Regulus — The global regulatory broadcast network

0:15

Financial Stability Board Source document ↗

Global Financial Stability Board Governance & Accountability ✓ 16 claims 19 Oct 2026

FSB Chair warns G20 on sovereign bond volatility, private credit and AI risks

The FSB Chair's letter to G20 Finance Ministers and Central Bank Governors, submitted ahead of their 15 October meeting, flags heightened volatility in sovereign bond markets, vulnerabilities in private credit and risks tied to artificial intelligence. It introduces five reports the FSB is delivering, covering global stablecoin arrangements, public sector backstop funding, AI adoption, regulatory modernisation and G20 implementation monitoring.

Bailey flags heightened volatility in sovereign bond markets, vulnerabilities in private credit and AI-related risks as live concerns.
The letter introduces five FSB reports to the G20, including the stablecoin note published alongside it on 12 October 2026.
The Thematic Review on Public Sector Backstop Funding, published 9 October, finds further work is needed to complete implementation of Key Attribute 6.
The FSB is delivering a Consultation Report on Regulatory and Supervisory Modernisation and a G20 Implementation Monitoring Review Report.
The letter was submitted ahead of the G20 ministers' and governors' meeting on 15 October 2026.

Source document

0:15

Washington State DFI Source document ↗

United States Washington State DFI Conduct & Consumer ✓ 12 claims 19 Oct 2026

Washington DFI charges Pacific Watercraft and Robin Lynn Sells over $5m unregistered offer

Washington's Division of Securities has issued a Statement of Charges against Pacific Watercraft Group and its principal Robin Lynn Sells, alleging an unregistered $5 million offering made without disclosure of the principal's bankruptcy and enforcement history. The action seeks a cease and desist order plus fines and costs. This item sets out what the charges contain and what happens next.

The Statement of Charges was entered on October 6, 2026 under file S-26-4197-26-SC01.
The respondents allegedly offered up to $5 million in unregistered debt and equity securities to a potential investor in 2026.
The undisclosed material information allegedly included four bankruptcy filings by Sells, three previous Securities Division actions, and a 2020 bankruptcy filing by Pacific Watercraft Group.
The order cites RCW 21.20.010, RCW 21.20.140 and RCW 21.20.040 and seeks a cease and desist order plus fines and costs.
The respondents have a right to request a hearing on the Statement of Charges.

Source document

0:15

American Bankers Association — newsroom Source document ↗

Global American Bankers Association — newsroom AI, Technology & Data ✓ 12 claims 19 Oct 2026

FSB finalizes 12 sound practices for AI adoption at banks and other financial firms

The Financial Stability Board has finalized 12 'sound practices' to guide how banks and other financial institutions adopt artificial intelligence. Framed as a practical toolkit for boards and senior management, the list covers organization-wide governance and risk management across the AI lifecycle. This segment walks through what the FSB finalized, how it maps to existing cyber and third-party frameworks, and where the ABA pushed for changes.

The FSB finalized 12 sound practices for AI adoption by banks and other financial institutions on October 15, 2026.
The practices split into two groups: organization-wide AI governance, and risk management across the AI lifecycle from development to deployment.
The FSB frames the practices as a toolkit firms can tailor to their context and integrate into existing cyber and third-party risk frameworks.
The ABA in July recommended improving the machine-learning definition and reorganizing and consolidating the list to aid application at banks of all sizes.

Source document

0:15

Financial Stability Board Source document ↗

Global Financial Stability Board AI, Technology & Data ✓ 20 claims 19 Oct 2026

FSB finalises 12 sound practices for responsible AI adoption by financial institutions

The Financial Stability Board has published its final report on responsible AI adoption, setting out 12 sound practices firms are encouraged to consider. This segment walks through what the practices cover, how they split between organisation-wide governance and lifecycle risk management, and where boards and senior management are expected to engage.

The FSB finalised 12 sound practices for responsible AI adoption on 15 October 2026 in a report to the G20.
The practices are grouped into organisation-wide AI governance and lifecycle risk management from development to deployment.
Board and senior management are strongly encouraged to reference the practices in strategy, technology adoption and risk management.
Specific practices cover data governance, explainability and transparency, human oversight, cyber and ICT risk, and third-party AI dependencies.
The final report follows a June 2026 consultation report and an October 2025 report on monitoring AI adoption and related vulnerabilities.

Source document

0:15

DOJ Criminal Division Source document ↗

United States DOJ Criminal Division Financial Crime ✓ 23 claims 19 Oct 2026

Miami man gets 36 months for $4.2 million trust tax-refund fraud scheme

The DOJ's National Fraud Enforcement Division secured a 36-month sentence against a Miami man who filed false tax returns for trusts he controlled, seeking more than $4.2 million in refunds. The case shows how the newly created Fraud Division is pursuing refund schemes, and sets out the restitution and supervised-release terms imposed.

Preval was sentenced on October 6, 2026 to 36 months in prison for filing a false tax return on behalf of a trust he controlled.
The false returns filed for trusts and himself collectively sought refunds totaling more than $4.2 million from the Treasury.
Preval obtained more than $580,000, used to pay off his home mortgage and other personal expenses, and was ordered to pay $580,647 in restitution to the IRS.
He also filed 2023 returns that omitted income from his employment, and received one year of supervised release.
The case was investigated by IRS Criminal Investigation and prosecuted by the National Fraud Enforcement Division's Tax Section.

Source document

0:15

ADGM Abu Dhabi — announcements Source document ↗

United Arab Emirates ADGM Abu Dhabi — announcements Governance & Accountability ✓ 15 claims 19 Oct 2026

ADGM fines PKF Accountants and audit principal USD 100,000 for audit failings

ADGM's Registration Authority has penalised an audit firm and its named registered audit principal after an on-site inspection found an audit that fell short of International Standards on Auditing. The action, with penalties totalling against both firm and individual, signals how the RA intends to police audit quality in the centre. A short item, but a pointed one for anyone holding an ADGM audit registration.

The RA imposed USD 65,000 on PKF Accountants and Business Advisers LLP and USD 35,000 on its registered audit principal, Ms Saranga Omprakash Lalwani.
The action followed an on-site inspection assessing PKF's compliance with ADGM Auditors Rules and the quality of its audit work.
Deficiencies included failures to conduct the audit in accordance with International Standards on Auditing as required by the Companies Regulations (Auditors) Rules 2023, and failure to exercise due skill, care and diligence.
Specific findings covered fraud-risk assessment, insufficient audit evidence, inadequate documentation, and insufficient evidence of the audit principal's involvement.
Decision Notices for both PKF and Ms Lalwani have been published by the RA.

Source document

0:15

Financial Stability Board Source document ↗

Global Financial Stability Board Prudential & Capital ✓ 20 claims 19 Oct 2026

FSB finds half of jurisdictions still have gaps in public-sector backstop funding

The Financial Stability Board has assessed how far its member jurisdictions have gone in building public sector backstop funding mechanisms for banks in resolution. The review, launched after the 2023 bank failures, finds material gaps in roughly half of jurisdictions fifteen years after the original recommendations, and sets out six recommendations for action before, not during, a crisis.

