What Works & What Doesn't — Payment Services & Crypto Payment Regulation
June 4, 2026
28 min read
1. What Doesn't Work
1.1 Mandatory Acceptance of Volatile Crypto Assets
Evidence: El Salvador's Bitcoin Law (September 2021) mandated merchant acceptance of Bitcoin as legal tender. Merchant adoption fell from 25.7% (2021) to 8.1% (2024). Legislative Decree No. 199 (passed 29 January 2025, 55-2 vote) removed mandatory acceptance and ended Bitcoin's legal-tender/currency status as a condition of the $1.4 billion IMF Extended Fund Facility agreed December 2024; from January 2025 tax payments must be made in USD only. Bitcoin survives as a voluntary payment method, and the government continued accumulating a strategic reserve (~7,600 BTC, over $510M, reported 3 June 2026), passing an IMF review despite the accumulation.
Why it fails: Top-down mandates for volatile payment instruments create merchant resistance, consumer confusion, and fiscal risk. The IMF's Element 1 (do not grant crypto assets legal tender status) was validated by this outcome. Voluntary adoption produces more sustainable outcomes.
1.2 State-by-State Licensing Patchwork Without Federal Passporting
Evidence: The US requires separate money transmitter licences across 49 states plus DC and territories (Montana requires none). Total cost for nationwide coverage: $500,000-$3,000,000+. Timeline: 18-24+ months. The GENIUS Act (enacted 18 July 2025) provides a federal framework only for payment-stablecoin issuers, leaving general crypto payment providers exposed to the full patchwork. The market-structure bill that would address the broader gap — the Digital Asset Market Clarity Act (CLARITY Act, H.R. 3633) — was advanced by the Senate Banking Committee on 14 May 2026 but remains unenacted as of June 2026.
Why it fails: The absence of federal passporting fragments the market, raises costs disproportionately for smaller firms, and incentivises regulatory arbitrage between states. By contrast, the EU's MiCA passporting enables firms to serve 27+ markets from a single authorisation, and Singapore's PSA provides a single national licence.
1.3 Punitive Taxation That Drives Activity Underground
Evidence: India's 30% flat tax on Virtual Digital Asset income (Section 115BBH, plus cess and surcharge) with no loss offset and no carry-forward, combined with 1% TDS (Section 194S) on transfers, functions as a de facto deterrent. India remains a top-5 global crypto market by volume — but with activity increasingly routed offshore (capital outflows via offshore trading were flagged at the Parliamentary Standing Committee's 7th VDA hearing in May 2026). Japan's historical tax regime (gains taxed as miscellaneous income at progressive rates up to 55%) contributed to domestic exchange volume migrating offshore, prompting the JFSA's planned move to a 20% flat rate (15% national + 5% local) expected from tax year 2027, with a further reduction to 15% proposed in a 2026 fiscal package (under legislative consideration).
Why it fails: Punitive taxation does not eliminate crypto activity; it pushes it beyond regulatory reach. This reduces AML/CFT visibility, tax revenue, and consumer protection — the opposite of every regulatory objective. Moderate taxation — such as Brazil's progressive 15%-22.5% regime with an R$35,000 monthly exemption — maintains revenue collection without creating perverse incentives.
1.4 Dual or Multi-Regulator Frameworks Without Clear Coordination
Evidence: The EU's MiCA-PSD2 overlap created an unintended dual licensing requirement for CASPs providing EMT custody and transfer services. The EBA issued a No-Action Letter (10 June 2025) and a subsequent Opinion (12 February 2026) as interim measures, but CASPs whose EMT transfer/custody activities are payment services have needed separate PSD2 authorisation since the transition ended 2 March 2026; the underlying problem persists until PSD3/PSR (COREPER-endorsed 22 April 2026) is in force. In the US, FinCEN, the SEC, CFTC, OCC, and state regulators each claim overlapping jurisdiction over crypto payment activities. The UAE's five-regulator structure (VARA, ADGM FSRA, DFSA, CBUAE, CMA) creates forum-shopping opportunities within a single country.
Why it fails: Multi-regulator complexity increases compliance costs, creates legal uncertainty, and enables regulatory arbitrage. The most effective frameworks use a single primary regulator (MAS in Singapore, CBB in Bahrain, BCB in Brazil) or at minimum designate a clear lead authority.
1.5 Government-Operated Payment Wallets
Evidence: El Salvador's Chivo wallet, launched with a $30 sign-up bonus, is being wound down or sold as a condition of the IMF loan agreement — the IMF reported in December 2025 that sale negotiations were well advanced. The wallet experienced persistent technical issues and low adoption after the initial bonus period. Nigeria's eNaira retail CBDC (launched 25 October 2021, the first in Africa) achieved modest traction (under 0.5% active by October 2023), prompting the CBN to pivot toward a wholesale CBDC model.
