United States — Arizona (US-AZ)

Licensing, Authorisation & Market Access

Arizona regulates money transmission, payment-instrument sale and issuance, and bill-payment services under a dedicated state licence administered by the Department of Insurance and Financial Institutions (DIFI), pursuant to ARS Title 6, Chapter 12 (ARS 6-1201 et seq. and 6-126 et seq.). Licensure runs through the Nationwide Multistate Licensing System following SB1580's 2022 adoption of the CSBS Money Transmission Modernization Act model law. Applicants must demonstrate a minimum tangible net worth of $100,000 and obtain a tiered surety bond ranging from $25,000 to $500,000 depending on the number of in-state agents and locations.

Arizona's cryptocurrency-kiosk regime, enacted via HB2387/ARS 6-1236, does not create a separate kiosk-specific licence; the introduced bill's proposed carve-out was removed before enactment. Kiosk operators instead remain subject to the standard DIFI money-transmitter licence under ARS 6-1201, with the Attorney General assigned fraud-prevention and consumer-protection enforcement under ARS 6-1236(J) as a Consumer Fraud Act matter. This is a layered-enforcement model, not a full carve-out from DIFI oversight -- a correction to an earlier over-broad characterization of the statute.

Outlook

The Arizona Money Transmitter Licence annual renewal deadline falls on November 1, 2026, keeping the licensing regime's compliance calendar active for existing licensees. No change to the core Title 6, Chapter 12 licensing framework is currently anticipated, though the kiosk-specific layered-enforcement model warrants continued attention as DIFI and the Attorney General's Office refine their coordination.

Conduct, Safeguarding & Financial Promotions

Arizona's safeguarding regime, codified through SB1580, requires authorized delegates of money transmitter licensees to hold transmitted funds, net of fees, in trust for the licensee; commingled funds are deemed held in trust to the extent of transmission proceeds. Licensees must additionally file a GAAP-audited annual financial statement within 90 days of fiscal year-end and a quarterly Report of Condition within 45 days of quarter-end, giving DIFI continuous visibility into licensee solvency between examination cycles.

Conduct supervision is active rather than nominal: DIFI's consumer-assistance function achieved more than $4 million in restitution to Arizona consumers over the past year, reflecting a complaint-driven enforcement posture that operates alongside the trust-account safeguarding mechanism. The May 2026 safeguarding-rules discourse elsewhere in the US market makes Arizona's trust-account model, already codified rather than newly proposed, a useful baseline comparator for jurisdictions still designing equivalent protections.

Outlook

No change to the trust-account safeguarding mechanism or the financial-reporting cadence is currently anticipated. Continued DIFI restitution activity is the main indicator to watch for evidence of safeguarding-regime effectiveness in practice.

Stablecoins & Digital Money

Arizona's statutory 'stored value' definition under ARS 6-1201 captures monetary value representing a claim against the issuer, evidenced electronically or digitally, redeemable for money or goods and services, including prepaid access under 31 CFR 1010.100, while excluding closed-loop or loyalty stored value; no dedicated stablecoin-issuer regime exists in the state.

Scottsdale-headquartered Early Warning Services LLC, the Zelle network operator, unveiled ZelleUSD (ZLUSD), a proprietary USD-backed stablecoin, on June 11, 2026, alongside a first cross-border remittance corridor to India. The blockchain infrastructure and regulatory issuance framework for ZLUSD -- including whether Early Warning Services will proceed as a GENIUS Act permitted issuer, via a state trust charter, or through a national bank charter -- remain undisclosed. Separately, the enacted Cryptocurrency Kiosk License Fraud Prevention Law took effect September 26, 2025, lowering daily kiosk transaction limits to $2,000 for new customers and $10,500 for existing customers, and mandating on-screen fraud warnings, transaction receipts, and fraud-victim refunds.

Outlook

The ZelleUSD India remittance corridor is expected to go live in the second half of 2026; its issuance framework disclosure remains the key item to watch given the absence of any Arizona state-level stablecoin licensing regime that would otherwise apply.