The review finds further work is needed in a majority of jurisdictions, with approximately half still carrying material gaps fifteen years after the original recommendations.
The report sets out six recommendations for jurisdictions to achieve full and consistent implementation of the FSB Recommendations on PBF mechanisms.
The FSB is asked to support implementation by sharing good practices and closely monitoring progress on Key Attribute 6 and its Guiding Principles.
The review examines implementation of Key Attribute 6 and the Guiding Principles on temporary funding to support the orderly resolution of a G-SIB, not the full range of resolution tools.

Source document

0:15

HM Revenue & Customs Source document ↗

United Kingdom HM Revenue & Customs Prudential & Capital ✓ 15 claims 19 Oct 2026

HMRC's latest ROPS list adds 25 schemes, removes 17, as EEA parity rule beds in

HMRC maintains a notification list of overseas pension schemes that have told it they meet the recognised overseas pension scheme (ROPS) conditions. The latest refresh added 25 schemes, removed 17 and amended one. For advisers handling overseas transfers, the operative detail is not the names but the disclaimer: presence on the list is a self-certification, not an HMRC warranty against UK tax.

The 15 October 2026 update added 25 schemes, removed 17 and amended one on the ROPS notification list.
HMRC updates the list on the 1st and 15th of each month, deferring to the next working day where that falls on a weekend or UK public holiday.
HMRC states it cannot guarantee entries are ROPS or that transfers will be free of UK tax, and will usually pursue UK tax charges and interest, plus penalties in appropriate cases, even where a scheme appears on the list.
From 6 April 2025, Overseas Pension Schemes and ROPS established in the EEA must meet the same conditions as schemes in the rest of the world.
HMRC may remove schemes at short notice while reviews are carried out, for example where fraudulent activity is suspected.

Source document

0:15

FCA Publications Source document ↗

United Kingdom FCA Publications Conduct & Consumer ✓ 20 claims 19 Oct 2026

FCA consults on minimum redemption terms for retail funds holding illiquid assets

The FCA has opened CP26/35, proposing that retail funds investing in illiquid assets such as real estate align their redemption terms with the time it actually takes to sell what they hold. It runs to 11 December 2026, with final rules expected in H1 2027. Anyone running, distributing or wrapping NURS funds in scope should read how the proposals reshape the FIIA regime.

The consultation proposes minimum redemption terms for NURS invested mainly in inherently illiquid assets, so terms reflect the time taken to sell them.
Scope captures NURS funds with at least 50% of scheme property in inherently illiquid assets, plus other NURS with limited redemption arrangements.
The proposals amend the Funds Investing in Inherently Illiquid Assets (FIIA) regime and bind all Authorised Fund Managers.
Responses are due by 11 December 2026, with final rules expected in H1 2027.
Distributors, advisers, SIPP operators, depositaries and unit-linked life product providers referencing relevant NURS are also in scope.

Source document

0:15

Sveriges Riksbank Source document ↗

Sweden Sveriges Riksbank Governance & Accountability ✓ 17 claims 19 Oct 2026

Riksbank sets 1 July 2027 deadline to redeem long-invalid Swedish banknotes

Sweden's central bank has fixed a final date for redeeming banknotes that have been invalid for more than a decade. The notice matters to anyone holding pre-changeover Swedish currency, and sets out the application window, the 300-kronor fee and the documentation each applicant must supply. It is short, operational and time-limited.

From 1 July 2027 the Riksbank will no longer redeem banknotes that have been invalid for more than ten years.
Applications for redemption must reach the Riksbank by 30 June 2027 at the latest.
Redemption costs 300 kronor where an application is approved, and each case is assessed individually.
Applicants must attach supporting documentation showing where the money comes from, such as bank statements.
The Riksbank estimates approximately SEK 3.9 billion in invalid banknotes remains unredeemed.

Source document

0:15

BIS Press Releases Source document ↗

Global BIS Press Releases Sustainability ✓ 16 claims 19 Oct 2026

BIS paper weighs AI's climate benefits against its own energy footprint

A BIS working paper by Leonardo Gambacorta and Salvatore Polizzi examines the two-way relationship between artificial intelligence and climate change. It covers AI's direct environmental footprint, its potential contribution to mitigation and adaptation, rebound effects, and two stylised scenarios for how capabilities might evolve. The authors set out why the AI-climate nexus bears on potential output, inflation and financial stability.

BIS Paper 174 was published on 8 October 2026 and runs to 27 pages, authored by Leonardo Gambacorta and Salvatore Polizzi.
The paper finds AI can improve energy efficiency and climate forecasting while its development raises electricity demand and, depending on carbon intensity and timing, associated emissions.
The authors assess two stylised scenarios: an AI copilot path with gradual build-up and uncertain net effect, and a transformative AGI path with larger and more uncertain benefits and risks.
The paper states the AI-climate nexus can influence potential output and inflation dynamics, while the scale and financing of AI and energy investment may have financial stability implications.
The views expressed are those of the authors and do not necessarily reflect those of the BIS or its member central banks.

Source document

0:15

CISA Advisories Source document ↗

United States CISA Advisories AI, Technology & Data ✓ 14 claims 19 Oct 2026

CISA and FBI warn election and campaign officials of phishing ahead of 2026 midterms

CISA and the FBI have issued a joint Public Service Announcement warning election and campaign officials about cyber threats during the 2026 U.S. midterm elections. The notice describes phishing and smishing campaigns that mimic legitimate communications to steal credentials and deploy malware. For anyone handling voter data or sensitive campaign information, it sets out who is being targeted and why, and points to recommended practices.

CISA and the FBI released a joint Public Service Announcement on October 16, 2026 warning of cyber threats to the 2026 U.S. midterm elections.
The agencies say actors may use phishing and smishing to steal login credentials and sensitive information or to install malware on targeted devices.
Election officials, candidates and political organisations are named as targets because of access to voter registration data, government officials and sensitive campaign information.
The notice warns that campaigns increasingly use convincing emails, text messages, audio and video to manipulate recipients into disclosing information or interacting with malicious links and attachments.

Source document

0:15

DOJ Criminal Division Source document ↗

United States DOJ Criminal Division Financial Crime ✓ 20 claims 19 Oct 2026

DOJ charges three over sex trafficking of minors, partly directed from a prison

The Justice Department's Criminal Division unsealed an indictment in the District of Delaware charging three defendants with conspiracy to commit sex trafficking of minors by force, fraud and coercion, plus related CSAM counts. The case is notable for its allegation that one defendant continued directing the scheme from behind bars using contraband phones. This segment sets out who is charged, the alleged conduct and the penalties at stake.

All three defendants are charged with conspiracy to traffic a minor by force, fraud and coercion and face a minimum of 15 years and a maximum of life in prison on those counts.
Geeter is currently serving a 97-year California state sentence and allegedly used contraband cell phones to engage in some of the conduct while incarcerated.
Geeter and Hasty are additionally charged with producing child sexual abuse material, with Geeter facing 25 to 50 years and Hasty 15 to 30 years on the CSAM charges.
The scheme allegedly compelled three minors and one adult to engage in commercial sex acts in Delaware and elsewhere using force, threats, fraud or coercion.
The FBI's Delaware Violent Crime and Safe Streets Task Force and Delaware State Police are investigating; the indictment remains an allegation and all defendants are presumed innocent.

