
Weekly Digital Assets Regulatory Brief: Week 17-2026
14 signals across 10 jurisdictions: the EU formally adopts the 20th Russia sanctions package with a full sectorial ban on Russian crypto-asset service providers, DeFi platforms, RUBx, and the digital rouble; BIS FSI Paper 27 reframes multifunction cryptoasset intermediaries as bank-like entities; the FCA runs its first coordinated on-site P2P crypto crackdown and leads a 17-regulator global finfluencer action; the Fed, OCC, and FDIC issue SR 26-2, first MRM revision in 15 years; OFAC sanctions a Cambodian pig-butchering scam network defrauding Americans; Russia's State Duma passes crypto bill first reading; ASIC publishes 18-month DAF Act roadmap; Vietnam advances pilot crypto-asset licensing; ECB signs digital euro standards agreements; BIS and Bank of Italy deliver parallel speeches on stablecoin coordination.
Issue #26-17

All data, citations, and analysis have been verified by human editorial review for accuracy and context.
TL;DR
- •The EU Council formally adopted its 20th package of Russia sanctions on 23 April, including a total sectorial ban on transactions with Russian crypto-asset service providers and DeFi platforms used for circumvention, plus prohibitions on RUBx (the rouble-backed stablecoin) and Russia's digital rouble - the hardest crypto-specific sanctions measure in EU history.
- •The FCA led two enforcement operations in the same week: a first-ever coordinated on-site crackdown on illegal peer-to-peer crypto trading across eight London premises (22 April, with HMRC and SWROCU), and a 17-regulator global week-of-action against unlicensed financial influencers (20 April, with counterparts in Hong Kong, Australia, Singapore, UAE, Canada, Brazil, India, and others).
- •BIS FSI Paper 27 frames large multifunction cryptoasset intermediaries as performing bank-like credit, liquidity, and maturity transformation without the prudential safeguards of comparable intermediaries - a supervisory framework that directly feeds ASIC's 18-month Digital Assets Framework Act roadmap published the same week.
- •Russia's State Duma passed the 'On Digital Currency and Digital Rights' bill in first reading on 22 April (327 of 340 votes), establishing five regulated participant categories under Bank of Russia supervision, permitting crypto for foreign-trade settlements while maintaining the domestic payments ban, with target effect date 1 July 2026.
- •The Fed, OCC, and FDIC jointly issued SR 26-2 on 17 April, the first revision of interagency Model Risk Management guidance in 15 years, superseding SR 11-7 and SR 21-8 - most relevant to US banks with more than $30 billion in assets, including those running crypto-exposure, stablecoin-reserve, and AML-screening models.
Executive Summary
Week 17, 2026 • Published April 24, 2026
This was the heaviest crypto-regulatory week of the month, built around three structural themes: the EU closed the 20th sanctions package with unprecedented crypto-specific measures; prudential-style supervisory frameworks converged across the BISInternational financial institution serving central banks and fostering monetary and financial cooperation, ASICSpecialized hardware designed for mining cryptocurrencies efficiently, and US banking agencies; and enforcement moved decisively from paper to pavement in the UK.
The 20th EU sanctions package, formally adopted by Council on 23 April, is the most far-reaching crypto-targeted measure in EU sanctions history. It imposes a total sectorial ban on exchanges with any Russian crypto-asset service providerEntity providing crypto services under EU MiCA requiring authorization and regulatory compliance and on decentralised platforms enabling crypto trading used for sanctions circumvention, and prohibits transactionsA transfer of value or data recorded on a blockchain, verified by network participants, and permanently added to the distributed ledger involving RUBx (the rouble-backed stablecoinA cryptocurrency pegged to a stable asset, such as USD or gold) and the digital rouble under development by the Bank of Russia. Across the border, Russia's State Duma passed the "On Digital Currency and Digital Rights" bill in first reading on 22 April with 327 of 340 votes, formalising the very legal infrastructure the EU is now sanctioning. Between these two signals sit two ECB-ecosystem speeches (BISInternational financial institution serving central banks and fostering monetary and financial cooperation General Manager de Cos in Tokyo, Bank of Italy Senior Deputy Governor Angelini in Rome) calling for coordinated stablecoin regulation and cautious DLT adoption on the same day (20 April) - a central-bank chorus that frames the week.
In supervisory architecture, the Bank for International SettlementsInternational financial institution serving central banks and fostering monetary and financial cooperation Financial Stability Institute formalised the prudential case for treating multifunction cryptoasset intermediaries as bank-like entities needing capital, liquidityThe ease with which an asset can be bought or sold without affecting its price, governance, and stress-testing requirements. ASICSpecialized hardware designed for mining cryptocurrencies efficiently published an 18-month implementation roadmap for Australia's Digital Assets Framework Act, translating the same logic into operational sequencing for licensing Digital Asset Platforms and Tokenised Custody Platforms. The US banking agencies (Fed/OCC/FDIC) quietly completed the first revision of interagency Model Risk Management guidance in 15 years via SR 26-2 - a supervisory plumbing change that will apply to the same banks running crypto-exposure and stablecoinA cryptocurrency pegged to a stable asset, such as USD or gold-reserve models.
UK enforcement took two coordinated steps this week. The FCA conducted its first ever on-site operation against illegal peer-to-peer crypto trading across eight London premises with HMRC and the South West Regional Organised Crime Unit, and the same week led a 17-regulator global "week of action" against unlicensed financial influencers across Hong Kong, Australia, Singapore, the UAE, Canada, Brazil, India, Belgium, and others. In emerging markets, Vietnam continued to advance its crypto-asset market licensing pilot under Ministry of Finance Decision 96/QD-BTCThe first decentralized cryptocurrency, created in 2009 by Satoshi Nakamoto, and Kazakhstan's AFSA granted CodeCoin pre-application approval for stablecoinA cryptocurrency pegged to a stable asset, such as USD or gold issuance. The ECB separately signed digital euroProposed CBDC issued by European Central Bank to complement cash and private payments payment standards agreements with three European standard-setting organisations, preparing the technical rails for Eurosystem-wide digital euro deployment.
