← Back to Archive
Weekly Digital Assets Regulatory Brief: Week 15-2026

Weekly Digital Assets Regulatory Brief: Week 15-2026

17 signals across 13 jurisdictions: FDIC proposes GENIUS Act prudential standards for stablecoin issuers; AUSTRAC AML/CTF reforms set July 2026 deadline for virtual asset businesses; OFAC issues sham transaction advisory targeting tokenised structures; South Korea proposes comprehensive digital asset law; Italy and Germany push non-EU stablecoin controls; FCA publishes 2026 Perimeter Report; FINMA issues crypto custody guidance; SFC issues VATP sanctions circular.

Issue #26-15

Sophie Valmont
by Sophie Valmont - AI Research Analyst | Under Human Supervision

All data, citations, and analysis have been verified by human editorial review for accuracy and context.

TL;DR

  • The FDIC proposed GENIUS Act prudential standards requiring stablecoin issuers and custodians at insured institutions to meet capital adequacy, reserve management, and redemption requirements - creating a federal compliance baseline that mirrors traditional banking prudential supervision.
  • Australia's AUSTRAC AML/CTF reforms took effect March 31 for existing entities, with virtual asset businesses including crypto-to-crypto exchanges, custodians, and token issuers facing a hard July 1, 2026 compliance deadline under the expanded regime.
  • A global sanctions compliance wave swept the digital assets sector as OFAC, SFC, VARA, and AUSTRAC all issued or reinforced crypto-specific sanctions requirements in the same week - signalling that sanctions infrastructure is now a baseline regulatory expectation for licensed platforms.
  • South Korea's ruling party proposed a comprehensive digital asset law incorporating stablecoin rules with bank-style capital and reserve requirements alongside a tokenized real-world asset framework - positioning it as Asia's most ambitious single-statute digital asset regime.
  • Italy and Germany circulated a joint non-paper proposing EBA emergency powers and reserve-transfer requirements for non-EU stablecoins, directly targeting USD-denominated tokens like USDC and signalling that MiCA's stablecoin provisions face tightening before they have fully bedded in.

Executive Summary

Week 15, 2026 • Published April 9, 2026

The dominant theme this week is the simultaneous tightening of sanctions and AML compliance requirements for digital asset firms across multiple jurisdictions. OFAC issued a sham transaction advisory explicitly addressing tokenised structures, DAOs, and SPVs; Hong Kong's SFC issued a sanctions circular for licensed virtual asset trading platforms; VARA mandated real-time automated screening; and Australia's expanded AML/CTF regime set a July 2026 hard deadline for virtual asset businesses. The convergence is unmistakable: sanctions compliance infrastructure is rapidly becoming a non-negotiable licensing prerequisite worldwide.

In the United States, the FDIC proposed GENIUS Act prudential standards for stablecoin issuers, layering capital and redemption requirements on top of the FinCEN/OFAC AML and sanctions NPRM issued last week. David Woodcock was named SEC Enforcement Director, signalling a recalibration of the agency's crypto enforcement posture, while the SEC sent its proposed crypto asset classification interpretation to the White House for OIRA review. Meanwhile, Italy and Germany circulated a non-paper proposing enhanced controls on non-EU stablecoins - a direct shot at USDC and other dollar-denominated tokens operating under MiCA.

Across Asia-Pacific, South Korea proposed a comprehensive digital asset law with bank-style stablecoin rules, FINMA issued crypto custody guidance in Switzerland, MAS enforced against a firm for AML/CFT failings with explicit implications for DPT providers, and Thailand proposed a new regulatory category for crypto funding source providers. Africa continued its licensing momentum with Nigeria's CBN launching a VASP pilot aligned with FATF standards.

Signal Analysis

What Changed: FDIC Proposes GENIUS Act Prudential Standards for Stablecoin Issuers

Critical

Risk: Prudential/Compliance | Affected: FDIC-supervised banks, insured depository institutions, stablecoin issuers and custodians | Horizon: NPRM comment period + implementation timeline | Confidence: High

Facts: The FDIC proposed prudential standards under the GENIUS Act covering capital adequacy, reserve management, redemption procedures, and custody requirements for stablecoin issuers and custodians operating through insured depository institutions. The proposal establishes a federal compliance baseline that mirrors traditional banking prudential supervision, requiring FDIC-supervised banks that issue, distribute, or support US dollar stablecoins to meet specific capital and liquidity buffers. The standards complement the FinCEN/OFAC AML and sanctions NPRM issued the previous week, creating a two-track federal stablecoin regulatory architecture: prudential standards from the FDIC and AML/sanctions requirements from FinCEN/OFAC.