Why it fails: Government-operated wallets carry political risk and often lack the user experience quality that private-sector alternatives provide. When policy reverses, state infrastructure becomes a liability rather than an asset. Regulators should focus on creating conditions for private-sector payment innovation rather than competing directly.
1.6 AML Registration Without Adequate Review Capacity
Evidence: The UK FCA's crypto AML registration process produced approximately 317 of 368 applications refused or withdrawn — an ~86% rejection rate — with only around 51 firms registered by April 2025. Historical processing time peaked at roughly 17 months (improving to ~5 months in 2024-25). The FCA publicly prioritised consumer protection over registration speed, but the practical effect was regulatory deterrence.
Why it fails: High rejection rates signal either poor applicant quality or unclear guidance — often both. When regulators lack dedicated capacity, bottlenecks drive legitimate firms to other jurisdictions while leaving the domestic market underserved. Realistic capacity planning at launch is essential.
1.7 Settlement Finality Gap for Blockchain Payments
Evidence: No jurisdiction among those studied has designated a blockchain-based payment system under a statutory settlement finality framework. The EU's Settlement Finality Directive (98/26/EC) protects only designated systems — none of which are blockchain-based as of March 2026. Japan has no statutory definition of when a blockchain transfer is legally final (its Act on Book-Entry Transfer covers tokenised securities only). The US relies on contractual arrangements and the as-yet-untested application of UCC Article 12 controllable-electronic-record rules to on-chain transfers.
Why it fails: The absence of legal settlement finality for blockchain payments means that on-chain transfers, however technically irreversible, remain vulnerable to insolvency clawback and judicial challenge. This is a material barrier to institutional adoption of crypto payment infrastructure. Switzerland's DLT Act bankruptcy-segregation rules for custodied crypto represent the closest any jurisdiction comes to addressing this gap.
2. What Works
2.1 Single-Act, Activity-Based Licensing Frameworks
Evidence: Singapore's PSA 2019 brings crypto (as "Digital Payment Tokens") under the same statute as e-money, remittances, and merchant acquisition. The single-act approach with activity-based licensing (SPI/MPI tiers) has produced 36 MPI licences for DPT services (as of January 2026), clear regulatory expectations, and a functioning stablecoin ecosystem. Bahrain's CBB CRA Module follows a similar model with four CASP categories under a single regulator.
Why it works: Activity-based classification within a single statute eliminates gaps between regulatory regimes, reduces compliance cost, and provides a one-stop shop for applicants. Firms understand which activities require which licence, without navigating overlapping statutes.
2.2 EU-Style Passporting for Cross-Border Scalability
Evidence: MiCA's passporting mechanism (Articles 59(7), 65) enables a CASP authorised in one EU member state to serve all 27+ EU/EEA markets through notification alone. As of 12 April 2026, ESMA's Interim Register recorded approximately 199 authorised CASPs across 23 countries (20 EMT issuers, 0 ART issuers). Despite some fragmentation at NCA level, the single-licence principle dramatically reduces the cost of market access compared to the US patchwork. Germany's Bitpanda authorisation, for example, is passportable across all 27 EU states.
Why it works: Passporting enables firms to achieve scale efficiently, reduces duplicative licensing costs, and creates a competitive market where jurisdictions compete on regulatory quality rather than regulatory laxity. It is the single most impactful structural feature for cross-border crypto payment frameworks.
2.3 Dedicated Stablecoin Frameworks with Reserve and Redemption Rules
Evidence: Multiple jurisdictions have implemented comprehensive stablecoin frameworks that have attracted compliant issuers:
- EU MiCA EMT/ART: Reserve requirements (≥30% deposited at credit institutions, 60% for significant EMTs), at-par redemption at any time at no charge (Article 49), white paper disclosure. Circle (USDC/EURC) and SG-FORGE (EURCV) achieved compliance; Tether (USDT) and PayPal (PYUSD) were non-compliant and delisted for EEA users.
- Singapore SCS: MAS-regulated single-currency stablecoins must maintain 100% backing in high-quality liquid assets, be redeemable at par within 5 business days, and be issued from Singapore. Paxos (USDG, full approval 1 July 2025) and StraitsX (XSGD/XUSD) are approved issuers. The framework is finalised in policy (2023) but not yet enacted as binding PSA rules.
- US GENIUS Act: Federal framework for "payment stablecoins" requiring 1:1 backing in permitted assets (cash, short-dated T-bills, repos, government MMFs), segregated reserves, no rehypothecation, no yield to holders, and monthly reserve disclosure.
