TrustSphere
 

The EU's payments package, a third Payment Services Directive alongside a directly applicable Payment Services Regulation, reached [provisional...

Since 7 May 2026, every authorised payment institution and e-money firm in the UK has been living under the FCA's Supplementary Regime for...

The Consumer Duty is now three years old as a rulebook and has quietly become something financial crime teams cannot treat as somebody else's...

For most of its life, the UK's digital identity certification scheme has been something banks watched rather than acted on: a well-intentioned...

The most expensive mistake in financial crime vendor selection happens after the RFP closes. A shortlist of three to five vendors is selected, each...

The Economic Crime (Anti-Money Laundering) Levy has quietly become a much bigger bill for the largest AML-regulated entities, and TrustSphere's view...

The FATF's fifth round of mutual evaluations is often described as a methodology refresh. TrustSphere's view is that this undersells it badly: the...

A great deal of vendor commentary over the past year has told financial crime teams that their AML and fraud detection systems will become "high-risk...

Procurement processes for sanctions and compliance technology often fail not because vendors submit poor proposals, but because institutions ask the...

Digital Operational Resilience Act reveals true architecture. Ratified December 2024, coming force tier 1 firms December 2025, commonly read as...

The 2026 launch of multiple bank-grade stablecoin acceptance products — and the continued growth of merchant settlement in USDC and EURC — has surfaced a question card networks have spent six decades answering: what happens when a customer disputes a payment that has already settled on an immutable rail? The MiCA regime's 2025 transitional period closed in January 2026, leaving Europe with a clearer set of obligations on e-money tokens but a still-unresolved consumer-recourse

Cryptographically relevant quantum computers are no longer a theoretical concern. NIST has finalised the first post-quantum standards, regulators are issuing migration timelines, and threat actors are already harvesting encrypted traffic for later decryption. For tier-1 banks and payments providers, the question is no longer whether to migrate, but how quickly and how safely.

Authorised Push Payment fraud has cemented itself as the dominant consumer fraud typology in real-time payment markets, overtaking card fraud across the United Kingdom and increasingly identified as a systemic concern in the European Union, Australia and Singapore. The combination of instant settlement, limited recall windows, and the social-engineering sophistication of modern scam playbooks has created a fraud category that traditional rules-based detection was never design

Cyber security has graduated from a technology discipline to a board-level operational resilience requirement. The European Union's Digital Operational Resilience Act became fully applicable in January 2025, and is now in its first full year of supervisory enforcement; the UK's Operational Resilience framework is approaching its 2025 transition deadline; and the United States is finalising rules under the SEC, OCC, and FFIEC that align increasingly closely with the European m

The cyber posture of a Tier 1 bank is increasingly only as strong as the weakest third-party SaaS vendor in its delivery chain. Concentration risk in cloud, identity, and observability tooling has turned into one of the most material — and least managed — operational risks in financial services.

The quantum-computing community has stopped arguing about whether a cryptographically relevant quantum computer is possible and has moved on to arguing about when. Conservative estimates put cryptanalytically useful quantum capability at the early 2030s. Less conservative ones put it sooner. Either way, the half-life of payment messages, card cryptograms and TLS-protected session keys means the harvest-now-decrypt-later attack model already applies to any sensitive material m

The periodic customer review — the calendar-driven exercise in which a financial institution refreshes KYC and risk data on a low, medium or high c...

The 2025 rollout of the Visa Acquirer Monitoring Programme — VAMP — was treated initially as a tidying-up exercise that consolidated the old Visa D...

A bustling urban market serving as a gateway for business expansion. Expanding into new markets can be one of the most exhilarating steps a business can take. Not only does it offer new opportunities, but it also poses a range of challenges. With the globalization of commerce, many businesses seek to broaden their horizons beyond their national boundaries. Whether you are a startup or an established brand, understanding the basics of market expansion is essential for reaching

In today's digital age, fraud has escalated to unprecedented levels, impacting businesses and individuals alike. As technology evolves,...