top of page

SwanFS Future Finance Monthly Global Digital Assets Regulatory Intelligence Report — July 2026

Aug 2
29 min read

Monthly Global Digital Assets Regulatory Intelligence Report

July 2026


Prepared for the Board (CEO, CFO, CRO, COO) — global crypto-asset firm

Report Date: Saturday, 1 August 2026


Executive Summary


In July 2026, the two major cryptocurrency regulatory regimes transitioned from potential status to active enforcement. The European Union’s Markets in Crypto-Assets (MiCA) transitional period ended on July 1, requiring unauthorised Crypto Asset Service Providers (CASPs) to shut down their operations. Meanwhile, the United Kingdom finalised its regulatory framework on June 30, provided pre-application support in July, and continued amending the Handbook text throughout July.


The second significant development of the month involved prediction markets. On July 3, the European Securities and Markets Authority (ESMA) confirmed that event contracts are equivalent to binary options, which are already banned for EU retail investors. In the United States, the Commodity Futures Trading Commission (CFTC) closed its comment window for rulemaking on July 27 and issued warnings to venues regarding bulk self-certification on July 24. Additionally, on July 31, New York State filed a lawsuit against Kalshi, with the CFTC pursuing a federal court motion to halt its operations. The outcome of the pre-emption ruling is now crucial for the product line.


The third area of focus was the U.S. market structure in the absence of Congressional action. The deadline for the GENIUS Act’s rulemaking passed on July 18, with all proposals concerning stablecoins still under consideration. The CLARITY Act has stalled, and the CFTC introduced a notice of proposed rulemaking (NPRM) addressing conflicts of interest for vertically integrated venues on July 30.


At the same time, regulatory fragmentation at the state level has accelerated. California’s cryptocurrency licensing requirements took effect on July 1, and Illinois enacted a pioneering crypto transfer tax, which is currently facing legal challenges.

  • [High] [EU] MiCA transitional period ended 1 July — authorisation now mandatory EU-wide; ESMA set wind-down expectations, AMLA flagged customer-migration ML/TF concentration risk, and the CASP register passed 270 authorised firms.

  • [High] [EU] ESMA confirmed (3 Jul) that event contracts are binary options: retail marketing, distribution and sale are already prohibited EU-wide, and the Commission is consulting on prediction contracts in the MiCA review (to 30 Sep).

  • [High] [UK] The FCA completed the UK cryptoasset regime (PS26/9–13, 30 Jun) and implementation began through July: PASS opened, guidance-consultation responses fell due 30 July, and Handbook Notice 143 (31 Jul) shows cryptoassets Handbook text still moving. Authorisation window opens 30 September.

  • [High] [US] California’s DFAL licensing requirement took effect 1 July — a de facto market-access gate for the largest US state market; Illinois’ 0.2% digital-asset transfer tax (effective 2027) drew suits from the Digital Chamber and Kalshi.

  • [High] [US] The CFTC proposed conflicts rules for vertically integrated venues (30 Jul) — informational, personnel and technology separation between exchanges and affiliated market makers, with proprietary trading firms barred from affiliated venues under proposed Reg 38.852(b).

  • [High] [US] New York sued Kalshi (31 Jul) seeking reported penalties of at least $36bn on the theory that CFTC registration does not displace state gambling law; the CFTC filed an emergency pre-emption motion under an hour earlier.

  • [Medium] [UK] HM Treasury’s Mansion House package (13–16 Jul) set the UK growth agenda — wholesale tokenisation blueprint, UK–US Transatlantic Taskforce and joint stablecoin statement, payments modernisation and DSA fee consultations, and a Q1 2027 date for the first DIGIT digital-gilt transaction — while the draft Cryptoassets (Amendment) Regulations would narrow the settlement exclusion from safeguarding, directly affecting the firm’s settlement-float position.

  • [Medium] [Standard-setters] FATF published its seventh targeted update (16 Jul) and a DeFi report (21 Jul): Recommendation 15 applies where a person exercises “control or sufficient influence” — the template supervisors will use to pull DeFi front-ends into AML perimeters; 93% of jurisdictions have not yet implemented the Standards for DeFi.


Priority Table

#

Region

Item

Type

Materiality

Key Date

1

Europe

MiCA transitional period ends; CASP authorisation mandatory EU-wide; ESMA wind-down expectations; AMLA migration-risk advisory.

Legislation / supervisory statements

High

1 Jul 2026

2

Europe

ESMA public statement: binary-options product intervention measures apply to event contracts/prediction markets

Supervisory statement

High

3 Jul 2026

3

Europe

EU 21st Russia sanctions package: transaction bans on 14 crypto platforms; third-country ban mechanism

Legislation (sanctions)

Medium

Adopted 23 Jul; crypto entries in force Aug 2026

4

Europe

ESMA operationalises MiCA supervision: custody-resilience CSA (8 Jul), MiCA Q&As (10 Jul); AMLA direct-supervision ITS (21 Jul)

Supervisory action/guidance/standards

Medium

8–21 Jul 2026

5

UK

FCA completes the UK cryptoasset regime (PS26/9–13) and begins implementation; Handbook Notice 143

Final rules

High

30 Jun – 31 Jul 2026; gateway 30 Sep

6

UK

Systemic stablecoins: BoE policy statement and draft Code of Practice; BoE/FCA joint approach to dual regulation

Policy statement/consultation

Medium

22–30 Jun; closes 22 and 30 Sep

7

UK

Mansion House digital package: tokenisation blueprint, Transatlantic Taskforce, payments modernisation, DSA fees, DIGIT

Reports/consultations

Medium

13–16 Jul 2026

8

UK

Perimeter in motion: draft Cryptoassets (Amendment) Regulations; FMLC uncertainty warnings; CP26/13 perimeter guidance

Draft legislation/consultation responses

Medium

21 Apr SI; FMLC 27 Jul

9

Asia-Pacific

Japan reclassifies crypto as financial assets under FIEA; insider-trading rules; path to ETFs and 20% flat tax

Legislation

Medium

c. 15 Jul 2026

10

Asia-Pacific

AUSTRAC Travel Rule takes effect (zero threshold); ASIC no-action extended to 30 Sep

Legislation/relief

Medium

1 Jul 2026

11

US

California DFAL licensing requirement takes effect for firms serving California residents.

