Regulation Roadmap Q1 2026

Q1 2026 marks a critical phase for payments regulation, with developments across safeguarding, stablecoins, operational resilience, and payments data standards moving from policy design to implementation. This roadmap highlights the key reforms, timelines, and compliance risks that payments leaders must navigate to stay ahead in an increasingly complex regulatory landscape.

Introduction

About the roadmap

Spanning consumer protection, market conduct, operational resilience, and data standards, regulation touches every part of the payments value chain. The UK market is regulated by several authorities, with each initiative having consultation periods, policy statements, and often staggered implementation windows. Add sea change technological developments and staying on top of regulatory changes becomes challenging.

Payments Intelligence produces our quarterly regulation roadmaps to address this complexity, setting out consultation papers and policy initiatives chronologically, summarising the change brought by each, the legal issues they pose, and suggested next steps to take in response. The roadmaps draw directly on the papers published by the UK’s disparate regulatory bodies as well as our membership of senior compliance leads and legal professionals. 

This edition covers reforms to safeguarding and prudential requirements for payment and e-money institutions, the continued embedding of Consumer Duty, and the strengthening of operational resilience and wind-down planning. The roadmap also tracks progress on payments infrastructure and data standards, including ISO 20022 migration and settlement reform, alongside policy developments affecting access to and use of payment accounts.

Digital assets and new forms of money are a further area of emphasis. The report maps the evolution of stablecoin regulation in the UK and internationally, facilitating comparison between emerging cryptoasset regimes. Taken together, these themes illustrate a regulatory agenda that is increasingly focused on resilience, transparency, and interoperability. 

Foreword

As regulatory change accelerates, this roadmap is designed to help The Payments Association’s members prioritise what matters, understand what is coming, and act with confidence. It translates complex regulatory developments into clear implications and practical timelines for payments leaders. Active engagement in our working groups and policy campaigns will be essential to shape outcomes, share insight, and ensure the payments industry’s voice is heard as these reforms move into implementation
Benjamin David
Head of Intelligence

Why it matters

Payments regulation is moving from policy to implementation. This roadmap highlights what matters, when it matters, and why it matters.

The challenge firms face

Scattered market insight

Risky strategic planning

Limited visibility of peers

Regulatory change rarely arrives in isolation. Overlapping initiatives, staggered timelines, and varying levels of certainty can make it difficult for firms to assess what genuinely requires attention. This roadmap is intended to reduce that complexity by providing a clearer line of sight across developments.

What this roadmap helps you do

Focus on what needs attention

Understand timing and sequencing

Reduce compliance risk

By setting developments out by timing and theme, the roadmap helps teams distinguish between what is imminent, what is emerging, and what can be monitored. This enables more informed internal discussions and better sequencing of regulatory work.

Who this is for

This roadmap is designed for teams involved in understanding, planning for, and responding to regulatory change across payments. Personas include:

While the roadmap is relevant across functions, it is particularly useful for teams responsible for translating regulatory change into business action. It can be used as a shared reference point across departments to align understanding and expectations.

How to use this roadmap

Scan for relevance

Identify priorities

Use for planning

The roadmap should be used as a planning and orientation tool alongside existing internal processes and external advice. It is intended to support discussion, prioritisation, and forward planning rather than replace detailed legal or regulatory analysis.

Timeline

The timeline below sets out the sequencing of key regulatory developments affecting payments, highlighting anticipated milestones, areas of regulatory change and points of operational impact. It is intended to support planning by indicating where firms should prioritise assessment, mobilisation and delivery across near, medium and longer-term horizons.

Industry insights

Recent and immediate developments: Q1 2026

Q1 2026 brings FCA consultations on cryptoassets, prudential standards and market conduct, marking a step-change in regulatory expectations. AML updates, the removal of the £100 contactless limit and progress on open finance heighten near-term compliance and operational demands.

Proposed regulatory regime for sterling-denominated systemic stablecoins

🟥 Urgent, significant impact

In November 2025, the Bank of England published a consultation paper on a proposed regulatory regime for sterling-denominated systemic stablecoins. Systemic stablecoins are widely used in payments; the bank believes they may pose risks to the UK’s financial stability. Once recognised as systemic by HM Treasury, these stablecoins would be regulated by the Bank of England and the FCA.

The proposals aim to balance innovation with financial stability. Key elements include a revised backing-asset model, allowing issuers to hold at least 40% in unremunerated central bank deposits and up to 60% in short-term UK government debt, addressing concerns that earlier proposals were commercially unviable. A step-up regime would permit higher gilt holdings for issuers deemed systemic at launch.

The Bank also proposes risk-based capital and reserve requirements, with reserves held on a statutory trust to protect coinholders, alongside clear expectations on redemption at par, safeguarding, and operational resilience. Holding limits—£20,000 per individual and £10 million per business, with exemptions—are proposed as a transitional measure to mitigate risks of rapid bank-deposit outflows during adoption.

The consultation clarifies how systemic importance will be assessed (eschewing hard thresholds), affirms openness to public permissionless ledgers subject to risk controls, and outlines approaches to wholesale settlement via the Digital Securities Sandbox. Further consultations, including Codes of Practice and joint Bank–FCA implementation details, are planned from 2026.

Key dates:

  • The consultation closes on 10 February 2026. The bank intends to publish the detailed design of the regulatory framework in 2026 alongside the FCA.
  • Transition risk as firms move from FCA non-systemic to Bank systemic regulation
  • Submit feedback to [email protected], the web form, or in writing to FMID Payments Policy Team, Bank of England, 20 Moorgate, London, EC2R 6DA by 10 February 2026
  • Stablecoin issuers should assess business-model viability under the proposed 40:60 backing-asset split and capital/reserve framework
  • Firms should evaluate readiness to implement holding limits, redemption timelines, and statutory trust arrangements

CP25/40: Regulating cryptoasset activities

🟥 Urgent, significant impact

CP25/40 sets out the FCA’s proposed rules and guidance for a new set of regulated cryptoasset activities. The consultation paper follows HMT’s draft statutory instrument ‘Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2025,’ presented to Parliament in December of last year. Once approved, the Regulations will significantly expand the FCA’s remit beyond financial promotions and AML/CTF supervision, bringing a wide range of cryptoasset activities fully within UK financial regulation.

The consultation focuses on activities not covered in earlier papers (CP25/14 and CP25/15), including operating cryptoasset trading platforms, acting as intermediaries, cryptoasset lending and borrowing, staking, and the FCA’s proposed approach to decentralised finance (DeFi). Firms carrying out these activities in the UK will need to obtain FCA authorisation and comply with relevant FCA Handbook requirements, alongside obligations set out in parallel consultations on market abuse, admissions and disclosures (CP25/41), and prudential standards (CP25/42), which are covered below.