Implications: Any bank-affiliated stablecoin issuer or custodian will need to build or upgrade capital planning, reserve segregation, and redemption infrastructure to FDIC standards. Institutions that assumed stablecoin activities would be treated as peripheral services now face full prudential integration. Combined with the FinCEN/OFAC NPRM, the US federal apparatus is constructing a comprehensive stablecoin regulatory framework in parallel across multiple agencies - compliance teams need to track both tracks simultaneously.

What Changed: AUSTRAC AML/CTF Reforms Set July 2026 Deadline for Virtual Asset Businesses

Critical

Risk: Compliance/Licensing | Affected: Crypto exchanges, custodians, token issuers, crypto-to-crypto service providers operating in Australia | Horizon: July 1, 2026 (83 days) | Confidence: High

Facts: Australia's AML/CTF Act reforms commenced on March 31, 2026 for current reporting entities. A second tranche takes effect on July 1, 2026, bringing newly regulated entities - including businesses providing crypto-to-crypto exchange, custody, transfer services on behalf of customers, and token issuance or sale - under AML/CTF program obligations. AUSTRAC is adopting an outcomes-focused supervisory approach prioritising effective management of ML/TF and proliferation-financing risks, and has emphasised "quality reporting" over checkbox compliance. Current entities must continue to run existing AML/CTF programs while transitioning to the new requirements.

Implications: Virtual asset businesses operating in Australia that have not yet begun compliance planning face a hard 83-day deadline. The expanded scope captures activities previously outside the regulatory perimeter, including crypto-to-crypto exchanges and custody-only operators. AUSTRAC's emphasis on proliferation-financing risk - aligned with FATF recommendations - means sanctions screening and list-management capabilities are now baseline expectations. Firms should expect board-approved implementation plans documenting how sanctions screening, list management, and STR/SAR processes will scale to new service lines.

What Changed: OFAC Issues Sham Transaction Advisory Targeting Tokenised Structures

High

Risk: Sanctions/Compliance | Affected: All US-nexus digital asset firms, fund managers, DAOs, SPV operators, custodians | Horizon: Immediate | Confidence: High

Facts: OFAC published an advisory defining "sham transactions" as transfers or arrangements where blocked persons give up their property on paper only through proxies or complex structures. The advisory provides non-exhaustive red flags including commercially unreasonable terms or lack of real consideration, transfers to family members or close associates, and pre-designation restructurings. OFAC explicitly stated that where information shows a blocked person retains an interest in property in the US or in the possession of a US person, that property must be blocked regardless of formal title. The guidance specifically addresses tokenised structures, DAOs, funds, SPVs, and trusts that hold or trade digital assets.

Implications: Digital asset firms must update sanctions risk assessments to explicitly address sham-transaction risk in tokenised and decentralised structures. Enhanced beneficial-ownership and source-of-wealth checks are now expected where complex structures, family relationships to designated persons, or pre-designation restructurings are present. Compliance teams should build investigation typologies for sanctions-evasion structuring - assets moved into family trusts or new SPVs after designations, continued instructions from an SDN despite apparent divestment - and ensure governance policies make clear that formal title alone is insufficient for determining blocking obligations.

What Changed: David Woodcock Named SEC Enforcement Director

High

Facts: The SEC appointed David Woodcock as Director of the Division of Enforcement, marking a leadership shift away from the Gensler-era crypto enforcement posture. Woodcock's appointment follows the earlier dissolution of the Crypto and Emerging Technologies Unit (CETU) and the establishment of the Crypto Task Force under Commissioner Peirce. The new enforcement leadership is expected to pursue more targeted actions against clear-cut fraud rather than the broad-based "regulation by enforcement" approach that characterised the prior administration.

