Payment regulations across different regions in 2026

The regulatory landscape for payments has never been more dynamic. Across the globe, governments and financial authorities are reshaping the rules that govern how money moves, who can move it, and what protections apply when things go wrong. For businesses operating internationally, keeping pace with these changes is no longer just a compliance exercise. It is a strategic necessity that affects product design, customer experience, and market entry decisions.

This guide provides a comprehensive overview of the most significant payment regulations taking effect across key regions in 2026. We will cover Europe’s sweeping new payment framework, major developments in the United States, Asia’s embrace of digital assets and real-time rails, Latin America’s continued innovation, and emerging rules in other markets. Understanding this landscape will help you navigate complexity, avoid costly missteps, and identify opportunities where regulatory change creates competitive advantage.

Europe: PSD3 and the new payment services framework

The European Union is undergoing its most significant payment regulatory overhaul since the introduction of PSD2. The Third Payment Services Directive, known as PSD3, and the new Payment Services Regulation are together reshaping the rules for payment service providers across all member states.

What PSD3 and the PSR change

The most fundamental shift is structural. By transferring many behavioral regulations from a directive to a regulation, the EU is eliminating the national implementation leeway that created fragmentation under PSD2. This means the same rules will apply directly and uniformly across all member states, increasing legal certainty for businesses operating across borders.

For payment institutions and electronic money institutions, the changes are substantial. These entities will now be subject to the full scope of regulations governing payment institutions, with stricter capital requirements, broader obligations around customer fund protection, and enhanced ICT resilience standards. Institutions that already hold licenses may need to reapply for authorization or demonstrate compliance with the new standards during transition periods.

Security and fraud prevention take center stage

PSD3 places even greater emphasis on transaction security and fraud prevention. Strong Customer Authentication requirements remain, but they are supplemented by improved transaction monitoring and the reintroduction of IBAN name matching. This verification of payee feature requires payment service providers to check that the recipient’s name matches the account number before a transfer completes, helping prevent misdirected payments and certain types of fraud.

Perhaps most significantly for merchants, liability rules are tightening. Similar to frameworks already in place in the UK and Singapore, payment service providers will be required to reimburse consumers for losses in certain fraud scenarios. At the same time, new rules facilitate fraud data sharing between institutions, with narrowly defined possibilities for recourse against telecommunications companies whose infrastructure has been used by fraudsters.

The European Payments Council has already launched consultations to stabilize the Verification of Payee scheme rulebook, with updates continuing through 2026. EU payment service providers should be finalizing their IBAN name check implementations, including designing customer journeys for mismatch outcomes and exception handling.

Open banking evolution

The regulatory framework for open banking is also being strengthened. Dedicated, secure interfaces and clear rules on interface governance aim to improve availability and quality. Customers will gain more transparency and control over data access, including authorization dashboards that show exactly who has access to their financial information.

Digital euro moves closer

December 2025 saw the Council of the EU agree its position on regulations establishing a legal framework for a retail digital euro. The Council clarified key design features including distribution via supervised intermediaries, holding limits, offline functionality, and member state duties to monitor cash acceptance and availability. For banks and payment service providers, this means preparing for wallet onboarding, privacy and AML controls, holding limit monitoring, and offline use capabilities. Merchants should be reviewing digital euro acceptance flows and point-of-sale integration requirements.

Implementation timeline

Following the political agreement reached by Parliament and Council in November 2025, the PSD3 and PSR package is expected to be formally adopted and published in the first half of 2026. The PSR will generally apply directly in all member states 18 months after entry into force, while PSD3 must be transposed into national law within 18 months. A transitional phase applies for institutions already authorized, giving them time to adapt their governance, organization, and processes to the new requirements.

For businesses operating in or with Europe, the message is clear: start your gap analysis now. Legal and operational teams should work together to translate regulatory requirements into processes, controls, IT systems, and contracts, particularly for governance, third-party management, fraud controls, and API governance.

United States: federal shifts and state-level action

The United States presents a complex picture in 2026, with significant federal developments alongside active state-level rulemaking. The change in administration has brought a different approach to financial regulation, while new laws create frameworks for emerging payment technologies.

Federal payments modernization

The U.S. Department of the Treasury, in coordination with the IRS and other federal agencies, is advancing the transition to fully electronic federal payments pursuant to Executive Order 14247, signed in March 2025. This policy shift covers both disbursements from the federal government, including tax refunds, benefits, grants, and vendor payments, and payments to the federal government, including tax balances due, fees, and penalties.