The FCA emphasises a “same risk, same regulatory outcome” approach, seeking to balance consumer protection, market integrity, and effective competition while supporting innovation and the UK’s international competitiveness. The proposals have been shaped by 92 responses to DP25/1 and feedback from statutory panels. The FCA acknowledges that regulation cannot eliminate all cryptoasset risks, but aims to ensure consumers can make informed decisions and that authorised firms operate to robust governance and conduct standards.

Key dates:

  • The consultation closes on 12 February 2026. Responses may be submitted via the form on the FCA’s website, by email to [email protected], or in writing to: Crypto Policy Team, Financial Conduct Authority, 12 Endeavour Square, London, E20 1JN
  • Further conduct-related requirements (including Consumer Duty and access to the Financial Ombudsman Service) are expected in Q1 2026.
  • Expansion of FCA authorisation requirements will likely create significant compliance and operational burdens for crypto firms operating or targeting the UK
  • Uncertainty for firms operating across multiple business models (e.g. trading, staking, lending) as activities are reclassified under FSMA
  • Submit feedback to [email protected], via the FCA online response form, or in writing (address above) by 12 February 2026.
  • Cryptoasset firms should map existing and planned activities against the new regulated activity definitions
  • Monitor linked consultations (CP25/41, CP25/42 and forthcoming conduct CP in Q1 2026) to understand cumulative regulatory impact

CP25/41: Regulating cryptoassets: Admissions & disclosures and market abuse regime for cryptoassets

🟥 Urgent, significant impact

CP25/41 sets out the FCA’s proposals for a new Admissions and Disclosures (A&D) regime and a Market Abuse Regime for Cryptoassets (MARC), following HM Treasury’s draft Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2025, published in December 2025. Together, these regimes form a core pillar of the UK’s future cryptoasset framework and will be implemented through the Designated Activities Regime (DAR) under FSMA.

The A&D regime will govern public offers of qualifying cryptoassets and their admission to trading on cryptoasset trading platforms (CATPs), introducing standardised disclosure requirements intended to improve the quality, consistency and reliability of information available to investors. Central to this is the introduction of Qualifying Cryptoasset Disclosure Documents (QCDDs), designed to support informed consumer decision-making and reduce the prevalence of scam or low-quality tokens. In parallel, MARC establishes a bespoke market abuse framework for cryptoassets, targeting insider dealing, unlawful disclosure of inside information and market manipulation, with obligations on CATPs and intermediaries to prevent, detect and disrupt abusive behaviour.

The FCA acknowledges that crypto markets differ structurally from traditional financial markets and that full alignment with the UK Market Abuse Regulation is not currently feasible. The proposals aim to raise baseline standards, strengthen market integrity and consumer protection, and support fair competition, while aligning with international standards set by IOSCO, the FSB, and FATF. CP25/41 should be read alongside CP25/40 and CP25/42 as part of the FCA’s wider crypto regulatory roadmap.

Key dates:

  • The consultation closes on 12 February 2026. Responses may be submitted via the form on the FCA’s website, by email to [email protected], or in writing to: Wholesale Cryptoasset Policy, Financial Conduct Authority, 12 Endeavour Square, London, E20 1JN
  • New disclosure and market abuse obligations increase compliance and monitoring burdens for CATPs, issuers and intermediaries
  • MARC obligations may require significant investment in surveillance, controls and information-sharing systems
  • Submit feedback to [email protected], the website, or in writing (address above) by 12 February 2026
  • Firms should assess whether they carry out, or plan to carry out, designated activities under the A&D or MARC regimes
  • Review disclosure processes and governance against proposed QCDD requirements

CP25/42: A prudential regime for cryptoasset firms

🟥 Urgent, significant impact

CP25/42 sets out the FCA’s proposed prudential framework for cryptoasset firms that will require authorisation under the forthcoming Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2025, introduced by HM Treasury in December 2025. It differs from CP25/40 in its focus on how firms must fund themselves and withstand financial stress or failure, whereas CP25/40 focuses on the conduct and operation rules for newly regulated cryptoasset activities.

The consultation significantly expands the FCA’s oversight beyond financial promotions and AML/CTF requirements, establishing baseline financial resilience standards for firms carrying out regulated cryptoasset activities in the UK.

Building on CP25/15, this paper extends prudential requirements to the remaining regulated cryptoasset activities, including operating a qualifying cryptoasset trading platform (CATP), staking, arranging and dealing in qualifying cryptoassets (as agent or principal). It also introduces additional elements of the overall prudential regime that were deferred from earlier consultations. The FCA emphasises proportionality, recognising the diversity of cryptoasset business models and the differing risk profiles of activities such as stablecoin-related services versus unbacked cryptoassets.

The proposed regime is designed to reduce the risk and impact of firm failure, improve market confidence and resilience, and ensure firms hold sufficient own funds to support orderly wind-downs and, where relevant, redress consumer harm. 

CP25/42 should be considered alongside CP25/40 and CP25/41 as part of the FCA’s broader crypto regulatory roadmap, with further conduct-related requirements expected in Q1 2026.

Key dates:

  • The consultation closes on 12 February 2026. Responses may be submitted via the form on the FCA’s website, by email to [email protected], or in writing to: Prudential Policy, Financial Conduct Authority, 12 Endeavour Square, London, E20 1JN
  • Increased capital and prudential requirements may raise barriers to entry, particularly for smaller or early-stage crypto firms
  • Risk of cumulative regulatory burden when prudential rules are combined with conduct, market abuse and disclosure obligations
  • Submit feedback to [email protected], the website, or in writing (address above) by 12 February 2026
  • Firms should assess whether they will require FCA authorisation under the new cryptoasset regime and identify applicable prudential categories

Money Laundering and Terrorist Financing (Amendment and Miscellaneous Provision) Regulations 2025 - Policy note

🟧 Important, uncertain timing/impact

This draft Statutory Instrument (SI) forms part of HM Treasury’s response to its consultation on Improving the Effectiveness of the Money Laundering Regulations and proposes targeted amendments to the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017. The objective is to close identified regulatory gaps, improve proportionality, and ensure the UK’s AML/CTF framework remains effective in light of evolving risks, including those arising from cryptoassets, trusts, pooled client accounts, and customer due diligence practices.

The SI seeks to make customer due diligence more risk-based and workable, including clarifying enhanced due diligence triggers, narrowing the definition of high-risk third countries to FATF “call for action” jurisdictions, and refining requirements for unusually complex or large transactions. It introduces reforms to pooled client accounts to improve access while maintaining transparency, and facilitates continuity of banking services following bank insolvencies through limited, safeguarded flexibility in ID verification timing.

The draft regulations also strengthen system-wide coordination by expanding information-sharing gateways between AML supervisors and public bodies, including Companies House, and by clarifying the FCA’s ability to share confidential information relating to cryptoasset firms. 