This Week's Signals
Jump to Risk MatrixEuropean Union
Global
United Kingdom
United States
Vietnam
Signal Analysis
What Changed: EU Adopts 20th Sanctions Package with Full Russian Crypto Sector Ban
CRITICALRisk: Sanctions ComplianceChecking customers and transactions against government sanctions lists / Extraterritorial Reach | Affected: EU-facing CASPsEntity providing crypto services under EU MiCA requiring authorization and regulatory compliance, global stablecoinA cryptocurrency pegged to a stable asset, such as USD or gold issuers, DeFiFinancial systems built on blockchain that operate without intermediaries like banks front-ends, payment processors with Russia-facing flows | Horizon: Immediate (upon OJ publication) | Confidence: High
Facts: On 23 April, the Council of the EU formally adopted the 20th package of restrictive measures against Russia, the biggest package of listings in two years with 120 new individual designations. The crypto provisions are the most far-reaching in the history of EU sanctions. The package imposes (i) a total sectorial ban on transactionsA transfer of value or data recorded on a blockchain, verified by network participants, and permanently added to the distributed ledger with any Russian crypto-asset service providerEntity providing crypto services under EU MiCA requiring authorization and regulatory compliance, (ii) a ban on transactions with decentralised platforms enabling crypto trading "because of their use in circumvention," (iii) prohibitions on the use of and support to RUBx (the rouble-backed stablecoinA cryptocurrency pegged to a stable asset, such as USD or gold) and the digital rouble being developed by the Bank of Russia "set up to enable sanctions circumvention," and (iv) prohibitions on transactions with agents in Russia and other third countries facilitating cross-border payment flows. The measures were anticipated at the proposal stage in W09; this week's adoption closes the legislative loop.
Implications: The 20th package extends EU sanctions into DeFiFinancial systems built on blockchain that operate without intermediaries like banks for the first time as a matter of EU legal architecture - the ban applies to "decentralised platforms enabling crypto trading" where they are used for circumvention. Global CASPsEntity providing crypto services under EU MiCA requiring authorization and regulatory compliance serving EU or EU-adjacent customers must now re-screen counterparties for Russia touchpoints including stablecoinA cryptocurrency pegged to a stable asset, such as USD or gold reserves, settlement flows, and any exposure to RUBx or the digital rouble. Global stablecoin issuers (USDCA fully-reserved stablecoin pegged 1:1 to the US Dollar, issued by Circle and backed by regulated financial institutions, USDTThe largest stablecoin by market cap, pegged 1:1 to the US Dollar and issued by Tether Limited, FDUSD, RLUSD) must review their Russia-denylist architecture and blockchainA decentralized, digital ledger of transactions maintained across multiple computers-analytics rules, since any facilitation of circumventing flows now risks EU enforcement. The explicit mention of DeFi raises the question of how EU authorities will assert extraterritorial jurisdiction over permissionless protocols - the first test cases will likely drive the next year of DeFi enforcement architecture globally.
What Changed: BIS FSI Paper 27 Frames Cryptoasset Service Providers as Bank-Like Intermediaries
HIGHRisk: Prudential / Supervisory Design | Affected: Crypto exchanges, lending platforms, stablecoinA cryptocurrency pegged to a stable asset, such as USD or gold issuers, custodians acting as multifunction intermediaries | Horizon: Feeds national rulemaking 12-24 months | Confidence: High
Facts: On 23 April, the BISInternational financial institution serving central banks and fostering monetary and financial cooperation Financial Stability Institute published Occasional Paper 27, "Cryptoasset service providers as financial intermediaries: risks and policy approaches," by Denise Garcia Ocampo, Peter Goodrich, and Gian-Piero Lovicu. The paper argues that large multifunction cryptoasset intermediaries (MCIs) accept customer cryptoassets through investment programmes and use those assets to fund lending, market making, and other activities, taking on credit, liquidityThe ease with which an asset can be bought or sold without affecting its price, and maturity risk. It finds that many MCIs operate without the prudential safeguards that typically apply to financial intermediaries engaged in comparable risk transformation and that many do not publish financial statements. The authors recommend MCIs engaged in financial intermediation be subject to prudential requirements including capital and liquidity buffers, robust governance and risk management frameworks, and stress testing, applying a combination of entity-based and activity-based regulation.
Implications: FSI papers are not binding rules, but they are leading indicators of how Basel Committee members will approach future standards. The paper gives national regulators a ready-made analytical framework to argue that crypto exchanges offering yield, lending, and derivatives are performing bank-like intermediation and should be supervised accordingly. Firms operating as MCIs should expect increased pressure on capital and liquidityThe ease with which an asset can be bought or sold without affecting its price disclosures, governance structures, and stress-testing capabilities in the next national rulemaking cycle. Entity-based regulation means legal-entity restructuring to separate brokerage, custody, and lending activities may soon become a supervisory expectation rather than a commercial choice.
What Changed: FCA Leads First Coordinated On-Site Crackdown on Illegal P2P Crypto Trading
HIGHRisk: AMLRegulatory framework requiring financial institutions to detect and prevent money laundering, terrorist financing, and other illicit financial activities Enforcement / Unlicensed Activity | Affected: Unregistered crypto traders, P2P operators, crypto shops in the UK | Horizon: Immediate | Confidence: High
Facts: On 22 April, the FCA led its first coordinated enforcement operation against illegal peer-to-peer crypto trading, targeting eight premises across London suspected of operating unregistered crypto services. The action was taken in partnership with HM Revenue & Customs (HMRC) and the South West Regional Organised Crime Unit (SWROCU), and relied on powers under the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017. Cease-and-desist letters were issued at each premises and on-site inspections were conducted. Steve Smart, FCA Executive Director of Enforcement and Market Oversight, said: "Unregistered peer-to-peer crypto traders operating in the UK are doing so illegally and pose a financial crime risk."