The purposes are clear: defend against financial fraud and improper payments, increase efficiency, reduce costs, and enhance security. Paper instruments are far more likely than electronic payments to be lost, stolen, altered, or delayed. Moving to direct deposit and other secure electronic options improves speed, accuracy, and protection for both the public and government.

For individual taxpayers, the changes are already taking effect. The IRS generally stopped issuing paper refund checks after September 30, 2025. Taxpayers without bank accounts can still receive refunds through alternative electronic methods, including certain mobile apps and prepaid debit cards, with limited exceptions for hardship cases.

For businesses paying taxes, the IRS strongly encourages electronic payment options including IRS Direct Pay, the Electronic Federal Tax Payment System, and online account portals. While checks and money orders are still accepted for now, the agency will reduce its reliance on paper over time.

Federal Reserve payment account proposal

In December 2025, the Federal Reserve issued a request for information on a new special purpose payment account prototype. This stripped-down Federal Reserve Bank account is designed for payments-focused institutions that are legally eligible for master accounts but have faced long, uncertain reviews.

A payment account would be separate from a traditional master account and used solely to clear and settle the account holder’s own payment activity. It would be subject to tight structural limits: capped overnight balances, no interest on overnight balances, no discount window access, and no intraday credit. The account could settle Fedwire Funds, FedNow, and certain other transfers, but not ACH, check, or other transactions.

For eligible fintechs and special purpose banks, a payment account could provide a practical, albeit constrained, way to gain direct access to Federal Reserve payment rails while reducing reliance on correspondent banks.

State-level developments

At the state level, several trends merit attention. New York’s FAIR Act, which took effect February 17, 2026, expands the scope of the state’s General Business Law to explicitly prohibit unfair, deceptive, or abusive acts or practices across all business activities. For payments firms, this broadening of enforcement powers heightens regulatory risk around product design, pricing transparency, marketing practices, and customer communications .

States continue to enact laws targeting earned wage access products, with California, Connecticut, Nevada, South Carolina, Missouri, and Wisconsin among those establishing frameworks. These laws often require registration and fee payments, while some state regulators have pursued enforcement actions alleging that EWA products constitute illegal payday lending.

The patchwork of state laws governing convenience fees and surcharges also continues to evolve, generating class action litigation against lenders and servicers. Plaintiffs increasingly allege that such fees violate state consumer protection statutes or debt collection laws.

Faster payments adoption

Financial institutions are continuing to adopt FedNow and real-time payment capabilities, moving from receive-only transactions to both sending and receiving. As adoption grows, so does attention to the associated fraud risks, with artificial intelligence emerging as a key tool for combating fraud in instant payments.

Asia: digital assets, real-time rails, and AML focus

Asia presents a diverse regulatory picture in 2026, with major economies advancing frameworks for digital assets, expanding real-time payment capabilities, and strengthening anti-money laundering requirements.

China: enhanced AML measures

China introduced new special preventative measures targeting money laundering and terrorist financing risks, effective February 16, 2026. These measures require financial institutions to continuously monitor sanctions lists published by the National Counter Terrorism Leading Group, the UN Security Council, and the People’s Bank of China.

Firms must verify customers and trading partners against these lists as part of customer due diligence and apply enhanced AML controls, including freezing assets or restricting transactions where necessary. Institutions are also required to report both identified customers and any special administrative measures taken to their relevant AML authorities. Notably, the framework includes penalties for non-compliance, with individual employees potentially held legally responsible, reinforcing the importance of strong governance and accountability structures.

Hong Kong: tokenized deposits advance

The Hong Kong Monetary Authority launched EnsembleTX in November 2025, the pilot phase of Project Ensemble, enabling real-value transactions using tokenized deposits and digital assets. Building on earlier sandbox experimentation, the pilot will operate through 2026 with the aim of delivering faster, more transparent, and more efficient settlement of tokenized transactions.

The HKD Real Time Gross Settlement system will initially facilitate interbank settlement, before the pilot infrastructure is gradually updated to support 24/7 settlement of tokenized central bank money. Banks and industry participants involved in the pilot should prepare to integrate tokenized deposit use cases into liquidity and treasury operations and to test settlement procedures.

Singapore: BLOOM extends settlement capabilities

In October 2025, the Monetary Authority of Singapore launched BLOOM to extend settlement in tokenized bank liabilities and well-regulated stablecoins, while applying standardized risk approaches. Under BLOOM, industry participants will collaborate on focus areas including the distribution and clearing of settlement assets, programmable compliance controls to automate compliance checks, and agentic payment.

Industry participants such as banks, financial institutions, and clearing network operators may apply to take part in trials and advance BLOOM’s objectives, while keeping abreast of further related developments.