Operational Resilience & Critical Infrastructure

Arizona's Department of Insurance and Financial Institutions uses the CAMELS rating system as its primary safety-and-soundness supervisory tool for state-chartered banks, aligned with FDIC, Federal Reserve, and OCC practice. No dedicated payments-specific operational-resilience or critical-infrastructure statute analogous to the EU's Digital Operational Resilience Act exists in Arizona; an internal DIFI Resiliency and Mitigation Council substitutes for a codified regime, applying informally across both bank and non-bank supervised entities.

This absence leaves non-bank payment-services providers -- money transmitters, prepaid-access issuers, and similar licensees -- without a codified operational-resilience obligation distinct from general licensing conditions, even as bank-chartered entities receive resilience-adjacent scrutiny through CAMELS examinations.

Outlook

No legislative or regulatory proposal to introduce a dedicated payments operational-resilience statute has been identified this cycle; the internal DIFI council structure is likely to remain the operative substitute absent a policy shift at the state legislature.

Scheme & Network Compliance

Arizona permits credit-card surcharging within card-network caps -- 3% under Visa rules and 4% under Mastercard rules -- provided the surcharge never exceeds the merchant's actual cost of acceptance; debit and prepaid surcharging remain prohibited. The State of Arizona itself surcharges credit-card payments made to state agencies under its Fiserv merchant-services contract, pursuant to A.R.S. 35-135(F), illustrating that even the state government operates within the same network-rule constraints it expects of private merchants.

A pending legislative proposal, HB2629, would prohibit interchange fees on the tax portion of electronic payment transactions where the merchant discloses the tax amount at authorization, requiring a 30-day credit of any improperly charged amounts and a $1,000 civil penalty per violation. As of this cycle, HB2629's enactment status could not be confirmed beyond a March 2025 committee and third-reading action; the source relied upon was a January 2025 bill summary, and Arizona's state-level legislative status tracking is flagged as an under-indexed research vector meriting a dedicated status check next cycle.

Outlook

HB2629's current legislative status remains the principal open item for this module, particularly given the broader multistate wave of similar interchange-on-tax-amount proposals; a dedicated Arizona state-legislature status check is recommended for the next research cycle.

Payment Corridor Dynamics

Arizona is one of the principal US sending states in the US-Mexico corridor, the world's largest remittance corridor by volume. The average fee for a $200 transfer stood slightly below 5% in Q1 2025, and crypto exchange Bitso claims to have processed more than $6.5 billion in 2024, over 10% of total US-Mexico corridor volume, indicating meaningful crypto-rail penetration of an otherwise mature, bank-and-MTO-dominated corridor.

A second corridor is newly opening: Scottsdale-based Early Warning Services announced India as the first country where US Zelle consumers can send cross-border remittances, enabled by the ZelleUSD stablecoin, with availability expected before the end of 2026. This marks Early Warning Services' first move beyond domestic peer-to-peer transfers into cross-border remittance infrastructure.

Outlook

The US-Mexico corridor is expected to remain Arizona's dominant remittance channel, with continued crypto-rail layering likely. The new US-India corridor's go-live, expected in the second half of 2026, is the key near-term development to watch, alongside any further disclosure of ZLUSD's underlying settlement infrastructure.

Industry Structure & Commercial Dynamics

Early Warning Services, LLC, owner-operator of the Zelle network, is headquartered in Scottsdale, Arizona, and jointly owned by seven of the largest US banks -- Bank of America, Capital One, JPMorgan Chase, PNC, Truist, US Bank, and Wells Fargo -- with more than 1,100 employees, over 70% of whom are locally based. This anchors Arizona as host to a nationally significant payments-industry cluster rather than merely a licensing jurisdiction.

