compliance

According to Bloomberg, Bank of America has been fined over $1.21 billion by U.S. regulators for anti-money laundering and sanctions compliance issues. Among them, the Office of the Comptroller of the Currency (OCC) issued a $750 million civil penalty, setting a record for fines related to this agency; the settlement measures from the Office of Foreign Assets Control (OFAC) involve 475 alleged violations of sanctions programs, with related countries including Russia and Iran.Regulators also issued a consent order against the bank.

According to CoinDesk, Russia's largest bank Sberbank has received approval from the Central Bank of Russia to conduct cryptocurrency trading. According to Interfax, the Central Bank of Russia has included Sberbank in the registry of cryptocurrency trading service providers. The bank has also entered the registry of digital asset custodians, qualifying it to record customers' cryptocurrency holdings.Sberbank plans to launch cryptocurrency trading services to users through its existing client portal starting December 1. It is currently testing trading functions for assets such as BTC, ETH, and USDT within the app, and the final list of tokens supported for trading will be determined by the Central Bank of Russia. This approval signifies a further shift towards compliance in the regulation of the Russian cryptocurrency market. In 2022, the Central Bank of Russia proposed a ban on domestic cryptocurrency trading platforms and financial institutions participating in cryptocurrency activities, but new regulations that took effect in September of this year began to establish a regulated market involving banks, brokers, trading platforms, and digital asset custodians.Currently, there are 9 institutions on the Central Bank of Russia's registry of cryptocurrency trading service providers, including VTB and T-Invest Lab. However, the use of cryptocurrencies for payments remains prohibited within Russia. The Central Bank of Russia stated that starting in July next year, cryptocurrency trading must be conducted through registered intermediaries, and peer-to-peer transactions conducted through bank accounts may be subject to restrictions.

On October 12, 2026, the financial technology company Yirendai released a statement through its public account, stating that it had noted the public security report released by "Ping An Beijing Chaoyang" on that day, and that the relevant situation should be based on the official announcement.Yirendai stated that the company operates independently as a publicly listed entity, focusing on financial technology and AI technology innovation. The company mentioned that no direct relationship with Yirendai's business has been found regarding the reasons involved in this incident, and that operations remain normal, with all business activities progressing in an orderly manner.The company also stated that it will strictly adhere to regulatory requirements, maintain compliant and stable operations, protect the legal rights and interests of partners and users, and express gratitude for the attention from all sectors.

Co-founder Edison released an update regarding the recent data breach incident involving encrypted cards. Edison stated that the compliance and operations team is contacting affected users, has reported to relevant agencies such as the Personal Data Protection Commission (PDPC), and has formally filed a police report. They are currently working closely with law enforcement, and the encrypted card business continues to operate normally.

According to Bloomberg, the U.S. Department of Justice is reviewing whether Binance Holdings Ltd. has violated the settlement agreement reached with the U.S. government in 2023, while also investigating whether activities on the platform may involve violations of Iran sanctions.Tysen Duva, head of the criminal division of the U.S. Department of Justice, stated in an interview this week that officials are reviewing Binance's compliance with the 2023 agreement. He declined to discuss details and did not indicate that Binance violated the settlement agreement. Under the agreement, Binance agreed to pay a $4.3 billion fine, acknowledged violations of banking-related rules, and accepted enhanced compliance controls.

On October 8, the XRP Ledger activated the PermissionDelegationV1_1 feature, allowing account owners to authorize other accounts to perform specific tasks without relinquishing control of the account's master key. According to the monitoring site XRPL Dashboard, such upgrades require over 80% support from trusted validators for two consecutive weeks; based on the current 35 validators, at least 29 must support it. The countdown for this feature was reset in September due to the support rate falling below the threshold.This feature allows enterprises to split permissions by function. Stablecoin issuers can authorize compliant accounts to approve new customers while keeping the master key offline. Authorized accounts use their own keys to sign and can only perform the granted operations; owners can change or revoke these permissions at any time. Each authorized account can receive up to 10 permissions, which limit the types of operations they can perform, rather than automatically setting spending limits. Banks have previously separated payment and compliance responsibilities at the employee level, and this upgrade enforces such division at the ledger level.According to a report shared by Evernorth, a subsidiary of XRP Treasury, the network held an average of $3.72 billion in tokenized assets and $539 million in Ripple's RLUSD stablecoin in the second quarter, totaling approximately $4.26 billion. Official guidance advises users not to delegate PaymentBurn permissions before separately fixing activation; this permission is intended for assistants to destroy tokens but, under certain conditions, also allows for the creation of new tokens. This warning pertains to tokens issued on the ledger rather than newly minted XRP.