Regional payment system evolution

Across Asia, real-time payment systems continue to mature. The focus is shifting from launch to scaling, with attention to interoperability, cross-border connectivity, and the development of value-added services built on real-time rails. For businesses operating in the region, understanding local payment preferences and the regulatory frameworks supporting them remains essential.

Latin America: real-time payments hit their stride

Latin America continues to demonstrate how thoughtful regulation can accelerate fintech innovation. Several significant developments in 2026 merit attention.

Brazil: Pix evolution and stablecoin regulation

Brazil’s Pix, already a massive success, continues to evolve from a payments rail into a broader financial product. Pix Automático has the potential to disrupt subscription payments by enabling recurring transactions directly through the Pix infrastructure. Pix Parcelado formalizes BNPL-like behavior without cards, further eroding the relevance of physical cards for large segments of the population.

Brazil’s Stablecoin Law, effective in early 2026, represents a landmark development. By institutionalizing stablecoins for B2B cross-border settlement, Brazil becomes one of the first major markets to formally integrate the asset class into its financial system. The implications for cross-border payments, treasury management, and FX hedging are significant, extending well beyond crypto-native players.

Phase four of Open Finance is expected to roll out in early 2026, introducing credit portability, payment initiation without redirection, and payroll portability. The real question is not adoption but impact, particularly on checkout conversion, pricing, and customer acquisition dynamics.

The Central Bank continues to expand its oversight of fintechs, formalizing supervision of new business models. While election cycles may create bursts of regulatory activity followed by pauses, the trend toward structured oversight is unlikely to reverse.

Colombia: Bre-B enters a defining year

After its 2025 launch, Colombia’s Bre-B real-time payment system enters a defining year in 2026. With mandated interoperability in place, attention turns to whether usage reaches critical mass and starts displacing cards for everyday payments. Success will depend less on technology and more on merchant and consumer habit change.

Mexico: DiMo and open finance

Mexico’s DiMo may finally reach the scale required to challenge the country’s cash-heavy economy, with tens of millions of social program recipients being onboarded. If adoption sticks, it could unlock entirely new fintech use cases for informal and underbanked users.

After years of perceived stagnation following the Fintech Law, 2026 could mark a reset. Mandatory open finance standards and broader DiMo adoption have the potential to materially expand addressable markets. A meaningful shift from cash to digital would unlock new embedded finance opportunities across payments, lending, and wallets.

Mexico’s CNBV is actively enforcing the Fintech Law, signaling a broader trend of regulatory normalization as ecosystems mature.

Regional regulatory trends

Across Latin America, regulators are tightening enforcement as fintech ecosystems mature. This is less about restriction and more about creating the conditions for responsible scaling. At the same time, artificial intelligence is becoming embedded across product, risk, and operations, with regulators increasingly focusing on areas like fraud, identity, and automated decision-making.

Other notable developments

Global cross-border payments focus

The Financial Stability Board continues to urge action to improve cross-border payments. In October 2025, the FSB published a progress report on the G20 Roadmap noting that while most roadmap actions have been completed, tangible user benefits remain limited. The FSB has called for stronger implementation at national levels and greater private-sector engagement, with focus shifting from policy design to supporting implementation and stakeholder coordination.

United Kingdom: payments vision and stablecoin framework

The UK is advancing several significant initiatives. The Payments Vision Delivery Committee released its strategy for next-generation retail payments infrastructure in November 2025, focusing on expanding payment choices, promoting financial inclusion, tackling financial crime, ensuring system resilience, and improving interoperability.

The FCA has prioritized stablecoin payments for 2026, with sandbox testing for safe experimentation. Banks, EMIs, and crypto firms should align issuance, redemption, backing asset custody, and wallet risk controls with the evolving regime.

Commercial Variable Recurring Payments continue to advance, with the FCA aiming to expand cVRPs into e-commerce and unlock new open banking use cases. Businesses should prepare for first live payments under the UK Payments Initiative scheme, with the FCA assessing adoption and growth by year-end.

Argentina: enhanced reporting obligations

Through General Resolution 5804, Argentina’s tax authority expanded the scope and detail of information that digital platforms and payment service providers must report. The amendments, which apply to informative sworn statements filed from May 2026 onward, require detailed reporting on account holders, balances, and transactions, with specific thresholds triggering enhanced reporting requirements.

Poland: complaint handling framework

The Act on the Handling of Complaints on Financial Market Entities took effect on February 12, 2026, establishing a new framework for complaint handling and dispute resolution. Payments providers and financial institutions operating in Poland must ensure their processes align with the new requirements.

