On March 25, 2026, the UK Prudential Regulation Authority fined The Bank of London Group and Oplyse £2 million for regulatory failings — a development that carries broader significance for the rapidly expanding fintech sector. The action reinforces that fintech firms operating under full banking or e-money licenses are held to the same governance, risk management, and compliance standards as established financial institutions, with no tolerance for the informal controls that characterise early-stage startup environments.
The UK’s Payment Systems Regulator simultaneously published its 2026/27 annual plan, allocating £26 million with a focused mandate on authorised push payment fraud and open banking — areas where fintech firms are most active and most exposed to financial crime risk. For fintech compliance leaders, March 2026 is a watershed moment: the regulatory grace period for innovative but governance-light business models is closing.
The FCA’s October 2025 data confirming that 75% of UK financial firms are already using AI — with another 10% planning adoption — signals that regulators are increasingly using AI-adoption as a proxy for operational maturity, expecting firms with sophisticated analytics to demonstrate correspondingly sophisticated risk controls. Fintechs that have invested in AI for customer experience but lagged in compliance governance are particularly exposed to supervisory scrutiny in 2026.
By FCCT Editorial Team

