Payment Services & Crypto Payment Regulation — Guidance Framework

A Comprehensive Reference for National Regulators

Version: 1.1 Date: June 2026 Purpose: To provide regulators, lawyers, and financial institutions with an evidence-based framework for designing, benchmarking, and implementing crypto payment regulation — grounded in verified data from 19 jurisdictions and 4 international bodies.

Table of Contents

• Part I: Context and Foundations
  1. Executive Summary
  2. Why This Document Exists
  3. The Current Global Landscape
  4. International Organization Positions
• Part II: Regulatory Dimensions 5. Payment Service Licensing 6. Payment Stablecoin Regulation 7. Cross-Border Crypto Payments 8. Settlement Finality 9. Consumer Protection 10. AML/KYC Compliance & Enforcement 11. Taxation
• Part III: Evidence and Outcomes 12. What Works and What Doesn't 13. Case Studies
• Part IV: Implementation 14. Implementation Roadmap 15. Country Profile Decision Matrix
• Appendices

Part I: Context and Foundations

1. Executive Summary

The regulation of crypto payments is at an inflection point. As of June 2026, stablecoin transaction volumes exceed $2 trillion annually, major jurisdictions have enacted or are implementing comprehensive frameworks, and the boundary between traditional payment regulation and crypto regulation is dissolving.

This document synthesizes verified data from 19 jurisdictions and 4 international bodies into actionable guidance. The research covers five Tier 1 jurisdictions in depth (

EU,

United States,

United Kingdom,

Singapore,

Japan) and fourteen Tier 2/3 jurisdictions across the Americas, Europe, Asia-Pacific, and the Middle East/Africa.

The Regulatory Spectrum

Mapping each jurisdiction to the spectrum position recorded in the verified fact matrix yields the following distribution (19 jurisdictions):

Counts by band: 10 Balanced, 3 Balanced-Restrictive, 2 Balanced-Permissive, 4 Permissive. The US sits in the Balanced band but is explicitly tagged "evolving toward accommodative" following the GENIUS Act and the reversal of Operation Choke Point 2.0; El Salvador remains Permissive but tempered by its IMF-driven retreat from mandatory Bitcoin legal tender. No jurisdiction in the matrix is classified outright "Restrictive" — even India, with its punitive 30% tax + 1% TDS, is tagged Balanced because it pairs that tax with FIU-IND AML registration rather than prohibition.

For the detailed spectrum with verified outcomes, see The Regulatory Spectrum.

The Non-Negotiable Elements

Every crypto payment framework, regardless of where it sits on the regulatory spectrum, must include these seven elements:

1. AML/KYC registration — No jurisdiction has successfully regulated crypto payments without first establishing an AML baseline. FATF Recommendation 15 compliance is the minimum.
2. Payment service licensing — Either a dedicated crypto payment license or extension of existing PSP/EMI frameworks. Registration-only approaches are being phased out globally.
3. Stablecoin reserve requirements — 1:1 / 100% reserve backing is the emerging global consensus (EU MiCA, UK BoE proposal, Hong Kong, Singapore MAS, US GENIUS Act, Bahrain SIO, UAE PTSR, Nigeria cNGN, Canada Stablecoin Act). The debate is over composition, not ratio.
4. Redemption rights — Holders must be able to redeem payment stablecoins at par value. The EU (MiCA Article 49), Hong Kong, Bahrain, Singapore, and the US GENIUS Act mandate this explicitly; the UK and Canadian regimes embed it in their not-yet-in-force frameworks.
5. Consumer protection — Asset segregation, cold wallet mandates (Japan ≥95%, Singapore ≥90%, South Korea ≥80%), and clear liability allocation for unauthorized transactions.
6. Travel Rule compliance — Cross-border crypto payment transfers must include originator/beneficiary information. Thresholds vary (EU/UK/France/Germany zero, US $3,000, Canada C$1,000, South Korea KRW 1M, UAE AED 3,500, Singapore enhanced PII at S$1,500, Japan no minimum) but the requirement is universal among FATF members.
7. Enforcement capacity — Licensing without enforcement is performative. The UK's 86% rejection rate demonstrates what rigorous gatekeeping looks like; Japan's business improvement orders show ongoing supervision.