Norway: AML rule updates

Norway implemented updated AML rules on February 6, 2026, incorporating changes to the EU’s high-risk third-country list. Financial institutions operating in or through Norway must ensure risk assessments, customer due diligence, and transaction monitoring reflect the updated list of jurisdictions with strategic AML deficiencies.

Navigating the complex regulatory landscape

For businesses operating across multiple regions, the regulatory complexity described above presents significant challenges. Compliance teams must track deadlines across dozens of jurisdictions. Product teams must design experiences that meet varying local requirements. Legal teams must interpret how overlapping frameworks apply to specific business models.

Several principles can help navigate this complexity.

Build regulatory awareness into product development: The days of building first and addressing compliance later are over. Regulatory requirements should inform product design from the outset, particularly for features involving authentication, data sharing, fraud prevention, and customer communications.

Invest in flexible infrastructure: Regulatory requirements change, and they change at different paces across regions. Rigid systems that require redevelopment for each new rule create bottlenecks and increase risk. Flexible payment infrastructure that can adapt through configuration rather than code enables faster responses to regulatory change.

Monitor continuously, not periodically: Regulatory deadlines arrive throughout the year, not just at predictable intervals. February 2026 alone saw 45 regulatory milestones across multiple jurisdictions . Continuous monitoring, supported by appropriate tools and intelligence, is essential.

Engage with industry developments: Many regulations emerge from industry consultation processes. Participating in these consultations, whether directly or through industry associations, provides insight into upcoming changes and an opportunity to shape outcomes.

Consider the strategic dimension: Regulation is not just a constraint. It can also create opportunity. Brazil’s open finance framework, the EU’s PSD3, and the US Genius Act all create new possibilities for innovative products and services. The businesses that understand these frameworks earliest are best positioned to capitalize on them.

Frequently asked questions

When do the major 2026 payment regulations take effect?

Timelines vary by region. PSD3 and the PSR are expected to be formally adopted in the first half of 2026, with application 18 months later. The US Genius Act requires agency rules by July 18, 2026. Brazil’s Stablecoin Law is effective early 2026. Many other measures, including China’s enhanced AML rules and New York’s FAIR Act, took effect in February 2026.

How do PSD3 and PSR differ from PSD2?

PSD3 and the PSR represent an evolution rather than a revolution, but with important differences. Key changes include the shift to a regulation for many requirements, eliminating national variation; enhanced fraud prevention including mandatory IBAN name matching; expanded scope bringing e-money institutions fully into the framework; and stricter liability rules for certain fraud scenarios.

How will the US transition to electronic federal payments affect businesses?

For businesses receiving federal payments, the shift to electronic methods means ensuring banking information is current with relevant agencies. For businesses paying the IRS, electronic payment options are strongly encouraged, though checks and money orders remain accepted for now. Over time, paper methods will be phased out.

What is IBAN name matching and why does it matter?

IBAN name matching, also called Verification of Payee, requires payment service providers to check that the recipient’s name matches the account number before a transfer completes. It helps prevent misdirected payments and certain types of fraud. Under PSD3, EU payment service providers must implement this capability.

How do real-time payment regulations differ across regions?

Real-time payment frameworks vary significantly. In Europe, the focus is on instant euro payments with new rules enabling 24/7 transfers. In Brazil, Pix continues to evolve with new features like recurring payments. In the US, FedNow adoption grows alongside private sector real-time payment networks. Each framework carries different requirements for participation, fraud prevention, and customer protections.

What should businesses do to prepare for 2026 regulatory changes?

Start with a gap analysis comparing current practices to new requirements. Prioritize areas with the earliest deadlines or highest operational impact. Engage legal and compliance expertise early. Invest in flexible payment infrastructure that can adapt to changing rules. Monitor regulatory developments continuously throughout the year.

For businesses, this complexity brings both challenges and opportunities. The challenge lies in keeping pace with change, ensuring compliance across multiple jurisdictions, and avoiding costly missteps. The opportunity lies in building systems and strategies that turn regulatory requirements into competitive advantages, whether through superior customer experiences, lower risk, or faster market entry.

The businesses that succeed will be those that treat regulation not as an obstacle to be overcome but as a foundational element of their payment strategy. They will build flexible infrastructure that adapts to change. They will invest in regulatory intelligence and expertise. And they will view compliance not as a cost center but as a source of customer trust and business resilience.

Ready to navigate the complex payment regulatory landscape with confidence? Discover how a flexible payment orchestration platform can help you adapt to changing rules across regions, maintain compliance without sacrificing performance, and focus your resources on growth rather than regulatory firefighting. Book a demo today to learn more.