United States – Pennsylvania Payments & Fintech Regulation

US-PA schema world-payments-v1 trajectory: not yet assessed

Last updated · 14 modules · 109 sourced findings · 159 sources in the cumulative register

United States federal law that applies in United States – Pennsylvania is covered once, on the United States page. This page covers United States – Pennsylvania’s own layer: its own law, regulators and enforcement.

Jurisdiction brief

Latest update · 3 November 2026

Lead Signal

Pennsylvania has closed a long-standing perimeter gap in its money transmission regime by formally bringing virtual currency transmission within the scope of the Money Transmission and Virtual Currency Transmission Business Licensing Law. Act 7 of 2025 amended the underlying 1965 statute so that any business transmitting virtual currency for a fee or other consideration to Pennsylvania residents must now hold a licence from the Department of Banking and Securities, on the same footing as traditional money order and check-selling transmission. The amendment took effect on 26 August 2025, meaning crypto-transmitting businesses that previously operated outside explicit state licensure now sit inside the same supervisory perimeter as conventional money transmitters. The same amendment also wrote the federal Bank Secrecy Act and anti-money-laundering compliance obligation directly into Pennsylvania statute, so a lapse that was previously only a federal matter is now independently enforceable by the Department as a state-law violation. For payment firms with a Pennsylvania footprint, the practical consequence is that a virtual-currency-transmission line of business can no longer be run on the theory that only federal registration applies; state licensure, bonding and conduct obligations now attach to it directly.

Key regulatory facts for United States – Pennsylvania
Regulatory DimensionUnited States – Pennsylvania Standing Position
JurisdictionUnited States – Pennsylvania (US-PA)
Regulatory ScopePayments & Fintech Regulation (14 modules, 109 sourced findings)
Licensing, Authorisation & Market AccessMoney transmission licensing under the Money Transmitter Act, as amended by Act 7 of 2025 (effective 2025-08-26), now covers both fiat money transmission and virtual-currency transmission for a fee.
Conduct, Safeguarding & PromotionsPennsylvania has no dedicated payments-conduct/safeguarding regulator akin to CASS; conduct obligations for money transmitters and payment firms flow through DoBS licensing conditions (BSA/AML/IT/disaster-recovery...
Stablecoins & Digital MoneyPennsylvania has reversed its position on virtual currency under the Money Transmitter Act: after a 2019 guidance excluding virtual currency (including Bitcoin) from the definition of "money," DoBS issued an April...
Operational Resilience & Critical InfrastructurePennsylvania lacks a payments-specific operational-resilience regime; DoBS points regulated entities to federal FFIEC/OCC/FDIC/Fed third-party risk guidance rather than issuing its own binding rules for payment firms.
Primary Instruments CitedUnited States – Pennsylvania Official Instrument (pacodeandbulletin.gov 542-html), United States – Pennsylvania Official Instrument (bondexchange.com pennsylvania-money-transmitter-b), United States – Pennsylvania Official Instrument (pa.gov non-bank-licensees), United States – Pennsylvania Official Instrument (pa.gov about-html), United States – Pennsylvania Official Instrument (faisalkhan.com pennsylvania-money-transmitter-l)
Last Confirmed / Updated2026-11-04 (159 sources in cumulative register)

#

Money transmission licensing under the Money Transmitter Act, as amended by Act 7 of 2025 (effective 2025-08-26), now covers both fiat money transmission and virtual-currency transmission for a fee.

Key judgment — Probable · impact MONITOREDPennsylvania's reliance on a voluntary AG awareness campaign, rather than a binding kiosk-operator licensing regime, leaves a persistent market-access and consumer-protection gap for crypto kiosk operators in the state.claims: none recorded
Horizon · 2026-Q4 (± more than a year)PA Virtual Currency Kiosks Act (HB 2643)Proposed · Tier 1 source
Horizon · 2026-Q4 (± a year)Virtual Currency Kiosks Act (HB 2643) pending in Commerce CommitteeProposed · Tier 1 source
Horizon · 2026-Q4 (± more than a year)Senate Bill 245 statewide fintech regulatory sandbox and Regulatory Relief OfficeProposed · Tier 3 source
Horizon · 2026-Q4 (± six months)Virtual Currency Kiosk Regulation bills (SB1015/HB2643) pendingConsultation · Tier 1 source
Standing sub-brief · as of 19 August 2026 270 words · last cycle 2026-11-01

Licensing, Authorisation & Market Access

Pennsylvania's Act 7 of 2025 requires virtual-currency transmitters to obtain a Money Transmitter License under the same statutory footing as fiat money transmitters, effective 2025-08-26. This is a nonbank-facing change: the licence applies to virtual-currency transmitters as money-services businesses, distinct from the state-chartered depository institutions the Department of Banking and Securities also supervises. The codification supersedes the department's 2024 sub-regulatory policy statement; Pennsylvania Code Chapter 19, Section 19.1a, which had housed that policy statement, is now listed as {Reserved}, confirming the transition from administrative guidance to statutory licensing. The Department of Banking and Securities' supervisory base spans 137 state-chartered depository institutions and 30,642 non-depository licensees statewide, the market-access backdrop against which the new virtual-currency requirement now sits.

Periodic update · new data 2026-11-04

Licensing, Authorisation & Market Access

Pennsylvania continues to regulate virtual-currency transmission through its existing money-transmitter framework rather than through a dedicated kiosk-licensing track. The Department of Banking and Securities brought virtual currency transmitters within scope of the state's money transmission law via Act 7 of 2025, which amended the 1965 Money Transmission Business Licensing Law to require any business engaged in transmitting virtual currency for a fee to hold a transmitter licence. The Department has described Act 7 as the first law in the Commonwealth specifically directed at virtual currency, and the Pennsylvania Bulletin's own account of the amendment confirms that the obligation to licence applies to the transmission of virtual currency for a fee, not merely fiat.

What Pennsylvania has not done is create a separate authorisation category or operating standard for the physical kiosks (commonly called crypto ATMs) through which much consumer-facing virtual-currency activity now passes. A bill amending Title 7 of the Pennsylvania Consolidated Statutes to provide specifically for virtual-currency kiosks, impose requirements on the Department of Banking and Securities, and establish a public-education fund financed by the sector, was referred to the House Commerce Committee in mid-June 2026 and has not advanced further. Commercial legal commentary tracking state crypto-licensing regimes as of mid-2026 likewise records that Pennsylvania has no separate kiosk statute, with kiosk-specific legislation still pending rather than in force. The practical effect is that kiosk operators sit inside the general money-transmitter perimeter — subject to licensing, examination and penalty provisions that long predate the kiosk business model — without the operator-specific obligations (such as transaction limits, screen disclosures or fraud-warning requirements at the point of sale) that a dedicated kiosk statute would impose.

This gap has become more visible because the state's primary live intervention in the kiosk space has come from consumer-protection authority rather than from licensing authority. At the end of October 2026 the Office of Attorney General launched a statewide, voluntary 'STOP' sign placement campaign at cryptocurrency kiosks, timed to coincide with National Cybersecurity Awareness Month activity and citing approximately 290 scam complaints involving crypto kiosks over the prior year. That campaign operates alongside, not instead of, the Department of Banking and Securities' money-transmitter licensing regime — no new licence type, examination standard or operator obligation accompanies it. The arrangement leaves market access for kiosk operators governed by a licensing framework not written with kiosks in mind, while the instrument actually addressing kiosk-specific harm is advisory rather than binding.

The broader non-bank licensing population the Department oversees is large: Department data describes 28,450 non-bank licensees spanning mortgage brokers, originators, lenders and servicers, underscoring that virtual-currency transmitters sit within a well-established, high-volume supervisory programme even though the kiosk sub-segment itself remains unaddressed by bespoke rules. Enforcement activity elsewhere in the Department's non-bank remit — including a cease-and-desist action against a money order company and the Department's participation in an $80 million multistate settlement with Block, Inc. over Cash App's Bank Secrecy Act and anti-money-laundering failings — indicates that the Department is an active supervisor of adjacent payments business models, which makes the absence of a kiosk-specific licensing instrument a policy gap rather than an enforcement capacity gap.

For firms operating or planning to operate virtual-currency kiosks in Pennsylvania, the near-term picture is one of licensing continuity under the amended money-transmitter law, with no bespoke kiosk authorisation in force and the legislative proposal that would create one still sitting in committee. Whether the Commerce Committee advances the pending bill before the end of the year will determine whether Pennsylvania moves toward the kiosk-specific regimes that other states have begun adopting, or continues to rely on general transmitter licensing paired with non-binding consumer messaging.

