On 7 October 2026 the Authority for Anti-Money Laundering and Countering the Financing of Terrorism (AMLA) published its response to the European Commission’s targeted consultation on the review of Regulation (EU) 2023/1114 on markets in crypto-assets (MiCA). The AMLA MiCA review paper is dated 30 September 2026, the day the consultation closed, and reads MiCA…
ESMA’s response to the European Commission’s targeted consultation on the review of Regulation (EU) 2023/1114 on markets in crypto-assets (MiCA), reference ESMA75-113276571-1721, is dated 30 September 2026, the day the consultation closed. The ESMA MiCA review response is written as a thematic policy paper, and its asks reach the processes a crypto-asset service provider (CASP)…
On 24 September 2026 the European Banking Authority published its response to the European Commission’s targeted consultation on the MiCA review, an exercise feeding into the review framework under Article 140 of Regulation (EU) 2023/1114. The EBA asks the Commission to prioritise five things: a dedicated regime for third-country multi-issuer stablecoin schemes, a fresh look…
On 18 September 2026 the European Banking Authority published EBA/GL/2026/09, its final guidelines on the sound management of third-party risk relating to non-ICT services. The EBA third-party risk guidelines widen the governed perimeter beyond outsourcing, which remains a subset, to non-ICT third-party arrangements within the Guidelines’ defined scope, with particular focus on arrangements supporting critical…
From 1 April 2027, a Luxembourg payment institution or electronic money institution still using the current Excel-based reporting process, or a crypto-asset service provider authorised under Article 63 of MiCAR, must submit the reports covered by the new CSSF prudential reporting framework through eDesk; the previous reporting process for those reports will be discontinued. On…
On 19 August 2026 the Eurosystem named 61 financial market stakeholders and public sector institutions to the Appia contact group, the standing forum that will now shape how central bank money settles tokenised assets in Europe. The seats were filled from a call for expressions of interest issued on 1 June 2026, and the group…
The Deloitte Tohmatsu LLC research report is dated 30 June 2026, and the FSA added it to its public research page on 23 July 2026 under the title “Cybersecurity Issues and Countermeasures in Crypto-Asset-Related Businesses.” It sits under the FSA’s Blockchain Governance Initiative Network (BGIN) research track and follows the JFSA’s April 2026 Policy for…
On 17 December 2024 the European Securities and Markets Authority published its Final Report and, in Annex III, the Guidelines on the conditions and criteria for the qualification of crypto-assets as financial instruments, reference ESMA75453128700-1323. That document, often shortened to the CAFI Guidelines, addresses whether a crypto-asset qualifies as a financial instrument and is therefore…
On 8 July 2026 the European Securities and Markets Authority launched a Common Supervisory Action on crypto-asset service providers, aimed squarely at one activity: custody. The exercise assesses the maturity of CASP digital operational resilience frameworks for custody services, and national competent authorities will run it on a risk-based sample of authorised CASPs from the…
A firm running a UK crypto exchange or custody desk has, until now, operated on a Money Laundering Regulations registration, a light-touch anti-money-laundering permission and little else. On 30 June 2026 that arrangement stopped being enough. The FCA published the final rulebook for the FCA cryptoasset regime, and the rulebook treats an existing registration as…