Implementation Roadmap

1. How Countries Built Their Frameworks

1.1 Sequencing Patterns Across Jurisdictions

The crypto-payment-regulation fact matrix now covers 19 jurisdictions across five regions: Americas (

US,

Brazil,

Canada,

El Salvador); Asia-Pacific (

Australia,

Hong Kong,

India,

Japan,

Singapore,

South Korea); Europe (

EU,

France,

Germany,

Liechtenstein,

Switzerland,

UK); and Middle East & Africa (

Bahrain,

Nigeria,

UAE).

Almost every jurisdiction that has built a crypto payment framework followed a broadly similar arc: AML registration first, then licensing, then stablecoin-specific rules, then advanced topics (settlement finality, cross-border, systemic designation). The differences lie in speed, institutional design, and the degree of industry consultation. A minority inverted the order — El Salvador legislated Bitcoin legal tender before building a licensing regime, and learned the hard way (Section 4.1).

The following timeline analysis covers six key jurisdictions that represent distinct models, with cross-references to the broader 19-jurisdiction set throughout.

1.2 European Union -- Multi-Year Legislative Process

EU MiCA is the most thoroughly documented multi-year legislative process for crypto payment regulation:

Sequencing logic: The EU deliberately applied stablecoin rules (EMTs and ARTs) six months before CASP rules, ensuring issuers had reserve, redemption, and whitepaper requirements in place before exchanges and custodians onboarded under the new regime.

Consultation process: ESMA published three MiCA consultation packages between July 2023 and Q1 2024. The first package (July 2023) received 36 responses; the second (October 2023) received 141 responses; the third (Q1 2024) received 32 responses. EBA conducted parallel consultations on ART/EMT reserve and own-funds technical standards.

Institutional design: Multi-agency model -- home member-state NCAs grant authorisations and enforce at national level; ESMA maintains the MiCA Register; EBA supervises significant ART/EMT issuers and runs the AMLA (launched in Frankfurt, 1 July 2025). This distributed model preserves existing regulatory expertise but creates coordination challenges, as demonstrated by the dual licensing overlap between MiCA and PSD2 that crystallised at the 2 March 2026 transition (Section 4.4).

Key lesson: A 3+ year legislative cycle with phased application dates gives industry time to prepare but creates prolonged uncertainty. The MiCA/PSD2 dual-licensing problem (CASPs needing both a MiCA CASP licence and PSD2 authorisation for EMT transfers) shows that even thorough legislative processes can produce unintended regulatory gaps. The member-state implementations diverge:

Germany (KMAG, stricter 31 December 2025 national deadline),

France (PSAN-to-CASP, hard 1 July 2026 deadline), and

Liechtenstein (EEA MiCA Implementation Act, 1 February 2025) each layered national procedure onto the single rulebook.

Sources:

• ESMA -- MiCA Consultation Paper 1st Package (July 2023)
• ESMA -- MiCA Consultation Paper 2nd Package (October 2023)
• MiCA Implementation Timeline -- MiCA Papers

1.3 United Kingdom -- Phased Roadmap (2020--2027)

The

UK adopted a multi-phase approach, building incrementally from AML registration toward full authorisation:

Sequencing logic: The UK started with the lowest-hanging fruit (AML registration), then added consumer protection (financial promotions) before full licensing. This gave the FCA early supervisory visibility into the market while the comprehensive framework was being developed.

Institutional design: Dual-regulator model -- FCA for conduct regulation and authorisation of all crypto firms; Bank of England for systemic stablecoin oversight. On 19 May 2026, BoE Deputy Governor Sarah Breeden confirmed the Bank is abandoning individual stablecoin holding limits (the previously proposed GBP 20,000 / GBP 10M caps) in favour of aggregate issuance caps — a material design shift. This separates consumer protection from financial stability but adds complexity for stablecoin issuers who may need to satisfy both regulators.

Processing capacity: The FCA's AML registration process refused or saw withdrawn ~317 of 368 applications (an 86% rejection/withdrawal rate), with only approximately 51 firms registered by April 2025. Average processing time improved from ~17 months to ~5 months between 2022 and 2025. This experience highlights the need for realistic capacity planning.