The state's payments and fintech sector shows continued consolidation activity beyond EWS itself: OppFi's $130 million acquisition of BNC National Bank, Paya Holdings' acquisition of Paragon Payment Solutions, and Corsair's majority-stake acquisition of Aurora Payments together illustrate an active bank-fintech and payments M&A cluster with an Arizona nexus.

Outlook

Early Warning Services' move into stablecoin-enabled cross-border remittances via ZelleUSD is likely to reinforce Arizona's position as a payments-industry anchor state; continued bank-fintech M&A activity in the state is expected to persist given the current consolidation pace.

Legal & Litigation

The CFPB's December 2024 suit against Early Warning Services and its owner banks -- Bank of America, JPMorgan Chase, and Wells Fargo -- filed in Arizona federal court, alleged that Zelle network fraud-safeguard failures caused customers to lose more than $870 million over seven years, citing CFPA unfairness and EFTA/Regulation E violations. The CFPB voluntarily dismissed the action with prejudice on March 4, 2025, and the court dismissed it on March 5, 2025; the case is closed and cannot be refiled, correcting an earlier characterization of the matter as still pending.

A separate, live jurisdictional dispute continues: after Arizona filed criminal charges in March 2026 against a CFTC-registered prediction-market platform, following a May 2025 cease-and-desist letter, the CFTC and the Department of Justice sued Arizona -- together with Connecticut and Illinois -- on April 2, 2026, arguing that the Commodity Exchange Act grants the CFTC exclusive jurisdiction over such markets.

At the state level, DIFI issued a Cease and Desist Order against Oasiss Inc., doing business as Oasiss Money Exchange, for operating as an unlicensed money transmitter in Arizona, requiring cessation of operations until licensed and imposing a $10,000 civil money penalty -- a routine but illustrative enforcement action against unlicensed activity.

Outlook

With the CFPB's federal Zelle litigation closed, the CFTC/DOJ jurisdictional dispute with Arizona over prediction markets is the principal live litigation risk to watch in this module; continued DIFI enforcement against unlicensed money-transmission activity is expected to persist as a routine supervisory function.

Merchant Acquiring & Risk

More than 140 licensed adult-use marijuana businesses in Arizona, including roughly 40 dispensaries, face constrained merchant-acquiring and banking access because of federal illegality despite state-level legalization, relying on specialized providers for cash management in place of standard card-acquiring relationships.

Separately, Arizona card-accepting merchants are potentially eligible claimants in ongoing card-network class actions tied to interchange, network, and processor-markup fees, including a $1.2 billion Discover Card settlement; the settlement's claims-filing deadline had already passed as of this cycle's retrieval date.

Outlook

Cannabis-merchant acquiring access is likely to remain constrained absent federal rescheduling or banking-access legislation; no new card-network class-action filing deadlines specific to Arizona merchants were identified this cycle.

Product Innovation & Market Development

Arizona's Attorney-General-administered FinTech Regulatory Sandbox, opened in August 2018 under ARS 41-5601 et seq., was the first program of its kind in the United States, enabling limited-scope testing of innovative financial products, including money transmission, without full licensure. HB2177, enacted in 2019, expanded sandbox eligibility to 'substantial component' providers, enabling RegTech participation, added cybersecurity-disclosure requirements, and removed the Arizona-residency requirement for sandbox test consumers.

The sandbox's continued operation situates Arizona's product-innovation posture alongside the emergence of ZelleUSD, the Scottsdale-headquartered stablecoin and cross-border remittance product, as a further marker of the state's innovation-forward regulatory environment even without a formal digital-asset sandbox track.

Outlook

Arizona's sandbox is expected to remain active and available to fintech applicants; continued monitoring of whether ZLUSD or similar stablecoin products seek sandbox participation would be a notable next development.

Consumer Protection & APP Fraud

HB2387 mandates full refunds, including fees, to new customers reporting crypto-ATM fraud within 30 days, alongside mandatory on-screen fraud warnings and wallet-address receipts, giving Arizona crypto-kiosk users a statutory refund right that did not previously exist.