Source document

0:15

American Bankers Association — newsroom Source document ↗

United States American Bankers Association — newsroom Conduct & Consumer ✓ 17 claims 19 Oct 2026

ABA Guidance Clarifies Business-Purpose Loans Are Not Exempt Across All Lending Rules

ABA's October compliance column answers a recurring examiner question: does a business-purpose loan secured by a home automatically fall outside consumer protection rules? The answer, drawn directly from Regulation Z, X, C and B text and commentary, is no — each regulation must be checked separately, and the same loan can be exempt from some and covered by others.

Regulation Z, §1026.3(a)(1), excludes an extension of credit made primarily for a business, commercial, or agricultural purpose, and comment 3(a)-3.ii.A confirms this covers loans secured by a borrower's residence.
Regulation X, §1024.5(b)(2), exempts business-purpose loans from RESPA coverage and allows lenders to rely on the Regulation Z determination.
Regulation C requires a separate analysis under §1003.3(c)(10): a business-purpose mortgage is excluded from HMDA reporting unless it qualifies as a home improvement loan, home purchase loan, or refinancing.
Regulation B, §1002.2(g), defines business credit but contains no general exemption comparable to Regulations Z or X, meaning ECOA generally continues to apply, including the notification requirements in §1002.9(a)(3).

Source document

play

FCDO — sanctions announcements Source document ↗

United Kingdom FCDO — sanctions announcements Financial Crime ✓ 15 claims 19 Oct 2026

UK warns E1 settlement tender bidders they risk sanctions under new powers

On the closing day for bids on Israel's E1 settlement construction tender, the Foreign Secretary issued a direct warning to any business or individual considering participation. The statement points to new sanctions powers aimed at those involved in illegal settlement construction, and previews legislation on settlement goods and the services that finance them. A short but pointed signal for compliance and government affairs teams.

The 19 October 2026 statement marks the deadline for bids on Israel's E1 settlement construction tender.
The UK says it has created new powers to sanction individuals and companies involved in constructing illegal settlements such as E1.
Miliband warned bidders of legal and reputational consequences, including the risk of serious breaches of international law.
The Government reiterated a commitment to legislate to ban goods imported from illegal settlements and to act on services that finance or facilitate them.

Source document

0:15

FCA Source document ↗

United Kingdom FCA AI, Technology & Data ✓ 28 claims 19 Oct 2026

FCA publishes AI good and poor practice and asks LLM providers to add disclaimers

FCA data chief Jessica Rusu used a Bloomberg policy speech to publish observations on good and poor AI practice from this year's firm testing, call on general-purpose AI providers to add disclaimers, and set out how the FCA will supervise agentic finance. For compliance and technology leads, the material change sits in incident reporting and accountability expectations rather than any new rulebook.

The FCA published good and poor AI practice today, structured around consumer centricity, accountability and governance, and operational resilience.
Rusu said existing rules requiring firms to report major incidents must extend to significant AI failures and near-misses.
Six of the seven Mills Review recommendations are being embedded into live FCA work immediately, with the response focused on testing, assurance, monitoring and surveillance rather than further consultation.
The FCA called on general-purpose AI providers to add clear, proportionate and consistent disclaimers about the limits of financial information and advice their models generate.
The FCA is building AI supervisory tools, including a market first responder agent for about 9,000 small wholesale transaction-reporting firms and tooling for 60,000 AML firms entering its remit in 2028.

Source document

0:15

Eurex Source document ↗

European Union Eurex Markets & Infrastructure ✓ 18 claims 19 Oct 2026

Eurex to launch centrally cleared Japanese single-stock and dividend futures on 2 November

Eurex is opening its equity financing product suite in Japan, the last major developed market it had not covered, and its first move into Asia Pacific equity derivatives. The new single-stock futures and single-stock dividend futures are pitched as a centrally cleared, capital-efficient alternative to bilateral OTC equity swaps. For anyone running Japanese equity financing books, this is a structural shift worth a few minutes.

Trading in Japanese SSFs and SSDFs begins on 2 November 2026 with 10 leading Nikkei 225 names selected in consultation with clients and partners.
Further phases through 2027 will progressively expand coverage to the majority of Nikkei 225 constituents, driven by client demand and operational readiness.
All transactions are executed on Eurex's regulated market and centrally cleared through Eurex Clearing, with no ISDA master agreement required.
SSDFs are available in JPY and SSFs in both JPY and USD, with the contracts trading 21 hours a day from 08:15 SGT/09:15 JST.
Eurex states it is the first market infrastructure to offer centrally cleared futures on individual Japanese stocks.

Source document

0:15

ACPR Source document ↗

European Union ACPR Prudential & Capital ✓ 19 claims 19 Oct 2026

Bundesbank and ACPR leaders warn against deregulating EU banks for competitiveness

A joint op-ed from the incoming head of France's ACPR and a Bundesbank board member pushes back on the idea that loosening bank rules would make Europe more competitive. It is a short, pointed intervention into the EU's competitiveness debate, reframing prudential resilience as a precondition for financing climate, digital and defence priorities rather than an obstacle to it.

Denis Beau and Michael Theurer argue in La Tribune on 10 September 2026 that deregulating EU banks to boost competitiveness would be a mistake.
The authors frame the EU's competitive position as an issue of sovereignty, not only economic growth.
They note the combined capitalisation of US bond and equity markets far surpasses the EU's, and that the US venture capital market is six times bigger.
They call for mobilising European savings toward climate transition, digitalisation and defence, and for advancing the Savings and Investments Union.
They argue resilience built by post-2008 reforms is instrumental to banks' capacity to finance Europe's strategic ambitions.

Source document

0:15

Deutsche Bundesbank — speeches Source document ↗

European Union Deutsche Bundesbank — speeches Governance & Accountability ✓ 27 claims 19 Oct 2026

Bundesbank's Nagel urges Europe to diversify Asia trade, cut China import dependencies

Bundesbank President Joachim Nagel used a Bangkok panel to set out how Europe should recalibrate its economic relationship with Asia. The remarks matter less as policy than as a signal of how Germany's central bank frames supply-chain resilience, the Savings and Investments Union, and competitiveness. A short read for anyone tracking EU trade strategy and industrial-policy direction.

Nagel said that since 2019 EU exports to China have remained broadly stable while imports from China have increased substantially.
He welcomed the EU-India trade agreement reached this year and the agreements with Indonesia concluded last year.
He cited the ESMC joint venture in Dresden, with partner TSMC, and Infineon's new site near Bangkok opened two weeks earlier as examples of resilient value chains.
He called for implementing the Savings and Investments Union so European start-ups can access enough venture capital to scale and compete globally.

Source document

0:15

HKMA — Hong Kong Monetary Authority Source document ↗

HKMA — Hong Kong Monetary Authority Prudential & Capital ✓ 9 claims 19 Oct 2026

HKMA issues Code of Practice for designated retail payment system infrastructure operators

The HKMA has issued a Code of Practice under Hong Kong's Protection of Critical Infrastructures (Computer Systems) Ordinance for retail payment system infrastructure operators that it designates as critical infrastructure operators. This short segment covers what the Code binds, the statutory obligations it addresses, and the effective date operators need to work back from.

The Code is issued under section 8(1) of the Protection of Critical Infrastructures (Computer Systems) Ordinance (Chapter 653).
It applies to Retail Payment System Infrastructure Operators designated by the Monetary Authority as Critical Infrastructure Operators under section 12 of the Ordinance.
The Code provides practical guidance on compliance with category 1 and category 2 obligations under the Ordinance.
Under section 8(3), the Code takes effect on 15 October 2026.