Further measures address scope and registration issues, including converting euro-denominated thresholds to sterling, extending AML coverage to off-the-shelf company sales by TCSPs, reforming cryptoasset business registration and change-in-control tests to align with FSMA, and expanding the Trust Registration Service to improve transparency of trust ownership.

Key dates:

  • Subject to feedback and Parliamentary scheduling, the final SI is expected to be laid in early 2026 and will come into force 21 days later, with cryptoasset-specific provisions aligned to the commencement of the FSMA cryptoasset perimeter.
  • Firms may face implementation risk if systems and controls are not updated to reflect revised CDD, EDD, and PCA requirements
  • Expanded Trust Registration Service scope increases compliance obligations and potential enforcement exposure for trustee
  • Firms should review existing AML/CTF frameworks against the proposed changes, focusing on EDD triggers, PCAs, and correspondent relationships
  • Cryptoasset businesses should assess how revised registration and change-in-control rules interact with forthcoming FSMA authorisation

FCA lifts £100 limit on contactless payments

🟩 Long-term/indicative

The FCA has confirmed rule changes that will give banks and payment service providers greater flexibility to set contactless payment limits. From March 2026, firms with sufficiently strong fraud controls will be able to determine their own contactless limits, rather than being constrained by a single industry-wide cap.

The policy responds to the growing dominance of contactless payments in the UK. Research cited by Barclays indicates that almost 95% of eligible in-store card transactions were contactless in 2024, underlining consumer demand for faster, frictionless payment experiences. The FCA also encourages firms to allow users to set personalised contactless limits or switch contactless functionality off entirely.

The FCA stresses that existing consumer protections remain unchanged. Consumers will continue to be reimbursed for unauthorised contactless transactions, such as where a card is lost or stolen. The regulator sees the reforms as incentivising firms to invest further in fraud controls, aligning flexibility with enhanced consumer protection.

The change follows earlier discussion and consultation on contactless payments and forms part of a wider package of growth-focused measures outlined in the FCA’s January letter to the Prime Minister. Industry groups, including UKHospitality, have welcomed the move, citing benefits for high-street and hospitality businesses through quicker checkout experiences. Adoption of higher limits will be voluntary, but firms choosing to do so must clearly communicate changes to customers.

Key dates:

  • From 19 March 2026, firms with sufficiently strong fraud controls will be able to set their own contactless limits (including removing a fixed limit altogether), subject to clear customer communication and appropriate fraud controls.
  • Clear customer communication is required to avoid complaints or Consumer Duty breaches
  • Firms should assess fraud monitoring and reimbursement processes ahead of March 2026
  • Review customer controls, including optional limit-setting and opt-out features
  • Prepare clear customer communications for any changes to contactless limits
  •  

FCA announces partnership to accelerate delivery of open finance

🟩 Long-term/indicative

The FCA announced a partnership and series of initiatives aimed at accelerating the development of open finance, ahead of publishing a formal open finance roadmap and strategy by March 2026. The announcement builds on commitments made in the FCA’s January letter to the Prime Minister, which highlighted digital innovation and the potential prioritisation of SME lending as key areas of focus.

Central to this work is the Smart Data Accelerator, launched in September 2025 as an extension of the FCA’s sandbox. The Accelerator is designed to test real-world open finance use cases in a controlled environment. To support this, the FCA has partnered with Raidiam, a specialist in data-sharing infrastructure that has supported open finance and open insurance initiatives internationally, including in Brazil. Through this partnership, participants will gain access to a stable testing environment that mirrors live conditions, enabling firms to simulate data sharing and develop secure, consumer-focused smart data solutions.

Alongside this, the FCA is running two TechSprints from 17 November 2025 to 12 February 2026, focusing on mortgages and SME finance, respectively. These sprints were open to firms, policymakers, industry bodies, and international partners (registration closed on 2 November 2025). The initiatives build on earlier FCA work, including the Open Finance Sprint held in March 2025, which explored practical consumer benefits of open finance.

The FCA positions this programme as supporting the government’s National Payments Vision and the UK’s ambition to be a global leader in open banking and open finance, while recognising the need to balance innovation with data protection and consumer safeguards.

Key dates:

  • The FCA will set out a roadmap for open finance by March 2026.
  • Ongoing uncertainty around the future regulatory perimeter and mandatory participation requirements for open finance
  • Data protection, consent and liability risks as data-sharing expands beyond payments into wider financial product
  • Assess readiness for expanded data-sharing, including consent management, data security and governance frameworks
  • Monitor publication of the FCA’s open finance roadmap by March 2026 for clarity on timelines and regulatory expectation

Member insights

Short to medium-term impact: 2026

The 2026 medium-term agenda covers prudential, conduct and payments reform. Capital rule changes, BNPL regulation and the proposed systemic stablecoin regime point to tighter oversight, while ISO 20022 change, extended settlement hours and redress reform increase operational and compliance demands.

PS25/14: Definition of capital for FCA investment firms

🟩 Long-term/indicative

PS25/14 sets out the FCA’s final rules to simplify and consolidate the definition of regulatory capital (“own funds”) for FCA investment firms under MIFIDPRU 3, following consultation CP25/10. The policy removes all remaining cross-references to the UK Capital Requirements Regulation (UK CRR) and establishes a standalone, self-contained definition of capital within the FCA Handbook, tailored specifically to investment firms rather than banks.

Importantly, the changes are structural and clarificatory, not substantive. The FCA is not increasing capital requirements or requiring firms to change their capital structures. Instead, the reforms aim to reduce complexity, improve clarity and accessibility, and remove banking-specific provisions that are no longer relevant to investment firms. All capital definitions are now located in a single MIFIDPRU chapter, with clearer distinctions between CET1, AT1, and Tier 2 capital.

The policy forms part of the FCA’s broader programme to modernise and simplify the Investment Firms Prudential Regime (IFPR), delivering on commitments made in PS21/6. It also aligns with the Government’s wider regulatory reform agenda, including the Leeds Reforms and Mansion House commitments to streamline regulation while maintaining prudential resilience. The FCA positions these changes as the first phase in a longer-term vision for an integrated prudential sourcebook (COREPRU).

Key dates:

  • The new rules come into effect on 1 April 2026.
  • While firms are not expected to alter their capital arrangements, they will need to update internal documentation and references to reflect the new standalone framework
  • Risk of misapplication or misreporting if firms fail to update internal policies and regulatory references from UK CRR to MIFIDPR
  • Review capital policies, templates and regulatory reporting references against the new MIFIDPRU 3 structure
  • Update internal documentation, governance materials, and compliance manuals to reflect the standalone own funds definitio

ISO 20022 Change Management – November 2026 (Payment System Operators)

🟧 Important, uncertain timing/impact

The Bank of England has now confirmed the scope of ISO 20022 schema changes for the November 2026 CHAPS, RTGS, and deferred net settlement release, reflecting updated information published on 19 December 2025. These changes affect the machine-readable (XSD) schemas in MyStandards used within Swift validation libraries by the Bank and participants to validate CHAPS, RTGS, and net settlement messages.

