Identity verification, data residency, cloud concentration risk and the technical plumbing that financial supervisors.
Bank capital rules for crypto landed with a disclosure regime that has applied since January 2025 and capital requirements now live in 2026 — outside the United States.
The cryptography lets a customer prove identity facts without revealing them; the supervisory question is older and blunter — show me the file.
The fourth revision of the digital-identity guideline folded syncable passkeys into the assurance ladder, and regulated onboarding teams can finally cite a federal yardstick for them.
The CJEU's SCHUFA ruling pulled credit scoring inside Article 22, and fraud engines serving EU customers inherit the human-review architecture it implies.
Regulation (EU) 2024/1183 turns government-issued digital attributes into a KYC input, and member states must offer the wallets during 2026.