Home / Blog / Fintech Regulation Roundup
Published: September 15, 2026

Fintech Regulation Roundup: What's Changing Across Key Markets

Fintech Regulation Roundup: What's Changing Across Key Markets

Fintech regulation in 2026 has moved from principle to paperwork. The EU, US, UK, and India have each moved a major framework from proposal to near-final rulebook this year, and the compliance bill is now large enough to show up in board-level cost reporting rather than legal budgets alone. The throughline across markets is convergence on licensing, reserve, and disclosure standards for digital assets and payments, even as each regulator sets its own timeline and thresholds.

European Union: PSD3 and PSR Move Toward Implementation

The European Council reached political agreement on the new Payment Services Regulation and a revised Payment Services Directive in November 2025, consolidating PSD2 and the Electronic Money Directive into a single authorisation regime for payment institutions and e-money issuers. The European Banking Authority is now tasked with developing 18 implementing technical standards under PSD3 and 22 under the PSR, covering fraud liability, verification-of-payee checks, and stronger ICT risk alignment with the Digital Operational Resilience Act. Formal texts are expected to publish in Q3 2026, triggering a 21-month transition window before the regime takes full effect, likely in late 2027. Member states are already diverging on how much of that runway they will use: Spain required crypto-asset firms to be licensed by the end of 2025, a 12-month transition, while France extended the full 18 months, giving its providers until mid-2026.

United States: The GENIUS Act's Rulemaking Sprint

The GENIUS Act, enacted 18 July 2025, created the first comprehensive federal framework for payment stablecoins, and 2026 has been consumed by the rulemaking needed to bring it into force. The Office of the Comptroller of the Currency published a 376-page notice of proposed rulemaking on 25 February 2026 covering capital, liquidity, reserve, and custody standards for permitted payment stablecoin issuers under its jurisdiction, with a comment period that closed 1 May 2026. The Treasury Department followed with its own proposal on when a state-level stablecoin regime counts as 'substantially similar' to the federal one, and a further NPRM on issuance, offer, and sale rules with comments due 19 October 2026. The Federal Reserve, FDIC, and NCUA must each issue matching rules by 18 July 2026, and the Act takes full effect on the earlier of 18 January 2027 or 120 days after final rules are issued, meaning the exact deadline is still moving.

United Kingdom: Crypto Regulation Reaches Its Final Rulebook

The UK completed the design phase of its cryptoasset regime on 30 June 2026, when the Financial Conduct Authority published final policy statements covering stablecoin issuance, trading admissions, market abuse, and prudential requirements. Qualifying stablecoin issuers face a permanent minimum capital requirement of £350,000, and issuers are barred from paying interest or yield on backing assets to holders. The authorisation gateway opens 30 September 2026 and closes 28 February 2027, with the substantive regime commencing 25 October 2027 following the Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026, which Parliament made on 4 February 2026. The FCA and Bank of England also published a joint approach to supervising systemic stablecoin issuers the same day, signalling that the largest players will face a second layer of oversight.

India: Credit Infrastructure Gets a Regulatory Backbone

India has taken a different route, building regulation around new public digital infrastructure rather than a single omnibus law. The Reserve Bank of India's Digital Lending Directions, 2025, issued 8 May 2025 and updated through an April 2026 master direction, now require every digital loan to carry a Key Fact Statement disclosing the annual percentage rate, total cost of credit, and a minimum three-day cooling-off period, while mandating that disbursals flow directly to the borrower's bank account rather than through a lending service provider's pooled account. Alongside this, the RBI's Unified Lending Interface had onboarded 64 lenders and 136 data services across 12 loan journeys as of January 2026, and the central bank has approved the Fintech Association for Consumer Empowerment as the self-regulatory organisation overseeing digital lending conduct.

What the Cost Data Shows

Regulation of this scale is measurably expensive. A 2026 report from TheCityUK, produced jointly with PwC, found that regulatory compliance now accounts for more than 13% of operating costs at the largest UK financial services firms, equivalent to roughly £33.9 billion a year, and 84% of chief compliance officers surveyed said costs had risen over the past five years. EY's Global Financial Services Regulatory Outlook 2026 frames the divergence behind that cost: the US is deregulating to support innovation, the EU is pursuing simplification and harmonisation, the UK is prioritising growth over risk, and Asia-Pacific regulators are emphasising fintech innovation, meaning firms operating across all four cannot run a single compliance playbook.

How Fintechs Are Responding

Wise's results for the half-year to March 2025 offer a sense of scale at stake: active customers rose 21% to 15.6 million and cross-border volume grew 23% to £145 billion, even as the company continued absorbing new safeguarding and licensing obligations across the markets in which it operates. Globally, PYMNTS reporting on Hong Kong's 2026 budget-linked stablecoin licensing regime notes that jurisdictions are now competing on regulatory clarity itself, with formal reserve-backing and redemption-guarantee rules in the US, EU, UK, Singapore, Hong Kong, UAE, and Japan pulling stablecoins into mainstream payment infrastructure rather than treating them as a speculative side market.

Frequently Asked Questions

When does the GENIUS Act fully take effect in the US?
On the earlier of 18 January 2027 or 120 days after the OCC, Federal Reserve, FDIC, and NCUA issue their final implementing rules, all of which are due by 18 July 2026.
What is the biggest change under the UK's new cryptoasset regime?
Cryptoasset firms will need full FCA authorisation for the first time, with a £350,000 minimum capital requirement for qualifying stablecoin issuers and a ban on paying holders interest from backing assets. The regime takes effect 25 October 2027.
How does PSD3 differ from PSD2?
PSD3 and the accompanying Payment Services Regulation fold the Electronic Money Directive into a single licensing regime, add mandatory IBAN-name verification checks, and extend fraud liability to third-party enablers whose systems contribute to payment failures.
What changed in India's digital lending rules?
All loan disbursals must now go directly to the borrower's bank account rather than through a lending service provider's pooled account, and every loan must include a Key Fact Statement with the APR, total cost, and a minimum three-day cooling-off period.
Why are compliance costs rising so quickly?
Overlapping regimes now apply simultaneously rather than sequentially. TheCityUK and PwC found compliance already exceeds 13% of operating costs at large UK firms, and regulators are increasingly cross-referencing findings across frameworks such as DORA, the AI Act, and PSR, which compounds the reporting burden.