Skip to content

GRA · Financial Regulation Nexus

Spatial financeWhere capital meets hazard, exposure and transition

Financial technology regulation

Financial technology changes who provides services, how fast they scale and where risk sits. Artificial intelligence in credit and trading, tokenised assets, stablecoins and digital-only providers all test rules written for an older structure of firms. This page explains how regulatory gaps open around new technology, how authorities apply the principle of same activity, same risk, same regulation, and which records show how far frameworks for crypto-assets, AI and operational resilience are implemented.

02The question

Financial technology regulation: how the risk develops.

AI, tokenisation and digital services. The dossier below sets out how the risk develops, what is measured, where the data come from, how it is modelled and who decides.

Mechanism

Same activity, different rules

A payment, loan or deposit-like product offered by a technology firm may fall outside licences written for banks. Until the perimeter is redrawn, similar risks carry different safeguards, and activity grows where rules are lightest.

Mechanism

Scale outruns supervision

Digital distribution can reach millions of customers before a supervisor reviews the product. Runs on digital banks and stablecoins can move faster than the liquidity assumptions built into existing rules.

Mechanism

Opaque models, concentrated providers

Machine learning models are hard to explain, and a few cloud, data and model providers serve much of the sector. A fault or bias in a shared component can appear in many firms at once.

Mechanism

Tokens tied to traditional finance

Stablecoin reserves sit in bank deposits and short-term government securities, and banks custody and trade crypto-assets. A loss of confidence in a token can force reserve sales and transmit stress back to regulated markets.

03Monitor

Supervisory review console.

The screen a team would use to follow this subject: its measures, states and decisions. Names are examples and values are illustrative.

Supervisory review console

Financial technology regulation · Bank supervision · Cycle 2

9 findings overdueGRA · Financial Regulation Nexus

Firms by risk rating

Bank BHigh39Enhanced
Bank DMedium22Standard
Insurer AlphaHigh35Enhanced
Fintech F1Low22Light

Findings

Open01
Model validation gapsBank B
Remediating01
Climate data qualityInsurer Alpha
Closed01
Liquidity reportingBank D

Climate expectations met

share of firms, thematic review

Governance, %51 of 100 requiredRisk management, %49 of 100 requiredScenario analysis, %30 of 100 requiredDisclosure, %78 of 100 required
Supervisory review console: the screen's structure, terms and states for Financial technology regulation.Example names and illustrative values; a design, not a record or a live system.
04Indicators

What is measured, and how well.

Each indicator carries its unit, its cadence, the kind of source behind it and the evidence label a value would carry. No values are shown: a programme supplies them under its own authority.

IndicatorUnitCadenceSource typeLabel
Implementation of the FSB crypto-asset frameworkimplementation stage per jurisdictionper peer reviewFSB thematic peer reviewPublished statistics
Authorised crypto-asset service providerscount on the register by jurisdictionmonthlyMiCA registersPublished statistics
Travel rule implementation for virtual asset providersimplementation status per jurisdictionannualFATF targeted updatePublished statistics
Stablecoin reserve compositionpercent of reserves by asset typemonthlyIssuer reserve attestationsDECLARED
Regulatory sandboxes and innovation hubspresence and type by authorityannualAuthority publicationsREPORTED
Designated critical ICT third-party providerscount of providers under direct oversightannualEuropean Supervisory Authorities designationPublished statistics
Major ICT-related incidents reportedcount by categoryannualDORA incident reporting aggregatesPublished statistics
Supervisory statements on AI use in financecount by authority and topicannualAuthority publicationsREPORTED
05Scenario model

Policy paths and what they do to the risk.

How three families of instruments change a risk outcome over time with adoption lags, coverage and compliance, the policy scenarios behind transition and physical risk assessments. Scenario: named assumptions about the future, not a forecast.