6 earlier distinct update(s)
Periodic update · new data 2026-11-03

Licensing, Authorisation & Market Access

Pennsylvania's money transmission licensing perimeter has been formally extended to cover virtual currency transmission. Act 7 of 2025 amended the state's Money Transmission and Virtual Currency Transmission Business Licensing Law - the modern name for the 1965 statute originally titled the Money Transmitter Act - so that any business transmitting virtual currency for a fee or other consideration to Pennsylvania residents must obtain a licence from the Department of Banking and Securities. The change took legal effect on 26 August 2025. Before this amendment, virtual-currency-transmitting businesses operated in a position where the general money transmission statute's application to crypto activity was not spelled out in the text; the amendment removes that ambiguity by placing virtual currency transmission on the same explicit statutory footing as the issuance of money orders and sale of checks, the activities the law was originally drafted around.

Licensure under the amended statute carries continuing financial-standing conditions that now apply equally to virtual currency transmitters and traditional money transmitters. A licensee must post and maintain a surety bond in the penal sum of $1,000,000, executed by a surety company authorized to transact business in the Commonwealth, running to the Commonwealth for the benefit of any person aggrieved by a licensee's misconduct. This is not a one-time entry requirement but a continuing condition of licensure, and the statute contains no mechanism to reduce the bond below the $1,000,000 floor; the Department may additionally require a supplementary bond calculated against a licensee's average daily outstanding transmission balance where it judges the standard bond inadequate to the scale of the business. Separately, the Department administers annual licence issuance, with licences issued on 1 January of each year following applications submitted by the preceding 1 November - a cycle that virtual currency transmitters now enter on the same calendar as conventional money transmitters.

A further legislative move would layer a second, narrower licensing track on top of this general expansion. A bill was referred to the state House of Representatives' Commerce committee in mid-2026 that would add a dedicated chapter to the state banking title specifically regulating virtual currency kiosks - physical crypto ATMs - with its own licensing and reporting requirements, a dedicated public education fund, and its own penalty structure, distinct from the general money transmission licence that now covers virtual currency transmission generally. The bill has not been enacted and remains at the committee-referral stage, so its ultimate shape and timing are not yet settled, but its introduction indicates that lawmakers see kiosk-based virtual currency activity as warranting treatment distinct from transmission-generally even after the 2025 amendment closed the broader perimeter gap.

Outlook

The near-term question for market participants is less about the existence of the licensing obligation - which is now settled and in force - and more about how actively the Department applies it to virtual-currency-specific business models, and whether the pending kiosk-specific bill advances to add a second, more granular licensing layer. Firms operating virtual currency transmission services into Pennsylvania should treat the 26 August 2025 effective date as the operative compliance marker rather than waiting for separate kiosk-specific rules, which remain unresolved and are not guaranteed to pass this session.

Periodic update · new data 2026-10-25

Licensing, Authorisation & Market Access

Pennsylvania's Department of Banking and Securities has formally rescinded its 2024 Statement of Policy, which had characterized virtual currency as falling outside the statutory definition of 'money' under the Commonwealth's money-transmitter act. This rescission aligns DoBS's published guidance with Act 7 of 2025's amendment at 7 P.S. §6102(a)(2), which has been in force since August 26, 2025 and establishes a standalone licensing trigger for businesses engaged in transmitting virtual currency by means of a transmittal instrument for a fee, distinct from the pre-existing fiat money-transmission trigger under §6102(a)(1). Before this rescission, a market participant reading DoBS's own 2024 guidance might reasonably have concluded that virtual-currency transmission fell outside the money-transmitter licensing perimeter, even though the statute itself, following the 2025 amendment, said otherwise; that divergence between regulator guidance and statute is now closed. DoBS's own announcement situates Pennsylvania as one of 27 states that regulate virtual currency under their respective money-transmitter acts, indicating this is part of a broader multistate pattern rather than an isolated Pennsylvania development. For market-access purposes, the practical consequence is straightforward: a business transmitting virtual currency for a fee in Pennsylvania requires a state money-transmitter license, and that requirement can no longer be contested on the basis of the regulator's own prior guidance suggesting otherwise. No new examination standard, application-processing change, or licensing-fee adjustment specific to virtual-currency transmitters was identified this period; the development is a guidance-alignment correction rather than a new procedural requirement.

Outlook

The item to watch is whether DoBS follows this guidance rescission with further implementing material addressing virtual-currency-specific licensing procedures, examination standards, or capital requirements, now that the regulator's own position is aligned with the statute. No such follow-on guidance had been identified.

Periodic update · new data 2026-10-18

Licensing, Authorisation & Market Access

Pennsylvania's Department of Banking and Securities has formally rescinded its 2024 Statement of Policy, which had characterized virtual currency as falling outside the statutory definition of 'money' under the Commonwealth's money-transmitter act. This rescission aligns DoBS's published guidance with Act 7 of 2025's amendment at 7 P.S. §6102(a)(2), which has been in force since August 26, 2025 and establishes a standalone licensing trigger for businesses engaged in transmitting virtual currency by means of a transmittal instrument for a fee, distinct from the pre-existing fiat money-transmission trigger under §6102(a)(1). Before this rescission, a market participant reading DoBS's own 2024 guidance might reasonably have concluded that virtual-currency transmission fell outside the money-transmitter licensing perimeter, even though the statute itself, following the 2025 amendment, said otherwise; that divergence between regulator guidance and statute is now closed. DoBS's own announcement situates Pennsylvania as one of 27 states that regulate virtual currency under their respective money-transmitter acts, indicating this is part of a broader multistate pattern rather than an isolated Pennsylvania development. For market-access purposes, the practical consequence is straightforward: a business transmitting virtual currency for a fee in Pennsylvania requires a state money-transmitter license, and that requirement can no longer be contested on the basis of the regulator's own prior guidance suggesting otherwise. No new examination standard, application-processing change, or licensing-fee adjustment specific to virtual-currency transmitters was identified this period; the development is a guidance-alignment correction rather than a new procedural requirement.

Outlook

The item to watch is whether DoBS follows this guidance rescission with further implementing material addressing virtual-currency-specific licensing procedures, examination standards, or capital requirements, now that the regulator's own position is aligned with the statute. No such follow-on guidance had been identified as of this cycle.

Periodic update · new data 2026-09-28

Licensing, Authorisation & Market Access

Pennsylvania has tightened its licensing perimeter for virtual-currency transmission through Act 7 of 2025 (SB 202), which amended the Money Transmission Business Licensing Law (Act 249 of 1965, commonly known as the Money Transmitter Act) to require that virtual-currency transmission for a fee or other consideration on behalf of another person be licensed on the same basis as fiat money transmission. The amendment took effect August 26, 2025, and the Pennsylvania Department of Banking and Securities has been explicit that there was no grace period for licensure when it did: entities facilitating virtual-currency transfers for Pennsylvania residents have been required to hold, or be in the process of obtaining, a money-transmitter licence covering that activity since that date.

For non-bank payment institutions and e-money-style virtual-currency transmitters, this closes what had previously been an ambiguous licensing position under the pre-amendment statute. The distinction between bank and non-bank market access is central here: this is specifically a non-bank payment-institution licensing requirement, since banks are generally licensed and supervised under separate federal and state banking frameworks rather than the state money-transmitter regime. A non-bank entity offering virtual-currency transmission services to Pennsylvania residents now sits within the same state licensing and market-access framework as a traditional non-bank remittance or money-order business, with the accompanying application, bonding, and ongoing reporting obligations that framework carries.

The implementing regulatory chapter, 10 Pa. Code Chapter 19, was updated as of January 31, 2026 to reflect this amendment, giving licensees and prospective applicants a codified regulatory text against which to structure their compliance posture, rather than relying solely on the statutory amendment language itself. This sequencing — statutory amendment effective August 2025, implementing regulatory chapter updated by early 2026 — indicates that Pennsylvania has moved from broad statutory coverage to a more operationally detailed regulatory framework for virtual-currency transmission within roughly five months of the amendment's effective date.

Outlook

Watch for the volume and nature of Pennsylvania Department of Banking and Securities licensing activity for virtual-currency transmitters now that over a year has passed since the no-grace-period effective date, and for whether the state issues further interpretive guidance distinguishing licensable virtual-currency transmission from adjacent activities such as self-custody wallet provision or non-custodial transfer facilitation, which the amendment's plain licensing language does not appear to address explicitly on the evidence available this cycle.

Periodic update · new data 2026-09-22

Licensing, Authorisation & Market Access

Pennsylvania's Act 7 of 2025 (SB 202) expands the state's Money Transmitter Act to explicitly require licensure for virtual-currency transmission conducted for a fee on behalf of another person, effective August 26, 2025. The Department of Banking and Securities has rescinded its 2024 interpretive Statement of Policy as redundant, since the licensing requirement that policy statement had signalled is now codified directly into statute. This is a market-access development on the non-bank payment-institution side of the licensing landscape: it is virtual-currency money-service businesses, distinct from banks and other depository institutions, whose access to the Pennsylvania market now runs through an explicit statutory licensing gate.

Two exemptions define the edges of the licensing perimeter. Individuals who custody their own digital assets in self-hosted wallets are exempt from licensure, and business-to-business virtual-currency transfers made in connection with commercial contracts are similarly exempt. Both carve-outs narrow the requirement to fee-based, consumer-facing or intermediated transmission activity rather than capturing all virtual-currency movement touching Pennsylvania.

