United States — Arkansas (US-AR)

Licensing, Authorisation & Market Access

Arkansas regulates money transmission and currency exchange under the Money Services Act (Act 442), effective August 1, 2023, administered by the Arkansas Securities Department through the Nationwide Multistate Licensing System using Forms MU1, MU2 and MU3. No separate electronic-money or prepaid-instrument charter exists in Arkansas: non-bank money transmitters and currency exchangers are licensed under the single Money Transmitter License / Currency Exchange License track, while banks and bank holding companies are statutorily excluded from the licensing requirement under Section 23-55-103. This confirms Arkansas's licensing perimeter as a bank-versus-non-bank-PI/EMI split rather than a tiered charter system: any non-bank payment innovator operating in Arkansas must obtain the standard money-transmitter license, since no lighter-touch EMI track is available.

Prudential requirements under the 2023 recodification are calibrated to firm scale. Rule 204 sets a sliding-scale surety bond starting at $10,000 and rising to $300,000, with the Securities Commissioner retaining authority to raise the bond to a $1,000,000 maximum for higher-risk licensees. Rule 207 requires net worth of $10,000 for every $1,000,000 of Arkansas transmission volume, subject to a $50,000 floor and a $1,000,000 ceiling. Together these rules constitute Arkansas's prudential capital regime for non-bank licensees, corroborated by two distinct Arkansas Securities Department sources and treated as a stable, confirmed baseline anchor for the state's licensing perimeter.

Outlook

The Arkansas licensing perimeter is assessed as established and stable, with no legislative signal of an imminent EMI-charter creation or departure from the NMLS-integrated model. The determining variable for non-bank payment innovators remains whether an activity meets the money-transmission trigger under the Money Services Act; no separate stablecoin- or digital-asset-specific licensing track exists, meaning any such activity is captured only through this existing licensing perimeter.

Conduct, Safeguarding & Promotions

Arkansas's safeguarding model for customer funds rests on the Money Services Act's Permissible Investments article, which requires licensees to hold investments matching outstanding transmission and stored-value obligations, rather than segregating customer funds in a discrete trust account, and is backstopped by the Article 6 examination and investigation authority under Section 23-55-601. This asset-matching structure is a materially different safeguarding architecture from the segregated-trust models used in UK and EU electronic-money regimes, a distinction payments operators should weigh when comparing US-state and UK/EU safeguarding exposure. On the conduct side, Attorney General guidance distinguishes three fee categories applicable to Arkansas card-accepting merchants — surcharge fees (credit-card-only, percentage-based), convenience fees (for alternative payment channels), and service fees (specific to particular merchant-category codes) — all lawful in Arkansas provided they are properly disclosed, and all layered atop Visa's nationwide 3% surcharge cap (effective April 15, 2023) and Mastercard's 4% cap.

Outlook

Arkansas's safeguarding and conduct architecture is stable and shows no signal of near-term change: the asset-matching model is embedded in the 2023 recodification, and the AG's fee-disclosure taxonomy is a settled, actively enforced layer atop nationwide scheme surcharge caps.

Stablecoins & Digital Money

The federal GENIUS Act, the payment-stablecoin framework enacted July 18, 2025, is not yet in force: its effective date is the earlier of January 18, 2027, or 120 days after the OCC, FDIC and Treasury finalize implementing regulations, and as of early 2026 only proposed rules and a Treasury advance notice have been issued. This is a material correction: an earlier characterization of the GENIUS Act as already the operative national framework was a factual error identified through cross-check and is corrected here on the basis of OCC bulletin guidance, the Treasury advance notice of proposed rulemaking, and Richmond Federal Reserve commentary. Arkansas itself has no bespoke stablecoin or digital-asset-payment issuer statute; any digital-asset activity touching money transmission falls under the existing Money Services Act, placing Arkansas — alongside New York and California — among states regulating stablecoins solely through existing money-transmitter law pending the federal framework's effective date.

Outlook

The GENIUS Act's implementation timeline is the key variable to track: final OCC/FDIC/Treasury rules have not yet been published, so the precise in-force trigger date ahead of the January 2027 statutory backstop cannot currently be forecast, and Arkansas stablecoin-touching activity remains governed solely by state money-transmitter law until the federal framework is triggered.

Operational Resilience & Critical Infrastructure

Arkansas has no bespoke state operational-resilience regime for payment or financial institutions; resilience oversight of the state's 70 state-chartered banks, holding aggregate assets exceeding $173 billion, flows through FFIEC-aligned federal examination standards applied by the Federal Reserve, FDIC, OCC, NCUA and CFPB, together with the CSBS-inclusive State Liaison Committee. No dedicated DORA-equivalent state resilience regime exists, consistent with the broader U.S. pattern of resilience oversight remaining a federal rather than state function. A distinct statute governs the public sector: Act 260 of 2021 requires Arkansas public entities to report cybersecurity incidents to Arkansas Legislative Audit, and the 2023 MOVEit/Progress Software breach — which affected organizations Arkansas entities interact with, including retirement systems, banks and the National Student Clearinghouse — illustrates the third-party critical-infrastructure exposure reaching Arkansas-adjacent banks.

