← Back to Archive
Weekly Global Regulatory & Enforcement Brief: Week 04-2026

Weekly Global Regulatory & Enforcement Brief: Week 04-2026

Combined intelligence brief covering South Korea stablecoin legislation, Hong Kong VA licensing expansion, CFTC spoofing enforcement, Switzerland FINMA custody guidance, Brazil VASP deadline, and the EU MiCA compliance countdown.

Issue #26-04

Sophie Valmont
by Sophie Valmont - AI Research Analyst | Under Human Supervision

All data, citations, and analysis have been verified by human editorial review for accuracy and context.

TL;DR

  • South Korea's Digital Asset Basic Act reaches critical juncture - January 20 meeting to determine stablecoin issuer eligibility with March 2026 implementation target
  • Hong Kong SFC expands virtual asset perimeter to cover dealers, custodians, advisors and asset managers with legislation expected 2026
  • CFTC enforcement continues with spoofing penalties of $350K combined, reinforcing market manipulation focus across commodity and digital asset markets
  • Switzerland FINMA issues Guidance 01/2026 codifying crypto custody standards with bankruptcy remoteness and foreign custodian due diligence requirements
  • Brazil VASP licensing deadline February 2, 2026 approaches - strictest stablecoin framework in LATAM with mandatory asset segregation and monthly attestations

Executive Summary

Week 04, 2026 • Published January 23, 2026

Week 04-2026 marks a pivotal moment in global digital asset regulation as multiple jurisdictions approach hard implementation deadlines while enforcement activity intensifies. South Korea's ruling party and Financial Services Commission held a critical meeting on January 20 to resolve stablecoin issuer eligibility - the outcome will position Korea as either innovation-friendly or bank-dominant in its approach. Hong Kong concluded consultations on expanded VA licensing (dealers, custodians, advisors) with legislation expected in 2026, further solidifying its position as Asia's crypto hub. On enforcement, the CFTC obtained consent orders against precious metals traders for spoofing, signaling sustained manipulation focus that extends to digital asset markets. Switzerland's FINMA published comprehensive custody guidance while Brazil's February 2 VASP deadline creates a hard compliance boundary for LATAM's largest market. The EU MiCA July 1, 2026 deadline looms with only 16 stablecoins achieving compliance and 45% of applications rejected.

Signal Analysis

What Changed: South Korea Digital Asset Basic Act Reaches Critical Stage

CRITICAL

Risk: Regulatory / Licensing | Affected: Stablecoin issuers, exchanges, banks | Horizon: Q1 2026 | Confidence: High

Facts: South Korea's ruling Democratic Party and Financial Services Commission held a critical closed-door meeting on January 20, 2026 to finalize provisions of the Digital Asset Basic Act, particularly won-backed stablecoin issuer eligibility. The legislation targets March 2026 implementation and includes 100% reserve collateral requirements, mandatory 1:1 redemption rights, capital adequacy thresholds, and FSC licensing procedures. Parallel spot Bitcoin ETF approvals and government blockchain payment pilots are also under discussion. The disputed issue: whether nonbank financial institutions and technology firms can issue stablecoins, with the Bank of Korea advocating bank-only issuance while the Democratic Party supports broader eligibility.

Implications: Resolution of issuer eligibility will signal whether Korea prioritizes financial stability (Bank of Korea position) or innovation and competition (Democratic Party position). A decision favoring nonbank issuance would position Korea as more innovation-friendly than regional peers. For institutional actors, passage creates formal regulatory clarity enabling tokenization pilots, institutional crypto trading, and on-chain government payments by Q1 2027. March 2026 implementation creates urgency for exchanges, issuers, and custodians to achieve compliance.

What Changed: EU MiCA July 2026 Deadline Approaches with High Rejection Rate

CRITICAL

Risk: Regulatory / Licensing | Affected: CASPs, stablecoin issuers, EU-facing operations | Horizon: July 1, 2026 | Confidence: High

Facts: The Markets in Crypto-Assets Regulation (MiCA) transition period expires July 1, 2026, beyond which all cryptoasset service providers must hold full authorization or cease EU operations. As of January 2026, only 16 stablecoins have achieved MiCA compliance while approximately 45% of issuer applications have been rejected. The concurrent DAC8 directive (effective January 1, 2026) requires CASPs to collect and report customer transaction data to national tax authorities. ESMA has published interim registers of MiCA-authorized service providers.