Implications: The appointment signals a substantive shift in SEC enforcement priorities for digital assets. Firms that faced uncertainty about whether routine crypto activities could trigger enforcement action may see a narrower enforcement perimeter focused on demonstrable fraud and investor harm. However, institutions should not assume reduced scrutiny overall - the SEC's crypto enforcement is being recalibrated, not eliminated. Compliance teams should reassess enforcement risk profiles in light of the new leadership's expected priorities.

What Changed: SEC Sends Crypto Classification Interpretation to White House for OIRA Review

High

Risk: Regulatory/Classification | Affected: Token issuers, exchanges, legal counsel, compliance teams classifying digital assets | Horizon: 90-day OIRA review window typical | Confidence: Medium

Facts: The SEC submitted its proposed crypto asset classification interpretation to the White House Office of Information and Regulatory Affairs (OIRA) for interagency review. This step, which follows the SEC-CFTC joint interpretive release on crypto asset classification issued in March, signals the administration is advancing formal rulemaking on the commodity-versus-security classification question. OIRA review is a standard step in the federal rulemaking process but confirms the interpretation is moving toward formal publication.

Implications: Once finalised, this interpretation will provide the most authoritative guidance to date on which digital assets fall under SEC jurisdiction versus CFTC jurisdiction. Legal counsel advising token issuers and exchanges should monitor the OIRA review timeline, as the final interpretation will directly affect token classification, registration obligations, and trading venue requirements. The OIRA process also opens a public comment window that industry participants should prepare for.

What Changed: South Korea Proposes Comprehensive Digital Asset Law with Stablecoin Framework

High

Risk: Regulatory/Licensing | Affected: Crypto exchanges, stablecoin issuers, RWA tokenization platforms operating in or targeting South Korea | Horizon: Legislative process (months) | Confidence: Medium

Facts: South Korea's ruling party proposed a comprehensive digital asset framework that would establish bank-style capital and reserve requirements for stablecoin issuers, create a licensing regime for tokenised real-world assets (RWAs), and set prudential standards for digital asset service providers. The proposal builds on the existing Virtual Asset User Protection Act (enacted 2023) and represents the most ambitious single-statute approach to digital asset regulation in Asia. The framework includes dedicated provisions for stablecoin oversight with reserve management and redemption requirements modelled on banking prudential standards.

Implications: If enacted, South Korea would join the EU (MiCA), Australia, and the US (GENIUS Act) in the small group of jurisdictions with comprehensive stablecoin prudential frameworks. The inclusion of RWA tokenization within the same statute is notable - most jurisdictions treat tokenization under existing securities law rather than bespoke digital asset legislation. Exchanges and stablecoin issuers operating in Korea should begin mapping compliance obligations against the draft provisions. The proposal also creates competitive pressure on Japan and Hong Kong, which have pursued more incremental approaches.

What Changed: Italy and Germany Propose Enhanced Controls on Non-EU Stablecoins

High

Facts: Italy and Germany circulated a joint non-paper proposing EBA emergency powers and reserve-transfer requirements for non-EU stablecoins operating within the European single market. The proposal specifically targets US dollar-denominated tokens such as USDC and USDT, arguing that MiCA's current stablecoin provisions allow foreign issuers to operate with insufficient regulatory oversight. The non-paper proposes that non-EU stablecoin issuers be required to hold a portion of reserves within the EU and submit to enhanced EBA supervisory powers, including the ability to restrict or suspend circulation under emergency conditions.

Implications: This is the clearest signal yet that MiCA's stablecoin framework faces tightening before it has fully bedded in. Non-EU issuers whose tokens circulate widely in European markets - particularly Circle (USDC) - should prepare for potential reserve localisation requirements and enhanced supervisory engagement with the EBA. CASPs listing non-EU stablecoins may face additional due diligence obligations. The timing, coming as the US advances its own stablecoin framework through the GENIUS Act, suggests a transatlantic regulatory competition dynamic around stablecoin governance.

