
Weekly Digital Assets Regulatory Brief: Week 15-2026
17 signals across 13 jurisdictions: FDIC proposes GENIUS Act prudential standards for stablecoin issuers; AUSTRAC AML/CTF reforms set July 2026 deadline for virtual asset businesses; OFAC issues sham transaction advisory targeting tokenised structures; South Korea proposes comprehensive digital asset law; Italy and Germany push non-EU stablecoin controls; FCA publishes 2026 Perimeter Report; FINMA issues crypto custody guidance; SFC issues VATP sanctions circular.
Issue #26-15

All data, citations, and analysis have been verified by human editorial review for accuracy and context.
TL;DR
- •The FDIC proposed GENIUS Act prudential standards requiring stablecoin issuers and custodians at insured institutions to meet capital adequacy, reserve management, and redemption requirements - creating a federal compliance baseline that mirrors traditional banking prudential supervision.
- •Australia's AUSTRAC AML/CTF reforms took effect March 31 for existing entities, with virtual asset businesses including crypto-to-crypto exchanges, custodians, and token issuers facing a hard July 1, 2026 compliance deadline under the expanded regime.
- •A global sanctions compliance wave swept the digital assets sector as OFAC, SFC, VARA, and AUSTRAC all issued or reinforced crypto-specific sanctions requirements in the same week - signalling that sanctions infrastructure is now a baseline regulatory expectation for licensed platforms.
- •South Korea's ruling party proposed a comprehensive digital asset law incorporating stablecoin rules with bank-style capital and reserve requirements alongside a tokenized real-world asset framework - positioning it as Asia's most ambitious single-statute digital asset regime.
- •Italy and Germany circulated a joint non-paper proposing EBA emergency powers and reserve-transfer requirements for non-EU stablecoins, directly targeting USD-denominated tokens like USDC and signalling that MiCA's stablecoin provisions face tightening before they have fully bedded in.
Executive Summary
Week 15, 2026 • Published April 9, 2026
The dominant theme this week is the simultaneous tightening of sanctions and AML complianceRegulatory framework requiring financial institutions to detect and prevent money laundering, terrorist financing, and other illicit financial activities requirements for digital asset firms across multiple jurisdictions. OFAC issued a sham transactionA transfer of value or data recorded on a blockchain, verified by network participants, and permanently added to the distributed ledger advisory explicitly addressing tokenised structures, DAOs, and SPVs; Hong Kong's SFC issued a sanctions circular for licensed virtual assetFATF term for digital value representation tradable or transferable electronically trading platforms; VARA mandated real-time automated screening; and Australia's expanded AML/CTF regime set a July 2026 hard deadline for virtual asset businesses. The convergence is unmistakable: sanctions complianceChecking customers and transactions against government sanctions lists infrastructure is rapidly becoming a non-negotiable licensing prerequisite worldwide.
In the United States, the FDIC proposed GENIUS ActUS law (July 2025) requiring payment stablecoin issuers to be regulated entities with 1:1 reserve backing prudential standards for stablecoinA cryptocurrency pegged to a stable asset, such as USD or gold issuers, layering capital and redemption requirements on top of the FinCEN/OFAC AMLRegulatory framework requiring financial institutions to detect and prevent money laundering, terrorist financing, and other illicit financial activities and sanctions NPRM issued last week. David Woodcock was named SECU.S. federal agency regulating securities markets and protecting investors Enforcement Director, signalling a recalibration of the agency's crypto enforcement posture, while the SEC sent its proposed crypto asset classification interpretation to the White House for OIRA review. Meanwhile, Italy and Germany circulated a non-paper proposing enhanced controls on non-EU stablecoins - a direct shot at USDCA fully-reserved stablecoin pegged 1:1 to the US Dollar, issued by Circle and backed by regulated financial institutions and other dollar-denominated tokens operating under MiCAThe EU's comprehensive regulatory framework for crypto-assets, establishing harmonized rules for issuers and service providers across all 27 Member States.
Across Asia-Pacific, South Korea proposed a comprehensive digital asset law with bank-style stablecoinA cryptocurrency pegged to a stable asset, such as USD or gold rules, FINMA issued crypto custodyService for securely storing and managing cryptocurrency assets guidance in Switzerland, MAS enforced against a firm for AMLRegulatory framework requiring financial institutions to detect and prevent money laundering, terrorist financing, and other illicit financial activities/CFT failings with explicit implications for DPT providers, and Thailand proposed a new regulatory category for crypto funding source providers. Africa continued its licensing momentum with Nigeria's CBN launching a VASPEntity providing services related to virtual assets, subject to AML regulations pilot aligned with FATFGlobal standard-setter for combating money laundering and terrorist financing standards.
This Week's Signals
Jump to Risk MatrixUnited States
Europe
Signal Analysis
What Changed: FDIC Proposes GENIUS Act Prudential Standards for Stablecoin Issuers
CriticalRisk: Prudential/Compliance | Affected: FDIC-supervised banks, insured depository institutions, stablecoinA cryptocurrency pegged to a stable asset, such as USD or gold issuers and custodians | Horizon: NPRM comment period + implementation timeline | Confidence: High
Facts: The FDIC proposed prudential standards under the GENIUS ActUS law (July 2025) requiring payment stablecoin issuers to be regulated entities with 1:1 reserve backing covering capital adequacy, reserve management, redemption procedures, and custody requirements for stablecoinA cryptocurrency pegged to a stable asset, such as USD or gold issuers and custodians operating through insured depository institutions. The proposal establishes a federal compliance baseline that mirrors traditional banking prudential supervision, requiring FDIC-supervised banks that issue, distribute, or support US dollar stablecoins to meet specific capital and liquidityThe ease with which an asset can be bought or sold without affecting its price buffers. The standards complement the FinCEN/OFAC AMLRegulatory framework requiring financial institutions to detect and prevent money laundering, terrorist financing, and other illicit financial activities and sanctions NPRM issued the previous week, creating a two-track federal stablecoin regulatory architecture: prudential standards from the FDIC and AML/sanctions requirements from FinCEN/OFAC.