Important caveat — stablecoins outside PSRs 2017: Unlike the EU's EMT route, the UK is building a dedicated qualifying-stablecoin framework under FSMA, NOT under the PSRs 2017. As of June 2026 there is no operational UK stablecoin payments regulation; FCA Policy Statements are due Summer 2026, BoE final Codes of Practice in H2 2026. This deliberate exclusion creates a consumer-protection gap: PSRs 2017 unauthorised-transaction refunds (liability capped at GBP 35) do not apply to crypto/stablecoin transfers.

Sources:

• FCA -- A New Regime for Cryptoasset Regulation
• Comsure -- FCA Speeds Up Crypto Approvals
• CoinDesk -- UK Regulator Says 87% of Crypto Registrations Failed (September 2024)

1.4 Singapore -- Clean Single-Act Approach

Singapore consolidated its payment services regulation into a single statute -- the Payment Services Act 2019 (PSA) -- which brought crypto (as "Digital Payment Tokens") under the same framework as e-money, remittances, and merchant acquisition.

Consultation process: MAS published multiple consultation papers in 2019 covering proposed notices, guidelines, regulations, and the scope of e-money and DPTs. Responses were published in December 2019, and the consultation on stablecoin issuance was conducted separately in 2022-2023 before finalisation in August 2023.

Institutional design: Single regulator (MAS) with integrated mandate as both central bank and financial regulator. This eliminates inter-agency coordination costs and provides a one-stop shop for applicants.

Current status: The SCS framework was finalised in policy (2023) but is not yet enacted as binding PSA rules as of 4 June 2026. The "Stablecoin Issuance Service" (8th PSA service) is forthcoming. In November 2025 MAS signalled it was "ready to begin drafting stablecoin legislation." Approved issuers under the existing MPI route include Paxos (USDG, full approval 1 July 2025) and StraitsX (XSGD/XUSD, MPI July 2024); 36 MPI licences for DPT services had been granted by January 2026.

Key lesson: The single-act approach produces cleaner regulation with fewer gaps than multi-statute approaches. However, amendments are still needed as the market evolves, and even Singapore is moving toward a consumer-restrictive posture (Guidelines PS-G03: mandatory risk warnings, near-prohibition on public/mass-media advertising, blocked credit-card DPT purchases for retail).

Sources:

• MAS -- Payment Services Act 2019
• MAS -- Consultation on Proposed Payment Services Notices and Guidelines

1.5 Japan -- Iterative Refinement Through Crises

Japan was the first major economy to create a licensing regime for crypto exchanges (April 2017), driven by the Mt. Gox collapse (2014). Its framework has been iteratively refined through crisis-response cycles:

Institutional design: Single primary regulator (JFSA) with a recognised self-regulatory organisation (JVCEA). The SRO model delegates operational standards-setting (token listing criteria, ongoing compliance monitoring) to the industry under JFSA oversight. This reduces the regulator's operational burden while maintaining accountability.

The 1 June 2026 inflection point: Two distinct measures take effect on the same date. (1) A Cabinet Office Ordinance recognises qualifying foreign trust-type stablecoins as EPIs under the PSA (handled by registered EPIESPs rather than treated as FIEA securities). (2) The 2025 PSA amendment takes full operational effect, introducing the ECISBO lighter-touch intermediary registration (no minimum capital where no user deposits are held), expanded VASP registration, and custodial wallet provider rules. Separately, the FIEA reclassification bill (approved by Cabinet 10 April 2026) would move ~105 tokens to "financial instruments," add an insider-trading ban and mandatory annual issuer disclosure, and raise penalties for unregistered operation to 10 years / JPY 10 million; its expected effect is ~fiscal 2027.

Key lesson: Japan demonstrates that crisis-driven regulation can be effective if the regulator has the institutional capacity to respond quickly. However, crisis-driven regulation can also be overly reactive -- Japan's initial framework focused heavily on exchange security without addressing stablecoins or DeFi, requiring multiple amendment cycles culminating in the generational PSA-to-FIEA transition now underway.

