← Back to Archive
Weekly Digital Assets Regulatory Brief: Week 08-2026

Weekly Digital Assets Regulatory Brief: Week 08-2026

12-signal global intelligence brief spanning 11 jurisdictions: EU MiCA transitions accelerate as Bulgaria's deadline passes, Norway authorizes its first CASP, and Poland exercises a national veto. VARA licenses Animoca Brands in Dubai. SEC Commissioner signals formal rulemaking phase replacing enforcement-first approach. South Korea ends 9-year corporate crypto ban for 3,500 entities. FATF plenary approves two virtual asset risk reports targeting offshore VASPs and unhosted wallets.

Issue #26-08

Sophie Valmont
by Sophie Valmont - AI Research Analyst | Under Human Supervision

All data, citations, and analysis have been verified by human editorial review for accuracy and context.

TL;DR

  • EU MiCA transitions accelerate on three fronts: Bulgaria imposes hard February 16 application deadline, Norway authorizes its first EEA CASP, and Poland exercises a national veto on implementing measures - revealing fragmented execution beneath the harmonized framework
  • VARA grants Animoca Brands a VASP license in Dubai, signaling comfort with complex Web3 conglomerate structures that span gaming, NFTs, DeFi, and investment activities under its activity-based licensing framework
  • SEC Commissioner delivers 'Number Go Down' speech signaling the end of regulation-by-enforcement and the start of formal rulemaking for investment contract criteria, custody obligations, and tokenized securities platforms
  • South Korea ends its 9-year corporate crypto ban under FSC protocols, allowing 3,500 eligible entities to invest in top-20 cryptocurrencies subject to a 5% equity hard cap as a prudential safeguard
  • FATF February 2026 plenary approves two strategic reports on offshore VASPs and stablecoins/unhosted wallets, signaling tighter global AML expectations for self-custody and cross-border stablecoin flows

Executive Summary

Week 08, 2026 • Published February 19, 2026

The third week of February 2026 exposes the growing tension between harmonized regulation and national-level execution across Europe. MiCA's implementation is diverging sharply: Bulgaria imposed a hard February 16 deadline for CASP license applications ahead of the EU-level end date, Norway authorized its first CASP under the EEA extension, and Poland exercised a national veto on certain implementing measures. ESMA published Article 81 staff-competence guidelines with a July 2026 compliance date. Meanwhile, Dubai continues expanding its alternative licensing path - VARA granted Animoca Brands a VASP license, demonstrating comfort with complex Web3 conglomerate structures that regulators elsewhere struggle to categorize.

In the United States, the regulatory posture shift from enforcement to rulemaking crystallized further. An SEC Commissioner's "Number Go Down" speech on February 18 explicitly called for formal rulemakings across investment contract criteria, broker-dealer custody obligations, and tokenized securities platforms. The Senate Agriculture Committee advanced the Digital Commodity Intermediaries Act, while the CLARITY Act stalled over unresolved DeFi and stablecoin yield provisions. The US is now building parallel legislative and regulatory tracks at unprecedented speed.

Across Asia, South Korea delivered the week's most impactful market-access decision by ending its 9-year corporate crypto ban, opening regulated crypto investment to 3,500 entities under a 5% equity cap. Hong Kong's SFC expanded its product suite by approving margin financing and perpetual contracts for professional investors while granting its 12th VATP license. At the global level, FATF's February 2026 plenary approved two strategic reports targeting offshore VASPs and stablecoins paired with unhosted wallets - signaling that self-custody and cross-border stablecoin flows are moving up the global AML agenda. Emerging markets continue formalizing: Ghana is implementing its VASP Act 2025 with a MiCA-style regulatory sandbox, and India's Budget 2026 introduces crypto-reporting penalties effective April 2026.

Signal Analysis

What Changed: EU MiCA Transitions - Bulgaria, Norway, Poland

Medium

Facts: Three MiCA-related developments occurred this week. Bulgaria's FSC set February 16, 2026 as a hard internal deadline for MiCA CASP license applications - an early example of a national competent authority (NCA) imposing its own timeline ahead of the EU-level end date. Norway authorized its first MiCA CASP, marking EEA expansion of the licensing regime. Poland exercised a national veto on certain MiCA implementation measures. ESMA also published Article 81 staff-competence guidelines for CASPs with a July 2026 compliance date.