Legislation

High

1 Jul 2026

12

US

CFTC NPRM on affiliations and conflicts of interest among CFTC-regulated entities

Proposed rule

High

30 Jul 2026

13

US

Prediction markets under multi-front challenge: NY AG v Kalshi; CFTC pre-emption motion; DMO advisory; NPRM comments close

Enforcement/advisory/rulemaking

High

24–31 Jul 2026

14

US

GENIUS Act rulemaking deadline missed; stablecoin packages remain proposals; Circle receives OCC national trust charter

Legislative milestone/authorisation

Medium

10 and 18 Jul 2026

15

US

Senate releases merged CLARITY Act text with White House-agreed ethics provisions; floor vote possibly 3 Aug.

Legislative milestone

Medium

22 Jul 2026

16

Standard-setters

FATF seventh targeted update on VA/VASP standards and targeted report on DeFi (“control or sufficient influence”)

Standard-setter reports

Medium

16 and 21 Jul 2026

Europe


HIGH  1. MiCA transitional period ends — authorisation now mandatory EU-wide

Jurisdiction/Regulator: EU (all Member States) / ESMA, national competent authorities, AMLA


Publication Date(s): 1 July 2026 (statutory deadline); ESMA statement 23 June; AMLA advisory 29 June; ESMA MiCA register update late July



Summary: The national-regime-to-MiCA transitional period ended across the EU on 1 July. Any entity providing crypto-asset services to EU clients without MiCA authorisation must have ceased those activities and executed an orderly wind-down: onboarding halted, services limited to exit-only actions, and clients clearly and repeatedly informed, including a deadline for automatic closure of residual positions. ESMA data showed a late licensing push (36 authorisations dated 23 June – 1 July), with the majority of previously nationally registered firms unauthorised as the deadline passed; the ESMA register passed 270 authorised CASPs by late July, with post-deadline additions including Standard Chartered and 37 further CASPs. AMLA’s advisory note (29 June) warned that customer migration to a smaller pool of authorised CASPs creates ML/TF concentration risk and called for risk-based rather than blanket due diligence on migrating customers. Corroborating national action: the AMF withdrew AUTOMATA France SAS’s DASP registration effective at the deadline.


CASP Implications (firm analysis): The firm’s EU market position is now determined by authorisation status, not registration legacy. Where the firm absorbs clients from winding-down competitors, AMLA’s note makes fresh, risk-based onboarding the supervisory expectation — bulk transfer without new due diligence is the flagged failure mode. Reverse solicitation remains narrowly construed and is not a workaround. ESMA’s first supervisory actions under the live regime (entry 4) show scrutiny arriving immediately behind authorisation.


Timeline: Transitional period ended 1 July 2026, no extensions. Post-deadline supervision is now business as usual: custody-resilience CSA fieldwork H2 2026 – H1 2027.


Impact Assessment:


Business Model Risk: Any group entity servicing EU clients without authorisation is in breach across all Member States. For authorised entities, the risk shifts to supervisory delivery: wind-down-related client migration, complaint volumes and onboarding quality are the near-term examination topics.


Revenue Impact: Upside for authorised CASPs absorbing displaced clients; the cost is stepped-up AML/CFT processing on migration. Unauthorised books of business are a terminal revenue loss.


Suggested Actions: Confirm every EU-facing entity’s authorisation scope matches the services actually provided; document migration onboarding as fresh due diligence; prepare DORA-aligned custody evidence packs against CSA selection risk (entry 4).


HIGH  2. ESMA confirms binary-options product intervention measures apply to event contracts and prediction markets


Jurisdiction/Regulator: EU / European Securities and Markets Authority — public statement ESMA35-243228190-8148


Publication Date(s): 3 July 2026



Summary: ESMA stated that event contracts — agreements with a binary financial outcome (fixed payout or nothing) turning on a yes/no future event — qualify as binary options under MiFID II where they are financial instruments, and therefore fall within the permanent national product intervention measures that replaced ESMA Decision (EU) 2018/795. The consequence: marketing, distribution and sale of such contracts to EU retail clients is already prohibited, and firms cannot circumvent the rules by reframing binary-style products as event contracts or prediction markets. Even non-retail distribution requires investment-firm authorisation. In parallel, the European Commission is consulting on the regulatory treatment of prediction contracts as part of the MiCA review, open to 30 September 2026.


CASP Implications (firm analysis): Direct and immediate for the Web3-hosted prediction markets product line: any EU-facing distribution — including via wallet integrations where the venue is a third party — must be treated as prohibited retail distribution unless robust geo-fencing and client-categorisation controls demonstrate otherwise. Combined with the US assault on the same product line (entry 13), July established that prediction markets are now contested in both major markets simultaneously. The Commission consultation is the channel to argue for a bespoke regime rather than binary-options treatment.


Timeline: Statement effective on publication, 3 July 2026 — it restates existing binding measures rather than creating new ones. Commission MiCA-review consultation closes 30 September 2026.


Impact Assessment:


Business Model Risk: High for EU retail-facing prediction-market access: this is an existing prohibition, not a proposal, so exposure is retrospective as well as forward-looking. Distribution-channel characterisation (wallet integration as “marketing or distribution”) is the key legal question.


Revenue Impact: EU retail prediction-market revenue should be assumed unavailable; non-retail EU distribution carries an investment-firm authorisation cost. Magnitude depends on current EU exposure of the Web3 wallet integration.


Suggested Actions: This week: verify geo-fencing and categorisation controls exclude EU retail from any event-contract access; document the analysis. This quarter: respond to the Commission’s MiCA-review consultation on prediction contracts by 30 September.


MEDIUM  3. EU adopts 21st Russia sanctions package: first transaction bans on crypto platforms and a third-country ban mechanism

Jurisdiction/Regulator: EU / Council of the European Union — Regulation (EU) 2026/1848


Publication Date(s): Adopted 23 July 2026; crypto-platform entries enter into force in August 2026 per the Official Journal



Summary: The Council adopted its 21st sanctions package against Russia — 218 designations, the largest round in four years — extending transaction bans to 14 crypto service platforms located in Georgia, Panama, the UAE, the Marshall Islands, Kyrgyzstan and Belarus, linked to payment routes used to bypass earlier sanctions. The package introduces a first-of-its-kind mechanism enabling full third-country bans on crypto-asset services: the EU can prohibit transactions between EU entities and any crypto provider in a country hosting services used by Russia for circumvention.