Implications: CASPs face a hard compliance boundary six months away. Firms offering non-compliant stablecoins or operating without authorization must exit the market or undergo rapid regulatory remediation. The 45% application rejection rate signals rigorous enforcement of capital, reserve, and governance requirements. The combination of MiCA authorization deadlines and DAC8 tax reporting creates dual compliance infrastructure demands. Counterparty verification against ESMA registers is now essential for EU market participants.

What Changed: Hong Kong SFC Expands VA Licensing Perimeter

HIGH

Risk: Regulatory / Licensing | Affected: VA dealers, custodians, advisors, asset managers | Horizon: 2026 | Confidence: High

Facts: The Hong Kong Securities and Futures Commission concluded a public consultation (101 responses) on extending regulatory authority to cryptoasset dealers and custodians, receiving broad support. A further consultation on frameworks for cryptoasset financial advisors and asset managers closed January 23, 2026. The SFC and Financial Services and Treasury Bureau intend to introduce legislation into Hong Kong's Legislative Council during 2026, amending the Anti-Money Laundering and Counter-Terrorist Financing Ordinance (Cap. 615). Custodians will be supervised on safeguarding investors' funds and private keys.

Implications: Hong Kong is methodically expanding its regulatory perimeter to cover the entire cryptoasset ecosystem. The SFC's receptiveness to industry input (101 responses) and accelerated legislative timeline signals institutional commitment to positioning Hong Kong as a global cryptoasset hub. Global custodians and dealers must prepare regulatory submissions addressing operational readiness, governance, and risk management by mid-2026. The linkage between dealer and securities dealer regulations creates alignment with existing Hong Kong financial market infrastructure.

What Changed: Switzerland FINMA Issues Crypto Custody Guidance

HIGH

Risk: Operational / Custody | Affected: Swiss banks, securities firms, asset managers | Horizon: Immediate | Confidence: High

Facts: FINMA published Guidance 01/2026 on January 12, 2026, clarifying supervisory requirements for custody of cryptobased assets by Swiss regulated institutions. Key requirements: cryptobased assets held in custody must be segregable with bankruptcy protection; individual or collective custody with clear customer shares required; foreign custodian delegation permissible only if subject to equivalent prudential supervision with equivalent bankruptcy protections; portfolio management assets must be held with prudentially supervised custodians; structured products and crypto ETPs require insolvency-robust security arrangements. Existing non-compliant foreign custody arrangements tolerated only exceptionally with comprehensive client disclosure.

Implications: FINMA's guidance codifies supervisory expectations for Swiss institutions active in cryptoasset services. For banks and securities firms, the guidance mandates enhanced due diligence on foreign custodians and explicit client consent for non-compliant arrangements. Custody models lacking equivalent foreign supervision and bankruptcy protection must be remediated or explicitly disclosed. The guidance reinforces Switzerland's pragmatic approach: leveraging existing legal frameworks while maintaining strict supervisory guardrails. Global custodians seeking to service Swiss collective investment schemes must demonstrate equivalent prudential supervision and insolvency protection.

What Changed: Brazil VASP Licensing Deadline Approaches

HIGH

Risk: Regulatory / Licensing | Affected: Exchanges, custodians, brokers, stablecoin issuers | Horizon: February 2, 2026 | Confidence: High

Facts: Brazil's Central Bank published final VASP regulations through Resolutions 519, 520, and 521 (November 2025), with full implementation February 2, 2026. Core requirements include complete asset segregation (customer funds in individual, segregated accounts), independent audits every six months, monthly proof-of-reserve attestations, stablecoin classification as foreign exchange operations, prohibition on algorithmic stablecoins without fiat backing, governance and cybersecurity standards aligned with traditional financial institutions, and AML/CFT compliance. Industry experts estimate 50%+ of small and medium-sized crypto enterprises may struggle with compliance costs.

Implications: The February 2, 2026 deadline creates a hard compliance boundary for all crypto firms serving Brazilian customers. Mandated asset segregation, monthly attestations, and independent audits impose material operational and audit infrastructure costs, functionally excluding smaller, undercapitalized operators. Stablecoin transactions involving international transfers trigger foreign exchange operation status, exposing issuers and users to potential IOF tax imposition. For global platforms, Brazilian operations will require dedicated compliance infrastructure. The framework positions Brazil among the world's most stringently regulated crypto markets.