Implications: This is the first time the FCA has conducted physical on-site enforcement against unregistered crypto activity in the UK. Two takeaways for firms. First, MLR registration is now subject to on-the-ground inspection, not only document-based review. Second, it reads as a proof-of-concept for the supervisory ambition set out in CP26/13 one week earlier. Firms currently operating under MLR-only status and planning to apply for FSMA authorisation should treat this as a reminder that transitional periods will not protect unregistered activity. Overseas platforms serving UK clients without a UK registration should re-examine their UK-facing footprint.
What Changed: FCA Spearheads 17-Regulator Global Action Against Unlicensed Financial Influencers
HIGHRisk: Financial Promotions Enforcement | Affected: Crypto influencers, affiliate marketers, social-media promotion networks, sponsored-content platforms | Horizon: Immediate | Confidence: High
Facts: Beginning 20 April, the FCA led a coordinated "week of action" with 16 other regulators from Australia, Belgium, Brazil, Canada, Denmark, Hong Kong, India, Ireland, New Zealand, Norway, Qatar, Singapore, the UAE, and others, targeting unlicensed financial influencers operating across social media. UK-specific actions included securing a guilty plea from Aaron Chalmers (Geordie Shore) for illegal social media promotions, initiating criminal proceedings against two additional individuals, sending four warning letters to suspected unauthorised promoters, issuing 34 new warnings and updating 14 existing ones, making 120 account-removal requests to social media platforms, and identifying 1,267 illegal financial advertisements reaching an estimated 2.3 million UK accounts. Steve Smart said: "This collective push with international partners is vital in helping to protect millions of consumers from harm."
Implications: The coordinated timing across 17 jurisdictions is unprecedented for financial-promotions enforcement. Crypto-promotion networks that relied on regulatory fragmentation - promoting from a jurisdiction outside the target audience's regulator - now face a coordinated international response. Exchanges and tokenA digital asset built on an existing blockchain, often representing utility or value issuers running affiliate programmes should immediately audit promotion channels for authorisation status across all target jurisdictions, not just their home regulator. The FCA's use of criminal proceedings (not just regulatory fines) against individual promoters sets a precedent other 17 coalition members are likely to replicate. Platforms should expect elevated account-removal and content-takedown activity in Q2-Q3 2026 and should design compliance workflows that assume promotion activity may trigger multi-jurisdictional enforcement simultaneously.
What Changed: Fed, OCC, and FDIC Issue SR 26-2, First Revision of Model Risk Management Guidance in 15 Years
HIGHRisk: Prudential Model Governance | Affected: US banking organisations with more than $30 billion in total assets, including those with crypto exposure, stablecoinA cryptocurrency pegged to a stable asset, such as USD or gold reserve programmes, and AMLRegulatory framework requiring financial institutions to detect and prevent money laundering, terrorist financing, and other illicit financial activities-screening models | Horizon: 12-18 months for full implementation | Confidence: High
Facts: On 17 April, the Board of Governors of the Federal Reserve System, the Office of the Comptroller of the Currency, and the Federal Deposit Insurance Corporation jointly issued Supervisory Letter SR 26-2, "Revised Guidance on Model Risk Management." SR 26-2 supersedes SR 11-7 (issued 4 April 2011) and SR 21-8 (issued 9 April 2021). Per the Federal Reserve issuance page, the guidance is "most relevant to banking organizations with over $30 billion in total assets regulated by the Federal Reserve." The revised guidance adopts a risk-based approach tailored to a banking organisation's model risk profile and recognises that practices appropriately vary based on organisational size and complexity. The text does not explicitly reference artificial intelligence, machine learningAI systems that learn patterns from data without explicit programming, or agentic AI - the revision reflects 15 years of accumulated supervisory experience and industry feedback across modelling practices more broadly.
Implications: The update is the first structural revision to the US interagency MRM framework since 2011. For banking organisations with crypto exposure, stablecoinA cryptocurrency pegged to a stable asset, such as USD or gold reserve management programmes, or AMLRegulatory framework requiring financial institutions to detect and prevent money laundering, terrorist financing, and other illicit financial activities-screening capabilities, the practical impact is a model-by-model revalidation against the revised principles of development, validation, monitoring, and governance. Although the document does not name crypto or AIAI systems that learn patterns from data without explicit programming, the scope covers any quantitative model used by in-scope banks - including stablecoin reserve risk models under GENIUS ActUS law (July 2025) requiring payment stablecoin issuers to be regulated entities with 1:1 reserve backing compliance programmes, tokenised-deposit settlement models, crypto counterparty exposure calculators, and blockchainA decentralized, digital ledger of transactions maintained across multiple computers-analytics-informed AML screening systems. Model-risk officers should map which of their crypto- and AI-facing models fall within the SR 26-2 perimeter and prepare revalidation plans aligned with the new risk-tiering approach.
What Changed: State Duma Passes "On Digital Currency and Digital Rights" Bill in First Reading
HIGHRisk: Russia-Nexus Compliance / Sanctions Parallel | Affected: Russia-facing crypto flows, exchanges with Russian users, stablecoinA cryptocurrency pegged to a stable asset, such as USD or gold issuers with Russian counterparties | Horizon: 1 July 2026 target effective date | Confidence: Medium (bill still subject to second/third readings)
Facts: On 22 April, Russia's State Duma passed in first reading the government bill "On Digital Currency and Digital Rights," submitted on 1 April. The vote was 327 of 340 deputies in favour. The bill formally recognises cryptocurrency as property under Russian law and creates a comprehensive statutory framework for crypto issuance, trading, and custody. It establishes five categories of regulated participants - exchanges, brokers, management companies, depositories, and exchangers - all of which must be licensed and supervised by the Bank of Russia. The bill permits digital currency for foreign trade and cross-border settlements while maintaining a strict ban on crypto for domestic payments (the rouble remains the sole legal means of payment). Peer-to-peer transactionsA transfer of value or data recorded on a blockchain, verified by network participants, and permanently added to the distributed ledger are slated for tighter controls from 2027. The bill still requires two more readings in the State Duma, passage through the Federation Council, and presidential signature before entering into force; the target effective date is 1 July 2026. Note: widely reported by multiple crypto-news outlets; no Tier-1 regulator or major wire-service confirmation was available at the time of publication.