CASP Implications (firm analysis): Two distinct exposures. First, screening: the 14 platforms and associated wallet infrastructure must be in blockchain-analytics and counterparty screening before the August entry into force. Second, structural: the third-country mechanism means an entire jurisdiction’s crypto sector can become untransactable for EU entities — counterparty onboarding should now record hosting jurisdiction as a sanctions-relevant attribute, and corridor risk assessments (Fiat & Payment Solutions, OTC) should model jurisdiction-level cut-offs.


Timeline: Adopted 23 July 2026; the Official Journal sets entry-into-force dates in August 2026 for the 14 crypto-related entries. Exact dates per entity are in Regulation (EU) 2026/1848.


Impact Assessment:


Business Model Risk: Compliance risk is immediate and mechanical (screening). The strategic risk is the precedent: jurisdiction-level bans convert country-of-hosting into a hard eligibility criterion for EU-facing counterparties.


Revenue Impact: Nil direct unless the firm transacts with designated platforms; potential corridor revenue loss if a third-country ban is invoked against a jurisdiction where the firm has counterparties.


Suggested Actions: This week: ingest the 14 designations and associated addresses into screening; confirm no live counterparty exposure. This quarter: add the hosting jurisdiction to counterparty risk records; brief the sanctions team on the third-country mechanism.


MEDIUM  4. ESMA operationalises MiCA supervision; AMLA finalises direct-supervision mechanics


Jurisdiction/Regulator: EU / ESMA (Common Supervisory Action; Q&As) and AMLA (final draft ITS under Art. 15(3) AMLA Regulation (EU) 2024/1620)


Publication Date(s): 8 July (CSA), 10 July (Q&As), 21 July 2026 (AMLA ITS)



Summary: Three supervisory building blocks landed in July. (i) ESMA launched its first MiCA-era Common Supervisory Action on CASPs’ digital operational resilience for custody: governance, key and storage management, transaction controls, incident detection and response, smart-contract risks and third-party dependencies; NCAs run fieldwork on a risk-based sample H2 2026 – H1 2027, reporting to the Board of Supervisors in H2 2027. (ii) ESMA published MiCA Q&As on custody/administration of newly issued crypto-assets (2417), the perimeter of advice versus MiFID II (2882) and crypto-asset lending services (2883). (iii) AMLA finalised its ITS on direct-supervision mechanics — how selection of significant cross-border institutions will run and how transitions between national and AMLA supervision operate, ahead of direct supervision from 2028.


CASP Implications (firm analysis): The CSA is the first coordinated test of MiCA firms’ ICT resilience — newly authorised entities should assume selection risk. The lending Q&A bears directly on the Yield, Earn & Staking line: lending sits outside MiCA’s service list, so the perimeter treatment of earn/loan programmes needs mapping before relying on the MiCA licence. The advice Q&A affects any recommendation-style features. On AMLA: a CASP operating in six or more Member States with a higher risk profile is a realistic direct-supervision candidate — the selection data collection arrives before 2028, and group AML metrics should be prepared to the selection standard.


Timeline: CSA fieldwork H2 2026 – H1 2027; final report H2 2027. AMLA ITS to the Commission for adoption; selection process runs ahead of direct supervision from 2028.


Impact Assessment:


Business Model Risk: No new obligations, but supervisory scrutiny will surface gaps against DORA and MiCA custody requirements; remediation orders are the practical CSA risk. Perimeter clarifications may require re-papering EU lending/earn products.


Revenue Impact: Compliance cost (resilience evidence, product re-papering); EU earn/lending revenue is the concentrated exposure if restructuring is needed.


Suggested Actions: Map the custody ICT framework to the six CSA focus areas and refresh incident-response runbooks; legal review of Q&As 2417/2882/2883 against the EU product set; assign ownership for the AMLA selection data collection.


United Kingdom


HIGH  5. FCA completes the UK cryptoasset regime — and keeps amending it through July


Jurisdiction/Regulator: UK / Financial Conduct Authority — PS26/9 to PS26/13, FG26/5–7, GC26/4–5, Handbook Notice 143


Publication Date(s): 30 June 2026 (policy statements); implementation through July; Handbook Notice 143 published 31 July 2026



Summary: The FCA published five linked policy statements completing the UK regime: PS26/9 (admissions, disclosures and the MARC market-abuse regime), PS26/10 (stablecoin issuance, backing, redemption, custody), PS26/11 (regulated activities including trading platforms, dealing, arranging, lending/borrowing, staking, safeguarding and DeFi), PS26/12 (COREPRU/CRYPTOPRU prudential sourcebooks) and PS26/13 (Handbook application, including Consumer Duty). Consultation refinements include the stablecoin K-SII operational-risk factor cut from 2% to 1% and a three-venue best-execution check. July was implementation month: pre-application support (PASS) opened, the FCA webinar ran on 17 July, responses to prudential guidance consultations GC26/4–5 fell due 30 July, and Handbook Notice 143 (31 July) recorded further cryptoassets Handbook changes made by the board on 25 June and 30 July — meaning any gap analysis built solely on the 30 June package is already potentially stale. The FCA also published a Stablecoin Sprint update and a UK crypto market research description during July.


CASP Implications (firm analysis): The UK build is now against live, still-moving Handbook text rather than a fixed package. Applying house methodology: any UK offering reaching occupational-pension-scheme beneficiaries should be treated as retail under the firm’s Clause 2(g) interpretation for Consumer Duty and disclosure purposes; settlement floats should be assessed against the statutory settlement exclusion rather than CASS-style waivers — noting entry 8, where HM Treasury proposes to narrow that exclusion. The FCA’s Consumer Duty outcomes-monitoring findings (July 27, Section E) are the supervisory standard the UK entity will be examined against from 25 October 2027 and should be used as the design specification now.


Timeline: Authorisation window 30 September 2026 – 28 February 2027; mandatory regime in force 25 October 2027. Final non-Handbook guidance expected 30 September 2026. Next FCA board meeting 24 September 2026. Further consultations on DeFi guidance and DLT operational resilience expected later in 2026.


Impact Assessment:


Business Model Risk: All UK-facing trading, custody, stablecoin and staking activity must be restructured to authorisation-grade standards; unauthorised firms lose UK access from October 2027. Nearer-term: building to superseded text — re-baseline against Handbook Notice 143 and subsequent instruments, not the June policy statements.


Revenue Impact: Material compliance build cost through the gateway period, partially offset by the reduced K-SII coefficient; upside from regulatory certainty attracting institutional UK business.


