United Kingdom

Licensing, Authorisation & Market Access

The Financial Conduct Authority has published a cryptoasset perimeter guidance instrument, FCA 2026/55, setting out the market-access pathway for firms whose activities fall within the expanded perimeter. The instrument establishes a phased timeline: firms can apply for authorisation from 30 September 2026, and the new regime comes into force on 25 October 2027. This is a market-access development with direct relevance to any payments or payments-adjacent firm whose product touches cryptoasset activity, since it defines when an authorisation application can first be lodged and when operating without the relevant authorisation becomes a live compliance exposure rather than a future one. The roughly thirteen-month gap between the opening of the application window and the in-force date gives firms a defined runway to prepare and submit applications ahead of the regime taking effect, rather than requiring same-day compliance.

Outlook

The authorisation window opening 30 September 2026 is the near-term marker; the material compliance point is the 25 October 2027 in-force date, by which firms operating in the expanded perimeter will need an authorisation decision in hand or in train.

Licensing, Authorisation & Market Access

The UK's cryptoasset market-access perimeter moved from guidance to live authorisation processing this cycle. The Financial Conduct Authority published PS26/18, its final perimeter guidance, on 16 September 2026, setting out when cryptoasset activities fall within the regulated-activity scope requiring FCA authorisation under the FSMA 2000 (Cryptoassets) Regulations 2026. Two weeks later, on 30 September 2026, the FCA's authorisation gateway (FCA Connect) opened for applications under the new regime. The application window runs from that date to 28 February 2027, ahead of the new perimeter's substantive commencement on 25 October 2027. This gives firms a defined transitional period of roughly five months to apply before the window closes, and a further period of roughly eight months beyond that before the regime becomes fully binding.

The sequencing, final guidance first, then the authorisation gateway, then a substantial gap before substantive commencement, indicates the transition is proceeding according to its announced schedule rather than being compressed or delayed. For firms assessing UK market access for cryptoasset activities, the near-term operative consideration is the application window itself: firms that do not apply by 28 February 2027 risk losing the benefit of transitional arrangements ahead of the 25 October 2027 commencement date.

Outlook

The application window closes 28 February 2027 and substantive commencement follows on 25 October 2027. The volume and outcome of applications processed through the FCA Connect gateway during the application window is the principal near-term indicator of how the transition is proceeding.

Licensing, Authorisation & Market Access

HM Treasury confirmed on 21 April 2026 that it will abolish the Payment Systems Regulator and consolidate its functions into the Financial Conduct Authority. The Financial Services and Markets Bill 2026-27, introduced to Parliament at First Reading in the House of Lords on 19 May 2026, is the legal mechanism through which this consolidation will be effected. HM Treasury's consultation response confirms the FCA will integrate PSR functions into the existing FSMA framework where practicable, and the FSBRA 2013 designation regime for payment systems is being retained rather than replaced, meaning the underlying statutory basis for designating systemically important payment systems continues even as the supervisory body changes. This is a market-access-relevant structural change for both bank and non-bank payment institutions and e-money institutions, since it affects which single authority firms will ultimately deal with for authorisation, competition and enforcement matters going forward, collapsing what has been a twin-regulator landscape into a single-authority model.

The transition itself is not instantaneous. The PSR expects an interim transfer period that could last until late 2026, and there is a live possibility that some functions currently held by the PSR could move to the Bank of England rather than being fully absorbed by the FCA, leaving open questions about the final institutional distribution of powers over payment-system oversight, competition promotion and innovation functions.

Outlook

The interim transfer period is the key near-term uncertainty: firms should expect continued operation under the existing PSR framework through the transition, with the precise cutover date and the final allocation of functions between the FCA and the Bank of England still to be settled. The passage of the Financial Services and Markets Bill 2026-27 through Parliament is the mechanism to watch for confirmation of the final legal architecture.

Licensing, Authorisation & Market Access

The most consequential market-access development in the UK this cycle is the confirmation of the FCA cryptoasset authorisation gateway timeline. Crypto firms — including trading platforms, intermediaries, custodians, stablecoin issuers, and staking arrangers — must obtain FCA authorisation under FSMA; the gateway opens 30 September 2026 with applications accepted through 28 February 2027 ahead of the mandatory regime from 25 October 2027. This five-month application window defines the market-access planning horizon for both bank and non-bank entities seeking to operate in the UK crypto perimeter.

The statutory enabling instrument is the FSMA 2000 (Cryptoassets) Regulations 2026, made by Parliament on 4 February 2026, which brought qualifying cryptoassets — including qualifying stablecoins — within the FCA's Regulated Activities Order perimeter. The licence type is FCA FSMA cryptoasset authorisation; no exemption route is available for in-scope activities. The regime applies to both bank and non-bank entities, though the bank-versus-non-bank-PI/EMI distinction remains relevant at the conduct and prudential layers: non-bank stablecoin issuers face the FCA's 1% capital requirement, while systemic issuers of any type that cross the HM Treasury recognition threshold transition to Bank of England prudential regulation.