At the TOKEN2049 event in Singapore, OKX founder and CEO Star stated that AI's impact on the financial industry is not only occurring at the user level but is also deeply penetrating backend operations such as compliance and risk control. OKX has utilized AI to assist in identifying risks, supporting investigations of suspicious transactions and behaviors, and providing recommendations to enhance processing efficiency and execution consistency. Currently, AI does not make compliance or risk management decisions directly; the final decisions are still made by humans.On-site, OKX board member and former Governor of New York Andrew Cuomo also added that clear regulatory rules are an important foundation for fintech companies to expand their services. To provide financial services to a broader user base, companies must comply with regulatory requirements and establish public trust through compliant operations.

The Cardano Foundation announced that the programmable token standard CIP-0113 has officially launched on the Cardano mainnet, allowing issuers of regulated assets such as stablecoins, tokenized funds, and bonds to directly embed compliance rules such as KYC, anti-money laundering, sanctions screening, asset freezing and confiscation, and transfer restrictions into the tokens, which will be executed by the Cardano ledger during each transfer, minting, and burning.This standard does not require a hard fork, and the tokens remain native assets of Cardano, with issuers able to update the rule modules according to regulatory changes.

According to U.Today, as the EU MiCA transition period ended on July 1, obtaining MiCA authorization has become an important foundation for cryptocurrency trading platforms to continue serving European users. Gate Europe obtained MiCA authorization before the end of the transition period and expanded related services through the European Economic Area passport mechanism. Gate data shows that from June 16 to September 22, the platform added at least 68 new spot trading pairs, currently covering about 190 assets and 382 trading pairs.The article cites data from CASP Tracker, indicating that as of September 28, 84 out of the world's largest 100 cryptocurrency trading platforms have not yet obtained MiCA authorization. Meanwhile, Gate Europe passed the PCI DSS v4.0.1 Level 1 compliance assessment on September 15, covering Gate Connect and Gate Card. Gate Europe CEO Dr. Giovanni Cunti stated that security and compliance are key to building trusted payment services in Europe, and obtaining PCI DSS certification is an important step in strengthening payment infrastructure.In terms of liquidity, Gate data shows that from September 14 to 27, the order book depth for BTC/USDC and ETH/USDC within 0.1% of the midpoint increased by approximately 14% and 12%, reaching $1.32 million and $555,000, respectively. Meanwhile, DefiLlama MiCA exchange data shows that the depth of Gate Europe's spot market within 2% of the midpoint reached $15.9 million, higher than other platforms during the same period. Relying on the compliant foundation built on the dual licenses of MiCA and Payment Institutions (PI), Gate Europe will continue to improve asset coverage and liquidity construction, providing European users with a richer selection of digital asset trading options and a better trading experience.

According to Bitcoin.com, the Brazilian presidential election will be held on October 4, and the results may influence the direction of the country's cryptocurrency policies, which have the highest global adoption rate. Current President Lula will face off against former President's son Flavio Bolsonaro.If current President Lula is re-elected, it is expected that he will strengthen regulatory and compliance requirements, as the central bank has intensified oversight of exchanges and may push for taxation on stablecoin transactions (which had been postponed due to the election). If former President's son Flavio Bolsonaro wins, his stance on cryptocurrency is unclear, with no record indicating that he has ever mentioned cryptocurrencies. However, he has previously defended individuals associated with the "Bitcoin Pharaoh" pyramid scheme.

Bitcoin News posted on platform X that the SEC plans to propose new rules under the 1940 Act, allowing investment advisors to directly hold related assets when no qualified custodian is willing to custody Bitcoin and other digital assets.The SEC stated that traditional custodians typically refuse to custody such assets, creating a compliance gap in the existing custody framework. The proposal will initiate a 60-day public comment period after its publication in the Federal Register.