Suggested Actions: Obtain Handbook Notice 143 and re-baseline the gap analysis; complete the authorisation application file for the 30 September gateway; use the Consumer Duty findings to design outcomes monitoring before authorisation rather than retrofit it.


MEDIUM  6. Systemic stablecoins: BoE settles policy positions and consults on the Code of Practice; BoE/FCA joint approach to dual regulation


Jurisdiction/Regulator: UK / Bank of England and FCA

Publication Date(s): 22 June (BoE policy statement and draft Code); 30 June 2026 (joint approach paper); consultations run through September



Summary: The BoE’s policy statement replaced proposed per-user holding caps with a temporary £40bn issuance guardrail per systemic stablecoin and raised the permitted interest-bearing share of backing assets from 60% to 70% (short-term UK government debt), with the remainder in central bank deposits. The draft Code of Practice is out for consultation to 22 September; the Bank intends to finalise it by end-2026, enabling systemic stablecoin operation from 2027. The joint BoE/FCA approach paper explains the split of responsibilities once HM Treasury recognises an issuer as systemic, transition arrangements expected to take 12–36 months from recognition, and treatment of issuers systemic at launch; chapter 8 questions close 30 September.


CASP Implications (firm analysis): Directionally positive for consumer-facing sterling stablecoin products (no per-user caps), but the £40bn guardrail requires monitoring if issuance approaches systemic scale, and the 30% central-bank-deposit requirement is a real yield drag on issuer economics. Any planned launch at potentially systemic scale should engage the SaL provisions before launch, not after.


Timeline: Code consultation closes 22 September 2026; joint-approach questions close 30 September 2026; Code final by end-2026; systemic operation possible from 2027; FCA to consult on rule disapplication after the Code is finalised; further BoE consultations through 2027.


Impact Assessment:


Business Model Risk: Limited near-term for non-systemic issuance; the frameworks determine the ceiling and economics of any sterling stablecoin strategy.


Revenue Impact: The 60%→70% interest-bearing allowance is a modest positive; the residual central-bank-deposit share and the guardrail cap scale economics.


Suggested Actions: Respond to both consultations by 22 and 30 September if the firm has sterling issuance plans; model issuer economics under the 70/30 backing split.


MEDIUM  7. Mansion House digital package: tokenisation blueprint, Transatlantic Taskforce, payments modernisation, DSA fees and DIGIT


Jurisdiction/Regulator: UK / HM Treasury, with the FCA and Bank of England; UK–US Transatlantic Taskforce


Publication Date(s): 13–16 July 2026



Summary: A coordinated UK push across four days. The Wholesale Digital Markets Champion (Chris Woolard) published a tokenisation blueprint backed by a 54-firm taskforce, with tokenised repo targeted for a live end-to-end trial by spring 2027 and a recommendation that the BoE consider broader acceptability of tokenised collateral. The Transatlantic Taskforce published a 10-point roadmap and a joint UK–US stablecoin statement: full 1:1 HQLA backing for stablecoins “held out as money,” cross-border tokenisation pilots, and tokenised MMFs/stablecoins as CCP margin collateral. HMT opened consultations on bringing tokenised payments, stablecoins and agentic payments into the FCA-led payments perimeter (closes 6 October) and on extending BoE supervisory fees to digital settlement asset providers with a £1.7m/year cap (closed 31 August). HMT confirmed the first DIGIT digital-gilt transaction for Q1 2027, with HSBC’s Digital Securities S

andbox Gate 2 approval.


CASP Implications (firm analysis): The UK is assembling the wholesale side of the digital-assets market — collateral, settlement, issuance — while the FCA assembles the retail/conduct side. For the firm, the payments-modernisation consultation is the strategic one: it will determine whether stablecoin payment services sit in the payments regime rather than the crypto regime (see entry 8 on the interim carve-outs), and the joint UK–US stablecoin statement signals converging reserve standards across the firm’s two largest Western markets.


Timeline: Payments modernisation consultation closes 6 October 2026; DSA fees closed 31 August 2026; tokenised-repo trial targeted spring 2027; first DIGIT transaction Q1 2027; sequel tokenisation report due by July 2027.


Impact Assessment:


Business Model Risk: No new obligations in-month; the risk is strategic misalignment — building UK stablecoin payment services against the crypto perimeter when the payments perimeter is where they will land.


Revenue Impact: Upside optionality: tokenised collateral and repo, digital-gilt infrastructure and CCP-eligible tokenised assets all expand the Institutional & VIP and B2B infrastructure lines.


Suggested Actions: Respond to the payments modernisation consultation by 6 October; assess eligibility for Digital Securities Sandbox participation; track the tokenised-repo trial for collateral-desk relevance.


MEDIUM  8. UK perimeter in motion: draft Cryptoassets (Amendment) Regulations, FMLC uncertainty warnings and the narrowing settlement exclusion


Jurisdiction/Regulator: UK / HM Treasury (draft SI and policy note, 21 April 2026); Financial Markets Law Committee (three publications, 27 July 2026); FCA CP26/13 perimeter guidance


Publication Date(s): Draft SI 21 April 2026 (informal consultation closed 22 May); FMLC letter and responses published 27 July 2026



Summary: HM Treasury’s draft Amendment SI would carve UK-issued qualifying stablecoin (UKQS) out of dealing and arranging (lending and borrowing stay in), add a proprietary trading exclusion at RAO article 9UA, and — critically — clarify that the temporary settlement exclusion from cryptoasset safeguarding applies only where ancillary to dealing or arranging, and therefore not to holding UKQS in the course of payment services. The FMLC’s 27 July letter identifies material uncertainty: article 9UA’s drafting is unclear on market making, the meaning of “client” and third-party-introduced business; there is no overseas persons exclusion equivalent to RAO article 72 for the new cryptoasset activities, leaving doubt whether overseas firms serving only UK institutional counterparties are in scope — with criminal liability and contractual unenforceability as the downside; and Regulation 8 (admissions to trading) is not territorially limited. The FMLC’s CP26/13 response warns that draft PERG would pull DeFi interfaces into regulated arranging under article 9Y, and notes PS26/11’s intention to require safeguarded cryptoassets to be held on trust notwithstanding article 9N permitting client-retained ownership.