Sources:

• Chainalysis -- Japan's Crypto Regulation Journey After Mt. Gox
• K&L Gates -- Japan's New Crypto Regulation: 2019 Amendments

1.6 Bahrain -- Sandbox-First Approach

Bahrain followed a sandbox-to-regulation pathway that is particularly relevant for smaller jurisdictions:

Sequencing logic: By running a sandbox first, the CBB gained direct supervisory experience with a live crypto business (Rain) before writing the permanent regulatory framework. The single-regulator (CBB) model keeps licensing simple — four CASP categories (BHD 25,000 to BHD 300,000 capital) plus a separate PSP licence (BPay Global, a Binance subsidiary, granted April 2025).

Key lesson: The sandbox-first model works best for jurisdictions without existing crypto market activity. It provides regulatory learning without committing to a permanent framework. Rain's journey from sandbox (2017) to full licence (2019) demonstrates that a credible sandbox can establish a jurisdiction as an early mover. Bahrain's SIO Module (1:1 backing in cash/AA- bank deposits/central-bank debt/repos; par redemption within 5 business days) shows the same patient sequencing applied to stablecoins, with the first live issuer authorised only in June 2026.

Sources:

• CBB -- FinTech & Innovation
• Al Tamimi -- CBB Regulatory Sandbox

1.7 Cross-Jurisdictional Sequencing Summary

Beyond these six, the matrix shows the same arc in newer entrants:

Canada (FINTRAC AML → RPAA → Stablecoin Act, enacted 26 March 2026 but not yet in force),

Australia (AUSTRAC registration → AFSL Digital Assets Framework Act 2026, commences 9 April 2027),

Nigeria (2021 prohibition → ISA 2025 securities regulation → 2026 tax/reporting), and

South Korea (VASP registration → VAUPA user-protection act → pending Digital Asset Basic Act).

2. Stakeholder Consultation

2.1 Models of Consultation

Effective crypto payment regulation requires structured engagement with stakeholders. The jurisdictions studied employed three distinct consultation models.

Model A: Formal Public Consultation with Comment Periods

The

EU and

UK use formal, documented public consultations with published responses:

• EU (ESMA): Three MiCA consultation packages (July 2023, October 2023, Q1 2024) with public comment periods of 2-3 months each. The second package received 141 responses (47 confidential), demonstrating significant industry engagement. All non-confidential responses and ESMA's feedback statements were published, creating a transparent regulatory record.
• UK (FCA): Consultation papers (CP25/14, CP25/15, CP25/40-42, CP26/13) with ~2-month comment periods. The FCA publishes all non-confidential responses and issues policy statements explaining how feedback was incorporated. The Bank of England conducted a separate systemic stablecoin consultation (10 November 2025).

Model B: MAS-Style Targeted Consultation

Singapore's MAS publishes consultation papers on proposed notices, guidelines, and regulations, collects written feedback, and publishes a "Response to Feedback Received" document. MAS conducted multiple rounds for the PSA (2019) and the stablecoin framework (2022-2023), and most recently a Consultation Paper on the Prudential Treatment of Cryptoassets on Permissionless Blockchains (closed 18 May 2026). MAS consultations are typically shorter (4-8 weeks) but technically precise, and the regulator engages directly with licensees through supervisory dialogue.

Model C: SRO-Mediated Industry Input

Japan's JVCEA provides a permanent channel for industry input. The JFSA consults with the Financial System Council (a statutory advisory body) on major legislative changes, and the JVCEA conducts its own member consultations on self-regulatory rules. This two-tier model (government consultation + SRO consultation) allowed both policy and operational input ahead of the 10 April 2026 Cabinet approval of the FIEA reclassification bill.

A fourth pattern, seen in

South Korea, is legislature-led drafting with unresolved inter-agency dispute: the Digital Asset Basic Act was introduced in the National Assembly on 8 April 2026 but left off the subcommittee agenda on 12 May 2026 and deferred past the 3 June 2026 local elections, partly because BOK (favouring 51% bank ownership of issuers) and the FSC have not resolved the bank-vs-fintech issuer question.

