Live 262 sources monitored São Paulo Washington London Frankfurt Dubai Hong Kong Sydney 7 regions
✦ RegulusGlobal regulatory broadcast network

Regulatory news and audio briefings from financial regulators worldwide — financial crime, AML, sanctions, fraud, digital assets and compliance

Regulatory heat map

Where it's moving right now · select a region to filter
Category
Country
Regulator
DOJ Criminal Division 99 Federal Register — SEC 56 American Bankers Association — newsroom 47 CISA Advisories 37 BIS Press Releases 36 FCA 29 European Central Bank 26 HM Revenue & Customs 20 SEC Press Releases 16 Bank of England 15 Washington State DFI 14 Regulus Weekend Edition 14 US Federal Trade Commission — press releases 14 Financial Stability Board 14 FCA Publications 12 SFC Hong Kong 11 OCC Bulletins 11 FINRA 10 Federal Register — Treasury 10 CFTC — Commodity Futures Trading Commission 10 Federal Register — State Department 9 Securities and Exchange Commission 8 ISDA 8 Federal Reserve 8 ECB Banking Supervision 8 CSSF Luxembourg 8 SEC Speeches and Statements 7 HKMA — Hong Kong Monetary Authority 7 European Commission Digital Strategy 7 Deutsche Bundesbank — speeches 7 ADGM Abu Dhabi — announcements 7 Federal Register — NCUA 6 Federal Register — CFTC 6 ESMA 6 Bank of England Publications 6 Bank Negara Malaysia 6 Single Resolution Board 5 International Criminal Court 5 UK Competition and Markets Authority 5 NIST 4 IC3 — FBI Internet Crime Complaint Center 4 FMA Austria 4 Federal Register — Federal Reserve 4 Deutsche Bundesbank 4 Brdr.Hkma 4 Bank Policy Institute 4 Amlcft.Bnm 4 AFM Netherlands 4 FCDO — sanctions announcements 3 HM Treasury 3 Financial Services and the Treasury Bureau 3 Federal Reserve Speeches 3 UK DSIT 3 CFTC Enforcement 3 ASEANAPOL 3 AMF France 3 Alliance for Financial Inclusion 3 US Treasury — press releases 2 UN — press releases 2 Department for Business and Trade — export control 2 NIST — cybersecurity and identity updates 2 National Crime Agency UK 2 Hong Kong Exchanges and Clearing Limited 2 HM Treasury Consultations 2 Federal Register — FDIC 2 Federal Register — CFPB 2 Press Releases | FDIC.gov 2 European Data Protection Board 2 CFPB 2 Bank of Ghana 2 ACPR 2 UN News — global perspective 1 UK Finance — news 1 Texas State Securities Board 1 Singapore Police Force 1 Sveriges Riksbank 1 Osaka Exchange 1 OFSI 1 NCSC UK 1 MAS — Monetary Authority of Singapore 1 Euronext 1 International Association for Trusted Blockchain Applications 1 European Commission — Migration and Home Affairs 1 Govinfo 1 GFMA — Global Financial Markets Association 1 Finanstilsynet Norway 1 Federal Register — OCC 1 Federal Register — FinCEN 1 Federal Register — Industry and Security Bureau 1 Eurex 1 European Payments Council 1 EDB Singapore — Economic Development Board 1 CSSF / Banque centrale du Luxembourg 1 Cyber Security Agency of Singapore 1 Croatian Financial Services Supervisory Agency (HANFA) 1 Companies House 1 Commerce Commission New Zealand 1 Bank for International Settlements 1 Banco de España 1 Bank of Russia 1 Banco de la República 1 Banco Central de Bolivia (BCB) 1
Showing
regulator: regulus_weekend × since: all × Clear all

Filtered

Cards Wire 14 segments
RWE Regulus Weekend Edition Source document ↗
United States Regulus Weekend Edition Financial Crime ✓ 20 claims 01 Nov 2026

The week fraudsters kept convicting themselves, and the AI that may stop it

This week's heaviest fraud results shared a quietly comic thread: the people undone by their own documents. A doctor photographed on a beach on a day she billed in another state, a signature forged for a man who was in prison, a juror paid off. We draw out what the enforcement record says about criminals catching themselves, and the single AI charge that hints the era of the helpful self-made mistake may be ending.