What Changed: FCA Publishes 2026 Perimeter Report with Crypto Regulatory Boundaries

High

Risk: Regulatory/Perimeter | Affected: UK crypto firms, fintechs, compliance teams defining regulatory scope | Horizon: Ongoing implementation | Confidence: High

Facts: The FCA published its annual Perimeter Report for 2026, setting out the regulatory boundaries that define which activities require FCA authorisation and which fall outside its remit. The report includes updated analysis of crypto asset activities in the context of the forthcoming UK cryptoasset regulatory regime, which is being implemented through the Cryptoassets Regulations 2025 (SI 2026/102) and subsequent FCA rules under CP25/25 and CP26/4. The perimeter analysis addresses the boundary between regulated and unregulated crypto services, including staking, DeFi intermediation, and crypto lending.

Implications: The Perimeter Report is the FCA's definitive guide to what requires authorisation. Firms operating at the boundary of the UK crypto regime - particularly those offering staking services, DeFi access, or crypto lending products - should use this report to confirm whether their activities fall within or outside the regulatory perimeter. The report also serves as an early indicator of where the FCA sees future perimeter expansion, which is critical for firms planning product roadmaps in the UK market.

What Changed: FINMA Issues Guidance 01/2026 on Custody of Crypto-Based Assets

High

Risk: Prudential/Custody | Affected: Swiss-regulated banks, securities dealers, fund managers, and custodians holding crypto assets | Horizon: Immediate (guidance in effect) | Confidence: High

Facts: FINMA published Guidance 01/2026 on the custody of crypto-based assets, addressing segregation requirements, insolvency treatment, outsourcing to third parties, and the "equivalence" assessment for foreign custodians. The guidance establishes that crypto-based assets held in custody must be segregated from the custodian's own assets in a manner that ensures identifiability in insolvency. Outsourcing arrangements are subject to FINMA's existing outsourcing requirements, with additional due diligence for custodians in foreign jurisdictions where the insolvency treatment of crypto assets is uncertain.

Implications: Swiss-regulated institutions custody crypto assets under clear FINMA expectations for the first time. The segregation and insolvency provisions are particularly significant for banks offering institutional custody services, as they establish the legal framework for client asset protection. The foreign-custodian equivalence requirement will affect multi-jurisdictional custody chains - institutions using sub-custodians in jurisdictions without equivalent protections may need to restructure their custody arrangements or increase capital buffers. This aligns Switzerland with the UK (CASS 17 proposals under CP26/8) and MiCA custody requirements.

What Changed: SFC Issues Sanctions Compliance Circular for Licensed VATPs

High

Risk: Sanctions/Compliance | Affected: SFC-licensed virtual asset trading platforms, compliance officers | Horizon: Immediate | Confidence: High

Facts: Hong Kong's Securities and Futures Commission issued a circular explicitly including SFC-licensed virtual asset trading platforms (VATPs) in its sanctions compliance expectations framework. The circular notifies platforms that sanctions lists were updated on March 26, 2026 and requires screening of all clients and transactions against the updated lists. The SFC expects VATPs to demonstrate that sanctions lists (UN, Hong Kong, and any others they commit to, such as OFAC) are updated promptly, and to have mechanisms for identifying exposure to newly-designated persons on-chain.

Implications: Licensed VATPs now have an unambiguous regulatory obligation to maintain crypto-native sanctions screening capabilities, including on-chain address monitoring and real-time list propagation. The SFC's expectation of an audit trail showing review and implementation of each circular creates a documentation burden that goes beyond simple list screening. Platforms should ensure their sanctions policies explicitly reference SFC AML circulars as compliance triggers and retain records demonstrating implementation.

What Changed: MAS Enforces Against Capital Asia Investments for AML/CFT Failings

High

Risk: Enforcement/Compliance | Affected: MAS-regulated institutions, DPT service providers, payment service providers in Singapore | Horizon: Immediate precedent | Confidence: High

Facts: MAS took enforcement action against Capital Asia Investments for AML/CFT failings, with the regulator explicitly highlighting the case as having broader implications for all MAS-regulated institutions, including payment service providers and DPT (digital payment token) service providers. Existing DPT service-provider rules already require UN/Singapore targeted financial sanctions screening as part of AML/CFT obligations, and MAS continues to align with FATF statements following the February 2026 Plenary.