The authorisation gateway architecture creates a sequenced market-access path. Firms that submit applications between 30 September 2026 and 28 February 2027 will be assessed ahead of the mandatory regime date. Firms that do not obtain authorisation by 25 October 2027 will be unable to carry on in-scope cryptoasset activities in the UK. The FCA has framed this as a firm planning calendar, and the date-certainty of the gateway is a notable feature of the UK approach relative to jurisdictions where equivalent timelines remain indicative.

For non-systemic stablecoin issuers specifically, the FCA is the solo regulator. For issuers that grow to the point of HM Treasury recognition as systemic under the Banking Act 2009 (as extended by FSMA 2023), the regulatory relationship transitions to the Bank of England — a scaling threshold that operators must build into their licensing and governance planning from the outset.

Outlook

The immediate next milestone is the opening of the FCA authorisation gateway on 30 September 2026. The application window closes 28 February 2027. The mandatory regime comes into force 25 October 2027. A further FCA perimeter-guidance policy statement is expected in September 2026, which may clarify the boundary of in-scope activities ahead of the gateway opening. Operators should note that the BoE is consulting on transition rules — covering the FCA-to-BoE handoff for issuers crossing the systemic threshold — with that consultation closing 30 September 2026. The density of the forward calendar means the next two quarters are the critical planning window for any firm intending to be authorised before the mandatory regime takes effect.

Conduct, Safeguarding & Financial Promotions

The defining event this cycle for UK payments conduct regulation is confirmation that the FCA's Safeguarding Supplementary Regime (CASS 15, PS25/12) in force from 7 May 2026. The regime replaces the FCA's prior safeguarding framework with a considerably more prescriptive rulebook, and it applies specifically to non-bank payment institutions and e-money issuers rather than to bank-based payment providers. That scope decision reinforces the persistent divide in UK payments oversight between banks — which hold customer money inside deposit protection and prudential capital frameworks — and non-bank PIs/EMIs, whose customer funds are protected only through safeguarding segregation arrangements that the regulator has judged require substantially tighter operational discipline.

Under the new regime, in-scope firms face daily reconciliation, monthly reporting, annual independent audit obligations for balances of £100,000 or more, together with 48-hour-retrievable resolution-pack requirements for PIs/EMIs. The resolution-pack requirement in particular is aimed squarely at insolvency scenarios: it exists so that an insolvency practitioner appointed after a PI or EMI failure can access, within 48 hours, the information needed to identify and return safeguarded customer funds, rather than the extended and uncertain recovery processes that have characterised past PI/EMI insolvencies.

The FCA's own rationale for the intervention centres on the scale the safeguarded-funds pool has reached: PS25/12 published 7 August 2025 sets a nine-month implementation window, and the accompanying data point is that EMIs safeguarded ~£26bn in 2024 (up from £11bn in 2021). That growth trajectory is treated by the regulator as evidence that the prior, lighter-touch safeguarding regime was designed for a smaller, less systemically consequential non-bank payments sector than the one that now exists. The tightening is therefore best read as a scale-driven recalibration of the bank/non-bank divide rather than a response to a specific failure event.

On the assurance side, the Financial Reporting Council's interim transitional guidance for safeguarding auditors published 18 March 2026 ahead of a dedicated Safeguarding Assurance Standard expected after a 2027 consultation. This creates a two-stage timeline for the audit function: firms conducting their first CASS 15 annual audit will do so under interim guidance rather than a purpose-built assurance standard, with the latter not arriving until after next year's consultation process concludes. Financial-promotion enforcement activity for approved-persons/s.21-approver regimes and crypto/BNPL promotions was not actively searched this cycle and is not covered in this sub-brief.

Outlook

Firms safeguarding £100,000 or more should expect the daily reconciliation, monthly reporting, annual independent audit cadence and resolution-pack readiness requirement to be operationally binding from 7 May 2026. PS25/12 published 7 August 2025 sets a nine-month implementation window, which is the runway firms have had to build the new reconciliation, reporting and resolution-pack capability. The audit function will operate on interim FRC guidance until the dedicated Safeguarding Assurance Standard emerges from its 2027 consultation, meaning methodology for the first cycle of CASS 15 annual audits is not yet settled. Continued tightening on the conduct and safeguarding side is the base case for the remainder of this cycle, and the bank/non-bank asymmetry in how customer funds are protected looks set to remain — and arguably widen — as this regime beds in.

