Author: Jesus Izquierdo

  • Navigating Multi-State Money Transmitter Licensing: A Step-by-Step Guide for 2026

    Adytum AML Compliance Consultants

    Your 2026 guide to completing multi-state money transmitter license applications in NMLS

    In 2026 the fintech landscape is quickly evolving and obtaining money transmitter licenses (MTLs) across multiple U.S. states remains a critical and complex requirement for businesses that receive, transmit, or facilitate the transfer of funds or monetary value on behalf of others. This includes payment processors, remittance services, digital wallets, and many crypto-related activities involving fiat on/off-ramps or value transmission.

    Money transmission is primarily regulated at the state level, with 49 states (all except Montana) requiring licensure, alongside federal registration as a Money Services Business (MSB) with FinCEN. Depending on your business model, you may or may not be required to obtain a money transmitter license in that specific state. Because each state has it’s own definitions and rules around money transmission it creates significant challenges for startups and fintechs whom don’t have the institutional knowledge of navigating these systems and regulatory structures.

    This quick guide produced by Adytum AML Consultants will walk you through the key elements of multi-state money transmitter license applications in 2026, from registration in the NMLS system, managing state-specific requirements, obtaining surety bonds, realistic timeline expectations, common pitfalls, and proven strategies to streamline the process down to maybe 45 days. Ha! 

    Whether you’re a fintech startup scaling nationally or a crypto firm expanding operations regionally across states, treating compliance as a strategic foundation can turn regulatory hurdles into a major competitive edge in the long run.

    Adytum AML Compliance Consultants

    Understanding the Regulatory Landscape in 2026

    Federal oversight begins with the US Treasury and a department of the Internal Revenue Service known as FinCEN. Initial registration with FinCEN  as a new money service business (MSB) is mandatory for anyone engaging in money transmission in the United States. FinCEN registration binds the organization to money transmitter requirements, namely following the Bank Secrecy Act, appointing a compliance officer, and implementing Money Transmitter transaction monitoring, reporting and recordkeeping requirements.

    Still, obtaining multi state money transmitter licenses and the changing requirements across states remain the major barrier to entry for new fintechs, startups and money transmitters; mostly because each jurisdiction defines “money transmission” a bit differently, often encompassing receiving funds for transmission, issuing payment instruments, or handling stored value. 

    Most states manage their money transmitter applications through the NMLS system. The acronym NMLS stands for the Nationwide Multistate Licensing System & Registry, and it is a centralized online database and platform used by U.S. regulators to approve, manage and track licensing for mortgage loan originators (MLOs) and other financial service providers like Money Transmitters, ensuring professionals meet industry standards like meeting adequate surety bond requirements and high level background checks through fingerprinting, and also offering consumers a way to verify a Company’s money transmitter license and even file a complaint if needed. So the NMLS is the primary system for licensing, registration, and oversight of mortgage lenders, brokers, loan officers, and money transmitters, ultimately aiming to make the process a bit more standardized and transparent.

    However, not every state has adopted the NMLS system to manage money transmitter applications; exceptions include Florida, New Jersey, and the U.S. Virgin Islands, which all require direct filings with their Office. The NMLS platform does streamline document uploads, fee payments, and tracking, but state-specific supplements may still need to be submitted beyond the system, directly to the state regulators Office.

    A Step-by-Step Process for Multi-State Applications in the NMLS

    Pre-Application Preparation (0-90 days)  

    Firstly, register with FinCEN as an MSB if not already completed. Develop a robust AML program aligned with BSA requirements, including risk assessments, KYC policies, training, and independent reviews. Prepare core documents required like several years of audited financial statements, current business plan, organizational charts, background check authorizations for beneficial owners and persons with significant control, as well as proof of the control persons’ qualifications like their resume, and whatever else may be required by the State regulator.

    Secondly, assess your business model against state definitions and requirements, map out which states should be prioritized for expansion potential, cost analysis, and importance to your revenue operations.  If your business meets the definition, I would first recommend attempting a “no action” letter or “request for opinion” letter directly from the regulator. Specifically outline your business model, flow of funds chart and any other relevant details as to why your business model doesn’t fit the definition of money transmission in that state. Once received, the regulator will likely take ~45 days to provide a response.  If the Regulator confirms your business needs a license, move forward with application through the NMLS system; otherwise you may not need a license to operate in the state, this may change in the future as regulators do change their mind from time to time.