- Hong Kong Stablecoins Ordinance and Bahrain SIO Module (see Sections 3.2 and 2.4) round out the set, both granting their first issuer licences in 2026.
Why it works: Clear stablecoin rules attract compliant issuers, provide consumer protection through redemption rights, and enable regulators to enforce reserve quality standards. Jurisdictions without dedicated stablecoin frameworks (India, South Korea) have no domestic stablecoin issuance.
2.4 Sandbox-to-Licence Pathway for Emerging Markets
Evidence: Bahrain's CBB regulatory sandbox (MENA's first fintech sandbox, launched 2017) accepted Rain as its first crypto firm. Rain graduated from the sandbox to a full Category 3 CASP licence in 2019 — the first in the Middle East — and subsequently raised a $110 million Series B in 2022. The CBB's pioneering SIO stablecoin framework (effective July 2025) granted its first issuer licence to AX Coin Bahrain B.S.C. (c) on 3 June 2026.
Why it works: The sandbox-first model enables regulators to gain supervisory experience with live businesses before writing permanent rules. It is particularly effective for jurisdictions without existing crypto market activity, as it generates real-world data to inform framework design. A single integrated regulator (CBB) keeps the pathway from sandbox to full licence coherent.
2.5 Phased Travel Rule Implementation
Evidence: Brazil's Resolution 520 implements the FATF Travel Rule in phases: Phase 1 (2 February 2026 – 2 February 2027) requires parties to be identified and information transmitted where possible; Phase 2 (2 February 2027 – 2 February 2028) makes full data exchange mandatory; full compliance applies from 2 February 2028. This contrasts with the UK's immediate no-threshold approach and the US's $3,000 threshold (above the FATF-recommended $1,000).
Why it works: Phased implementation gives both regulated entities and technology providers time to build Travel Rule compliance infrastructure without creating a cliff-edge disruption. The "sunrise problem" — where Travel Rule compliance requires both the sending and receiving VASP to be ready simultaneously — is mitigated by phased rollout.
2.6 Crypto-Specific Insolvency Protections
Evidence: Switzerland's DLT Act provides bankruptcy-segregation rules for custodied crypto, allowing such assets to be separated from a custodian's bankruptcy estate where they can be attributed to clients. The US's UCC Article 12 "qualifying purchaser" framework (adopted in 34 jurisdictions) provides that a purchaser who obtains control of a controllable electronic record for value, in good faith, and without notice of competing claims takes free of those claims (New York adopting the 2022 amendments effective 5 June 2026).
Why it works: Clear insolvency treatment addresses the most pressing institutional concern — what happens to customer assets when a custodian fails (as demonstrated by the FTX, Celsius, and Three Arrows Capital collapses). Switzerland's approach is the most comprehensive; UCC Article 12 provides commercial law certainty without full settlement finality.
2.7 Enforcement That Creates Market Discipline
Evidence: The EU has imposed over EUR 540 million in aggregate penalties since MiCA enforcement began, including a EUR 62 million fine against an exchange in France (the largest single MiCA penalty). The USDT delisting wave across the EU demonstrated that non-compliant issuers face real market consequences. Japan's JFSA issued business improvement orders to registered exchanges within weeks of the Coincheck hack (2018) and removed unauthorised foreign-exchange apps from app stores (February 2025). Canada's record C$176.9 million Cryptomus/Xeltox penalty (October 2025, FINTRAC) — alongside 80+ MSB-registration revocations in 2025-2026 — demonstrates cross-border enforcement reach. In the US, Roman Storm was convicted in August 2025 on the unlicensed money-transmitting count (18 U.S.C. 1960), with the jury deadlocking on the money-laundering and sanctions counts (DOJ seeking an October 2026 retrial on the deadlocked counts).
Why it works: Credible enforcement creates incentives for compliance that no amount of guidance can replicate. The EU's willingness to enforce MiCA against major stablecoins (USDT) and the JFSA's rapid crisis response demonstrate that enforcement capacity is as important as regulatory design.
2.8 Tax-Neutral Treatment for Long-Term Holdings
Evidence: Singapore imposes no capital gains tax on crypto held as investment and exempts qualifying DPT transactions from GST. Switzerland treats crypto gains as tax-free for private (non-professional) investors. Germany exempts gains after a 12-month holding period (and below an EUR 1,000 annual threshold within a year). These jurisdictions have attracted significant crypto business activity without sacrificing regulatory standards.
Why it works: Tax neutrality for long-term holdings aligns crypto treatment with other investment assets, reduces compliance complexity, and avoids creating perverse incentives for short-term trading or offshore migration. It is compatible with strong AML/CFT and consumer protection frameworks.