The final 2026 change set is narrower and more targeted than earlier indicative lists shared in 2025. The majority of changes are corrections, updates, and incremental additions to existing ISO 20022 message schemas, primarily aimed at aligning UK high-value payment systems with international standards, including CBPR+ and HVPS+. Each change has been assigned a Swift impact categorisation, with the updated documentation now identifying the specific message types affected, enabling more precise impact assessments by firms.

Following industry feedback and internal capacity constraints, the Bank has reduced the scope of “other changes” planned for 2026. Notably, changes previously proposed for pacs.029, camt.053, and camt.054 to introduce optional reference fields for individual movements within deferred net settlement requests will not be delivered in 2026. These items have been formally moved to the change backlog for potential consideration in future release cycles. The updated documentation also provides transparency into changes that did not progress in 2026, supporting longer-term planning.

The Bank reiterates its expectation that November 2027 changes will focus on a broader ISO 20022 base message upgrade, rather than incremental schema adjustments.

Key dates:

  • The changes will come into effect in November 2026.
  • Mandatory interoperability-driven schema changes remain binding and require timely implementation
  • Update internal implementation plans to reflect the 2026 scope

Payment Services and Payment Accounts (Contract Termination) (Amendment) Regulations 2025

🟩 Long-term/indicative

The regulations amend the Payment Accounts Regulations 2015 and the Payment Services Regulations 2017 to strengthen consumer protections and transparency around account refusals and contract termination, particularly in response to concerns about “debanking”. Made under powers in the Financial Services and Markets Act 2023 by HM Treasury, the Regulations come into force on 28 April 2026.

For payment accounts, designated credit institutions must now provide clear, specific reasons when refusing an application or terminating a framework contract, unless doing so would be unlawful. Consumers must also be informed of their complaints rights, including escalation to the Financial Ombudsman Service.

For payment services, the amendments introduce a new structure distinguishing contracts entered into before and on or after 28 April 2026. For new contracts, payment service providers must generally give at least 90 days’ notice before terminating an indefinite framework contract, alongside a sufficiently detailed explanation of the reasons and information on complaints routes.

However, the Regulations set out explicit exceptions where advance notice or the full notice period is not required, most notably where termination is linked to money laundering failures, serious crime, immigration requirements, public order offences, or where termination is directed by regulators including the FCA. These provisions aim to balance transparency and fairness with the need to preserve financial crime controls and public safety.

Key dates

The regulations come into force on 28 April 2026.

  • Increased litigation and complaints risk if termination reasons are not “sufficiently detailed and specific”
  • Operational risk in correctly applying notice periods based on contract start dat
  • Review and update termination and refusal policies, templates, and customer communications
  • Ensure systems can distinguish contracts entered into pre- and post-28 April 202

PS25/12 The Supplementary Regime - FCA changes to payment safeguarding rules

🟥 Urgent, significant impact

The FCA’s supplementary regime for safeguarding tightens governance, record-keeping, monitoring, and audit requirements, bringing safeguarding closer to the client asset standards applied to investment firms, while stopping short of a statutory trust model. 

The policy statement follows the FCA’s consultation paper CP24/20, published in September 2024, which highlighted significant weaknesses: on average, only 35% of client funds were returned following insolvencies between Q1 2018 and Q2 2023.

Key changes include daily safeguarding reconciliations on “reconciliation days”, mandatory CASS-style resolution packs, annual safeguarding audits by Companies Act-qualified auditors (with exemptions for firms safeguarding under £100,000), and monthly regulatory returns covering balances, methods, reconciliations and breaches. Firms relying on insurance or guarantees must also plan to switch to segregation if cover cannot be renewed.

The FCA views the regime as successful if it reduces insolvency shortfalls and supervisory interventions. A future Post-Repeal (end-state) regime, likely modelled on CASS with statutory trusts, is envisaged but no timeline has been set.

Payments Intelligence covered the changes to the safeguarding regime in more detail here.

Key dates

The rules take effect on 7 May 2026.

  • Significant compliance and operational workload increse (daily reconciliations, resolution packs, monthly returns)
  • Audit capacity and cost risk; reliance on a limited pool of qualified auditors
  • Conduct a rules review and gap analysis against PS25/12
  • Implement or upgrade automated daily reconciliation and record-keeping systems
  • Prepare and maintain a resolution pack; perform third-party due diligence
  • Appoint a Companies Act-qualified safeguarding auditor (if in scope) and plan first audit

CP25/22: Modernising the redress system

🟩 Long-term/indicative

The Financial Ombudsman and the FCA published CP25/22 in July 2025, seeking stakeholders’ views on proposals to modernise the redress framework, to better serve consumers and give firms greater certainty to invest and innovate.

The current redress regime is widely seen as creating uncertainty for firms and investors, particularly around complaint handling, mass redress events (MREs), and the consistency of Financial Ombudsman decisions. The proposals therefore focus on earlier identification of harm, clearer expectations on proactive redress by firms, and closer coordination between the FCA and the Financial Ombudsman.

Key measures include clarifying when firms should notify the FCA of systemic issues, introducing criteria to identify potential MREs, and strengthening collaboration between regulators through new referral and “lead complaint” mechanisms. Operational reforms at the Financial Ombudsman include a new registration stage for complaints and changes to delegated decision-making to improve consistency and speed.

Taken together, the reforms seek to deliver faster and more predictable redress for consumers, reduce poorly evidenced complaints, and support the FCA’s secondary objective of growth and international competitiveness. 

Key dates

The consultation period closed on 8 October 2025. A policy statement is expected in H1 2026.

  • Greater regulatory scrutiny of firms’ proactive redress obligations and earlier notification of systemic issues
  • Increased exposure for firms if failures to identify or report MREs are viewed as non-compliance
  • Review proposals on proactive redress, SUP 15 notifications, and MRE identification criteria
  • Assess impacts on complaints handling, governance, and record-keeping frameworks

Regulating Buy Now Pay Later (BNPL)

🟧 Important, uncertain timing/impact

Following CP25/23 on deferred payment credit (DPC), better known as buy now pay later, regulation will come into force in 2026. Third-party lenders offering interest-free DPC agreements (repayable in 12 or fewer instalments within 12 months) to finance purchases from merchants will fall within the FCA’s regulatory perimeter. Merchants offering DPC directly to customers will remain exempt.

