CASP Regulatory Impact Report — Week Ending 5 September 2026

Sep 7

5 min read

Sentiment: narrower than it looked in Singapore, harder than it looked in Thailand, constructive on bank capital in Ottawa, and — in London and Brussels — a week of notice about cryptoasset rules rather than rules.

Singapore would bar stablecoin issuers from paying yield — and carves distribution out of it.

Thailand hardens its self-hosted wallet checks from assess to verify, with a date of 27 February 2027.

No binding cryptoasset rule from the FCA, the EBA, ESMA, the ECB, the European Commission, the SEC or the CFTC — yet OSFI's final crypto-asset capital guideline, a targeted relief, is expected on 10 September, and four fixed deadlines converge on 30 September.

DEEP DIVE — THE SIGNAL

1. MAS consults on legislative amendments to implement its stablecoin framework (1 September)

The Development: MAS opened consultation P015-2026 on amendments to the Payment Services Act 2019 giving statutory effect to its Single-Currency Stablecoin framework. Paragraph 3.2 would prohibit issuers from paying interest, return or any other benefit to a holder that is directly or indirectly attributable to the holding of, or balance of, MAS-regulated stablecoins. The paper also permits multi-jurisdictional joint issuance and recognition of a limited number of comparably regulated foreign-issued coins for cross-border wholesale use. Coins outside the framework are treated as digital payment tokens. Comments close 16 October 2026.

The Business Impact: The prohibition binds the issuer. Paragraph 3.2 expressly carves out revenue-sharing, distribution, service and other commercial arrangements between the issuer and a third party, so platform distribution is not caught on its face. "Directly or indirectly attributable" is the anti-avoidance hook: a distributor yield funded by the issuer and attributable to holding would still be caught in substance. Recognition and joint issuance cut the other way — an issuer already regulated in the EU, the US or Japan reaches Singapore institutional settlement without a second issuance stack. Call the result a "Split Perimeter": one token, a regulated instrument wholesale and a digital payment token retail.

The Revenue Reality: Not the earn line, on the paper's face — and nothing has moved yet, since this is a consultation rather than a rule. The open question carrying a P&L is paragraphs 3.6–3.7, a possible minimum proportion of reserve assets to be held in cash or deposits. MAS benchmarks the UK and EU at 5–30% for non-systemic stablecoins and 40–60% for systemic. That is the number to comment on.

2. SEC Thailand issues the Travel Rule and approves principles restricting stablecoin transfers (2 and 3 September)

The Development: On 2 September, the SEC issued interim Travel Rule regulations under Notification Sor Thor. 9/2026, dated 25 August, requiring operators to transmit originator and beneficiary data, conduct counterparty VASP due diligence, verify ownership or control of self-hosted wallets, and retain records for five years — effective 27 February 2027. Separately, on 3 September the SEC Board approved in principle a ban on third-party stablecoin transfers through licensed operators, capped at THB 5m a day each way per person per operator, with the cap disapplied for transfers between customer accounts at operators under SEC supervision. A public hearing follows in September.

The Business Impact: Self-hosted wallet ownership verification is the expensive control, reaching beyond AML tooling into the withdrawal path of every Web3 wallet, fiat off-ramp and peer-to-peer flow. Four regimes now apply four standards of proof. Switzerland has required ownership to be proven by suitable technical means since FINMA Guidance 02/2019, with no de minimis. Regulation (EU) 2023/1113 requires crypto-asset service providers only to take adequate measures to assess — not verify — whether a self-hosted address is the customer's, above EUR 1,000, and has done since 30 December 2024. Hong Kong's SFC requires risk-sensitive ascertainment. Thailand now requires verification outright. The transfer ban, if adopted, would remove merchant settlement and remittance-style stablecoin flows from the Thai perimeter entirely.

The Revenue Reality: Cost of compliance, not revenue. Build once to the Swiss standard and the other three follow; build to the EU standard, and Thailand will not accept it from 27 February 2027.