3. Mixed Results
3.1 EU MiCA — Comprehensive but Complex
MiCA is the gold standard for comprehensive crypto-asset regulation, yet the MiCA-PSD2 dual licensing overlap, non-EUR stablecoin usage caps, and NCA-level passporting friction demonstrate that even thorough legislative processes can produce unintended gaps. The non-EUR EMT usage caps (1 million transactions / EUR 200 million daily) protect monetary sovereignty but may fragment the global stablecoin market. Verdict: The most complete framework globally, but the complexity cost is non-trivial. PSD3/PSR (COREPER-endorsed 22 April 2026) should resolve the most acute pain points.
3.2 Hong Kong's Selective VATP Licensing
Hong Kong's approach — 13 VATPs licensed as of June 2026 — signals high selectivity. The Stablecoins Ordinance (effective 1 August 2025), with HKD 25 million paid-up capital for FRS issuers, granted its first two issuer licences on 10 April 2026 (Anchorpoint Financial and HSBC) from 77 expressions of interest. Verdict: Quality over quantity may work if the licensed firms build a robust market; but the risk is that the selective process drives activity to competing Asian jurisdictions.
3.3 US GENIUS Act — Federal Progress, Structural Limits
The GENIUS Act (enacted 18 July 2025) represents the most significant US federal crypto legislation, creating a comprehensive payment-stablecoin framework. Implementation advanced sharply in Apr–May 2026: six of the seven federal regulators issued proposed implementing rules (NPRMs), with only the Fed Board pending — including the OCC NPRM (25 February 2026), Treasury "substantially similar" state-regime principles (3 April 2026), an FDIC substantive NPRM (7 April 2026), a joint FinCEN/OFAC AML/CFT and sanctions NPRM (10 April 2026), and an NCUA operational/risk NPRM (15 May 2026). However, the Act addresses only stablecoin issuers, not the broader crypto payment licensing patchwork; general crypto payment providers still face the 49-state MTL regime, and the market-structure CLARITY Act (H.R. 3633) remains unenacted. Verdict: A major step forward for stablecoins, but the fundamental structural problem (no federal passporting for general crypto payment services) remains unresolved.
3.4 Japan's Self-Regulatory Organisation Model
The JVCEA provides a permanent channel for industry input and delegates operational standards-setting (token listing criteria, compliance monitoring) to the industry under JFSA oversight. This reduces the regulator's operational burden. However, the SRO model depends on industry buy-in and can create conflicts of interest if the industry body prioritises member interests over consumer protection. Japan's strict enforcement record (business improvement orders, app-store removals) provides a counterbalance, and the generational PSA-to-FIEA transition is underway — the 2025 PSA amendment (ECISBO intermediary regime, expanded VASP registration) took full operational effect on 1 June 2026, and the Cabinet-approved (10 April 2026) FIEA reclassification bill is expected to take effect around fiscal 2027. Verdict: Effective when paired with strong regulatory oversight, but requires ongoing vigilance against regulatory capture.
3.5 Nigeria's Regulatory Reversal
Nigeria's trajectory — from the February 2021 CBN banking ban (reversed December 2023) to the Investments and Securities Act 2025 and SEC VASP licensing framework — demonstrates that regulatory reversals can work if accompanied by a credible new framework. The cNGN stablecoin launch (3 February 2025, Africa's first regulated stablecoin) and removal from the FATF grey list (24 October 2025) show progress. However, only two exchanges (Busha and Quidax) are provisionally licensed, and SEC Circular 26-1 (16 January 2026) sharply raised VASP minimum capital (up to NGN 2bn), risking the exclusion of smaller local operators. Verdict: The reversal was necessary and the direction is right, but implementation capacity will determine whether the framework achieves its goals.
4. The Regulatory Playbook — 12 Principles
Principle 1: Start with AML Registration, Then Build
Evidence: The UK (2020), EU (AMLD5), Singapore (PSA), and Japan (2017) all began with AML/CTF registration before establishing comprehensive licensing frameworks. AML registration can typically be implemented under existing anti-money laundering legislation without new primary legislation, providing regulatory visibility quickly.
Action: Implement FATF R.15-aligned VASP registration as the first regulatory step. This brings crypto payment providers within the regulatory perimeter while the full framework is developed.
Principle 2: Use a Single Primary Regulator
Evidence: Singapore (MAS), Bahrain (CBB), and Brazil (BCB via Decree 11,563/2023, operationalised by Resolutions 519/520/521) demonstrate that single-regulator models produce cleaner, faster frameworks. The US multi-agency model is the most fragmented and costly. Where multiple agencies must be involved, designate one as lead with a clear mandate.
Action: Assign primary crypto payment regulatory authority to a single body — ideally the central bank or integrated financial supervisor. Create an inter-agency coordination committee for cross-cutting issues.