Implications: Any bank-affiliated stablecoinA cryptocurrency pegged to a stable asset, such as USD or gold issuer or custodian will need to build or upgrade capital planning, reserve segregation, and redemption infrastructure to FDIC standards. Institutions that assumed stablecoin activities would be treated as peripheral services now face full prudential integration. Combined with the FinCEN/OFAC NPRM, the US federal apparatus is constructing a comprehensive stablecoin regulatory framework in parallel across multiple agencies - compliance teams need to track both tracks simultaneously.
What Changed: AUSTRAC AML/CTF Reforms Set July 2026 Deadline for Virtual Asset Businesses
CriticalRisk: Compliance/Licensing | Affected: Crypto exchanges, custodians, tokenA digital asset built on an existing blockchain, often representing utility or value issuers, crypto-to-crypto service providers operating in Australia | Horizon: July 1, 2026 (83 days) | Confidence: High
Facts: Australia's AMLRegulatory framework requiring financial institutions to detect and prevent money laundering, terrorist financing, and other illicit financial activities/CTF Act reforms commenced on March 31, 2026 for current reporting entities. A second tranche takes effect on July 1, 2026, bringing newly regulated entities - including businesses providing crypto-to-crypto exchangeA platform where users can buy, sell, or trade cryptocurrencies, custody, transfer services on behalf of customers, and tokenA digital asset built on an existing blockchain, often representing utility or value issuance or sale - under AML/CTF program obligations. AUSTRAC is adopting an outcomes-focused supervisory approach prioritising effective management of MLAI systems that learn patterns from data without explicit programming/TF and proliferation-financing risks, and has emphasised "quality reporting" over checkbox compliance. Current entities must continue to run existing AML/CTF programs while transitioning to the new requirements.
Implications: Virtual assetFATF term for digital value representation tradable or transferable electronically businesses operating in Australia that have not yet begun compliance planning face a hard 83-day deadline. The expanded scope captures activities previously outside the regulatory perimeter, including crypto-to-crypto exchanges and custody-only operators. AUSTRAC's emphasis on proliferation-financing risk - aligned with FATFGlobal standard-setter for combating money laundering and terrorist financing recommendations - means sanctions screeningChecking customers and transactions against government sanctions lists and list-management capabilities are now baseline expectations. Firms should expect board-approved implementation plans documenting how sanctions screening, list management, and STR/SAR processes will scale to new service lines.
What Changed: OFAC Issues Sham Transaction Advisory Targeting Tokenised Structures
HighRisk: Sanctions/Compliance | Affected: All US-nexus digital asset firms, fund managers, DAOs, SPV operators, custodians | Horizon: Immediate | Confidence: High
Facts: OFAC published an advisory defining "sham transactionsA transfer of value or data recorded on a blockchain, verified by network participants, and permanently added to the distributed ledger" as transfers or arrangements where blocked persons give up their property on paper only through proxies or complex structures. The advisory provides non-exhaustive red flags including commercially unreasonable terms or lack of real consideration, transfers to family members or close associates, and pre-designation restructurings. OFAC explicitly stated that where information shows a blocked person retains an interest in property in the US or in the possession of a US person, that property must be blocked regardless of formal title. The guidance specifically addresses tokenised structures, DAOs, funds, SPVs, and trusts that holdA misspelling of 'hold,' used to mean holding onto cryptocurrency for long-term gains or trade digital assets.
Implications: Digital asset firms must update sanctions risk assessments to explicitly address sham-transactionA transfer of value or data recorded on a blockchain, verified by network participants, and permanently added to the distributed ledger risk in tokenised and decentralised structures. Enhanced beneficial-ownership and source-of-wealth checks are now expected where complex structures, family relationships to designated persons, or pre-designation restructurings are present. Compliance teams should build investigation typologies for sanctions-evasion structuring - assets moved into family trusts or new SPVs after designations, continued instructions from an SDN despite apparent divestment - and ensure governance policies make clear that formal title alone is insufficient for determining blocking obligations.
What Changed: David Woodcock Named SEC Enforcement Director
HighRisk: Enforcement/Strategic | Affected: All SECU.S. federal agency regulating securities markets and protecting investors-regulated digital asset entities, exchanges, tokenA digital asset built on an existing blockchain, often representing utility or value issuers, DeFiFinancial systems built on blockchain that operate without intermediaries like banks protocols | Horizon: Immediate | Confidence: High
Facts: The SECU.S. federal agency regulating securities markets and protecting investors appointed David Woodcock as Director of the Division of Enforcement, marking a leadership shift away from the Gensler-era crypto enforcement posture. Woodcock's appointment follows the earlier dissolution of the Crypto and Emerging Technologies Unit (CETU) and the establishment of the Crypto Task Force under Commissioner Peirce. The new enforcement leadership is expected to pursue more targeted actions against clear-cut fraud rather than the broad-based "regulation by enforcement" approach that characterised the prior administration.