Implications: The timing is notable: Russia is formalising a domestic crypto framework the same week the EU is formally adopting its most aggressive crypto-sanctions package targeting exactly this infrastructure. Any exchangeA platform where users can buy, sell, or trade cryptocurrencies, broker, or custodian serving Russian clients would need a Bank of Russia licence and ongoing prudential/AMLRegulatory framework requiring financial institutions to detect and prevent money laundering, terrorist financing, and other illicit financial activities supervision once the law takes effect - and would simultaneously face EU sanctions if continuing those services to EU-adjacent counterparties. Cross-border treasury teams should treat Russia-facing crypto flows as heavily regulated and intermediated, with P2P channels likely to be progressively shut down by domestic banks and payment processors. Global firms should monitor Bank of Russia secondary regulations for capital, reserve, reporting, and walletA tool for storing, sending, and receiving cryptocurrencies-control requirements, which may be more restrictive than MiCAThe EU's comprehensive regulatory framework for crypto-assets, establishing harmonized rules for issuers and service providers across all 27 Member States or US-GENIUS-Act equivalents. Confidence is downgraded to Medium because the bill has not yet completed the second reading; amendments could materially change the text.
What Changed: OFAC Sanctions Cambodian Senator Kok An and Scam Center Network Defrauding Americans
HIGHRisk: Sanctions ComplianceChecking customers and transactions against government sanctions lists / Pig-Butchering Scam Typology | Affected: US-subject CASPsEntity providing crypto services under EU MiCA requiring authorization and regulatory compliance, stablecoinA cryptocurrency pegged to a stable asset, such as USD or gold issuers, OTC desks servicing Southeast Asia, correspondent banks with Cambodian exposure | Horizon: Immediate | Confidence: High (full SDN list and GL text reviewed)
Facts: On 23 April, OFAC issued a multi-part action titled "Counter Terrorism, Counter Narcotics, and Cyber-related Designations; Issuance of Cyber-related General License" comprising two parallel Treasury press releases: "Treasury Sanctions Global Illicit Drug Supply ChainA decentralized, digital ledger of transactions maintained across multiple computers Supporting the Sinaloa Cartel" and "Treasury Sanctions Cambodian Senator Kok An and Scam Center Network Defrauding Americans." The Cyber-related [CYBER4] designations target Cambodian Senator Kok An, associates Paung AIK, Raksmei RITHY, Hong LUO, and Aung Linn SAI, plus entities including Heng Feng Cambodia Bank PLC (SWIFTGlobal messaging network for international bank transfers/BIC HEFBKHPP), Anco Specialized Bank Ltd, multiple casino networks (Crown Resorts / Brilliancy Sihanoukville / K99 Group), hotels (Khemreah, Nan Tian International, Xi Hu, Fung Yuet Resort), real estate developers (Xiong Wei, Aurum, Heng Feng Group), and related construction and trading companies. Cyber-related General License 2 authorises narrow transactionsA transfer of value or data recorded on a blockchain, verified by network participants, and permanently added to the distributed ledger with Anco Water Supply Co. Ltd. limited to "the Treatment and Distribution of Drinking Water." Separately, the Counter Narcotics [ILLICIT-DRUGS-EO14059] designations target Sinaloa Cartel supply-chain entities in Mexico, Guatemala, and India.
Implications: The Cambodian designations are the crypto-relevant portion of this action. "Scam center network defrauding Americans" is OFAC language for pig-butchering fraud operations - a typology that overwhelmingly uses stablecoins (primarily USDTThe largest stablecoin by market cap, pegged 1:1 to the US Dollar and issued by Tether Limited on Tron) and crypto OTC channels to extract victim funds. US-subject exchanges, stablecoinA cryptocurrency pegged to a stable asset, such as USD or gold issuers, and custodians must immediately ingest the new Cambodian SDN entries (including the SWIFTGlobal messaging network for international bank transfers/BIC for Heng Feng Cambodia Bank PLC) into their screening systems. OTC desks servicing Southeast Asia should audit counterparty relationships with Cambodian banks, casinos, and real estate networks on the new list - these are known pig-butchering money-laundering vehicles. Correspondent banks with any Cambodian exposure must re-screen relationships against the expanded SDN list. The narrow water-supply GL is humanitarian and does not authorise financial or crypto-related transactionsA transfer of value or data recorded on a blockchain, verified by network participants, and permanently added to the distributed ledger with the named entities.
What Changed: ASIC Publishes 18-Month Implementation Roadmap for Digital Assets Framework Act
HIGHRisk: Licensing / Compliance Planning | Affected: Digital Asset Platforms (DAPs), Tokenised Custody Platforms (TCPs), crypto exchanges and custodians operating in Australia | Horizon: 18 months to Act commencement (9 April 2027) | Confidence: High
Facts: On 20 April, ASICSpecialized hardware designed for mining cryptocurrencies efficiently published its roadmap for Digital Assets Law Reform implementation. The Corporations Amendment (Digital Assets Framework) Act 2026 received Royal Assent on 8 April 2026 and commences on 9 April 2027. Under the Act, ASIC will license and supervise Digital Asset Platforms (DAPs) and Tokenised Custody Platforms (TCPs) under Australia's financial services licensing regime. The roadmap divides the 18-month period into three phases. Months 1-6: stakeholder roundtables (including through Fintech Liaison Meetings), establishment of an industry advisory group, and consultations on standards and guidance. The INFO 225 class no-action position expires in June 2026. Months 6-12: release of a new Regulatory Guide for DAPs and TCPs and issuance of regulatory instruments on asset-holding standards (section 912BE), transactional/settlement standards (section 912BF), and financial requirements. Months 12-18: license applications open; operators can lodge applications and operate under regulatory relief. ASIC will also update existing guidance documents RG 1 and RG 166, and intends the new guidance to be "principles-based, and additional guidance will only be provided where necessary."
