top of page

SwanFS Future Finance Monthly Global Digital Assets Regulatory Intelligence Report — August 2026

Aug 30
25 min read

Report date: Sunday, 30 August 2026 · Review window: 2–29 August 2026


Executive summary


August was the month the United States stopped waiting for Congress. Four federal authorities — the SEC, the Treasury, the CFTC and the OCC — each advanced a load-bearing piece of a crypto market-structure and stablecoin regime by rulemaking, order or charter rather than by statute. At the same time, the CLARITY Act sat parked ahead of a 15 September Senate cloture vote. Elsewhere, the UK produced no new crypto rule but laid dense supervisory groundwork for the 30 September authorisation gateway; the EU was quiet on crypto-specific measures; Hong Kong and Thailand issued the month’s only supervisory expectations addressed directly to virtual asset service providers; and the BIS signalled where international stablecoin policy is heading.

  • [High] United States — SEC. On 18 August, the Commission proposed “Regulation Crypto Assets” (Release 33-11434): two tailored Securities Act offering exemptions ($5 million over four years; $75 million per 12 months), a conditional safe harbour under which a crypto asset ceases to be subject to an investment contract, and preemption of state registration and qualification requirements for covered offers, sales and certain secondary market transactions. Published in the Federal Register on 21 August; comments due 20 October 2026. This is the single most significant development of the month for the firm’s token-distribution and listing perimeter.

  • [High] United States — Treasury. On 17 August, Treasury proposed rules under section 3 of the GENIUS Act defining when a payment stablecoin is “issued in the United States” and when it is “offered or sold” to a person “in the United States”. The underlying obligations are already in statute with fixed dates. From 18 January 2027, digital asset service providers generally may not make foreign-issued payment stablecoins available unless the foreign issuer can and will comply with lawful orders and any reciprocal arrangement; from 18 July 2028, they may not offer or sell any payment stablecoin to US persons unless issued by a licensed issuer. Federal Register 18 August; comments due 19 October 2026. This is the most directly binding item of the month, because it regulates the firm as a distributor.

  • [High] United States — OCC. On 14 August, the OCC granted preliminary conditional approval (Corporate Decision #1385) to charter World Liberty Trust Company, N.A., a national trust bank combining USD1 payment-stablecoin issuance, redemption and reserve maintenance with fiduciary digital-asset custody — confirming a repeatable federal route for issuer-custodians, with published capital and liquidity conditions ($20 million minimum tier 1; 180 days of operating expenses in eligible liquid assets) that serve as a benchmark. The Comptroller separately stated on 11 August that entities engaged in legally permissible digital-asset activities should have a path to a national bank charter, and on 19 August that 23 of 40 recent de novo charter applications involve digital-asset activity and that the OCC intends to issue its final GENIUS Act rule by November.

  • [High] United States — CFTC. On 11 August, the Commission exercised emergency authority ordering KalshiEX, LLC to continue operating under CEA Core Principles after the New York Attorney General sought a nationwide restraining order against its event contracts. US access to prediction markets now rests on a federal pre-emption question being litigated in at least nine states.

  • [High] United States — OFAC. On 7 August, OFAC designated two Iran-based digital asset exchanges (Shelbit Exchange and Aban Tether) and their UAE, Georgian and Polish corporate network, expressly flagging secondary sanctions risk for non-US persons dealing with Iranian digital asset exchanges. This designation set bites across the full product taxonomy at the counterparty and wallet-address layer.

  • [Medium] United States — CFTC policy direction. On 20 August, the Chairman directed staff to explore rules creating a new DCM category — a “crypto asset market” — that could allow non-registrant crypto exchanges to offer leveraged and margined crypto trading under CFTC oversight, expressly contingent on the CLARITY Act stalling; the 15 September cloture vote is the trigger. The same week produced a request for comment on compute derivatives (including perpetual compute futures) and a deregulatory CPO/CTA registration proposal.

  • [Medium] United States — FinCEN. A final rule issued 11 August permanently removes beneficial ownership information reporting for US companies and US persons under the Corporate Transparency Act, and previously reported US-person data will be deleted — removing the BOI database as a corroboration source for US onboarding and widening US/EU/UK divergence in group AML design. Separately, the comment period on the joint stablecoin-issuer customer identification program rule closed 21 August.

  • [Medium] Asia — the month’s only VASP-addressed supervisory expectations. Hong Kong’s SFC issued a circular on 20 August to licensed corporations, SFC-licensed VASPs and associated entities on the risks of receiving client deposits through simplified eDDA arrangements — jurisdiction-neutral controls (verification micro-transfers, deposit limits, withholding periods, red-flag monitoring) applicable to every instant-deposit rail the firm operates. Thailand’s SEC and central bank signalled Travel Rule regulations expected during 2026 and effective February 2027, currently the firmest Travel Rule commencement date on the firm’s Asia calendar.