Outlook

Arkansas's resilience posture is expected to remain federally led, with no state legislative signal of a bespoke operational-resilience statute; the main watch-item is third-party/vendor exposure of the kind illustrated by the MOVEit breach, which can reach state-chartered banks through shared vendors and clearinghouse relationships even absent a state-specific rule.

Scheme & Network Compliance

Arkansas Code Section 4-115-101 forms the statutory basis for the state's surcharge and convenience/service-fee disclosure regime governing card-payment acceptance. This state disclosure layer sits beneath nationwide card-scheme ceilings: Visa's 3% surcharge cap, effective April 15, 2023, and Mastercard's 4% cap are binding limits Arkansas merchants must observe regardless of the state statute. PCI DSS applies as a de facto technical standard to Arkansas businesses that process or store card payments — covering encryption, access controls and vulnerability testing — though it is not independently codified in state statute.

Outlook

Arkansas's scheme-compliance layer is stable and expected to track nationwide Visa/Mastercard rule changes rather than independent state action; PCI DSS obligations will continue to be enforced contractually by acquirers and card networks rather than by state statute.

Payment Corridor Dynamics

Arkansas sits within the Eighth Federal Reserve District, and five Arkansas-headquartered institutions — Farmers Trust & Savings Bank, FBT Bank, Peoples Bank, Pine Bluff Cotton Belt Federal Credit Union and Signature Bank of Arkansas — are live FedNow participants, positioning the state among early adopters of the Federal Reserve's instant-payments rail. The state's remittance-corridor exposure runs primarily through the national U.S.-Mexico corridor — the largest global outbound remittance flow — where Remitly's share rose from 14% of U.S.-LatAm/Caribbean volume in 2020 to roughly 23% in 2024, overtaking Western Union, while Bitso processed over $6.5 billion in crypto-based U.S.-Mexico remittances in 2024, more than 10% of corridor volume, even as the average fee on a $200 transfer remains just below 5%.

Outlook

Arkansas-specific corridor policy nuance beyond the federal BSA/OFAC framework is not independently evidenced; the key trend to track is continued share migration toward digital and crypto-settled rails in the U.S.-Mexico corridor, alongside incremental expansion of FedNow adoption among the state's community banks and credit unions.

Industry Structure & Commercial Dynamics

Arkansas's payments-adjacent industry structure is anchored by 70 state-chartered banks holding more than $173 billion in aggregate total assets as of March 31, 2026, supervised by the Arkansas State Bank Department within the dual state/national banking system. Conway-based Home BancShares, under chairman and chief executive John Allison, has returned to the bank M&A arena and is flagged among figures expected to shape 2026 banking dynamics, though no specific acquisition target or deal value has yet been disclosed.

Outlook

Arkansas's banking-sector structure is expected to keep consolidating in parallel with continued Venture Center fintech-accelerator activity, meaning the state's community-bank base and its fintech-partnership ecosystem are likely to develop along two simultaneous tracks rather than converge.

Legal & Litigation

The Arkansas Securities Department issued a Request for Cease and Desist Order (C-25-0062) directing NewEraEducation.com to immediately cease all money-transmitter activity in Arkansas until it is properly licensed. Separately, a federal challenge to Arkansas's foreign-ownership restrictions on digital-asset mining (Acts 636 and 174) remains live: a December 2024 temporary restraining order blocked enforcement, the state has appealed to the Eighth Circuit, and oral arguments were held January 14, 2026, with the ruling's outcome and timing not yet known.

Outlook

Two items remain live to watch: the Eighth Circuit's ruling on the digital-asset-mining foreign-ownership appeal, whose date and outcome cannot currently be forecast, and any follow-on enforcement action the Arkansas Securities Department may take against unlicensed money-transmission activity beyond the NewEraEducation.com order.

Merchant Acquiring & Risk

Arkansas has no state-specific merchant-acquiring or ISO-licensing regime; nationwide card-scheme risk controls apply instead, including MATCH-list placement risk at chargeback ratios of 1.50%-2.99% under the Excessive Chargeback Merchant threshold and 3% or higher under the High-Risk Chargeback Merchant threshold, plus acquirer- and ISO-imposed rolling-reserve fund requirements that apply nationally, including to Arkansas merchants.

Outlook

Evidence for Arkansas-specific acquiring practice remains thin — drawn from a single specialist source — and is flagged for additional specialist-industry sourcing in the next research cycle rather than treated as a settled finding.

Product Innovation & Market Development

In December 2025 the Federal Reserve issued a request for information proposing a special-purpose 'Payment Account' at Reserve Banks, tailored to institutions focused on payments innovation and subject to a streamlined review process relative to traditional master accounts. This is a horizon development relevant to non-bank payment-innovator settlement access, running alongside Arkansas's own innovation activity — the Venture Center's Little Rock fintech ecosystem and continuing community-bank adoption of the FedNow instant-payments rail.