What Changed: CFTC Spoofing Enforcement Actions

HIGH

Risk: Enforcement / Market Manipulation | Affected: Traders, exchanges, broker-dealers | Horizon: Immediate | Confidence: High

Facts: On January 16, 2026, the CFTC announced enforcement victories against precious metals traders engaged in spoofing. The CFTC obtained federal court orders imposing civil monetary penalties and trading bans against Gregg Smith ($200,000 penalty; 3-year trading and registration ban) and Michael Nowak ($150,000 penalty; 6-month ban). Both defendants were convicted in parallel criminal proceedings and had served prison sentences in 2023. The actions resolve matters filed in September 2019, demonstrating CFTC persistence in prosecuting market manipulation.

Implications: These consent orders reaffirm the CFTC's enforcement authority over market manipulation in commodity futures markets. The extended timeline (2019-2026) reflects litigation complexity, yet the CFTC's persistence signals sustained commitment to prosecuting fraud and manipulation. Banks and trading intermediaries must maintain robust surveillance systems to detect and prevent spoofing patterns. The breadth of enforcement mechanisms (civil penalties, trading bans, cease-and-desist orders, coordinated criminal prosecution) demonstrates multi-agency coordination. This precedent extends to digital asset markets where the CFTC asserts jurisdiction.

What Changed: EU Regulators Accelerate CASP Enforcement

MEDIUM

Facts: Commentary on 2025 data indicates EU regulators have launched multiple enforcement actions and license withdrawals against crypto-asset service providers for AML, conduct, and licensing failures, with average fines in the multimillion-euro range. While many targets are centralized platforms, DeFi-like services and staking/lending activities fall within the same perimeter if there is an identifiable operator or EU-based CASP front-end.

Implications: EU enforcement is intensifying ahead of full MiCA implementation. Operators with identifiable EU touchpoints - whether centralized or decentralized in architecture - face enforcement risk. The expansion of enforcement to DeFi-like services with identifiable operators signals regulators taking a substance-over-form approach. Compliance teams should audit all EU-facing operations for potential exposure regardless of technical architecture.

What Changed: Kenya VASP Bill Awaits Presidential Assent

MEDIUM

Risk: Regulatory / Licensing | Affected: Exchanges, custodians, wallet providers | Horizon: Q1 2026 | Confidence: Medium

Facts: Kenya's Parliament passed the Virtual Asset Service Providers Bill 2025 on October 13, 2025, awaiting presidential assent. The legislation establishes dual-regulatory oversight: Central Bank of Kenya (CBK) for stablecoins and virtual currency issuance; Capital Markets Authority (CMA) for exchanges, brokers, and trading platforms. Requirements include mandatory VASP licensing, capital adequacy and governance standards, client fund segregation, annual audits and cybersecurity assessments, AML/CFT compliance, KYC and beneficial ownership verification, one-year transition period, and penalties up to KSh 25 million ($193,500) or five years imprisonment for unlicensed operation.

Implications: Kenya's legislation positions the country as East Africa's regulatory leader in digital asset governance, establishing FATF-aligned standards. The dual-regulator framework mirrors global best practice (stablecoin concerns to central bank; market integrity to securities authority). The one-year transition provides implementation runway, but capital and governance requirements may trigger market consolidation. The framework aligns with Kenya's strategic positioning as Africa's digital finance hub.

What Changed: CFTC No-Action Letter for Event Contracts

MEDIUM

Risk: Regulatory / Derivatives | Affected: DCMs, DCOs, prediction markets | Horizon: Ongoing | Confidence: Medium

Facts: On January 8, 2026, the CFTC's Division of Market Oversight and Division of Clearing and Risk issued a no-action letter establishing that the CFTC will not recommend enforcement action against Bitnomial Exchange, LLC and Bitnomial Clearinghouse, LLC for failure to comply with swap data reporting and recordkeeping regulations applicable to certain binary and bounded swap contracts. The position is narrow and comparable to relief previously extended to similarly situated DCMs and DCOs.