  • [Medium] United Kingdom — gateway groundwork, no new crypto rules. The FCA published final transaction-reporting rules (PS26/15, 3 August), signalled harder scrutiny of Annex 1 firms including over-reliance on parent-company financial crime controls (7 August), and published high-growth-firm governance findings (10 August) that together read as the standard the FCA will apply at the cryptoasset authorisation gateway opening 30 September. The Crypto and Digital Assets APPG wrote to major UK banks on de-banking (11 August; evidence closes 31 August). Separately, and held at Low materiality as a directional signal, HM Treasury announced a new secondary Bank of England objective to support payments innovation expressly covering systemic stablecoins (27 August).

  • International — direction of travel on stablecoins. The BIS is reported to have published a comparative brief (27 August) flagging that activity restrictions on non-bank stablecoin issuers bind the issuing entity rather than the wider group, and the BIS General Manager argued at Jackson Hole (28 August) that tokenised deposits, not stablecoins, are the sounder path. Neither is a standard; both signal where standard-setters may push next.

  • September is the densest month of the year. The Senate cloture vote (15 September), the FCA gateway opening and the close of both Bank of England stablecoin consultations and the extended MiCA review consultation (22 and 30 September) all land within five weeks of this report.


Priority items


  • 1. US — SEC. Regulation Crypto Assets proposed: offering exemptions, investment-contract safe harbour, state-law preemption. Rule (proposed) · High · 18 Aug 2026; comments due 20 Oct 2026.

  • 2. US — Treasury. GENIUS Act s.3 proposed rule: “issued in the United States”; “offered or sold” to a person “in the United States”. Rule (proposed) · High · 17 Aug 2026; comments due 19 Oct 2026.

  • 3. US — OCC. Preliminary conditional approval to charter World Liberty Trust Company, N.A. (USD1 issuance, fiduciary digital-asset custody, conversion). Authorisation · High · 14 Aug 2026.

  • 4. US — CFTC. Emergency order directing KalshiEX, LLC to continue operating under CEA Core Principles amid New York AG action. Enforcement / order · High · 11 Aug 2026.

  • 5. US — OFAC. Designation of Iranian digital asset exchanges Shelbit and Aban Tether and associated network; secondary sanctions warning. Enforcement · High · 7 Aug 2026 (immediate effect).

  • 6. US — CFTC. Chairman’s “crypto asset market” DCM roadmap; staff directed to engage on-chain protocol developers. Policy agenda (speech) · Medium · 20 Aug 2026; trigger 15 Sep 2026.

  • 7. US — FinCEN. Final rule permanently removing beneficial ownership reporting for US companies and US persons. Rule (final) · Medium · 11 Aug 2026.

  • 8. Hong Kong — SFC. Circular on mitigating risks in receiving deposits through simplified eDDA arrangements. Supervisory circular · Medium · 20 Aug 2026 (applies from issue).

  • 9. Thailand — SEC / BoT. Stablecoin supervision engagement; Travel Rule regulations expected 2026, effective Feb 2027. Supervisory engagement · Medium · 7 Aug 2026; Feb 2027.

  • 10. UK — FCA. PS26/15: final rules replacing the UK MiFIR transaction reporting regime. Rule (final) · Medium · 3 Aug 2026; in force 3 Apr 2028.

  • 11. UK — FCA. Increased scrutiny of Annex 1 firms; warning against reliance on parent-company financial crime controls. Supervisory statement · Medium · 7 Aug 2026.

  • 12. UK — FCA. High-growth firms: good and poor practice (Early and High Growth Oversight pilot). Good and poor practice · Medium · 10 Aug 2026.

  • 13. UK — APPG. ‘Dear CEO’ letter to major UK banks on access to banking for regulated crypto businesses. Parliamentary inquiry · Medium · 11 Aug 2026; evidence closes 31 Aug 2026.

  • 14. US — FinCEN, OCC, Fed, FDIC, NCUA. Comment period closed on the stablecoin-issuer customer identification program rule. Consultation (closed) · Medium · 21 Aug 2026.


1. SEC — Regulation Crypto Assets [High]


Jurisdiction/regulator: United States — Securities and Exchange Commission (Release 33-11434; File No. S7-2026-27)


Publication date: 18 August 2026; Federal Register 21 August 2026 (verified)


Summary. The Commission proposed a tailored securities offering framework for certain investment contracts involving crypto assets, following its March 2026 interpretive release. It comprises a one-time “startup exemption” permitting offerings of up to $5 million over four years; a “fundraising exemption” permitting offerings of up to $75 million in every 12 months, with financial-condition disclosure, audited financial statements at certain thresholds and ongoing reporting; a conditional safe harbour under which a crypto asset is deemed no longer subject to an investment contract where the issuer certifies it has ceased or terminated all essential managerial efforts it promised to undertake and satisfies other conditions; and preemption of state securities registration and qualification requirements for covered offers, sales and certain secondary market transactions. Antifraud and antimanipulation provisions continue to apply. The meeting to consider the proposal had been noticed for 14 August and cancelled on 13 August; the proposal was then issued without an open meeting. No dissenting Commissioner statement had been published as at month-end, which bears on the proposal’s durability.