Pennsylvania's move is also notable in a national context: it is reported to align the Commonwealth with roughly 26 other states that already require licensure for virtual-currency transmission, situating this as part of a broader multi-state wave of money-transmitter-law modernization extending fiat-style licensing gates to virtual-currency activity, though this broader national-trend framing rests on a single lower-tier source this cycle.

Outlook

The key market-access development to watch is whether the Department of Banking and Securities issues licensee-specific bonding or net-worth schedules for virtual-currency transmitters distinct from the general Money Transmitter Act schedule, which would move this from a statutory requirement to a fully operational supervisory regime.

Periodic update · new data 2026-09-08

Licensing, Authorisation & Market Access

Pennsylvania's Money Transmission and Virtual Currency Transmission Business Licensing Law now expressly covers virtual-currency transmission, following the amendment enacted as Act 7 of 2025 and effective August 26, 2025. The core requirement is straightforward: any business transmitting virtual currency for a fee or other consideration on behalf of another person must hold a Pennsylvania money-transmitter licence, on the same statutory footing as fiat money transmission. This closes a licensing gap that had persisted since at least 2019, when prior guidance held that virtual currency did not constitute money under the Act and therefore left virtual-currency exchangers outside the state licensing perimeter entirely.

The Department of Banking and Securities has moved to formalize this shift by deleting its 2024 policy statement at 10 Pa. Code section 19.1a, characterizing it as redundant now that the statutory amendment governs virtual-currency transmission directly. This is a notable piece of regulatory housekeeping: rather than maintaining parallel guidance and statutory text that could create interpretive ambiguity, the regulator retired the guidance once the primary legal instrument took direct effect, which strengthens the durability and clarity of the licensing requirement going forward.

Administratively, the new licence category has been integrated into Pennsylvania's existing licensing infrastructure. The virtual-currency transmitter licence is administered through the Nationwide Multistate Licensing System, the same NMLS infrastructure used for the state's traditional money-transmitter licensees. This is a materially conservative implementation choice: Pennsylvania has not stood up a bespoke crypto-licensing bureaucracy, but has instead extended its existing licensing rails and, by implication, its existing supervisory and examination practices, to a new category of nonbank payment-institution-and-e-money-institution-style entity. This distinction between bank and nonbank market access is central to how this licence should be read: it is squarely a nonbank PI/EMI-style licensing framework, not a bank-chartering matter, and it sits alongside rather than replacing federal money-services-business registration requirements that already apply to these entities.

Corroborating secondary reporting indicates that licensed virtual-currency transmitters must additionally comply with annual reporting, agent registration, and federal anti-money-laundering requirements, confirming that the new licence carries substantive ongoing compliance obligations beyond initial registration. This layered compliance structure, state licence plus federal AML baseline, mirrors the compliance architecture that already governs conventional fiat money-transmission licensees in the state, meaning virtual-currency businesses newly captured by the amendment inherit an already-established supervisory template rather than facing a wholly novel compliance regime.

A separate and as-yet-unresolved market-access boundary question touches this same space: the Pennsylvania Gaming Control Board shared concerns with the federal Commodity Futures Trading Commission in an October 2025 letter regarding prediction-market operators offering sports-linked event contracts to Pennsylvania residents, but has not initiated legal or enforcement action against those operators. While this sits closer to the gaming-adjacent edge of payments market access than to core money-transmission licensing, it illustrates a live and unresolved boundary question between federally registered financial products and state-licensed activity that operators active in adjacent payment corridors should track.

Outlook

No implementing regulations or updated licence-application materials specific to the virtual-currency provisions of Act 7 of 2025 have been located this cycle, and no enforcement action under the amended provisions has yet been observed. The near-term signal to watch is whether the Department of Banking and Securities issues detailed application guidance for virtual-currency transmitter applicants, and whether existing unlicensed virtual-currency transmission businesses operating in Pennsylvania begin the licensing process in response to the new requirement. The unresolved CFTC/PGCB market-access boundary question for prediction-market operators is a secondary item worth continued monitoring, particularly if either federal or state posture shifts from investigation toward a formal position.

Sources and findings (24)
  1. T1https://www.pacodeandbulletin.gov/Display/pabull?file=/secure/pabulletin/data/vol54/54-16/542.htmlretrieved
  2. T3https://www.bondexchange.com/pennsylvania-money-transmitter-bond-a-comprehensive-guide/retrieved
  3. T1https://www.pa.gov/agencies/dobs/non-bank-licenseesretrieved
  4. T1https://www.pa.gov/agencies/dobs/about.htmlretrieved
  5. T3https://faisalkhan.com/solutions/licensing/money-transmitter-license-mtl/pennsylvania-money-transmitter-license/retrieved
  6. T3https://cornerstonelicensing.com/money-transmitter-laws/pennsylvania-money-transmitter-regulations/retrieved
  7. T1Pennsylvania Office of Attorney General — Pennsylvania Office of Attorney General — Statewide voluntary 'STOP' sign campaign at cryptocurrency kiosks launched 2026-10-29, citing ~290 scam complaints in the prior year.retrieved
  8. T1PA Department of Banking and Securities — PA Department of Banking and Securities — DoBS formally rescinded its 2024 Statement of Policy characterizing virtual currency as not 'money', confirming Act 7 of 2025's §6102(a)(2) virtual-currency transmission licensing trigger as the operative rule.retrieved
  9. T1Pennsylvania Money Transmitter Act (Act 249 of 1965, as amended by Act 7 of 2025) — Pennsylvania Money Transmitter Act (Act 249 of 1965, as amended by Act 7 of 2025) — Virtual-currency transmission for a fee, on the same basis as fiat money transmission.retrieved
  10. T1Pennsylvania Department of Banking and Securities — Pennsylvania Department of Banking and Securities — Virtual-currency transmission for a fee on behalf of another person, under Act 7 of 2025 (SB 202).retrieved
  11. T?Pennsylvania Department of Banking and Securities — Pennsylvania Department of Banking and Securities — Virtual-currency transmitters must obtain an MTL under Act 7 of 2025
  12. T1Pennsylvania Money Transmission and Virtual Currency Transmission Business Licensing Law — Pennsylvania Money Transmission and Virtual Currency Transmission Business Licensing Law — Virtual-currency transmission for a fee on behalf of another, effective August 26, 2025retrieved
  13. T1Pennsylvania Department of Banking and Securities — Pennsylvania Department of Banking and Securities — Deleted 10 Pa. Code §19.1a policy statement as redundant given the statutory licensing requirementretrieved
  14. T1Pennsylvania virtual-currency transmitter licence — Pennsylvania virtual-currency transmitter licence — Nationwide Multistate Licensing System (NMLS), the same infrastructure used for PA's traditional money-transmitter licenseesretrieved
  15. T3Licensed virtual-currency transmitters (US-PA) — Licensed virtual-currency transmitters (US-PA) — Annual reporting, agent registration, and federal AML compliance obligations layered atop the state licenceretrieved
  16. T1Pennsylvania Department of Banking and Securities — Pennsylvania Department of Banking and Securities — Money Transmission Business Licensing Law (Money Transmitter Act), 7 P.S. §§6101-6118, administered via NMLS; ~154 money transmitters currently licensed among 28,450 non-depository providers.retrieved
  17. T3Pennsylvania Money Transmitter License applicants — Pennsylvania Money Transmitter License applicants — $500,000 minimum tangible net worth (audited) and a $1,000,000 surety bond (or ~$25,000 premium equivalent); annual renewal by December 31.retrieved
  18. T4Pennsylvania Department of Banking and Securities — Pennsylvania Department of Banking and Securities — Individuals custodying their own digital assets (self-hosted wallets) and B2B virtual-currency transfers under commercial contracts are exempt from PA MTA licensure.retrieved
  19. T4Pennsylvania — Pennsylvania — PA joins 26 other states requiring licensure for virtual-currency transmission, part of a broader 2025-2026 wave of state MTL modernization.retrieved
  20. T1PA Department of Banking and Securities — PA Department of Banking and Securities — No grace period applied for licensure once the Act 7 amendments took effect on August 26, 2025.retrieved
  21. T110 Pa. Code Chapter 19 (Money Transmitters) — 10 Pa. Code Chapter 19 (Money Transmitters) — Implementing regulatory chapter for licensees under the amended Money Transmitter Act, per the Pennsylvania Bulletin update of January 31, 2026.retrieved
  22. T1Money Transmission and Virtual Currency Transmission Business Licensing Law, 7 P.S. §§6101-6118 (Act 7 of 2025) — Money Transmission and Virtual Currency Transmission Business Licensing Law, 7 P.S. §§6101-6118 (Act 7 of 2025) — A licence is required to transmit virtual currency for a fee on behalf of an individual; self-hosted-wallet custody and B2B commercial-contract transmission are exempt.retrieved
  23. T1SB 1015 / HB 2643 (Virtual Currency Kiosk Regulation Act) — SB 1015 / HB 2643 (Virtual Currency Kiosk Regulation Act) — Two bills remain pending in the General Assembly that would add kiosk-specific reporting, bonding ($1,000,000), and tangible-net-worth ($500,000) requirements on top of the existing MTA licence; neither has been enacted.retrieved
  24. T1Virtual Currency Kiosks Act (HB 2643) — Virtual Currency Kiosks Act (HB 2643) — Virtual currency (crypto ATM) kiosks, via new Chapter 63 of Title 7, with DoBS requirements and penaltiesretrieved

#

Pennsylvania has no dedicated payments-conduct/safeguarding regulator akin to CASS; conduct obligations for money transmitters and payment firms flow through DoBS licensing conditions (BSA/AML/IT/disaster-recovery audit plans, advertising restrictions) and general Commonwealth consumer-protection law (UTPCPL), which the Attorney General's Bureau of Consumer Protection actively enforces, including a dedicated Consumer Financial Protection Unit for financial-services conduct.