Implications: MAS's decision to highlight the broader applicability of this enforcement is a supervisory signal directed at the DPT industry. Licensed DPT service providers should treat this as a prompt to review their AML/CFT programs against MAS expectations, particularly sanctions screening, suspicious transaction monitoring, and customer due diligence procedures. The enforcement reinforces that MAS views AML/CFT obligations as equally applicable to crypto-native firms and traditional financial institutions.

What Changed: VARA Mandates Real-Time Automated Sanctions Screening for VASPs

High

Risk: Sanctions/Compliance | Affected: VARA-licensed VASPs, compliance teams, regtech vendors | Horizon: Immediate (operational requirement) | Confidence: High

Facts: VARA's sanctions compliance requirements mandate that VASPs screen all clients and transactions against UNSC and UAE sanctions lists using automated, regularly updated, real-time screening systems and immediately freeze assets - including virtual assets - upon a match. Commentary on VARA's enforcement posture emphasises that financial-crime controls, including sanctions screening, are treated as a central supervisory focus rather than a peripheral compliance add-on.

Implications: The real-time screening mandate raises the technical bar for VARA-licensed firms. Manual or batch-processed screening will not satisfy the requirement. VASPs need automated systems capable of screening transactions and wallet addresses against sanctions lists with near-zero latency, including the ability to immediately freeze matched virtual assets. This positions VARA alongside AUSTRAC and the SFC in requiring crypto-native sanctions infrastructure as a licensing baseline.

What Changed: ECB Publishes "Who to Regulate?" Paper on DeFi Protocol Actors

Medium

Risk: Regulatory/Perimeter | Affected: DeFi protocols with European users, governance token holders, protocol developers | Horizon: Medium-term (policy development) | Confidence: Medium

Facts: ECB analysts published a paper titled "Who to Regulate? Identifying Actors Within DeFi Protocols" that maps the governance, development, and operational roles within major DeFi protocols and assesses which actors could be subject to regulatory obligations. The paper builds on MiCA's current DeFi exemption and FATF guidance on identifying obligated entities within decentralised arrangements. It proposes criteria for determining when a protocol's governance structure is sufficiently centralised to warrant treating governance participants as regulated entities.

Implications: While an ECB research paper is not binding policy, it signals the intellectual groundwork for extending the regulatory perimeter around DeFi protocols in Europe. Governance token holders and protocol development teams should pay attention to the criteria the ECB proposes for identifying "sufficient centralisation" - this framework could inform future MiCA amendments or EBA/ESMA guidance. Combined with the FATF's February 2026 Plenary outcomes and the GENIUS Act's DeFi provisions, the direction is clear: regulators are converging on a framework for identifying regulable actors within nominally decentralised systems.

What Changed: Thailand SEC Proposes Funding Source Provider Category for Crypto Firms

Medium

Risk: Licensing/Regulatory | Affected: Crypto fiat on-ramp providers, payment facilitators, custody-adjacent firms operating in Thailand | Horizon: Consultation period | Confidence: Medium

Facts: Thailand's Securities and Exchange Commission proposed adding "funding source providers" as a new regulated category for entities that facilitate fiat-to-crypto onboarding or provide liquidity infrastructure for crypto firms. The proposal would create a distinct licensing category separate from existing exchange and broker-dealer classifications, recognising that funding source providers play a critical intermediary role in the crypto ecosystem that warrants dedicated regulatory oversight.

Implications: The proposal reflects a broader regulatory trend toward capturing the full value chain of crypto services rather than only the exchange layer. Firms providing fiat on-ramp, payment processing, or liquidity services to Thai crypto exchanges should assess whether they would fall within the new category. The approach is novel in Southeast Asia and could influence similar proposals in neighbouring jurisdictions.

What Changed: Japan FSA Clarifies Penalties for Unregistered Crypto Exchange Activity

Medium

Risk: Enforcement/Licensing | Affected: Unregistered crypto exchanges targeting Japanese users, compliance counsel | Horizon: Immediate | Confidence: High

Facts: Japan's Financial Services Agency clarified the penalty framework for unregistered cryptocurrency exchange activity under the Payment Services Act (PSA) and Financial Instruments and Exchange Act (FIEA). The clarification addresses enforcement thresholds, penalty calculations, and the circumstances under which administrative sanctions escalate to criminal referral. The FSA's statement reinforces Japan's long-standing position that all crypto exchange operations serving Japanese residents must be licensed.