CASP implications. The most significant development for ecosystem and platform features (launchpads, launchpools, TGEs, airdrops) since the regime question arose, and it materially changes the US listing perimeter for spot trading. The safe harbour gives the listing committee a certifiable end-state for a token’s security status; state preemption removes the blue-sky overlay that has made US token distribution impractical at scale. Read with the Treasury and CFTC items, three agencies are building a market-structure regime by rule rather than waiting for statute. The risk is premature reliance: an issuer that self-assesses into the safe harbour before final rules, or a venue that lists on that basis, would be exposed if conditions tighten between proposal and adoption.


Timeline. Proposed 18 August 2026; Federal Register 21 August 2026; comments due 20 October 2026 (verified against the Federal Register notice).


Impact assessment.


  • Business model risk: Opportunity-led. If adopted broadly as proposed, US token distribution becomes viable inside a defined perimeter, and a listing framework built on the assumption that US primary distribution is closed will be out of date.

  • Revenue impact: Potentially material and positive over a multi-quarter horizon — US primary issuance, launchpad participation and associated secondary listing flow are currently largely foregone. No revenue should be modelled from a proposal.

  • Suggested actions: This month — complete the working group read of release 33-11434 across listings, legal and product. This quarter — file a comment by 20 October addressing the safe-harbour certification conditions and secondary-market preemption scope; prepare, without implementing, a US token-distribution operating model.


2. US Treasury — GENIUS Act section 3 proposed rule [High]


Jurisdiction/regulator: United States — Department of the Treasury


Publication date: 17 August 2026; Federal Register 18 August 2026 (verified)



Summary. Treasury proposed rules implementing section 3 of the GENIUS Act, defining what it means to “issue a payment stablecoin in the United States” — which determines when an issuer needs a GENIUS licence — and what it means to “offer or sell” a payment stablecoin to a person “in the United States”. Three statutory milestones frame the rule: from 18 January 2027, the Act’s expected effective date, a person generally may not issue a payment stablecoin in the United States without an appropriate federal or state licence, and digital asset service providers generally may not make foreign-issued payment stablecoins available unless the foreign issuer has the technological capability to comply with, and will comply with, lawful orders and any reciprocal arrangement; from 18 July 2028, digital asset service providers generally may not offer or sell any payment stablecoin to persons in the United States unless a licensed issuer issues it.


CASP implications. The most directly binding item of the month, because it regulates the firm as a digital asset service provider, not merely as a prospective issuer. It goes to fiat and payment solutions (stablecoin rails, on/off ramps), spot trading (any pair quoted against a foreign-issued stablecoin) , and stablecoin yield. Two definitions determine everything: the extraterritorial reach of “offer or sell to a person in the United States”, and the foreign-issuer condition — in practice a freeze-and-seize capability assessment on every listed stablecoin. Unlike the SEC proposal, the underlying obligations are already in statute with fixed commencement dates; the rulemaking only settles scope. Delisting decisions may be forced on a timetable the firm does not control.


Timeline. Proposed 17 August 2026; Federal Register 18 August 2026; comments due 19 October 2026 (verified). Statutory milestones: 18 January 2027 and 18 July 2028.


Impact assessment.


  • Business model risk: High and dated. A listed foreign-issued stablecoin whose issuer cannot meet the lawful-order condition becomes undistributable to US persons from 18 January 2027; every listed payment stablecoin must trace to a licensed issuer from 18 July 2028.

  • Revenue impact: Potentially material and negative if US-facing stablecoin pairs depend on issuers that will not obtain a licence or cannot meet the technological condition. Magnitude not determinable until the definitions are final.

  • Suggested actions: This month — complete the inventory of every payment stablecoin the firm makes available, its issuer, jurisdiction and licensing trajectory. This quarter — assess each foreign issuer against the lawful-order and reciprocal-arrangement condition, model delisting scenarios for 18 January 2027, and file a comment by 19 October on the extraterritorial scope of “offer or sell”.


3. OCC — World Liberty Trust Company charter approval, and the wider chartering posture [High]


Jurisdiction/regulator: United States — Office of the Comptroller of the Currency

Publication date: 14 August 2026 (Corporate Decision #1385); related statements 11 and 19 August 2026



Summary. The OCC granted preliminary conditional approval to charter a national trust bank whose proposed activities are USD1 payment-stablecoin issuance, redempti,on and reserve maintenance in a non-fiduciary capacity; digital-asset custody as a fiduciary; and conversion services for custody clients — assuming the issuer role from BitGo Bank & Trust, N.A. Approval carries seven conditions enforceable under 12 USC 1818, including GENIUS Act conformance, a $20 million minimum tier 1 capital floor with liquidity sub-limits, and 180 days of operating expenses in eligible liquid assets; it expires if capital is not raised within 12 months or the bank does not open within 18. The decision sits inside a stated chartering posture: the Comptroller said on 11 August that entities engaged in legally permissible digital-asset activities should have a path to a national bank charter, noting 40 de novo applications in 18 months and decisions in many cases within 120 days of a complete application, and on 19 August that 23 of the 40 involve digital-asset activity and that the OCC intends its final GENIUS Act rule out by November.