What This Document Is NOT

• Not a legal opinion — consult qualified counsel for jurisdiction-specific advice
• Not a recommendation for any single model — the optimal approach depends on context
• Not static — crypto payment regulation is evolving rapidly; verify current status before acting

2. Why This Document Exists

The crypto payment regulatory landscape suffers from three structural problems:

Fragmentation. There is no global standard for crypto payment regulation. The FATF Travel Rule is the closest thing to a universal requirement, but implementation varies dramatically (thresholds range from zero to $3,000+). A payment stablecoin compliant in the

EU (an EMT under MiCA) may sit in a different regime in the

US (a GENIUS Act permitted payment stablecoin, with implementing rules still in proposed stage) and have no dedicated framework at all in India.

The Dual Licensing Problem. As crypto payments converge with traditional payment services, firms face overlapping licensing requirements. In the EU, a stablecoin payment service may need both MiCA CASP authorization and PSD2 payment institution authorization — a problem the EU itself acknowledged with the EBA No-Action Letter of June 2025, with the transition ending 2 March 2026 (CASPs now need PSD2 authorisation for EMT transfer/custody). In the US, the same firm may need FinCEN MSB registration, money transmitter licenses across 49 states + DC and territories (Montana being the lone exception), and potentially SEC or CFTC oversight.

Information Asymmetry. Regulators designing frameworks have limited visibility into what other jurisdictions have tried, what worked, and what failed. This document closes that gap with verified, source-cited data.

3. The Current Global Landscape

As of June 2026, the global landscape can be summarized in five key observations:

1. MiCA is the global benchmark. The EU's Markets in Crypto-Assets Regulation is the most comprehensive crypto payment framework enacted anywhere — fully applicable since 30 December 2024, with ~199 authorised CASPs across 23 countries (12 April 2026). Its passporting mechanism (one license → EU/EEA-wide) has no equivalent elsewhere.

2. Stablecoin regulation has converged on 1:1 / 100% reserve backing. Every major jurisdiction that has enacted stablecoin rules requires full backing, though composition varies (EU EMT: ≥30% credit-institution deposits, 60% for significant EMTs; UK BoE systemic proposal: ~60% short-term sterling gilts + 40% unremunerated BoE deposits; Hong Kong: 100% high-quality liquid assets; US GENIUS Act: cash, T-bills <93 days, repos, govt MMFs, no yield to holders).

3. The US remains the most fragmented major market — but is consolidating. Federal-state fragmentation (money transmitter licenses across 49 states + DC + territories, $500K-$3M+ for nationwide coverage, no passporting) coexists with the GENIUS Act (enacted 18 July 2025), the first federal payment-stablecoin statute. Implementing rules are advancing: six of seven federal regulators issued proposed rules (NPRMs) across April–May 2026, with the Federal Reserve Board's still pending; rules are due by 18 July 2026 and the Act becomes effective the earlier of 18 January 2027 or 120 days after final rules. The market-structure bill — the Digital Asset Market Clarity Act (CLARITY Act, H.R. 3633) — was advanced by the Senate Banking Committee on 14 May 2026 but is not yet enacted.

4. Asia-Pacific is splitting. Singapore and Hong Kong compete for crypto hub status with sophisticated frameworks (Hong Kong granted its first two stablecoin issuer licences in April 2026); Japan iterates cautiously, with a major PSA amendment taking full effect 1 June 2026 and a FIEA reclassification bill before the Diet; South Korea restricts heavily while its Digital Asset Basic Act stalls; India's punitive 30% tax + 1% TDS regime suppresses adoption with no comprehensive law in sight.

5. The Travel Rule is the new battleground. A large and growing share of FATF jurisdictions have implemented Travel Rule requirements (exact global count NOT VERIFIED in this matrix), but interoperability between technical solutions (TRISA, OpenVASP, Notabene, Sygna Bridge) remains limited.

For detailed jurisdiction-by-jurisdiction comparison tables, see Country Comparison Tables.

4. International Organization Positions

Part II: Regulatory Dimensions

5. Payment Service Licensing

The most critical dimension for any crypto payment firm. Six licensing models exist globally, from dedicated crypto licenses to traditional PSP/EMI extensions to the US state-level patchwork.