2.2 What Should Be Consulted On

Based on the jurisdictions studied, the following topics generated the most substantive stakeholder feedback:

2.3 Recommendations for Consultation Process Design

1. Publish a discussion paper before drafting legislation. Japan's pre-legislative engagement (via the Financial System Council and JVCEA) set the terms of debate before formal legislation, allowing stakeholders to engage at the conceptual stage.
2. Allow minimum 8-week comment periods for complex technical standards. ESMA's consultations (8-12 weeks) generated substantially more responses than shorter consultations.
3. Publish all non-confidential responses and a feedback statement explaining how input was incorporated. This builds regulatory legitimacy and creates precedent for future consultations.
4. Conduct at least two rounds -- one on the policy framework, one on detailed rules. Singapore's approach of consulting first on the PSA framework (2019) and separately on stablecoin rules (2022-2023) allowed focused engagement.
5. Resolve inter-agency turf questions before introducing legislation. South Korea's stalled Digital Asset Basic Act shows that an unresolved central-bank-vs-securities-regulator dispute can derail an otherwise-ready bill.
6. Establish a permanent industry advisory body for ongoing input post-implementation. Japan's JVCEA model provides continuous feedback without requiring formal consultation on every operational change.

3. Enforcement Infrastructure

3.1 Tools and Capabilities Required

Building enforcement infrastructure for crypto payment regulation requires investment in four areas: people, technology, legal authority, and cross-border cooperation.

People:

Regulators need staff with expertise in blockchain technology, financial crime investigation, and digital forensics. Key roles include:

• Blockchain analysts capable of tracing on-chain transactions
• AML/CFT specialists with crypto-specific expertise
• Technology risk assessors for evaluating exchange security, wallet management, and smart contract risks
• Legal counsel with expertise in both financial regulation and emerging technology

The UK FCA's experience is instructive: its 86% rejection/withdrawal rate for crypto AML registrations partly reflected the regulator's capacity to scrutinise applications rigorously, but also created backlogs averaging ~17 months that deterred legitimate applicants. Reducing processing times to ~5 months required dedicated crypto review teams.

Technology:

Legal Authority:

Effective enforcement requires a graduated toolkit. Based on the jurisdictions studied:

Cross-Border Cooperation:

Crypto payment enforcement is inherently cross-border. Key cooperation mechanisms include:

• FATF mutual evaluation and peer review processes (Nigeria exited the FATF grey list 24 October 2025; UAE exited February 2024)
• Bilateral supervisory MOUs and regional registers (the UAE's CMA-VARA unified register enables cross-emirate VASP recognition)
• Interpol and Europol digital asset investigation units
• IMF/FSB capacity-building programmes for developing economies

3.2 Cost Considerations

Specific regulatory budgets for crypto enforcement are not publicly reported by most jurisdictions. However, proxy indicators suggest the following cost structure:

• Blockchain analytics tools: Annual licences for institutional-grade blockchain analytics platforms (Chainalysis, Elliptic) typically cost USD 100,000-500,000+ per year depending on scope and jurisdiction size
• Staffing: Crypto-specialist regulatory staff command premium salaries; a team of 10-20 dedicated crypto staff represents the minimum viable capacity for a medium-sized regulator
• IT infrastructure: Licensing application systems, public registers, and supervisory databases require significant upfront investment (the US NMLS system is operated by CSBS across all states; the EU's ESMA MiCA Register is a new centralised system; Brazil's DeCripto reporting system is expected to replace existing infrastructure from ~July 2026)
• Training: Ongoing training costs for both crypto-specialist and generalist supervisory staff; the IMF, FSB, and FATF have conducted regional training courses to support capacity building in developing economies

The G20 Crypto-asset Policy Implementation Roadmap (October 2024) noted that jurisdictions with limited regulatory and enforcement capabilities face the greatest challenges in implementing crypto frameworks, and recommended that international bodies continue providing technical assistance and capacity building support.

Source: IMF-FSB G20 Crypto-Asset Policy Implementation Roadmap (October 2024)

4. What Went Wrong

4.1 El Salvador: Mandatory Acceptance and Its Reversal

El Salvador's Bitcoin Law (Decree 57, September 2021) is the most prominent cautionary tale in crypto payment regulation:

What happened:

• Bitcoin became legal tender with mandatory merchant acceptance
• Government launched the Chivo wallet with a $30 sign-up bonus
• All merchants were legally required to accept Bitcoin for payments

What went wrong:

• Merchant adoption declined year over year: from 25.7% (2021) to 8.1% (2024)
• Bitcoin's price volatility caused government reserve losses
• The Chivo wallet is being wound down/sold as a condition of the $1.4 billion IMF Extended Fund Facility agreement (December 2024)

The reversal (current legal status): On 29 January 2025, Legislative Decree No. 199 amended the Bitcoin Law (55-2 vote), removing mandatory merchant acceptance. As published in the Official Gazette on 30 January 2025, Bitcoin is no longer legal tender or currency — it is now a voluntary payment method. Tax payments must be made in USD only (Bitcoin prohibited). The IMF EFF drove the reversal; the IMF reported in December 2025 that Chivo-wallet sale negotiations were well advanced and confirmed no government BTC purchases since December 2024.

The continuing paradox: Despite the legal-tender reversal, the government's Bitcoin Office reports continued near-daily accumulation, reaching ~7,600 BTC (over $510M) by 3 June 2026, and El Salvador passed an IMF review despite this. Licensing under the separate LEAD framework continues (CNAD as sole authority since August 2024; B2BINPAY received a DASP licence November 2025), with ultra-low barriers ($2,000 BSP/DASP capital, 0% crypto taxes for licensed entities).

Lessons:

1. Never mandate acceptance of volatile assets. Voluntary adoption produces more sustainable outcomes than top-down mandates — a lesson El Salvador itself codified by reverting to voluntary acceptance.
2. Government-operated wallets carry political and fiscal risk. When policy reverses, state infrastructure (Chivo) becomes a liability to be wound down.
3. IMF conditionality constrains crypto policy. Countries dependent on international financial institutions face limitations on aggressive adoption strategies; the $1.4B EFF directly drove the legal-tender reversal.
4. Tax incentives alone are insufficient. Despite 0% crypto tax for licensed entities, merchant adoption declined every year.
5. Separate the payment-status question from the licensing framework. El Salvador's durable achievement is the LEAD licensing regime, not the (now-reversed) legal-tender mandate.

Sources:

• Americas Quarterly -- In El Salvador, Bitcoin's Retreat Left Valuable Lessons
• SSRN -- The Rise and Fall of Bitcoin as Legal Tender (Krause, 2025)

4.2 United Kingdom: FCA Registration Backlog

The

UK FCA's crypto AML registration process created a significant bottleneck:

What happened:

• Since January 2020, 368 firms applied for crypto AML registration
• Only approximately 51 were approved -- an 86% rejection/withdrawal rate (~317 refused or withdrawn)
• Average processing time peaked at ~17 months
• Application numbers declined as firms were deterred or chose to wait for the new regime

Why it happened:

• The FCA applied high standards to a low-barrier registration regime (AML registration, not full authorisation)
• Many applicants had genuinely inadequate AML controls, weak governance, and insufficient financial crime risk assessments
• The FCA lacked dedicated crypto review capacity in the early years

What improved:

• By 2024-25, processing times dropped to approximately 5 months
• The FCA publicly stated that "protecting crypto users is more important than faster UK registration"

Lessons:

1. Set realistic expectations for processing capacity at launch. If the regulator can process 30-50 applications per year, do not create a regime that attracts 100+ applications in year one.
2. High rejection rates signal either poor applicant quality or unclear guidance -- regulators should pre-publish detailed application requirements and run pre-application support services.
3. Declining applications may signal regulatory deterrence, not market contraction. Firms may relocate to more accessible jurisdictions.

Sources:

• CoinDesk -- Protecting Crypto Users Is More Important Than Faster UK Registration: FCA Executive (April 2024)
• Cointelegraph -- Slow FCA Processing at Odds With UK's Crypto Ambitions

4.3 United States: The Patchwork Problem

The

US state-by-state money transmitter licensing system remains the most significant structural barrier to crypto payment innovation among advanced economies:

The problem:

• 49 states + DC + territories each require separate money transmitter licences (Montana is the only state without a requirement)
• Total cost for nationwide coverage: $500,000 to $3,000,000+ (including legal fees, surety bonds, application fees)
• Timeline for full nationwide licensing: 18-24+ months
• No federal passporting -- each state licence is independent
• The NMLS platform coordinates workflow but does not harmonise requirements

The MTMA attempt at harmonisation:

• The Model Money Transmission Modernization Act (MTMA), developed by CSBS, aims to harmonise requirements
• Adoption remains uneven, modifications are common, and treatment of digital assets remains inconsistent between adopting states

Partial relief through the GENIUS Act (signed 18 July 2025):

• Federal preemption for payment stablecoin issuers reduces the state licensing burden for stablecoin-specific activities (three permitted issuer types: insured depository institution subsidiaries; Federal Qualified PSIs (OCC-chartered); State Qualified PSIs capped at $10B)
• Implementation is well underway: six of seven federal regulators issued proposed rules (NPRMs) between February and May 2026 (OCC GENIUS NPRM 25 February 2026; Treasury "substantially similar" state-regime principles NPRM 3 April 2026; FDIC substantive NPRM 7 April 2026 with $5M de novo floor and 2-business-day redemption; FinCEN/OFAC PPSI AML/CFT and sanctions NPRM 10 April 2026; NCUA operational/risk NPRM 15 May 2026), with only the Federal Reserve Board rule still pending. Final regulations are due by 18 July 2026; the Act becomes effective the earlier of 18 January 2027 or 120 days after final rules.
• But general (non-stablecoin) crypto payment service providers still face the full 49+ state licensing requirement.

Market-structure law is NOT yet enacted. The market-structure bill before Congress is the Digital Asset Market Clarity Act (CLARITY Act, H.R. 3633) — the Senate Banking Committee advanced it on 14 May 2026, but it remains not enacted. (This is the current market-structure vehicle; it is not the earlier "FIT21" bill.)

Enforcement note: The fragmented US enforcement landscape produced the Roman Storm case — convicted on 6 August 2025 on the unlicensed money-transmitting count (18 U.S.C. 1960), with the jury deadlocked on the money-laundering and sanctions counts; DOJ filed a letter on 9 March 2026 seeking an October 2026 retrial of the deadlocked counts.

Lessons:

1. Federal passporting is essential for efficiency. The EU's MiCA single passport and Singapore's single national licence dramatically reduce the cost of market access compared to the US patchwork.
2. Model laws are insufficient without mandatory adoption. The MTMA has been in development since 2010; adoption remains partial and inconsistent.
3. Sequence the stablecoin statute and the market-structure statute deliberately. The US enacted the payment-stablecoin law (GENIUS) first and is still working through market-structure (CLARITY) — a split that leaves non-stablecoin crypto payments in the patchwork.

4.4 EU: The Dual Licensing Overlap

The

EU's MiCA and PSD2 interaction created an unintended dual licensing requirement:

The problem: CASPs providing EMT (stablecoin) custody combined with transfer execution needed both a MiCA CASP licence and a PSD2 payment institution or e-money institution licence. This was not clearly flagged during the legislative process and only became apparent during implementation.

The EBA response: A "no-action" letter (10 June 2025) advising NCAs to deprioritise enforcement against CASPs lacking PSD2 authorisation until 2 March 2026, followed by an Opinion (12 February 2026) setting enforcement expectations. The transition ended on 2 March 2026 — from that date CASPs need PSD2 authorisation for EMT transfer/custody. The forthcoming PSD3/PSR package (COREPER-endorsed 22 April 2026) is intended to integrate e-money and payment services more cleanly.

Lesson: When designing crypto payment frameworks, regulators must explicitly map the interaction between new crypto-specific legislation and existing payment services law. A "regulatory interaction audit" should be conducted before enactment.

5. Proposed 3-Year Phased Implementation Plan

The following plan synthesises lessons from all 19 jurisdictions in the matrix. It is designed for a regulator building a crypto payment framework from scratch or substantially upgrading an existing one.

Year 1: Foundation (Months 1-12)

Objective: Establish regulatory visibility over the crypto payment market and basic consumer protection.

Q1-Q2: Scoping and Consultation

Key decision: Single regulator vs. multi-agency model. The evidence strongly favours a single primary regulator:

• Singapore (MAS) and
  Bahrain (CBB) demonstrate that single-regulator models produce cleaner, faster regulatory frameworks
• The
  US multi-agency model is widely regarded as the most fragmented and costly for regulated entities
• Where multiple agencies must be involved, designate one as the lead regulator with clear mandate (as Brazil designated BCB via Decree 11,563/2023)

Q3-Q4: AML Registration and Consumer Protection

Precedent rationale: Starting with AML registration rather than full licensing follows the UK, Singapore, EU, Canada, and India pattern. It brings crypto firms within the regulatory perimeter quickly while the comprehensive framework is being developed. AML registration can typically be implemented under existing anti-money laundering legislation without new primary legislation.