CASP implications. Confirms a repeatable federal route to combine payment-stablecoin issuance with fiduciary digital-asset custody in a single supervised entity, and expands the competitor set of chartered issuer-custodians. Bears on fiat and payment solutions, institutional and VIP services (qualified custody) and stablecoin yield. The published capital and liquidity conditions are a usable benchmark for the OCC’s current entry price; the 120-day figure is achieved “in many cases”, not a committed service standard. Fee-free USD1 issuance and redemption at launch exerts downward pressure on institutional stablecoin distribution economics.


Timeline. Preliminary conditional approval 14 August 2026; conditions 3–6 run through the organisation period and the first three years. OCC final GENIUS Act rule targeted for November 2026.


Impact assessment.


  • Business model risk: Low direct risk, material competitive risk: federally chartered issuer-custodians may become the default institutional counterparty, compressing the addressable market for non-chartered providers.

  • Revenue impact: No direct effect in the month; directional pressure on issuance/redemption spreads and conversion fees.

  • Suggested actions: This quarter — complete the build/partner assessment of a US national trust charter route, benchmarked against the published World Liberty conditions, and review institutional custody pricing against a fee-free issuance/redemption competitor. Track the OCC’s November GENIUS rule alongside Treasury’s section 3 rulemaking as a single licensing-perimeter map.


4. CFTC — Emergency authority exercised in respect of KalshiEX, LLC [High]


Jurisdiction/regulator: United States — Commodity Futures Trading Commission

Publication date: 11 August 2026



Summary. The Commission exercised its emergency authority in response to KalshiEX, LLC’s notification of a market emergency and ordered the exchange to continue operating in accordance with CEA Core Principles, after the New York Attorney General filed a complaint on 31 July seeking a temporary restraining order prohibiting KalshiEX from offering all event contracts nationwide and more than $36 billion in damages. The release records CFTC suits against nine states and amicus briefs in the Sixth and Ninth Circuits and the Massachusetts Supreme Judicial Court. Read with the Division of Market Oversight’s 12 August advisory on self-certification of incentive programs for prediction markets (Staff Letter 26-23) and the Chairman’s signalled Parts 38 and 40 amendments, August’s direction on event contracts is a coordinated federal defence of pre-emption paired with tightening conduct expectations.


CASP implications. The most consequential development of the month for Web3, DeFi and wallets (prediction markets). US access to event contracts rests on an unresolved federal pre-emption question litigated in at least nine states simultaneously, and the CFTC is holding the line by emergency order rather than rulemaking. Any wallet-hosted prediction market routing US order flow to a CFTC-designated contract market inherits that exposure; a state-level injunction against a DCM would propagate to integrated front-ends without warning. Incentive and rebate programmes for US event contracts now need earlier regulatory sequencing with the listing venue.


Timeline. Emergency order issued 11 August 2026; no hearing, expiry or review date specified. New York complaint filed 31 July 2026.


Impact assessment.


  • Business model risk: High for prediction-market integrations serving US persons. The binary outcome — federal pre-emption upheld or state gaming law applied — determines whether the product line is viable nationwide or fragments into a state-by-state permission map.

  • Revenue impact: Contingent. An adverse state outcome would remove US event-contract volume from the integrated product line entirely.

  • Suggested actions: This quarter — complete the state-level exposure map across the nine litigating states, maintain the short-notice geofencing playbook, take external US derivatives counsel on pre-emption, and rebuild the incentive-programme approval workflow to front-load DCM certification.


5. OFAC — Designation of Iranian digital asset exchanges Shelbit and Aban Tether [High]


Jurisdiction/regulator: United States — Department of the Treasury, Office of Foreign Assets Control


Publication date: 7 August 2026 (immediate effect)



Summary. OFAC designated Siavash Kayvanpour, operator of Shelbit Exchange through Georgia-registered SHPS Shelbit, together with UAE-based Shelbit General Trading LLC, Poland-based Shelbit Technologies Ltd, and UAE-based Crypto Home DMCC and NFT Home DMCC, under E.O. 13224 as amended; Iran-based Aban Tether was separately designated under E.O. 13902 for operating in the Iranian financial sector and processing transactions involving previously designated Iranian exchanges. The stated basis is an IRGC nexus rather than sanctions evasion in the abstract: OFAC records that IRGC digital currency addresses sent the equivalent of over $1 million in digital assets to Shelbit addresses, that Kayvanpour transferred funds to previously designated entities including Nobitex, and that Shelbit serviced a large Persian-language gambling website network run from outside Iran, through which tens of millions of dollars of the network’s digital assets were laundered — the gambling enterprise being the mechanism that obscured the origin of the funds. The release directs readers to OFAC FAQs 1250 and 1257 on sanctions risk — including secondary sanctions risk — associated with Iranian digital asset exchanges, and notes that the UAE’s VARA took enforcement action against Shelbit General Trading in January 2025 and July 2026 without the entity ceasing business.