Key finding: The cheapest path to a crypto payment license is Lithuania (MiCA CASP, EUR 50K capital, EUR 335K-450K total first-year cost) with passporting across 30 EEA states. The most expensive is the United States ($500K-$3M+ for nationwide coverage with no passporting).

For the full 12-dimension licensing analysis, arbitrage strategies, and decision matrix, see Payment Service Licensing Frameworks.

6. Payment Stablecoin Regulation

Five regulatory models have emerged: dedicated stablecoin legislation (EU MiCA EMT/ART, Hong Kong Stablecoins Ordinance, Bahrain SIO, UAE PTSR/FRT, Nigeria SEC framework; UK and Canada have enacted-but-not-yet-in-force regimes); existing banking/EMI framework (Japan EPI, Switzerland); enacted federal statute pending implementing rules (US GENIUS Act, enacted 18 July 2025); central bank–led / FX-classified (Brazil, where Resolution 521 treats fiat-referenced stablecoin transactions as foreign-exchange operations); and no specific framework (India, Australia, South Korea — though South Korea's pending Digital Asset Basic Act would create one).

Key finding: 1:1 / 100% reserve backing is the global consensus. The debate is over composition — the UK BoE systemic proposal's ~40% unremunerated central-bank deposit leg is the most conservative; Bahrain's permission for yield-bearing stablecoins is the most innovative; the US GENIUS Act and EU MiCA both prohibit paying yield/interest to holders.

For the complete comparative analysis, see Payment Stablecoin Regulation.

7. Cross-Border Crypto Payments

The EU's MiCA passporting is the only functioning cross-border licensing framework for crypto payments. All other jurisdictions require separate authorization. BIS projects (mBridge, Nexus, Icebreaker) are building infrastructure but none are in production for crypto payments.

Key finding: Brazil classifies fiat-referenced stablecoin transactions as FX operations under BCB Resolution 521 (~90% of Brazil's crypto volume involves stablecoins), demonstrating how crypto payments interact with capital-flow controls in emerging markets. Resolution 561 (effective 1 October 2026) bars crypto/stablecoin settlement in regulated eFX cross-border rails, while licensed SPSAV/bank stablecoin rails under Resolution 521 remain permitted — a deliberately bifurcated cross-border structure.

For the full analysis, see Cross-Border Crypto Payments.

8. Settlement Finality

A critical gap in most jurisdictions. The EU's Settlement Finality Directive (98/26/EC) does not apply to blockchain transactions. The US is leading with UCC Article 12 (adopted in 34 jurisdictions), which provides a "qualifying purchaser" framework for on-chain transfers.

Key finding: No jurisdiction has enacted a comprehensive statutory definition of when a blockchain payment becomes legally irrevocable. Switzerland's DLT Act comes closest with bankruptcy segregation provisions.

For the full analysis, see Settlement Finality for Blockchain Payments.

9. Consumer Protection

The irreversibility of blockchain transactions creates a fundamental tension with traditional consumer protection (chargebacks, refunds). Jurisdictions are addressing this through asset segregation and cold-wallet mandates (Japan ≥95%, Singapore ≥90%, South Korea ≥80%) and by extending existing payment law (EU PSD2 transparency and error-resolution apply to EMT transfers from 2 March 2026).

Key finding: The UK's 86% crypto registration rejection rate and 24-hour cooling-off period for first-time crypto investors represent the most aggressive consumer-protection gatekeeping globally. However, crypto remains excluded from FSCS deposit protection, and stablecoins kept outside the PSRs 2017 leave a noted refund/chargeback gap until the FSMA regime comes into force on 25 October 2027.

For the full analysis, see Consumer Protection for Crypto Payments.

10. AML/KYC Compliance & Enforcement

Travel Rule implementation is the defining compliance challenge. Thresholds range from no minimum (EU/UK/France/Germany CASP-to-CASP, Japan) to C$1,000 (Canada), KRW 1M (South Korea), AED 3,500 (UAE), and $3,000 (US); the EU separately verifies unhosted-wallet ownership above EUR 1,000. Technical interoperability between Travel Rule solutions remains a major gap.

Key finding: Illicit-finance concentration in stablecoins makes AML compliance for crypto payment services a priority (specific global percentage NOT VERIFIED in this matrix). South Korea's real-name bank-account system — only five exchanges hold real-name bank accounts, with won-only trading pairs — is the most restrictive but effective gating approach.