The consultation responds to rapid growth in the sector, which has grown from £0.06bn in 2017 to over £13bn in 2024, according to data cited by the FCA. Additionally, there are concerns that unregulated DPC lending may expose consumers to affordability risks, insufficient pre-contract information, and poor outcomes for borrowers in financial difficulty. Around 20% of UK adults used DPC in 2024, with usage higher among consumers already experiencing financial stress.

The FCA proposes a proportionate regime that largely leverages existing consumer credit rules and the Consumer Duty, rather than creating a bespoke framework. Proposals cover pre- and post-contract information requirements, proportionate creditworthiness assessments, complaints handling and access to the Financial Ombudsman Service, and new data-reporting obligations (including Product Sales Data).

A Temporary Permissions Regime (TPR) will allow currently unauthorised DPC lenders to continue operating while their applications are assessed.

Key dates

A policy statement and final rules are expected in early 2026, with regulation day on 15 July 2026.

The window for TPR registration runs from 15 May to 1 July 2026.

  • Increased compliance risk around creditworthiness assessments, disclosures, and Consumer Duty outcomes
  • Potential enforcement or redress exposure where historic DPC practices are inconsistent with new standards
  • Firms offering third-party BNPL must obtain FCA authorisation or enter the TPR by July 2026
  • Assess whether DPC activities fall within scope and whether FCA permissions are required
  • Review product design, disclosures, affordability checks, and complaints processes against proposed rules

PS25/23 Tackling non-financial misconduct in financial services

🟩 Long-term/indicative

The FCA’s December 2025 policy statement ‘Tackling non-financial misconduct in financial services’ sets out guidance on non-financial misconduct (NFM) in financial services, following consultation under CP25/18. The reforms amend the Code of Conduct (COCON) and clarify how NFM is assessed under the Fit and Proper (FIT) framework, aiming to improve consistency, certainty, and fairness in how firms address misconduct.

The reforms build on the FCA and Prudential Regulation Authority’s joint Discussion Paper (DP21/2, 2021) and the FCA’s September 2023 consultation (CP23/20). The FCA reports that its proposals received broad industry support, with 80% of authorised firms and 90% of trade bodies backing its approach.

The guidance responds to strong industry support (95% of respondents) for additional clarity, while emphasising that firms must continue to exercise judgement. The FCA stresses that its framework does not replace employment law, criminal law or internal disciplinary processes, nor does it create new routes for employee redress. Instead, it is intended to help firms take decisive, proportionate action where behaviour risks harming individuals, workplace culture, consumer outcomes or market integrity.

Key dates:

  • The new COCON rule will take effect on 1 September 2026.
  • Expanded COCON scope increases regulatory exposure for non-banks in relation to workplace misconduct
  • Risk of inconsistent application if firms lack robust frameworks for assessing NFM and fitness and propriety
  • Update internal conduct, HR, and disciplinary policies to reflect revised COCON and FIT guidance
  • Train managers, HR, and compliance teams on identifying and assessing NFM

Proposal to extend RT2 and CHAPS settlement hours (phase 1)

🟩 Long-term/indicative

The Bank of England is consulting on Phase 1 of extending settlement hours for CHAPS on its renewed RTGS platform, RT2. Following RT2’s go-live in April 2025 and strong industry support for longer hours, the Bank proposes opening CHAPS for settlement from 1.30 am on existing business days, ahead of the current 6 am start. This is positioned as a stepping stone toward near-24×7 settlement around the turn of the decade.

The proposal aims to align UK settlement more closely with international peers (including euro-area T2 and US Fed systems), support cross-border initiatives under the G20 Roadmap, reduce settlement risk, and unlock innovation (e.g. synchronisation interfaces, tokenisation) by extending access to central bank money. Implementation is targeted for H2 2027, subject to consultation feedback.

Participation in the early window (1.30 am–6 am) would be optional for CHAPS Direct Participants (DPs). All DPs would receive incoming payments from 1.30 am, but only those opting in would send payments early. The Bank proposes a proportionate “alert and respond” support model, with no active business support until 5.45am and no changes to existing contingency, liquidity facilities, or euro bridge timings. Intraday liquidity would be credited at 1.30 am but would not be amendable before 8 am.

Key dates:

  • Early 2026: Planned policy statement on the 1.30 am opening for CHAPS
  • Early 2026: Phase 2 consultation covering evening contingency extensions and limited bank-holiday settlement
  • 2026: Policy statement covering the evening contingency extension and bank holiday settlement is expected later in the year
  • H2 2027: Aiming for implementation of the early morning extension in H2 2027 (subject to consultation feedback and further work internally)
  • Operational readiness and resilience risks for DPs choosing to participate early.
  • Liquidity and treasury management impacts (IDL timing constraints)
  • Cost recovery and tariff implications remain to be determined
  • Engage with future Bank of England consultation papers through 2026
  • Assess business case and use cases for early settlement (cross-border flows, liquidity prep)
  • Evaluate people, process and systems changes needed to operate from 1.30am

Department for Science, Innovation and Technology Artificial Intelligence Regulation

🟩 Long-term/indicative

The government has confirmed its intention to legislate for artificial intelligence (AI) but has not yet published a timeline. The FCA has welcomed the move and emphasised its commitment to a “technology-agnostic, principles-based and outcomes-focused” approach.

Rather than creating a dedicated statutory AI regulator, the government has asked existing bodies — including the FCA, CMA, ICO, Ofcom and MHRA — to apply a common set of five cross-sector principles within their own remits. These principles are: safety, security and robustness; appropriate transparency and explainability; fairness; accountability and governance; and contestability and redress.

Key dates:

  • The government is yet to publish a timeline for AI regulation
  • Sectoral regulators (FCA, PSR, CMA, ICO) are expected to interpret AI principles through existing obligations such as Consumer Duty, operational resilience, and data protection, creating overlapping compliance risks
  • Absence of clear statutory AI rules may result in inconsistent regulatory expectations across sectors
  • Lack of board-level oversight and defined SM&CR accountability for AI use could expose firms to enforcement action and governance failings
  • Use of opaque or biased AI models increases the risk of consumer harm, discrimination claims, and reputational damage
  • Implement AI model governance frameworks covering explainability, bias testing, and consumer redress processes for high-impact use cases such as fraud detection and credit scoring
  • Assign board-level oversight and SM&CR responsibility for AI deployment, with clear reporting lines
  • Develop an AI model register and maintain audit trails to evidence compliance with Consumer Duty, data protection, and operational resilience requirements
  • Build systems with flexibility to adapt to future statutory rules and international AI standards (e.g. EU AI Act), not just current UK principles

Future outlook: 2027 and beyond

Beyond 2026, the focus shifts to longer-term structural reform. The digital pound, the move to open finance, and changes to prudential and settlement frameworks will reshape payments architecture, despite uncertain timelines.