Implications: Offshore exchanges that serve Japanese users without FSA registration face clearer enforcement risk. The penalty clarification is relevant for global exchanges assessing whether to apply for Japanese registration or to geo-fence Japanese users from their platforms. Combined with Japan's ongoing stablecoin and digital asset framework development, the FSA continues to signal that it intends to enforce its licensing perimeter rigorously.

What Changed: Nigeria CBN Launches VASP Regulatory Pilot with FATF Alignment

Medium

Risk: Licensing/AML | Affected: Crypto exchanges and VASPs operating in Nigeria, Africa-focused compliance teams | Horizon: Pilot phase (months) | Confidence: Medium

Facts: The Central Bank of Nigeria launched a VASP regulatory pilot that explicitly references alignment with FATF standards on AML/CFT and counter-proliferation financing for VASPs. The pilot represents Nigeria's first structured approach to bringing crypto service providers within a formal regulatory framework, following years of an ambiguous regulatory stance that ranged from outright bans on bank-crypto transactions (2021) to partial liberalisation.

Implications: Nigeria is Africa's largest crypto market by adoption volume. The CBN pilot signals a shift from prohibition to regulated accommodation, following a pattern seen in Kenya (VASP Act 2025) and South Africa (FSCA licensing). VASPs operating in Nigeria should engage with the pilot framework early, as the FATF alignment requirements indicate that AML/CFT program standards will be substantive rather than nominal. For compliance teams covering African jurisdictions, this represents the most significant regulatory development in the continent's largest digital asset market.

What Changed: Coinbase Receives OCC Conditional Approval for National Trust Charter

Medium

Risk: Licensing/Strategic | Affected: Crypto exchanges, institutional custody providers, banking-sector competitors | Horizon: Conditional (ongoing OCC supervision) | Confidence: High

Facts: The OCC granted Coinbase conditional approval for a national trust charter, potentially making it the first major crypto exchange to hold a federal banking charter. The conditional approval subjects Coinbase to direct OCC supervision and examination, including capital adequacy, BSA/AML compliance, and fiduciary standards. The charter would enable Coinbase to offer trust and custody services under a federal framework rather than relying solely on state-level trust company licences.

Implications: A federally chartered crypto exchange sets a precedent for the industry's integration into the traditional banking regulatory architecture. Institutional clients that require counterparties with federal supervision may now consider Coinbase's trust services alongside traditional custodian banks. Competing exchanges may face pressure to pursue similar charters to maintain institutional competitiveness. The OCC's willingness to grant conditional approval also signals the current administration's openness to crypto-native firms entering the federal banking perimeter.

Risk Impact Matrix

Jur.DevelopmentRisk CategorySeverityAffectedTimeline
USFDIC GENIUS Act Prudential StandardsPrudentialCriticalBanks, stablecoin issuers, custodiansComment period + implementation
AUAUSTRAC AML/CTF VA Business DeadlineComplianceCriticalCrypto exchanges, custodians, token issuersJuly 1, 2026
USOFAC Sham Transaction AdvisorySanctionsHighAll US-nexus firms, DAOs, SPVs, fundsImmediate
USWoodcock SEC Enforcement DirectorEnforcementHighSEC-regulated entities, exchanges, issuersImmediate
USSEC Crypto Interpretation to OIRAClassificationHighToken issuers, exchanges, legal counsel90-day OIRA review
KRComprehensive Digital Asset LawLicensingHighExchanges, stablecoin issuers, RWA platformsLegislative process
EUItaly/Germany Non-EU Stablecoin ControlsMarket AccessHighNon-EU stablecoin issuers, CASPsCouncil deliberation
UKFCA 2026 Perimeter ReportRegulatoryHighUK crypto firms, fintechsOngoing
CHFINMA Crypto Custody GuidancePrudentialHighSwiss banks, custodians, fund managersImmediate
HKSFC VATP Sanctions CircularSanctionsHighLicensed VATPs, compliance officersImmediate
SGMAS AML/CFT EnforcementEnforcementHighDPT service providers, payment firmsPrecedent set
AEVARA Real-Time Sanctions ScreeningSanctionsHighVARA-licensed VASPsOperational requirement
EUECB DeFi Regulatory PaperPerimeterMediumDeFi protocols, governance token holdersMedium-term
THFunding Source Provider CategoryLicensingMediumFiat on-ramp providers, crypto liquidity firmsConsultation
JPFSA Unregistered Exchange PenaltiesEnforcementMediumOffshore exchanges, legal counselImmediate
NGCBN VASP Regulatory PilotLicensingMediumNigerian VASPs, Africa-focused firmsPilot phase
USCoinbase OCC National Trust CharterLicensingMediumCrypto exchanges, institutional custodiansConditional