    Adytum Expert AML Compliance Consultants

    Create an NMLS Account and Company Form, the MU1

    You will likely need to establish several accounts in the NMLS, one for the Organization, one for each controlling person or beneficial owner, and one for the Compliance Officer. Once the Company’s NMLS account and entity profile are established, elect to complete the MU1, input all relevant company data and have authorized representatives sign or approve int he NMLS system.

    Research and Prioritize States 

    Identify target states based on your customer base or operations. Prioritize high volume and  strategic areas for example, California, New York, Texas, Florida as high value priority.  Review each state’s checklist in NMLS for unique requirements, some demand pre-application interview meetings like Texas, and Florida is managed directly, outside of the NMLS system, you must use the Florida OFR’s portal.

    Submit Applications via NMLS or Direct Where Required

    For the state money transmitter regulators that do utilize the NMLS to oversee applications, and that your organization has identified as priority for growth; proceed to complete a new license application beginning with the MU1, and designate each of these states to receive a copy of your MTL application. As part of the complete application, you would have secured a surety bond in each state, and you will disclose or elect the surety company after the fact, electronically through NMLS.

    upload standardized documents plus state-specific items, including your AML policies, Audited Financial Statements, independent reviews. Be sure to provide the most accurate and current documentation, and use the correct naming conventions specified in the application by the regulator. In this way you will use your best efforts to avoid and minimize future back and forth with on the application and streamline the process.  Finally, pay the application fees which typically range between $500 and $1,000 per state, plus the NMLS processing fees.

    Respond to All Regulator Requests

    Once submitted you’ll receive some electronic confirmation, and most likely a written confirmation from the regulator in email and physical letter to your office. Possibly, regulators may issue deficiency letters or requests for additional information (RAIs). Respond as promptly within your power, as delays on the applicant’s part are a major cause of extended timelines for approval.

    Approval and What to do once you have the Money Transmitter License 

    Once approved you will be issued a license number both electronically and physically and you can now legally begin money transmission operations in that state. Maintain ongoing obligations: annual renewals, quarterly call reports via NMLS, audited financials, and bond adequacy verification.

    Why Choose Adytum?

    At Adytum we don’t just check the compliance boxes, instead we build sustainable compliance frameworks that scale and enable robust business growth. Our hands-on experience includes managing independent compliance reviews, training teams in best practices, and successfully passing both federal and state examinations.

    Ready to elevate your compliance program and be adytum?  

    Drop us a line partner@beadytum.com

    Adytum AML Compliance Consultants
  • AML Compliance Experts

    Transform Compliance Into Competitive Advantage

    Adytum is your strategic partner in keeping BSA AML compliance, monitoring changing regulatory licensing requirements, and operational implementation.

    Adytum AML Compliance Consultants

    Adytum brings proven expertise from the frontlines of fintech and cryptocurrency compliance. Our team has successfully navigated IRS FinCEN examinations, secured multi-state money transmitter licenses, and built comprehensive risk mitigating AML/BSA programs from the ground up.

    Our Core Expertise

    Regulatory Compliance & Licensing

    • Federal and state money transmitter licensing (FinCEN & NMLS multi-state registration)
    • Complete BSA AML compliance program design and operational implementation
    • Risk assessments aligned with FFIEC guidance
    • Successful examination preparation and management

    Strategic Operations

    • Business continuity and disaster recovery planning
    • Financial forecasting, budgeting, and company valuations
    • Contract negotiation and vendor management
    • Standard operating procedures development

    Financial Infrastructure

    • Banking relationship establishment and management
    • Cash logistics and payment processing optimization
    • Audit coordination and financial controls
    • Multi-location cash management systems

    Why Choose Adytum?

    At Adytum we don’t just check the compliance boxes, instead we build sustainable compliance frameworks that scale and enable robust business growth. Our hands-on experience includes managing independent compliance reviews, training teams in best practices, and successfully passing both federal and state examinations.

    Ready to elevate your compliance program and be adytum?  Drop us a line partner@beadytum.com

  • How to Build a Scalable BSA/AML Program from Scratch for Fintech Startups 

    Prior to founding Adytum, I had spent the last decade in the trenches as a Compliance Officer for a Crypto MSBs and Money Transmitter. I’ve seen it all: from the “Wild West” days of 2016 to the increasingly and arguably hyper-regulated landscape of 2026.

    If you’re a Fintech startup founder, you must move quickly, but in this industry, if your growth outpaces your compliance, you become a bigger target for regulators. Building a scalable BSA/AML program is about checking boxes, but it’s also about building a modular engine that won’t overheat when you hit 100k users; and that can accept upgrades as needed.

