Four things get called regulation and only one of them binds anyone: a rule that applies today, a rule made but not commenced, a consultation paper, and a regulator's speech. Confusing them is how an institution builds for a regime that does not exist and misses the one already binding it.
Every item below is marked as exactly one of four things:
- In force: it legally applies today, with its commencement date.
- Drafted: draft legislation, or a rule made but not commenced. Law for nobody yet.
- Consulted on: a consultation or discussion paper. Questions, not answers.
- A speech: an official said it, or staff wrote it. No legal force whatever.
Three beliefs cost money this year alone: that the United States has a stablecoin law in force, that the United Kingdom's crypto regime is live, and that Singapore has a stablecoin regime. None is true. Everything here is dated to 6 September 2026 and taken from the regulator's own pages. Where a position is genuinely unsettled it is marked unresolved. None of it is legal advice.
European Union: fully in force, and the transition is over
The instrument is Regulation (EU) 2023/1114 of 31 May 2023, MiCA. National competent authorities authorise and supervise; ESMA and the European Banking Authority set common standards.
In force. Titles III and IV, on asset-referenced and e-money tokens, applied from 30 June 2024; the rest from 30 December 2024. An authorisation under Article 63 covers only those of the ten enumerated crypto-asset services it actually names, requires a registered office and substantive management in a member state, and passports by notification under Article 65. An asset-referenced token may be issued only by an authorised issuer or a credit institution, an e-money token only by a credit or electronic money institution, redeemable at par. Neither may pay interest, and a benefit tied to holding period counts as interest. Our jurisdictional view of stablecoin regulation takes that apart.
The Article 143(3) transitional regime expired on 1 July 2026. ESMA's statement of 17 April 2026 confirms that an entity serving EU clients without a licence is now in breach, and that custody may not be outsourced or delegated to a non-EU firm that is not itself authorised under MiCA, intragroup arrangements included.
Drafted. COM(2025) 943 final of 4 December 2025 would move authorisation, supervision and enforcement of service providers from national authorities to ESMA, and would rework the DLT Pilot Regime, Regulation (EU) 2022/858, which has applied since 23 March 2023: the issuance cap rises from 6 billion to 100 billion euro, eligible assets widen to all financial instruments, and the time limit on permissions granted goes. It is a Commission proposal, with neither Parliament nor Council behind it yet.
Consulted on. The Commission's targeted MiCA review consultation opened on 20 May 2026 and is still open: the deadline moved from 31 August to 30 September 2026. Anyone describing its conclusions is inventing them.
What practitioners get wrong. That 30 December 2024 was the cliff edge. Member states could shorten the transitional period and did: six months in Latvia, Hungary, the Netherlands, Poland, Slovenia and Finland, nine in Sweden, twelve in Germany, Ireland, Lithuania, Austria and Slovakia, eighteen elsewhere. The lawful end date depended on the member state, not on MiCA.
United Kingdom: two permissions exist, and the regime everyone reads about starts in 2027
In force. Two things bite. Registration under the Money Laundering Regulations, which have covered cryptoasset businesses since 10 January 2020, is the only cryptoasset permission a UK firm can hold: anti-money-laundering supervision, with no client asset regime and no compensation or ombudsman cover. The financial promotions regime, since 8 October 2023 under SI 2023/612, made a qualifying cryptoasset, meaning one that is fungible and transferable, a controlled investment, so section 21 of FSMA now catches its promotion and the FCA treats it as a Restricted Mass Market Investment. That is a promotions regime, not an authorisation regime. From 8 October 2025 the FCA also lifted its retail ban on cryptoasset exchange traded notes admitted to a UK Recognised Investment Exchange; the ban on crypto derivatives for retail stands.
Drafted, and this is the whole story. The Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026, SI 2026/102, were made on 4 February 2026 and are law, but commencement is split. Only the enabling parts operate now, letting the FCA make rules and open an application gateway. Every new regulated activity commences on 25 October 2027, and there are six: issuing a qualifying stablecoin, safeguarding, operating a qualifying cryptoasset trading platform, dealing as principal or agent, arranging deals, and staking. Lending and borrowing are not a seventh activity; the dealing and arranging heads are intended to catch the relevant models. The FCA's policy statements PS26/9 to PS26/13 of 30 June 2026 are final rules that apply to nobody yet: a statutory trust over stablecoin backing assets, a custody regime in CASS 17, admission and disclosure duties for trading platforms, retail protections around lending and borrowing, and a prudential regime. The gateway opens on 30 September 2026 and closes on 28 February 2027.
Consulted on. The Bank of England's policy statement on sterling-denominated systemic stablecoins of 22 June 2026 carries with it a consultation on a draft Code of Practice, open until 22 September 2026, which the Bank intends to finalise by the end of 2026. It has no addressees: HM Treasury has recognised no issuer as systemic.