  • Violetta Mailyan, 45, was sentenced on 29 October 2026 to 15 years for a $45m Medicare Botox scheme, convicted on nine wire fraud counts and three obstruction counts, with $32,904,049.41 restitution ordered.
  • Her case turned partly on a photograph from Cabo on a day she billed $34,560 in Glendale, and on a beneficiary consent form she forged for a man who was incarcerated at the time.
  • In Minnesota, Said Farah received 78 months and a $40,000 fine for bribing a juror, part of 13 benefits-fraud defendants and nearly $83m in intended losses reported for the period.
  • A single Minnesota count alleges patient notes were generated with AI, the first sign that fabricated supporting records can be produced cheaply and at volume.
  • FINRA logged settled actions against First Citizens Investor Services (CRD 44430) and broker Landon Beecham (CRD 8134707), with the substance of each held in an attached document the public listing does not reproduce.
Source document
RWE Regulus Weekend Edition Source document ↗
United States Regulus Weekend Edition Financial Crime ✓ 18 claims 01 Nov 2026

DOJ's fraud wins ran on paper trails as a Minnesota charge alleges AI faked records

The DOJ Fraud Division posted a month of heavy results won largely on cover-up counts rather than the underlying fraud. Buried in the Minnesota caseload is a single charge alleging patient notes were generated with AI. We take that count seriously, because it attacks the one mechanism nearly every other result relied on, and we set it against two US rule rollbacks landing the same week.

  • Mailyan was sentenced to 15 years on nine wire fraud counts and three obstruction counts, with $32,904,049.41 in restitution and over $16,029,742 forfeited.
  • Kablazada pleaded guilty to a $227m COVID test-kit scheme on which Medicare paid out approximately $136m, built on beneficiary data bought from a Pakistan-based telemarketer.
  • One of the 13 Minnesota benefits counts alleges a defendant used AI to fabricate patient notes to justify claims.
  • The FDIC proposed rescinding its 2016 part 370 recordkeeping rule and the SEC proposed rescinding Rule 14a-8, which has governed shareholder proposals since 1942.
  • Two fixed dates sit ahead: HKEX failover registration by 13 November and the Mizuho Rule 18a-10 comment close on 2 December.
Source document
RWE Regulus Weekend Edition Source document ↗
United States Regulus Weekend Edition Markets & Infrastructure ✓ 16 claims 01 Nov 2026

Two hard deadlines anchor the week ahead while US rule clocks wait on the Register

The week ahead carries just two dates a compliance function can diarise with certainty, both narrow in reach. The items with the widest readership, two US rule rescissions, have no absolute deadline because their clocks run from Federal Register publication the filings do not state. This is a preview of a near-empty calendar that is about to fill without warning, and what to instrument before it does.

  • CCASS Participants and Designated Banks must register by 13 November 2026 to join HKEX's 21 November data centre failover rehearsal for CCASS, FINI, RAP and related systems.
  • The SEC's comment period on Mizuho Capital Markets' request to raise Rule 18a-10's fixed-dollar threshold from $50 billion to $100 billion closes 2 December 2026.
  • HKEX will suspend RAP services on 7-8 November and 21-22 November 2026 for system testing, with CCASS production reports normally due 21 November available on 23 November.
  • The FDIC part 370 rescission, SEC Rule 14a-8 rescission, Nasdaq ISE $0.50 strike proposal, Cboe Missed Liquidity Report extension and DOJ NICS final rule all run from Federal Register publication dates not yet set.
  • Nasdaq ISE comments on SR-ISE-2026-53 are due 21 days after Federal Register publication, and the DOJ NICS final rule takes effect 30 days after publication.
Source document
RWE Regulus Weekend Edition Source document ↗
United States Regulus Weekend Edition Financial Crime ✓ 23 claims 01 Nov 2026