CASP Implications (firm analysis): Two direct hits on house methodology. First, the settlement-float analysis must be re-run: the statutory settlement exclusion the firm relies on is real — corroborating the house interpretation — but HMT proposes to narrow it, so float held in a stablecoin payments flow would need an article 9N safeguarding permission. Second, the absence of an overseas persons exclusion is a counterparty-onboarding risk, not just an entity-structuring one: UK-authorised entities risk facilitating a perimeter breach by transacting with overseas firms that turn out to need authorisation. Note the transatlantic tension with entry 12: the UK is opening a proprietary-trading exclusion while the CFTC walls proprietary trading off from affiliated venues.


Timeline: Final Amendment SI pending; HMT payment services reform consultation promised (Q2 2026 per the Payments Forward Plan, not yet published as at 31 July). FCA perimeter policy statement expected September 2026.


Impact Assessment:


Business Model Risk: Perimeter uncertainty with criminal-liability consequences; the settlement-exclusion narrowing changes which group entities need safeguarding permissions.


Revenue Impact: Nil direct; contingent restructuring cost for payment-service floats and overseas booking models.


Suggested Actions: Re-run the settlement-float analysis against the proposed narrowing; map overseas group entities serving UK institutional counterparties against the missing overseas-persons exclusion; obtain PS26/11 and confirm the trust-based safeguarding model.


Asia-Pacific


MEDIUM  9. Japan reclassifies crypto-assets as financial products under the FIEA

Jurisdiction/Regulator: Japan / National Diet and Financial Services Agency (FSA) — FIEA amendment


Publication Date(s): c. 15 July 2026 (Diet passage; multiple secondary sources; primary FSA source not retrieved this run — see Section G)



Summary: Japan’s Diet passed an FIEA amendment reclassifying Bitcoin and over 100 other cryptoassets as financial products, moving them from the Payment Services Act toward securities-style regulation: insider-trading prohibitions, issuer disclosure obligations and stricter penalties for unregistered operators. The reclassification opens the path to spot crypto ETFs and to a flat 20% tax rate on crypto income (from a top marginal rate of up to 55%), reported to apply from 2028. Implementation is targeted for fiscal 2027, giving the FSA 12–18 months for secondary ordinances.


CASP Implications (firm analysis): Japan moves from a payments-law regime to a securities-law regime — the firm’s Japanese offering (spot trading, custody, any yield products) will need rebuilding against FIEA-grade disclosure, insider-trading surveillance and registration standards. The ETF path and the tax cut are structural demand positives for the Japanese market. Coverage note: this item was not captured in the constituent weekly editions and is added at month-end (Section G).


Timeline: FIEA reclassification effective from fiscal 2027 (secondary ordinances to follow); 20% flat tax reported from 2028. Not specified in source: the exact enactment date and ordinance schedule — pin to FSA primary sources next cycle.


Impact Assessment:


Business Model Risk: Compliance rebuild for the Japan entity: insider-trading surveillance, disclosure and registration. Perimeter risk for products (earn, derivatives) whose FIEA treatment is not yet specified.


Revenue Impact: Medium-term upside (ETFs, tax normalisation, institutional entry); near-term compliance build cost.


Suggested Actions: This quarter: baseline the Japan product set against FIEA categories; verify enactment details against FSA primary sources; engage local counsel on the ordinance timetable.


MEDIUM  10. AUSTRAC Travel Rule takes effect at zero threshold; ASIC extends licensing no-action to 30 September


Jurisdiction/Regulator: Australia / AUSTRAC (AML/CTF Transitional Rules 2026, Part 5) and ASIC

Publication Date(s): 1 July 2026 (Travel Rule effect); 25 June 2026 (ASIC no-action extension)



Summary: Deferred Travel Rule obligations for virtual asset transfers took effect on 1 July: Australian-registered VASPs must collect and pass on sender/receiver information on every non-incidental transfer, with no minimum-value threshold. Firms beginning a new registrable service before 1 July had until 29 July to apply for enrolment. Reporting for unverified self-hosted wallet transfers remains deferred to 31 March 2029. In parallel, ASIC extended its sector-wide no-action position for digital asset businesses providing financial services to 30 September 2026 and broadened it to authorised-representative and intermediary-authorisation arrangements.


CASP Implications (firm analysis): A pure Cost of Compliance item: zero-threshold Travel Rule data collection is materially heavier than fiat screening thresholds and applies across the Australian book. The ASIC track means AFS licensing (or representative arrangements) must be resolved by 30 September — the same date as the UK gateway opening, compounding Q3 licensing workload.


Timeline: Travel Rule effective 1 July 2026; enrolment deadline 29 July 2026; ASIC no-action expires 30 September 2026; self-hosted wallet reporting deferred to 31 March 2029.


Impact Assessment:


Business Model Risk: AUSTRAC enforcement exposure for incomplete transfer records; loss of the ASIC shield after 30 September without an application or representative arrangement in place.


Revenue Impact: Compliance cost only; no direct revenue effect.


Suggested Actions: Audit a sample of post-1-July transfers for Travel Rule completeness; lodge or vary the AFS application (or finalise representative arrangements) well before 30 September.


Middle East & North Africa


No MENA developments met the inclusion rule in July — no qualifying publications identified from VARA, DFSA, ADGM/FSRA, CBUAE or CMA Saudi Arabia across the five weekly windows. African developments outside the MENA definition are recorded in Section E: Nigeria’s presidential Executive Order on Virtual Assets Coordination (17 July) and Kenya’s gazetted VASP Regulations with a 4 November licensing deadline (22–24 July).


United States


HIGH  11. California’s Digital Financial Assets Law licensing requirement takes effect


Jurisdiction/Regulator: US — California / Department of Financial Protection and Innovation (DFPI), under DFAL as amended by AB 1934


Publication Date(s): 1 July 2026



Summary: From 1 July, any entity engaging in digital financial asset business activity (exchanging, storing or transferring) with California residents must hold a DFPI licence or have a completed application on file and awaiting determination. Firms with a completed application by the deadline may continue operating during review; others must cease serving California residents. DFPI expectations include at least $100,000 tangible net worth and a surety bond of at least $500,000; registration opened 9 March 2026.


CASP Implications (firm analysis): California functions as a de facto federal-scale market-access gate given its population and crypto-user base. Combined with Illinois’ transfer tax (Section E) and the state prediction-market actions (entry 13), July confirmed a US operating reality: federal clarity is arriving slower than state fragmentation, and the 50-state compliance matrix is becoming binding faster than the federal one.