Bank of England digital pound development - potentially shelved

🟩 Long-term/indicative

In July 2025, Andrew Bailey, governor of the Bank of England, noted he would need “a lot of convincing” on the benefit of a digital pound if commercial banks continue to deliver effective digital payment solutions, questioning the added benefit of a central bank-issued alternative.

This marks a shift from the Bank and HM Treasury’s position just two years earlier, when they anticipated that a digital pound could be introduced before 2030. The Bank’s April 2025 report confirmed that offline payment functionality with a digital pound is technically feasible but highlighted trade-offs around user experience, double-spending, and counterfeiting controls.

Key dates

2026: A blueprint to be published, setting out the key design elements necessary to support the Bank and HM Treasury in assessing the policy case for a digital pound

  • Strategic uncertainty from the Bank’s cautious stance may delay investment decisions for firms planning CBDC-related services
  • Divergence between the UK and jurisdictions pressing ahead with retail CBDCs could undermine cross-border interoperability and settlement efficiency
  • Risk of misallocated resources if firms deprioritise CBDC readiness but the UK later reactivates plans on an accelerated timeline
  • Potential competitive disadvantage if tokenised deposits and stablecoin frameworks advance faster than a digital pound
  • Prioritise investment in stablecoin infrastructure, tokenised deposits, and interoperability solutions, given stronger regulatory momentum in these areas
  • Monitor Bank of England and HM Treasury communications for any reactivation of digital pound timelines
  • Scenario-plan for both outcomes: no digital pound, and a late but accelerated introduction, to avoid being caught unprepared
  • Engage in cross-industry pilots and standards groups to ensure readiness for whichever digital money model takes precedence

Open banking transition to open finance and the future entity

🟩 Long-term/indicative

Open finance will extend secure, consent-based data sharing beyond current accounts and payments into a much wider range of financial products, including mortgages, pensions, investments, savings, and insurance.

In September 2024, the Competition and Markets Authority (CMA) confirmed the completion of the open banking roadmap. The FCA plans to publish a roadmap for open finance by March 2026, following the conclusion of the second tech sprint on 12 February 2026 as part of the Smart Data Accelerator scheme.

Further information on the move to a Future Entity as the primary standard setting body is still pending.

Key dates

March 2026: FCA to publish roadmap for open finance

  • Open finance significantly expands the volume and sensitivity of data shared (eg pensions, investments, mortgages)
  • Poorly designed data-enabled journeys (eg nudging, automated switching or personalised offers) may create foreseeable harm, triggering FCA scrutiny under the Consumer Duty
  • Data access asymmetries or restrictive commercial models could attract scrutiny from competition authorities as smart data schemes scale
  • Firms will need robust GDPR-compliant consent, data minimisation, and purpose-limitation frameworks to avoid regulatory breaches
  • Identify which products (mortgages, pensions, investments, savings) could fall within future open finance or smart data schemes and assess readiness
  • Review consent management, data-sharing agreements, API security and record-keeping against GDPR, Consumer Duty and operational resilience expectation

Prudential Regulation Authority: Delay to Basel 3.1 Implementation

🟧 Important, uncertain timing/impact

In January 2025, the PRA, in consultation with HM Treasury, announced a one-year delay to the UK’s implementation of Basel 3.1 standards, moving the start date to 1 January 2027. Basel 3.1 is intended to improve banks’ measurement of risk and standardise approaches to capital calculation, making capital ratios more consistent and comparable across firms.

Although the start date has been pushed back, the PRA has confirmed that full implementation is still targeted for 1 January 2030, with transitional periods shortened to compensate. The decision reflects uncertainty around the US timetable for Basel 3.1 and the UK’s desire to maintain competitiveness and avoid misalignment with other major jurisdictions.

Key dates

Initial implementation is expected on 1 January 2027 with the full implementation on 1 January 2030.

  • Shortened transitional periods increase pressure on banks to deliver model changes, data upgrades, and governance within compressed timelines
  • Ongoing uncertainty around US implementation creates planning challenges and potential divergence in capital requirements
  • Risk that programmes lose momentum during the delay, leading to resourcing gaps and rushed delivery closer to 2027
  • Failure to prepare could result in supervisory findings, higher capital requirements, or reputational impact with regulators and investors
  • Monitor PRA publications on the revised Interim Capital Regime to track changes in transitional capital treatment
  • Maintain Basel 3.1 programme momentum despite the delay, ensuring model changes and data upgrades remain on track
  • Use the pause on Pillar 2 data collection to strengthen underlying systems and controls, so they are ready when requirements resume
  • Refresh internal implementation plans to reflect the 2027 start date and compressed transitional period through to 2030

The Accelerated Settlement Taskforce T+1 settlement

🟧 Important, uncertain timing/impact

The UK will transition from a T+2 to a T+1 settlement cycle for securities transactions on 11 October 2027. This will require equities and bonds to settle within one business day of execution, improving efficiency and reducing counterparty risk. The Accelerated Settlement Taskforce (AST), chaired by Andrew Douglas, has been appointed to oversee and coordinate the transition, with the FCA and Bank of England providing support as observers.

International alignment is strong: the US, Canada, Mexico, and Argentina moved to T+1 in May 2024, while the EU reached a provisional agreement in June 2025 to adopt T+1 from the same date as the UK. Switzerland is also targeting October 2027. Coordinated adoption reduces the risk of settlement mismatches in cross-border trading.

Key dates

Implementation is targeted for 11 October 2027

  • Higher settlement-fail rates and penalties if firms cannot meet the T+1 timetable under settlement discipline regimes
  • Contractual liability to counterparties for financial losses caused by delayed settlement
  • Breach of FCA rules on operational resilience, systems and controls, or conduct of business if firms are inadequately prepared
  • Legal and operational complexity from cross-border mismatches in timing or enforcement across the UK, EU, Switzerland, and North America
  • Increased risk of litigation and client disputes linked to failed or late settlement
  • Upgrade systems, processes, and counterparty arrangements to meet T+1 settlement timelines
  • Begin testing, budget planning, and staff training well ahead of the 2027 implementation date
  • Coordinate with custodians, brokers, and technology providers to ensure readiness and avoid settlement breaks
  • Align fund managers, distributors, and administrators for the shift of unit transactions to T+2
  • Prepare cross-border operating models for simultaneous adoption of T+1 in the UK, EU, and Switzerland, alongside established T+1 markets in North America

CP17/25 PRA proposes delay to the implementation of the new FRTB internal model approach

🟩 Long-term/indicative

The Prudential Regulation Authority has proposed delaying implementation of the Fundamental Review of the Trading Book – Internal Models Approach (FRTB-IMA) by one year, from 1 January 2027 to 1 January 2028. The proposal reflects concerns about cross-border consistency and operational complexity for internationally active firms that would otherwise need to run multiple market risk model frameworks in parallel across jurisdictions.