Regulations move faster than headlines.

One weekly brief. Every development that matters. No noise.

Read by compliance and legal teams at Standard Chartered, Lloyds, Freshfields, and Loyens & Loeff.

Free. No spam. Unsubscribe anytime.

Cross-Signal Patterns

Pattern: Global Sanctions Compliance Wave

Linked Signals: OFAC Sham Transactions, SFC VATP Sanctions Circular, VARA Sanctions Screening, AUSTRAC AML/CTF Reforms, MAS Enforcement

What it means: Five regulators across four continents issued or reinforced crypto-specific sanctions and AML requirements in the same week. The convergence is not coincidental - it reflects post-FATF Plenary implementation pressure and a shared recognition that crypto platforms are now systemically important enough to warrant the same sanctions infrastructure as traditional financial institutions. Firms operating across multiple jurisdictions face a compounding compliance burden where each regulator's requirements overlap but do not perfectly align, creating a need for a unified sanctions compliance architecture that satisfies the most demanding standard.

Confidence: High

Pattern: US Stablecoin Regulatory Architecture Crystallising

Linked Signals: FDIC Prudential Standards, OFAC Sham Transactions, SEC OIRA Review, Coinbase OCC Charter

What it means: The US stablecoin regulatory framework is being built in parallel across multiple agencies: FDIC (prudential standards), FinCEN/OFAC (AML/sanctions - issued last week), OCC (charter approvals), and SEC (classification). Together with the GENIUS Act statute, a comprehensive federal framework is emerging that subjects stablecoin issuers to bank-grade compliance across capital, AML, sanctions, and examination. The multi-agency approach creates coordination risk - firms must simultaneously track and comply with requirements from at least four federal regulators.

Confidence: High

Pattern: Stablecoin Regulatory Competition Intensifies

Linked Signals: FDIC Prudential Standards, Italy/Germany Non-EU Stablecoin Controls, South Korea Digital Asset Law, AUSTRAC Reforms

What it means: The US, EU, South Korea, and Australia are all moving simultaneously on stablecoin regulation - each with different approaches but converging on the principle that stablecoins require bank-grade prudential oversight. The Italy/Germany non-paper targeting non-EU stablecoins (read: USDC) suggests the EU views the US GENIUS Act framework as a competitive threat to MiCA's stablecoin provisions. This creates a transatlantic regulatory race where each bloc seeks to establish its standards as the global benchmark, with significant implications for stablecoin issuers that operate cross-border.

Confidence: Medium

Pattern: Custody Standards Converging Globally

Linked Signals: FINMA Custody Guidance, FCA Perimeter Report, FDIC Prudential Standards

What it means: FINMA's custody guidance (segregation, insolvency, foreign-custodian equivalence), the FCA's ongoing CASS 17 proposals for crypto custody, and the FDIC's custody requirements for stablecoin custodians are converging on a common set of principles: mandatory segregation, clear insolvency treatment, and due diligence on sub-custodians. This convergence reduces the compliance burden for institutions operating across these jurisdictions, as a custody framework designed to the most stringent standard should satisfy all three.