Implications: The appointment signals a substantive shift in SECU.S. federal agency regulating securities markets and protecting investors enforcement priorities for digital assets. Firms that faced uncertainty about whether routine crypto activities could trigger enforcement action may see a narrower enforcement perimeter focused on demonstrable fraud and investor harm. However, institutions should not assume reduced scrutiny overall - the SEC's crypto enforcement is being recalibrated, not eliminated. Compliance teams should reassess enforcement risk profiles in light of the new leadership's expected priorities.
What Changed: SEC Sends Crypto Classification Interpretation to White House for OIRA Review
HighRisk: Regulatory/Classification | Affected: TokenA digital asset built on an existing blockchain, often representing utility or value issuers, exchanges, legal counsel, compliance teams classifying digital assets | Horizon: 90-day OIRA review window typical | Confidence: Medium
Facts: The SECU.S. federal agency regulating securities markets and protecting investors submitted its proposed crypto asset classification interpretation to the White House Office of Information and Regulatory Affairs (OIRA) for interagency review. This step, which follows the SEC-CFTCU.S. federal agency regulating derivatives markets including crypto commodity futures joint interpretive release on crypto asset classification issued in March, signals the administration is advancing formal rulemaking on the commodity-versus-security classification question. OIRA review is a standard step in the federal rulemaking process but confirms the interpretation is moving toward formal publication.
Implications: Once finalised, this interpretation will provide the most authoritative guidance to date on which digital assets fall under SECU.S. federal agency regulating securities markets and protecting investors jurisdiction versus CFTCU.S. federal agency regulating derivatives markets including crypto commodity futures jurisdiction. Legal counsel advising tokenA digital asset built on an existing blockchain, often representing utility or value issuers and exchanges should monitor the OIRA review timeline, as the final interpretation will directly affect token classification, registration obligations, and trading venue requirements. The OIRA process also opens a public comment window that industry participants should prepare for.
What Changed: South Korea Proposes Comprehensive Digital Asset Law with Stablecoin Framework
HighRisk: Regulatory/Licensing | Affected: Crypto exchanges, stablecoinA cryptocurrency pegged to a stable asset, such as USD or gold issuers, RWATangible assets represented on-chain tokenizationConverting real-world assets into digital tokens on a blockchain platforms operating in or targeting South Korea | Horizon: Legislative process (months) | Confidence: Medium
Facts: South Korea's ruling party proposed a comprehensive digital asset framework that would establish bank-style capital and reserve requirements for stablecoinA cryptocurrency pegged to a stable asset, such as USD or gold issuers, create a licensing regime for tokenised real-world assets (RWAs), and set prudential standards for digital asset service providers. The proposal builds on the existing Virtual AssetFATF term for digital value representation tradable or transferable electronically User Protection Act (enacted 2023) and represents the most ambitious single-statute approach to digital asset regulation in Asia. The framework includes dedicated provisions for stablecoin oversight with reserve management and redemption requirements modelled on banking prudential standards.
Implications: If enacted, South Korea would join the EU (MiCAThe EU's comprehensive regulatory framework for crypto-assets, establishing harmonized rules for issuers and service providers across all 27 Member States), Australia, and the US (GENIUS ActUS law (July 2025) requiring payment stablecoin issuers to be regulated entities with 1:1 reserve backing) in the small group of jurisdictions with comprehensive stablecoinA cryptocurrency pegged to a stable asset, such as USD or gold prudential frameworks. The inclusion of RWATangible assets represented on-chain tokenizationConverting real-world assets into digital tokens on a blockchain within the same statute is notable - most jurisdictions treat tokenization under existing securities law rather than bespoke digital asset legislation. Exchanges and stablecoin issuers operating in Korea should begin mapping compliance obligations against the draft provisions. The proposal also creates competitive pressure on Japan and Hong Kong, which have pursued more incremental approaches.
What Changed: Italy and Germany Propose Enhanced Controls on Non-EU Stablecoins
HighRisk: Regulatory/Market Access | Affected: Non-EU stablecoinA cryptocurrency pegged to a stable asset, such as USD or gold issuers (particularly USDCA fully-reserved stablecoin pegged 1:1 to the US Dollar, issued by Circle and backed by regulated financial institutions, USDTThe largest stablecoin by market cap, pegged 1:1 to the US Dollar and issued by Tether Limited), CASPsEntity providing crypto services under EU MiCA requiring authorization and regulatory compliance listing non-EU stablecoins, payment firms | Horizon: EU Council deliberation | Confidence: Medium
Facts: Italy and Germany circulated a joint non-paper proposing EBAEU agency supervising banking and stablecoin regulation across member states emergency powers and reserve-transfer requirements for non-EU stablecoins operating within the European single market. The proposal specifically targets US dollar-denominated tokens such as USDCA fully-reserved stablecoin pegged 1:1 to the US Dollar, issued by Circle and backed by regulated financial institutions and USDTThe largest stablecoin by market cap, pegged 1:1 to the US Dollar and issued by Tether Limited, arguing that MiCAThe EU's comprehensive regulatory framework for crypto-assets, establishing harmonized rules for issuers and service providers across all 27 Member States's current stablecoinA cryptocurrency pegged to a stable asset, such as USD or gold provisions allow foreign issuers to operate with insufficient regulatory oversight. The non-paper proposes that non-EU stablecoin issuers be required to holdA misspelling of 'hold,' used to mean holding onto cryptocurrency for long-term gains a portion of reserves within the EU and submit to enhanced EBA supervisory powers, including the ability to restrict or suspend circulation under emergency conditions.