Under the proposal, firms with existing IMA permissions would retain their current CRR IMA models during the interim year from 1 January 2027, rather than transitioning immediately to the new FRTB-IMA framework. Positions not covered by existing IMA permissions would move to the new standardised approaches (ASA or SSA), meaning that firms with IMA approval would apply the ASA to any out-of-scope positions.

To enable this delay, the PRA proposes a package of consequential rule and policy changes, including incorporating the existing CRR IMA rules into the PRA Rulebook, issuing an interim supervisory statement (SS13/13), adjusting profit and loss attribution monitoring periods, and retaining current reporting and disclosure requirements for IMA firms. All FRTB-IMA-specific requirements set out in PS17/23 and PS9/24 would instead take effect on 1 January 2028.

Key dates

1 January 2028: FRTB-IMA implementation may be delayed until then

  • Prolonged reliance on legacy IMA models may delay firms’ readiness for the full FRTB-IMA regime.
  • Firms must manage dual regimes (existing IMA plus ASA/SSA) during the interim year, increasing governance and model-risk complexity
  • Firms with IMA permissions should plan for continued use of existing models through 2027, while progressing FRTB-IMA implementation programmes
  • Assess which trading positions fall outside current IMA permissions and prepare for ASA/SSA treatment from 1 January 2027
  • Review proposed rulebook amendments, supervisory statements, and reporting changes for interim compliance impact

Member Insights

International regulatory developments

International developments matter for UK firms and as a point of comparison. In the EU, PSD3, the Payment Services Regulation, MiCA, the Digital Euro and mandatory instant payments raise standards for resilience, consumer protection and interoperability, while in the US the GENIUS Act signals a more formalised approach to stablecoin regulation.

EU Instant Payments Regulation (SEPA Instant)

The EU Instant Payments Regulation (IPR), formally adopted in March 2024, is designed to accelerate the uptake of instant credit transfers in euros across the European Union and address persistently low adoption rates. Despite the availability of the SEPA Instant Credit Transfer (SCT Inst) scheme since 2017, instant payments accounted for a relatively small share of euro credit transfers prior to regulation, reflecting cost, fraud, and infrastructure barriers.

The IPR amends the SEPA Regulation and related EU payments legislation to make instant payments the default for euro credit transfers. Payment service providers (PSPs) that offer standard euro credit transfers must now also offer instant credit transfers, with funds made available to the recipient within 10 seconds, 24/7. Charges for instant payments must not exceed those for equivalent standard credit transfers, removing pricing as a barrier to adoption.

The regulation also introduces strengthened safeguards. PSPs must provide Verification of Payee services for both instant and standard credit transfers, free of charge to customers, and must conduct simplified sanctions screening at least daily rather than on a per-transaction basis for instant payments. These measures aim to balance speed with fraud prevention and compliance.

Implementation is being phased. Core obligations began applying to eurozone credit institutions in 2025, with later deadlines for payment institutions, e-money institutions, and PSPs in non-euro EEA countries. Updated SCT Inst rulebooks and implementation guidelines have been issued to align market practice with the new regulatory requirements, signalling a decisive move towards pan-European, real-time payments as a baseline expectation.

Key dates:

Receiving instant payments:

  • 9 January 2027 – Non-euro area Member States
  • 9 April 2027 – Electronic money institutions and payment institutions in euro area and non-euro area Member States

Sending instant payments:

  • 9 April 2027 – Electronic money institutions and payment institutions in euro area Member States
  • 9 July 2027 – Non-euro area Member States
  • 9 July 2027 – Electronic money institutions and payment institutions in non-euro area Member States

Equality of charges:

  • 9 January 2027 – Non-euro area Member States

Verification of payee:

  • 9 July 2027 – Non-euro area Member States
  • Mandatory Verification of Payee and daily sanctions screening increase data-quality requirements and exception-handling risks
  • Failure to deliver cost parity with standard transfers could expose firms to enforcement or consumer complaints
  • Direct access for non-bank PSPs to TARGET/TIPS intensifies competition, but also raises prudential and operational resilience expectations for new entrants
  • Cross-border interoperability and alignment with UK standards may create compliance complexity for UK groups operating in the EU
  • Upgrade infrastructure to deliver SEPA instant payments with cost parity to standard transfers
  • Implement Verification of Payee solutions and embed daily sanctions screening in line with the Eurosystem framework
  • Strengthen APP fraud monitoring and exception-handling processes to manage liability exposure
  • For UK firms with EU operations, prepare for staggered deadlines and ensure interoperability with SEPA Instant systems

EU PSD3 & PSR - Industry consultations expected through 2026

The European Union’s payments reform package – comprising a third Payment Services Directive (PSD3) and a new Payment Services Regulation (PSR) – represents the most significant overhaul of EU payments law since PSD2 in 2016. Originally proposed by the European Commission in June 2023, the European Parliament and the Council of the European Union agreed a compromise text in 2025. The final legal texts are expected to be formally adopted following legal-linguistic review and translation, likely by late Q1 or early Q2 2026.

Once adopted, PSD3 and the PSR will replace both PSD2 and the Electronic Money Directive, creating a unified payments framework. PSD3, as a directive, will govern authorisation, licensing and supervision of payment and e-money institutions, while the PSR – directly applicable across all member states – will harmonise conduct of business, consumer protection, security and open banking obligations.

The agreed reforms introduce materially stronger fraud and liability provisions (including verification of payee for all credit transfers), enhanced consumer controls, clearer data-access rights, and expanded obligations for technology and platform providers. The framework also clarifies the interaction between payments regulation and crypto-asset services under MiCA, including streamlined authorisation for already-licensed crypto firms.

Key dates:

  • Late Q1/Q2 2026: Final legal texts to be formally adopted
  • Mid-2026 to mid-2027: Transposition into national law (for PSD3 Directive) and application (for PSR Regulation)
  • Unified licensing regime under PSD3 increases regulatory scrutiny and could require reauthorisation or material changes to permissions
  • Stricter API performance, strong customer authentication (SCA), and reporting requirements will raise compliance costs and technical demands
  • Divergence risk between EU rules and UK open banking framework may create duplication and operational complexity for cross-border firms
  • Failure to adapt systems in time could result in service disruption, loss of passporting rights, or enforcement action by national competent authorities
  • Identify which parts of PSD3 vs the PSR apply to the firm’s activities (including crypto-asset payment flows and open-banking services)
  • Review verification of payee processes, impersonation fraud detection, reimbursement frameworks, and customer limit-setting tools
  • Begin planning for directly applicable PSR requirements ahead of the expected 21-month transition period

The GENIUS Act

On July 18, 2025, President Trump signed into law the Guiding and Establishing National Innovation for US Stablecoins (GENIUS) Act, creating the first comprehensive federal licensing and supervisory regime for payment stablecoins. The Act restricts issuance to licensed entities, imposes prudential and reserve requirements, and clarifies their regulatory treatment under US law.