Conduct, Safeguarding & Financial Promotions

The FCA's Safeguarding Supplementary Regime, spanning CASS15, CASS10A, SUP3A and SUP16.14A, has been in force since 7 May 2026, following a nine-month implementation runway from policy statement PS25/12. It applies to authorised and small payment institutions, authorised and small e-money institutions, and credit unions issuing e-money, not to deposit-taking banks — the regime's obligations fall squarely on the non-bank payment and e-money sector. The regime requires daily reconciliation, a new monthly safeguarding return under CASS15, and a mandatory annual independent audit, with the audit waived for firms holding below £100,000 average outstanding relevant funds over 53 weeks. The monthly return is, for the first time, standardising D+1 segregation, reconciliation and custodian data across the non-bank payments sector, closing a data gap regulators previously lacked in supervising how client funds are held. This represents a structural shift from the FCA's previous principles-based safeguarding approach to a prescriptive, data-driven regime.

Outlook

A fuller CASS-style statutory-trust Post-Repeal Regime remains on the horizon, deferred to a future HM Treasury payment-services-law consultation expected later in 2026 or in 2027, which would require amending the Payment Services Regulations 2017 and the Electronic Money Regulations 2011. No material UK financial-promotion enforcement action, such as against section 21 approvers or crypto/BNPL promotions, surfaced this cycle.

Conduct, Safeguarding & Financial Promotions

On 30 June 2026 the FCA published its final cryptoasset rules and guidance, completing its Crypto Roadmap. The rules apply to firms granted FSMA permission on or after 25 October 2027, when the regime comes into force. This publication moves the UK crypto-conduct perimeter from proposal to final form and applies to both bank and non-bank entities, though the most commercially significant calibrations this cycle are directed at non-bank stablecoin issuers.

The headline conduct calibration is the reduction of the stablecoin issuer capital requirement from 2% to 1% of the total value of stablecoins issued, with the FCA citing proportionality for larger issuers. This halved capital buffer materially lowers the cost of being a UK stablecoin issuer and is a deliberate competitiveness lever. The FCA's 1% level positions the UK below the EU MiCA 2% stablecoin issuer capital level — a tangible jurisdiction-selection factor for issuers choosing a base.

Beyond the capital recalibration, the FCA made several further conduct easings relative to earlier consultation drafts. Firms were given more time in some cases to return funds to customers redeeming stablecoins. Certain public-disclosure obligations present in earlier drafts were removed. The regime shifted to firm-run internal stress tests submitted annually to the FCA, replacing certain prior public-disclosure obligations for stablecoin reserves. These changes ease the operational and disclosure burden on stablecoin issuers; the shift to internal stress tests reduces public transparency but lowers compliance cost. These calibrations are currently anchored primarily to Tier 2–3 journalism rather than two distinct Tier 1 primary anchors and are held at High confidence pending direct rulebook citation.

The safeguarding architecture for non-systemic stablecoin issuers under the FCA regime includes the redemption-fund return timeline relaxations noted above. For systemic issuers under Bank of England regulation, the safeguarding design is more prescriptive — two statutory trusts plus a wind-down reserve, with redemption at par into central bank money — and is addressed in the W2 module.

Looking ahead within the FCA's own pipeline, the regulator will publish a further perimeter-guidance policy statement in September 2026 and consult later in 2026 on DeFi guidance, DLT operational-resilience guidance, and Financial Crime Guide updates. A policy webinar is set for 17 July 2026. The DeFi and Financial Crime Guide consultations carry illicit-finance implications that are routed to the Financial Intelligence Monitor; WPM records the forward pipeline dates only.

The May 2026 safeguarding rules for payment institutions and e-money institutions (PS25/12) remain a live W1b item for non-bank PIs and EMIs outside the crypto perimeter. That development was not the subject of new structured findings this cycle but is noted as a standing position item for the next research pass.

Outlook

The FCA policy webinar on 17 July 2026 is the immediate next event. A further perimeter-guidance policy statement is expected in September 2026. DeFi guidance, DLT operational-resilience guidance, and Financial Crime Guide consultations are expected in H2 2026. The mandatory FCA cryptoasset regime comes into force 25 October 2027. The principal residual uncertainty on conduct calibration is whether the 1% capital level and the redemption and disclosure relaxations will be confirmed without revision when the final rulebook texts are directly cited.

Stablecoins & Digital Money

The Bank of England is advancing a dedicated regulatory track for sterling-denominated systemic stablecoins, distinct from the FCA's broader cryptoasset perimeter work. The Bank published a policy statement together with a consultation on a draft Systemic Stablecoin Issuer Code of Practice; that consultation closed on 22 September 2026. The Bank's FMI Annual Report 2025-26 states that, following feedback received, it intends to finalise the Code of Practice by the end of 2026, after which the Code can be applied to recognised systemic stablecoin issuers. As of the research date, no final text of the Code has been identified, so the applicable instrument remains the draft published for consultation rather than a settled rulebook; issuers and prospective issuers are therefore working from a policy direction that is confirmed in intent but not yet confirmed in final text.

This sits alongside, but is legally and procedurally separate from, the FCA's cryptoasset perimeter guidance instrument (FCA 2026/55), which opens an authorisation application window on 30 September 2026 ahead of an in-force date of 25 October 2027. The two instruments proceed on different clocks and from different regulators: the Bank of England's Code addresses systemic stablecoin issuers specifically, while the FCA's perimeter instrument addresses the wider cryptoasset market-access question. A firm whose stablecoin activity is systemic in the Bank's sense, and which also falls within the FCA's expanded perimeter, will need to track both tracks independently rather than assume one subsumes the other.