DOJ fraud sweep won on cover-up counts as Minnesota case alleges AI-faked records

The week's financial crime news sat almost entirely with the DOJ Fraud Division: a cluster of Medicare, COVID test-kit, crypto and benefits results where the heaviest counts were obstruction and laundering, not the underlying fraud. One Minnesota charge alleging AI-generated patient notes is the signal worth your attention. FinCEN added two AML alerts; FINRA logged two consent actions; and the Bank Policy Institute mapped a push to shift scam liability upstream.

  • Violetta Mailyan was sentenced to 15 years for a $45m Medicare Botox scheme, convicted on nine wire fraud counts and three obstruction counts, with $32,904,049.41 restitution and over $16,029,742 forfeiture ordered.
  • Syed Murtuza Kablazada pleaded guilty to $227m in COVID test-kit fraud built on beneficiary data bought from a Pakistan-based telemarketer; Medicare paid about $136m and he agreed to forfeit over $46m.
  • Alexander Gurevich was extradited to the Northern District of California over the $2.89m Nomad Bridge exploit, with his heaviest exposure, up to 20 years, on the money laundering count.
  • DOJ charged, convicted or sentenced 13 Minnesota benefits-fraud defendants over nearly $83m in intended losses, including a count alleging patient notes were generated with AI.
  • FinCEN issued an alert on cross-border MSB payment risk and a notice on charity exploitation, directing institutions to assess nonprofits individually rather than exit the sector.
Source document
RWE Regulus Weekend Edition Source document ↗
United States Regulus Weekend Edition Governance & Accountability ✓ 19 claims 25 Oct 2026

A clearing house with no members and a ban broken on a livestream

The lighter side this week is a comedy of timing rather than misconduct. A clearing house writes default rules before it has a single member, a banned pharmaceutical executive is accused of broadcasting the very trading he is forbidden to do, and a federal department finalises a paperwork estimate its own commenters say does not add up. None is a scandal; each misses its own target.

  • CME Securities Clearing filed SR-CMESC-2026-011 to codify default-management procedures while stating it currently has no Members or Users and has received no comments, with the comment window closing 12 November 2026.
  • The FTC and seven states moved on 13 October 2026 to hold Martin Shkreli in civil contempt of his 2022 lifetime pharmaceutical ban, citing his livestreamed claim that he was teaching viewers how to trade and invest in biotech.
  • The FTC alleges Shkreli has traded in pharmaceutical stocks of at least 60 companies since his May 2022 release and seeks a fine equal to trading profits plus prejudgment interest with no offset for losses, on a Commission vote of 1-0.
  • The State Department finalised a 600,000-hour recordkeeping collection and declined to withdraw it after the Council for Global Equality flagged a 52,500-hour gap and an $85 million cost-assumption discrepancy, with comments due 25 November 2026.
Source document
RWE Regulus Weekend Edition Source document ↗
Global Regulus Weekend Edition Prudential & Capital ✓ 20 claims 25 Oct 2026

Live cyber duties strip firm discretion now as PRA, Fed and ECB defer relief for years

Two of the week's measures bound firms the moment they landed: the OCC's two-hour cyber notification deadline and the FBI's PHP patch order. The reforms that drew the headlines, the PRA's threshold indexation, the ECB's digital euro and the Fed's supervisory redesign, are dated years out or wait on legislation. The gap between the two is this week's story.