The regime takes effect on the earlier of (i) 18 January 2027 or (ii) 120 days after final implementing regulations are issued, and will be overseen by the US Treasury, OCC, Federal Reserve, FDIC, state agencies, and a new interagency Stablecoin Certification Review Committee.

The Act defines payment stablecoins as fully backed, redeemable at par, and subject to reserve segregation, audits, and monthly certifications. It also distinguishes them from securities and commodities, resolving jurisdictional overlap between the SEC and CFTC.

Foreign issuers may operate in the US only if their home regime is judged “substantially similar,” and they must maintain reserves within the US.

Key dates:

  • 18 January 2027 or 120 days after regulations are finalised (whichever comes first): The act is enacted into law
  • Issuers face stringent prudential, operational, and disclosure obligations; failure to comply risks licence revocation or enforcement
  • Market entry depends on OCC registration and, for foreign issuers, “substantially similar” home regulation plus US reserve custody — raising compliance costs and barriers to entry
  • Uncertainty over how “substantially similar” will be interpreted could delay or restrict non-US participation
  • Ongoing audit, reserve segregation, and certification requirements create liability for misreporting or control failures
  • Assess OCC registration requirements and prepare licence applications ahead of the 2027 effective date
  • Align custody arrangements to meet segregation and US-based reserve requirements
  • Build systems for monthly reserve certifications, independent audits, and ongoing disclosure obligations
  • For foreign issuers, evaluate whether the home regime is likely to be deemed “substantially similar” and plan for compliance or restructuring if not
  • Review accounting treatment and financial reporting to take advantage of clarified regulatory status

Digital Euro

The European Central Bank (ECB) and EU co-legislators are advancing plans for a retail digital euro, designed to provide a central bank-issued digital means of payment for consumers and businesses across the euro area. The initiative is intended to complement cash, reinforce monetary sovereignty, and support resilient, pan-European payments infrastructure alongside privateI’m private payment solutions.

In December 2025, the Council of the European Union agreed its negotiating position on two draft regulations: one establishing the legal framework for a potential digital euro, and another strengthening the legal tender status and acceptance of euro cash. Under the agreed approach, the digital euro would be usable online and offline, offer a high degree of privacy, and exist alongside private payment methods such as cards and wallets. To mitigate financial-stability risks, holding limits would apply, with caps set by the ECB within parameters agreed by legislators and reviewed periodically.

The framework brings greater clarity on costs and compensation for PSPs. Core digital euro services (such as account opening, basic payments, and funding/defunding) must be free for consumers, while value-added services may be charged. Interchange and merchant service fees will be capped for a minimum of 5 years, after which caps will be based on actual costs. The framework also mandates fair access to mobile device hardware and software for digital euro services.

Once the legislation is formally adopted by the European Parliament and the Council, the final decision on issuance will rest with the ECB, which has indicated the digital euro could be operational by 2029, subject to successful testing and implementation.

Key dates:

  • Provisional timeline: If EU lawmakers adopt the regulation in 2026, the digital euro could be issued in 2029.
  • Potential overlap with existing instant payment and card infrastructures may lead to revenue displacement or cannibalisation of existing services
  • Strict privacy and data-protection requirements could impose additional compliance burdens
  • Divergence between the EU digital euro and potential UK digital pound or stablecoin regimes could create cross-border interoperability challenge
  • Monitor ECB pilot results and EU legislative progress to assess likely design and distribution models
  • Engage in industry consultations to influence compensation frameworks and technical standards
  • Conduct impact assessments on revenue models, customer demand, and operational requirements compared with current payment rails
  • Plan for interoperability testing with SEPA instant, card networks, and potential UK digital currency or stablecoin regime

Markets in Crypto-Assets Regulation (MiCA)

The EU’s Markets in Crypto-Assets Regulation (MiCA) creates the first comprehensive pan-European framework for cryptoasset issuance, custody, trading, and marketing. It introduces licensing requirements for cryptoasset service providers (CASPs), disclosure obligations for issuers, prudential and conduct standards, and a regime for stablecoins (asset-referenced tokens and e-money tokens).

Grandfathering for existing firms ends on 1 July 2026, after which all CASPs must be MiCA-authorised to operate. Member states may apply shorter transition periods. MiCA also strengthens rules on market abuse, white papers, and marketing, and will be enforced by national competent authorities across the EU.

Key dates:

  • Remaining MiCA legislation came into effect on 30 December 2024, with the grandfathering period ending on 1 July 2026.
  • Firms operating without MiCA authorisation beyond July 2026 risk forced exit from EU markets and enforcement action
  • Exposure to new market-abuse prohibitions and stricter marketing and disclosure standards, with liability for misleading statements
  • Partner or outsourcing arrangements (custody, exchange, marketing) may create hidden perimeter risks if not aligned to MiCA obligations
  • Divergence between MiCA and UK crypto regulation could increase compliance complexity for cross-border groups
  • Undertake a MiCA perimeter review across issuance, custody, trading, and marketing activities to identify authorisation requirements
  • Prepare and submit authorisation applications with supporting governance, capital, and risk frameworks
  • Update white papers, disclosures, and marketing materials to meet MiCA standards

Takeaway points

Q1 2026 marks the point at which several long-signalled reforms become unavoidable. Firms should expect higher compliance costs, greater supervisory scrutiny, and reduced tolerance for weak governance, safeguarding, or financial resilience.

Cryptoasset and stablecoin proposals materially expand the regulatory perimeter. Firms operating across payments, crypto and digital assets must assess cumulative impact across authorisation, prudential capital, disclosures and market conduct, rather than treating each consultation in isolation.

Operational readiness is now decisive. Daily safeguarding reconciliations, enhanced wind-down planning, data standards migration and fraud controls will test systems, people and third-party dependencies well before formal deadlines.

Early engagement with consultations and implementation planning will be critical. Firms that move first will be better positioned to manage regulatory risk, protect customers and compete as the UK payments landscape continues to evolve.

Read more Payments Intelligence

Q2 2026 Regulation Roadmap

A forward-looking overview of key regulatory developments across payments, crypto and financial services, with timelines and practical implications.

Read More »

Upload your profile photo

You need to be logged in to do this!

Membership

Merchant Community Membership

Are you a member of The Payments Association?

Member benefits include free tickets, discounts to more tickets, elevated brand visibility and more. Sign in to book tickets and find out more.

Continue reading

Q1 2026 sees critical payment regulation changes, escalating compliance needs in anti-money laundering, stablecoins, and safeguarding. Join The Payments Association to read the full article.

Become a member to continue reading

Member of The Payments Association? Log in to continue reading