Outlook

The end-2026 target for finalising the Systemic Stablecoin Issuer Code of Practice is the development to watch; until the final text is published, recognised systemic stablecoin issuers are operating against a draft Code informed by consultation feedback rather than a settled instrument. The FCA's perimeter regime, on its longer and separately-clocked timeline, becomes fully operative on 25 October 2027.

Stablecoins & Digital Money

The UK's systemic-stablecoin regulatory architecture advanced materially in June 2026. On 22 June 2026 the Bank of England published its policy statement 'Sterling-denominated systemic stablecoins' and a draft Code of Practice for systemic stablecoin issuers, with consultation open to 22 September 2026 and the Code intended to be finalised by end-2026, allowing regulated stablecoins to operate in the UK from 2027. A BoE-FCA joint approach paper published around 29 June 2026 sets out the integrated end-to-end two-part regime — the FCA solo-regulating non-systemic qualifying stablecoin issuers and the Bank of England prudentially regulating HM Treasury-recognised systemic issuers — with a managed transition. The BoE is also consulting, to 30 September 2026, on transition rules.

The statutory recognition basis is the Banking Act 2009 as extended by FSMA 2023: HM Treasury recognises a payment system or issuer as systemic, triggering Bank of England prudential regulation. The regime aligns with the Government's 2024 National Payments Vision. The joint approach paper clarifies the FCA-to-BoE handoff for issuers crossing the systemic threshold, removing a key structural ambiguity for stablecoin business planning.

The Bank of England made three significant calibration changes relative to its earlier consultation proposals, all in the direction of proportionate easing. First, the BoE abandoned proposed per-holder stablecoin holding caps — previously GBP 20,000 for individuals and GBP 10 million for businesses — and will instead apply a temporary per-coin issuance guardrail initially set at GBP 40 billion for each systemic stablecoin. Removing per-holder caps materially improves the commercial viability of systemic sterling stablecoins; the GBP 40 billion per-coin guardrail caps single-issuer scale instead. Second, the maximum share of stablecoin backing held in interest-bearing short-term UK government debt was raised from 60% to 70%, with the remaining 30% held as non-remunerated central bank deposits. Raising the interest-bearing reserve share improves issuer economics by allowing more yield on backing assets, directly addressing viability concerns. Third, the safeguarding architecture envisages two statutory trusts — one protecting coinholder holdings and one for orderly wind-down and return of holdings — plus a wind-down reserve, with HM Treasury to legislate Bank-enabling powers; redemption must be at par into central bank money.

These targeted relaxations responded to the House of Lords Financial Services Regulation Committee report of 3 June 2026, which urged the Bank of England to drop holding caps and loosen backing rules. The EU shares the central-bank-money redemption anchor, leaving both jurisdictions facing the same viability-versus-monetary-hierarchy calibration challenge. The calibration figures for the holding-cap replacement and backing-share revision are currently anchored primarily to Tier 2–3 journalism and are held at High confidence pending direct rulebook citation.

Taken together with the FCA's final cryptoasset rules published on 30 June 2026, the UK has within a single fortnight moved its two-part stablecoin regime decisively from proposal to near-finished form. The FCA handles non-systemic issuers; the Bank of England handles systemic issuers; the joint paper governs the transition between the two. The architecture is now sufficiently defined for operators to begin substantive planning.

Outlook

The BoE consultation on the draft Code of Practice closes 22 September 2026. The BoE consultation on transition rules closes 30 September 2026. The Code of Practice is targeted for finalisation by end-2026. Regulated stablecoins are expected to be able to operate in the UK from 2027. HM Treasury legislation to enable Bank powers for the statutory-trust safeguarding architecture remains a forward dependency. The principal open question is whether the GBP 40 billion per-coin issuance guardrail is intended as a permanent feature or will be revised as the regime matures — the BoE has described it as temporary, but the conditions for its removal or adjustment are not yet specified in the public record.

Operational Resilience & Critical Infrastructure

The Bank of England published a consultation on 18 May 2026 proposing a staged extension of RTGS and CHAPS settlement operating hours, including the introduction of weekend operation, with the stated direction of travel being toward near-24/7 settlement availability. This is a significant potential shift in the UK's core settlement infrastructure: RTGS and CHAPS currently operate on a business-day schedule, and extending toward continuous or near-continuous operation would represent a structural change to settlement-timing risk, liquidity management, and operational-resilience planning for the banks and payment service providers that rely on these systems.

The proposal is explicitly staged and subject to industry-readiness feedback gathered through the consultation process; no confirmed effective date for any stage of the extension has yet been set. This reflects the scale of the operational change being proposed: extending settlement windows, particularly to weekend operation, has knock-on implications for staffing, liquidity buffer management, and contingency planning that the Bank of England appears to be treating as a genuine open question for industry input rather than a predetermined timetable.