Standing sub-brief · as of 5 July 2026 181 words · last cycle 2026-11-02

Conduct, Safeguarding & Financial Promotions

Pennsylvania has no dedicated payments-conduct or safeguarding regulator comparable to the UK's CASS regime. Conduct oversight instead runs through the General-purpose Unfair Trade Practices and Consumer Protection Law (UTPCPL), with the Attorney General's Consumer Financial Protection Unit acting as the de facto state UDAAP analogue for both bank and non-bank payment providers. This is a structural feature rather than a live development this cycle — no new safeguarding rulemaking was identified for Pennsylvania — but it is analytically important: absent a dedicated conduct/safeguarding rulebook, both bank-PSPs and non-bank PI/EMI-type licensees are held to the same general consumer-protection standard, with enforcement intensity depending on the Attorney General's litigation priorities rather than a standing supervisory rulebook.

Periodic update · new data 2026-11-03

Conduct, Safeguarding & Financial Promotions

Pennsylvania's conduct regime for licensed money transmitters - now including virtual currency transmitters following the 2025 licensing expansion - rests on a small number of continuing statutory duties rather than a detailed safeguarding code. The core conduct obligation is a safety-and-soundness duty: a licensee must operate in a safe and sound manner, framed specifically as avoiding practices by the licensee or its agents that create a likelihood of material loss, insolvency or dissipation of assets, or that otherwise materially prejudice the interests of the individuals who use the licensee's services to transmit money. This duty sits alongside, rather than replaces, the $1,000,000 surety bond required as a continuing condition of licensure, which functions as the primary financial backstop for aggrieved customers rather than a segregation-of-funds or permissible-investments regime of the kind found in some other states' money transmission statutes. Research into the Pennsylvania framework specifically did not locate a dedicated safeguarding or permissible-investments rule, or a customer-fund insolvency-protection mechanism, beyond the net-worth and bonding conditions attached to licensure; this is recorded as a documented absence rather than evidence that no such protection could exist, but on the current statutory text the bond and the safety-and-soundness duty are the operative protections for customer funds.

Financial promotions are addressed narrowly rather than comprehensively. Pennsylvania Code governing money transmitters permits a licensee to advertise its activities in whatever form it chooses, but restricts any reference to governmental supervision or licensing status to a single prescribed form of words identifying regulation by the Department of Banking and Securities - a constraint aimed specifically at preventing a licensee from implying a broader or different form of government endorsement than the licence actually confers. This is a narrow, format-specific promotions rule rather than a general fair-marketing or financial-promotions code covering disclosure of fees, risk or product terms generally.

A separate and older consumer-facing conduct layer governs payroll card accounts, addressing the point where payment services intersect with employment law. Under a 2016 amendment, an employer or the financial institution issuing a payroll card account must disclose to an employee all of that employee's wage-payment options and the fee terms of the payroll card account before obtaining the employee's authorization to use it, may not charge fees for applying for, initiating, or transferring wages into the account, must allow fee-free balance inquiries, and must ensure that funds loaded onto the account do not expire. Critically, payment of wages by payroll card cannot be made a condition of employment: an employee retains the right to choose another wage-payment method at any time, and the employer must honor a change in payment method as soon as possible once requested. These payroll-card protections apply to the employer or the card-issuing institution and sit outside the licensing regime specific to money or virtual currency transmission, but they are a live conduct obligation for any payment provider supplying payroll card products to Pennsylvania employers.

Outlook

The near-term direction for conduct obligations in Pennsylvania is one of incremental extension rather than wholesale rewrite: the safety-and-soundness duty and the bonding condition have simply been extended to a newly licensed population of virtual currency transmitters rather than being rewritten for that population specifically. Whether the Department issues virtual-currency-specific guidance on what safe-and-sound operation looks like for that business model, or whether the absence of a dedicated safeguarding rule becomes a point of regulatory or legislative attention, are open questions not yet resolved in the current statutory text.

Sources and findings (7)
  1. T3https://moneytransmitterlaw.com/state-laws/pennsylvania/retrieved
  2. T1https://www.pacodeandbulletin.gov/Display/pacode?file=%2Fsecure%2Fpacode%2Fdata%2F010%2Fchapter19%2Fchap19toc.html&d=retrieved
  3. T3https://www.cohenseglias.com/news-article/pa-unfair-trade-practices-and-consumer-protection-law-investigations-frequently-asked-questions/retrieved
  4. T3https://www.sidley.com/en/insights/newsupdates/2025/07/pennsylvania-leads-consumer-financial-protection-in-the-new-era-of-federalismretrieved
  5. T3Pennsylvania Gaming Control Board — Pennsylvania Gaming Control Board — Shared concerns with the CFTC in an October 2025 letter regarding prediction-market operators but has not initiated legal or enforcement actionretrieved
  6. T3Pennsylvania Office of Attorney General – Bureau of Consumer Protection — Pennsylvania Office of Attorney General – Bureau of Consumer Protection — General-purpose Unfair Trade Practices and Consumer Protection Law (UTPCPL), absent a dedicated payments-conduct/safeguarding regulator akin to CASS; a Consumer Financial Protection Unit acts as the de facto state UDAAP analogue.retrieved
  7. T1Act 161 of 2016 (Payroll Card Accounts) — Act 161 of 2016 (Payroll Card Accounts) — Employers/financial institutions must disclose wage-payment options and payroll-card terms before authorization, may not charge fees for account initiation/transfer, must allow fee-free balance inquiries, funds cannot expire, and payroll-card payment cannot be mandatoryretrieved

#

Pennsylvania has reversed its position on virtual currency under the Money Transmitter Act: after a 2019 guidance excluding virtual currency (including Bitcoin) from the definition of "money," DoBS issued an April 2024 Statement of Policy (effective October 15, 2024) reinterpreting the MTA's "money" definition to include virtual currency, bringing virtual-currency transmitters within the licensing perimeter.

Open gap — wpm-int-1No PA-specific stablecoin/digital-money (W2) development located this cycle.no under-indexing note recorded
Standing sub-brief · as of 5 July 2026 256 words · last cycle 2026-07-05

Stablecoins & Digital Money

Pennsylvania's virtual-currency regulatory basis has changed materially this cycle. Act 7 of 2025 (signed June 27, 2025; effective August 26, 2025) amended 7 P.S. §6102 to directly require virtual-currency transmission businesses to obtain a money transmitter license, adding the short title "Money Transmission and Virtual Currency Transmission Business Licensing Law." This supersedes the prior basis: an April 2024 Statement of Policy (10 Pa. Code §19.1a, effective October 15, 2024), which itself had reversed a January 2019 guidance excluding virtual currency from the Money Transmitter Act's definition of "money," has now been formally rescinded, obviated by the statutory change. The correction was driven by a reviewer challenge this cycle (hard_flag f-001): baseline research had cited the 2024 policy statement as the current operative instrument without registering that it had already been superseded by primary legislation, and the correction was confirmed via two independent Tier-1 anchors — the Pennsylvania Bulletin's rescission notice and a DoBS implementation letter on Act 7. For virtual-currency transmission businesses, this converts what had been a discretionary administrative reinterpretation into a fixed statutory licensing obligation administered through the same non-bank PI/EMI licensing channel as traditional money transmission.