CASP implications. The designations bite across the full product taxonomy at the counterparty and wallet-address layer: fiat ramps, OTC and conversion, P2P and Web3 wallet-mediated flows are the exposure points. The explicit secondary sanctions warning means non-US group entities cannot treat this as a US-perimeter matter. The VARA observation — a sanctioned entity continuing to operate — is a supervisory signal that regulator enforcement lists are a lagging control; licensing status alone is not a counterparty risk proxy. For screening and look-back scope, the typology is the operative part, not the entity list: the pattern to test for is gambling-network settlement flow through an exchange counterparty, not only the six named entities and their known addresses.


Timeline. Effective on designation, 7 August 2026. Blocking and reporting obligations immediate for US persons and property transiting the United States.

Impact assessment.

  • Business model risk: Screening and chain-analytics rules require same-cycle updating, with a look-back review of historic exposure extending to indirect exposure via the 50 per cent ownership rule. No product line needs to be withdrawn.

  • Revenue impact: Negligible direct effect; operational cost absorbable within existing financial crime resourcing unless the look-back surfaces material historic exposure.

  • Suggested actions: This quarter — confirm the look-back completed and any blocking reports are filed; review the Iran-nexus element of the sanctions risk assessment and reliance on third-party exchange counterparties in the UAE and Georgia.


6. CFTC — Chairman’s “Roadmap for the New Frontier of Finance” [Medium]


Jurisdiction/regulator: United States — Commodity Futures Trading Commission


Publication date: 20 August 2026



Summary. At the inaugural Innovation Advisory Committee meeting, Chairman Selig stated he has directed staff to begin exploring rules to codify a CFTC market structure for crypto assets using existing authorities — a new DCM category, a “crypto asset market”, that could enable current registrants and non-registrant crypto exchanges to offer leveraged and margined crypto trading under purpose-fit rules — and to engage with developers of on-chain finance protocols on lawful US offering routes. He said he would pursue this rulemaking if the CLARITY Act continues to stall; the Senate cloture vote on H.R. 3633 is scheduled for 15 September 2026. The same week, the Commission opened a request for comment on compute derivatives, including perpetual compute futures (19 August; comments due c. 20 October), and proposed CPO/CTA registration exemptions for SEC-registered advisers to sophisticated-investor pools (18 August; comments due c. 5 October). The remarks carry an express disclaimer that the views are the Chairman’s own.

C

ASP implications. The most consequential forward signal of the month for spot and margin trading and institutional access: a CFTC “crypto asset market” designation would be the first realistic US onshoring route for a non-US exchange. The developer-engagement directive is the first concrete federal outreach touching DeFi integrations. The compute request positions a new commodity class adjacent to the firm’s perpetuals franchise; the CPO/CTA proposal would remove a dual-registration burden shaping institutional managed-account structures. None of this is binding.


Timeline. Remarks 20 August 2026; no dates for directed workstreams. Trigger: 15 September cloture vote.


Impact assessment.


  • Business model risk: Two-sided — a US registration route would also bring DCM core principles and self-regulatory obligations onto leveraged crypto trading. On prediction markets, direction is toward more constraint.

  • Revenue impact: Not determinable; potentially large and positive if a US route opens.

  • Suggested actions: This quarter — complete the feasibility assessment of a CFTC crypto asset market designation with the 15 September vote as the trigger; decide whether to comment on the compute request by the indicative 20 October deadline; map institutional structures against the proposed CPO/CTA exemption conditions.


7. FinCEN — Final rule ending beneficial ownership reporting for US companies and US persons [Medium]


Jurisdiction/regulator: United States — Financial Crimes Enforcement Network

Publication date: 11 August 2026



Summary. FinCEN issued a final rule permanently removing the requirement for US companies and US persons to report beneficial ownership information under the Corporate Transparency Act, effective on Federal Register publication. Previously reported US-person data will be deleted from the BOI database; foreign reporting companies remain in scope for foreign individuals. Separately, the comment period closed on 21 August on the joint FinCEN/banking-agency proposed rule requiring permitted payment stablecoin issuers to maintain a customer identification program under the Bank Secrecy Act — the AML half of the GENIUS implementation stack.


CASP implications. The firm’s own CDD obligations are unchanged, but the evidence environment shifts: the BOI database ceases to be a corroboration source for US corporate and institutional onboarding. Group policies assuming a single global beneficial-ownership standard need a US carve-out, and the US/EU/UK divergence belongs in the group AML risk assessment. On the CIP rule: a group stablecoin issuance strategy would carry a full bank-style CIP obligation at the issuer level, which cannot be inherited from the distribution platform.


Timeline. Final rule issued 11 August 2026, effective on Federal Register publication; no deletion date stated. CIP rule: final rule pending; reported 12-month implementation from finalisation.


Impact assessment.


  • Business model risk: Low; the risk is control-design drift where onboarding workflows referenced BOI data.