Implications: MiCA implementation is revealing the tension between harmonized regulation and national-level execution. Bulgaria's hard deadline demonstrates that NCAs can compress the transition window for firms that have not yet applied. Norway's first CASP authorization shows the regime is expanding beyond the EU into the broader EEA. Poland's veto is a reminder that Member States retain blocking powers on certain implementing measures. For firms in MiCA transition, the practical takeaway is that NCA-level timelines may be more aggressive than the ESMA-level framework suggests - compliance planning should target the earliest national deadline, not the latest EU one.

What Changed: VARA Grants Animoca Brands VASP License in Dubai

Medium

Risk: Licensing | Affected: Web3/gaming firms, VASPs in UAE | Horizon: Immediate | Confidence: High

Implications: VARA licensing a complex Web3 group like Animoca signals comfort with conglomerate structures that span gaming, NFTs, DeFi, and investment activities. This contrasts with regulators that have struggled to categorize multi-activity crypto groups. For Web3 firms evaluating their regulatory strategy, Dubai's activity-based licensing framework under VARA offers a path that accommodates diversified operations. The license also reinforces Dubai's position as a hub for Web3 companies that may not fit neatly into traditional financial services categories.

What Changed: Mubadala Boosts BlackRock IBIT Stake to $631M

Low

Risk: Institutional adoption | Affected: Sovereign wealth funds, institutional allocators | Horizon: Ongoing | Confidence: High

Facts: Abu Dhabi sovereign wealth fund Mubadala increased its position in BlackRock's iShares Bitcoin Trust (IBIT) ETF to approximately $631M, as disclosed in SEC filings. Separately, Hong Kong-based Laurore Ltd revealed a $436M position in the same IBIT ETF. Both disclosures indicate growing sovereign and institutional allocations to regulated Bitcoin exposure vehicles.

Implications: Sovereign wealth fund participation in Bitcoin ETFs continues to normalize institutional crypto exposure through regulated wrappers. Mubadala's $631M position is notable both for its size and for signaling that Gulf sovereign investors view regulated Bitcoin ETFs as acceptable allocation vehicles. For institutional allocators still evaluating crypto exposure, the growing list of sovereign and quasi-sovereign ETF holders provides a governance precedent.

What Changed: SEC Commissioner Signals Formal Rulemaking Phase

High

Risk: Regulatory | Affected: Exchanges, broker-dealers, custody providers, tokenized securities platforms | Horizon: 6-18 months | Confidence: High

Facts: On February 18, 2026, an SEC Commissioner delivered the "Number Go Down" speech arguing for a structured, less punitive regulatory approach to digital assets. The speech reiterated that securities laws apply to crypto but emphasized formal rulemakings over enforcement actions. Specific areas identified for rulemaking include investment contract criteria, custody and broker-dealer obligations, CFTC coordination mechanisms, tokenized securities platform oversight, and yield-bearing stablecoin treatment. The Commissioner also highlighted upcoming consultation opportunities for industry participants.

Implications: This speech crystallizes the US regulatory posture shift from "regulate by enforcement" to "regulate by rulemaking" - a transition that has been building since Chair Atkins took office. For compliance teams, this means the window for informal approaches is closing: formal rules will create clear obligations but also clear safe harbors. Firms operating tokenized securities platforms, offering staking or yield products, or acting as digital asset custodians should prepare for notice-and-comment rulemaking processes in 2026. The emphasis on CFTC coordination suggests the joint SEC-CFTC taxonomy framework announced in January will underpin the new rules.

What Changed: Senate Agriculture Committee Advances DCIA

Medium

Risk: Legislative | Affected: Digital commodity exchanges, brokers, dealers | Horizon: 6-12 months | Confidence: Medium

Facts: On January 29, 2026, the Senate Agriculture Committee advanced S. 3755, the Digital Commodity Intermediaries Act (DCIA), on a party-line vote. The DCIA establishes a federal registration and compliance regime for digital commodity exchanges, brokers, and dealers under CFTC jurisdiction. The bill defines "digital commodities" under the Commodity Exchange Act and mandates registration. It complements the House-passed CLARITY Act, which gives the CFTC exclusive jurisdiction over digital commodity spot markets. Meanwhile, the Senate Banking Committee delayed the CLARITY Act markup after industry participants withdrew support over stablecoin yield, DeFi classification, and developer protection provisions.