no periodic updates on record for this sub-brief

Sources and findings (6)
  1. T1https://www.pacodeandbulletin.gov/Display/pabull?file=/secure/pabulletin/data/vol54/54-16/542.htmlretrieved
  2. T3https://www.consumerfinancemonitor.com/2024/05/13/pa-department-of-banking-and-securities-virtual-currency-is-money/retrieved
  3. T3https://www.hunton.com/blockchain-legal-resource/pennsylvania-issues-money-transmitter-act-guidance-virtual-currency-businessesretrieved
  4. T3https://www.moneylaunderingnews.com/2024/05/pa-department-of-banking-and-securities-virtual-currency-is-money/retrieved
  5. T1Pennsylvania Department of Banking and Securities — Pennsylvania Department of Banking and Securities — Act 7 of 2025 (signed June 27, 2025; effective August 26, 2025) amended 7 P.S. §6102 to directly require virtual-currency transmission businesses to obtain a money transmitter license, adding the short title 'Money Transmission and Virtual Currency Transmission Business Licensing Law.' The April 2024 Statement of Policy (10 Pa. Code §19.1a) that had reinterpreted 'money' to include virtual currency was rescinded effective August 26, 2025 as obviated by the statutory change.retrieved
  6. T3Pennsylvania Department of Banking and Securities — Pennsylvania Department of Banking and Securities — April 2024 Statement of Policy (10 Pa. Code §19.1a, effective October 15, 2024), reversing a January 2019 guidance that had excluded virtual currency from the MTA's definition of 'money'; this policy statement is now superseded and rescinded by Act 7 of 2025.retrieved

#

Pennsylvania lacks a payments-specific operational-resilience regime; DoBS points regulated entities to federal FFIEC/OCC/FDIC/Fed third-party risk guidance rather than issuing its own binding rules for payment firms. The Commonwealth's own binding cyber-incident law (the Breach of Personal Information Notification Act) is a general data-breach notification statute, not payments-sector operational resilience, and the newer PA Insurance Data Security Act is scoped to insurance licensees, not payment/money-transmission licensees.

Kept on Dataprotection.gi, not restated here: data and cloud switching obligations on service providers, including notice periods and charges. Open its jurisdiction pages on Dataprotection.gi →

Standing sub-brief · as of 5 July 2026 133 words · last cycle 2026-07-05

Operational Resilience & Critical Infrastructure

Pennsylvania has no payments-specific state operational-resilience regime. Payment/money-transmission licensees; DoBS refers regulated entities to federal FFIEC/OCC/FDIC/Fed third-party risk guidance rather than issuing a binding state-level operational-resilience rule of its own. The one operational-resilience-adjacent state statute identified, the Insurance Data Security Act (Act 2 of 2023), is scoped to insurance licensees only and does not reach payment or money-transmission licensees. This leaves Pennsylvania payments operators reliant entirely on federal supervisory guidance for operational-resilience expectations, a materially lighter-touch position than DORA-style regimes emerging elsewhere.

no periodic updates on record for this sub-brief

Sources and findings (5)
  1. T1https://www.legis.state.pa.us/WU01/LI/LI/US/HTM/2005/0/0094..HTMretrieved
  2. T1https://www.pa.gov/agencies/dobs/cybersecurityretrieved
  3. T3https://www.lexology.com/library/detail.aspx?g=f7293fa7-0b88-432c-9f3a-9cf3ba1effedretrieved
  4. T3https://www.righthandtechnologygroup.com/blog/compliance/pennsylvania-cybersecurity-regulations-2025-guideretrieved
  5. T1Pennsylvania Department of Banking and Securities — Pennsylvania Department of Banking and Securities — Payment/money-transmission licensees; DoBS refers regulated entities to federal FFIEC/OCC/FDIC/Fed third-party risk guidance rather than issuing a binding state-level operational-resilience rule. The Insurance Data Security Act (Act 2 of 2023) is scoped to insurance licensees only.retrieved

#

Pennsylvania permits credit-card surcharging within federal/network caps and, as of early 2026, has an actively advancing legislative effort (HB 2090) to bar card networks from assessing interchange fees on the sales-tax portion of transactions — following a failed 2024 attempt — with enforcement vested in the state Attorney General against card networks only (not banks/credit unions).

Standing sub-brief · as of 5 July 2026 225 words · last cycle 2026-07-05

Scheme & Network Compliance

Pennsylvania permits merchant credit-card surcharging, but only within layered limits: surcharges are subject to Federal 4% cap and card-network limits (e.g., Visa 3%), and surcharges must not exceed the actual processing cost — there is no dedicated state surcharging statute beyond this federal/network overlay. The more consequential development sits in pending legislation: House Bill 2090 would bar card networks from charging interchange fees on the Sales-tax portion of card transactions, with enforcement vested solely in the PA Attorney General against card networks (not banks/credit unions). The bill was reported out of the House Finance Committee on February 4, 2026 but was also laid on the table the same day per official PA General Assembly tracking; as of July 2026 it awaits further action with uncertain floor-vote prospects. This is a downgrade in assessed confidence from the prior baseline characterisation of the bill as "actively advancing," following a reviewer soft-flag challenge that identified the tabling as material context.

no periodic updates on record for this sub-brief

Sources and findings (6)
  1. T2https://www.cspdailynews.com/technologyservices/pennsylvania-advances-targeted-swipe-fee-relief-retailersretrieved
  2. T3https://merchantcostconsulting.com/lower-credit-card-processing-fees/credit-card-surcharge-laws-by-state/retrieved
  3. T3https://www.getflexpoint.com/credit-card-surcharging-us-states/pennsylvaniaretrieved
  4. T4https://www.tnonline.com/20260323/consumers-beware-of-pennsylvanias-interchange-experiment/retrieved
  5. T3Pennsylvania credit-card surcharge rule — Pennsylvania credit-card surcharge rule — Federal 4% cap and card-network limits (e.g., Visa 3%); surcharges must not exceed the actual cost of processing.retrieved
  6. T1Pennsylvania House Bill 2090 — Pennsylvania House Bill 2090 — Sales-tax portion of card transactions, with enforcement vested solely in the PA Attorney General against card networks (not banks/credit unions). The bill was reported out of the House Finance Committee on February 4, 2026 but was also laid on the table the same day per official PA General Assembly tracking; as of July 2026 it awaits further action with uncertain floor-vote prospects.retrieved

#

Pennsylvania's payment corridor exposure is dominated by the two competing US instant-payment rails — FedNow (Federal Reserve) and RTP (The Clearing House) — with Pittsburgh-headquartered PNC Bank a founding RTP member and an October 2025 FedNow joiner, and multiple smaller PA banks/credit unions already live on FedNow.

Open gap — wpm-int-2No PA-specific payment corridor (W5) development located this cycle.Sub-national divergence on consumer payment conduct is structurally under-researched for US states absent a dedicated state consumer-protection statute.
Standing sub-brief · as of 5 July 2026 112 words · last cycle 2026-07-05

Payment Corridor Dynamics

Pennsylvania's instant-payments corridor continues to build out. PNC Bank joined the FedNow Service (October 21, 2025), building on founding membership of The Clearing House's RTP network, giving Pittsburgh-headquartered PNC dual-rail real-time settlement capability. Multiple smaller PA-headquartered institutions are already live on FedNow, indicating the corridor build-out extends well beyond the state's largest bank. This reflects the broader national instant-payments expansion but is notable at the state level for the depth of dual-rail participation among Pennsylvania-chartered institutions.

no periodic updates on record for this sub-brief

Sources and findings (5)
  1. T2https://pnc.mediaroom.com/2025-10-21-PNC-Bank-Expands-Immediate-Payments-Solutions-by-Joining-the-FedNow-R-Serviceretrieved
  2. T3https://www.nerdwallet.com/banking/learn/banks-that-use-fednowretrieved
  3. T3https://www.alacriti.com/knowledge-hub/tools/fednow/retrieved
  4. T3https://www.pymnts.com/real-time-payments/2025/pnc-joins-fednow-to-expand-instant-payment-offerings/retrieved
  5. T3PNC Bank — PNC Bank — FedNow Service (October 21, 2025), building on founding membership of The Clearing House's RTP network; multiple smaller PA-headquartered institutions are already live on FedNow.retrieved

#

Pennsylvania's banking industry structure is undergoing active in-state consolidation among community/regional banks (multiple 2025-2026 mergers extending footprints into Philadelphia and the Lehigh Valley) alongside a modest but persistent Philadelphia/Pittsburgh fintech startup base concentrated around payments, wealthtech and infrastructure niches.