  • The OCC's Rule 213 change (SR-OCC-2026-010) sets a firm two-hour cyber notification deadline for clearing members and deletes self-assessment language.
  • The FBI's IC3 PSA tells firms to patch two PHP flaws, CVE-2026-109618 and CVE-2026-109619, or take affected systems offline.
  • The PRA's CP13/26 would index 128 regulatory thresholds to nominal UK GDP, with the first update on 1 July 2031; it closes 7 February 2027.
  • The ECB plans a digital euro pilot in 2027 and rollout from 2029, contingent on an EU regulation adopted this year.
  • Four US comment windows close between 3 November and 28 December, and the SEC must decide NYSE Texas's Rule 24 by 30 November.
Source document
RWE Regulus Weekend Edition Source document ↗
Global Regulus Weekend Edition Prudential & Capital ✓ 19 claims 25 Oct 2026

OCC cyber clock and FBI patch order bind now as four comment windows close by December

The week ahead is governed by sequencing rather than any single rule. Two measures bind immediately: the OCC's two-hour cyber notification deadline for clearing members and the FBI's order to patch two PHP flaws or take systems offline. Four US comment windows then close in order through 28 December, the SEC must decide NYSE Texas's Rule 24 by 30 November, and the PRA, Fed and ECB relief that drew headlines is dated to 2027 and beyond.

  • The OCC's two-hour cyber notification deadline under SR-OCC-2026-010, filed 8 October 2026, is in force for clearing members and removes self-assessment language, with a disciplinary process attached to lateness.
  • Four US comment windows close in sequence: Cboe BZX's IEX fee (File SR-CboeBZX-2026-083) on 3 November, CMESC's default-management rule on 12 November, the State Department's PHFFA collection on 25 November and Treasury's garnishment-notice estimate on 28 December 2026.
  • The SEC must approve, disapprove or open proceedings on NYSE Texas's proposed Rule 24 by 30 November 2026, having extended review after Amendment No. 1 superseded the original filing on 5 October.
  • The PRA's CP13/26, proposing automatic indexation of 128 regulatory thresholds, closes on 7 February 2027, but its first indexation update does not operate until 1 July 2031.
  • The ECB plans a digital euro pilot using real transactions in 2027 and rollout from 2029, both contingent on EU legislation the ECB hopes will be adopted by year-end.
Source document
RWE Regulus Weekend Edition Source document ↗
United States Regulus Weekend Edition Financial Crime ✓ 20 claims 25 Oct 2026

Licensed bank sat at the chokepoint of a $36.9m crypto laundering chain

US enforcement did the week's financial crime work. A money laundering extradition located the laundering failure at a regulated bank's conversion desk, a telemedicine owner was sentenced for a $46.2m Medicare scheme built on overlapping ownership, and the FTC asked a court to hold Martin Shkreli in contempt of a lifetime industry ban. Three cases, three distinct control failures worth studying.

  • Zheng Zhao faces up to 20 years on a money laundering conspiracy charge after more than $36.9m from 174 US victims was routed through a Deltec Bank account and converted to Tether, with eight co-conspirators already pleaded guilty, two sentenced to 51 and 46 months for unlicensed money transmission.
  • Christopher Harwood was sentenced to 20 years for a $46.2m Medicare fraud and ordered to pay $17,942,402 in restitution and $10,431,463 in forfeiture, having owned both the telemedicine front end that generated orders and the DME companies that billed them.
  • The FTC and seven states filed on 13 October 2026 to hold Martin Shkreli in civil contempt of his 2022 lifetime pharmaceutical ban, alleging trading in at least 60 pharmaceutical stocks since his May 2022 release.
  • The Shkreli motion seeks a fine equal to trading profits plus prejudgment interest with no offset for losses, a coercive construction aimed at compliance rather than net enrichment.
Source document
RWE Regulus Weekend Edition Source document ↗
Global Regulus Weekend Edition Prudential & Capital ✓ 30 claims 25 Oct 2026

Cyber rules bind now while PRA and ECB relief waits until 2031 and 2029

The week split cleanly in two: obligations that strip firms of discretion landed immediately, led by the OCC's two-hour cyber reporting clock and an FBI order to patch or disconnect, while the relief that drew the headlines, PRA threshold indexation and the ECB digital euro, was dated to 2031, 2029 or a Brussels vote. Four US comment windows close by December. A $36.9m laundering case sharpened a stablecoin on-ramp lesson.