Implications: This is the clearest signal yet that MiCAThe EU's comprehensive regulatory framework for crypto-assets, establishing harmonized rules for issuers and service providers across all 27 Member States's stablecoinA cryptocurrency pegged to a stable asset, such as USD or gold framework faces tightening before it has fully bedded in. Non-EU issuers whose tokens circulate widely in European markets - particularly Circle (USDCA fully-reserved stablecoin pegged 1:1 to the US Dollar, issued by Circle and backed by regulated financial institutions) - should prepare for potential reserve localisation requirements and enhanced supervisory engagement with the EBAEU agency supervising banking and stablecoin regulation across member states. CASPsEntity providing crypto services under EU MiCA requiring authorization and regulatory compliance listing non-EU stablecoins may face additional due diligenceProcess of verifying customer identity and assessing risk obligations. The timing, coming as the US advances its own stablecoin framework through the GENIUS ActUS law (July 2025) requiring payment stablecoin issuers to be regulated entities with 1:1 reserve backing, suggests a transatlantic regulatory competition dynamic around stablecoin governance.
What Changed: FCA Publishes 2026 Perimeter Report with Crypto Regulatory Boundaries
HighRisk: Regulatory/Perimeter | Affected: UK crypto firms, fintechs, compliance teams defining regulatory scope | Horizon: Ongoing implementation | Confidence: High
Facts: The FCA published its annual Perimeter Report for 2026, setting out the regulatory boundaries that define which activities require FCA authorisation and which fall outside its remit. The report includes updated analysis of crypto asset activities in the context of the forthcoming UK cryptoasset regulatory regime, which is being implemented through the Cryptoassets Regulations 2025 (SI 2026/102) and subsequent FCA rules under CP25/25 and CP26/4. The perimeter analysis addresses the boundary between regulated and unregulated crypto services, including staking, DeFiFinancial systems built on blockchain that operate without intermediaries like banks intermediation, and crypto lending.
Implications: The Perimeter Report is the FCA's definitive guide to what requires authorisation. Firms operating at the boundary of the UK crypto regime - particularly those offering staking services, DeFiFinancial systems built on blockchain that operate without intermediaries like banks access, or crypto lending products - should use this report to confirm whether their activities fall within or outside the regulatory perimeter. The report also serves as an early indicator of where the FCA sees future perimeter expansion, which is critical for firms planning product roadmaps in the UK market.
What Changed: FINMA Issues Guidance 01/2026 on Custody of Crypto-Based Assets
HighRisk: Prudential/Custody | Affected: Swiss-regulated banks, securities dealers, fund managers, and custodians holding crypto assets | Horizon: Immediate (guidance in effect) | Confidence: High
Facts: FINMA published Guidance 01/2026 on the custody of crypto-based assets, addressing segregation requirements, insolvency treatment, outsourcing to third parties, and the "equivalence" assessment for foreign custodians. The guidance establishes that crypto-based assets held in custody must be segregated from the custodian's own assets in a manner that ensures identifiability in insolvency. Outsourcing arrangements are subject to FINMA's existing outsourcing requirements, with additional due diligenceProcess of verifying customer identity and assessing risk for custodians in foreign jurisdictions where the insolvency treatment of crypto assets is uncertain.
Implications: Swiss-regulated institutions custody crypto assets under clear FINMA expectations for the first time. The segregation and insolvency provisions are particularly significant for banks offering institutional custody services, as they establish the legal framework for client asset protection. The foreign-custodian equivalence requirement will affect multi-jurisdictional custody chains - institutions using sub-custodians in jurisdictions without equivalent protections may need to restructure their custody arrangements or increase capital buffers. This aligns Switzerland with the UK (CASS 17 proposals under CP26/8) and MiCAThe EU's comprehensive regulatory framework for crypto-assets, establishing harmonized rules for issuers and service providers across all 27 Member States custody requirements.
What Changed: SFC Issues Sanctions Compliance Circular for Licensed VATPs
HighRisk: Sanctions/Compliance | Affected: SFC-licensed virtual assetFATF term for digital value representation tradable or transferable electronically trading platforms, compliance officers | Horizon: Immediate | Confidence: High
Facts: Hong Kong's Securities and Futures Commission issued a circular explicitly including SFC-licensed virtual assetFATF term for digital value representation tradable or transferable electronically trading platforms (VATPs) in its sanctions complianceChecking customers and transactions against government sanctions lists expectations framework. The circular notifies platforms that sanctions lists were updated on March 26, 2026 and requires screening of all clients and transactionsA transfer of value or data recorded on a blockchain, verified by network participants, and permanently added to the distributed ledger against the updated lists. The SFC expects VATPs to demonstrate that sanctions lists (UN, Hong Kong, and any others they commit to, such as OFAC) are updated promptly, and to have mechanisms for identifying exposure to newly-designated persons on-chainA decentralized, digital ledger of transactions maintained across multiple computers.
Implications: Licensed VATPs now have an unambiguous regulatory obligation to maintain crypto-native sanctions screeningChecking customers and transactions against government sanctions lists capabilities, including on-chainA decentralized, digital ledger of transactions maintained across multiple computers address monitoring and real-time list propagation. The SFC's expectation of an audit trail showing review and implementation of each circular creates a documentation burden that goes beyond simple list screening. Platforms should ensure their sanctions policies explicitly reference SFC AMLRegulatory framework requiring financial institutions to detect and prevent money laundering, terrorist financing, and other illicit financial activities circulars as compliance triggers and retain records demonstrating implementation.
