What the Board's 29 September proposal says about holder rewards, co-branded stablecoins and tying, and the questions open for comment until 30 November 2026.

VARA's 6 October 2026 circular sets out seven points an independent audit of a VASP's Reserve Assets should cover, and what the audit report should contain.

Canada’s bank and insurer regulator published its 2026 Semi-Annual Risk Outlook on 8 October. It does not mention crypto-assets. This note sets out its content and the limited routes by which it may reach crypto-asset service providers. On 8 October 2026, the Office of the Superintendent of Financial Institutions (OSFI), which supervises Canada’s federally regulated banks, insurers and other financial institutions, published its 2026 Semi-Annual Risk Outlook. It updates the 2

Consultation Paper 392 sets out ASIC’s proposed standards, guidance and financial requirements for digital asset platforms and tokenised custody platforms—submissions close at 5 pm AEDT on 27 November 2026.

In consultation P017-2026, MAS proposes to require all major and standard payment institutions, and later MAS-regulated stablecoin issuers, to subscribe to FIDReC. Comments close on 30 November 2026.

On 7 October 2026, the EU Anti-Money Laundering Authority published its response to the Commission’s MiCA review consultation. This note summarises its recommendations and the position for CASPs.

ESMA's 8 October 2026 opinion says MiCA-authorised CASPs should not provide services in non-compliant stablecoins, beyond limited wind-down services, and that client warnings do not change that.

What the 9 October 2026 proposal and interim final rule do, and their relevance to crypto asset service providers

On 2 October 2026, OFAC designated three individuals and two France-based registered charities under E.O. 13224. Treasury describes cryptocurrency transfers; none of the five SDN entries lists a digital currency address.

Release IA-7023 adds state trust companies and limited adviser self-custody, and does not propose a separate rule for trading platforms that are not permitted custodians.

Two crypto proposals withdrawn on 5 October 2026 do not change any current US obligation. In our view, they confirm the direction the President’s Working Group set in July 2025 for US policy on self-hosted wallets and widen the prospective gap with the EU and the UK.

Published on 28 September 2026, the programme sets ESMA’s crypto-asset priorities for 2027: supervisory convergence on CASP supervision and operational resilience and, subject to Board agreement, the next phase of its crypto-asset market surveillance system.

CFTC staff have added four FAQs on crypto assets: futures commission merchants and clearing organisations may invest customer funds in tokenised forms of permitted investments, and regulated firms may keep required records on a blockchain.

The EBA has published its response to the Commission's MiCA review. It finds stablecoin issuer rules broadly appropriate and asks the Commission to consider regulating crypto-asset lending and CASP access to DeFi lending.

ESMA's 2027 supervisory priority on digital innovation names AI and tokenisation but not MiCA. The one reference to crypto-asset service providers sits in the cyber resilience priority.

The EBA's new third-party risk guidelines skip crypto exchanges entirely, unless the exchange is also something else.

The FCA's Call for Input closes on 23 October 2026. Its most consequential chapter is the one on the collective investment scheme and alternative investment fund perimeter.

The FCA's feedback statement changes no rules. One sentence in chapter 3 tells firms what they are assessed against until the 2027 consultation.

The proposed replacement of US interagency third-party risk management guidance does not mention crypto or digital assets. It is material to how CASPs obtain US banking relationships. The development On 11 September 2026, the FDIC, the Federal Reserve Board, the NCUA and the OCC issued principles-based third-party risk management guidance for comment, replacing the 2023 Interagency Guidance (88 FR 37920) and three supplemental resources, including SR 24-5. The Board approved

Singapore prices yield out of regulated stablecoins, Thailand puts a date on self-hosted wallet verification, and the West gives notice of cryptoasset rules rather than publishing them.