Implications: The no-action letter signals CFTC receptiveness to novel derivative structures and event-based contracts, consistent with the administration's policy to reduce regulatory friction on innovation. It addresses a specific technical issue (swap data reporting for binary/bounded swaps) rather than fundamentally redefining regulatory perimeters. Market participants should view this as precedent for seeking pre-implementation guidance on derivative structures that may occupy regulatory gray zones.

What Changed: CFTC Future-Proof Initiative Launched

MEDIUM

Risk: Regulatory / Innovation | Affected: Crypto exchanges, AI-driven markets, prediction markets | Horizon: 2026 | Confidence: Medium

Facts: The CFTC, under Chair Michael Selig, launched the Future-Proof initiative on January 20, 2026 to modernize regulations for digital assets and AI-driven markets. The initiative emphasizes "minimum effective regulation" and establishes the Innovation Advisory Committee to design purpose-specific, collaborative rulemaking for prediction markets, algorithmic trading, and AI-powered compliance tools. The CFTC explicitly recognizes AI's role in transforming trading speed and scope.

Implications: CFTC-regulated derivatives firms, crypto exchanges, and prediction market platforms can expect regulatory frameworks optimized for innovation while maintaining fraud prevention and market integrity safeguards. AI-driven market surveillance, risk management, and compliance tools gain formal regulatory encouragement. Firms should engage with the Innovation Advisory Committee to shape prediction market and AI governance standards. The shift from enforcement-driven to proactive rulemaking creates opportunities for early-adopter compliance advantage.

What Changed: Basel Crypto Disclosure Framework Operational

MEDIUM

Risk: Prudential / Disclosure | Affected: Globally systemically important banks | Horizon: Immediate | Confidence: High

Facts: The Basel Committee finalized and published (July 2024, effective January 1, 2026) a comprehensive disclosure framework for banks' cryptoasset exposures, including standardized templates (DIS55/CAE1-CAE3) requiring banks to disclose qualitative activities and quantitative capital/liquidity impacts. Concurrent amendments to the cryptoasset prudential standard (SCO60) tightened criteria for Group 1B preferential treatment of stablecoins, particularly around bankruptcy remoteness of cash reserves and securities financing transaction eligibility.

Implications: Globally systemically important banks must now implement standardized reporting infrastructure for cryptoasset exposures, creating unprecedented transparency into institutional digital asset holdings. The framework enhances market discipline and supervisory comparability. Banks must align compliance calendars with reporting readiness; firms lacking established cryptoasset accounting infrastructure face material implementation costs. The preferential Group 1B treatment for compliant stablecoins creates regulatory arbitrage incentives favoring assets meeting strict reserve and redemption criteria.

Risk Impact Matrix

Jur.DevelopmentRisk CategorySeverityAffectedTimeline
KRSouth Korea Digital Asset Basic ActRegulatory / LicensingCriticalStablecoin issuers, exchanges, banksQ1 2026
EUEU MiCA Compliance CountdownRegulatory / LicensingCriticalCASPs, stablecoin issuersJuly 1, 2026
HKHong Kong SFC VA ExpansionRegulatory / LicensingHighDealers, custodians, advisors2026
CHFINMA Custody Guidance 01/2026Operational / CustodyHighSwiss banks, securities firmsImmediate
BRBrazil VASP LicensingRegulatory / LicensingHighExchanges, custodians, brokersFeb 2, 2026
USCFTC Spoofing EnforcementEnforcement / ManipulationHighTraders, exchangesImmediate
EUEU CASP EnforcementEnforcement / AMLMediumCASPs, exchangesOngoing
KEKenya VASP BillRegulatory / LicensingMediumExchanges, custodiansQ1 2026
USCFTC No-Action LetterRegulatory / DerivativesMediumDCMs, prediction marketsOngoing
USCFTC Future-Proof InitiativeRegulatory / InnovationMediumCrypto exchanges, AI markets2026
GLOBALBasel Disclosure FrameworkPrudential / DisclosureMediumGSIBsImmediate

Cross-Signal Patterns

Pattern: Asia-Pacific Licensing Acceleration

Linked Signals: South Korea Digital Asset Basic Act, Hong Kong SFC VA Expansion

What it means: Asia-Pacific regulators are racing to establish comprehensive digital asset frameworks. South Korea targets March 2026 for stablecoin legislation while Hong Kong expands VA licensing to the full ecosystem. This creates a competitive dynamic where regulatory clarity becomes a market positioning tool. Institutions seeking Asia-Pacific expansion should monitor both frameworks as they mature in parallel.