The scale of the underlying problem is substantial: Arizonans lost an estimated $177 million to cryptocurrency scammers in 2024, a 99% rise in crypto-ATM fraud complaints per FBI data; the Attorney General recovered more than $4 million for consumers in 2025 across roughly 21,000 complaints, while 9,834 Arizona seniors reported elder-fraud losses of $343.8 million in 2025 per FBI IC3 data, underscoring those elder Arizonans as a persistent and rising target population.

Outlook

Elder and cryptocurrency-related fraud losses are likely to remain a top consumer-protection priority for DIFI and the Attorney General's Office; the new HB2387 refund-rights regime is the main statutory tool whose real-world effectiveness will bear continued monitoring.

AML/CFT & Financial Crime

This module's content is Sentinel-fed and carried here as provenance only, per WPM's cross-monitor design; original illicit-finance analysis is not performed at this station. Arizona money transmitter licensees and their authorized delegates must file all federal Bank Secrecy Act currency-reporting, recordkeeping, and Suspicious Activity Report requirements, and timely, complete federal filing is deemed compliance with the state-law equivalent. Separately, ARS 13-2317 criminalizes conducting an unlicensed money-transmitting business under Title 6, Chapter 12, evading Bank Secrecy Act reporting or structuring requirements, and falsifying identity in financial-institution or money-transmitter transactions, punishable up to a Class 3 felony carrying two to twenty-five years.

Outlook

Deeper illicit-finance, sanctions, and travel-rule analysis of Arizona money transmitters and cryptocurrency kiosks belongs to FIM rather than this monitor; this module will continue to carry Sentinel-fed provenance only in subsequent cycles.

Correspondent Banking, Settlement & Access

DIFI charters and supervises Arizona state-chartered banks, credit unions, and trust companies, while national banks regulated by the OCC and out-of-state chartered institutions fall outside DIFI's authority. New state-chartered banks require both DIFI and Federal Reserve Bank of San Francisco preliminary approval, plus FDIC deposit insurance, illustrating the layered dual state/federal chartering system that defines correspondent-access pathways in Arizona.

Cannabis businesses illustrate the module's central access-asymmetry theme in practice: these state-legal but federally illegal operators face correspondent-banking and general banking-access constraints, including bank concern over loss of FDIC protection, limited product access, and continued cash reliance, with DIFI's Banking Division only partially able to mitigate the friction.

Outlook

The dual state/federal chartering system is not expected to change; cannabis-related correspondent-banking access friction will likely persist absent federal rescheduling or a safe-harbor banking statute, remaining the module's key access-asymmetry watch item.

Commercial Intelligence

Four discrete commercial events anchor this cycle's Arizona record. OppFi announced a $130 million acquisition of Glendale-based BNC National Bank, which held approximately $1.1 billion in assets and $1 billion in deposits as of December 31, 2025, on February 3, 2026, for a bank charter, with expected synergies of $60 million in the first year rising to $115 million by year three. Paya Holdings, Inc. acquired Tempe-based Paragon Payment Solutions, an integrated-payments provider processing roughly $1.5 billion in annual volume; the deal value was not publicly disclosed. Private-equity firm Corsair acquired a majority stake in Aurora Payments to support growth initiatives including product and technology enhancement and inorganic expansion, with CEO Brian Goudie retaining a shareholder stake; the deal value was not publicly disclosed. Early Warning Services, LLC unveiled ZelleUSD (ZLUSD), a proprietary USD-backed stablecoin, on June 11, 2026, alongside a first international remittance corridor to India, expected to launch before the end of 2026; the product's underlying value/deal terms are not applicable or not publicly disclosed.

Outlook

The precise transaction value and closing date for the Paya Holdings/Paragon Payment Solutions acquisition remain unconfirmed and merit follow-up; ZelleUSD's India corridor launch, expected in the second half of 2026, is the highest-visibility commercial event to track going forward.