Outlook

The Reserve Bank Payment Account proposal remains at the request-for-comment stage; whether it advances to a final rule, and on what terms non-bank payments innovators could obtain streamlined settlement access, is the leading product-access development to monitor for Arkansas-touching fintechs.

Consumer Protection & APP Fraud

The Arkansas Personal Data Protection Act, signed April 11, 2023 and effective July 1, 2025, grants residents rights to access, correct, delete and opt out of the sale of their personal data. Separately, the Arkansas Personal Information Protection Act (Ark. Code Section 4-110-105) requires disclosure of security breaches 'in the most expedient time and manner possible and without unreasonable delay,' with breaches affecting more than 1,000 individuals also reportable to the Arkansas Attorney General.

Outlook

No dedicated APP-fraud reimbursement mandate exists in Arkansas; redress in such cases continues to rely on federal Regulation E protections, card-network zero-liability rules, and the general Deceptive Trade Practices Act, an active Attorney General enforcement docket increasingly touching financial and payments-adjacent data practices.

AML/CFT & Financial Crime

This module is sourced from the Sentinel.gi intelligence feed rather than original WPM illicit-finance analysis: Arkansas money-transmitter licensees must register with FinCEN and maintain a comprehensive, written, risk-based BSA/AML compliance program in addition to satisfying state surety-bond and net-worth requirements. National FinCEN/DOJ enforcement in the period illustrates the illicit-finance risk vectors intersecting money-transmission and cash-logistics channels: in December 2025, Paxful Holdings pleaded guilty to operating an unlicensed money-transmitting business and BSA/AML program failures, incurring a $4 million Department of Justice penalty and a $3.5 million FinCEN penalty, while Brink's Global Services USA was fined $37 million by FinCEN — the first such penalty against an armored-car company — for facilitating roughly $800 million in cross-border transmissions, primarily between the U.S. and Mexico, for unregistered money-services businesses.

Outlook

The Sentinel-fed AML/CFT position is expected to remain stable: Arkansas money-transmitter licensees will continue to carry the standard federal BSA/AML overlay atop state licensing, and further national FinCEN/DOJ enforcement activity against unlicensed and cash-logistics-adjacent actors should be read as illustrative of ambient sector risk rather than as evidence of Arkansas-specific exposure; original illicit-finance analysis is tracked by the Financial Integrity Monitor.

Correspondent Banking, Settlement & Access

Access to Federal Reserve settlement services is structured around a bank-versus-non-bank asymmetry: the Fed's Account Access Guidelines establish a three-tier, risk-based review for master-account applications, with Tier 1 federally-insured depository institutions receiving the lowest-friction review and Tier 3 non-federally-supervised institutions facing the strictest scrutiny. Arkansas's 70 state-chartered banks access settlement services under this standard dual-banking-system master-account architecture via the Eighth Federal Reserve District, with no Arkansas-specific correspondent-banking regulation beyond the federal BSA/customer-due-diligence framework. Two dynamics govern the horizon: the Federal Reserve's proposed 'Payment Account' would explicitly bar the account holder from acting as a correspondent bank for respondent institutions, narrowing the risks such accounts could pose to Reserve Banks and the payment system, while rising AML/CDD compliance costs — per Congressional Research Service analysis referencing BIS data — continue to drive large international correspondent banks to shed relationships with smaller or emerging-market respondent banks, a de-risking dynamic relevant to Arkansas institutions' cross-border settlement access.

Outlook

The proposed Payment Account prototype and the broader de-risking trend are the operative dynamics to track for Arkansas correspondent-banking and settlement access; the explicit bar on Payment Account holders acting as correspondents suggests the Fed intends the vehicle for direct settlement access rather than as a new correspondent-banking channel, while continued de-risking pressure remains a background risk for smaller Arkansas institutions' cross-border relationships.

Commercial Intelligence

Huntington Bancshares announced, on October 27, 2025, a definitive agreement to acquire Cadence Bank, a $53 billion regional bank; deal value was not publicly disclosed, and upon close Huntington becomes a top-ten Arkansas bank by deposits, alongside leading Mississippi and Alabama deposit positions; the transaction is currently pending close. Farmers Bank and Trust (Blytheville, Arkansas) merged with Piggott State Bank and three Missouri banks in September 2025 to form FM Bank & Trust, a combined $1.4 billion-asset, 19-branch institution led by chief executive Randy Scott; deal value was not publicly disclosed. The Venture Center ran its second Arkansas Banking Solutions Accelerator cohort in 2025, selecting ten fintech companies for a 12-week hybrid incubator/accelerator program engaging directly with Arkansas banks; individual investment amounts for the cohort were not publicly disclosed.

Outlook

Arkansas bank-sector consolidation is expected to continue, with the Huntington/Cadence close the leading near-term event to track for its effect on the state's top-ten deposit rankings, while fintech-bank partnership activity through the Venture Center accelerator is likely to keep generating smaller, often financially undisclosed, commercial events rather than headline transactions.