Standing sub-brief · as of 5 July 2026 145 words · last cycle 2026-07-05

Industry Structure & Commercial Dynamics

Pennsylvania's community and regional banking sector is undergoing a sustained consolidation wave. Multiple 2025-2026 mergers extending footprints into Philadelphia/Lehigh Valley span PNC's $4.1bn acquisition of Colorado's FirstBank, Mid Penn Bancorp's completed $106.1m purchase of 1st Colonial Bancorp, Norwood Financial's announced merger with PB Bankshares, and Community Bank NA's $553m purchase of former Santander branches. Alongside this bank-side consolidation, Philadelphia and Pittsburgh retain a modest but persistent fintech startup base, even as funding into that base has contracted sharply this cycle (detailed in W13). The consolidation trend is reshaping Pennsylvania's competitive banking landscape and merchant-servicing footprint just as the instant-payments rollout (W5) accelerates.

no periodic updates on record for this sub-brief

Sources and findings (8)
  1. T2https://www.americanbanker.com/news/pennsylvania-community-banks-to-merge-in-214-million-dealretrieved
  2. T1https://www.sec.gov/Archives/edgar/data/0000879635/000095015203008268/a1stcolonialpressrelease.htmretrieved
  3. T2https://www.fintechfutures.com/m-a/pnc-to-acquire-firstbank-for-4-1bnretrieved
  4. T1https://www.sec.gov/Archives/edgar/data/0000723188/000110465925108797/tm2530626d1_ex99-1.htmretrieved
  5. T4https://tracxn.com/d/explore/fintech-startups-in-philadelphia-united-states/__jAX0zS2KyugxD8qUKty1PMiVPwuu9BDb9-nUhXNSZkM#top-companiesretrieved
  6. T1https://www.sec.gov/Archives/edgar/data/0001013272/000119312525156255/d849228dex992.htmretrieved
  7. T3Pennsylvania community/regional banking sector — Pennsylvania community/regional banking sector — Multiple 2025-2026 mergers extending footprints into Philadelphia/Lehigh Valley (CNB/ESSA $214m, Mid Penn/1st Colonial $106.1m completed, Norwood/PB Bankshares, Community Bank NA's $553m Santander-branch purchase), alongside a modest but persistent Philadelphia/Pittsburgh fintech startup base.retrieved
  8. T1PA Department of Banking and Securities non-bank licensee register — PA Department of Banking and Securities non-bank licensee register — 28,450 non-bank (non-depository) licensees, including money transmitters, mortgage lenders/brokers and check cashersretrieved

Pennsylvania's payments-adjacent litigation and enforcement landscape is dominated by the state Unfair Trade Practices and Consumer Protection Law (UTPCPL), which the Attorney General's Bureau of Consumer Protection and a dedicated Consumer Financial Protection Unit actively enforce against financial-services conduct, layered under fragmenting federal enforcement (CFPB actions against fintech/payments providers) and private plaintiff litigation under EFTA/Reg E and similar statutes.

Standing sub-brief · as of 5 July 2026 137 words · last cycle 2026-11-02

Legal & Litigation

The Attorney General's Consumer Financial Protection Unit remains Pennsylvania's primary state-level channel for payments-adjacent consumer enforcement, operating through the UTPCPL rather than a dedicated payments statute. Over $374 million in relief for PA consumers since July 2017, including the $1.85bn multistate Navient settlement, has been secured through the Unit's enforcement docket, and UTPCPL separately provides a private right of action with treble damages and fee-shifting — giving Pennsylvania consumers and the Attorney General meaningful leverage even absent a payments-specific conduct rulebook.

Periodic update · new data 2026-11-03

Legal & Litigation

The Department of Banking and Securities maintains an active enforcement record against money transmission licensees and unlicensed actors, backed by both criminal and administrative penalty provisions in the Money Transmitter Act. The Department's own published reporting shows sustained enforcement volume: in one fourth quarter it issued eight enforcement orders carrying fines and assessments totaling $6,625,638, and in a separate full fiscal year it issued 34 enforcement orders totaling $1,659,930 in fines - figures that illustrate meaningful but variable enforcement intensity from one reporting period to the next rather than a steady annual run rate. A specific past case shows the Department's power to act decisively against a licensee's core solvency: it issued a cease-and-desist order against a money order company found to be selling money orders without sufficient backing funds, which resulted in that company's transmitter licence being revoked outright. A separate multistate action saw the Department join an $80 million settlement against a major payments company's peer-to-peer cash app product for violations of the federal Bank Secrecy Act and associated anti-money-laundering laws - an action that illustrates the Department's willingness to participate in coordinated, multistate enforcement against the AML failures of large non-bank payment platforms, rather than confining itself to single-state licensing actions.

The statutory penalty structure underlying this enforcement activity is substantial. Any person who directly or through another violates or attempts to violate any provision of the Money Transmitter Act commits a felony, carrying a fine of not less than $5,000 nor more than $50,000 and imprisonment for not more than seven years in the court's discretion. Separately, the Department can impose its own administrative fines of up to $10,000 per offense against a licensee, or against a licensee's principals, directors, officers, employees or agents who violate the Act or who direct or consent to such a violation - giving the Department a civil enforcement track that does not depend on a criminal referral or conviction.

Alongside transmitter-specific liability, Pennsylvania's Unfair Trade Practices and Consumer Protection Law provides a general-purpose basis for action against payment-service providers operating in the Commonwealth. The statute declares unfair methods of competition and unfair or deceptive acts or practices in trade or commerce unlawful, with Attorney General enforcement backed by civil penalties capped at $3,000 per violation. Distinct from that public enforcement track, the statute also grants consumers a private right of action: a consumer may sue a business or institution directly over deceptive or unfair trade practices without needing the Attorney General to act first, giving payment-service users in Pennsylvania an independent litigation route against providers whose conduct is alleged to be unfair or deceptive.

Outlook

The combination of a felony-level criminal penalty, an uncapped administrative fine track, sustained quarterly enforcement orders running into the millions of dollars, and an independent private right of action under the general consumer protection statute gives Pennsylvania multiple simultaneous enforcement and litigation channels against payment providers. With virtual currency transmission now inside the same licensing perimeter as traditional money transmission, the expectation is that this same multi-channel enforcement apparatus - criminal, administrative, and private civil action - will extend to virtual-currency-transmitting licensees going forward, though no virtual-currency-specific enforcement action has yet been reported under the amended statute.

Sources and findings (6)
  1. T3https://www.wolfbaldwin.com/articles/commercial-litigation-articles/unfair-trade-practices-and-consumer-protection/retrieved
  2. T3https://www.sidley.com/en/insights/newsupdates/2025/07/pennsylvania-leads-consumer-financial-protection-in-the-new-era-of-federalismretrieved
  3. T4https://www.upwardriskmanagement.com/post/fintech-regulatory-risk-2026retrieved
  4. T3https://www.dlapiper.com/en/insights/publications/2025/04/mitigating-risks-for-banks-fintech-companies-and-payment-processorsretrieved
  5. T3Pennsylvania Office of Attorney General – Consumer Financial Protection Unit — Pennsylvania Office of Attorney General – Consumer Financial Protection Unit — Over $374 million in relief for PA consumers since July 2017, including the $1.85bn multistate Navient settlement; UTPCPL provides a private right of action with treble damages and fee-shifting.retrieved
  6. T3Unfair Trade Practices and Consumer Protection Law — Unfair Trade Practices and Consumer Protection Law — Consumers have a private right of action to sue a financial-services business or institution for deceptive or unfair trade practices under the UTPCPL, in addition to Attorney General enforcement.retrieved

#

Pennsylvania has no dedicated state statute governing merchant acquiring; acquiring conduct is governed by national card-network rules (Visa/Mastercard chargeback-monitoring and MATCH-list programs) layered with general Commonwealth commercial and consumer-protection law (UTPCPL) applicable to merchant/processor conduct disputes.

Standing sub-brief · as of 5 July 2026 108 words · last cycle 2026-07-05

Merchant Acquiring & Risk

Merchant acquiring in Pennsylvania is governed by national card-scheme rules rather than a state-specific acquiring statute. Visa Acquirer Monitoring Program (VAMP), launched April 1, 2025, replacing VDMP/VFMP; excessive-merchant threshold fell to 1.5% as of April 1, 2026 across the US/Canada/EU/APAC, with an $8 penalty per violating transaction, tightening the risk-monitoring bar for PA-based acquirers and their merchant portfolios. No Pennsylvania-specific acquiring statute exists to supplement or diverge from this scheme-level framework.

no periodic updates on record for this sub-brief

Sources and findings (5)
  1. T4https://koronapos.com/blog/high-risk-merchant-accounts/retrieved
  2. T4https://terms.law/FAQ/payment-processors/chargeback-disputes-faq.htmlretrieved
  3. T4https://www.globallegallawfirm.com/processor-reserve-accounts-and-high-risk-merchants/retrieved
  4. T3https://www.lampmanlaw.com/consumer-protection/unfair-trade-practices.htmlretrieved
  5. T3Visa — Visa Acquirer Monitoring Program (VAMP), launched April 1, 2025, replacing VDMP/VFMP; excessive-merchant threshold fell to 1.5% as of April 1, 2026 across the US/Canada/EU/APAC, with an $8 penalty per violating transaction.retrieved

#

Product innovation touching Pennsylvania is led by instant-payments rollout (PNC's FedNow launch atop its founding RTP membership) and a modest but active Philadelphia/Pittsburgh fintech startup base, set against the federal open-banking (CFPB 1033) compliance timeline that PA-chartered and national banks operating in the state must meet.