  • OCC's SR-OCC-2026-010 sets a firm two-hour cyber notification deadline for clearing members, removes self-assessment language and lets OCC disconnect a member or its third-party service provider.
  • The FBI's IC3 issued a formal PSA on two PHP core flaws, CVE-2026-109618 and CVE-2026-109619, telling firms to patch immediately or take affected systems offline.
  • The PRA's CP13/26 would index 128 regulatory thresholds to nominal GDP but does not make its first update until 1 July 2031; the consultation closes 7 February 2027.
  • Four US comment windows close in sequence: Cboe BZX's IEX fee on 3 November, CMESC's default rule on 12 November, the State Department's PHFFA collection on 25 November and Treasury's garnishment notice on 28 December.
  • DOJ arraigned Zheng Zhao over a scheme that routed more than $36.9m through a single Deltec Bank account, converted to Tether and sent to a Cambodia-controlled wallet, with 174 US victims.
Source document
RWE Regulus Weekend Edition Source document ↗
United States Regulus Weekend Edition AI, Technology & Data ✓ 19 claims 18 Oct 2026

CISA audited its own network tool and found a password hardcoded as 'Malcolm'

The lighter file this week is really a file about self-administration: the body that polices everyone's patching disclosed seven flaws in its own monitoring tool, including a password named after the product and an unauthenticated route to wiping forensic data. Alongside it, two US transparency portals returned access-control screens instead of notices, and HMRC amended the same export process twice in three months. The joke is free; the discipline it rewards is not.

  • CISA advisory ICSA-26-280-01, updated 15 October 2026, lists seven CVEs in CISA's own Malcolm tool, including a passwordSecret hardcoded as "Malcolm".
  • Malcolm fixes split across v26.08.0 and v26.09.0, so an operator who stops at v26.08.0 leaves CVE-2026-107333 and CVE-2026-107362 open.
  • Federal Register pages for an SEC CME Securities Clearing notice dated 13 October and a Treasury information-sharing collection dated 9 October returned access-control screens with no operative text.
  • HMRC amended its export examination-premises approval process on 8 October 2026, three months after an 8 July 2026 revision, and these notices carry the force of law.
  • CISA reports no known public exploitation of the Malcolm flaws to date.
Source document
RWE Regulus Weekend Edition Source document ↗
European Union Regulus Weekend Edition Markets & Infrastructure ✓ 17 claims 18 Oct 2026

Binding dates kept arriving before the headline events firms filed them under

Five regulators set clocks this week, and in almost every case the date that bites first was not the headline event. ESMA's T+1 framework is the clearest example, but the pattern runs through Basel's G-SIB fix, AMLA's Frankfurt roundtables and the ISDA FX cutover. This is a read on how to calendar a week like this one.

  • ESMA fixed 7 December 2026 as the first binding T+1 deadline for electronic, standardised and machine-readable allocation and confirmation messaging, almost a year before settlement shortens on 11 October 2027.
  • Basel's G-SIB reporting and disclosure threshold rises from EUR 200 billion to EUR 350 billion in leverage ratio exposure measure from 2027, while annual-average indicator calculation is deferred to 1 January 2030.
  • AMLA's in-person Frankfurt simplified-CDD expression-of-interest window closed 18 October 2026 at 23h59 CEST, with roundtables running 9 November to 2 December 2026.
  • ISDA's 2026 FX Definitions take over in November 2027, after which the 1998 definitions cease to apply, with a SWIFT change request already submitted before the 4 June deadline.
  • ABA, BPI, CBA and ICBA asked the Fed to move its 30 November stablecoin comment deadline to 29 January, a decision still pending.
Source document
RWE Regulus Weekend Edition Source document ↗
Global Regulus Weekend Edition Financial Crime ✓ 20 claims 18 Oct 2026

AMLA roundtable sign-up closes Sunday; ESMA messaging mandate bites 7 December

A look at the deadlines and decisions ahead. The sole hard deadline this week is AMLA's Frankfurt roundtable sign-up, closing Sunday. Beyond it, ESMA's first T+1 compliance date, a pending Fed extension decision on stablecoin rules, and Basel's G-SIB timetable all reward reading each regime backwards from its earliest binding date rather than its headline event.