The bank-versus-non-bank distinction is material here: RTGS and CHAPS access is structured around direct participant banks, with non-bank payment institutions and e-money institutions typically accessing settlement indirectly through sponsor banks. A staged extension of settlement hours would be expected to affect direct participants first and most directly, with indirect-access non-bank PSPs experiencing the operational impact filtered through their sponsor-bank relationships.

Outlook

The critical variable to watch is the substance of industry-readiness feedback gathered through this consultation, since the Bank of England has not committed to a fixed timetable for any stage of the extension. The pace at which direct participant banks signal readiness, particularly for weekend operation, will likely determine how quickly the near-24/7 vision proceeds from consultation to implementation.

Operational Resilience & Critical Infrastructure

The PSR has set complete migration to the New Payments Architecture (NPA) by 1 July 2026 as the deadline for the UK's next-generation retail payments infrastructure, with the existing APP-fraud reimbursement obligation carried forward onto the new rail rather than reset. This is a dated infrastructure milestone rather than a standing explainer item this cycle.

Outlook

The 1 July 2026 deadline is the operative date to track; whether the reimbursement obligation transfers without a coverage gap as systems migrate is the open question for this module heading into the next cycle.

Operational Resilience & Technology Risk

No new structured findings were developed for this module in the current cycle. The source register contains a reference to the FCA's forthcoming DLT operational-resilience guidance consultation, expected in H2 2026, which will be relevant to this module when published. That forward item is noted in the W1b pipeline.

The gaps register records that research surfaced no in-cycle movement on W3 for the UK; module coverage this cycle was concentrated in W1a, W1b, and W2 per the primary regulatory source set.

Outlook

The FCA's DLT operational-resilience guidance consultation, expected in H2 2026, is the primary forward item for this module. No date-certain milestone is currently recorded.

Scheme Rules & Network Governance

No new structured findings were developed for this module in the current cycle. The gaps register records that research surfaced no in-cycle movement on W4 for the UK; module coverage this cycle was concentrated in W1a, W1b, and W2.

Outlook

No date-certain forward items are currently recorded for this module in the UK. Standing-brief coverage will resume when new signal is available.

Legal & Litigation

The Administrative Court's ruling in [2026] EWHC 64 (Admin) addressed the Payment Systems Regulator's section 54 FSBRA 2013 power to cap cross-border interchange fees, a power exercised under the PSR's current statutory footing. This ruling sits alongside the Competition Appeal Tribunal's Trial 2 pass-on findings in [2026] CAT 11, and both bear directly on the enforcement architecture that will govern scheme access and settlement questions once the PSR's functions are absorbed into the FCA under the Financial Services and Markets Bill 2026-27. The interchange-fee cap power itself derives from the FSBRA 2013 designation regime, which is being retained through the institutional transition, meaning the substantive legal question at issue in this litigation will remain live and relevant regardless of which authority ultimately administers it.

This body of litigation is significant less for its immediate outcome and more for what it establishes about the scope of section 54 powers at a moment when the identity of the body that will wield those powers is itself in transition. A ruling narrowing or affirming the section 54 cross-border interchange-fee cap power will shape how the FCA approaches equivalent enforcement questions once it absorbs the PSR's remit.

Outlook

Watch for how the FCA signals its intended approach to interchange-fee and pass-on questions as it prepares to absorb PSR enforcement functions, and for any further appellate development in either the EWHC or CAT proceedings before the institutional transfer completes.

Product Innovation & Access Regulation

No new structured findings were developed for this module in the current cycle. The gaps register notes that the source register contains open-banking pricing signals — including a joint FCA-PSR statement on open-banking pricing models — that were not developed into structured findings this cycle and are flagged for the next research pass.

The distinction between W9 (regulatory product-access themes such as open banking, BaaS, and BNPL regulation) and W13 (specific product launches and commercial events) is maintained: the open-banking pricing signal is a W9 item; any specific product launches would be W13.

Outlook

No date-certain forward items are currently recorded for this module. The open-banking pricing signal is flagged for development in the next research cycle.

Consumer Protection & APP Fraud

The Financial Ombudsman Service has introduced a new discretionary basis on which it may decline to consider a complaint. Under FOS instrument FOS 2026/6, titled Modernising the Redress System, in force from 1 October 2026, a new rule at DISP 3.3.4C gives the Ombudsman discretion to dismiss a complaint where the firm has already reviewed the subject matter of that complaint under applicable regulatory review standards. This is framed as a discretionary ground, not a mandatory bar: a prior satisfactory review conducted by the firm itself does not automatically prevent a customer from bringing, or the Ombudsman from considering, a complaint on the same subject matter. The Ombudsman retains the judgment to decide whether dismissal is appropriate in the circumstances of each case.