For the full analysis, see AML/KYC Compliance & Enforcement.

11. Taxation

Every jurisdiction treats crypto payment transactions differently. In the US, every crypto payment is a taxable disposition triggering capital gain/loss (with no de minimis exemption). Singapore exempts qualifying DPTs from GST (since 1 January 2020). India's 30% flat tax + 1% TDS is effectively punitive. El Salvador imposes 0% capital gains tax on crypto for licensed entities; the UAE's crypto-payment tax treatment is NOT VERIFIED in the matrix, though the UAE levies no personal income tax. Brazil applies a progressive 15%–22.5% capital-gains regime with a R$35,000 monthly exemption — the flat 17.5% rate proposed under MP 1303/2025 was rejected (251–193) and expired in October 2025, never entering into force.

Key finding: No major jurisdiction has enacted a de minimis exemption for small crypto payments, which remains the single biggest barrier to everyday crypto payment adoption. Even where headline rates are zero or low, every disposal generally remains a taxable event for record-keeping purposes.

For the full analysis, see Taxation of Crypto Payments.

Part III: Evidence and Outcomes

12. What Works and What Doesn't

Based on verified evidence from 19 jurisdictions:

What Clearly Works:

• Single-act comprehensive frameworks (Singapore PSA 2019, EU MiCA)
• Phased implementation with transition periods (EU: 6-month stablecoin lead, 18-month grandfathering)
• 100% reserve backing for payment stablecoins (global consensus)
• High-threshold gatekeeping (UK FCA 86% rejection rate → higher quality licensed firms)
• Self-regulatory organizations supplementing official regulation (Japan JVCEA)

What Clearly Doesn't Work:

• Mandatory crypto legal tender (El Salvador: merchant adoption fell from 25.7% in 2021 to 8.1% in 2024; mandatory acceptance removed by Decree 199 in January 2025 under IMF pressure)
• Punitive taxation without comprehensive regulation (India: 30% flat tax + 1% TDS suppressed adoption without providing regulatory clarity)
• State-level licensing fragmentation (US: money transmitter licenses across 49 states + DC + territories, $500K-$3M+ for nationwide coverage, no passporting)
• Registration-only approaches (being phased out — EU, UK, France all moving to full authorization)
• Dual licensing complexity without transition support (EU MiCA + PSD2 overlap required the EBA No-Action Letter of June 2025; transition ended 2 March 2026)

For the detailed evidence-based analysis, see What Works & What Doesn't.

13. Case Studies

Success: Singapore PSA 2019 — Clean single-act framework, clear DPT service categories, phased amendments (2021, 2022), established MPI licensing with known capital requirements. Result: 36 MPI licenses granted for DPT services (as of January 2026), recognized as Asia-Pacific's premier crypto regulatory jurisdiction — though now increasingly restrictive for retail-facing services.

Success: EU MiCA — First comprehensive multi-country framework with passporting (~199 authorised CASPs across 23 countries by April 2026; 20 EMT issuers, 0 ART issuers). Despite dual licensing complexity, has driven observable compliance (Circle USDC/EURC, SG-Forge EURCV) and forced non-compliant issuers out (Tether USDT and PayPal PYUSD delisted/suspended for EEA).

Failure: El Salvador Bitcoin Law — Mandatory merchant acceptance reversed under IMF pressure via Decree 199 (Bitcoin no longer legal tender since 30 January 2025; voluntary acceptance only), as a condition of the $1.4B IMF Extended Fund Facility. Adoption fell from 25.7% (2021) to 8.1% (2024). Demonstrates that mandating crypto payments without market demand fails. (El Salvador nonetheless continued accumulating a strategic Bitcoin reserve, reported at ~7,600 BTC by June 2026.)

Failure: US Patchwork — No single federal payment license for crypto. Money transmitter licensing across 49 states + DC + territories (Montana the lone exception) creates a $500K-$3M+ barrier to entry that only well-capitalized firms can overcome. Operation Choke Point 2.0 further restricted banking access — though its reversal, alongside the GENIUS Act, marks the US's decisive move toward a structured federal framework for payment stablecoins.