Implications: Australia is now one of the few jurisdictions to publish a detailed sequencing plan between statutory enactment and platform licensing. Firms operating under the INFO 225 no-action position must plan for its June 2026 expiry and transition into the new regime. DAP and TCP operators should begin gap-analysis between current custody, settlement, and transactional arrangements and the forthcoming section 912BE/912BF standards, and join the industry advisory group or Fintech Liaison Meetings to shape those standards before they are finalised. Firms with Australian clients should use the 18-month window to restructure legal entities, build segregated custody infrastructure, and align governance with the DAP/TCP categorisation.
What Changed: Vietnam Advances Pilot Crypto-Asset Market Licensing Under Resolution 05/2025/NQ-CP
HIGHRisk: Licensing / Market Entry | Affected: Vietnam-facing crypto exchanges, custodians, tokenA digital asset built on an existing blockchain, often representing utility or value issuers; global platforms targeting Southeast Asia | Horizon: Active pilot window | Confidence: Medium (pilot covered in multi-jurisdictional legal coverage; Tier-1 SSC page not confirmed)
Facts: Per multi-source legal and government-media coverage reaching the intelligence feed on 20 April, Vietnam is advancing its pilot licensing regime for crypto-asset market operators. The regulatory architecture rests on three instruments: (i) the Law on Digital Technology Industry 2025, passed 14 June 2025 and in force from 1 January 2026; (ii) Government Resolution No. 05/2025/NQ-CP (September 2025), authorising a five-year pilot crypto-asset market; and (iii) Ministry of Finance Decision No. 96/QD-BTCThe first decentralized cryptocurrency, created in 2009 by Satoshi Nakamoto, operationalising the resolution with three new administrative procedures (licence issuance, adjustment, revocation) administered by the State Securities Commission (SSC). The Ministry of Finance began accepting licence applications from Vietnamese enterprises on 20 January 2026. This week's reporting reflects ongoing pilot activity and anticipated early licence issuances.
Implications: Vietnam has moved from grey-zone prohibition to a structured five-year pilot, with the Ministry of Finance (rather than the State Bank of Vietnam) as the primary licensing authority and the SSC administering the issuance, adjustment, and revocation procedures. For Vietnamese-incorporated firms, this is the first time a compliant pathway exists to offer crypto trading services domestically. Foreign platforms serving Vietnamese users should plan for restructuring - operating under the pilot will likely require a Vietnamese legal entity, an MoF-issued licence, and compliance with the Law on Digital Technology Industry 2025's digital-asset provisions. The five-year pilot window provides a unique policy laboratory in Southeast Asia; regulators in Thailand, Indonesia, and the Philippines are likely to observe pilot outcomes before finalising their own regimes.
What Changed: Bank of Italy Senior Deputy Governor Angelini on DLT and Stablecoins "Where Do We Stand?"
MEDIUMRisk: Central-Bank Policy Signal | Affected: DLT infrastructure providers, euro-area stablecoinA cryptocurrency pegged to a stable asset, such as USD or gold issuers, tokenised finance operators | Horizon: Ongoing central-bank posture | Confidence: High
Facts: On 20 April, Paolo Angelini, Senior Deputy Governor of the Bank of Italy, addressed the International Economic Symposium "The global economy at an inflection point: technology, policy, and the future of growth," co-hosted by the Bank of Italy and the National Association for Business Economics (NABE) in Rome. The speech, titled "DLT and stablecoins - where do we stand?", opens: "The publication of the BitcoinThe first decentralized cryptocurrency, created in 2009 by Satoshi Nakamoto protocol in October 2008 fueled the promise that blockchainA decentralized, digital ledger of transactions maintained across multiple computers and Distributed LedgerA record of financial transactions Technology (DLT) could do away with intermediation." Angelini argued the original vision has not materialised: "Fully automated financial services have not taken over the market; human governance and formal legal frameworks, compliance, risk management, are still necessary to foster trust." He characterised current adoption as "a gradual building of momentum, rather than a 'big bang'" and identified payments and settlement (including via stablecoins) as one of four main DLT use case categories.
Implications: Angelini's speech is a measured, cautiously optimistic reassessment of DLT in finance from a senior euro-area central banker on the same day as the BISInternational financial institution serving central banks and fostering monetary and financial cooperation General Manager speech in Tokyo. The two speeches frame the central-bank consensus: DLT has legitimate use cases, but only within human governance, formal legal frameworks, compliance, and risk management. For stablecoinA cryptocurrency pegged to a stable asset, such as USD or gold issuers and DLT infrastructure providers in the EU, this reinforces that the end of MiCAThe EU's comprehensive regulatory framework for crypto-assets, establishing harmonized rules for issuers and service providers across all 27 Member States's transitional period is the start of a more substantive supervisory conversation, not the end - and that central-bank expectations will anchorA defunct DeFi lending protocol on Terra that offered unsustainable 20% yields on UST deposits, concentrating 75% of all UST before the May 2022 collapse on traditional governance, risk management, and operational resilience, not the technology layer itself.
What Changed: BIS General Manager Calls Global Stablecoin Coordination "Critically Important"
MEDIUMRisk: Policy Divergence / Market Fragmentation | Affected: Cross-border stablecoinA cryptocurrency pegged to a stable asset, such as USD or gold issuers, international banks, payment service providers | Horizon: Shapes FSB/Basel agenda over 6-12 months | Confidence: High
Facts: On 20 April, BISInternational financial institution serving central banks and fostering monetary and financial cooperation General Manager Pablo Hernandez de Cos addressed a Bank of Japan seminar in Tokyo. He said policymakers "should continue to refine regulatory frameworks and strive to avoid global regulatory fragmentation," and warned that if stablecoins see widespread adoption in their current form, they would create "policy challenges in areas ranging from credit provision to monetary policy, with risks to financial integrity and regulatory evasion looming large." He called for "coordinated progress along two dimensions: addressing weaknesses in current stablecoinA cryptocurrency pegged to a stable asset, such as USD or gold arrangements, especially if they are to be used as a means of payment; and harnessing the benefits of tokenisation."