  • Revenue impact: Broadly neutral.

  • Suggested actions: This quarter — reissue US entity-verification standards without BOI reliance; record the divergence in the group AML risk assessment; consolidate the CIP, Treasury s.3 and OCC workstreams into a single view of what a US stablecoin issuance entity would have to operate.


8. Hong Kong SFC — Circular on simplified eDDA deposit arrangements [Medium]


Jurisdiction/regulator: Hong Kong — Securities and Futures Commission


Publication date: 20 August 2026 (applies from issue)



Summary. The SFC issued a circular to licensed corporations, SFC-licensed virtual asset service providers and associated entities on the risks of receiving client deposits through simplified electronic Direct Debit Authorisation arrangements, under which a client sets up an FPS direct-debit authorisation inside the firm’s own app — removing a bank-side control point. The SFC identifies impersonation/unauthorised-access risk and indemnity/financial risk, and sets out expected measures: a pre-implementation assessment of indemnity terms and the firm’s capacity to absorb the risk; verification of authorisation before processing set-up requests, including small-value verification transfers; ongoing red-flag monitoring (repeated failed attempts, unusual deposit patterns, suspicious conversions into virtual assets) with STR filing; mitigation through transaction limits, withholding periods or enhanced authentication; and client disclosure of eDDA settings.


CASP implications. The only supervisory circular of the month addressed to the firm’s licence category by name, and immediately actionable without waiting for a rulemaking to conclude. The control set is jurisdiction-neutral and should be assessed against every instant-deposit rail the firm operates, not only Hong Kong’s FPS. The indemnity analysis is a balance-sheet question: in a simplified arrangement, the firm, not the bank, generally carries the loss on an unauthorised set-up. The practical inspection test is whether the pre-implementation assessment and red-flag monitoring can be evidenced.


Timeline. Issued 20 August 2026; supervisory expectations apply from issue.


Impact assessment.


  • Business model risk: Moderate and immediate for any SFC-licensed group entity offering simplified eDDA; a live read-across risk elsewhere.

  • Revenue impact: Small and negative at the margin — verification friction in the fastest deposit channel — and worth accepting against fraud losses borne under the indemnity.

  • Suggested actions: This quarter — extend the control set to every instant-deposit rail globally: authorisation verification, limits and withholding periods for newly registered accounts, deposit-then-convert red-flag monitoring, and client-facing disclosure of stored payment authorisations.


9. Thailand — SEC and Bank of Thailand on stablecoin supervision and the Travel Rule [Medium]


Jurisdiction/regulator: Thailand — Securities and Exchange Commission, jointly with the Bank of Thailand


Publication date: 7 August 2026



Summary. The SEC and BOT met with digital asset business operators to discuss supervisory approaches to stablecoin transactions — enhanced customer identification and due diligence, profiling-based daily withdrawal limits, Travel Rule implementation, smart detection of suspicious patterns, and screening for mule accounts and high-risk wallets — with monitoring focused on USDT and USDC. Travel Rule regulations are expected to be issued during 2026 (indicatively August, though sources conflict) and to come into effect in February 2027.


CASP implications. A dated near-term compliance obligation rather than a policy signal — currently the firmest Travel Rule commencement date on the firm’s Asia calendar. Profiling-based withdrawal caps are a product constraint that must be built into the limits engine, not bolted onto surveillance. Travel Rule implementation requires counterparty VASP discovery and a messaging-protocol decision, with lead time realistically longer than the runway between issuance and effect. The joint SEC/BOT framing groups payments-side and securities-side treatment, reducing arbitrage between the two perimeters.


Timeline. Meeting reported 7 August 2026; regulations expected during 2026; effective February 2027.


Impact assessment.


  • Business model risk: Moderate and operational for any group entity licensed in Thailand or serving Thai residents; a template for ASEAN Travel Rule direction elsewhere. A firm without a solution before February 2027 faces a hard stop on non-compliant transfers.

  • Revenue impact: Moderate cost increase (tooling, counterparty onboarding); profiling-based caps can suppress volume at the high-value end.

  • Suggested actions: This quarter — scope Travel Rule implementation against a February 2027 go-live, select a protocol and interoperability provider, and monitor sec.or.th for the implementing regulations.


Other medium-materiality developments


  • UK — FCA, PS26/15 (3 August). Final rules replacing the UK MiFIR transaction reporting regime: 52 reportable fields (from 65), EU-only-traded instruments and FX derivatives removed from scope, estimated industry savings above £100 million annually; schema consultation October 2026; in force 3 April 2028. Not crypto-specific, but the group’s UK MiFID entity sits inside the perimeter, and the October schema consultation is the gating item for the reporting-logic rebuild. FCA PS26/15

  • UK — FCA on Annex 1 firms (7 August). Increased scrutiny of Annex 1 financial institutions, warning specifically against over-reliance on parent-company financial crime controls; longer registration processing; an information request to around 900 firms. The central criticism describes the standard operating model of a UK subsidiary in a global CASP group — expect the same challenge at the cryptoasset authorisation gateway. FCA statements