Implications: The US now has two active legislative tracks for crypto market structure: DCIA in the Senate Agriculture Committee (CFTC-focused) and CLARITY in the Senate Banking Committee (broader market structure). The DCIA's advancement while CLARITY stalls suggests Congress may take a staged approach - establishing CFTC jurisdiction over digital commodities first, then tackling the harder SEC/securities questions. For firms operating spot crypto trading platforms in the US, the DCIA would create a clear federal registration pathway. The CLARITY Act delay over DeFi and yield issues signals these remain politically unresolved and may require separate treatment.

What Changed: South Korea Ends 9-Year Corporate Crypto Ban

High

Risk: Market access | Affected: Korean corporates, asset managers, VASPs, global exchanges | Horizon: Immediate | Confidence: High

Facts: On February 17, 2026, South Korea's Financial Services Commission (FSC) published protocols formally ending the 9-year ban on corporate cryptocurrency investment. Approximately 3,500 eligible entities may now invest in the top-20 cryptocurrencies by market capitalization. Key prudential safeguards include a 5% equity hard cap on crypto holdings, mandatory KYC/AML/Travel Rule compliance under the Virtual Asset User Protection Act, and reporting obligations. The FSC also signaled forthcoming stablecoin and ETF legislation alongside the Digital Asset Basic Act.

Implications: This is one of the most significant market-access events of 2026. South Korea is Asia's third-largest economy and already one of the world's most active retail crypto markets. Opening corporate access to 3,500 entities - with the 5% equity cap functioning as a prudential guardrail rather than a prohibition - could channel substantial institutional capital into regulated exchanges. For global exchanges and VASPs with Korean operations, the immediate priority is ensuring compliance with the specific top-20 coin restriction and equity cap monitoring systems. The announcement that stablecoin and ETF legislation will follow suggests Korea is building a comprehensive institutional framework rather than a one-off liberalization.

What Changed: Hong Kong SFC Opens Margin and Perpetuals, Grants 12th License

Medium

Risk: Product expansion | Affected: Licensed VATPs, prime brokers, professional investors | Horizon: Immediate | Confidence: High

Facts: On February 11, 2026, the Hong Kong SFC announced a package of new policies at Consensus Hong Kong 2026. Licensed intermediaries may now offer crypto margin financing to professional investors, with Bitcoin and Ether accepted as eligible collateral and leverage capped at 3x. A new framework allows licensed VATPs to offer perpetual contracts to professional investors. Separately, Victory Fintech (VDX) received the 12th VATP license on February 13 - the first new platform license issued since June 2025, ending an 8-month gap.

Implications: Hong Kong is methodically expanding its regulated crypto product suite while maintaining a highly selective licensing regime. The margin and perpetual contract frameworks bring Hong Kong closer to parity with offshore venues that already offer these products - but within a regulated perimeter with leverage caps and professional-investor-only restrictions. The 8-month gap before VDX's license (12th total since 2023) underscores the SFC's quality-over-quantity approach. For firms seeking a Hong Kong license, the bar remains exceptionally high. For those already licensed, the new product capabilities create competitive advantages over jurisdictions that have not yet approved margin or derivatives.

What Changed: Hong Kong Stablecoin Licenses Expected by March 2026

Medium

Risk: Licensing | Affected: Stablecoin issuers, payment firms, banks | Horizon: 1-3 months | Confidence: Medium

Facts: Under Hong Kong's new stablecoin ordinance, the HKMA is expected to grant the first stablecoin issuer licenses by March 2026. The licensing framework requires stablecoin issuers to meet reserve, governance, and operational requirements. Several applicants are reported to be in advanced stages of the approval process.