Implications: This is the most explicit public call from the BISInternational financial institution serving central banks and fostering monetary and financial cooperation in 2026 for coordinated stablecoinA cryptocurrency pegged to a stable asset, such as USD or gold regulation. It arrived just as MiCAThe EU's comprehensive regulatory framework for crypto-assets, establishing harmonized rules for issuers and service providers across all 27 Member States's transitional cliff (1 July 2026), the US GENIUS ActUS law (July 2025) requiring payment stablecoin issuers to be regulated entities with 1:1 reserve backing rulemaking cycle, and Asia-Pacific stablecoin regimes diverge in substance and sequencing. The speech signals that BIS is preparing to push harder on FSB and Basel work programmes during 2026. Global stablecoin issuers should expect convergent expectations on reserves, redemption rights, liquidityThe ease with which an asset can be bought or sold without affecting its price support, and cross-border data sharing even where local laws differ, and should calibrate policy-engagement strategies against the likely BIS/FSB baseline rather than the minimum set by any one jurisdiction.
What Changed: ECB Signs Digital Euro Payment Standards Agreements with Three Standard-Setting Bodies
MEDIUMRisk: CBDCDigital form of a nation's fiat currency issued and guaranteed by the central bank / Payment InfrastructureInfrastructure and networks that enable money transfer between parties | Affected: European payment service providers, merchants, walletA tool for storing, sending, and receiving cryptocurrencies providers, cross-border payment solutions | Horizon: Contingent on digital euroProposed CBDC issued by European Central Bank to complement cash and private payments Regulation co-legislator approval | Confidence: High
Facts: On 24 April, the ECB announced it had signed agreements with three European standard-setting organisations to support digital euroProposed CBDC issued by European Central Bank to complement cash and private payments payment processing using existing open technical standards: ECPC (CPACE standards for contactless tap-to-pay payments via near-field communication); nexo standards (specifications connecting merchant systems with payment service providerCompany processing electronic payments for merchants back-end systems); and Berlin Group (standards enabling alias-based payments, balance checks, and mobile device reconciliation). ECB Executive Board member Piero Cipollone said: "The open digital euro standards will provide a European free alternative to current proprietary standards, make it easier for new European providers to enter the market." Once EU co-legislators approve the digital euro Regulation, European payment solution providers can scale across borders; the approach creates a uniform user experience across the euro area while reducing dependence on proprietary international standards.
Implications: The standards-agreements step lowers the technical barrier to digital euroProposed CBDC issued by European Central Bank to complement cash and private payments adoption across the Eurosystem and positions the ECB to compete more directly with international card networks and proprietary stablecoinA cryptocurrency pegged to a stable asset, such as USD or gold rails. For PSPs already using ECPC/nexo/Berlin Group standards, integration into a future digital euro ecosystem will be materially easier. For stablecoin issuers serving euro-area users, this is a strategic signal: once the digital euro Regulation is adopted, the technical standards infrastructure is ready, which compresses the timeline from legislative passage to operational deployment. Firms with euro-denominated payment products should map their technical stacks against ECPC, nexo, and Berlin Group standards now to preserve interoperabilityThe ability of different blockchain networks to communicate and work together seamlessly options.
What Changed: SFC Joins Global Coalition Against Unlawful Financial Influencers
MEDIUMRisk: Financial Promotions Enforcement | Affected: Crypto influencers and promotion networks targeting Hong Kong retail investors | Horizon: Immediate | Confidence: High (SFC named as one of 17 FCA-coordinated regulators)
Facts: On 24 April, the SFC announced its participation in the FCA-led global coalition targeting unlawful financial influencers. The SFC was one of 17 regulators named in the FCA's coordinated week-of-action beginning 20 April, alongside counterparts from Australia, Brazil, Canada, Denmark, India, Ireland, New Zealand, Norway, Qatar, Singapore, the UAE, and others. The SFC's circular confirms its commitment to coordinated enforcement and information-sharing against social-media promoters operating without Hong Kong authorisation.
Implications: The SFC's participation brings Asia-Pacific enforcement into direct alignment with UK and EU-adjacent action on financial promotions. Crypto tokenA digital asset built on an existing blockchain, often representing utility or value issuers and exchanges running influencer campaigns targeting Hong Kong audiences should immediately audit promoter authorisation and cross-reference SFC licensing requirements. The pattern extends to Singapore (MAS) and Australia (ASICSpecialized hardware designed for mining cryptocurrencies efficiently) which are also named coalition members, creating a single compliance posture across major Asia-Pacific markets.
What Changed: CodeCoin Receives AFSA Pre-Application Approval for Stablecoin Issuance
MEDIUMRisk: Market Entry / First-of-Kind Licensing | Affected: Kazakhstan stablecoinA cryptocurrency pegged to a stable asset, such as USD or gold market, Central-Asian fiatTraditional government-issued currency, such as USD, EUR, or NIS-backed tokenA digital asset built on an existing blockchain, often representing utility or value issuers | Horizon: Pre-application stage; full licence pending | Confidence: Medium (based on company press release; AFSA direct confirmation not fetched at time of publication)
Facts: On 20 April, CodeCoin announced it had received pre-application approval from the Astana Financial Services Authority (AFSA) for stablecoinA cryptocurrency pegged to a stable asset, such as USD or gold issuance at the Astana International Financial Centre (AIFC). Pre-application approval is a preliminary step in the AFSA licensing pipeline that allows the applicant to progress to full licensing review. The announcement was distributed via PR Newswire and flagged by the MCMS intelligence pipeline's AFSA Google Alert feed.
Implications: Kazakhstan is positioning the AIFC as a Central Asian stablecoinA cryptocurrency pegged to a stable asset, such as USD or gold hub, using a common-law jurisdictional enclave with a dedicated FSA as its vehicle. The AFSA's progression from exchangeA platform where users can buy, sell, or trade cryptocurrencies licensing (Binance, Bybit historically) to stablecoin issuance licensing marks a maturation of the AIFC regulatory stack. For global stablecoin issuers considering Central Asian market entry, the AFSA pathway is now active; for regional competitors (UAE VARA, Bahrain CBB), CodeCoin sets a Central Asian reference point. The full licensing outcome and the AFSA's stablecoin rulebook text (reserve requirements, redemption, governance) remain to be confirmed.