Controls

Baseline trend of the outcome
2.0% a year
Coverage of the instrument
70%
Compliance
75%
Effect size, against the teaching value
100%
Years ahead
20 years

Readouts

Largest reduction at the horizon
Regulation
Its reduction against the baseline
21%
Numbers, methods and sources
YearBaselineRegulationEconomic incentiveInformation and capacity
0100.099.598.899.1
1102.0101.2100.199.8
2104.0102.5101.199.9
3106.1103.5101.6100.0
4108.2103.7101.8100.7
5110.4103.2101.7102.1
6112.6102.0101.6103.9
7114.9100.4101.6105.9
8117.299.2102.1108.0
9119.598.6102.9110.1
10121.998.9104.2112.3
11124.399.7105.7114.5
12126.8101.1107.4116.8
13129.4102.7109.4119.2
14131.9104.5111.4121.6
15134.6106.5113.5124.0
16137.3108.5115.7126.5
17140.0110.7118.0129.0
18142.8112.9120.4131.6
19145.7115.1122.8134.2
20148.6117.4125.2136.9

Methods

  1. Tools of government Hood (1983), The Tools of Government, Macmillan
  2. Carrots, sticks and sermons Bemelmans-Videc, Rist and Vedung (1998), Transaction
  3. Diffusion of innovations Rogers (2003), Diffusion of Innovations, Free Press
  4. Uncertainty fan (parameter Monte Carlo) Spiegelhalter, Pearson and Short (2011), Visualising uncertainty about the future, Science 333
  5. One-at-a-time sensitivity (tornado) Saltelli and others (2008), Global Sensitivity Analysis: The Primer, Wiley

Data

The model runs on the teaching values set by the controls. To calibrate it for a place, read it against these admitted layers and series, which this page's map can draw:

  • Borders Natural Earth
  • Cities Natural Earth
Policy paths and what they do to the risk. Illustrative teaching model: it runs on the values set by the controls, not on measured data. Methods: Tools of government (Hood (1983), The Tools of Government, Macmillan); Carrots, sticks and sermons (Bemelmans-Videc, Rist and Vedung (1998), Transaction); Diffusion of innovations (Rogers (2003), Diffusion of Innovations, Free Press).
06Sources

Where the evidence comes from.

Named public datasets and institutional records, each with its licence class. Sources by agreement are used only under their terms and never republished.

SourceWhat it givesLicence class
FSB thematic peer review of the crypto-asset frameworkJurisdictional implementation of crypto-asset and global stablecoin recommendationsPublic, terms per FSB
ESMA interim MiCA registerAuthorised crypto-asset service providers, white papers and non-compliant entities in the EUPublic, reuse with attribution
FATF targeted updates on virtual assetsImplementation of FATF standards for virtual assets and their providersPublic, terms per FATF
IOSCO policy recommendations for crypto and digital asset marketsRecommendations and implementation monitoring for crypto-asset marketsPublic, terms per IOSCO
BIS Innovation Hub project reportsExperiments in tokenisation, payments and supervisory technology by central banksPublic, BIS terms of use with attribution
European Supervisory Authorities list of critical ICT third-party providersProviders designated for direct oversight under DORAPublic, reuse with attribution
National regulators' sandbox and innovation hub recordsCohorts, eligibility and lessons published by authoritiesPublic records, terms per regulator
07Exposure, loss and capital

What financial technology regulation means for exposure, loss and capital.

The exposure, loss, scenario and capital views a risk officer, supervisor or ministry of finance would ask for, with the frameworks they report against. Structures follow supervisory and actuarial practice. Values are illustrative: never prices, ratings or advice.

Disclosure crosswalk

Where evidence on financial technology regulation fits the disclosure and prudential frameworks institutions report against.

PillarTCFDISSB IFRS S2Prudential (BCBS, IAIS)Evidence this page can hold
GovernanceBoard oversight of climate-related risksGovernance requirementsGovernance and risk appetite principlesWho owns the risk and how it is escalated
StrategyRisks, opportunities and resilienceScenario analysis and resilienceStrategy and business model principlesScenario design and transmission paths
Risk managementIdentify, assess, manageRisk management processesInternal control and ICAAP or ORSAExposure maps and loss views
Metrics and targetsMetrics used and targets setCross-industry and industry metricsData, metrics and reporting principlesIndicator definitions and units
Sources: the TCFD recommendations, ISSB IFRS S2 and the BCBS and IAIS principles, cited by name; the framework texts are the authority. A crosswalk by pillar. It is not a compliance assessment.
NGFS climate scenarios · Network for Greening the Financial SystemIFRS S2 Climate-related Disclosures · ISSBTCFD recommendations · Financial Stability Board TCFDPrinciples for the effective management of climate-related financial risks · Basel Committee on Banking Supervision
08Decisions

Who decides, and what the evidence serves.

Financial Regulation Nexus prepares evidence. The decisions below are taken by the authorities named, under their own rules, and never by the platform.