Principle 3: Build an Activity-Based Licensing Framework
Evidence: Singapore's PSA covers all payment services (including DPTs) under one statute with activity-based licensing tiers. The EU's MiCA uses three capital classes based on service scope. Both avoid the US problem of applying general money transmitter frameworks to crypto-specific activities.
Action: Define licence categories by payment activity (advisory, exchange, custody, transfer, platform operation) with proportionate capital requirements. Do not rely on legacy money transmitter or remittance frameworks that were not designed for crypto.
Principle 4: Implement Dedicated Stablecoin Rules
Evidence: The jurisdictions with the strongest stablecoin ecosystems — EU (MiCA EMT/ART), Singapore (SCS framework), and US (GENIUS Act) — all have dedicated stablecoin frameworks with reserve requirements, redemption rights, and issuer licensing. Jurisdictions without dedicated rules (India, South Korea) have no domestic stablecoin issuance.
Action: Enact stablecoin-specific rules covering: (a) full reserve backing in low-risk, liquid assets; (b) at-par redemption within a specified timeframe; (c) regular reserve disclosure and independent audit; (d) issuer licensing with minimum capital. Decide whether to classify foreign-currency stablecoins as FX operations (Brazil model) or apply usage caps (EU model).
Principle 5: Enable Cross-Border Scalability Through Passporting
Evidence: EU MiCA passporting enables firms to serve 27+ markets from a single licence (≈199 authorised CASPs across 23 countries as of April 2026). The US 49-state patchwork costs $500,000-$3,000,000+ for nationwide coverage. Singapore lacks ASEAN passporting but is building cross-border connectivity through Project Nexus.
Action: Within economic blocs (EU, ASEAN, GCC), establish passporting or mutual recognition agreements. At minimum, pursue bilateral supervisory MOUs with key partner jurisdictions.
Principle 6: Phase the Travel Rule Rollout
Evidence: Brazil's phased approach (domestic identification first, then mandatory full exchange, over a 2026-2028 rollout) provides implementation runway. The FATF's June 2025 revised Recommendation 16 sets an end-2030 compliance deadline — a departure from usual immediate-effect practice, acknowledging implementation challenges. As of June 2025, 85 jurisdictions are implementing the Travel Rule.
Action: Implement Travel Rule in phases: Phase 1 covers domestic VASP-to-VASP transfers with basic originator/beneficiary data. Phase 2 extends to cross-border transfers. Phase 3 addresses unhosted wallet thresholds and enhanced verification.
Principle 7: Set Moderate, Proportionate Taxation
Evidence: India's 30% no-loss-offset regime drives activity underground. El Salvador's 0% (for licensed entities) collects little revenue. Brazil's progressive 15%-22.5% regime with an R$35,000 monthly exemption (the flat 17.5% MP 1303 proposal was rejected by the Chamber of Deputies and expired in October 2025 without becoming law), Singapore's 0% capital gains (but income tax on trading businesses), and Germany/Switzerland's tax-free-for-long-term/private-holdings approach all demonstrate that moderate taxation is compatible with market development.
Action: Apply tax treatment consistent with other financial assets. Avoid punitive rates that drive offshore migration. Consider de minimis exemptions for small payment transactions and holding period incentives for long-term positions.
Principle 8: Enforce Early and Credibly
Evidence: EU MiCA enforcement (EUR 540 million+ penalties, USDT delisting) established market discipline. Japan's JFSA responded to the Coincheck hack within weeks with business improvement orders. The UK FCA's ~86% rejection rate, while creating backlogs, established that the UK takes AML compliance seriously. Canada's record C$176.9 million Cryptomus/Xeltox penalty and the US conviction of Roman Storm (August 2025, unlicensed money transmitting) demonstrate cross-border enforcement reach.
Action: Invest in enforcement infrastructure from day one: blockchain analytics tools (Chainalysis, Elliptic, TRM Labs), dedicated crypto review teams, public warning lists, and graduated enforcement powers (warnings, business improvement orders, fines, licence revocation, criminal prosecution).
Principle 9: Protect Consumers Through Structural Safeguards
Evidence: Singapore requires ≥90% cold wallet storage, asset segregation in trust, daily reconciliation, suitability assessments, and blocks credit-card purchases of DPTs. South Korea mandates ≥80% cold wallet and segregated, bank-entrusted customer deposits. Japan requires ≥95% cold wallet storage with the hot-wallet portion fully backed. The EU provides at-par redemption rights for EMTs. These structural safeguards proved their value during the 2022 exchange failures (FTX, Celsius, Three Arrows Capital).