  • UK — FCA high-growth firms findings (10 August). Good and poor practice from the Early and High Growth Oversight pilot: governance, wind-down planning, control frameworks keeping pace with growth. No new obligation, but the clearest published articulation of the standard a fast-scaling applicant will be assessed against from 30 September. Run the six finding areas as a gap assessment against the UK application pack. FCA — high-growth firms

  • UK — Crypto and Digital Assets APPG (11 August). ‘Dear CEO’ letter to major UK banks under the inquiry into Access to Banking Services; written evidence closes 31 August. Fiat access is the binding operational constraint on GBP rails; the month’s window to put the firm’s account-access experience on the parliamentary record effectively closes with this report. CryptoUK — APPG letter

  • US — SEC open meeting noticed then cancelled (10–13 August). The Sunshine Act notice for a 14 August open meeting on a tailored crypto offering regime was cancelled on 13 August; the proposal then issued on 18 August without a meeting, and is recorded here for completeness of the month’s sequence.

  • US — CFTC DMO advisory, Staff Letter 26-23 (12 August). Expectations for self-certification of market-maker, liquidity and incentive programs, particularly for event contracts — folded into item 4’s suggested actions. CFTC Release 9282-26

  • EU — EMIR workstreams (3–18 August). The ESAs submitted final draft RTS relieving below-threshold counterparties of initial margin on existing uncleared OTC contracts (3 August); the EBA opened a consultation on recurring reporting for ISDA SIMM users (5 August; closes 2 November); ESMA consulted on annual reporting of clearing activity at recognised third-country CCPs under EMIR 3 (18 August; closes 12 October). Relieving or administrative in direction; applicability turns on group structure. Assess the first two together — a below-threshold entity ceasing initial margin exchange would not need SIMM validation.


Also noted (low materiality)


United Kingdom. HM Treasury announced (27 August) a new secondary Bank of England objective to support innovation in payment systems and emerging forms of digital money — expressly covering systemic payment systems using digital settlement assets, including stablecoins — to be implemented by amendment to the Financial Services and Markets Bill 2026-27, with Lords debates expected 7 and 9 September; no immediate obligations, but a favourable directional signal for the Bank’s emerging systemic stablecoin regime (gov.uk). The Bank of England deferred the November 2026 RTGS standards release in its entirety, including CHAPS messaging, following Swift’s same-day decision (27 August) — rebaseline sterling payment-message change programmes (Bank of England). The FCA updated EMI/PI variation-of-permission timelines (17 August): a complete application takes around three months, and an incomplete one has a 10-month operational target — file complete ahead of the gateway. The Insolvency Service and FCA publicised the public-interest winding-up of Key Coin Assets Ltd (18 August), and the FCA issued an unauthorised-firm warning for “Sygnum Global” (21 August) — brand-monitoring relevance.


European Union. The EBA opened two prudential consultations relevant to group banking/MiFID entities rather than CASP activity: reclassification of investment firms as credit institutions under the €30bn threshold (25 August; closes 25 November) and operational risk management RTS under Article 323 CRR3 (26 August; closes 31 December). The ECB opened a call for expression of interest on standards for the offline digital euro (18 August; closes 25 September) — the firm is not an eligible participant, but an offline digital euro on standard handset secure elements is a bearer-instrument competitor to euro stablecoin payments. The ECB’s euro-area company survey (13 August) found 0.2% of online-selling companies accept crypto-assets — a useful official-sector counterweight to third-party adoption claims.


International. The BIS Financial Stability Institute published FSI Brief No 33 (27 August) comparing stablecoin issuance regimes across the EU, Hong Kong, Singapore, the UK and the US and finding that activity restrictions bind the issuing entity rather than the wider corporate group — affiliates of a non-bank issuer may lend, stake or hold custody where the issuer itself may not — a gap standard-setters may push next. Reported, not verified: the brief number carried in the weekly (FSI Briefs No 33) does not resolve on bis.org and the primary document could not be located at month-end, so the item is held on secondary sourcing until the citation is confirmed. The BIS General Manager argued at the Kansas City Fed’s Jackson Hole symposium (28 August) that tokenised deposits settling in central bank money are the sounder path than stablecoins (BIS speech). APRA’s 2026-27 Corporate Plan (20 August) includes development of a prudential framework for large stored value facility providers — a perimeter question for any Australian entity holding client fiat balances.


United States. Comptroller Gould’s remarks at the Wyoming Blockchain Symposium (19 August) — the charter-application figures and November GENIUS rule target — are covered within item 3. Identified but not verified against a primary source: the SEC’s crypto custody rule proposal for investment advisers was reported (25–26 August) to have been sent to OMB for review — a pre-publication procedural step signalling that a custody rulemaking bearing on institutional and VIP services is imminent; carried as a watch item. The Bank of Russia’s reported draft directive restricting non-qualified investors to BTC, ETH and USDT with a RUB 300,000 annual ceiling remains secondary-sourced only.