What practitioners get wrong. Reading SI 2026/102 and the June policy statements as meaning the regime is live. The perimeter waits on 25 October 2027, the gateway has not opened, and no firm holds an FCA cryptoasset authorisation.
United States: an interpretation in force, a market structure statute that is not
In force. The joint SEC and CFTC interpretation released on 17 March 2026 took effect on its publication in the Federal Register on 23 March 2026. It sorts crypto assets into five categories, digital commodities, digital collectibles, digital tools, stablecoins and digital securities, and only the last is a security. It works inside Howey rather than replacing it, requiring the common enterprise element to be satisfied and weighting an issuer's promises of essential managerial efforts; an asset ceases to be subject to an investment contract once those promises are fulfilled or abandoned, and protocol mining, protocol staking and the wrapping of a non-security crypto asset do not themselves involve the offer and sale of a security. Being an interpretive rule, it governs how the two agencies administer their statutes rather than how a court must rule. The SEC invited comment on it after issuing it. No court has tested it.
One detail inside it matters more than the taxonomy, and it is the part that operates on nobody yet. The stablecoin category is not open: it excludes from the definition of a security a payment stablecoin issued by a permitted payment stablecoin issuer under the GENIUS Act, and it does so from that Act's effective date. That date has not arrived, and no such issuer exists.
Three further things are in force and routinely overstated. The generic listing standards approved on 17 September 2025 let Nasdaq, Cboe BZX and NYSE Arca list Commodity-Based Trust Shares without a product-specific rule filing under section 19(b), which removes a queue rather than changing an analysis. The CFTC withdrew its 2020 interpretive guidance on actual delivery in retail digital asset transactions with effect from 10 December 2025 and put nothing in its place, leaving the statutory requirement standing with no official account of how to satisfy the exception. And on 29 May 2026 it let one designated contract market list a bitcoin perpetual futures contract, saying in the same breath that other asset classes go to case-by-case review under Regulation 40.3. That is an order, not a perpetuals regime.
Drafted. The GENIUS Act, Public Law 119-27, was signed on 18 July 2025 and is enacted law, but its effect is deferred to the earlier of 18 January 2027 or 120 days after the primary federal regulators issue final implementing regulations. None are final, and nobody can hold a GENIUS licence today. The SEC's Regulation Crypto Assets proposal, announced on 18 August 2026, published in the Federal Register on 21 August and open for comment until 20 October 2026, would add an exemption for up to $5 million raised over four years, a second for up to $75 million in any twelve months, and a conditional safe harbour for issuers that have completed or permanently ceased all essential managerial efforts. The Digital Asset Market Clarity Act, H.R. 3633, passed the House on 17 July 2025, was approved by the Senate Banking Committee on 14 May 2026 by 15 votes to 9, and was reported with an amendment on 1 June 2026. The Senate has not passed it.
A speech, in substance. The staff statement on tokenised securities of 28 January 2026, from the Divisions of Corporation Finance, Investment Management and Trading and Markets, says on its face that it has no legal force or effect and that the Commission has neither approved nor disapproved it. Its principle, that the format in which a security is issued does not change the law that applies to it, is sound. It is still not a rule.
What practitioners get wrong. Believing there is a stablecoin law in force. Two riders: this is the federal picture and state licensing applies independently of it; and how much of the SEC's 2025 staff guidance survives the March 2026 interpretation is not mapped anywhere official.
United Arab Emirates: four perimeters, and licences do not travel
This is the jurisdiction most often described as though it were one regime. It is four: the Abu Dhabi Global Market under its Financial Services Regulatory Authority, the Dubai International Financial Centre under the DFSA, VARA across the rest of Dubai, and the federal layer. Our piece on what changed in Abu Dhabi covers the ADGM story at length.
ADGM
In force. The Virtual Asset Framework sits under the Financial Services and Markets Regulations 2015 and Chapter 17 of the Conduct of Business Rulebook, with amendments in force from 10 June 2025. An Authorised Person needs FSRA approval to use virtual assets inside an existing regulated activity, and only seven qualify: dealing as principal, dealing as agent, arranging deals, advising, managing assets, providing custody, and operating a multilateral trading facility. It may use only an Accepted Virtual Asset, assessed against the criteria in COBS 17.2.2. The June 2025 amendments wrote the FSRA's existing prohibition on privacy tokens and algorithmic stablecoins into the rules. The separate Fiat-Referenced Token regime, in force since 5 December 2024 and amended with effect from 1 January 2026, makes issuing an FRT its own regulated activity. On 29 April 2026 the FSRA finalised rules for the staking of clients' virtual assets, with rewards confined to Accepted Virtual Assets and Accepted FRTs. More than 20 firms held virtual asset or FRT permissions as at December 2025.