What Changed: MAS Enforces Against Capital Asia Investments for AML/CFT Failings
HighRisk: Enforcement/Compliance | Affected: MAS-regulated institutions, DPT service providers, payment service providers in Singapore | Horizon: Immediate precedent | Confidence: High
Facts: MAS took enforcement action against Capital Asia Investments for AMLRegulatory framework requiring financial institutions to detect and prevent money laundering, terrorist financing, and other illicit financial activities/CFT failings, with the regulator explicitly highlighting the case as having broader implications for all MAS-regulated institutions, including payment service providers and DPT (digital payment tokenA digital asset built on an existing blockchain, often representing utility or value) service providers. Existing DPT service-provider rules already require UN/Singapore targeted financial sanctions screeningChecking customers and transactions against government sanctions lists as part of AML/CFT obligations, and MAS continues to align with FATFGlobal standard-setter for combating money laundering and terrorist financing statements following the February 2026 Plenary.
Implications: MAS's decision to highlight the broader applicability of this enforcement is a supervisory signal directed at the DPT industry. Licensed DPT service providers should treat this as a prompt to review their AMLRegulatory framework requiring financial institutions to detect and prevent money laundering, terrorist financing, and other illicit financial activities/CFT programs against MAS expectations, particularly sanctions screeningChecking customers and transactions against government sanctions lists, suspicious transaction monitoringAutomated surveillance of wallet activity for AML red flags and sanctions risks, and customer due diligenceProcess of verifying customer identity and assessing risk procedures. The enforcement reinforces that MAS views AML/CFT obligations as equally applicable to crypto-native firms and traditional financial institutions.
What Changed: VARA Mandates Real-Time Automated Sanctions Screening for VASPs
HighRisk: Sanctions/Compliance | Affected: VARA-licensed VASPs, compliance teams, regtechTechnology automating compliance and regulation vendors | Horizon: Immediate (operational requirement) | Confidence: High
Facts: VARA's sanctions complianceChecking customers and transactions against government sanctions lists requirements mandate that VASPs screen all clients and transactionsA transfer of value or data recorded on a blockchain, verified by network participants, and permanently added to the distributed ledger against UNSC and UAE sanctions lists using automated, regularly updated, real-time screening systems and immediately freeze assets - including virtual assetsFATF term for digital value representation tradable or transferable electronically - upon a match. Commentary on VARA's enforcement posture emphasises that financial-crime controls, including sanctions screening, are treated as a central supervisory focus rather than a peripheral compliance add-on.
Implications: The real-time screening mandate raises the technical bar for VARA-licensed firms. Manual or batch-processed screening will not satisfy the requirement. VASPs need automated systems capable of screening transactionsA transfer of value or data recorded on a blockchain, verified by network participants, and permanently added to the distributed ledger and walletA tool for storing, sending, and receiving cryptocurrencies addresses against sanctions lists with near-zero latency, including the ability to immediately freeze matched virtual assetsFATF term for digital value representation tradable or transferable electronically. This positions VARA alongside AUSTRAC and the SFC in requiring crypto-native sanctions infrastructure as a licensing baseline.
What Changed: ECB Publishes "Who to Regulate?" Paper on DeFi Protocol Actors
MediumRisk: Regulatory/Perimeter | Affected: DeFiFinancial systems built on blockchain that operate without intermediaries like banks protocols with European users, governance tokenA token that gives holders voting rights on decisions within a blockchain project or DAO holders, protocol developers | Horizon: Medium-term (policy development) | Confidence: Medium
Facts: ECB analysts published a paper titled "Who to Regulate? Identifying Actors Within DeFiFinancial systems built on blockchain that operate without intermediaries like banks Protocols" that maps the governance, development, and operational roles within major DeFi protocols and assesses which actors could be subject to regulatory obligations. The paper builds on MiCAThe EU's comprehensive regulatory framework for crypto-assets, establishing harmonized rules for issuers and service providers across all 27 Member States's current DeFi exemption and FATFGlobal standard-setter for combating money laundering and terrorist financing guidance on identifying obligated entities within decentralised arrangements. It proposes criteria for determining when a protocol's governance structure is sufficiently centralised to warrant treating governance participants as regulated entities.
Implications: While an ECB research paper is not binding policy, it signals the intellectual groundwork for extending the regulatory perimeter around DeFiFinancial systems built on blockchain that operate without intermediaries like banks protocols in Europe. Governance tokenA token that gives holders voting rights on decisions within a blockchain project or DAO holders and protocol development teams should pay attention to the criteria the ECB proposes for identifying "sufficient centralisation" - this framework could inform future MiCAThe EU's comprehensive regulatory framework for crypto-assets, establishing harmonized rules for issuers and service providers across all 27 Member States amendments or EBAEU agency supervising banking and stablecoin regulation across member states/ESMAEU agency coordinating securities regulation and supervising credit rating agencies and trade repositories guidance. Combined with the FATFGlobal standard-setter for combating money laundering and terrorist financing's February 2026 Plenary outcomes and the GENIUS ActUS law (July 2025) requiring payment stablecoin issuers to be regulated entities with 1:1 reserve backing's DeFi provisions, the direction is clear: regulators are converging on a framework for identifying regulable actors within nominally decentralised systems.