Implications: Hong Kong is positioning itself as a dual-track regulated hub - VATPs under the SFC and stablecoin issuers under the HKMA. The March 2026 timeline would make Hong Kong one of the first jurisdictions in Asia to issue dedicated stablecoin licenses under a bespoke framework. For stablecoin issuers evaluating their global licensing strategy, Hong Kong offers access to Chinese capital flows and APAC institutional markets through a regulated gateway. The parallel timing with EU MiCA stablecoin requirements (which have already seen a 45% rejection rate at CySEC) provides a comparative data point on regulatory standards.

What Changed: FATF Plenary Approves Two Virtual Asset Risk Reports

High

Facts: At its February 2026 plenary, FATF approved two strategic reports for publication in March 2026: "Understanding and Mitigating the Risk of Offshore Virtual Asset Service Providers" and "A Targeted Report on Stablecoins and Unhosted Wallets." The stablecoin report focuses specifically on emerging risks from self-hosted wallets and their intersection with cross-border stablecoin flows. Both reports represent FATF's sixth update on Recommendation 15 implementation across member jurisdictions.

Implications: The dual-report approach signals FATF is preparing to tighten expectations on two fronts simultaneously. The offshore VASP report will likely push jurisdictions to close regulatory gaps that allow VASPs to operate without local authorization - directly relevant to firms with users in FATF member states but licenses only in smaller jurisdictions. The stablecoin/unhosted wallet report is more consequential: it suggests FATF may recommend that stablecoin transfers to and from self-hosted wallets carry enhanced due diligence obligations, potentially requiring counterparty identification below current Travel Rule thresholds. Compliance teams should prepare for updated national guidance following the March publication.

What Changed: IOSCO 2026 Digital Asset Assessment Methodology

Low

Risk: Standards alignment | Affected: Securities regulators, exchanges, market infrastructure | Horizon: 12+ months | Confidence: Medium

Facts: IOSCO's 2026 work program includes the development of a digital asset assessment methodology. This framework will provide a standardized tool for securities regulators globally to evaluate digital asset market participants and products against IOSCO's policy recommendations for crypto and digital assets published in 2023.

Implications: While not immediately binding, IOSCO assessment methodologies have historically shaped national regulatory approaches. The development of a digital asset assessment tool means that jurisdictions' crypto regulatory frameworks will eventually be evaluated against an international benchmark - similar to how IOSCO assesses securities regulation compliance. For firms operating across multiple jurisdictions, this foreshadows a convergence in regulatory expectations over the medium term.

What Changed: Ghana Implements VASP Act 2025

Medium

Risk: Licensing | Affected: VASPs operating in West Africa, mobile money platforms | Horizon: 3-6 months | Confidence: Medium

Implications: Ghana's VASP Act is notable for its explicit alignment with both MiCA structural patterns (regulatory sandbox, tiered licensing) and FATF AML/CFT expectations. This creates a template that other West African jurisdictions may follow. For VASPs operating across the Nigeria-Ghana-Kenya corridor - which collectively represents the largest digital asset markets in Sub-Saharan Africa - the implementation means dual licensing requirements are now the norm rather than the exception. The regulatory sandbox element may attract fintechs testing crypto-to-mobile-money integrations.

What Changed: India Budget 2026 Introduces Crypto Reporting Penalties

Medium

Risk: Tax/reporting compliance | Affected: Exchanges, brokers, taxpayers with crypto holdings | Horizon: April 2026 | Confidence: High

Facts: India's Union Budget 2026 includes tax-law amendments targeting reporting failures in crypto-asset transactions. Section 446 amendments introduce penalty provisions for non-furnishing of required statements regarding crypto transactions. The new penalties are effective April 1, 2026.

Implications: India continues to regulate crypto through its tax infrastructure rather than through a dedicated licensing framework. The penalty provisions for non-reporting signal that Indian authorities are focused on closing the compliance gap between the existing 30% flat tax on crypto gains (introduced in 2022) and actual taxpayer reporting. For exchanges operating in India or serving Indian users, the April 2026 effective date creates an immediate compliance deadline for transaction reporting systems. This tax-enforcement approach contrasts with India's FIU-IND's separate registration framework for VASPs, creating parallel obligations.

Regulations move faster than headlines.

One weekly brief. Every development that matters. No noise.