What practitioners get wrong. Calling this a crypto licence. It is an approval to use virtual assets inside a regulated activity a firm already holds, and it does not reach token offerings, digital securities or fiat-referenced tokens, each of which has its own route.
DIFC
In force. The DFSA's Crypto Token regime has applied since 1 November 2022 and is a perimeter distinct from both ADGM and VARA. Updated rules took effect on 12 January 2026 and made one structural change: the DFSA no longer publishes a list of Recognised Crypto Tokens, so a firm must determine and document for itself, token by token, that the DFSA's criteria are met. The judgement moved from the regulator to the licensee.
Dubai and the federal layer
In force. VARA licenses virtual asset activities under Dubai Law No. 4 of 2022 and the 2023 Regulations, with Rulebooks Version 2.0 issued on 19 May 2025 and compliance required from 19 June 2025. It is the sole regulator across Dubai's mainland and free zones except the DIFC, and it has no writ in Abu Dhabi. Federally, the Central Bank's Payment Token Services Regulation, Circular 2/2024, has applied since 31 August 2024: it licenses issuance, conversion, and custody and transfer, bars the payment of interest to holders, and prohibits algorithmic stablecoins and privacy tokens. Federal Decree-Law No. 33 of 2025 entered into force on 1 January 2026, replacing the Securities and Commodities Authority with the Capital Market Authority, treating virtual assets as financial products, and restricting trading in the State to assets registered with the CMA and admitted to the official list of a CMA-licensed platform. Existing operators have until 1 January 2027 to regularise. The CMA then issued a five-module Virtual Assets Framework, Decision No. 4/R.M/2026, announced on 13 April 2026, creating eight licensed activities, with no commencement date published for the framework itself.
Unresolved, and it should be treated as unresolved. The Capital Markets Law does not reach activity conducted exclusively inside the financial free zones, which places ADGM and the DIFC outside it. VARA is not a financial free zone regulator, and how the CMA's registration and listing requirement sits with a VARA licence held by a Dubai mainland firm is answered on neither authority's pages.
Switzerland: no crypto licence, and the guidance is not the law
In force. Switzerland amended existing law rather than writing a crypto statute. The DLT Act, in force in full since 1 August 2021, gave the Code of Obligations ledger-based securities, amended the Banking Act so that clients' crypto-based assets are segregated from a failed custodian's estate, and created the DLT trading facility licence, which uniquely among Swiss venues may admit retail clients directly. There is still no Swiss crypto licence: firms hold a banking, fintech, securities firm, trading facility or fund authorisation. FINMA announced the first DLT trading facility licence, to BX Digital AG, on 18 March 2025, nearly four years after the category came into existence.
A speech, in substance. FINMA's ICO Guidelines of 2018 and Guidance 01/2026 of 12 January 2026, on the custody of crypto-based assets, state the practice FINMA applies today. The custody guidance is the change most likely to affect how a Swiss digital asset business operates: clients' assets must sit outside the custodian's bankruptcy estate, including where custody is held abroad, and responsibility stays with the authorised institution even where custody is outsourced.
Consulted on. The Financial Institutions Act amendment covering stablecoins and crypto services ran from 22 October 2025 to 6 February 2026. It would create two licence categories: a payment instrument institution licence, replacing the existing fintech licence and covering stablecoin issuance, and a crypto institution licence for the custody and trading of crypto-based assets. A dispatch to Parliament is expected in the second half of 2026 at the earliest, and the provisions are not expected in force before 2027.
What practitioners get wrong. Citing a FINMA Guidance as a statutory obligation. The binding rules sit in the Banking Act, FinIA, FinSA, FinMIA and the Anti-Money Laundering Act. Separately, the crypto-asset reporting legislation entered into force on 1 January 2026, but the Federal Council decided the reporting provisions would not apply during 2026, and the first automatic exchange is expected in 2027 at the earliest. The law exists; the exchange does not.
Singapore: a licence over the provider, and no stablecoin regime
In force. The Payment Services Act 2019 commenced on 28 January 2020. A digital payment token licence permits dealing in DPTs and facilitating their exchange, and since April 2024 their transfer and custody. It regulates the provider for money laundering and technology risk; MAS is explicit that customers otherwise have no statutory protection for their trading of DPTs. There were 37 licensed providers out of close to 300 applications, on MAS's written parliamentary reply of 5 August 2026.
