Looking for the latest insights and trends from the Financial Services and Gambling industry?

In February 2026, the UK’s Financial Conduct Authority (FCA) published policy statement PS26/1, setting out the final regulatory framework for deferred payment credit (DPC) (also known broadly as buy now, pay later (BNPL) lending), following consultation under CP25/23. The policy statement confirms the FCA’s approach to bringing previously unregulated short-term, interest-free instalment credit within the formal consumer credit perimeter. The final rules reflect industry feedback and clarify how DPC products will be integrated into the FCA Handbook and aligned with existing conduct, creditworthiness and Consumer Duty requirements. The reforms were introduced after the FCA acknowledged that most BNPL activity has been operating outside its direct supervision and beyond the full scope of the Consumer Credit Act 1974. The core challenge for BNPL providers now lies in reconciling their traditionally frictionless, embedded checkout model with a more rigorous compliance architecture. Under the finalised rules, BNPL providers will have to redesign credit decisioning processes and update technology infrastructure. If implemented strategically rather than reactively, the new rules can

The Bank Secrecy Act (BSA) has long been the cornerstone of the United States’ federal anti-money laundering (AML) framework. However, for many financial institutions and compliance professionals, the law has become a symbol of regulatory stagnation.

As the European Central Bank (ECB) opens applications for its digital euro pilot, a coalition of merchant groups has called for a simplified fee structure to ensure the central bank digital currency (CBDC) delivers long-term, low-cost payments.

A bill that would allow individual states to set limits broadly aligns with rhetoric from President Trump on a 10 percent cap on interest rates, but industry participants have warned that such a change could drive consumers to unregulated alternatives.

The new geopolitical realities mean that payments firms will need to reassess their compliance priorities to protect themselves against the risks posed by Iranian and other sanctioned actors.

In 2026 and beyond, a structural shift in global economic governance around sanctions enforcement can be expected. Prior to late 2025, the focus was more on sanctions design and designations as a policy tool for most jurisdictions, given the geopolitical landscape, whereas 2026 could be the year when the focus moves to sanctions enforcement.

Regulation (EU) 2022/2554 (Digital Operational Resilience Act – DORA) was published in the Official Journal of the European Union on December 27, 2022. DORA lays down uniform requirements concerning the security of network and information systems supporting the business processes of financial entities. This Mapping EU Legislation: DORA page will be updated in line with any DORA update. This includes any delegated regulation, implementing regulation or guideline issued and published at EU level, or any legislation supplementing it at member state level.

As provided in Article 28(3) of Regulation (EU) 2022/2554 (Digital Operational Resilience Act – DORA), as part of a financial entity's ICT risk management framework, they must maintain and update at entity level, and at sub-consolidated and consolidated levels, a register of information (ROI) in relation to all contractual arrangements on the use of ICT services provided by ICT third-party service providers. Although the European Supervisory Authorities (ESAs) have provided information on such reports, the procedures for submitting the registers differs between national competent authorities. This document provides a snapshot of reporting requirements across selected European countries.

As the battle over the Trump Administration’s plans for the Consumer Financial Protection Bureau (CFPB) enters a new phase, firms operating in the US can expect fragmented oversight and inconsistent enforcement.

New legislation seeks to establish the jurisdiction as a regional hub for regulated digital finance by offering a legal environment that could attract both domestic and international players.