Skip to content
RegTech CodexGlobal Financial Compliance, AML/KYC Frameworks & Prudential Rulebooks

Thematic Pillar Hub · 1 Published Briefings

Regulatory Compliance & Licensing

Regulatory Compliance & Licensing institutional intelligence, quantitative benchmarks, primary regulatory filings, and market structure analysis from RegTech Codex. Cross-border Virtual Asset Service Provider (VASP) compliance refers to the synchronized execution of cryptographic wire-transfer messaging under FATF Recommendation 16, direct supranational AML supervision under EU Regulation (EU) 2024/1624 (AMLR) and Regulation (EU) 2024/1113 (TFR), and statutory daily client asset segregation reconciliations mandated by the UK FCA CASS 7/CASS 15 and MAS PSN02/CMSA frameworks.

Curated by Victoria Ashworth, LL.M, CAMS (LL.M in Financial Regulation (UCL), Certified Anti-Money Laundering Specialist) · Fact-checked by RegTech Codex Institutional Review Board

Key Institutional Takeaways — Regulatory Compliance & Licensing

  • Under EU Regulation (EU) 2024/1113 (Transfer of Funds Regulation) and EBA Guidelines EBA/GL/2024/11, the de minimis exemption is eliminated (EUR 0 threshold) for all CASP-to-CASP crypto-asset transfers, while transfers above EUR 1,000 involving self-hosted wallets require verified ownership proofs.
  • EU Regulation (EU) 2024/1620 empowers the Frankfurt-based AMLA to directly supervise up to 40 high-risk cross-border financial institutions and CASPs operating across at least 6 EU Member States with over EUR 20,000,000 in volume and 20,000 customers per host state.
  • Singapore MAS Notice PSN02 and Payment Services Regulations mandate that Digital Payment Token (DPT) providers hold at least 90% of customer digital assets in offline cold storage under a statutory trust and completely prohibit the lending or rehypothecation of retail customer tokens.
  • UK FCA CASS 7/CASS 15 and U.S. SEC Rule 15c3-3 (for carrying broker-dealers with USD 500,000,000 or more in average total credits) enforce daily (T+1) internal and external client asset reconciliations with mandatory same-day or T+2 morning reserve top-ups.

All Regulatory Compliance & Licensing Research Briefings (1)

2026-10-22Victoria Ashworth, LL.M, CAMS

FATF Travel Rule (Recommendation 16) Cross-Border VASP Compliance, EU AMLR/AMLA Supervision & FCA/MAS Client Asset Segregation Audits: 2026 Codex

Cross-border Virtual Asset Service Provider (VASP) compliance refers to the synchronized execution of cryptographic wire-transfer messaging under FATF Recommendation 16, direct supranational AML supervision under EU Regulation (EU) 2024/1624 (AMLR) and Regulation (EU) 2024/1113 (TFR), and statutory daily client asset segregation reconciliations mandated by the UK FCA CASS 7/CASS 15 and MAS PSN02/CMSA frameworks.

Institutional Directories & Regulatory Registers

Frequently Asked Questions — Regulatory Compliance & Licensing

What is the de minimis threshold for the FATF Travel Rule across the EU, UK, Singapore, and the United States in 2026?

Under EU Regulation (EU) 2024/1113 (TFR), the threshold is EUR 0 for all CASP-to-CASP transfers. In the UK (MLR Part 7A) and Singapore (MAS Notice PSN02), basic originator and beneficiary name and account identifiers must accompany all transfers from zero, while full identity and address details are triggered above EUR 1,000 and SGD 1,500 respectively. In the United States, FinCEN 31 CFR 1010.410(f) enforces a USD 3,000 statutory threshold alongside strict USD 0 OFAC sanctions screening.

How do VASPs and CASPs resolve the FATF Travel Rule 'Sunrise Issue' when transacting with non-compliant jurisdictions?

When an originating CASP or VASP transacts with a counterparty domiciled in a jurisdiction that has not yet implemented FATF Recommendation 16, EBA Guidelines (EBA/GL/2024/11) and MAS PSN02 require the originating institution to perform enhanced counterparty VASP due diligence, transmit the IVMS101 payload via an interoperable protocol or fallback secure channel, and quarantine or reject inbound transfers that lack required originator data within 3 business days.

What are the core differences between UK FCA CASS 7/15 and Singapore MAS client asset segregation audits?

Both regimes impose a statutory trust over client assets and mandate daily (T+1) internal and external ledger reconciliations. However, MAS explicitly requires Digital Payment Token providers to keep at least 90% of customer tokens in offline cold storage and bans retail token rehypothecation, whereas FCA CASS 7/15 focuses on immediate statutory trust attachment, mandatory CASS 7.18 bank acknowledgement letters, same-day corporate top-ups of any reconciliation shortfall, and a 48-hour retrievable CASS Resolution Pack.

When does an EU financial institution or CASP fall under direct AMLA supervision in Frankfurt?

Under Regulation (EU) 2024/1620, an obliged entity qualifies for periodic selection into AMLA's cohort of 40 directly supervised groups if it operates in at least 6 EU Member States—either via local establishments or cross-border freedom to provide services exceeding EUR 20,000,000 in annual transaction volume and 20,000 customers per Member State—and is classified in the highest residual AML/CFT risk category.

Explore Related Thematic Research Hubs on RegTech Codex

Regulatory Compliance & Licensing — Institutional Research & Regulatory Hub | RegTech Codex | RegTech Codex