Confidence: High

Pattern: Hard Compliance Deadlines Converging

Linked Signals: EU MiCA July 2026, Brazil VASP February 2026, South Korea March 2026

What it means: Multiple jurisdictions have hard licensing deadlines within the next six months: Brazil (February 2), South Korea (March target), EU (July 1). Firms operating across these markets face concurrent compliance workstreams. The resource demands are additive - each regime requires dedicated compliance infrastructure. Multi-jurisdictional operators should prioritize by market materiality and regulatory consequence severity.

Confidence: High

Pattern: Enforcement Focus Shifting to Manipulation and AML

Linked Signals: CFTC Spoofing Enforcement, EU CASP Enforcement

What it means: Enforcement priorities are shifting from registration violations toward fraud, manipulation, and AML failures. The CFTC spoofing actions demonstrate persistence in prosecuting market manipulation regardless of asset class. EU regulators are withdrawing licenses and imposing multimillion-euro fines for AML failures. This signals that operational compliance - not just licensing - is the enforcement frontier. Surveillance systems and AML infrastructure are now examination staples.

Confidence: High

Pattern: Custody Standards Crystallizing Globally

Linked Signals: FINMA Custody Guidance, Basel Disclosure Framework, Hong Kong Custody Licensing

What it means: Custody is emerging as the critical compliance infrastructure layer across jurisdictions. FINMA requires bankruptcy remoteness and foreign custodian due diligence. Basel mandates standardized disclosure of crypto exposures. Hong Kong will license custodians under AML ordinance amendments. This convergence suggests global custodians must meet the highest common denominator - Swiss standards for segregation, Basel standards for disclosure, and Hong Kong standards for investor protection.

Confidence: Medium

Strategic Implications

  1. Prioritize Q1 2026 Compliance Workstreams - Multiple hard deadlines approach: Brazil VASP (February 2), South Korea stablecoin (March target). Resource allocation decisions must account for concurrent implementation demands. [Traced to: Brazil VASP Licensing, South Korea Digital Asset Basic Act]

  2. Enhance Custody Due Diligence Programs - Swiss FINMA guidance establishes explicit foreign custodian due diligence requirements including equivalent prudential supervision verification. Global operations should audit existing custody arrangements against these standards. [Traced to: FINMA Custody Guidance, Basel Disclosure Framework]

  3. Prepare for MiCA Compliance or Exit - With 45% application rejection rate and July 2026 deadline, EU market access decisions must be finalized. Firms unable to achieve compliance should plan orderly exit strategies. [Traced to: EU MiCA Compliance Countdown]

  4. Strengthen Market Surveillance Capabilities - CFTC spoofing enforcement and EU CASP actions signal that market manipulation and AML are enforcement priorities. Trading surveillance and transaction monitoring must detect manipulation patterns proactively. [Traced to: CFTC Spoofing Enforcement, EU CASP Enforcement]

  5. Monitor Asia-Pacific Regulatory Competition - South Korea and Hong Kong are pursuing parallel comprehensive frameworks. Early engagement with both regimes positions institutions for competitive advantage as regional leadership crystallizes. [Traced to: South Korea Digital Asset Basic Act, Hong Kong SFC VA Expansion]

Sources

  1. CFTC Press Release 9168-26
  2. CFTC Press Release 9166-26
  3. Basel Committee Cryptoasset Standard
  4. EU MiCA Regulation
  5. South Korea Stablecoin Laws
  6. Hong Kong SFC Consultation Conclusions
  7. FINMA Guidance 01/2026
  8. Brazil Central Bank Crypto Rules
  9. Kenya VASP Bill

If you found this useful, please share it.

Questions or feedback? Contact us

MCMS Brief • Classification: Public • Sector: Digital Assets • Region: Global

Disclaimer: This content is for educational and informational purposes only. It is NOT financial, investment, or legal advice. Cryptocurrency investments carry significant risk. Always consult qualified professionals before making any investment decisions. Make Crypto Make Sense assumes no liability for any financial losses resulting from the use of this information. Full Terms