Part IV: Implementation

14. Implementation Roadmap

Based on how successful jurisdictions built their frameworks, a phased 3-year plan:

Year 1 — Foundation:

• AML/KYC registration for all crypto payment providers (precedent: Japan 2017, Singapore 2020)
• Basic consumer protection: asset segregation, disclosure requirements
• Stakeholder consultation on comprehensive framework

Year 2 — Licensing:

• Full payment service licensing for crypto firms (precedent: EU MiCA CASP, Singapore MPI)
• Stablecoin issuance framework with reserve requirements
• Travel Rule implementation with risk-proportionate thresholds

Year 3 — Advanced:

• Cross-border recognition/passporting arrangements
• Settlement finality provisions for blockchain payments
• Systemic designation criteria for significant stablecoin issuers
• Integration with traditional payment infrastructure (RTGS access)

For the detailed implementation guide with country precedents for every recommendation, see Implementation Roadmap.

15. Country Profile Decision Matrix

Appendices

A. Global Regulatory Comparison Tables

See Country Comparison Tables for comprehensive side-by-side tables covering all 19 jurisdictions across every regulatory dimension.

B. Source Index

This research draws from the following source categories:

• Government legislation: EU Official Journal, US Federal Register, UK legislation.gov.uk, MAS Act Repository, Japan Law Translation Database
• Regulatory guidance: EBA/ESMA publications, FinCEN guidance, FCA Handbook, MAS Notices, JFSA circulars
• International bodies: FATF Recommendations and Guidance, BIS/CPMI papers, FSB recommendations, IMF policy papers
• Law firm analysis: Baker McKenzie, DLA Piper, Linklaters, Clifford Chance, Sidley Austin, Norton Rose Fulbright, Latham & Watkins
• Financial media: Bloomberg, Reuters, CoinDesk (event reporting only)

C. Verification Notes

This guidance overview mirrors the verified per-jurisdiction fact matrix (the canonical source of truth) covering all 19 jurisdictions. Every section file in this repository contains a "Verification Notes" appendix listing:

• Claims verified against primary sources
• Claims sourced from secondary sources where the primary was not located
• Data points with methodology disputes or conflicting sources
• Items marked "NOT VERIFIED" or "NO DATA FOUND"

The following items appear most frequently across section files as unverified or data-limited:

• Actual application processing timelines (most jurisdictions report statutory targets but not actual experience)
• Banking access data (which banks serve which license types is often undocumented)
• Approval/rejection rates (only the UK FCA and a few others publish this data)
• Total compliance cost estimates (range estimates from law firm publications, not verified actuals)
• Travel Rule thresholds where the matrix records "NOT VERIFIED" (e.g., Brazil, El Salvador, Bahrain, India, Nigeria — identification is required, but no specific monetary threshold is confirmed)
• Tax treatment for Bahrain and the UAE (no crypto-payment tax line verified in the matrix)
• The global count of FATF jurisdictions that have implemented the Travel Rule (not derivable from this matrix)

Corrections applied in this refresh (June 2026):

• US market-structure bill is the Digital Asset Market Clarity Act (CLARITY Act, H.R. 3633) — advanced by the Senate Banking Committee 14 May 2026, not yet enacted (this is NOT "FIT21").
• GENIUS Act enacted 18 July 2025 (not "signed March 2025"); six of seven federal regulators issued implementing NPRMs across April–May 2026, Fed Board pending.
• Roman Storm was convicted (6 August 2025) on the unlicensed money-transmitting count (18 U.S.C. 1960); the jury deadlocked on the money-laundering/sanctions counts (DOJ seeks an October 2026 retrial).
• Brazil's MP 1303 (flat 17.5% crypto tax) was rejected (251–193) and expired October 2025 — the progressive 15%–22.5% regime with the R$35,000 monthly exemption remains in force.
• El Salvador: Bitcoin is no longer legal tender (voluntary acceptance only since 30 January 2025 per Decree 199), reversed under the $1.4B IMF EFF.
• Japan PSA amendment effective 1 June 2026 (ECISBO intermediary regime, expanded VASP registration, foreign trust-type stablecoins recognised as EPIs).

D. Regulatory Spectrum

See The Regulatory Spectrum for the full jurisdiction mapping with verified outcomes data.