Source document

0:15

Bank Negara Malaysia Source document ↗

Bank Negara Malaysia Prudential & Capital ✓ 18 claims 19 Oct 2026

Bank Negara sets 4-hour downtime cap for critical banking systems in revised RMiT

Bank Negara Malaysia has reissued its Risk Management in Technology policy document, consolidating and superseding the 2023 RMiT and five other instruments. It sets hard availability metrics for critical systems, phased resilience deadlines through 2027, and governance obligations covering the board, a designated technology committee and a CISO. The scope reaches well beyond banks into insurers, takaful operators, e-money issuers, payment system operators and remittance institutions.

Critical systems must keep cumulative unplanned customer-facing downtime to no more than 4 hours on a rolling 12-month basis and no more than 120 minutes per incident.
Firms must implement early-warning mechanisms and establish stand-in processing arrangements by 30 September 2027, and escalate to senior management when disruptions affect 5% or more of expected daily customers or transaction volumes.
Service-availability track records must be disclosed quarterly within 15 calendar days of quarter-end, beginning 15 October 2027.
The board must designate a technology committee with at least one member holding technology experience, and the firm must designate a CISO independent of day-to-day technology operations.
The document supersedes the 1 June 2023 RMiT and five other instruments, and network device logs must be retained for at least three years.

Source document

0:15

ECB Banking Supervision Source document ↗

European Union ECB Banking Supervision Sustainability ✓ 28 claims 19 Oct 2026

ECB's Elderson casts climate and nature risk as a structural macroeconomic concern

Frank Elderson, ECB Executive Board member and Vice-Chair of the Supervisory Board, used a keynote in Manila to argue that climate and nature degradation are now structural drivers of growth, inflation and financial stability, squarely within the central bank's mandate. The speech sets out why he sees the transition as a competitiveness play and what is holding investment back.

Elderson argued climate and nature risks are macroeconomic and fall within the ECB's price-stability and bank-safety mandate, requiring models that reflect them.
He cited ECB research that an extreme episode of water scarcity could put up to 24% of euro area output at risk, with flood exposure affecting nearly 12% of output and more than 60% of loans.
He identified two barriers to transition investment: political, economic and regulatory uncertainty, and access to finance, calling for predictability and no backtracking on legislative commitments.
The July 2026 euro area bank lending survey showed easing credit standards for transitioning firms but tightening for high-emission firms without credible transition plans.
He put additional EU green investment needs at hundreds of billions of euros annually, citing a Commission estimate of around €477 billion per year until 2030.

Source document

0:15

Bank Negara Malaysia Source document ↗

Bank Negara Malaysia Markets & Infrastructure ✓ 19 claims 19 Oct 2026

Bank Negara finalises interoperable fund transfer rules, bans proprietary QR schemes

Bank Negara Malaysia has issued the final Interoperable Fund Transfer Framework policy document alongside a statement responding to industry feedback on the 2025 exposure draft. The segment covers the prohibition of proprietary QR schemes, the mandatory routing of transactions through the shared payment infrastructure, and the mandatory enablement of cross-border services. Payments and compliance teams at participating institutions should understand what is now fixed and what remains under discussion.

Proprietary QR code schemes are prohibited, with a two-year transition period for affected institutions to migrate to the interoperable scheme.
Participants must enable both domestic and cross-border services, with the cross-border mandate's effective date aligned to the Nexus go-live timeline.
Both on-us and off-us fund transfers via the QR code scheme must route through the shared payment infrastructure to support fraud detection and response.
The P2M interoperable QR mandate applies only to participants offering QR-based purchase services to the retail segment, including consumers and merchants.
Non-bank cross-border fund transfer services generally fall under the Money Services Business Act 2011, with BNM formalising a list of excluded businesses.

Source document

0:15

Amlcft.Bnm Source document ↗

Malaysia Amlcft.Bnm Financial Crime ✓ 19 claims 19 Oct 2026

BNM issues plain-language AML/CFT guide for Malaysian DNFBPs and non-bank financial institutions

Bank Negara Malaysia has published a condensed AML/CFT/CPF guide aimed at designated non-financial businesses and professions and non-bank financial institutions. It walks these sectors through the main obligations under the AMLA and the dedicated policy document: KYC, sanctions screening, risk profiling, enhanced due diligence, suspicious transaction reporting and record retention, with the maximum penalties attached.

The guide binds DNFBPs and NBFIs including lawyers, accountants, trust companies, company secretaries, dealers in precious metals or stones, registered estate agents, licensed casinos and gaming outlets, moneylenders, pawnbrokers, and leasing and factoring businesses.
Firms must screen clients against the Ministry of Home Affairs (MOHA) and UNSCR sanctions lists covering terrorism, proliferation and other UN regimes, and on a positive name match must not commence business, freeze funds and block transactions.
Client risk profiling must assess four factors: client, product or service, geographical location and delivery channel, with enhanced due diligence applied to higher-risk clients.
Records, including KYC information, ID copies, transaction details and any STR analysis, must be kept for at least six years from termination of the business relationship.
Maximum penalties cited under AMLA sections 13, 14, 16 and 17 range up to a RM1 million fine and up to RM3 million or imprisonment up to five years or both.

Source document

0:15

Amlcft.Bnm Source document ↗

Malaysia Amlcft.Bnm Financial Crime ✓ 22 claims 19 Oct 2026

Malaysia overhauls proliferation-financing sanctions directive, binding banks to risk-assessment regime

Malaysia's Strategic Trade Secretariat has reissued its directive on targeted financial sanctions relating to proliferation financing, enforced from 7 June 2024. It binds a broad list of reporting institutions supervised by Bank Negara Malaysia, Labuan FSA and the Securities Commission, and goes beyond list-screening to require a documented PF risk assessment and a counter-proliferation compliance programme. This segment sets out who it covers and what they must now have in place.

The amended directive was enforced on 7 June 2024 and replaces the version dated 13 April 2018, issued under section 6 of the Strategic Trade Act 2010.
It is legally binding on the reporting institutions listed in Appendix I, which span banks, insurers, money-services businesses, capital-market intermediaries and designated non-financial businesses.
Institutions must immediately freeze a confirmed designated person's funds without the prior approval of the Strategic Trade Controller or supervisory authority.
Positive matches must be reported upon determination, with periodic reporting on changes due by 15 January of the following calendar year.
Institutions must identify, assess and document their proliferation-financing risks and implement a counter-proliferation financing compliance programme with a compliance officer, training and independent audit.

Source document

0:15

Banco de España Source document ↗

European Union Banco de España Digital Assets ✓ 20 claims 19 Oct 2026

Banco de España compares US, UK and EU stablecoin regimes and flags arbitrage gaps

Banco de España staff set three stablecoin frameworks side by side: the EU's MiCAR, already in force; the US GENIUS Act, signed in July 2025 but not operative until 2027; and the UK's phased proposal due by end-2026. The piece dissects redemption rights, reserve composition, capital and crisis management, and explains why co-issuer structures such as Circle's split between its US parent and French subsidiary worry European authorities.