Year 2: Licensing (Months 13-24)

Objective: Establish a comprehensive licensing framework for crypto payment service providers and stablecoin issuers.

Q1-Q2: Licensing Framework

Capital requirement guidance: Based on precedent, capital requirements should be tiered:

El Salvador's $2,000 BSP/DASP minimum capital is too low to provide meaningful consumer protection. Japan's practical startup cost of ~JPY 1 billion+ may be too high for smaller markets, and Nigeria's Circular 26-1 increases (up to NGN 2bn for DAX/custodians) risk excluding smaller local operators. The sweet spot for most jurisdictions lies in the Singapore-Bahrain range.

Q3-Q4: Stablecoin Framework and Travel Rule Expansion

Year 3: Advanced (Months 25-36)

Objective: Address cross-border interoperability, settlement finality, and systemic risk.

Q1-Q2: Cross-Border and Settlement Finality

Settlement-finality caution: Even mature frameworks have gaps. The EU's Settlement Finality Directive (98/26/EC) applies only to designated systems, and no blockchain payment system has been designated as of March 2026, so on-chain payments lack legal finality. Japan's Act on Book-Entry Transfer covers tokenised securities only. Plan for this explicitly rather than assuming general law covers it.

Q3-Q4: Systemic Designation and Advanced Supervision

Implementation Timeline Summary

Year 1: FOUNDATION
├── Q1-Q2: Scoping, consultation, inter-agency coordination (resolve turf early)
├── Q3: AML registration regime; blockchain analytics procurement
└── Q4: Consumer protection basics; Travel Rule Phase 1

Year 2: LICENSING
├── Q1-Q2: Licensing legislation; define licence categories and capital
├── Q3: Stablecoin issuance rules; issuer eligibility + caps; grandfathering opens
└── Q4: Process applications; Travel Rule Phase 2

Year 3: ADVANCED
├── Q1-Q2: Cross-border MOUs; settlement finality rules (mind the designation gap)
├── Q3: Systemic stablecoin designation criteria
└── Q4: Enhanced supervision; first thematic review

6. Country Profile Decision Matrix

Different jurisdictions have different starting points, market conditions, and policy objectives. The following matrix maps four common profiles to recommended approaches, each backed by country precedent drawn from the 19-jurisdiction set.

Profile A: Small Developing Economy

Characteristics: Limited existing financial regulatory capacity; small domestic crypto market; potential for remittance innovation; possible dependency on international financial institutions (IMF, World Bank).

Recommended approach:

Budget indicator: Minimum viable regulatory team of 5-10 dedicated crypto staff, with blockchain analytics procurement (USD 100,000-200,000/year).

Profile B: Large Emerging Market

Characteristics: Large domestic market; significant existing crypto adoption; established financial regulatory infrastructure; potential for stablecoin use as FX proxy; domestic currency considerations.

Recommended approach:

Budget indicator: Dedicated crypto supervision team of 20-50 staff; investment in reporting infrastructure (Brazil's DeCripto system).

Profile C: Established Financial Centre

Characteristics: Deep, liquid financial markets; existing sophisticated regulatory infrastructure; international financial centre status; need to maintain competitiveness; passporting or mutual recognition considerations.

Recommended approach:

Resolve the stablecoin/payment-services overlap before enactment. The EU's MiCA/PSD2 dual-licensing problem (transition ended 2 March 2026) and the UK's choice to keep stablecoins outside PSRs 2017 both show that the new crypto statute's interaction with existing payment law must be mapped deliberately.

Budget indicator: Large dedicated crypto supervision teams (50+ staff at aggregate regulator level); investment in centralised registers and supervisory technology.

Profile D: Regional Hub Aspirant

Characteristics: Small-to-medium domestic market; ambition to attract international crypto firms; need for a competitive licensing framework; proximity to larger markets.