  • Expressions of interest for AMLA's Frankfurt simplified-CDD roundtables close 18 October 2026 at 23h59 CEST, with in-person sessions running 9 November to 2 December 2026.
  • ESMA's first binding T+1 deadline, mandatory electronic allocation and confirmation messaging, falls on 7 December 2026, ahead of EU T+1 settlement on 11 October 2027.
  • Four US banking groups have asked the Fed to move its 30 November stablecoin comment deadline to 29 January, and that decision is still pending.
  • Basel's EUR 350 billion G-SIB reporting threshold takes effect from 2027, its EBU cross-border consultation closes 14 January 2027, and annual averaging is deferred to 1 January 2030.
  • The SRB has scrapped quarterly MREL sign-off with immediate effect.
Source document
RWE Regulus Weekend Edition Source document ↗
United States Regulus Weekend Edition Financial Crime ✓ 19 claims 18 Oct 2026

DOJ and Labor debar Cloudera from PERM for two years in US-worker bias settlement

A quiet week for sanctions designations and AML fines, but the enforcement that did land is instructive. The headline action pairs a Labor Department debarment with a DOJ civil-rights penalty from one set of facts. Alongside it, AMLA opened its simplified-CDD consultation channel and the ABA signalled where it sees fraud moving. Five minutes on what bit and what to watch.

  • Cloudera will be debarred from the PERM program for two years, fund $1.4 million in back pay and pay $600,000 in civil penalties.
  • DOJ described the Cloudera resolution as the fourteenth settlement since it relaunched its Protecting U.S. Workers Initiative in 2025, resolving an April lawsuit over recruitment for seven positions.
  • AMLA's expression-of-interest window for in-person Frankfurt roundtables on simplified customer due diligence closed 18 October 2026 at 23h59 CEST, with sessions running 9 November to 2 December.
  • The ABA's fraud-management award citation for M&T Bank's Karen Boyer foregrounded payment threats, social engineering, scams and account takeover as the current retail-banking fraud frontier.
Source document
RWE Regulus Weekend Edition Source document ↗
European Union Regulus Weekend Edition Markets & Infrastructure ✓ 33 claims 18 Oct 2026

ESMA's 7 December messaging mandate tops a week of early-biting deadlines

Five regulators set clocks this week, and in several cases the date that binds first was not the headline event. We rank what a compliance officer must act on: ESMA's T+1 messaging mandate, Basel's G-SIB window-dressing fix, Elderson's climate-coverage disclosure, the SEC's move on Rule 14a-8, and a two-agency US PERM settlement. The recurring discipline is to calendar each regime from its earliest operative date.

  • From 7 December 2026 EU investment firms must use electronic, standardised and machine-readable allocation and confirmation messaging, ahead of T+1 settlement on 11 October 2027.
  • Basel's G-SIB reporting threshold rises to EUR 350 billion from 2027, while the annual-averaging calculation basis is deferred to 1 January 2030 and the EBU consultation closes 14 January 2027.
  • ECB Vice-Chair Frank Elderson said on 14 October that climate stress tests cover all banks' own material risk drivers in only around 15% of cases.
  • Cloudera was debarred from the PERM program for two years and will pay a $1.4 million back-pay fund plus $600,000 in civil penalties, the fourteenth settlement since DOJ's 2025 relaunch.
  • The SEC proposed rescinding Rule 14a-8, arguing the shareholder-proposal rule exceeds its statutory authority, with comment open for 60 days after Federal Register publication.
Source document