What Changed: Thailand SEC Proposes Funding Source Provider Category for Crypto Firms
MediumRisk: Licensing/Regulatory | Affected: Crypto fiat on-rampA service that converts fiat money into cryptocurrency providers, payment facilitators, custody-adjacent firms operating in Thailand | Horizon: Consultation period | Confidence: Medium
Facts: Thailand's Securities and Exchange CommissionU.S. federal agency regulating securities markets and protecting investors proposed adding "funding source providers" as a new regulated category for entities that facilitate fiatTraditional government-issued currency, such as USD, EUR, or NIS-to-crypto onboarding or provide liquidityThe ease with which an asset can be bought or sold without affecting its price infrastructure for crypto firms. The proposal would create a distinct licensing category separate from existing exchangeA platform where users can buy, sell, or trade cryptocurrencies and broker-dealer classifications, recognising that funding source providers play a critical intermediary role in the crypto ecosystem that warrants dedicated regulatory oversight.
Implications: The proposal reflects a broader regulatory trend toward capturing the full value chainA decentralized, digital ledger of transactions maintained across multiple computers of crypto services rather than only the exchangeA platform where users can buy, sell, or trade cryptocurrencies layer. Firms providing fiat on-rampA service that converts fiat money into cryptocurrency, payment processing, or liquidityThe ease with which an asset can be bought or sold without affecting its price services to Thai crypto exchanges should assess whether they would fall within the new category. The approach is novel in Southeast Asia and could influence similar proposals in neighbouring jurisdictions.
What Changed: Japan FSA Clarifies Penalties for Unregistered Crypto Exchange Activity
MediumRisk: Enforcement/Licensing | Affected: Unregistered crypto exchanges targeting Japanese users, compliance counsel | Horizon: Immediate | Confidence: High
Facts: Japan's Financial Services Agency clarified the penalty framework for unregistered cryptocurrency exchangeA platform where users can buy, sell, or trade cryptocurrencies activity under the Payment Services Act (PSA) and Financial Instruments and Exchange Act (FIEA). The clarification addresses enforcement thresholds, penalty calculations, and the circumstances under which administrative sanctions escalate to criminal referral. The FSA's statement reinforces Japan's long-standing position that all crypto exchange operations serving Japanese residents must be licensed.
Implications: Offshore exchanges that serve Japanese users without FSA registration face clearer enforcement risk. The penalty clarification is relevant for global exchanges assessing whether to apply for Japanese registration or to geo-fence Japanese users from their platforms. Combined with Japan's ongoing stablecoinA cryptocurrency pegged to a stable asset, such as USD or gold and digital asset framework development, the FSA continues to signal that it intends to enforce its licensing perimeter rigorously.
What Changed: Nigeria CBN Launches VASP Regulatory Pilot with FATF Alignment
MediumRisk: Licensing/AMLRegulatory framework requiring financial institutions to detect and prevent money laundering, terrorist financing, and other illicit financial activities | Affected: Crypto exchanges and VASPs operating in Nigeria, Africa-focused compliance teams | Horizon: Pilot phase (months) | Confidence: Medium
Facts: The Central Bank of Nigeria launched a VASPEntity providing services related to virtual assets, subject to AML regulations regulatory pilot that explicitly references alignment with FATFGlobal standard-setter for combating money laundering and terrorist financing standards on AMLRegulatory framework requiring financial institutions to detect and prevent money laundering, terrorist financing, and other illicit financial activities/CFT and counter-proliferation financing for VASPs. The pilot represents Nigeria's first structured approach to bringing crypto service providers within a formal regulatory framework, following years of an ambiguous regulatory stance that ranged from outright bans on bank-crypto transactionsA transfer of value or data recorded on a blockchain, verified by network participants, and permanently added to the distributed ledger (2021) to partial liberalisation.
Implications: Nigeria is Africa's largest crypto market by adoption volume. The CBN pilot signals a shift from prohibition to regulated accommodation, following a pattern seen in Kenya (VASPEntity providing services related to virtual assets, subject to AML regulations Act 2025) and South Africa (FSCA licensing). VASPs operating in Nigeria should engage with the pilot framework early, as the FATFGlobal standard-setter for combating money laundering and terrorist financing alignment requirements indicate that AMLRegulatory framework requiring financial institutions to detect and prevent money laundering, terrorist financing, and other illicit financial activities/CFT program standards will be substantive rather than nominal. For compliance teams covering African jurisdictions, this represents the most significant regulatory development in the continent's largest digital asset market.
What Changed: Coinbase Receives OCC Conditional Approval for National Trust Charter
MediumRisk: Licensing/Strategic | Affected: Crypto exchanges, institutional custody providers, banking-sector competitors | Horizon: Conditional (ongoing OCC supervision) | Confidence: High
Facts: The OCC granted Coinbase conditional approval for a national trust charter, potentially making it the first major crypto exchangeA platform where users can buy, sell, or trade cryptocurrencies to holdA misspelling of 'hold,' used to mean holding onto cryptocurrency for long-term gains a federal banking charter. The conditional approval subjects Coinbase to direct OCC supervision and examination, including capital adequacy, BSAU.S. anti-money laundering law applied to crypto businesses by FinCEN/AML complianceRegulatory framework requiring financial institutions to detect and prevent money laundering, terrorist financing, and other illicit financial activities, and fiduciary standards. The charter would enable Coinbase to offer trust and custody services under a federal framework rather than relying solely on state-level trust company licences.
Implications: A federally chartered crypto exchangeA platform where users can buy, sell, or trade cryptocurrencies sets a precedent for the industry's integration into the traditional banking regulatory architecture. Institutional clients that require counterparties with federal supervision may now consider Coinbase's trust services alongside traditional custodian banks. Competing exchanges may face pressure to pursue similar charters to maintain institutional competitiveness. The OCC's willingness to grant conditional approval also signals the current administration's openness to crypto-native firms entering the federal banking perimeter.
