United States — Colorado (US-CO)

The dominant live payments/consumer-credit litigation in Colorado is NAIB et al. v. Weiser, the fintech-industry challenge to the state's 2024 DIDMCA opt-out interest-rate-cap law. After the district court granted a preliminary injunction against Colorado in 2024 and a Tenth Circuit panel reversed 2-1 in November 2025, the full Tenth Circuit vacated that panel decision and granted en banc rehearing on April 7, 2026; the case is now pending en banc consideration with oral argument scheduled for August 18, 2026, and the scope of Colorado's opt-out authority remains unsettled. Alongside this, the Attorney General/UCCC Administrator continues active enforcement against payments-adjacent consumer-finance conduct (debt collection, credit repair).

Colorado's payments industry structure blends one dominant global incumbent (Western Union), a large regional bank now fully absorbed into a national acquirer (FirstBank was acquired by PNC, legally closing January 5, 2026, with customer/branch conversion completed June 22, 2026), and a dense cluster of Denver/Boulder/Fort Collins fintechs spanning embedded finance, PayFac-as-a-service, bill-pay and payroll, within a fast-growing regional venture-funding environment.

Colorado regulates payments/money transmission via a dual bank/non-bank state licensing model. Non-bank money transmitters are licensed and supervised by the DORA Division of Banking under the newly re-enacted Money Transmission Modernization Act (MTMA, HB25-1201, eff. Aug 6, 2025), replacing the former Colorado Money Transmitters Act. Consumer credit/lending entities are separately licensed by the Attorney General's UCCC Administrator. Digital-token issuers can access a securities-registration exemption under the Colorado Digital Token Act.

Colorado's money-transmission safeguarding regime relies on permissible-investment/surety-bond trust protection for payment-instrument holders, coupled with MTMA customer-protection provisions (timely forwarding, receipts, refunds, plain-language disclosure) and mandatory consumer-notice posting. Change-of-control in a licensee requires Division notice/approval and financial and character review.

Colorado has no dedicated stablecoin issuance/reserve/redemption statute. Its principal digital-asset instrument is the 2019 Digital Token Act securities exemption; the 2025 MTMA separately expands money-transmission scope to "digital money movement," pulling some stablecoin-adjacent transmission activity into the licensing perimeter without creating a bespoke stablecoin regime.

Operational resilience for Colorado payment entities is embedded in the money-transmitter examination/recordkeeping regime (quarterly NMLS reporting, agent-roster reporting, record-retention rules) rather than a dedicated op-res statute, supplemented by a general cross-sector data-security duty requiring reasonable security procedures for personal/financial information.

Colorado is one of the few states with its own statutory surcharge regime governing card-scheme interchange pass-through: C.R.S. 5-2-212 permits credit/charge-card surcharging up to 2% or actual merchant discount fee, with mandatory disclosure, signage and line-item receipt rules, while excluding debit, cash and check from surchargeable transactions.

Colorado is a globally significant corridor hub because Western Union, the world's largest cross-border money-transfer business, is headquartered in Denver, operating a vast agent network spanning 200+ countries and territories with substantial local remittance flow originating from the Denver metro region itself.

Merchant acquiring conduct in Colorado is shaped principally by the C.R.S. 5-2-212 surcharge regime (which binds acquirers and merchants on discount-fee pass-through, disclosure and receipt itemization) and by UCCC-based interpretive limits on charging consumers extra for particular payment/processing methods. No distinct Colorado chargeback/dispute-resolution statute was identified beyond these instruments and federal Reg E/Z and card-scheme rules.

Colorado's product-innovation posture centers on its 2019 crypto-friendly Digital Token Act, a state IT mandate to evaluate blockchain/DLT for government projects, growing FedNow instant-payments adoption among Colorado banks, and a pending (not yet enacted) 2026 bill to regulate earned-wage-access services.

Colorado consumer protection for payments harms rests on the Colorado Consumer Protection Act (AG enforcement), a data-breach notification statute (C.R.S. 6-1-716) with a 30-day notice duty and AG/credit-bureau notification thresholds, and dedicated fraud-reporting infrastructure (Stop Fraud Colorado, CBI's 24-hour identity-theft hotline). The AG has directly enforced payment-card breach notification against a Denver merchant.

W11 is Sentinel.gi-fed by design; this collection pass could not retrieve a Sentinel.gi payments-context feed item for US-CO. Structural federal/state AML architecture applicable to Colorado money-transmission licensees (FinCEN MSB registration, BSA program obligations) is noted as factual context only, not as original illicit-finance analysis.

Colorado's correspondent-banking/settlement access runs through the Federal Reserve Bank of Kansas City's Denver Branch, which supervises state member banks, distributes coin/currency, and channels FedNow/Fedwire/FedACH access across Colorado, Wyoming and northern New Mexico. The pending absorption of Colorado's largest state-chartered bank (FirstBank) into a national bank charter (PNC) is reshaping in-state correspondent and settlement relationships.

The dominant trailing-12-month commercial event for Colorado payments/banking is PNC's acquisition of Colorado's largest independent state-chartered bank, FirstBank Holding Company — announced September 2025 and completed January 2026 — which materially reshapes deposit and branch concentration in the Denver metro payments/banking market.