Regulatory Tracker — Page 4 of 11

De Nederlandsche Bank fined payment institution CCV €2.65 million after 4,200 merchants went unmonitored for transaction activity over a 23-month period.

The Reserve Bank of India (RBI) issued a draft framework on July 15, 2026, requiring banks and NBFCs to build stronger data security and data risk management systems in digital banking. This is supervisory guidance, not an enforcement action with penalties.

On July 15, 2026, Korea's Financial Services Commission (FSC) briefed the President on plans to overhaul bank governance, sanctions processes, and inspections, including pre-emptive inspections and rationalized sanction criteria. This is structural oversight reform rather than a discrete enforcement action.

On July 13, 2026, UK regulators (Bank of England, FCA, and PRA) began formal oversight of critical third parties to the financial sector, including Microsoft, Google, Amazon, and Oracle as designated critical cloud providers.

The PBoC Gansu branch warned and fined Lanzhou Anning Shenzhou Village Bank for violating account management rules and financial technology management regulations.

On July 13, 2026, the UK's Critical Third Parties (CTP) regulatory regime officially went live, bringing four major cloud providers — AWS, Google Cloud, Microsoft, and Oracle — under direct joint oversight by the Bank of England, PRA, and FCA. The regime focuses on operational resilience and systemic risk to the UK financial system.

On Jul 7, 2026, the Federal Reserve proposed a rule requiring Board-supervised banks to maintain risk-based AML/CFT programs under the BSA. The proposal covers 858 institutions and aligns with FinCEN requirements and the Anti-Money Laundering Act of 2020.

The Federal Reserve Board issued an enforcement action against TS Banking Group, Inc. and TS Contrarian Bancshares, Inc. on Jul 9, 2026. The nature of the action was not disclosed in the posting.

The California DFPI took enforcement action against Navitas for unlicensed lending, as listed in the agency's July 2026 monthly bulletin. Details of the penalty were not disclosed in the available source text.

Senator Pete Ricketts introduced S. 4839, the Bank-Fintech Partnership Enhancement Act, which would require the Federal Reserve, OCC, FDIC, and NCUA to study bank and credit union fintech partnerships.

U.S. senators introduced a bill on June 22, 2026 to study fintech deals with banks and credit unions. The legislation signals growing congressional attention on the risks and structures of bank-fintech arrangements.

The OCC tightened application standards with greater transparency on application denials, as part of broader regulatory moves affecting digital finance and embedded banking models in June 2026.

The CFPB adopted new enforcement principles prioritizing actual consumer harm, due process, collaboration with institutions, and efficiency. The framework encourages self-reporting and voluntary remediation over adversarial enforcement actions.

The OCC released its June 2026 batch of enforcement actions on June 18, 2026. The release confirms enforcement actions were taken but specific bank names, fintech partnerships, and detailed violations have not yet been publicly enumerated in available summaries.

A multi-agency proposed rule from FinCEN, the Federal Reserve, OCC, FDIC, and NCUA would align stablecoin issuers with bank-like compliance expectations and address illicit finance risk. The rulemaking targets the growing intersection of banking and digital asset services.

The UK Payment Systems Regulator fined Barclays £8.4 million on Dec 02, 2022, for failing to comply with the Interchange Fee Regulation. Barclays did not provide retailers with required information about card payment costs over a three-year period.

The OCC entered a consent order with an unnamed fintech partner bank over deficiencies in its BSA/AML compliance program. The order addresses gaps in risk assessment, customer due diligence, and transaction monitoring.

The U.S. House Financial Services Digital Assets, FinTech & AI Subcommittee held a hearing on May 20, 2026 focused on bank-fintech partnerships. The hearing examined risks, compliance responsibilities, supervision, and policy options for bank-fintech collaborations.

On May 22, 2026, the FDIC proposed rules setting AML/CFT and sanctions compliance standards for permitted payment stablecoin issuers under the GENIUS Act. The proposal aligns PPSI oversight with FinCEN and BSA requirements.

The CFTC asked a judge to vacate a $5 million penalty against crypto exchange Gemini. The request was filed on May 28, 2026, in connection with a long-running enforcement case.

The Reserve Bank of India fined Shree Laxmi Co-operative Bank Ltd. ₹2 lakh on May 27, 2026, for shortcomings in KYC compliance.

The OCC issued a consent order against Community Federal Savings Bank for BSA/AML compliance deficiencies. Violations included suspicious activity reporting and USA PATRIOT Act information sharing requirements.

Payward, parent company of the Kraken cryptocurrency exchange, filed an application with the OCC for a national trust company charter. The charter would cover fiduciary custody and other services for digital assets.

The OCC granted conditional approval to Augustus to establish a full-service U.S. national bank. The company describes the bank as "the world's first clearing bank for the AI era," built on a stablecoin and AI-native core.