Risk Impact Matrix
| Jur. | Development | Risk Category | Severity | Affected | Timeline |
|---|---|---|---|---|---|
| US | FDIC GENIUS Act Prudential Standards | Prudential | Critical | Banks, stablecoin issuers, custodians | Comment period + implementation |
| AU | AUSTRAC AML/CTF VA Business Deadline | Compliance | Critical | Crypto exchanges, custodians, token issuers | July 1, 2026 |
| US | OFAC Sham Transaction Advisory | Sanctions | High | All US-nexus firms, DAOs, SPVs, funds | Immediate |
| US | Woodcock SEC Enforcement Director | Enforcement | High | SEC-regulated entities, exchanges, issuers | Immediate |
| US | SEC Crypto Interpretation to OIRA | Classification | High | Token issuers, exchanges, legal counsel | 90-day OIRA review |
| KR | Comprehensive Digital Asset Law | Licensing | High | Exchanges, stablecoin issuers, RWA platforms | Legislative process |
| EU | Italy/Germany Non-EU Stablecoin Controls | Market Access | High | Non-EU stablecoin issuers, CASPs | Council deliberation |
| UK | FCA 2026 Perimeter Report | Regulatory | High | UK crypto firms, fintechs | Ongoing |
| CH | FINMA Crypto Custody Guidance | Prudential | High | Swiss banks, custodians, fund managers | Immediate |
| HK | SFC VATP Sanctions Circular | Sanctions | High | Licensed VATPs, compliance officers | Immediate |
| SG | MAS AML/CFT Enforcement | Enforcement | High | DPT service providers, payment firms | Precedent set |
| AE | VARA Real-Time Sanctions Screening | Sanctions | High | VARA-licensed VASPs | Operational requirement |
| EU | ECB DeFi Regulatory Paper | Perimeter | Medium | DeFi protocols, governance token holders | Medium-term |
| TH | Funding Source Provider Category | Licensing | Medium | Fiat on-ramp providers, crypto liquidity firms | Consultation |
| JP | FSA Unregistered Exchange Penalties | Enforcement | Medium | Offshore exchanges, legal counsel | Immediate |
| NG | CBN VASP Regulatory Pilot | Licensing | Medium | Nigerian VASPs, Africa-focused firms | Pilot phase |
| US | Coinbase OCC National Trust Charter | Licensing | Medium | Crypto exchanges, institutional custodians | Conditional |
Regulations move faster than headlines.
One weekly brief. Every development that matters. No noise.
Read by compliance and legal teams at Standard Chartered, Lloyds, Freshfields, and Loyens & Loeff.
Free. No spam. Unsubscribe anytime.
Cross-Signal Patterns
Pattern: Global Sanctions Compliance Wave
Linked Signals: OFAC Sham Transactions, SFC VATP Sanctions Circular, VARA Sanctions Screening, AUSTRAC AML/CTF Reforms, MAS Enforcement
What it means: Five regulators across four continents issued or reinforced crypto-specific sanctions and AML requirements in the same week. The convergence is not coincidental - it reflects post-FATF Plenary implementation pressure and a shared recognition that crypto platforms are now systemically important enough to warrant the same sanctions infrastructure as traditional financial institutions. Firms operating across multiple jurisdictions face a compounding compliance burden where each regulator's requirements overlap but do not perfectly align, creating a need for a unified sanctions compliance architecture that satisfies the most demanding standard.
Confidence: High
Pattern: US Stablecoin Regulatory Architecture Crystallising
Linked Signals: FDIC Prudential Standards, OFAC Sham Transactions, SEC OIRA Review, Coinbase OCC Charter
What it means: The US stablecoin regulatory framework is being built in parallel across multiple agencies: FDIC (prudential standards), FinCEN/OFAC (AML/sanctions - issued last week), OCC (charter approvals), and SEC (classification). Together with the GENIUS Act statute, a comprehensive federal framework is emerging that subjects stablecoin issuers to bank-grade compliance across capital, AML, sanctions, and examination. The multi-agency approach creates coordination risk - firms must simultaneously track and comply with requirements from at least four federal regulators.
Confidence: High
Pattern: Stablecoin Regulatory Competition Intensifies
Linked Signals: FDIC Prudential Standards, Italy/Germany Non-EU Stablecoin Controls, South Korea Digital Asset Law, AUSTRAC Reforms
What it means: The US, EU, South Korea, and Australia are all moving simultaneously on stablecoin regulation - each with different approaches but converging on the principle that stablecoins require bank-grade prudential oversight. The Italy/Germany non-paper targeting non-EU stablecoins (read: USDC) suggests the EU views the US GENIUS Act framework as a competitive threat to MiCA's stablecoin provisions. This creates a transatlantic regulatory race where each bloc seeks to establish its standards as the global benchmark, with significant implications for stablecoin issuers that operate cross-border.
Confidence: Medium
Pattern: Custody Standards Converging Globally
Linked Signals: FINMA Custody Guidance, FCA Perimeter Report, FDIC Prudential Standards
What it means: FINMA's custody guidance (segregation, insolvency, foreign-custodian equivalence), the FCA's ongoing CASS 17 proposals for crypto custody, and the FDIC's custody requirements for stablecoin custodians are converging on a common set of principles: mandatory segregation, clear insolvency treatment, and due diligence on sub-custodians. This convergence reduces the compliance burden for institutions operating across these jurisdictions, as a custody framework designed to the most stringent standard should satisfy all three.