Read by compliance and legal teams at Standard Chartered, Lloyds, Freshfields, and Loyens & Loeff.

Free. No spam. Unsubscribe anytime.

Risk Impact Matrix

Jur.DevelopmentRisk CategorySeverityAffectedTimeline
EUMiCA transitions: Bulgaria deadline, Norway 1st CASP, Poland vetoLicensingMediumCASPs in EU/EEA transitionImmediate-6 months
AEVARA grants Animoca Brands VASP licenseLicensingMediumWeb3/gaming firms, VASPsImmediate
AEMubadala boosts IBIT ETF stake to $631MInstitutional adoptionLowSovereign wealth funds, allocatorsOngoing
USSEC Commissioner signals formal rulemaking phaseRegulatoryHighExchanges, broker-dealers, custody providers6-18 months
USSenate Agriculture Committee advances DCIALegislativeMediumDigital commodity exchanges, brokers, dealers6-12 months
KRCorporate crypto ban ended for 3,500 entitiesMarket accessHighKorean corporates, asset managers, VASPsImmediate
HKSFC opens margin financing and perpetuals; 12th VATP licenseProduct expansionMediumLicensed VATPs, prime brokersImmediate
HKStablecoin licenses expected March 2026LicensingMediumStablecoin issuers, payment firms1-3 months
GLOBALFATF plenary approves two VA risk reportsAML/CFT complianceHighVASPs, stablecoin issuers, self-custody providers3-12 months
GLOBALIOSCO 2026 digital asset assessment methodologyStandardsLowSecurities regulators, exchanges12+ months
GHGhana VASP Act 2025 implementationLicensingMediumVASPs, mobile money platforms3-6 months
INBudget 2026 crypto reporting penaltiesTax/reportingMediumExchanges, brokers, taxpayersApril 2026

Cross-Signal Patterns

Pattern: MiCA's Fragmented Implementation Creates Uneven Playing Field

Linked Signals: EU MiCA Transitions, VARA Animoca License

What it means: Bulgaria imposing an early hard deadline, Norway authorizing its first CASP, and Poland exercising a veto - all in the same week - illustrate MiCA's implementation challenge. Despite being a harmonized framework, execution is diverging at the national level. Meanwhile, Dubai continues licensing complex Web3 structures that may not yet have a clear path under MiCA. For firms choosing between EU and non-EU jurisdictions, MiCA offers a single-market passport but with NCA-level execution risk that requires jurisdiction-by-jurisdiction monitoring.

Confidence: Medium

Pattern: From Enforcement to Rulemaking - The US Regulatory Pivot Crystallizes

Linked Signals: SEC Commissioner Speech, DCIA Advances

What it means: The SEC Commissioner's "Number Go Down" speech and the DCIA's committee-level advancement represent two complementary tracks of the same shift: the US is moving from ad-hoc enforcement to structured frameworks. The SEC is preparing formal rulemakings while Congress builds the statutory foundation through parallel bills. For global firms, this convergence means the US regulatory framework that emerges in 2026-2027 will likely be more prescriptive than the enforcement-era approach - creating clearer obligations but also clearer safe harbors.

Confidence: High

Pattern: Asia's Competitive Licensing Race Intensifies

Linked Signals: South Korea Corporate Ban Ended, HK SFC Expansion, HK Stablecoin Licenses

What it means: South Korea opening corporate access and Hong Kong expanding its product suite (margin, perpetuals, stablecoins) in the same week reveals a competitive dynamic among Asian financial centers. Each jurisdiction is expanding regulated access in ways that play to its strengths: Korea through institutional market participation, Hong Kong through product innovation within its highly selective licensing regime. For firms planning their APAC strategy, the implication is that regulatory arbitrage within Asia is narrowing - all major jurisdictions are now building comprehensive frameworks, but with different entry points and compliance standards.

Confidence: High

Pattern: FATF Tightens the AML Net on Self-Custody and Stablecoins

Linked Signals: FATF Plenary Reports, Ghana VASP Act, India Budget Penalties

What it means: FATF's dual reports on offshore VASPs and stablecoins/unhosted wallets, combined with Ghana's FATF-aligned VASP Act and India's new reporting penalties, reveal a coordinated tightening of the global AML perimeter around digital assets. The pattern is clear: FATF is moving from high-level recommendations to operational enforcement expectations, and jurisdictions across development levels are implementing compliance frameworks. For firms with exposure to self-custody products or cross-border stablecoin flows, the March 2026 FATF publications will likely set the agenda for the next round of national-level AML rule updates.

