Regulatory Tracker

Nigeria's Federal High Court in Lagos dismissed a challenge to the FCCPC's authority over digital lending regulations, vacating an interim restraining order. The FCCPC announced that its 2025 Digital, Electronic, Online or Non-Traditional Consumer Lending (DEON) Regulations are now fully operational and enforceable.

Multiple U.S. regulators including the OCC, Fed, FDIC, NCUA, Treasury, FinCEN, and OFAC missed the July 18, 2026 statutory deadline under the GENIUS Act to finalize rules governing stablecoin reserve requirements, capital standards, BSA/AML, and foreign issuer access. Key frameworks remain in proposed-rule stage only.

The RBI on Jul 17, 2026 imposed monetary penalties on six companies, including Muthoot Finance, for non-compliance with regulatory norms. Muthoot Finance was fined Rs 5.80 lakh for failures in risk categorisation review and suspicious transaction reporting.

The CFPB is preparing to unveil a new open banking rule addressing how banks price fintech access to consumer financial data. The bureau is considering a model where banks provide some data free but can charge above defined thresholds.

De Nederlandsche Bank fined payment institution CCV €2.65 million after 4,200 merchants went unmonitored for transaction activity over a 23-month period.

The Federal Reserve issued a prohibition order against James Burns, former chief lending officer of Heritage State Bank in Lawrenceville, Illinois. The action cited appraisal-related lending misconduct.

On July 15, 2026, Korea's Financial Services Commission (FSC) briefed the President on plans to overhaul bank governance, sanctions processes, and inspections, including pre-emptive inspections and rationalized sanction criteria. This is structural oversight reform rather than a discrete enforcement action.

The Reserve Bank of India (RBI) issued a draft framework on July 15, 2026, requiring banks and NBFCs to build stronger data security and data risk management systems in digital banking. This is supervisory guidance, not an enforcement action with penalties.

The PBoC Gansu branch warned and fined Lanzhou Anning Shenzhou Village Bank for violating account management rules and financial technology management regulations.

On July 13, 2026, UK regulators (Bank of England, FCA, and PRA) began formal oversight of critical third parties to the financial sector, including Microsoft, Google, Amazon, and Oracle as designated critical cloud providers.

On July 13, 2026, the UK's Critical Third Parties (CTP) regulatory regime officially went live, bringing four major cloud providers — AWS, Google Cloud, Microsoft, and Oracle — under direct joint oversight by the Bank of England, PRA, and FCA. The regime focuses on operational resilience and systemic risk to the UK financial system.

On Jul 7, 2026, the Federal Reserve proposed a rule requiring Board-supervised banks to maintain risk-based AML/CFT programs under the BSA. The proposal covers 858 institutions and aligns with FinCEN requirements and the Anti-Money Laundering Act of 2020.

The Federal Reserve Board issued an enforcement action against TS Banking Group, Inc. and TS Contrarian Bancshares, Inc. on Jul 9, 2026. The nature of the action was not disclosed in the posting.

The California DFPI took enforcement action against Navitas for unlicensed lending, as listed in the agency's July 2026 monthly bulletin. Details of the penalty were not disclosed in the available source text.

Senator Pete Ricketts introduced S. 4839, the Bank-Fintech Partnership Enhancement Act, which would require the Federal Reserve, OCC, FDIC, and NCUA to study bank and credit union fintech partnerships.

The OCC tightened application standards with greater transparency on application denials, as part of broader regulatory moves affecting digital finance and embedded banking models in June 2026.

U.S. senators introduced a bill on June 22, 2026 to study fintech deals with banks and credit unions. The legislation signals growing congressional attention on the risks and structures of bank-fintech arrangements.

The CFPB adopted new enforcement principles prioritizing actual consumer harm, due process, collaboration with institutions, and efficiency. The framework encourages self-reporting and voluntary remediation over adversarial enforcement actions.

The OCC released its June 2026 batch of enforcement actions on June 18, 2026. The release confirms enforcement actions were taken but specific bank names, fintech partnerships, and detailed violations have not yet been publicly enumerated in available summaries.

A multi-agency proposed rule from FinCEN, the Federal Reserve, OCC, FDIC, and NCUA would align stablecoin issuers with bank-like compliance expectations and address illicit finance risk. The rulemaking targets the growing intersection of banking and digital asset services.

The UK Payment Systems Regulator fined Barclays £8.4 million on Dec 02, 2022, for failing to comply with the Interchange Fee Regulation. Barclays did not provide retailers with required information about card payment costs over a three-year period.

The OCC entered a consent order with an unnamed fintech partner bank over deficiencies in its BSA/AML compliance program. The order addresses gaps in risk assessment, customer due diligence, and transaction monitoring.

The U.S. House Financial Services Digital Assets, FinTech & AI Subcommittee held a hearing on May 20, 2026 focused on bank-fintech partnerships. The hearing examined risks, compliance responsibilities, supervision, and policy options for bank-fintech collaborations.

The Reserve Bank of India fined Shree Laxmi Co-operative Bank Ltd. ₹2 lakh on May 27, 2026, for shortcomings in KYC compliance.