MiCAR has applied to e-money tokens since June 2024, while the GENIUS Act is not expected to enter force until 2027 with a three-year transition, and the UK framework is due for approval by end-2026.
MiCAR requires non-bank EMT issuers to hold minimum capital of €350,000 and own funds of 2% of average circulation, rising to 3% for significant issuers, with possible supervisory add-ons of 20% to 40%.
MiCAR mandates at least 30% of the reserve in same-currency bank deposits, rising to 60% for significant e-money tokens.
The ESRB published a Recommendation in September 2025 to prohibit multi-jurisdiction co-issuance schemes in Europe absent adequate safeguards, citing the disparity between Circle's US parent and its French subsidiary.
USDT and USDC account for roughly 90% of global stablecoin volume, at capitalisations of around $190 billion and $80 billion respectively.

Source document

0:15

Amlcft.Bnm Source document ↗

Malaysia Amlcft.Bnm Financial Crime ✓ 24 claims 19 Oct 2026

Malaysia overhauls proliferation-financing sanctions directive, binds crypto custodians

Malaysia's Strategic Trade Secretariat has reissued its directive on targeted financial sanctions relating to proliferation financing, replacing the 2018 instrument. It restates freezing and screening duties tied to UN designations, adds explicit proliferation-financing risk-assessment and compliance-programme obligations, and applies across banks, insurers, DNFBPs, capital-market intermediaries and digital-asset service providers. Compliance teams should read it as a refreshed, legally binding baseline.

The TFS-PF (Amendment 2024) directive was enforced on 7 June 2024 and replaces the directive dated 13 April 2018, issued under section 6 of the Strategic Trade Act 2010.
Reporting institutions must freeze matched funds, assets and economic resources immediately, and the prior approval of the Strategic Trade Controller is not required to do so.
Institutions must screen their entire customer database, including dormant accounts, without delay upon a UNSC-published designation.
Institutions holding frozen or blocked funds must report changes to those funds by 15 January of the next calendar year using the Appendix III template.
Appendix I extends the obligations to licensed digital currency and digital token custodians and advisers, alongside banks, insurers, DNFBPs and Labuan entities.

Source document

0:15

Amlcft.Bnm Source document ↗

Malaysia Amlcft.Bnm Financial Crime ✓ 26 claims 19 Oct 2026

Bank Negara tells reporting institutions to apply FATF June 2026 high-risk list

Bank Negara Malaysia has circulated the FATF's June 2026 statements to all reporting institutions under AMLA, restating the obligations attaching to DPRK, Iran and Myanmar, and updating the increased-monitoring list. The circular reiterates a risk-based approach and warns explicitly against de-risking or blanket exits of customer categories, including NPOs linked to listed jurisdictions.

DPRK and Iran remain subject to FATF calls for countermeasures and enhanced customer due diligence, and institutions must continue applying targeted financial sanctions under the relevant UN resolutions.
Myanmar stays subject to enhanced due diligence, and the FATF will consider countermeasures if no further progress is made by October 2026.
Bosnia and Herzegovina and Iraq were added to the FATF's grey list, while Algeria and Namibia were removed following significant progress.
BNM requires institutions to apply a risk-based approach and avoid de-risking or blanket exits of customer categories such as NPOs linked to listed jurisdictions.
For grey-list jurisdictions the FATF does not call for enhanced due diligence; institutions must assess each jurisdiction case-by-case in their risk assessments.

Source document

0:15

Bank Negara Malaysia Source document ↗

Bank Negara Malaysia Markets & Infrastructure ✓ 25 claims 19 Oct 2026

BNM reissues RENTAS foreign-currency settlement procedures, effective 1 September 2026

Bank Negara Malaysia has published the latest consolidated operational procedures for foreign-currency settlement in RENTAS, the country's real-time gross settlement system. The document sets out membership types, access channels, business hours, cut-off times, settlement finality and queue management for participants settling in supported foreign currencies. The live change in this version is cosmetic, but the consolidated text is now the operative reference for operations teams.

Version 1.8 takes effect 1 September 2026 and its sole substantive change replaces the signatory title 'Head' with 'Director' across nine appendices and participant forms.
Foreign-currency settlement runs 8.30am to 6.00pm, with cut-off times of 5.30pm for RMB and 6.00pm for USD, and all unsettled queued instructions cancelled at cut-off.
Participants using cloud-based SWIFT access (SAL2 or SAC) must submit an annual declaration to BNM by 31 January covering CSCF attestation and RMiT cloud compliance.
Paying participants must transmit payment instructions to RENTAS Host within 30 minutes of a customer instruction, except transactions failing regulatory, sanction or AML screening.
Participants requesting a cut-off extension acknowledge BNM may publicly disclose all information pertaining to the request.

Source document

0:15

Bank Negara Malaysia Source document ↗

Bank Negara Malaysia Markets & Infrastructure ✓ 19 claims 19 Oct 2026

BNM revises RENTAS retail-settlement balance rules and FRPS+ charges from 1 September

Bank Negara Malaysia has reissued the Operational Procedures for MYR settlement in RENTAS, effective 1 September 2026. Version 1.9 is a narrow but operationally material update touching the Near Real Time Settlement module's balance mechanics, third-party payment messaging and the fee schedule. If you run treasury or payments operations against a RENTAS settlement account, these changes affect intraday funding and cost.

Version 1.9 takes effect on 1 September 2026 and binds all RENTAS participants under section 35 FSA and section 45 IFSA.
Clause 38.15 revises the NRTS minimum-balance mechanism and calculation formula and updates the maximum-balance threshold.
Appendix II adds sweep-in and sweep-out charges and updates effective charges for FRPS+ utilisation and FRPS+ Overnight Charges.
Guideline I on MYR Third Party Payments adds guidance on the usage of IFT04 in pacs.009.001.08.

Source document

0:15

Bank Negara Malaysia Source document ↗

Bank Negara Malaysia Markets & Infrastructure ✓ 23 claims 19 Oct 2026

BNM reissues RENTAS and FAST participation rules, effective 1 September 2026

Bank Negara Malaysia has issued version 1.6 of the Participation Rules for Payments and Securities Services, the binding contract governing participants of RENTAS and FAST. The headline change is cosmetic, but the consolidated text carries substantive obligations added in recent revisions covering insolvency handling, continued access for institutions in resolution, and the new role of retail payments operators. Worth a few minutes for anyone operating a RENTAS or SSDS account.

Version 1.6 of the Participation Rules takes effect on 1 September 2026 and binds all participants of RENTAS and FAST.
The sole change in this version is Clause 40.1.3, which changes an officer designation from 'Head' to 'Director'.
An institution in PIDM resolution must retain continued access to RENTAS and cannot be suspended solely for entering resolution under section 98 of the PIDM Act.
Participants must formally notify their board or compliance committee of any breach of the Rules and submit incident reports to BNM on request.
BNM's aggregate liability to participants is capped at the highest annual fees and charges paid by any one participant in the preceding twelve months, excluding penalties and admission fees.

Source document

0:15

Brdr.Hkma Source document ↗

Hong Kong Brdr.Hkma Financial Crime ✓ 17 claims 19 Oct 2026

HKMA tells banks to close gaps on high-end money laundering after thematic review

The HKMA has issued a circular to all Authorized Institutions setting out findings from a thematic review of controls against sophisticated money laundering. It describes two live typologies, five areas needing enhancement, and asks firms to run a gap analysis. For heads of financial crime, it signals where HKMA supervisors will probe next, particularly on retail high-net-worth customers and source-of-wealth corroboration.