Action: Mandate: (a) customer asset segregation from firm assets; (b) minimum cold wallet storage (80-95%); (c) daily reconciliation; (d) suitability assessments for retail customers; (e) clear risk disclosures; (f) stablecoin redemption rights at par.
Principle 10: Address Insolvency Risk Explicitly
Evidence: Switzerland's DLT Act provides bankruptcy segregation for custodied crypto assets. The US's UCC Article 12 "qualifying purchaser" framework protects secondary-market purchasers. No jurisdiction has achieved full statutory settlement finality for blockchain payments, but these partial solutions address the most acute risks.
Action: Enact crypto-specific insolvency protections: (a) statutory segregation of customer crypto assets from custodian bankruptcy estates; (b) clear priority rules for customer claims; (c) define the point of on-chain transfer finality for insolvency purposes. Use Switzerland's DLT Act segregation rules as a model.
Principle 11: Use Sandboxes Strategically, Not Permanently
Evidence: Bahrain's sandbox (2017) enabled Rain to graduate to a full licence within two years. The EU DLT Pilot Regime (Regulation 2022/858) permits CBM/CoBM/EMT settlement within a bounded sandbox. The UK selected four firms for an FCA stablecoin Regulatory Sandbox (25 February 2026; Monee, ReStabilise, Revolut, VVTX).
Action: Use sandboxes for bounded testing (6-12 months) before permanent frameworks, not as permanent alternatives to regulation. Set clear graduation criteria, exit timelines, and escalation paths to full licensing.
Principle 12: Consult Extensively Before Legislating
Evidence: The EU's ESMA conducted multiple MiCA consultation packages. Singapore's MAS published PSA consultation papers with response documents. Japan's JFSA published a discussion paper before the FIEA reclassification proposal. Brazil conducted public consultations before BCB Resolutions 519-521.
Action: Conduct at least two consultation rounds (policy framework, then detailed rules) with minimum 8-week comment periods. Publish all non-confidential responses and a feedback statement explaining how input was incorporated. Establish a permanent industry advisory body for ongoing post-implementation input (Japan's JVCEA model).
5. Decision Framework for Regulators
| Decision Point | If Yes | If No | Best Practice Precedent |
|---|---|---|---|
| Does a comprehensive crypto payment framework exist? | Evaluate for gaps (dual licensing, settlement finality, stablecoin rules) | Begin with AML registration; launch consultation on full framework | Singapore PSA (comprehensive); UK (phased approach) |
| Is there a single primary regulator? | Ensure coordination with other agencies is formalised | Designate a lead regulator with clear mandate | Singapore MAS; Brazil BCB via Decree 11,563/2023 |
| Does a dedicated stablecoin framework exist? | Assess reserve quality, redemption mechanisms, and issuer compliance | Prioritise stablecoin legislation; permit use of internationally regulated stablecoins in interim | EU MiCA EMT; Singapore SCS; US GENIUS Act |
| Is the Travel Rule implemented? | Assess threshold alignment with FATF R.16 (USD/EUR 1,000 recommended) | Begin phased implementation; invest in compliance technology | Brazil phased rollout; EU TFR (no threshold for VASP-to-VASP) |
| Are consumer protection measures structural? | Review cold wallet ratios, segregation, and suitability requirements | Mandate asset segregation, cold wallet minimums, and risk disclosures | Singapore (≥90% cold wallet); Japan (≥95%); South Korea (≥80%) |
| Is enforcement capacity adequate? | Maintain deterrent effect through regular, publicised actions | Invest in blockchain analytics, dedicated staff, and graduated enforcement powers | EU (EUR 540M+ penalties); Japan (business improvement orders); Canada (C$176.9M penalty) |
| Is cross-border passporting available? | Ensure consistent NCA implementation; address fragmentation | Pursue bilateral MOUs; participate in multilateral recognition frameworks | EU MiCA passporting; Project Nexus (ASEAN) |
| Is tax treatment proportionate? | No action needed | Reduce punitive rates; consider holding period incentives; implement de minimis exemptions | Brazil (progressive 15-22.5% with R$35k monthly exemption); Germany/Switzerland (tax-free for long-term/private holdings); Singapore (0% CGT) |
6. Evidence Summary by Jurisdiction
This section catalogues the key evidence cited in the analysis above, organised by jurisdiction, for reference and cross-verification.