Who decidesThe questionEvidence this page serves
LegislaturesWhether to create new licences, extend existing ones or prohibit activitiesPerimeter maps, comparative statutes and published peer reviews
Financial regulators and central banksWhich firms to authorise, test in sandboxes or bring under direct oversightRegisters, sandbox lessons and incident aggregates
Financial Stability Board, BCBS, IOSCO and FATFWhether standards for crypto-assets, AI and third parties need revisionImplementation reviews and documented gaps
Boards of financial firmsHow to govern AI models and concentrated technology providersSupervisory expectations on model risk, outsourcing and operational resilience

Outputs this topic produces

  • Perimeter maps showing which activities fall under which licence in each jurisdiction
  • Comparative briefs on crypto-asset, stablecoin and AI rules
  • Learning material on supervising third-party and model concentration
  • Implementation tracking guides built on authority registers
09Core questions

What experts ask.

Fintech regulation researchers ask how to govern innovation that crosses existing categories.

  • Does an innovation fit existing regulatory categories, or does it require new rules?
  • How should AI used in credit, insurance and advice be governed for fairness, explainability and accountability?
  • How do tokenised assets and digital asset services fit into securities, payments and prudential frameworks?
  • How do innovation offices and sandboxes affect regulatory learning and market entry?
  • How do technology firms' entry into finance affect competition, concentration and operational risk?
10Mechanisms and drivers

Same activity, same risk, same rules.

A common regulatory principle holds that the same activity creating the same risk should face the same rules. Fintech tests this principle because new business models unbundle and rebundle activities in ways that do not fit existing categories. Some innovations sit partly outside the regulatory perimeter; others raise new risks, such as model risk in AI, operational dependence on technology providers, or legal uncertainty about digital assets.

Regulators have responded with innovation offices, sandboxes, new licensing regimes and guidance on existing rules. Research examines whether these approaches improve outcomes, how they affect competition and whether they create uneven treatment between incumbents and new entrants.

11Methods and data

How the evidence is built, and where it stops.

  1. 01

    Perimeter analysis

    Mapping activities to regulatory categories using policy and institutional science. Legal classifications differ across jurisdictions.

  2. 02

    Technology assessment

    Understanding how systems work, with data engineering expertise. Proprietary systems limit transparency.

  3. 03

    Comparative regulation

    Comparing approaches to AI, digital assets and payments. Many regimes are new.

  4. 04

    Market structure analysis

    Examining competition and concentration with game theory. Markets change quickly.

12Methods

How it is studied, and what the methods cannot say.

  1. Policy, institutional and decision scienceRegulatory impact assessment · Comparing supervisory architecturesApplied here
  2. Financial economics and macro-financeCosts and benefits of capital requirements · Tracing leakage of macroprudential measuresApplied here
  3. Data engineering, interoperability and stewardshipMapping templates to a common model · Entity resolution with identifiersApplied here
  4. Game theory and mechanism designHome-host cooperation in resolution · Regulatory competition between jurisdictionsApplied here
13Questions

Questions and answers.

What does same activity, same risk, same regulation mean?
The principle that an activity creating a given risk should face equivalent rules whoever performs it. Applying it is harder than stating it, because licences are often defined by entity type rather than activity.
Is a stablecoin a deposit?
Legally it usually is not, and that difference is the point at issue. Regimes such as MiCA set reserve, redemption and governance requirements so that holders are protected in ways deposits are protected by other means.
What is a regulatory sandbox?
A framework in which an authority lets firms test new products with real customers under agreed limits and close supervision. It does not exempt firms from law, and its record of results varies.
Does the platform assess fintech products?
No. It studies regulatory frameworks. It does not assess, approve or recommend any product or firm.
Are digital assets regulated?
Approaches differ widely across jurisdictions and are evolving. Research compares them; it does not determine how any asset is classified.
How is AI in finance governed?
Through a mix of existing financial rules, such as fair lending and model risk requirements, and emerging AI-specific rules. The topic compares these approaches.
ReportsContribute

Contribute evidence from this page.

Reports is the Consortium's quarterly publication. What you know about this subject can become evidence, a case or a correction in the next edition, credited to you and published under CC BY 4.0 where it is your own work.

Global Risks AllianceFinancial Regulation NexusFinance and Insurance ReadinessMethods and Technical
Financial Regulation Nexus

Bring an exposure or capital question to the Alliance.

Information and enquiries are open today. An enquiry receives a reference and names the next step; applications, payments, compute allocations and registrations open only when their team, terms and review capacity exist.