The HKMA identified two typologies: syndicates using retail accounts as a gateway to move funds across wealth management and private banking, and criminals using citizenship-by-investment nationalities to open accounts across jurisdictions for cross-border transfers.
Reviewers found retail high-net-worth customers were subject to weaker CDD than private banking clients despite very similar ML/TF risk, and want periodic portfolio monitoring with proportionate additional measures.
Some front-line staff overrelied on customer representations when establishing source of wealth and funds, without challenging reasonableness or seeking corroborating documentation.
Certain transaction monitoring alerts were closed without sufficient justification, including those triggered by opaque cash or cashier's order deposits and transactions with no customer nexus.
AIs are directed to conduct a gap analysis against the five enhancement areas and consider optimising their AML/CFT controls.

Source document

0:15

Brdr.Hkma Source document ↗

Hong Kong Brdr.Hkma Financial Crime ✓ 19 claims 19 Oct 2026

HKMA rewrites remote on-boarding rules for individual customers, citing deepfake fraud

The HKMA has updated its expectations for remotely on-boarding individual customers, replacing two earlier circulars. It restates two core principles for identity authentication and matching, warns specifically about deepfake-enabled impersonation and mule accounts, and tells authorized institutions and stored value facility licensees to review their systems against intelligence shared with the Hong Kong Police Force.

The circular supersedes the HKMA's remote on-boarding circulars of 1 February 2019 and 24 May 2021 for individual customers.
The 2020 corporate on-boarding circular and the June 2020 thematic-review feedback circular remain applicable and should be read alongside this letter.
Firms must satisfy two core principles: verifying the genuineness of identity documents and incontrovertibly linking the customer to that identity.
The HKMA cites deepfake technology, AI-driven automation and mule-account networks as escalating ML/TF threats to remote on-boarding.
AIs and SVF licensees are told to conduct a comprehensive review of remote on-boarding solutions, systems and oversight.

Source document

0:15

HKMA — Hong Kong Monetary Authority Source document ↗

HKMA — Hong Kong Monetary Authority Prudential & Capital ✓ 23 claims 19 Oct 2026

HKMA sets statutory cyber code for designated payment system infrastructure operators

The Hong Kong Monetary Authority has published a sectoral Code of Practice under the Protection of Critical Infrastructures (Computer Systems) Ordinance for retail payment system infrastructure operators designated as critical infrastructure operators. It sets baseline requirements for protecting critical computer systems, from designation and governance through to risk assessment, penetration testing and logging. This segment covers what the Code binds, how it is enforced, and where it leans on existing frameworks.

The Code binds Retail Payment System Infrastructure operators designated by the Monetary Authority as Critical Infrastructure operators.
Breach of the Code is not itself an offence, but failure to comply with MA written directions, assessed against the Code, is an offence.
Security management plans must be endorsed by the Board, a delegated sub-committee or senior management, and reviewed at least once every two years.
System logs must be retained for a minimum of 6 months, secured so they cannot be deleted or altered, and user access rights reviewed at least annually.
Risk assessments must include a vulnerability assessment and a penetration test conducted by qualified professionals.

Source document

0:15

Cyber Security Agency of Singapore Source document ↗

Cyber Security Agency of Singapore AI, Technology & Data ✓ 20 claims 19 Oct 2026

Singapore to pilot cybersecurity accreditation framework from Q2 2027, releases AI coding handbook

A policy speech that matters for how Singapore will certify cyber talent and govern AI inside security teams. Senior Minister of State Tan Kiat How confirmed two concrete outputs: a Handbook on the Secure Use of AI Coding Assistants, released now, and a Cybersecurity Professional Accreditation Framework set to pilot from the second quarter of 2027. Short on detail, clear on direction.

CSA has released a Handbook on the Secure Use of AI Coding Assistants, based on its own security assessments of such tools.
A Cybersecurity Professional Accreditation Framework is expected to pilot from the second quarter of 2027, built with bodies such as ISC2.
The framework will validate practitioners' demonstrated ability to do the job rather than resumes or certifications alone.
The minister cited a campaign where one operator used AI agents to automate over 100 attack projects and steal more than 600,000 payment-card records.

Source document

0:15

AMF France Source document ↗

AMF France Markets & Infrastructure ✓ 21 claims 19 Oct 2026

AMF reports first convictions against organised insider networks, up to €30m in fines

AMF chair Marie-Anne Barbat-Layani used her closing speech at the Sanctions Commission's 19th colloquium to claim the first results against the organised insider networks she flagged in 2024, and to set out how remediation now shapes enforcement outcomes. For heads of compliance in France, the operational detail on composition administrative and newly enacted investigative powers matters more than the headline conviction.

On 13 April 2026 the Paris criminal court convicted three people for insider dealing and complicity in the Airgas affair, with sentences up to three years and fines up to €30 million.
The law of 25 June 2026 enacted five measures, including letting financial investigating judges and the PNF call on specially authorised AMF investigators alongside judicial investigation services.
Since 2010 the composition administrative regime has delivered remediation by 111 regulated firms and €9 million paid back to investors under AMF oversight.
The AMF says 86% of firms receiving control reports that explicitly mention remediation then cited remediation measures in their responses.
Barbat-Layani is still seeking webscraping powers and the use of assumed identities, both outstanding in the Labaronne bill tabled in September 2025.

Source document

0:15

AMF France Source document ↗

AMF France Financial Crime ✓ 21 claims 19 Oct 2026

AMF publishes 2022-2025 review of AML controls, citing 16 sanctions among 46 cases

The AMF has released the lessons from four years of inspections carrying an anti-money-laundering, counter-terrorist-financing and tax-information-exchange component. It sets out where French asset managers and investment advisers keep falling short, from incomplete procedures to weak oversight of delegates, and signals a risk-based enforcement stance as AMLA's European supervision takes shape.

The synthesis covers 46 controls producing follow-up between 1 January 2022 and 31 December 2025, yielding 16 sanction decisions, 16 administrative settlements and 16 remediation letters, with some controls drawing mixed outcomes.
The AMF identifies incomplete or poorly adapted LCB-FT procedures and insufficiently personalised risk mapping that fails to link identified risks to actual vigilance measures.
Inspectors flagged weak oversight of delegates, distributors and third parties conducting customer due diligence, plus gaps in collecting and updating beneficial-owner, source-of-funds and PEP data.
The review stresses shortcomings in suspicious-transaction reporting to TRACFIN and reporting to the AMF, and in meeting automatic tax-information-exchange (EAI) obligations.
The AMF ties the publication to its 2026 supervision priorities, the Impact 2027 strategy and the phased establishment of the EU anti-money-laundering authority AMLA, created in June 2024.

Source document

0:15

AMF France Source document ↗

AMF France Markets & Infrastructure ✓ 28 claims 19 Oct 2026

AMF's 2026 risk map flags geopolitics, cyber and private assets as leading concerns

The AMF published its annual markets and risk mapping on 30 June 2026. It reaffirms geopolitical and cyber risk as the dominant threats, notes markets rebounded quickly from the Middle East conflict shock, and singles out private assets, real-estate funds, and a younger, more vulnerable generation of retail investors as supervisory priorities for the year ahead.