6.1 Jurisdictions Cited as Positive Models
| Jurisdiction | What Works | Key Evidence |
|---|---|---|
| Singapore | Single-act framework; stablecoin ecosystem; tax neutrality; consumer safeguards | 36 MPI-for-DPT licences (Jan 2026); Paxos USDG and StraitsX XSGD/XUSD approved; 0% CGT; ≥90% cold wallet; PS-G03 guidelines |
| EU | Passporting; comprehensive stablecoin rules; enforcement credibility | ~199 CASPs across 23 countries (Apr 2026); Circle/SG-FORGE MiCA-compliant; EUR 540M+ penalties; USDT/PYUSD delisted for EEA |
| Switzerland | Insolvency protection; crypto banking; DLT Act integration | DLT Act bankruptcy segregation; Sygnum/AMINA (ex-SEBA) crypto banks; SDX licensed as exchange + CSD |
| Brazil | Pragmatic stablecoin classification; phased Travel Rule; proportionate taxation | Resolution 521 stablecoin-as-FX; Resolution 520 phased Travel Rule (2026-2028); progressive 15-22.5% tax with R$35k monthly exemption |
| Bahrain | Sandbox-first pathway; single regulator; dedicated stablecoin framework | Rain: sandbox (2017) to licence (2019) to $110M Series B (2022); CBB single regulator; SIO Module, first issuer (AX Coin) 3 Jun 2026 |
| Japan | Early mover; SRO model; crisis-responsive enforcement | CAESP since 2017; JVCEA SRO; business improvement orders within weeks of Coincheck hack; PSA amendment effective 1 Jun 2026 |
6.2 Jurisdictions Cited as Cautionary Examples
| Jurisdiction | What Doesn't Work | Key Evidence |
|---|---|---|
| El Salvador | Mandatory acceptance reversed; government wallet wind-down | Adoption 25.7% to 8.1%; Bitcoin no longer legal tender (Decree 199, Jan 2025); Chivo sale/wind-down; IMF conditionality |
| US | State-by-state patchwork; multi-agency confusion; market-structure law unenacted | $500K-$3M nationwide MTL cost; 49+ jurisdictions; CLARITY Act (H.R. 3633) advanced May 2026 but not enacted |
| India | Punitive taxation; legislative vacuum | 30% tax + 1% TDS + no loss offset; top-5 market but growing offshore migration |
| UK | Registration backlog without adequate capacity | ~86% rejection rate; ~17-month historical peak; ~317 of 368 refused/withdrawn, ~51 approved |
| South Korea | Bank account bottleneck; concentrated fiat access | Only 5 exchanges with real-name bank accounts; ≥80% cold wallet but KRW-only trading |
6.3 International Framework Alignment
| Body | Key Recommendation | Jurisdictional Compliance |
|---|---|---|
| FATF | R.15: License/register VASPs; R.16: Travel Rule | 96 of 117 jurisdictions require licensing (June 2025); 85 implementing Travel Rule |
| FSB | CA1-CA9: Same activity, same risk, same regulation; GSA recommendations | Thematic review (Oct 2025): "significant gaps and inconsistencies" in implementation |
| BIS/CPMI | PFMI Principle 8: Settlement finality for stablecoin arrangements | No jurisdiction has designated a blockchain payment system under any settlement finality regime |
| IMF | Nine Elements: Do not grant legal tender status; comprehensive regulation as baseline | El Salvador reversed Bitcoin legal-tender status under IMF loan conditionality (Jan 2025) |
7. Implementation Priority Matrix
For regulators building or upgrading crypto payment frameworks, the following matrix ranks the 12 playbook principles by impact and implementation difficulty:
| Priority | Principle | Impact | Difficulty | Recommended Timeframe |
|---|---|---|---|---|
| 1 | Start with AML Registration (#1) | High (regulatory visibility) | Low (existing legislation often sufficient) | Months 1-6 |
| 2 | Single Primary Regulator (#2) | High (reduces complexity) | Moderate (requires institutional design) | Months 1-3 |
| 3 | Enforce Early and Credibly (#8) | High (establishes deterrent) | Moderate (requires capacity investment) | Months 6-12 |
| 4 | Activity-Based Licensing (#3) | High (regulatory certainty) | Moderate-High (requires new legislation) | Months 12-18 |
| 5 | Dedicated Stablecoin Rules (#4) | High (enables ecosystem) | Moderate-High (requires new legislation) | Months 15-24 |
| 6 | Consumer Protection Safeguards (#9) | High (protects retail users) | Moderate (regulatory standards) | Months 12-18 |
| 7 | Phased Travel Rule (#6) | Moderate-High (FATF compliance) | Moderate (technology dependency) | Months 10-24 |
| 8 | Proportionate Taxation (#7) | Moderate (market development) | Moderate (fiscal policy interaction) | Months 6-18 |
| 9 | Insolvency Protections (#10) | Moderate-High (institutional confidence) | High (requires new legislation) | Months 18-30 |
| 10 | Cross-Border Passporting (#5) | High (market scalability) | High (requires multilateral agreement) | Months 24-36 |
| 11 | Strategic Sandboxes (#11) | Moderate (learning tool) | Low (bounded scope) | Months 1-12 |
| 12 | Extensive Consultation (#12) | Moderate (legitimacy) | Low (process design) | Ongoing |
8. Methodology and Limitations
8.1 Data Sources
This analysis synthesises findings from 19 jurisdiction regulation files and the supporting guidance documents within the crypto-payment-regulation domain, supplemented by international framework files (FATF, FSB, BIS/CPMI, IMF). All factual claims are sourced from these files and the canonical per-jurisdiction fact matrix, which themselves cite verified primary and secondary sources as documented in their respective Verification Notes sections.