    Here’s my  blueprint for building AML from scratch without losing your shirt or your license.

    Risk Assessment as your Foundation

    Before you write a single policy, you have to understand your business and know where your risks are concentrated. Following the FFIEC Bank Secrecy Act/Anti-Money Laundering (BSA/AML) Examination Manual is pretty much the industry standard, even for non-bank financial institutions like Money Transmitters, MSBs and FinTechs.

    Initially evaluate risk across your Products, Services, Customers, Entities, Locations and Vendors. If you’re in the digital asset space, your risk assessment needs to account for risks on-chain, for example transacting with an OFAC sanctioned wallet. It’s not just who your customer is, but also where their coins have been or where their coins go after they leave your inventory, including the risk that those outputs arrive in a mixer or darknet market, or worse. Only from this understanding can you build mitigation effective mitigation strategies; also knowing that you will continue to iterate, basically in perpetuity.

    Adytum AML Compliance Consultants

    Once you’ve documented your risks before implementing mitigation controls, then apply your “mitigants” to find your residual risk. If the leftover risk is still “High,” you need better tools, or a team of lawyers.

    Live Policy Development is Key

    I’ve seen 200-page AML program manuals that were beautiful, but impossible to follow. The Company’s AML Program must be written to encompass the risks identified through assessments, regulatory requirements as stated in federal or state regulatory guidance,  implementation of controls, and enforcement mechanisms. 

    Eventually, when the AML program is tested by state or federal regulators, they can and will evaluate your policy against your specific business model and will issue fines if they deem it doesn’t fit. All this to say, don’t employ template policy as your AML policies must adequately and accurately reflect your organization’s specific tech stack, products, services and the associated risks. So at a minimum, your AML BSA Compliance program must include tenants for Recordkeeping, Internal Controls, Independent Testing, Designated CCO, Ongoing Training, and Customer Due Diligence  including collection and validation of identity data and screening against global watchlists like OFAC PEP SDN.

    AML Program Implementation with “Scalability” in Mind

    This is where most startups fail. They raise money, hire 25 people to complete manual KYC reviews of ID cards, source of funds documentation, transaction monitoring alerts, suspicious activity investigations, and that simply doesn’t scale and inevitably leads to a poor customer experience and loss of revenue for the Company, in the name of “effective compliance”. 

    In 2026 you need Automated Onboarding and Validation of Customer Identity data, Automated Transaction Monitoring Systems & Reporting Tools, and Human Compliance Managers to review and approve the 10% of accounts in they grey that require additional documentation, review or investigation; and preventing those accounts from becoming bottlenecks as you scale.

    Real-World Lessons from the Front-Lines of Crypto BTMs and OTC Trade Desks

    After an unpredictable 10 years in crypto AML Compliance for BTMs and OTC Trade Desks, my take aways are that if your engineers or leadership think of compliance as a  waste or impediment to faster growth, that regulatory debt must be paid eventually in the form of  regulatory fines.  A culture of compliance begins at the Board and CEO level, but Compliance Officers must also want the business to succeed and grow profitably. A CCO’s job is not to shut down every transaction that they consider suspicious or high volume, instead they are charged with implementing and enforcing a program that adequately assesses and mitigates risks, which functions more effectively as an automated, rules based transaction monitoring system.

    Adytum AML Compliance Consultants

    Ultimately data and documentation are what regulatory examiners want to see, including documentation of suspicious activity investigations and records of the SAR filings. And ofcourse, the Suspicious Activity Report (SAR); over the last 10 years, time and time again many organizations fail to file a single SAR and are mercilessly fined by regulators or worse. SARs are labor intensive, but consider them the ultimate culmination of your AML program’s effectiveness. A regulator will never consider your program effective if there is not a single SAR filing, we are dealing with Money after all, as Money Transmitters, and FinTech MSBs. Furthermore, the SAR  filing actually insulates the Company and the CCO from penalties and liabilities; there is no insulation absent the SAR filing.

    Final Thought

    Building a scalable BSA AML Compliance program as a FinTech MSB isn’t about being “un-hackable” or “un-washable”, the tech stack matters but Compliance is about demonstrating effective institutional controls,  and a thorough understanding of the associated AML and business risks. At Adytum AML Consultants, we don’t just give you a manual; we help you understand the risks and build the machine.

    Contact us today