The AMF published its Cartographie 2026 des marchés et des risques on 30 June 2026, confirming geopolitical and cyber risk as the leading threats.
French markets remained orderly and resilient through the volatility that followed the outbreak of conflict with Iran, with equity markets rebounding quickly.
The regulator warns of elevated valuations, concentration of returns in a few large technology stocks, and high corporate leverage as amplifiers of any macro-financial deterioration.
Private assets and private credit growth, alongside widening retail access, raise concerns over liquidity, valuation, leverage and interconnections, though not yet deemed a significant stability risk.
The AMF cites DORA as the structuring framework for operational and cyber resilience amid rapid AI and frontier-model development, and flags rising scams aimed at younger investors.

Source document

0:15

ACPR Source document ↗

France ACPR Financial Crime ✓ 17 claims 19 Oct 2026

Banque de France launches national suspect-IBAN register to curb payment fraud

France has switched on a shared register of bank accounts flagged for fraud risk, letting banks and other payment service providers pool warnings about IBANs suspected of criminal use. The item matters to anyone running fraud-prevention or payments compliance in France: it creates a new reporting channel, sits under the 6 November 2025 law, and is designed to fold into a future EU data-exchange regime.

The FNC-RF went live on 7 May 2026 under the law of 6 November 2025, held by the Banque de France and fed by payment service providers.
The register lets all PSPs, chiefly banks, share flags on accounts identified by IBAN as potentially used by fraudsters.
No nominative data will be recorded and entries will be held for a limited duration.
The file complements existing OSMP measures including beneficiary verification and telephone-number authentication.
The FNC-RF is intended to integrate into an EU-level fraud data-exchange mechanism under the future European payment services regulation.

Source document

0:15

Euronext Source document ↗

Switzerland Euronext Financial Crime ✓ 24 claims 19 Oct 2026

Ex-Mirabaud partner and Swiss banking lobby chief convicted of bribery in Kuwait case

Switzerland's Federal Criminal Court convicted Pierre Mirabaud, a former partner at Geneva private bank Mirabaud & Cie and former head of the Swiss Bankers Association, of corruption and money laundering. The half-day hearing closed a long prosecution over payments to a Kuwaiti government official. For financial-crime teams, the case shows how an individual conviction can follow years after a regulator settles with the firm.

Pierre Mirabaud, 77, received a suspended two-year prison sentence after admitting corruption and money laundering at the Federal Criminal Court in Bellinzona on 8 September 2026.
Prosecutors alleged hundreds of payments totalling 82.3 million Swiss francs ($101.7 million) to a Kuwaiti government official between 2000 and 2012 to win $595.2 million of bank business.
Mirabaud headed the Swiss Bankers Association from 2003 to 2009 and retired from the bank in 2009, continuing as a consultant until 2012.
Prosecutors sought 24 months against a maximum five years, citing his age, lack of prior convictions and cooperation.
FINMA said in 2024 it had confiscated 12.7 million francs of unlawfully generated profits from the bank over financial market law and money-laundering breaches.

Source document

0:15

ESMA Source document ↗

European Union ESMA Governance & Accountability ✓ 13 claims 19 Oct 2026

ESMA says access to third-country CSDs will continue past January 2027 deadline

ESMA has issued a statement addressing uncertainty over what happens when the transitional regime for third-country Central Securities Depositories expires on 17 January 2027, before EU legislation extending it is finalised. This matters for issuers and other market participants relying on notary and central maintenance services from non-EU CSDs.

The current transitional regime for third-country CSDs is set to expire on 17 January 2027.
ESMA's statement, reference ESMA74-2119945926-3877, was published on 7 October 2026.
The Market Integration and Supervision Package, which proposes extending the transitional regime, remains under negotiation.
ESMA states it understands both the Council of the European Union and the European Parliament support an extension.
Issuers had raised concerns about operational challenges stemming from uncertainty over continued access to third-country CSD services.

Source document

0:15

European Commission — Migration and Home Affairs Source document ↗

European Union European Commission — Migration and Home Affairs Financial Crime ✓ 14 claims 19 Oct 2026

EU signs Additional Protocol to Warsaw Convention on asset recovery and money laundering

The EU has signed the Additional Protocol to the Council of Europe's Warsaw Convention, updating a 2009 framework on laundering, seizure and confiscation. This segment covers what the Protocol adds, why Brussels is pursuing it, and the ratification steps still outstanding before any of it binds authorities or firms.

The EU signed the Additional Protocol to the Warsaw Convention on 14 October 2026 in Strasbourg.
The Protocol strengthens rules on freezing and confiscation, asset management, and police and judicial cooperation.
Georgia, Greece, Hungary, Luxembourg, Monaco, Montenegro, San Marino and the UK also signed the Protocol.
The Protocol was adopted by the Council of Europe Committee of Ministers on 15 May 2026 and is not yet in force.
Conclusion requires a Council decision and the consent of the European Parliament; the 2009 Convention remains unratified.

Source document

0:15

Bank of England Publications Source document ↗

United Kingdom Bank of England Publications Markets & Infrastructure ✓ 26 claims 19 Oct 2026

Bank of England consults on letting CCPs accept uncollateralised letters of credit as margin

The Bank of England is proposing to let UK CCPs accept uncollateralised letters of credit as initial margin collateral, a change rooted in the 2022 energy-market margin spikes. The consultation removes the full-backing requirement, extends eligibility to non-financial clients, and layers on new concentration and due-diligence safeguards. For clearing members, issuing banks and corporate hedgers, it reshapes how margin obligations can be met.

The Bank proposes removing the requirement that commercial bank guarantees be fully collateralised before a CCP can accept them as initial margin.
Non-financial counterparties clearing as clients, not only clearing members, would become eligible to post LOCs, enabling pass-through models.
The single-issuer concentration limit would be cut from 10% to 5% of a CCP's total collateral, and the option to raise it to 25% removed.
Eligible issuers would be restricted to authorised UK credit institutions or authorised overseas credit institutions, with ongoing creditworthiness monitoring required.
Responses are due by 15 January 2027; final rules are proposed for 2027 H1 with no implementation period.

Source document

0:15

Bank Policy Institute Source document ↗

United States Bank Policy Institute Governance & Accountability ✓ 17 claims 19 Oct 2026

FDIC and OCC propose easing rules on sharing confidential supervisory information

The FDIC and OCC have proposed reworking the rules that govern how banks handle confidential supervisory information. BPI, which supports much of the direction, sets out where the proposals fall short: imprecise definitions, prescriptive confidentiality agreements, limited third-party disclosure categories and no notice before discretionary agency disclosures. This explainer is the fastest route to what is on the table and what BPI wants changed.

The FDIC and OCC proposals would expand when banks may share their own CSI without obtaining prior regulatory approval.
BPI wants CSI defined precisely so institution-generated materials do not become CSI merely because they are shared with or reviewed by the FDIC or OCC.
BPI recommends notice and an opportunity to object before an agency makes a discretionary disclosure of institution-specific CSI.
BPI asks that prescriptive confidentiality-agreement requirements be replaced with a principles-based framework.
BPI urges the FDIC and OCC to work with the Federal Reserve to align the banking agencies' CSI regulations.