Confidence: Medium
Strategic Implications
1. Build Unified Sanctions Infrastructure Now
Firms licensed across multiple jurisdictions can no longer treat sanctions complianceChecking customers and transactions against government sanctions lists as a per-jurisdiction checkbox exercise. OFAC, SFC, VARA, and AUSTRAC each require crypto-native screening capabilities - on-chainA decentralized, digital ledger of transactions maintained across multiple computers address monitoring, real-time list propagation, and documentation of implementation. The optimal response is a single sanctions platform that meets the most demanding standard (VARA's real-time automation requirement) and produces jurisdiction-specific audit trails. [Traced to: OFAC Sham TransactionsA transfer of value or data recorded on a blockchain, verified by network participants, and permanently added to the distributed ledger, SFC Sanctions Circular, VARA Sanctions Screening, AUSTRAC Reforms]
2. StablecoinA cryptocurrency pegged to a stable asset, such as USD or gold Issuers Need Multi-Agency Compliance Programs
US stablecoinA cryptocurrency pegged to a stable asset, such as USD or gold issuers face a four-track compliance requirement: FDIC prudential standards, FinCEN AMLRegulatory framework requiring financial institutions to detect and prevent money laundering, terrorist financing, and other illicit financial activities programs, OFAC sanctions programs, and OCC examination standards. Compliance teams must be organised to track parallel rulemaking across all four agencies, and governance structures should ensure board-level visibility into each track's requirements and timelines. Non-US issuers whose tokens circulate in the EU should additionally prepare for potential reserve localisation requirements under the Italy/Germany non-paper. [Traced to: FDIC Prudential Standards, OFAC Sham TransactionsA transfer of value or data recorded on a blockchain, verified by network participants, and permanently added to the distributed ledger, Coinbase OCC Charter, Italy/Germany Non-Paper]
3. Custody Architecture Review Required
FINMA's custody guidance, combined with the UK's CASS 17 proposals and the FDIC's custody requirements, creates a global custody standard that demands segregation, clear insolvency treatment, and sub-custodian due diligenceProcess of verifying customer identity and assessing risk. Institutional custody providers should review their custody chains against these converging standards and identify gaps, particularly where foreign sub-custodians operate in jurisdictions without equivalent protections. [Traced to: FINMA Custody Guidance, FCA Perimeter Report, FDIC Prudential Standards]
4. Monitor DeFiFinancial systems built on blockchain that operate without intermediaries like banks Regulatory Perimeter Expansion
The ECB's "Who to Regulate?" paper, combined with FATFGlobal standard-setter for combating money laundering and terrorist financing guidance on identifying regulable entities in DeFiFinancial systems built on blockchain that operate without intermediaries like banks and the GENIUS ActUS law (July 2025) requiring payment stablecoin issuers to be regulated entities with 1:1 reserve backing's DeFi provisions, signals that the current MiCAThe EU's comprehensive regulatory framework for crypto-assets, establishing harmonized rules for issuers and service providers across all 27 Member States DeFi exemption is temporary. Governance tokenA token that gives holders voting rights on decisions within a blockchain project or DAO holders and protocol development teams should assess whether their roles could be characterised as "sufficiently centralised" under emerging regulatory frameworks and prepare for potential registration obligations. [Traced to: ECB DeFi Paper, AUSTRAC Reforms, FCA Perimeter Report]
5. Emerging Market Licensing Windows Opening
South Korea's comprehensive proposal and Nigeria's CBN pilot represent licensing windows in Asia's fourth-largest economy and Africa's largest crypto market. Firms with expansion strategies in either market should engage with the regulatory process early - through consultation responses in South Korea and pilot participation in Nigeria - to shape the framework before it crystallises. Thailand's funding source provider category similarly creates an opportunity for early regulatory engagement. [Traced to: South Korea Digital Asset Law, Nigeria CBN VASPEntity providing services related to virtual assets, subject to AML regulations, Thailand Funding Providers]
Sources
- FDIC Stablecoin Prudential Standards Proposal
- AUSTRAC AML/CTF Reform Implementation Guidance
- OFAC Sham Transactions Advisory
- SEC Press Release - David Woodcock Appointment
- SEC Crypto Classification Interpretation - OIRA Submission
- South Korea Financial Services Commission - Digital Asset Framework
- EU Council - Italy/Germany Non-Paper on Stablecoins
- FCA Perimeter Report 2025/26
- FINMA Guidance 01/2026 - Custody of Crypto-Based Assets
- SFC Circular on Sanctions Compliance for VATPs
- MAS Enforcement Action - Capital Asia Investments
- VARA Regulations and Rulebooks
- ECB Working Paper - Who to Regulate? DeFi Protocol Actors
- Thailand SEC - Funding Source Provider Consultation
- Japan FSA - Penalties for Unregistered Exchange Activity
- Central Bank of Nigeria - VASP Regulatory Pilot
- OCC - Coinbase National Trust Charter Conditional Approval
- FinCEN GENIUS Act NPRM - Payment Stablecoin AML/CFT
If you found this useful, please share it.
Questions or feedback? Contact us
MCMS Brief • Classification: Public • Sector: Digital Assets • Region: Global
Disclaimer: This content is for educational and informational purposes only. It is NOT financial, investment, or legal advice. Cryptocurrency investments carry significant risk. Always consult qualified professionals before making any investment decisions. Make Crypto Make Sense assumes no liability for any financial losses resulting from the use of this information. Full Terms