Citigroup stated in its latest market strategy program that the failure of the U.S. Senate to advance the CLARITY Act for formal review did not interrupt Bitcoin's rebound. After the procedural vote on the bill was blocked, Bitcoin remained strong, indicating that funds have begun to reduce their reliance on a single legislative node and are instead focusing on whether regulatory rules can continue to move forward.Citigroup believes that the legislative blockage will limit the CFTC's ability to obtain a more comprehensive regulatory mandate for the crypto market in the short term, but the SEC can still advance some rule-making based on its existing authority. For the market, this means that the compliance process for the crypto industry still has room to continue, with the subsequent focus on the SEC's actual execution pace regarding trading, tokenized assets, and market access rules. Additionally, the macro environment remains a variable for Bitcoin's rebound.The baseline judgment of Citigroup's economic team is that this round of interest rate hikes may be close to "one and done"; however, the quantitative macro team warns that if AI investments continue to support growth, and employment and wage pressures persist, interest rates may face further upward revision risks. Citigroup views Bitcoin's position above the mid-term moving average as a signal of warming risk appetite and notes that its correlation with Nasdaq performance is worth continued tracking.

The PermissionDelegationV1_1 upgrade of the XRP Ledger entered a 14-day activation countdown on September 21, having received support from 29 of the 35 trusted validator nodes. If the support rate remains above 80% during this period, the upgrade could officially activate as early as October 5 at 11:18 UTC; at least 28 validator nodes must continue to support it, or the countdown will reset.This feature allows accounts to split permissions by role. For example, a stablecoin issuer can allow a connected compliance system to approve customer accounts holding its tokens while keeping the keys with full control offline; operational accounts can gain payment permissions but cannot change keys or delegate authority to others. Each trustee can have up to 10 permissions, and the main account can modify or revoke them at any time.This is the network's second attempt to introduce this feature. The original version had vulnerabilities that attackers could exploit to make others pay transaction fees with improperly signed transactions, and by repeatedly submitting high-fee transactions, they could deplete the victim's XRP balance. This vulnerability was reported by community testers on September 15, 2025, and validator nodes were advised to reject the amendment, so it was never activated. The fixed version was released with xrpld 3.3.0, changing the way unauthorized transactions are rejected, ensuring that fees are not deducted before signature verification.

Uniswap founder Hayden Adams retweeted a comment letter from U.S. Securities and Exchange Commission (SEC) Commissioner Hester Peirce supporting autonomous decentralized systems, pointing out that the most favorable news for automated market makers (AMM) today is Hester Peirce's view that truly decentralized systems driven by autonomous software do not need to obtain exemptions, which corresponds to the permissionless nature of Uniswap.Adams stated that the SEC's innovative exemption applies to permissioned liquidity pools on Uniswap v4, providing a pathway for assets and users with relevant compliance needs to conduct transactions in the U.S., which is expected to promote the adoption of AMM. Uniswap will submit a comment letter with suggestions for improvements.

According to The Defiant, Blockworks announced the launch of the Agentic Detection feature, allowing cryptocurrency exchanges and banks to receive compliance alerts directly from AI agents without waiting for human analysts to review. This feature went live on Thursday in Messari Monitoring, with each alert marked as generated by the agent or verified by an analyst.Blockworks stated that previously, analysts took about 5 minutes to verify each dynamic, while their proprietary model, trained on years of work by Messari analysts, can identify alerts in seconds. Agentic Detection is turned off by default, and clients can enable it view by view. Co-founder Jason Yanowitz mentioned that as on-chain activity scales, the market prices events in seconds rather than minutes, and clients need near real-time alerts.This detection layer is built on seven years of analyst coverage data, and the agent can read X, GitHub, governance forums, Discord, Telegram, project blogs, and over 1,000 news sources, covering more than 1,000 assets. Blockworks acquired Messari for over $10 million on June 12, after Messari completed a Series A extension financing led by ParaFi and Reciprocal Ventures in April, with a valuation of $192 million, with participation from Coinbase Ventures, MoonPay Ventures, and others.