Source document

0:15

International Criminal Court Source document ↗

Global International Criminal Court Financial Crime ✓ 17 claims 19 Oct 2026

ICC states parties' Bureau regrets institutional sanctions against the Court, seeks revocation

The Bureau of the Assembly of States Parties has issued a statement regretting the imposition of sanctions on the International Criminal Court as an institution, following earlier measures against its elected officials. The statement calls for immediate revocation and urges States Parties and the international community to stand firm. It is short, political and non-binding, but it signals the Rome Statute system's institutional response.

The Bureau of the Assembly of States Parties regrets the institutional sanctions imposed on the International Criminal Court, in a statement dated 10 October 2026.
The statement says the institutional designation of the Court follows earlier sanctions targeting its elected officials.
The Bureau calls for the immediate revocation of the sanctions and urges all States Parties and stakeholders to continue cooperating with the Court.
The Assembly of States Parties is the management oversight and legislative body of the ICC; the Bureau consists of a President, two Vice-Presidents and 18 members elected for three-year terms.

Source document

0:15

FCA Source document ↗

United Kingdom FCA Governance & Accountability ✓ 22 claims 19 Oct 2026

FCA survey of 411 corporate finance firms finds weakest spots in compliance culture

The FCA has published findings from a survey of corporate finance firms' compliance resources, flagged in its Regulatory Priorities Report. Most firms perform core compliance tasks, but the regulator wants to see more independent challenge and better-embedded compliance culture, particularly in small firms and those playing public-markets roles. If you run second-line functions in wholesale advisory firms, this sets the benchmark the FCA will apply when it engages selected firms next.

The FCA surveyed 411 corporate finance firms and received 382 responses; 47% reported carrying out all activities covered by the survey.
140 firms reported that regulatory compliance does not form part of staff performance assessments, and 90 reported no whistleblower disclosure arrangements.
82 firms each reported that compliance does not attend management body meetings and does not report at least annually to the management body.
63% of firms reported a compliance function that is not dedicated solely to compliance, and 90% used some form of third-party compliance support.
The FCA will engage selected firms further to examine the adequacy and effectiveness of their compliance resources and gaps in practice.

Source document

0:15

Regulus Weekend Edition Source document ↗

United States Regulus Weekend Edition AI, Technology & Data ✓ 19 claims 18 Oct 2026

CISA audited its own network tool and found a password hardcoded as 'Malcolm'

The lighter file this week is really a file about self-administration: the body that polices everyone's patching disclosed seven flaws in its own monitoring tool, including a password named after the product and an unauthenticated route to wiping forensic data. Alongside it, two US transparency portals returned access-control screens instead of notices, and HMRC amended the same export process twice in three months. The joke is free; the discipline it rewards is not.

CISA advisory ICSA-26-280-01, updated 15 October 2026, lists seven CVEs in CISA's own Malcolm tool, including a passwordSecret hardcoded as "Malcolm".
Malcolm fixes split across v26.08.0 and v26.09.0, so an operator who stops at v26.08.0 leaves CVE-2026-107333 and CVE-2026-107362 open.
Federal Register pages for an SEC CME Securities Clearing notice dated 13 October and a Treasury information-sharing collection dated 9 October returned access-control screens with no operative text.
HMRC amended its export examination-premises approval process on 8 October 2026, three months after an 8 July 2026 revision, and these notices carry the force of law.
CISA reports no known public exploitation of the Malcolm flaws to date.

Source document

0:15

Regulus Weekend Edition Source document ↗

European Union Regulus Weekend Edition Markets & Infrastructure ✓ 17 claims 18 Oct 2026

Binding dates kept arriving before the headline events firms filed them under

Five regulators set clocks this week, and in almost every case the date that bites first was not the headline event. ESMA's T+1 framework is the clearest example, but the pattern runs through Basel's G-SIB fix, AMLA's Frankfurt roundtables and the ISDA FX cutover. This is a read on how to calendar a week like this one.

ESMA fixed 7 December 2026 as the first binding T+1 deadline for electronic, standardised and machine-readable allocation and confirmation messaging, almost a year before settlement shortens on 11 October 2027.
Basel's G-SIB reporting and disclosure threshold rises from EUR 200 billion to EUR 350 billion in leverage ratio exposure measure from 2027, while annual-average indicator calculation is deferred to 1 January 2030.
AMLA's in-person Frankfurt simplified-CDD expression-of-interest window closed 18 October 2026 at 23h59 CEST, with roundtables running 9 November to 2 December 2026.
ISDA's 2026 FX Definitions take over in November 2027, after which the 1998 definitions cease to apply, with a SWIFT change request already submitted before the 4 June deadline.
ABA, BPI, CBA and ICBA asked the Fed to move its 30 November stablecoin comment deadline to 29 January, a decision still pending.

Source document

0:15

Regulus Weekend Edition Source document ↗

Global Regulus Weekend Edition Financial Crime ✓ 20 claims 18 Oct 2026

AMLA roundtable sign-up closes Sunday; ESMA messaging mandate bites 7 December

A look at the deadlines and decisions ahead. The sole hard deadline this week is AMLA's Frankfurt roundtable sign-up, closing Sunday. Beyond it, ESMA's first T+1 compliance date, a pending Fed extension decision on stablecoin rules, and Basel's G-SIB timetable all reward reading each regime backwards from its earliest binding date rather than its headline event.

Expressions of interest for AMLA's Frankfurt simplified-CDD roundtables close 18 October 2026 at 23h59 CEST, with in-person sessions running 9 November to 2 December 2026.
ESMA's first binding T+1 deadline, mandatory electronic allocation and confirmation messaging, falls on 7 December 2026, ahead of EU T+1 settlement on 11 October 2027.
Four US banking groups have asked the Fed to move its 30 November stablecoin comment deadline to 29 January, and that decision is still pending.
Basel's EUR 350 billion G-SIB reporting threshold takes effect from 2027, its EBU cross-border consultation closes 14 January 2027, and annual averaging is deferred to 1 January 2030.
The SRB has scrapped quarterly MREL sign-off with immediate effect.

Source document

0:15

Regulus Weekend Edition Source document ↗

United States Regulus Weekend Edition Financial Crime ✓ 19 claims 18 Oct 2026

DOJ and Labor debar Cloudera from PERM for two years in US-worker bias settlement

A quiet week for sanctions designations and AML fines, but the enforcement that did land is instructive. The headline action pairs a Labor Department debarment with a DOJ civil-rights penalty from one set of facts. Alongside it, AMLA opened its simplified-CDD consultation channel and the ABA signalled where it sees fraud moving. Five minutes on what bit and what to watch.

Cloudera will be debarred from the PERM program for two years, fund $1.4 million in back pay and pay $600,000 in civil penalties.
DOJ described the Cloudera resolution as the fourteenth settlement since it relaunched its Protecting U.S. Workers Initiative in 2025, resolving an April lawsuit over recruitment for seven positions.
AMLA's expression-of-interest window for in-person Frankfurt roundtables on simplified customer due diligence closed 18 October 2026 at 23h59 CEST, with sessions running 9 November to 2 December.
The ABA's fraud-management award citation for M&T Bank's Karen Boyer foregrounded payment threats, social engineering, scams and account takeover as the current retail-banking fraud frontier.

Source document

Regulatory news and audio briefings from financial regulators worldwide — financial crime, AML, sanctions, fraud, digital assets and compliance

Regulatory heat map

Filtered