8.2 Classification Approach
Assessments of "what works" and "what doesn't work" are based on observable outcomes:
- Market outcomes: Number of licensed firms, stablecoin ecosystem development, market volume trends.
- Consumer outcomes: Documented consumer losses, existence and use of protection mechanisms, enforcement actions triggered by consumer harm.
- Compliance outcomes: FATF evaluation results, Travel Rule implementation status, enforcement action frequency and severity.
- Innovation outcomes: Stablecoin issuance activity, cross-border payment initiatives, regulatory sandbox graduations.
8.3 Limitations
- Temporal snapshot. This analysis reflects the regulatory landscape as of 4 June 2026. Several jurisdictions (UK, Australia, Japan, South Korea, US market-structure) are in active legislative transition, and their assessments may change materially within 12-18 months.
- Missing data. For several jurisdictions (particularly Australia, India, South Korea, and Nigeria), specific metrics (licensed firm counts, enforcement penalties, capital requirements) are not publicly available or not yet established under new frameworks. These are marked "NOT VERIFIED" in the underlying fact matrix.
- Qualitative judgment. The determination of what "works" involves judgment about relative weighting of competing objectives (market development vs. consumer protection vs. AML compliance vs. financial stability). Different weighting schemes could produce different assessments.
- Survivorship bias. The analysis focuses on 19 jurisdictions that have engaged with crypto payment regulation to some degree. Jurisdictions that have banned crypto entirely or have no framework at all are not represented, which may overstate the prevalence of regulatory engagement globally.
Verification Notes
This refresh (modified 2026-06-04) mirrors the canonical crypto-payment-regulation-fact-matrix.json across all 19 jurisdictions (United States, Brazil, Canada, El Salvador, Australia, Hong Kong, India, Japan, Singapore, South Korea, European Union, France, Germany, Liechtenstein, Switzerland, United Kingdom, Bahrain, Nigeria, United Arab Emirates). No new jurisdictions were added this run; it is a fact-correction and re-derivation pass. Key corrections applied from the matrix:
- US market-structure bill corrected to the Digital Asset Market Clarity Act (CLARITY Act, H.R. 3633) — advanced by the Senate Banking Committee 14 May 2026, not yet enacted. (No prior "FIT21" reference was present.)
- Roman Storm recorded as convicted (August 2025) on the unlicensed money-transmitting count (18 U.S.C. 1960), with the jury deadlocked on money-laundering/sanctions counts and a DOJ retrial sought for October 2026.
- GENIUS Act implementation: six of seven federal regulators issued proposed implementing rules (NPRMs) Apr–May 2026 (Fed Board pending).
- Brazil taxation corrected: the flat 17.5% MP 1303 was rejected (251-193) and expired in October 2025; the progressive 15%-22.5% regime with an R$35,000 monthly exemption remains in force. All prior "17.5% flat" references corrected.
- El Salvador reflected per the matrix: Bitcoin is no longer legal tender (voluntary acceptance since Decree 199, 29 January 2025) under the $1.4B IMF EFF; strategic reserve ~7,600 BTC by June 2026.
- Japan PSA Amendment noted as effective 1 June 2026 (ECISBO intermediary regime; qualifying foreign trust-type stablecoins recognised as EPIs); FIEA reclassification expected ~fiscal 2027; tax move to 20% flat from 2027 with a further 15% proposal under consideration.
- Aggregates re-derived from the matrix: EU ~199 authorised CASPs across 23 countries (20 EMT issuers, 0 ART issuers); Singapore 36 MPI-for-DPT licences; Hong Kong 13 VATPs licensed; UK ~51 registered / ~317 of 368 refused-or-withdrawn (~86%); EU EUR 540M+ aggregate penalties; FATF 96 of 117 jurisdictions licensing and 85 implementing the Travel Rule; Canada Cryptomus/Xeltox C$176.9M.
Where the matrix marks a field "NOT VERIFIED", no claim has been asserted here. No Wikipedia, Reddit, Quora, X/Twitter, or Medium sources are cited; this synthesis is derived solely from the in-domain regulation/guidance files and the canonical fact matrix.