Timeline: Licensing requirement in effect 1 July 2026; DFPI application review ongoing, case by case.


Impact Assessment:


Business Model Risk: Immediate, binding market access: any unlicensed California activity without a pending completed application must have ceased. This is the single largest state-level exposure in the US book.


Revenue Impact: Direct revenue risk on any non-compliant California book; application, net-worth, bonding and supervision costs otherwise.


Suggested Actions: Confirm licence or completed-application status for every group entity serving California residents; if neither, cease onboarding and take California counsel on remediation.


HIGH  12. CFTC proposes conflicts-of-interest rules for vertically integrated venues


Jurisdiction/Regulator: US / Commodity Futures Trading Commission — Release 9274-26; amendments to Parts 37, 38, 39 and Regulations 1.52 and 1.55


Publication Date(s): 30 July 2026


Summary: The CFTC proposed rules addressing conflicts where one corporate group owns the exchange, the clearinghouse, and a market maker or dealer on the same venue — a standard structure among large crypto platforms. Reported mechanisms: restrictions on an affiliated market maker’s access to the venue’s non-public information (order flow, customer positions, upcoming rule changes); prohibition of preferential fees, matching priority or access; required separation of personnel, technology and premises; and proposed Regulation 38.852(b), permitting an affiliated market maker but not a proprietary trading firm on one’s own exchange. Chairman Selig framed the package as “purpose-fit rules of the road” for “responsible innovation.” The proposal lands while the CLARITY Act (entry 15) remains stalled — the agency is writing market-structure rules ahead of the statute.


CASP Implications (firm analysis): Reaches the operating model of any group running a CFTC-registered DCM or DCO alongside affiliated trading: informational, personnel and technology separation would need to be evidenced. Product lines: Core Trading Markets, Automated & Advanced Trading Tools (affiliate-held algo/API access), Institutional & VIP Services, and indirectly Web3 prediction markets on DCM venues. Transatlantic divergence flagged at entry 8: the UK proposes a proprietary-trading exclusion as the CFTC walls proprietary trading off.


Timeline: Comments due 60 days after Federal Register publication, which had not occurred as at 31 July — the window is not yet open, and the deadline is not specified in the source.


Impact Assessment:


Business Model Risk: Moderate to high for US-registered entities: separation of order-flow data, staffing and systems, disclosure of affiliate relationships, and possible divestment or restructuring of proprietary trading on affiliated venues under Reg 38.852(b).


Revenue Impact: Cost increase (segregation, duplicated staffing, compliance build); indirect revenue effect if affiliated market-making on group venues is curtailed — spread capture compresses and book depth thins on lower-liquidity pairs.


Suggested Actions: Map CFTC-registered entities and affiliates sharing data, personnel or infrastructure; prepare a comment submission once the FR notice posts; scenario-model Reg 38.852(b) against current proprietary arrangements; reconcile with the UK article 9UA position.


HIGH  13. Prediction markets under multi-front challenge: New York sues Kalshi; CFTC asserts exclusive authority


Jurisdiction/Regulator: US / New York State Office of the Attorney General; CFTC (Division of Market Oversight advisory and federal pre-emption motion); US Congress; multiple states

Publication Date(s): 24 July (DMO advisory); 27 July (event-contracts NPRM comments close); 31 July 2026 (NY petition and CFTC emergency motion)



Summary: July closed with the US prediction-markets fight fully joined. The CFTC’s DMO advisory (24 July) told designated contract markets to stop submitting broad, template-style self-certifications of event-contract series. Comments on the CFTC’s public-interest-determinations NPRM closed 27 July. On 31 July, the New York Attorney General petitioned in Manhattan state court alleging Kalshi’s sports, election and entertainment event contracts are unlicensed gambling — seeking blocking orders, restitution, forfeiture and treble penalties reported at not less than $36bn — and alleging Kalshi allowed 18–20-year-olds to trade below the state’s 21 minimum for mobile sports betting. Under an hour earlier, the CFTC moved in Manhattan federal court to bar state enforcement against federally registered prediction-market exchanges. Judge Torres had declined on 8 July to enjoin New York pending Kalshi’s appeal. Background pressure continued: restricting orders in Massachusetts, Michigan, Nevada and Washington; a Minnesota court blocking that state’s ban; 44 state attorneys general challenging CFTC authority over sports contracts; and a bipartisan “Prediction Markets Are Gambling Act” in Congress.


CASP Implications (firm analysis): Combined with ESMA’s 3 July statement (entry 2), the firm’s prediction-markets product line is now contested in both major markets simultaneously — via existing retail prohibition in the EU and via jurisdictional litigation in the US. If federal registration does not pre-empt state gambling law, every US-facing event contract needs a 50-state licensing analysis, per-state product menus and gaming-grade age/geolocation controls; Web3 wallet-hosted distribution carries the additional risk of being characterised as facilitating unlicensed gambling. The pre-emption ruling is the single determinative event.


Timeline: NPRM final rule pending (comments closed 27 July). NY petition and CFTC motion filed 31 July; no hearing dates specified in source. State cases continue in at least six states.


Impact Assessment:


Business Model Risk: High: simultaneous EU prohibition exposure and US state-law exposure on one product line, with retrospective as well as forward-looking dimensions.


Revenue Impact: US and EU retail prediction-market revenue is at risk in the adverse scenarios; Kalshi’s reported ~$33bn June volume indicates the market scale under challenge.


Suggested Actions: This week: inventory all event-contract access points (direct and wallet-hosted) by user jurisdiction; verify EU retail exclusion and US age/geolocation controls at the 21-year gaming standard. This quarter: external counsel on distribution-partner exposure; track the Manhattan federal ruling and the CFTC final rule as the two decision gates.


MEDIUM  14. GENIUS Act rulemaking deadline passes with stablecoin rules unfinished; Circle secures the first post-GENIUS national trust charter


Jurisdiction/Regulator: US / Treasury, OCC, FDIC, NCUA, Federal Reserve, FinCEN/OFAC; Circle Internet Group (OCC approval)


Publication Date(s): 18 July 2026 (statutory deadline, s.13 GENIUS Act); 10 July 2026 (Circle final OCC approval)



Summary: The one-year statutory deadline for final GENIUS Act implementing regulations passed with every major package still at proposal stage. Comment windows continued beyond the deadline — FDIC Bank Secrecy Act proposal to 4 August; the five-agency customer-identification rule to 21 August; OCC consulting on application forms for permitted payment stablecoin issuers. Under s.20, the Act takes effect on the earlier of 18 January 2027 or 120 days after final rules — making January 2027 the practical backstop. Separately, Circle received final OCC approval (10 July) to establish First National Digital Currency Bank, N.A. (Circle National Trust): federally regulated fiduciary custody for Circle and affiliates, with USDC reserve management planned as a future capability — the first concrete demonstration of the national-trust-charter route for stablecoin infrastructure post-GENIUS.


