Regulatory Tracker

The OCC entered a consent order with an unnamed fintech partner bank over deficiencies in its BSA/AML compliance program. The order addresses gaps in risk assessment, customer due diligence, and transaction monitoring.

The U.S. House Financial Services Digital Assets, FinTech & AI Subcommittee held a hearing on May 20, 2026 focused on bank-fintech partnerships. The hearing examined risks, compliance responsibilities, supervision, and policy options for bank-fintech collaborations.

The CFTC asked a judge to vacate a $5 million penalty against crypto exchange Gemini. The request was filed on May 28, 2026, in connection with a long-running enforcement case.

The Reserve Bank of India fined Shree Laxmi Co-operative Bank Ltd. ₹2 lakh on May 27, 2026, for shortcomings in KYC compliance.

On May 22, 2026, the FDIC proposed rules setting AML/CFT and sanctions compliance standards for permitted payment stablecoin issuers under the GENIUS Act. The proposal aligns PPSI oversight with FinCEN and BSA requirements.

The OCC issued a consent order against Community Federal Savings Bank for BSA/AML compliance deficiencies. Violations included suspicious activity reporting and USA PATRIOT Act information sharing requirements.

The OCC granted conditional approval to Augustus to establish a full-service U.S. national bank. The company describes the bank as "the world's first clearing bank for the AI era," built on a stablecoin and AI-native core.

MAS reprimanded two senior managers at Havenport Investments Pte Ltd and imposed a $40,000 composition fine on the firm for breaches of the Securities and Futures Act. The action was published on May 18, 2026.

Payward, parent company of the Kraken cryptocurrency exchange, filed an application with the OCC for a national trust company charter. The charter would cover fiduciary custody and other services for digital assets.

The FCA fined Monzo Bank £21 million for lax anti-money laundering controls. Monzo opened more than 34,000 high-risk customer accounts between August 2020 and June 2022, breaching a prior restriction.

The Massachusetts Division of Banks settled with Bridge It Inc. (dba Brigit) for $1.9 million over unlicensed third-party loan servicing dating back to at least July 2021. The company was ordered to cease unlicensed activity immediately.

The California DFPI imposed a $1 million penalty on Yotta Technologies on May 15, 2026, for falsely marketing customer accounts as FDIC-insured. Yotta had moved those accounts to Synapse Brokerage LLC, which filed for bankruptcy in April 2024.

Lietuvos bankas introduced dedicated supervisory contact persons for selected EMIs and PIs to strengthen regulatory dialogue and improve supervisory consistency. The model is expected to expand to additional institutions.

Lietuvos bankas imposed a €290,000 monetary sanction on UAB Walletto following a targeted inspection that found AML/CFT internal control weaknesses and client funds safeguarding deficiencies. The sanction was publicly disclosed.

FinCEN and OFAC jointly proposed a rule on April 8, 2026, under the GENIUS Act requiring payment stablecoin issuers to implement AML/CFT programs. The rule aligns stablecoin compliance obligations with bank-like standards for primary and secondary market risks.

The PSR fined Bank of Ireland UK £3,779,300 on Feb 19, 2026, for missing the Oct 2023 Confirmation of Payee deadline by 14 months. The bank was the last Group 1 provider to go live, activating CoP in January 2025.

The Federal Reserve began requesting detailed disclosures from major US banks on their exposures to private credit funds between April 18-22, 2026. Bank lending to non-bank financial institutions has reached approximately $1.4 trillion, representing around 11% of total US bank lending.

The Reserve Bank of India cancelled the banking licence of Paytm Payments Bank Limited, effective Apr 24, 2026. The RBI cited persistent KYC failures, transaction limit breaches, and failure to meet licence conditions.

On April 17, 2026, the OCC, Federal Reserve, and FDIC issued revised interagency guidance on model risk management, addressing vendor and third-party products. The guidance is relevant to bank-fintech relationships where models are sourced from or operated by third parties.

On April 17, 2026, the OCC, Federal Reserve, and FDIC issued revised interagency guidance on model risk management. The guidance addresses sound principles for model development, validation, monitoring, and governance, including considerations for vendor and third-party products.

Bhutan's Royal Monetary Authority fined Bank of Bhutan more than Nu 228 million for AML failures, including governance deficiencies and delayed suspicious transaction reporting. The bank also faces a dividend ban and mandatory system audits.

The OCC entered into a consent order with The Federal Savings Bank in Chicago over deceptive marketing of VA cash-out refinance loans between 2022 and 2024. The bank neither admitted nor denied the allegations.

The OCC terminated a March 2024 enforcement action against JPMorgan Chase over failures to monitor trading activity on at least 30 global venues. The original action, paired with a Federal Reserve order, carried $348.2 million in penalties.

On April 15, 2026, SEC staff issued no-action relief for a UK bank's bail-in, allowing exchange of bailed-in bonds for shares without Securities Act registration. SEC Chairman Atkins directed broader rulemaking for foreign bank resolutions.