Horizon scan (next 90 days)

Items marked “verified” were re-checked against primary sources in this run; all other items are carried forward from the weekly reports and were not independently re-verified for this consolidation.


  • 1 Sep 2026 — Russia. Reported entry into force of Federal Law No. 282-FZ on retail access to digital assets (secondary sourcing).

  • 5 Sep 2026 — Pakistan (PVARA). Deadline for transitional VASPs to submit NOC applications under s.70 Virtual Assets Act 2026, or cease operations.

  • 7 & 9 Sep 2026 — UK (Parliament). Lords debates on FSM Bill amendments, including the Bank of England secondary payments innovation objective.

  • 7–29 Sep 2026 — UK (FCA). Cryptoasset webinar series: admissions and disclosures/MARC (7), stablecoin issuance (11), regulated activities (15), Handbook application (18), getting authorised (22), prudential regime (29).

  • 15 Sep 2026 — US (Senate). Cloture vote on H.R. 3633 (CLARITY Act); 60 votes required. Double trigger: the SEC Chairman called legislation “indispensable”; the CFTC Chairman will propose his own market-structure rules if the bill stalls.

  • 17 Sep 2026 — US (SEC). Roundtable on preparations for 24-hour trading in US equity markets.

  • 21 Sep 2026 — UK (FCA). First submissions of equity documents must include the new inside information declaration form.

  • 22 Sep 2026 — UK (Bank of England). Consultation closes on the draft Code of Practice for sterling-denominated systemic stablecoin issuers (verified; the Bank intends to finalise by end-2026).

  • 25 Sep 2026 — EU (ECB). Offline digital euro call for expression of interest closes.

  • 30 Sep 2026 — EU (Commission). MiCA review targeted consultation closes — deadline extended from 31 August; verified on the Commission’s consultation page.

  • 30 Sep 2026 — UK (BoE/FCA). Consultation closes on the joint approach to regulating systemic stablecoin issuers (verified).

  • 30 Sep 2026 — UK (FCA). Cryptoasset authorisation gateway opens; application window to 28 Feb 2027.

  • 1 Oct 2026 — UK (FOS). Redress Reforms (No 2) Instrument 2026 comes into force.

  • 5 Oct 2026 (indicative) — US (CFTC). Comments close on the CPO/CTA registration proposed rule.

  • 6 Oct – 13 Nov 2026 — South Korea (KRX). Mock trading for the Novel Securities Market; market opens 16 Nov 2026.

  • Oct 2026 — UK (FCA). Consultation on transaction reporting schema, validation rules and transitional provisions (per PS26/15).

  • Oct 2026 — South Korea. Serious Crimes Investigation Agency formally established, including a virtual-asset crimes division.

  • 12 Oct 2026 — EU (ESMA). Consultation closes on third-country CCP clearing-activity reporting (EMIR 3).

  • 19 Oct 2026 — US (Treasury). Comments due on the GENIUS Act s.3 NPRM (verified against the Federal Register notice).

  • 20 Oct 2026 — US (SEC). Comments due on Regulation Crypto Assets (verified against the Federal Register notice).

  • 20 Oct 2026 (indicative) — US (CFTC). Comments close on the compute derivatives request for comment.

  • Nov 2026 (no date) — US (OCC). Final GENIUS Act rule intended by November (per Comptroller Gould, 19 August).

  • 2 Nov 2026 — EU (EBA). ISDA SIMM reporting consultation closes.

  • 25 Nov 2026 — EU (EBA). Investment-firm reclassification RTS consultation closes.


Fixed anchors beyond 90 days. EBA operational risk RTS consultation closes 31 Dec 2026; the Bank of England intends to finalise the systemic stablecoin Code of Practice by end-2026; GENIUS Act expected effective date 18 Jan 2027 (issuance licensing; foreign-issued stablecoin condition on distributors); Korea Token-Securities Act takes effect 4 Feb 2027; Thailand Travel Rule regulations effective Feb 2027; the FCA authorisation window closes 28 Feb 2027; the UK cryptoasset regime is in force 25 Oct 2027; the UK transaction reporting regime is in force 3 Apr 2028; the GENIUS Act licensed-issuer requirement for offers and sales to US persons applies from 18 Jul 2028.


Watch items with no fixed date. SEC investment-adviser crypto custody proposal under OMB review (reported, unverified); CFTC Parts 38/40 event-contract amendments expected “soon”; rescheduled/contingent CFTC crypto asset market rulemaking (trigger: 15 September); FCA final perimeter guidance for regulated cryptoasset activities expected autumn 2026; revised Bank of England RTGS/ISO 20022 timetable; APRA stored value facility prudential framework; MAS AI risk management guidelines.

 
 

Sign up to be notified about the latest updates of what we think

The posts listed on the 'What we think' webpages are our interpretation of regulatory developments we have been reading about. They should not be considered legal, regulatory or other advice. Contact us if you want to understand the impact of public policy, regulation and governance changes for you.

bottom of page