CASP

  • The EU AML Package: The Countdown to 10 July 2027

    On 17 September 2026 the Czech Financial Analytical Office (Finanční analytický úřad, or FAÚ) opened a guidance series for the firms it supervises, titled the AML package step by step. Its first instalment is narrow and practical: which legal texts will govern anti-money-laundering and counter-terrorist-financing work from 10 July 2027. That date is the pivot…

  • EU 21st Sanctions Package: What Screening Desks Must Update

    On 23 July 2026 the Council adopted the EU’s 21st sanctions package. The package-wide headline was 218 listings: 48 individuals and 170 entities. The Russia asset-freeze additions were made by Council Implementing Regulation (EU) 2026/1843, which added 48 persons and 168 entities to Annex I of Regulation (EU) No 269/2014 and entered into force on…

  • CARF Reporting in Luxembourg: DAC8 Crypto Filing by 30 June

    CARF reporting in Luxembourg starts with the data a crypto-asset platform is already generating in 2026. The Law of 27 March 2026 (Mémorial A No. 144), which transposes Directive (EU) 2023/2226 (DAC8) and brings the OECD Crypto-Asset Reporting Framework into Luxembourg tax law, makes the calendar year 2026 the first reporting period. Reporting crypto-asset service…

  • CSSF Prudential Reporting for PIs, EMIs and CASPs: The Move to eDesk

    From 1 April 2027, a Luxembourg payment institution or electronic money institution still using the current Excel-based reporting process, or a crypto-asset service provider authorised under Article 63 of MiCAR, must submit the reports covered by the new CSSF prudential reporting framework through eDesk; the previous reporting process for those reports will be discontinued. On…

  • Japan FSA Crypto Cybersecurity Report: What CASPs Must Map Now

    The Deloitte Tohmatsu LLC research report is dated 30 June 2026, and the FSA added it to its public research page on 23 July 2026 under the title “Cybersecurity Issues and Countermeasures in Crypto-Asset-Related Businesses.” It sits under the FSA’s Blockchain Governance Initiative Network (BGIN) research track and follows the JFSA’s April 2026 Policy for…

  • FATF Travel Rule Implementation: The Enforcement Gap

    On 16 July 2026 the Financial Action Task Force published its seventh targeted update on how countries are implementing the FATF standards for virtual assets and virtual asset service providers. The headline finding is that implementation remains uneven. Of the 109 jurisdictions answering the Travel Rule legislation question, 91, or 83 percent, reported legislation in…

  • ESMA CAFI Guidelines: When a Crypto-Asset Is a Financial Instrument

    On 17 December 2024 the European Securities and Markets Authority published its Final Report and, in Annex III, the Guidelines on the conditions and criteria for the qualification of crypto-assets as financial instruments, reference ESMA75453128700-1323. That document, often shortened to the CAFI Guidelines, addresses whether a crypto-asset qualifies as a financial instrument and is therefore…

  • ESMA July 2026 Q&As: ESG Ratings, MiCA and Consolidated Tape

    On 10 July 2026 ESMA announced thirteen Q&A repository items across the EU ESG Ratings Regulation, the Markets in Crypto-Assets Regulation and MiFIR secondary markets. All thirteen items carry published answers. The individual records also show that several answers pre-date 10 July 2026. None of the thirteen published answers creates a new reporting template or…

  • CASP Digital Operational Resilience: ESMA’s Custody CSA

    On 8 July 2026 the European Securities and Markets Authority launched a Common Supervisory Action on crypto-asset service providers, aimed squarely at one activity: custody. The exercise assesses the maturity of CASP digital operational resilience frameworks for custody services, and national competent authorities will run it on a risk-based sample of authorised CASPs from the…

  • FCA Cryptoasset Regime: What UK Crypto Firms Must Do Before the Authorisation Gateway Closes

    A firm running a UK crypto exchange or custody desk has, until now, operated on a Money Laundering Regulations registration, a light-touch anti-money-laundering permission and little else. On 30 June 2026 that arrangement stopped being enough. The FCA published the final rulebook for the FCA cryptoasset regime, and the rulebook treats an existing registration as…