This development sits within a broader modernisation of the redress system that the Ombudsman has been consulting on and refining through 2026, and it represents an incremental procedural adjustment to how the Ombudsman manages complaint volume and avoids duplicating firm-led review processes, rather than a substantive change to the underlying rights a complainant has or the remedies available. For payment and e-money firms that have undertaken their own structured review of a systemic issue, such as a past safeguarding shortfall or a mis-selling pattern, this new discretionary ground provides a potential, though not guaranteed, basis to argue that a subsequent individual complaint covering the same ground should not be separately re-litigated through the Ombudsman process. Firms should not treat this as a reliable shield, however, since the rule explicitly preserves Ombudsman discretion rather than creating an entitlement to dismissal.

No specific development regarding APP fraud reimbursement thresholds, scope, or enforcement was identified in this cycle's research beyond the standing architecture already in place; the APP-fraud reimbursement framework itself is noted elsewhere as being carried forward via transitional provisions under the pending Financial Services and Markets Bill, which would move regulatory responsibility for it from the Payment Systems Regulator to the FCA once enacted.

Outlook

The practical impact of the new DISP 3.3.4C discretionary dismissal ground will become clearer as the Ombudsman begins applying it to live complaints from 1 October 2026 onward; whether it meaningfully reduces complaint volume for firms that have already conducted structured reviews, or whether the Ombudsman exercises its discretion narrowly, is not yet observable from this cycle's research. Firms should continue to track the progress of the Financial Services and Markets Bill through the Commons, since the APP-fraud reimbursement framework's regulatory home is set to shift from the Payment Systems Regulator to the FCA once that Bill is enacted, which is a separate but related consumer-protection architecture question.

Consumer Protection & APP Fraud

The UK's mandatory authorised push payment fraud reimbursement requirement has produced its first substantial independent outcome evidence. An evaluation conducted by Frontier Economics, published 1 July 2026, found that APP fraud losses over the Faster Payments system fell by approximately 21 percent following the requirement's introduction, indicating the reimbursement obligation is having a measurable deterrent effect on fraud incidence, not merely shifting the cost of existing fraud levels onto reimbursing institutions. This finding is corroborated by the Payment Systems Regulator's own reimbursement dashboard, which reports £249.6 million reimbursed to APP fraud victims over the trailing twelve months to 31 March 2026 via Faster Payments, giving the scheme a concrete and substantial financial footprint in its first full year of operation. Following the evaluation, the PSR has published a roadmap responding to its findings and intends to hold a formal consultation on reimbursement-scheme reforms in December 2026, signalling that the regulator sees this outcome evidence as grounds for refining scheme parameters rather than leaving the current settings unchanged.

Outlook

The December 2026 consultation is the key event to watch: it will test whether the PSR adjusts reimbursement thresholds, cost-sharing arrangements between sending and receiving payment service providers, or scope, in light of the Frontier Economics evaluation's findings on both fraud reduction and reimbursement cost.

Consumer Protection & APP Fraud

Mandatory reimbursement under PSR Specific Direction 20 returned GBP 173 million to victims of authorised push payment fraud in its first year of operation, a substantial consumer-protection outcome delivered under the mandatory reimbursement regime. Both bank and non-bank payment institutions are within scope of the reimbursement obligation, reflecting the regime's design to spread reimbursement responsibility across the payment chain rather than concentrating it solely on receiving or sending banks. A formal reimbursement-policy review is now running, examining the reimbursement cap, the cost-split arrangement between sending and receiving payment firms, and the standard-of-caution exception that can reduce or eliminate a victim's reimbursement where they are found to have acted with gross negligence, with findings due during 2026/27.

The timing of this review is notable given the parallel institutional transition of the PSR's functions into the FCA: the review's findings, due during 2026/27, will land at or around the same time as the broader institutional handover, raising the question of which authority will be responsible for implementing any recalibration of the cap, split or caution-exception parameters that the review recommends.

Outlook

The reimbursement-policy review findings, due during 2026/27, are the key event to watch, particularly whether the GBP 173 million first-year reimbursement figure and the underlying cap and split settings are judged to be functioning as intended or in need of recalibration. The institutional-transition overlap with this review timeline adds an additional layer of uncertainty over which body will own implementation of any resulting changes.

Consumer Protection & APP Fraud

The PSR's mandatory APP-fraud reimbursement regime has moved from contested policy to independently validated success. An independent Frontier Economics review, published 1 July 2026, found that Faster Payments authorised-push-payment fraud losses fell approximately 21 percent, and that £249.6 million was reimbursed to victims over the trailing twelve months under Specific Direction 20. This is the first independent third-party confirmation of the regime's net benefit since its introduction, and it materially strengthens the PSR's position heading into its next policy round.

That next round is a recalibration consultation, expected to be formally published in December 2026, addressing three specific parameters: the reimbursement cap, the split of liability between sending and receiving payment service providers, and the standard used to assess consumer caution in determining reimbursement eligibility. Notably, the PSR is not expected to lift the current £85,000 reimbursement cap in this round, which means debate is likely to concentrate on the mechanics of split and caution-standard calibration rather than on the scope or existence of the cap itself.