Horizon · 2026-Q4 (± more than a year)PA Statewide Regulatory Sandbox Program (SB 245)Proposed · Tier 3 source
Standing sub-brief · as of 5 July 2026 111 words · last cycle 2026-09-21

Product Innovation & Market Development

The federal CFPB Open Banking Rule under Dodd-Frank §1033 sets an April 1, 2026 for the largest institutions compliance deadline, with staggered later compliance dates for smaller institutions, applying to PA-chartered and national banks operating in the Commonwealth. This is a federal rather than state-specific development, but it is the dominant product-access regulatory theme touching Pennsylvania's banking sector this cycle, running alongside continued instant-payments adoption (W5).

Periodic update · new data 2026-09-22

Product Innovation & Market Development

Pennsylvania has reportedly joined the Multi-State Internet Gaming Agreement, a development that would enable interstate online-poker liquidity pooling with other member states and expand the addressable market for Pennsylvania-facing online-poker liquidity. This is a product-development and market-expansion signal touching gaming-adjacent payment flows rather than a licensing, conduct, or prudential change, and it is distinct from the same-cycle virtual-currency licensing development, which is a market-access story rather than a product-innovation one.

The finding rests on a single lower-tier source, and no independent Tier-1 or Tier-2 corroboration of Pennsylvania's MSIGA membership date or scope was identified this cycle. It should therefore be treated as a probable rather than confirmed development: the direction, interstate liquidity pooling for online poker, is plausible and consistent with the broader multi-state interactive-gaming liquidity-sharing trend, but the specific date and scope claimed this cycle await firmer sourcing.

Outlook

Firmer, higher-tier corroboration of Pennsylvania's MSIGA membership date and scope, together with any operator-facing detail on how interstate liquidity pooling will function in practice, is the development to watch before this signal can be treated as confirmed.

Sources and findings (6)
  1. T2https://pnc.mediaroom.com/2025-10-21-PNC-Bank-Expands-Immediate-Payments-Solutions-by-Joining-the-FedNow-R-Serviceretrieved
  2. T3https://practiceguides.chambers.com/practice-guides/fintech-2025/usa/trends-and-developmentsretrieved
  3. T4https://tracxn.com/d/explore/fintech-startups-in-philadelphia-united-states/__jAX0zS2KyugxD8qUKty1PMiVPwuu9BDb9-nUhXNSZkM#top-companiesretrieved
  4. T3https://www.catalystcorp.org/resources/news-insights/september-2025/the-rapidly-expanding-benefits-of-instant-paymentsretrieved
  5. T3US CFPB Open Banking Rule (Dodd-Frank §1033) — US CFPB Open Banking Rule (Dodd-Frank §1033) — April 1, 2026 for the largest institutions, with staggered later compliance dates for smaller institutions.retrieved
  6. T4Pennsylvania — Pennsylvania — Multi-State Internet Gaming Agreement (MSIGA), enabling interstate online-poker liquidity pooling.retrieved

#

Pennsylvania consumer protection for payments runs through the general-purpose UTPCPL (private right of action with treble damages/fee-shifting, plus AG enforcement) and a dedicated Consumer Financial Protection Unit acting as a state-level UDAAP analogue; Pennsylvania has no APP-fraud-specific mandatory reimbursement regime comparable to the UK PSR mandate, leaving APP fraud loss allocation to federal EFTA/Reg E and card-network dispute rules.

Standing sub-brief · as of 19 August 2026 107 words · last cycle 2026-11-01

Consumer Protection & APP Fraud

Crypto and AI-enabled scams cost Pennsylvania consumers an estimated $538 million in 2025, affecting more than 31,000 people in the state; Bitcoin Depot alone operates 462 kiosks in Pennsylvania. This carried fraud-exposure finding is the driver behind pending Senate Bill 1015 and the competing Attorney General kiosk-ban proposal (see W1a). The unresolved legislative debate leaves a live consumer-fraud gap in the state's payments landscape pending a decision.

Periodic update · new data 2026-11-04

Consumer Protection & APP Fraud

The Pennsylvania Office of Attorney General's late-October 2026 kiosk fraud-warning campaign is the live development in consumer protection, and it sits squarely in the territory of authorised-push-payment-style fraud rather than unauthorised account takeover. The Attorney General's own announcement frames the risk around social-engineering tactics in which scammers direct victims to make cryptocurrency kiosk payments, including through QR codes that route funds to the scammer's own wallet — a pattern in which the consumer is induced to authorise the transfer themselves, with the kiosk functioning as the on-ramp that converts cash into an irreversible crypto payment.

The campaign's chosen instrument is a voluntary signage placement: physical 'STOP' signs encouraging consumers to pause before completing a kiosk transaction, rolled out statewide to coincide with National Cybersecurity Awareness Month. The Office's own figures put the scale of the underlying problem at roughly 290 scam complaints involving crypto kiosks over the preceding year, a number large enough to justify a statewide response but not one accompanied by new transaction limits, mandatory cooling-off periods, or operator liability rules — the kind of binding measures some other states have paired with kiosk fraud data. The Attorney General's broader consumer-protection toolkit, including enforcement under the state's Unfair Trade Practices and Consumer Protection Law, remains available in principle, but the kiosk campaign itself is advisory in nature and does not rest on new rulemaking.

The significance for payments-sector observers is less the campaign itself than what it signals about where Pennsylvania currently places responsibility for kiosk-fraud mitigation: with point-of-sale consumer awareness rather than with a licensing-based operator obligation. That placement is consistent with the absence of a kiosk-specific statute noted elsewhere — in the absence of a binding operator standard (screen warnings, delayed settlement, maximum transaction values), a state concerned about rising kiosk-fraud complaint volumes has reached for the instrument it can deploy immediately, which is public messaging rather than a new compliance requirement. Pending legislation that would create a dedicated kiosk framework, including a public-education fund specifically targeted at this harm, remains in committee rather than enacted, so the voluntary signage campaign is, for now, the operative state response rather than a bridge to an already-scheduled binding regime.

For payments businesses operating kiosks in the Commonwealth, the practical read is that reputational and consumer-complaint exposure around fraud-induced kiosk transactions is rising in visibility even though no new compliance obligation has yet attached to it. Firms that get ahead of eventual legislative action — for example by adopting transaction warnings, delayed settlement for first-time or high-value transactions, or enhanced QR-code verification — would be aligning voluntarily with the direction regulators and legislators are visibly moving, without yet being compelled to by Pennsylvania law.

Sources and findings (6)
  1. T3https://www.cohenseglias.com/news-article/pa-unfair-trade-practices-and-consumer-protection-law-investigations-frequently-asked-questions/retrieved
  2. T3https://rightsprotect.com/harassing-calls-and-conduct-by-debt-collectors-and-creditors/unfair-and-deceptive-act-or-practice-laws-by-state/pennsylvania-unfair-or-deceptive-act-or-practice-laws/retrieved
  3. T3https://www.sidley.com/en/insights/newsupdates/2025/07/pennsylvania-leads-consumer-financial-protection-in-the-new-era-of-federalismretrieved
  4. T3https://www.dlapiper.com/en/insights/publications/2025/04/mitigating-risks-for-banks-fintech-companies-and-payment-processorsretrieved
  5. T3Pennsylvania consumer protection framework (UTPCPL) — Pennsylvania consumer protection framework (UTPCPL) — UK PSR mandatory reimbursement; PA relies on federal EFTA/Reg E and card-network dispute rules for APP-fraud loss allocation, with UTPCPL/Consumer Financial Protection Unit acting as a UDAAP analogue.retrieved
  6. T1Act 161 of 2016 — Act 161 of 2016 — Electronic funds transfer consumer protections apply to the extent required by federal Regulation E (12 CFR Part 1005), without state-level duplicationretrieved

#

W11 is designated Sentinel.gi-fed by methodology; no Sentinel.gi feed content for US-PA was retrievable via the general web-search channel used for this baseline collection (Sentinel.gi is understood to be an internal/proprietary feed not indexed publicly). The only payments-relevant AML posture directly evidenced for Pennsylvania is the BSA/AML compliance condition embedded in DoBS money-transmitter licensing (internal audit plan requirement covering PATRIOT Act/BSA/AML) and FinCEN's federal MSB registration overlay.