CASP Implications (firm analysis): US stablecoin strategy cannot finalise against proposals; plan to a January 2027 readiness assumption while using the open comment windows. Circle’s charter raises the institutional bar for custody and reserve arrangements. It validates the OCC trust route — the firm’s US charter options analysis (OCC trust vs state trust vs GENIUS issuer route) should be refreshed against it.


Timeline: FDIC BSA comments closed 4 August; five-agency CIP rule comments close 21 August 2026; Act effective by 18 January 2027 at the latest. Circle National Trust opening date not specified in source.


Impact Assessment:


Business Model Risk: Timeline risk, not new obligation: capital, reserve and reporting calibrations remain unsettled deep into the build window. Competitive risk from federally chartered rivals.


Revenue Impact: Planning-cost drag from prolonged uncertainty; competitive pressure on US institutional custody and stablecoin distribution.


Suggested Actions: File or support comments on the CIP and OCC application-form proposals; hold US stablecoin launch plans to January-2027 readiness; refresh the charter options analysis.


MEDIUM  15. Senate releases merged CLARITY Act text; floor vote possible early August


Jurisdiction/Regulator: US / Senate Banking and Agriculture Committees (Sen. Lummis, Digital Assets Subcommittee Chair)


Publication Date(s): 22 July 2026 (merged text); negotiation continuing through month-end


Summary: Senator Lummis released 616-page merged CLARITY Act text combining the Banking and Agriculture Committee products: a government-ethics title with White House-approved limits (enforced solely by the US Attorney General, state AGs expressly barred, core restrictions sunsetting 20 January 2029), a law-enforcement-tools title, roughly 25 sections closing sanctions and AML gaps (exchanges, DeFi platforms and crypto ATMs inside the BSA framework), ancillary-asset definitions addressing when a digital asset stops being a security, and customer-asset segregation and bankruptcy protections. Key Democrats called the ethics package inadequate; leadership doubted floor time before the August recess, though industry reporting at month-end suggested a possible vote as early as Monday, 3 August.


CASP Implications (firm analysis): The most consequential pending US legislation for the firm: SEC/CFTC allocation, ancillary-asset treatment, the DeFi/BSA perimeter, bankruptcy segregation and crypto-ATM coverage all shape the US operating model. The bankruptcy-segregation provisions would materially improve customer-asset protection economics. If the bill stalls again, the CFTC’s conflicts NPRM (entry 12) becomes the primary venue where US crypto market structure is actually defined.


Timeline: Possible Senate floor action from 3 August; otherwise September. Ethics sunset 20 January 2029 as drafted.


Impact Assessment:


Business Model Risk: Direction-of-travel clarity with residual passage risk; provisions may still move materially.


Revenue Impact: Medium-term upside from a settled US market-structure regime; near-term monitoring cost only.


Suggested Actions: Track the floor schedule and any Democratic counteroffer; assess ancillary-asset and segregation provisions against the US entity structure; engage via industry associations before any vote.


International Standard-Setters


MEDIUM  16. FATF: seventh targeted update on virtual assets and a landmark DeFi report


Jurisdiction/Regulator: Global / Financial Action Task Force


Publication Date(s): 16 July 2026 (seventh targeted update, per fatf-gafi.org); 21 July 2026 (targeted report on DeFi)



Summary: The seventh targeted update reports Travel Rule legislation in 83% of surveyed jurisdictions (73% in 2025), while almost half of implementing jurisdictions have taken no Travel Rule supervisory or enforcement action; 34% are largely compliant with R.15 and 22% remain non-compliant, with priority actions on stablecoins, unhosted wallets, offshore VASPs and DeFi. The DeFi report confirms R.15 applies where a natural or legal person exercises “control or sufficient influence” over an arrangement, publishes non-exhaustive on-chain and off-chain indicators of control (governance-token concentration, administrative privileges, upgrade control, economic benefit, influence over development and infrastructure), and finds 93% of reporting jurisdictions (132 of 143) have not yet implemented the Standards for DeFi — only two have licensed or registered a DeFi arrangement in practice.


CASP Implications (firm analysis): The control/sufficient-influence indicators are the template national regulators will use to decide when a DeFi front-end, governance position or fee arrangement makes the firm accountable as a VASP. The firm’s DeFi integrations — Web3 earn, DEX portals, third-party protocol loans, airdrop portals — should be mapped against the indicators before supervisors do it first. The 93% implementation gap means national rule-making is coming, not that the perimeter is settled. Read with the FCA’s expected DeFi guidance consultation and the FMLC’s Article 9Y warning (entry 8): three bodies converged on DeFi perimeter questions in a single month.

Timeline: No binding deadlines; national implementation and supervisory engagement with major DeFi arrangements expected over the next cycle.


Impact Assessment:


Business Model Risk: Perimeter risk: features currently treated as non-custodial or unregulated may be recharacterised as VASP activity where influence indicators are met.


Revenue Impact: Rising compliance overhead on Web3/DeFi lines; potential restructuring cost for governance and fee arrangements.


Suggested Actions: This quarter: run a control/sufficient-influence self-assessment across all DeFi integrations; document decentralisation evidence; brief product legal on the indicator list.


E. Also Noted (Low-materiality)


  • 1 Jul — US/OFAC — Sanctions on a Brazil-based PCC network laundering $30m+ in drug proceeds via crypto; 15 Jul — OFAC sanctions on Central Bank of Iran crypto wallets, ~$131m USDT frozen by Tether — issuer-level freezes are now a core sanctions-enforcement channel. Screening-list updates required in both cases.

  • 14 Jul — US — OCC, Federal Reserve and FDIC joint statement on crypto-asset safekeeping by banking organisations: clarifies how existing law applies to bank custody of crypto, including key storage; no new supervisory expectations—institutional-custody competitive context.