Structurally, it is worth noting that the mandatory reimbursement requirement applies only to payments made over Faster Payments and CHAPS; this rail-specific scope has not been extended this cycle, and any broader extension of mandatory reimbursement to other payment rails would require primary legislation as part of a wider regulatory-consolidation programme anticipated in the 2026/27 parliamentary session, rather than through PSR rule-making alone.

Outlook

The December 2026 consultation is the key scheduled event: expect the debate to center on the sending/receiving split and the consumer-caution standard, with the reimbursement cap itself expected to remain at its current level. Whether the rail-specific scope of mandatory reimbursement (currently limited to Faster Payments and CHAPS) is addressed in the wider legislative consolidation programme during the 2026/27 session is a longer-horizon structural question to watch beyond this immediate consultation cycle.

Consumer Protection & APP Fraud

The PSR's independent report (1 July 2026) found that the mandatory APP-fraud reimbursement policy delivered net benefit of £17m-£29m in year one with no evidence of bank market exit or reduced consumer vigilance. This is a direct rebuttal to the two central objections raised against the policy when it was introduced in October 2024: first, that mandatory reimbursement would push banks to reduce their exposure to retail payments provision because of the new cost burden; and second, that shifting liability toward PSPs would make customers less careful about scams because they would expect to be reimbursed regardless. The independent review finds evidence for neither effect, instead identifying a positive net economic benefit from the policy's first year of operation.

The PSR's own Q1 2026 reimbursement dashboard reinforces the review's conclusion with operational data: losses over Faster Payments fell ~21% following implementation of the reimbursement requirement, and Q1 2026 reimbursement value of £72.6m was the highest quarter since policy inception, with (88% of £316m lost since inception reimbursed). The high reimbursement rate indicates the scheme is functioning close to its design intent of returning the large majority of APP-fraud losses to victims, while the parallel fall in loss volumes suggests the policy may also be having some deterrent or behavioural effect on fraud incidence itself, distinct from its reimbursement function.

The reimbursement requirement applies across both bank and non-bank payment service providers alike, in contrast to the non-bank-specific scope of the safeguarding regime being introduced in parallel under W1b — a reminder that the PSR and FCA are calibrating separate tracks of consumer protection to different populations of providers depending on the risk each track addresses. The PSR is expected to move to a formal consultation on residual gaps in the reimbursement framework in December 2026, and the obligation itself is being carried forward into the New Payments Architecture as that migration completes by 1 July 2026.

Outlook

With both an independent review and a full quarter of dashboard data now pointing in the same direction, the mandatory reimbursement regime looks likely to be extended and refined rather than rolled back or diluted. The December 2026 consultation on residual gaps is the next formal milestone to track, alongside how the reimbursement obligation performs once carried onto the New Payments Architecture rather than the legacy Faster Payments rail it was designed around.

Consumer Protection & APP Fraud

The Payment Systems Regulator's one-year independent review of the mandatory APP-fraud reimbursement regime, carried out by Frontier Economics and published 1 July 2026, found fraud losses down by roughly £73m per year and around 35,000 fewer scams, with in-scope Faster Payments APP losses down approximately 21%. The overall reimbursement rate rose from 54% to 65%, reaching 97% for in-scope claims; 84% of claims were resolved within five days and 97% within 35 days, while claim volumes fell around 15% year-on-year. Set against these gains, the review found that 71% of surveyed victims were unaware of reimbursement protection and 49% did not attempt to claim, a persistent awareness gap that the PSR now intends to address through a formal consistency consultation expected before the end of 2026. The FCA has moved in parallel, issuing a Dear CEO letter that sets Consumer-Duty-linked expectations for anti-scam systems and controls and states that the regulator will use reimbursement data to monitor prudential and conduct issues. The obligations apply across both banks and non-bank payment and e-money institutions, though the underlying reimbursement mechanics run through the Faster Payments scheme and its participating banks and payment institutions differently depending on their role as sending or receiving firm — a distinction the PSR's own data collection is now designed to surface.

Outlook

The PSR's consistency consultation, expected before the end of 2026, will directly test whether the scheme's early fraud-reduction gains can be extended to the large minority of victims who remain unaware of, or unable to access, reimbursement. Continued FCA supervisory attention via the Dear CEO letter mechanism is likely to keep anti-scam systems and controls as a live conduct and prudential issue across both bank and non-bank payment providers through the remainder of 2026.

Consumer Protection & Fraud

No new structured findings were developed for this module in the current cycle. The gaps register records that the source register contains APP fraud reimbursement signals — including a PSR reimbursement regime update and FCA Dear CEO letter on APP fraud expectations for payment and e-money institutions — that were not developed into structured findings this cycle.

The gaps register also notes that UK banks paid GBP 173 million in APP fraud claims under the PSR regime, and that the PSR has confirmed its reimbursement model, but these items appear in the source register without the developed detail required to assert structured findings.