Open gap — wpm-int-3No Sentinel-fed AML/CFT (W11) item supplied for US-PA this cycle.no under-indexing note recorded
Standing sub-brief · as of 5 July 2026 150 words · last cycle 2026-07-05

AML/CFT & Financial Crime

This module is methodology-designated as sourced from the Sentinel.gi feed, and readers should treat Sentinel.gi as the authoritative illicit-finance intelligence channel for AML/CFT developments; this brief does not independently re-analyse illicit finance. This cycle, No Sentinel.gi feed content for US-PA was retrievable via the general research channel used for baseline collection, so the only evidenced AML/CFT posture for Pennsylvania is the licensing-embedded Bank Secrecy Act/AML audit-plan condition attached to money-transmitter licensing, together with the standard FinCEN MSB registration overlay that applies nationally to money-services businesses. This is a coverage gap relative to the module's Sentinel-fed design intent, not an original illicit-finance judgment, and has been flagged to FIM given the newly expanded virtual-currency licensing perimeter under Act 7 of 2025 (W2).

no periodic updates on record for this sub-brief

Sources and findings (10)
  1. T1https://www.pa.gov/agencies/dobs/non-bank-licenseesretrieved
  2. T?FIM (sentinel.gi) per-JID baseline profile — United States — Pennsylvania — PA operates entirely within the federal BSA/AML architecture (FinCEN, OFAC, DOJ EDPA/MDPA/WDPA) layered with state money-transmitter licensing under the PA Department of Banking and Securities. A March 2025 domestic-company BOI exemption sharply narrowed federal beneficial-ownership visibility into PA-formed entities, while a pending FinCEN AML/CFT program-reform NPRM signals a deregulatory, effectiveness-based supervisory shift.
  3. T?FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-004) — Gap: absent-field-provenance
  4. T?FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-003) — Gap: political-constraint
  5. T?FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-002) — Gap: sourcing-thinness
  6. T?FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-001) — Gap: legal-gap
  7. T3FIM (sentinel.gi) enforcement_action_register — Enforcement action
  8. T3Sentinel.gi AML feed (US-PA) — Sentinel.gi AML feed (US-PA) — No Sentinel.gi feed content for US-PA was retrievable via the general web-search channel used for baseline collection; the only evidenced AML posture is the licensing-embedded BSA/AML audit-plan condition plus FinCEN MSB registration overlay.retrieved
  9. T?financial_integrity (subscribed) — financial_integrity (subscribed) — W11 AML/CFT & Financial Crime module content, produced by financial_integrity (D7, D1).
  10. T1FinCEN Customer Due Diligence Rule (31 CFR 1010.230) — FinCEN Customer Due Diligence Rule (31 CFR 1010.230) — Covered financial institutions must identify beneficial owners holding 25%+ equity, plus one control-prong individual, at new account opening Applies beyond this jurisdiction (United States)retrieved

#

Pennsylvania's principal correspondent-banking/settlement access story runs through Pittsburgh-based PNC Bank's direct Federal Reserve relationships (Fedwire large-value settlement, FedNow membership, and historic Federal Reserve Bank of Cleveland supervisory relationship), reflecting the standard federal-access model available to all Fed-member depository institutions chartered or operating in the Commonwealth.

Standing sub-brief · as of 5 July 2026 143 words · last cycle 2026-07-05

Correspondent Banking, Settlement & Access

Pennsylvania's correspondent-banking and settlement picture this cycle centres on the standard Fed-member access model rather than any state-specific de-risking issue. PNC Bank maintains direct settlement access via Fedwire (large-value settlement) and the FedNow Service (via FedLine), reflecting the access model available to any Fed-member depository institution chartered or operating in Pennsylvania. The module's analytical spine — the asymmetry between bank access to direct federal settlement rails and non-bank providers' reliance on sponsor-bank relationships — was not evidenced as a live issue for Pennsylvania this cycle, but remains the structural backdrop against which any future non-bank access friction would register.

no periodic updates on record for this sub-brief

Sources and findings (5)
  1. T1https://www.federalreserve.gov/supervisionreg/resolution-plans/pnc-fncl-svc-3g-20211217.pdfretrieved
  2. T2https://pnc.mediaroom.com/2025-10-21-PNC-Bank-Expands-Immediate-Payments-Solutions-by-Joining-the-FedNow-R-Serviceretrieved
  3. T1https://www.sec.gov/Archives/edgar/data/0000713676/000095015203008268/j0307901exv99w1.txtretrieved
  4. T1https://www.federalreserve.gov/paymentsystems/fednow_faq.htmretrieved
  5. T1PNC Bank — PNC Bank — Fedwire (large-value settlement) and the FedNow Service (via FedLine), reflecting the standard federal-access model available to Fed-member depository institutions chartered or operating in Pennsylvania.retrieved

#

The trailing-12-month window shows Pennsylvania bank/payments commercial activity dominated by in-state and cross-border bank consolidation (PNC's $4.1bn FirstBank acquisition, Mid Penn/1st Colonial, Norwood/PB Bankshares, Community Bank NA's Santander branch purchase) alongside a markedly cooled Philadelphia fintech funding market in 2025 relative to 2024.

Standing sub-brief · as of 5 July 2026 236 words · last cycle 2026-07-05

Commercial Intelligence (M&A, Investment & Product)

Pennsylvania's banking sector produced a dense run of commercial events this cycle. PNC Financial Services Group agreed to acquire FirstBank Holding Company (Colorado, $26.8bn assets) for $4.1 billion (~13.9m PNC shares + $1.2bn cash), expected to close in early 2026, increasing PNC's total assets to ~$575bn — the largest single PA-linked commercial event of the cycle. Mid Penn Bancorp, Inc. completed its acquisition of 1st Colonial Bancorp, Inc. for ~$106.1 million (cash-and-stock), closed February 27, 2026, extending Mid Penn's footprint into greater Philadelphia and southern New Jersey. Norwood Financial Corp's merger agreement with PB Bankshares, Inc., announced July 7, 2025, would create a combined company with ~$3.0bn assets across Northeastern, Central and Southeastern Pennsylvania; the deal value was not publicly disclosed. Community Bank, N.A. completed its acquisition of Seven former Santander Bank, N.A. branches in the Allentown, PA area, adding ~$553.0 million in customer deposits. Against this bank-side M&A wave, Philadelphia's fintech sector saw a ~96.79% YoY funding drop in H1 2025 vs H1 2024, alongside 162 active FinTech companies and 93 funded companies in Philadelphia as of May 2026 — a market-trend signal rather than a discrete deal.

no periodic updates on record for this sub-brief

Sources and findings (10)
  1. T2https://www.fintechfutures.com/m-a/pnc-to-acquire-firstbank-for-4-1bnretrieved
  2. T1https://www.sec.gov/Archives/edgar/data/0000879635/000095015203008268/a1stcolonialpressrelease.htmretrieved
  3. T1https://www.sec.gov/Archives/edgar/data/0001013272/000119312525156255/d849228dex992.htmretrieved
  4. T1https://www.sec.gov/Archives/edgar/data/0000723188/000110465925108797/tm2530626d1_ex99-1.htmretrieved
  5. T4https://tracxn.com/d/explore/fintech-startups-in-philadelphia-united-states/__jAX0zS2KyugxD8qUKty1PMiVPwuu9BDb9-nUhXNSZkM#top-companiesretrieved
  6. T3PNC Financial Services Group — PNC Financial Services Group — FirstBank Holding Company (Colorado, $26.8bn assets) for $4.1 billion (~13.9m PNC shares + $1.2bn cash), expected to close in early 2026, increasing PNC's total assets to ~$575bn.retrieved
  7. T1Mid Penn Bancorp, Inc. — Mid Penn Bancorp, Inc. — 1st Colonial Bancorp, Inc. for ~$106.1 million (cash-and-stock), closed February 27, 2026, extending Mid Penn's footprint into greater Philadelphia and southern New Jersey; combined company ~$7bn assets.retrieved
  8. T1Norwood Financial Corp — Norwood Financial Corp — PB Bankshares, Inc., announced July 7, 2025, creating a combined company with ~$3.0bn assets across Northeastern, Central and Southeastern Pennsylvania.retrieved
  9. T1Community Bank, N.A. — Community Bank, N.A. — Seven former Santander Bank, N.A. branches in the Allentown, PA area, adding ~$553.0 million in customer deposits.retrieved
  10. T3Philadelphia fintech sector — Philadelphia fintech sector — ~96.79% YoY funding drop in H1 2025 vs H1 2024 ($2.82M across 2 rounds vs $87.9M across 1 round); 162 active FinTech companies and 93 funded companies in Philadelphia as of May 2026.retrieved
No modules match.

Filters combine as OR inside a group and AND across groups.

Provenance and declared absence

Disclosure model: module cards load OPEN; standing positions render in full; sub-briefs and jurisdiction briefs load as a clamped teaser with an explicit “read full” control carrying the true word count; earlier updates stay collapsed behind a counted summary. No text is hidden without disclosing how much of it there is.

Sentinel-fed modules receive no special rendering treatment. sentinel_feed is an attribution chip only: it does not suppress content, does not generate an absence reason code, and does not exclude the module from any count, filter, search index or export on this page.

Family taxonomy is renderer-level presentation config, not a JID field. Colour is always duplicated in text and is never the sole carrier of meaning.

Suppressed by doctrine: derived risk score; per-module RAG traffic light. Not shown on this page.

Band honesty: uncertainty bands are computed against a frozen build clock of 2026-11-04. A year-precision row is never promoted into a tighter band.

Orphan deltas: 1 cycle_delta row(s) target non-module objects and are listed in the rail rather than attached to a card.

Envelope: baseline resolved at jurisdiction_json.baseline; 14 module(s), 109 finding(s), 159 source(s) in the cumulative register.

Think something on this page is wrong? Report an error.