Risk Impact Matrix
| Jur. | Development | Risk Category | Severity | Affected | Timeline |
|---|---|---|---|---|---|
| EU | EU 20th sanctions package - Russian crypto sector ban | Sanctions | Critical | EU-facing CASPs, stablecoin issuers, DeFi | Immediate |
| GLOBAL | BIS FSI Paper 27 on CASPs as financial intermediaries | Prudential / Supervisory Design | High | Multifunction crypto intermediaries globally | Feeds national rulemaking 12-24 months |
| UK | FCA first coordinated on-site P2P crypto enforcement | AML Enforcement | High | Unregistered P2P crypto traders in the UK | Immediate |
| UK | FCA 17-regulator global finfluencer week of action | Financial Promotions Enforcement | High | Crypto influencers and promotion networks globally | Immediate |
| US | Fed, OCC, FDIC issue SR 26-2 revised MRM guidance | Prudential / Model Governance | High | US banks > $30B with crypto, stablecoin, or AML models | 12-18 months |
| RU | State Duma first reading of crypto bill | Licensing / Russia Nexus | High | Russia-facing crypto flows, exchanges with RU users | 1 July 2026 target |
| US | OFAC sanctions Cambodian scam network (pig-butchering typology) | Sanctions Compliance / Fraud Typology | High | US-subject CASPs, OTC desks servicing SEA, correspondent banks | Immediate |
| AU | ASIC 18-month DAF Act implementation roadmap | Licensing / Compliance Planning | High | DAPs, TCPs, crypto exchanges in Australia | Act commences 9 April 2027 |
| VN | Vietnam pilot crypto-asset market licensing | Licensing / Market Entry | High | Vietnam-facing crypto exchanges, custodians | Active pilot window |
| GLOBAL | BIS GM de Cos speech on stablecoin coordination | Policy Divergence | Medium | Cross-border stablecoin issuers, international banks | Shapes FSB/Basel agenda 6-12 months |
| IT | Bank of Italy Angelini speech on DLT and stablecoins | Central-Bank Policy Signal | Medium | DLT infrastructure, euro-area stablecoin issuers | Ongoing |
| EU | ECB digital euro payment standards agreements | CBDC / Payment Infrastructure | Medium | European PSPs, merchants, wallet providers | Pending co-legislator approval |
| HK | SFC joins global finfluencer coalition | Financial Promotions Enforcement | Medium | Crypto influencers targeting HK retail investors | Immediate |
| KZ | CodeCoin AFSA pre-application approval for stablecoin | Market Entry / First-of-Kind Licensing | Medium | Kazakhstan stablecoin market, AIFC-seeking issuers | Pre-application stage |
Regulations move faster than headlines.
One weekly brief. Every development that matters. No noise.
Read by compliance and legal teams at Standard Chartered, Lloyds, Freshfields, and Loyens & Loeff.
Free. No spam. Unsubscribe anytime.
Cross-Signal Patterns
Pattern: The "Intermediary" Framing Is Now a Global Baseline
Linked Signals: BIS FSI Paper 27, ASIC DAF Act Roadmap, SR 26-2 Model Risk, Vietnam Pilot
What it means: Within a single week, the BIS Financial Stability Institute published the analytical case for treating multifunction cryptoasset intermediaries as bank-like entities; ASIC published the operational sequencing for licensing digital asset platforms as financial services providers; the US banking agencies revised the model-risk framework applying to banks onboarding crypto exposure; and Vietnam advanced a pilot licensing regime administered by the SSC under MoF. Read together, these describe a coherent supervisory architecture in which crypto platforms are financial intermediaries, not technology providers, and are subject to prudential, licensing, and model-risk oversight. Jurisdictions that have not closed the gap between VASP regimes and bank frameworks now have a template to do so.
Confidence: High
Pattern: Coordinated Enforcement Goes Cross-Border
Linked Signals: FCA P2P Crackdown, FCA 17-Regulator Finfluencer Action, SFC Coalition, OFAC Cambodian Scam Network, EU 20th Sanctions Package
What it means: Enforcement moved horizontally and vertically in the same week. Horizontally: the FCA led a 17-regulator week-of-action against finfluencers, the first operation of its kind at this scale. Vertically: the FCA moved from paper-based MLR registration checks to physical on-site inspection of eight London premises. In parallel, sanctions enforcement extended into DeFi (EU 20th package) and into the pig-butchering scam network economy (OFAC's Cambodian designations). The pattern is coordinated compliance pressure layered onto a single crypto industry: a promoter in Dubai now faces potential enforcement from three regulators simultaneously (FCA, DFSA, and SEBI if Indian retail viewers are reached), and a US-subject exchange processing Russia-facing flows faces EU sanctions, UK sanctions, OFAC exposures via Cambodian correspondent banks, and Russian licensing all at once.
Confidence: High
Pattern: Central-Bank Chorus on Stablecoin Fragmentation Meets MiCA Cliff and Digital Euro Rails
Linked Signals: BIS de Cos Tokyo Speech, Angelini Rome Speech, ECB Digital Euro Standards
What it means: On the same day (20 April), the BIS General Manager and a senior euro-area central banker delivered parallel speeches calling for coordinated stablecoin regulation and emphasising that DLT adoption requires traditional governance, compliance, and risk management. Four days later, the ECB signed digital euro standards agreements, positioning a regulated central-bank alternative to proprietary stablecoin rails. The combined message from the central-bank community: private stablecoin fragmentation is a policy risk; a coordinated response plus a credible CBDC alternative is the answer.
Confidence: High
Pattern: Russia Signal and Counter-Signal in the Same Week
Linked Signals: Russia Duma Crypto Bill, EU 20th Sanctions Package
What it means: Russia passed a domestic crypto framework allowing foreign-trade settlements via crypto the same week the EU imposed the most aggressive crypto sanctions package in its history, targeting exactly those foreign-trade settlement channels. For global firms with any Russia exposure, the compliance calculus has sharpened: the Russian framework creates a legal pathway for certain flows, while EU sanctions criminalise the same flows from the counterparty side. Firms now need to map counterparty relationships against both the Russian licensing regime (once enacted) and the EU 20th package's RUBx / digital rouble / DeFi prohibitions.