Outlook

No date-certain forward items are currently recorded for this module as structured findings. APP fraud reimbursement developments are flagged for development in the next research cycle.

Correspondent Banking, Settlement & Access

The UK's correspondent-banking and payments-insolvency plumbing hardened further this cycle. Binding from 7 May 2026, mandatory CASS10A resolution packs and standardised safeguarding-account acknowledgment letters are intended to enable fund tracing for non-bank payment and e-money firms after insolvency, though this remains sourced to a single tier-3 legal-commentary source pending further corroboration. A fuller CASS-style statutory-trust Post-Repeal Regime remains deferred to a future HM Treasury payment-services-law consultation, expected later in 2026 or in 2027, and would require amending the Payment Services Regulations 2017 and the Electronic Money Regulations 2011. This module's analytical spine remains the structural asymmetry between banks' direct access to settlement infrastructure and non-bank payment and e-money institutions' continued reliance on indirect access and safeguarding arrangements rather than deposit protection.

Separately, in Gibraltar, the GFSC, the Gibraltar government and crypto exchange Bullish are reported to be developing an independent crypto-derivatives clearing-house oversight framework under Gibraltar's DLT regime. No primary GFSC instrument text has been retrieved this cycle; the development rests on a single tier-4 trade-press source and should be treated as provisional. If formalised, such a framework would fill a structural gap relative to the exchange-self-clearing model common elsewhere, potentially positioning Gibraltar competitively in the virtual-asset derivatives space.

Outlook

HM Treasury's Post-Repeal Regime consultation remains a multi-year horizon item with no fixed date, expected later in 2026 or in 2027. Gibraltar's crypto-derivatives clearing-house framework is expected to develop further in the fourth quarter of 2026, though confirmation depends on GFSC publishing primary instrument text that has not yet surfaced this cycle.

Correspondent Banking & Settlement Access

The analytical spine of this module is the access asymmetry between bank PSPs and non-bank payment institutions and e-money institutions. In the UK, non-bank PSPs have a statutory right of access to payment systems under the Payment Services Regulations, and the Bank of England has published guidance on access to UK payment systems for non-bank PSPs. No new structured findings were developed on this topic in the current cycle; the source register contains a Bank of England page on non-bank PSP access that was retrieved but not developed into structured claims.

The gaps register records that settlement access for non-bank PSPs remains under-indexed this cycle, with the source set dominated by FCA and Bank of England primary regulatory material on the crypto and stablecoin theme.

Outlook

No date-certain forward items are currently recorded for this module. A dedicated UK pass on non-bank PSP settlement access is flagged for the next research cycle.

Commercial Intelligence & Fintech

Monzo launched a fee-free Junior Stocks & Shares ISA on 8 October 2026, a product allowing families to set aside savings on behalf of a child within the digital bank's existing retail offering. The launch was announced without a disclosed financial value, consistent with an organic product-release event rather than a discrete funded transaction; no investment round, acquisition, or joint venture accompanied the announcement.

This product launch sits against a markedly weaker UK fintech funding backdrop: total UK fintech funding in the first half of 2026 came to 1.5 billion US dollars (approximately 11 billion pounds sterling), a 35% decrease from the second half of 2025 and a 26% decline year-on-year. The combination of a visible incumbent product launch alongside a steep funding decline is consistent with a market in which established digital banks continue to expand product ranges using existing balance sheets and customer bases, while newer or smaller fintech firms face a tighter capital-raising environment than in the prior year.

Outlook

Whether the H1 2026 funding decline deepens or stabilises through the second half of the year is the principal near-term question for UK fintech commercial activity; a continued decline would strengthen the reading that incumbent product launches, of the kind seen with Monzo's Junior ISA, are substituting for new funding activity as the primary growth lever available to UK digital banks.

Commercial Intelligence

LemFi, a remittance fintech, received FCA change-of-control approval to acquire UK wealth-management platform Wealth8, expanding LemFi into retail investing. Deal value was not publicly disclosed. The transaction was reported 6 July 2026 and rests on a single tier-3 source.

Outlook

No further UK commercial events are in view this cycle; the LemFi/Wealth8 deal is the sole disclosed transaction in this window.

Commercial Intelligence

No commercial events were developed into structured findings this cycle. The gaps register records that the source register contains discrete commercial signals — including Mollie's EUR 350 million EEA expansion commitment, a Mesh-Adyen partnership for UK and European operations, and Atoa's USD 6.5 million seed funding round — but these items lack the developed detail required to assert commercial_event sub-objects with the required fields. They are flagged for development in the next research cycle.

Amount disclosure status and deal terms for these items are not confirmed in the current structured claims set and cannot be asserted this cycle.

Outlook

The Mollie EEA expansion, Mesh-Adyen partnership, and Atoa seed round are flagged for structured development in the next research cycle. No date-certain commercial events are currently recorded.