The Deloitte Tohmatsu LLC research report is dated 30 June 2026, and the FSA added it to its public research page on 23 July 2026 under the title “Cybersecurity Issues and Countermeasures in Crypto-Asset-Related Businesses.” It sits under the FSA’s Blockchain Governance Initiative Network (BGIN) research track and follows the JFSA’s April 2026 Policy for…
On 16 July 2026 the Financial Action Task Force published its seventh targeted update on how countries are implementing the FATF standards for virtual assets and virtual asset service providers. The headline finding is that implementation remains uneven. Of the 109 jurisdictions answering the Travel Rule legislation question, 91, or 83 percent, reported legislation in…
On 17 December 2024 the European Securities and Markets Authority published its Final Report and, in Annex III, the Guidelines on the conditions and criteria for the qualification of crypto-assets as financial instruments, reference ESMA75453128700-1323. That document, often shortened to the CAFI Guidelines, addresses whether a crypto-asset qualifies as a financial instrument and is therefore…
On 10 July 2026 ESMA announced thirteen Q&A repository items across the EU ESG Ratings Regulation, the Markets in Crypto-Assets Regulation and MiFIR secondary markets. All thirteen items carry published answers. The individual records also show that several answers pre-date 10 July 2026. None of the thirteen published answers creates a new reporting template or…
On 8 July 2026 the European Securities and Markets Authority launched a Common Supervisory Action on crypto-asset service providers, aimed squarely at one activity: custody. The exercise assesses the maturity of CASP digital operational resilience frameworks for custody services, and national competent authorities will run it on a risk-based sample of authorised CASPs from the…
A firm running a UK crypto exchange or custody desk has, until now, operated on a Money Laundering Regulations registration, a light-touch anti-money-laundering permission and little else. On 30 June 2026 that arrangement stopped being enough. The FCA published the final rulebook for the FCA cryptoasset regime, and the rulebook treats an existing registration as…
A cross-border payment is held due to incomplete beneficiary information. The originator name is present, the amount is present, but the beneficiary field is a single block of free text that the receiving institution’s screening engine cannot parse into a name, a country and a town. The transfer is held, a customer complains, and an…
MiCA CASP wind-down becomes the immediate operating question where a crypto-asset service provider reaches the end of its applicable transitional period, and in all cases 1 July 2026, without a MiCA authorisation. The provider cannot keep trading. It cannot onboard. In most cases it cannot even continue holding client crypto-assets except for the short window…
When a supervisor publishes its prioritised risks for the year, it is telling you where its inspectors will look first. The FI 2026 AML priorities are exactly that. Finansinspektionen (FI), the Swedish financial supervisory authority, set them out on 18 June 2026 in its report on prioritised risks related to money laundering, terrorism financing and…
Put a financial product on a blockchain and the hardest question is which rulebook the token sits under, not how the token works. Get the MiCAR perimeter wrong and a reporting team builds the wrong control set around the wrong instrument: white-paper notifications and crypto-asset service provider records where a prospectus, and potentially MiFID/MiFIR controls…