Two sets of guidelines carry the restrictions. PS-G02, from 17 January 2022, bars the promotion of DPT services to the general public, down to influencers and physical ATMs. The consumer access measures in PS-G03, revised on 19 September 2024, took effect on 19 June 2025: a risk awareness assessment before any service is provided to a retail customer, no incentives, no credit or leverage for retail, and no lending or staking of retail customers' tokens. Their legal character matters: they are guidelines expressed in terms of what a provider should do, and non-observance is a supervisory matter rather than an offence, though a firm that ignored them would not stay licensed. Separately, since 30 June 2025 a Singapore-based provider serving only customers abroad has needed a licence under Part 9 of the Financial Services and Markets Act 2022. MAS gave no transitional period and has said it will generally not issue one.
Consulted on. Consultation Paper P015-2026, published on 1 September 2026 and closing on 16 October 2026, contains the draft amendments to the Payment Services Act that would give effect to the stablecoin framework MAS announced in 2023. Subsidiary legislation is a separate future consultation, and no commencement date has been given.
What practitioners get wrong. Writing that Singapore has a stablecoin regime. Nobody can be an MAS-regulated stablecoin issuer today, and every stablecoin touching Singapore is regulated, if at all, as a digital payment token.
Hong Kong: retail access, narrowly drawn, and two stablecoin licences
In force. The Securities and Futures Commission has licensed virtual asset trading platforms under the Anti-Money Laundering Ordinance since 1 June 2023. Thirteen appear on its list as last updated on 29 May 2026, alongside a short list of applicants deemed to be licensed when the transitional window closed on 1 June 2024, which the SFC stresses it has not formally licensed and which may yet be refused. Hong Kong does permit retail spot trading, the substantive difference from Singapore, but only in eligible large-cap tokens: a token must be included in at least two acceptable indices issued by two independent providers, one of them IOSCO-compliant.
The Stablecoins Ordinance has been in force since 1 August 2025. A licence is required to issue a fiat-referenced stablecoin in Hong Kong, or one referencing the Hong Kong dollar anywhere, only a closed class of permitted offerors may offer them, and unregulated stablecoins are confined to professional investors. On 10 April 2026 the Hong Kong Monetary Authority granted the first two licences, to Anchorpoint Financial and to HSBC. On 27 May 2026 the Monetary Authority and the SFC jointly disapplied the index and liquidity requirements to those regulated stablecoins and allowed licensed corporations to deal in them for retail clients through omnibus accounts at platforms otherwise restricted to professional investors.
Consulted on. Four further regimes, for virtual asset dealers, custodians, advisers and managers, exist only as consultation conclusions: 24 December 2025 for dealing and custody, 26 May 2026 for advisory and management. Both point to a bill amending the Anti-Money Laundering Ordinance during 2026. None is recorded as introduced.
What practitioners get wrong. That two licences mean Hong Kong dollar stablecoins are circulating. Both licensees said they intended to launch in the second half of 2026, the Government's reply of 24 June 2026 still spoke of supervision on launch, and we could not confirm a launch from the Monetary Authority's pages. The SFC's high-level framework of 11 February 2026 on perpetual contracts is likewise an invitation to submit product structures for professional investors, not a rule permitting perpetuals.
What an institution should take from the picture
Ask for the commencement date, never the announcement date. In four of these seven jurisdictions the headline regime of 2026 binds nobody yet: the United States stablecoin statute waits on 18 January 2027 or final regulations, the United Kingdom perimeter on 25 October 2027, Singapore's stablecoin framework on a bill not yet introduced, and Hong Kong's four proposed regimes on one not yet introduced either.
Permissions do not travel. MiCA passports within the Union, and that is the only passport on this page. An ADGM approval, a DFSA licence, a VARA licence, a Central Bank payment token licence and a CMA registration are five separate things inside one country.
The changes that actually moved operations this year were narrow and technical: the end of MiCA grandfathering and ESMA's line on delegated custody, the DFSA handing token assessment to its licensees, the FSRA's first staking rules, one CFTC order on one bitcoin perpetual, the Hong Kong stablecoin bridge of 27 May, and FINMA's custody expectations. One theme is genuinely convergent: the prohibition on paying interest to stablecoin holders, in MiCA, in the GENIUS Act, in the Central Bank of the UAE's regulation, and in what MAS now proposes. Where a regime has addressees, count them: thirty-seven licensed providers in Singapore, thirteen platforms in Hong Kong, two stablecoin issuers, more than twenty ADGM firms. Scarcity is the design, not a transitional artefact. And where the sources do not answer the question, say so: the CMA's boundary with VARA, what survives of the SEC's 2025 staff guidance, and whether supervision moves to ESMA at all stay open.
Proof of Talk convenes next at Louvre Abu Dhabi on 3–4 December 2026, with the Paris flagship at the Musée des Arts Décoratifs on 2–3 June 2027. Admission is by application and review.