3. The West gave notice of cryptoasset rules this week rather than publishing them (30 August – 5 September)

The Development: No binding cryptoasset measure was published by the FCA, the EBA, ESMA, the ECB, the European Commission, the SEC or the CFTC in the window, and no crypto-asset, stablecoin or MiCA instrument appeared in the Official Journal. OSFI gave notice on 3 September that the final Capital and Liquidity Treatment of Crypto-asset Exposures (Banking) Guideline (2027) is expected at its 10 September Quarterly Release Day. The change is targeted relief: recognising cross-exchange hedging for Group 2a crypto-assets traded on regulated exchanges, which OSFI says corrects a treatment that "can overstate risk". The FCA's in-window output was CP26/32, a consultation carrying the qualifying-cryptoasset admission-deferral proposals. What the US produced was also a proposal — the SEC's transfer agent modernisation release of 1 September, which puts onchain transfer agents and tokenised securities into rule text. Comments close 3 November.

The Business Impact: Read the absence as sequencing. OSFI's guideline takes effect on 1 November 2026 or 1 January 20,27 depending on fiscal year end — the nearest binding cryptoasset capital date, and a constructive one: less capital against hedged Group 2a exposures lowers the cost at which Canadian banks can face the sector. Twenty days later, four fixed deadlines converge on 30 September: the FCA cryptoasset gateway is expected to open, the European Commission's MiCA review consultations close, the Thai overseas derivatives consultation closes, and OFAC's Annual Report of Blocked Property falls due for US persons holding blocked digital assets.

The Revenue Reality: No binding cryptoasset rule came out of the UK or the EU, and that is the finding. The planning error is to read a null week as capacity — 10 September, and the 30 September cluster draw on the same policy, legal, and authorisations resource five times over inside three weeks.

WATCHLIST — HARD DATES

10 Sep — CA (OSFI). Final Capital and Liquidity Treatment of Crypto-asset Exposures (Banking) Guideline (2027) expected at Quarterly Release Day. Exposure: capital relief on hedged Group 2a exposures — constructive for bank counterparty pricing.
24 Sep — CA (OSFI). Industry Day question-and-answer session on the release. Exposure: last chance to query the final text before it bites.
30 Sep — UK (FCA). Cryptoasset authorisation gateway expected to open; expected to close 28 February 2027. Exposure: UK market access from 25 October 2027.
30 Sep — EU (European Commission). Targeted and public MiCA review consultations close, 23:59 CEST. Exposure: lobbying window on lending, staking and DeFi scope.
30 Sep — TH (SEC). Consultation closes on intermediaries facilitating overseas digital asset derivatives. Exposure: Thai retail access to derivatives venues.
30 Sep — US (OFAC). Annual Report of Blocked Property due, including blocked digital assets. Exposure: late filing may lead to an enforcement referral.
1 Oct — TH (SEC). Access blocking of the Holdstation and UNO applications takes effect. Exposure: precedent for treating Web3 wallet interfaces as unlicensed brokerage.
12 Oct — UK (FCA). CP26/32 feedback deadline, including the qualifying cryptoasset admission-deferral and execution-venue proposals. Exposure: UK listing velocity at launch.
16 Oct — SG (MAS). Stablecoin consultation P015-2026 closes. Exposure: Singapore stablecoin earn revenue line.
20 Oct — US (SEC). Comment deadline, proposed Regulation Crypto Assets. Exposure: onshore US token issuance route.
26–30 Oct — FATF. Plenary, Paris. Watch for the Recommendation 16 implementation guidance. Exposure: Travel Rule data standards.
2 Nov — US (OCC and FDIC). Unsafe or unsound practices final rule takes effect; cites the GENIUS Act, in the preamble, as an example of a newly adopted law examiners will test. Exposure: examination architecture for crypto-active banks.
3 Nov — US (SEC). Comment deadline, transfer agent modernisation proposal. Exposure: tokenised securities administration perimeter.

Notice of a rule is not a rule. It is already on the calendar.