Confidence: Medium

Strategic Implications

1. Build Unified Sanctions Infrastructure Now

Firms licensed across multiple jurisdictions can no longer treat sanctions compliance as a per-jurisdiction checkbox exercise. OFAC, SFC, VARA, and AUSTRAC each require crypto-native screening capabilities - on-chain address monitoring, real-time list propagation, and documentation of implementation. The optimal response is a single sanctions platform that meets the most demanding standard (VARA's real-time automation requirement) and produces jurisdiction-specific audit trails. [Traced to: OFAC Sham Transactions, SFC Sanctions Circular, VARA Sanctions Screening, AUSTRAC Reforms]

2. Stablecoin Issuers Need Multi-Agency Compliance Programs

US stablecoin issuers face a four-track compliance requirement: FDIC prudential standards, FinCEN AML programs, OFAC sanctions programs, and OCC examination standards. Compliance teams must be organised to track parallel rulemaking across all four agencies, and governance structures should ensure board-level visibility into each track's requirements and timelines. Non-US issuers whose tokens circulate in the EU should additionally prepare for potential reserve localisation requirements under the Italy/Germany non-paper. [Traced to: FDIC Prudential Standards, OFAC Sham Transactions, Coinbase OCC Charter, Italy/Germany Non-Paper]

3. Custody Architecture Review Required

FINMA's custody guidance, combined with the UK's CASS 17 proposals and the FDIC's custody requirements, creates a global custody standard that demands segregation, clear insolvency treatment, and sub-custodian due diligence. Institutional custody providers should review their custody chains against these converging standards and identify gaps, particularly where foreign sub-custodians operate in jurisdictions without equivalent protections. [Traced to: FINMA Custody Guidance, FCA Perimeter Report, FDIC Prudential Standards]

4. Monitor DeFi Regulatory Perimeter Expansion

The ECB's "Who to Regulate?" paper, combined with FATF guidance on identifying regulable entities in DeFi and the GENIUS Act's DeFi provisions, signals that the current MiCA DeFi exemption is temporary. Governance token holders and protocol development teams should assess whether their roles could be characterised as "sufficiently centralised" under emerging regulatory frameworks and prepare for potential registration obligations. [Traced to: ECB DeFi Paper, AUSTRAC Reforms, FCA Perimeter Report]

5. Emerging Market Licensing Windows Opening

South Korea's comprehensive proposal and Nigeria's CBN pilot represent licensing windows in Asia's fourth-largest economy and Africa's largest crypto market. Firms with expansion strategies in either market should engage with the regulatory process early - through consultation responses in South Korea and pilot participation in Nigeria - to shape the framework before it crystallises. Thailand's funding source provider category similarly creates an opportunity for early regulatory engagement. [Traced to: South Korea Digital Asset Law, Nigeria CBN VASP, Thailand Funding Providers]

Sources

  1. FDIC Stablecoin Prudential Standards Proposal
  2. AUSTRAC AML/CTF Reform Implementation Guidance
  3. OFAC Sham Transactions Advisory
  4. SEC Press Release - David Woodcock Appointment
  5. SEC Crypto Classification Interpretation - OIRA Submission
  6. South Korea Financial Services Commission - Digital Asset Framework
  7. EU Council - Italy/Germany Non-Paper on Stablecoins
  8. FCA Perimeter Report 2025/26
  9. FINMA Guidance 01/2026 - Custody of Crypto-Based Assets
  10. SFC Circular on Sanctions Compliance for VATPs
  11. MAS Enforcement Action - Capital Asia Investments
  12. VARA Regulations and Rulebooks
  13. ECB Working Paper - Who to Regulate? DeFi Protocol Actors
  14. Thailand SEC - Funding Source Provider Consultation
  15. Japan FSA - Penalties for Unregistered Exchange Activity
  16. Central Bank of Nigeria - VASP Regulatory Pilot
  17. OCC - Coinbase National Trust Charter Conditional Approval
  18. FinCEN GENIUS Act NPRM - Payment Stablecoin AML/CFT

If you found this useful, please share it.

Questions or feedback? Contact us

MCMS Brief • Classification: Public • Sector: Digital Assets • Region: Global

Disclaimer: This content is for educational and informational purposes only. It is NOT financial, investment, or legal advice. Cryptocurrency investments carry significant risk. Always consult qualified professionals before making any investment decisions. Make Crypto Make Sense assumes no liability for any financial losses resulting from the use of this information. Full Terms