Recommended approach:

Budget indicator: Dedicated crypto team of 10-20 staff; sandbox infrastructure; competitive marketing investment to attract international firms.

Decision Matrix Summary

Verification Notes

This is a refresh synthesis dated 2026-06-04. All facts mirror .claude/crypto-payment-regulation-fact-matrix.json (the canonical, web-verified per-jurisdiction source). No new web search was performed for this pass; the matrix is the source of truth. "X of N" aggregates are derivations from the matrix.

Corrections Applied in This Refresh

1. US market-structure bill — corrected to the Digital Asset Market Clarity Act (CLARITY Act, H.R. 3633), advanced by the Senate Banking Committee on 14 May 2026 and still not enacted (this is the current market-structure vehicle; it is not "FIT21").
2. Roman Storm — convicted 6 August 2025 on the unlicensed money-transmitting count (18 U.S.C. 1960); jury deadlocked on money-laundering/sanctions counts; DOJ seeks an October 2026 retrial of the deadlocked counts (letter filed 9 March 2026).
3. Brazil tax — MP 1303 (flat 17.5% crypto tax) was REJECTED (251-193) and expired in October 2025; the progressive 15%-22.5% regime with the R$35,000 monthly exemption remains in force (offshore holdings 15% flat under Law 14,754/2023).
4. El Salvador — Bitcoin is no longer legal tender (voluntary payment method since Legislative Decree No. 199, 29-30 January 2025); tax payments in USD only; Chivo being wound down under the $1.4B IMF EFF; government BTC reserve ~7,600 BTC by 3 June 2026.
5. Japan — the 2025 PSA amendment takes full operational effect on 1 June 2026 (ECISBO intermediary regime, expanded VASP registration, custodial wallet providers), alongside a Cabinet Office Ordinance recognising qualifying foreign trust-type stablecoins as EPIs; FIEA reclassification bill approved by Cabinet 10 April 2026 (~fiscal 2027 effect).
6. US GENIUS Act implementing NPRMs — six of seven federal regulators issued proposed rules between February and May 2026 (OCC, Treasury, FDIC, FinCEN/OFAC, NCUA; Federal Reserve Board pending); final rules due 18 July 2026; effective the earlier of 18 January 2027 or 120 days after final rules.
7. MiCA transitionals — uniform end of transitional periods 1 July 2026 (per ESMA 17 April 2026 statement); PSD2/MiCA EMT transition ended 2 March 2026; PSD3/PSR texts COREPER-endorsed 22 April 2026.

Matrix-Derived Aggregates (Recomputed)

• Jurisdictions covered: 19 (Americas 4, Asia-Pacific 6, Europe 6, Middle East & Africa 3).
• EU CASP authorisations: ~199 across 23 countries (ESMA interim register, 12 April 2026); 20 EMT issuers, 0 ART issuers.
• US state money-transmitter patchwork: 49 states + DC + territories require licences (Montana the only state without).
• GENIUS Act NPRM progress: 6 of 7 federal regulators (Fed Board pending) as of May 2026.

Data Gaps and Limitations

• Regulatory enforcement budgets and crypto-specific staffing levels for all jurisdictions are NOT publicly available. Cost estimates in Section 3 are based on industry proxy data and procurement indicators, not official regulatory disclosures.
• Several stablecoin frameworks are enacted-but-not-yet-in-force or proposed-only: Singapore SCS (policy-finalised, not yet binding PSA rules); UK qualifying-stablecoin regime (in force 25 October 2027); Canada Stablecoin Act (Royal Assent 26 March 2026, not yet in force); South Korea Digital Asset Basic Act (introduced 8 April 2026, not enacted); Switzerland Regulated Stablecoins (proposed, FinIA consultation closed 6 February 2026). The guide flags these as forward-looking rather than operational.
• Several matrix fields are marked NOT VERIFIED (e.g., Bahrain/UAE crypto-payment tax treatment; Brazil specific Travel Rule monetary threshold; multiple jurisdictions' settlement-finality statutes). This guide does not assert facts in those gaps.
• Cross-domain references: For tax detail beyond the high-level treatment summarised here, see Digital Asset Taxation — Comparative Analysis and OECD CARF; for CBDC context see
  Drex CBDC framework.