Fintech · Industry brief

FCA enforcement action against Huobi Global SA for unlawful cryptoasset promotion to UK consumers in breach of section 21 of FSMA 2000, with civil proceedings commenced in the High Court and stayed until 22 September 2026 for settlement attempts—this is the FCA's first enforcement action targeting a cryptoasset business for such violations. The FCA published final rules on 30 June 2026 establishing a comprehensive cryptoasset regulatory regime covering admissions, disclosures, market abuse, stablecoin issuance, safeguarding, and prudential requirements, with implementation on 25 October 2027. HM Treasury published a major consultation on 14 July 2026 to modernise payment services regulation, proposing to move technical standards into FCA-administered regulations, reform payment services definitions to address tokenised payments and agentic payments, and establish a long-term Open Banking framework; the consultation closes 6 October 2026.

On September 24, the Federal Reserve Board proposed two comprehensive rules implementing the GENIUS Act (enacted July 2025) to regulate payment stablecoin issuers. The first establishes substantive requirements for FRB-supervised issuers and custodians, including mandatory one-to-one reserve backing using cash, short-term Treasuries, and eligible deposits checked daily; two-business-day redemption timelines; monthly public reserve composition reports audited by registered accounting firms; standardized capital and risk management requirements; and anti-tying prohibitions across all stablecoin issuers regardless of regulator. The second creates a streamlined application process for insured state member banks seeking to issue stablecoins through subsidiaries, with FRB decisions required within 120 days and deemed approval if deadlines are missed. Comments are due 60 days after Federal Register publication. The FRB coordinated these proposals with parallel rulemakings from the OCC and FDIC and posed extensive questions on reserve diversification limits, multi-brand structures, and remuneration provisions likely to draw industry attention.

On September 16, the Conference of State Bank Supervisors (CSBS) released a new supervisory framework to help state examiners assess artificial intelligence use and risks at state-chartered banks and state-licensed nonbank financial institutions. The principles-based framework, which drew from resources including NIST's AI Risk Management Framework and the Treasury Department's AI Lexicon, is scalable and accounts for each institution's size, complexity, and risk profile rather than imposing uniform standards. The framework includes a Core Examiner Guide with scoping questions and document requests covering governance, AI inventory, and generative AI use; an Examiner Work Program with additional guidance; Nonbank AI Supplements addressing third-party risk and consumer protection; an optional AI Use Case Risk Tiering Worksheet categorizing applications as Tier 1 (low risk), Tier 2 (moderate risk), or Tier 3 (high risk); and supporting documentation. While CSBS approved the framework in August 2026, adoption varies by state as each financial regulatory agency will independently determine how to incorporate it into its supervisory program, meaning institutions operating across multiple states should expect examiner variation in application. The framework serves dual purposes as both an examiner tool and an industry resource for self-assessment and governance development (Source: Conference of State Bank Supervisors).

Bain & Co. analysis predicts U.S. banking consolidation will accelerate significantly, with the number of trillion-dollar banks expected to grow from four to as many as seven by 2030, driven by lighter regulation under the Trump administration and excess capital held by 17 U.S. banks exceeding $10 billion each. Bank M&A deal value rose 19% in 2025, and the Federal Deposit Insurance Corporation proposed new guidelines on September 17 to expedite merger approvals. Recent deals include Banco Santander's acquisition of Webster Financial, Capital One's acquisition of Discover, and Fifth Third's purchase of Comerica. Bain's framework distinguishes between "scale" deals that expand geographic footprint through cost synergies and "scope" deals that add new capabilities; blended scale-and-scope transactions are predicted to outperform traditional consolidations. However, banks acquiring fintechs face particular execution risks, with Windsor Drake's Jeff Barrington warning that banks frequently overpay for acquisition-driven fintech revenue that fails to persist post-acquisition, underestimate integration costs with legacy systems, and experience talent loss after earnouts vest. Regulatory tailwinds are expected to persist through the current and subsequent administrations, though consolidation may narrow consumer choice and reduce relationship lending in smaller markets.