institutions to serve legitimate cannabis businesses without federal exposure.

Commercial Intelligence

The dominant commercial event for Oklahoma payments/banking over the trailing twelve months is BancFirst Corporation's completed acquisition of American Bank of Oklahoma (ABOK), an approximately $393m-asset, six-location institution, which closed 2025-11-17 following Federal Reserve approval; deal value was not publicly disclosed, and full merger into BancFirst is slated for the first quarter of 2026. No distinct Oklahoma-specific fintech venture-funding round with its own trailing-twelve-month event date was identified this cycle beyond national aggregate commentary.