  • 16–17 Jul — US states — Illinois Digital Asset Tax Act (0.2% on transfers, effective 1 Jan 2027) drew a Digital Chamber suit (21 Jul, Sangamon County) claiming federal pre-emption and constitutional defects, and a separate Kalshi suit over a 1.75–3.5% tax and $15m licensing fee. First-in-nation transfer tax; fragmentation precedent.

  • 17 Jul — Nigeria — Presidential Executive Order on Virtual Assets Coordination: CBN-chaired Virtual Asset Council with SEC and the Nigeria Revenue Service; harmonised implementation framework due within 30 days (c. 16 Aug).

  • 22–24 Jul — Kenya — VASP Regulations 2026 gazetted (Legal Notice No. 134): stablecoin interest ban, tiered capital floors (KSh300m for stablecoin issuers), extraterritorial reach to firms targeting Kenyan consumers, and a 4 November 2026 licensing deadline against zero licences issued to date. Gazettal date could not be pinned to a Kenyan government source this run.

  • 21–22 Jul — UK — Crypto & Digital Assets APPG inquiry into banking access for the crypto sector (submissions, max six pages, by 31 Aug — a rare formal channel for de-banking evidence as the FCA gateway opens); FCA financial-crime findings across 242 asset-management and alternatives firms (the FCA’s financial-crime baseline for the crypto gateway); CMA revised unfair-contract-terms guidance CMA37 (UK retail T&Cs face a sharpened fairness standard with direct DMCCA enforcement); Court of Appeal restores the PSP-friendly Quincecare reading in Moorwand v Hamblin [2026] EWCA Civ 942.

  • 27–31 Jul — UK — FCA Consumer Duty outcomes-monitoring findings across 56 firms (27 Jul; design specification for the UK entity’s monitoring build); PSR CP26/2 on Confirmation of Payee — SD17 expiry removed and scope extended to voluntary providers (30 Jul; closes 20 Aug; SD17 otherwise expires 1 Nov 2026); PSR PS26/1 final directions to Mastercard and Visa on scheme-fee transparency and pricing governance (30 Jul; in force same day); FCA final notice censuring Equity for Growth (Securities) Ltd over minibond promotions (30 Jul — commission-opacity reasoning transfers to crypto promotions); FCA Stablecoin Sprint insights (c. 30 Jul).

  • 20–31 Jul — EU — ESMA T+1 readiness statement (20 Jul; transition 11 Oct 2027); EBA first DGSD III package including RTS on deposit-guarantee payouts of client-funds deposits (23 Jul; closes 23 Oct — determines how the firm’s customers would be repaid if a safeguarding bank failed); MiFID II order-execution RTS in the OJ (23 Jul; applies 12 Feb 2028); ESAs joint statement on ICT risks from frontier AI models JC 2026 25 (31 Jul; supplements DORA; interacts with the custody CSA); ESMA authorises EuroCTP as equities consolidated tape provider (27 Jul; no crypto nexus).

  • Jul — Global/BIS — BIS Annual Report 2025/26 signals: BCBS review of targeted elements of the SCO60 cryptoasset prudential standard initiated in 2026 (the concrete forward process worth monitoring); CGFS work on stablecoin adoption and monetary policy; BIS Innovation Hub tokenisation priorities (Projects Pine, Agorá, Mercurius). IOSCO World Investor Week 2026 themes include Digital Deception (22 Jul).

  • 7–10 Jul — US — CFTC charges Vernon / Argent Capital Management over a $14m commodity pool including crypto assets (7 Jul); SEC “Regulation Crypto Assets” added to the rulemaking agenda with a July target — not published by month-end (~400-page draft pending at OIRA since March); Commissioner Peirce statement on crypto vaults and lending strategies (22 Jul).


F. Horizon Scan (next 90 days)

Date

Item

3 Aug 2026

Possible Senate floor vote on the CLARITY Act; UK EMIR Art. 25(1) CCP equivalence SI comes into force.

Aug 2026

EU 21st-package crypto-platform transaction bans enter into force (Regulation (EU) 2026/1848) — sanctions team

c. 16 Aug 2026

Nigeria Virtual Asset Council harmonised implementation framework due

20 Aug 2026

PSR CP26/2 closes (Confirmation of Payee / SD17)

21 Aug 2026

Five-agency GENIUS Act customer identification programme rule comments close

26 Aug 2026

CFTC extended comment deadline: 24/7 futures trading and energy perpetual contracts

31 Aug 2026

UK Crypto & Digital Assets APPG banking-access submissions close; HMT DSA fee consultation closes

Sep 2026

FCA further policy statement expected on the UK regulatory perimeter; Congress returns — CLARITY window if no August vote

22 Sep 2026

BoE draft Code of Practice consultation closes (systemic stablecoins)

24 Sep 2026

FCA board meeting — next Handbook instruments

28 Sep 2026

EBA MiCA fines methodology consultation closes

30 Sep 2026

FCA authorisation gateway opens (to 28 Feb 2027); BoE/FCA joint-approach questions close; Commission MiCA-review consultation closes (incl. prediction contracts); ASIC no-action expires; FCA final non-Handbook guidance expected

6 Oct 2026

HMT payments modernisation consultation closes (stablecoin/tokenised/agentic payments)

16 Oct 2026

FCA CP26/30 and CP26/31 equity transparency consultations close (tokenised-equities watch item)

23 Oct 2026

EBA DGSD III package closes (client-funds deposit payouts RTS)

Not yet set

CFTC conflicts NPRM comment deadline (60 days from FR publication); CFTC event-contracts final rule; SEC Regulation Crypto Assets proposing release; HMT final Cryptoassets (Amendment) Regulations and payment services reform consultation

1 Nov 2026

SD17 expires absent PSR action; 4 Nov — Kenya VASP licensing deadline

H2 2026 – H1 2027

ESMA custody-resilience CSA fieldwork; BCBS SCO60 review continues

18 Jan 2027

GENIUS Act effective-date backstop

Q1 2027

First UK DIGIT digital-gilt transaction targeted

31 May / 11 Oct / 25 Oct 2027

First UK CARF reports due; EU T+1 transition; UK cryptoassets regime in force.

 
 

Sign up to be notified about the latest updates of what we think

The posts listed on the 'What we think' webpages are our interpretation of regulatory developments we have been reading about. They should not be considered legal, regulatory or other advice. Contact us if you want to understand the impact of public policy, regulation and governance changes for you.

bottom of page