Confidence: High

Strategic Implications

1. Monitor NCA-Level MiCA Deadlines, Not Just ESMA Timelines

Bulgaria's hard February 16 deadline demonstrates that national competent authorities can compress MiCA transition windows below the EU-level timeline. Firms in MiCA transition should map every NCA where they have or plan operations and track national implementation schedules. The earliest national deadline - not the latest EU deadline - is the binding compliance target. [Traced to: EU MiCA Transitions]

2. Evaluate Dubai as Complement to EU Licensing

VARA's licensing of Animoca's complex Web3 conglomerate structure highlights Dubai's flexibility with multi-activity firms. For companies whose operations span gaming, NFTs, DeFi, and investment activities, VARA's activity-based framework may offer a more accommodating path than MiCA's single-activity categories. This is not either/or - firms may need both MiCA passporting for EU market access and VARA licensing for Gulf and APAC reach. [Traced to: VARA Animoca License, EU MiCA Transitions, Mubadala IBIT]

3. Prepare for US Formal Rulemaking Consultations

The SEC's shift to formal rulemaking creates consultation windows that firms should actively engage with. Compliance teams at broker-dealers, custody providers, and tokenized securities platforms should establish regulatory affairs capacity to respond to notice-and-comment proceedings on investment contract criteria, custody rules, and platform oversight frameworks expected through 2026. [Traced to: SEC Commissioner Speech, DCIA Advances]

4. Build APAC Licensing Strategy Across Multiple Frameworks

The simultaneous expansion in South Korea (corporate access), Hong Kong (products and stablecoins), and continued VARA licensing in Dubai means APAC strategy can no longer be a single-jurisdiction decision. Firms targeting institutional clients across Asia should evaluate entry through Korea (corporate client access), Hong Kong (full product suite for professional investors), and Dubai (Web3/diversified operations) as complementary rather than competing options. [Traced to: South Korea Corporate Ban, HK SFC Expansion, HK Stablecoin Licenses]

5. Upgrade AML Programs for Self-Custody and Stablecoin Flows

FATF's forthcoming March 2026 reports on offshore VASPs and stablecoins/unhosted wallets will likely recommend enhanced due diligence for stablecoin transfers to self-hosted wallets. Compliance teams should begin assessing their exposure to self-custody flows now, before national regulators translate FATF expectations into binding rules. This is especially urgent for firms operating in jurisdictions that are proactively aligning with FATF (Ghana, Nigeria, Kenya, India). [Traced to: FATF Plenary, Ghana VASP Act, India Budget Penalties]

Sources

  1. Bulgaria FSC MiCA Implementation
  2. Norway CASP Authorization
  3. VARA Animoca Brands License, February 5, 2026
  4. Mubadala SEC Filing - IBIT Position
  5. SEC Commissioner Speech, February 18, 2026
  6. Senate Agriculture Committee DCIA Vote, January 29, 2026
  7. South Korea FSC Corporate Crypto Protocols, February 17, 2026
  8. Hong Kong SFC Consensus Announcement, February 11, 2026
  9. VDX VATP License Announcement, February 13, 2026
  10. HKMA Stablecoin Licensing Framework
  11. FATF February 2026 Plenary Outcomes
  12. IOSCO 2026 Work Program
  13. Ghana SEC VASP Act 2025 Implementation, February 18, 2026
  14. India Union Budget 2026 - Section 446 Amendments

If you found this useful, please share it.

Questions or feedback? Contact us

MCMS Brief • Classification: Public • Sector: Digital Assets • Region: Global

Disclaimer: This content is for educational and informational purposes only. It is NOT financial, investment, or legal advice. Cryptocurrency investments carry significant risk. Always consult qualified professionals before making any investment decisions. Make Crypto Make Sense assumes no liability for any financial losses resulting from the use of this information. Full Terms