Crypto compliance in 2026: AML, sanctions and what’s ahead

§ 01 Executive Snapshot

• What: The global crypto industry is experiencing a significant shift in anti-money laundering (AML) and sanctions compliance, moving towards stricter regulatory frameworks.
• Who: Key players include global regulators such as the Financial Action Task Force (FATF), the U.S. Treasury, SEC, CFTC, and various crypto firms.
• Why it matters: This transformation signifies a move from leniency to accountability in the crypto space, impacting compliance strategies and operational risks for firms.

§ 02 Key Developments

• The GENIUS Act was passed in July 2025, bringing payment stablecoins under the Bank Secrecy Act (BSA) and mandating comprehensive AML compliance.
• FATF's June 2025 update highlighted gaps in AML compliance among virtual asset service providers (VASPs), urging jurisdictions to enhance enforcement and cross-border cooperation.
• In December 2025, the OCC granted conditional trust charters to five crypto firms, marking a shift towards deeper integration into the federal banking system.

§ 03 Strategic Context

• The shift towards stricter AML and sanctions compliance reflects broader regulatory trends as digital assets become mainstream, necessitating robust governance frameworks.
• Increased scrutiny of decentralized finance (DeFi) risks and cross-border transactions drives the need for harmonized global standards in compliance.

§ 04 Strategic Implications

• Immediate implications include the need for crypto firms to adapt their compliance programs to meet new regulatory expectations and avoid significant penalties.
• Long-term implications suggest a more integrated approach to compliance in the financial system, positioning compliant firms as trusted participants in the digital economy.

§ 05 Risks & Constraints

• Potential risks include regulatory uncertainty due to the lack of a unified federal framework in the U.S. and varying compliance standards across jurisdictions.
• Competition from firms that successfully navigate the evolving regulatory landscape could pose challenges for less compliant entities.

§ 06 Watchlist / Forward Signals

• The application period for the FCA’s new cryptoasset authorization gateway is set from Sept. 30, 2026, to Feb. 28, 2027, which will be a key milestone for UK crypto firms.
• Future developments in the enforcement actions against major exchanges and ongoing legislative initiatives will signal the success or failure of compliance frameworks in the crypto sector.