Confidence: High
Strategic Implications
1. Prudential framing of crypto platforms is no longer an emerging trend - it is the operating baseline.
The BISInternational financial institution serving central banks and fostering monetary and financial cooperation FSI paper, ASICSpecialized hardware designed for mining cryptocurrencies efficiently's implementation sequencing, SR 26-2's revalidation cycle, and Vietnam's MoF/SSC-administered pilot all converge on the same supervisory posture: crypto platforms are financial intermediaries subject to prudential, licensing, and model-risk oversight. Institutions still designing compliance around VASPEntity providing services related to virtual assets, subject to AML regulations/MSB minima should plan for transition to bank-grade expectations on a 12-24 month horizon. Legal-entity structure, capital planning, and governance committees should be revisited. [Traced to: BIS FSI Paper 27, ASIC DAF Act Roadmap, SR 26-2 Model Risk, Vietnam Pilot]
2. Sanctions and enforcement have gone genuinely multilateral.
The 17-regulator FCA-led finfluencer action, the EU 20th sanctions package extending into DeFiFinancial systems built on blockchain that operate without intermediaries like banks, and OFAC's Cambodian pig-butchering designations landing in the same week are not coincidental. Compliance programmes built for single-regulator relationships now need multi-regulator architecture: a tokenA digital asset built on an existing blockchain, often representing utility or value issuer with global marketing must assume simultaneous scrutiny from the FCA, SFC, ASICSpecialized hardware designed for mining cryptocurrencies efficiently, MAS, and others. A firm with Russia-nexus flows must screen against EU 20th package prohibitions and the upcoming Russian licensing regime simultaneously; a firm with any Southeast-Asia correspondent banking must ingest OFAC's new Cambodian SDN entries immediately. [Traced to: EU 20th Sanctions Package, FCA P2P Crackdown, FCA Finfluencer Action, SFC Coalition, OFAC Cambodian Scam Network]
3. The UK has closed the gap between rule-making and ground-level enforcement.
Paper rules have always risked being paper: crypto firms could register under MLR 2017 and operate around authorised boundaries knowing supervisory capacity was constrained. The FCA's first on-site operation, combined with CP26/13 one week prior and a 17-regulator coordinated campaign the same week, signals that regulatory ambition and enforcement capacity are now aligned. Firms operating under MLR-only status, reverse-solicitation theories, or ambiguous UK touchpoints should reassess before the transitional period set out in CP26/13 closes. [Traced to: FCA P2P Crackdown, FCA Finfluencer Action]
4. The central-bank community is using 2026 to re-anchorA defunct DeFi lending protocol on Terra that offered unsustainable 20% yields on UST deposits, concentrating 75% of all UST before the May 2022 collapse stablecoinA cryptocurrency pegged to a stable asset, such as USD or gold policy.
BISInternational financial institution serving central banks and fostering monetary and financial cooperation de Cos, Bank of Italy Angelini, and the ECB digital euroProposed CBDC issued by European Central Bank to complement cash and private payments standards announcements are three distinct messages in the same week, delivering the same theme: global coordination on stablecoinA cryptocurrency pegged to a stable asset, such as USD or gold rules is both urgent and inevitable, and the Eurosystem intends to offer a credible CBDCDigital form of a nation's fiat currency issued and guaranteed by the central bank alternative. Stablecoin issuers should expect the FSB and Basel work programmes to accelerate in H2 2026 with convergent reserve, governance, and cross-border data expectations. [Traced to: BIS de Cos Speech, Angelini Speech, ECB Digital Euro Standards]
Sources
- Council of the EU: Russia's war of aggression against Ukraine - 20th round of stern EU sanctions hits energy, military, trade, and financial services including crypto
- European Commission: EU adopts 20th package of sanctions against Russia
- BIS FSI Occasional Paper 27: Cryptoasset service providers as financial intermediaries - risks and policy approaches
- FCA press release: FCA leads first crackdown on illegal crypto trading (22 April 2026)
- FCA press release: FCA spearheads global action to stop illegal finfluencers (20 April 2026)
- Federal Reserve SR 26-2: Revised Guidance on Model Risk Management
- OFAC Recent Actions: Counter Terrorism, Counter Narcotics, and Cyber-related Designations; Issuance of Cyber-related General License (23 April 2026) - including Treasury press release "Treasury Sanctions Cambodian Senator Kok An and Scam Center Network Defrauding Americans"
- ASIC: Roadmap for digital assets law reform implementation
- Vietnam Ministry of Finance / SSC: Pilot crypto-asset market licensing via Decision 96/QD-BTC
- BIS: Pablo Hernandez de Cos - speech at Bank of Japan seminar, Tokyo (20 April 2026)
- BIS Review: Paolo Angelini - DLT and stablecoins - where do we stand? (20 April 2026)
- ECB press release: ECB signs digital euro payment standards agreements (24 April 2026)
- SFC Hong Kong: SFC joins global regulatory effort against unlicensed financial influencers
- Russia State Duma: "On Digital Currency and Digital Rights" bill first reading (22 April 2026) - widely reported via crypto-news outlets, pending Tier-1 / major-wire confirmation
- CodeCoin AFSA pre-application approval (PR Newswire)
- MCMS W09-2026 Regulatory Brief (EU 20th sanctions proposal stage)
- MCMS W16-2026 Regulatory Brief (FCA CP26/13 cryptoasset perimeter guidance)
If you found this useful, please share it.
Questions or feedback? Contact us
MCMS Brief • Classification: Public • Sector: Digital Assets • Region: Global
Disclaimer: This content is for educational and informational purposes only. It is NOT financial, investment, or legal advice. Cryptocurrency investments carry significant risk. Always consult qualified professionals before making any investment decisions. Make Crypto Make Sense assumes no liability for any financial losses resulting from the use of this information. Full Terms