If you lead compliance, risk, or AI at a UK financial services firm, this was the week the ground moved twice in five days. The FCA, that's the Financial Conduct Authority, the UK's main financial regulator, published the final rulebook for cryptoassets on Tuesday, pulling an entire industry inside the regulatory perimeter for the first time. Two days later, a tribunal suspended parts of the FCA's motor finance compensation scheme, the largest consumer redress exercise since the payment protection insurance scandal. Under SM&CR, the Senior Managers and Certification Regime, named individuals at your firm are personally accountable for how these obligations are met, and both events changed what those individuals must be able to prove. Here is the part most firms will miss. A suspension is not a pause on everything. The payouts stopped this week. The evidence obligations did not.

Over the last 18 months, MavSource’s founder tracked and invested around major AI-related names like Micron +100%, Nvidia +74%, Sandisk +130%, Western Digital +74%, TSM +22%, Broadcom +27%, Okta +35% and Lam Research +39% — an average return of approximately +63% across the group.

Now, he’s bringing the sources and ideas behind those insights to you in one daily email digest. MavSource aggregates the most important AI updates from newsletters, podcasts, company news, AI labs, funding rounds, and more — then summarizes what matters in a simple 5-minute brief.

Subscribe For Free Now

Past performance does not indicate future results. Informational only; not investment advice.

On 30 June the FCA published five policy statements setting out the final core rules for the UK's cryptoasset regime, alongside three pieces of finalised guidance and two further consultations. PS26/9 establishes the admissions and disclosures regime and MARC, the market abuse regime for cryptoassets. PS26/12 creates the prudential framework, built around a new sourcebook called CRYPTOPRU covering capital, liquidity, and risk management, with the headline concession that the backing asset buffer for stablecoin issuers was cut from the proposed 2% to 1% of tokens in circulation. PS26/13 applies the wider FCA Handbook to regulated cryptoasset activities. The Bank of England published draft rules for systemic stablecoins the same day, and the two regulators issued a joint approach paper confirming a two-tier regime: the FCA regulates all UK-issued qualifying stablecoins, and tokens HM Treasury designates as systemic also fall under Bank of England prudential oversight.

This affects every cryptoasset firm operating in or into the UK, exchanges, custodians, stablecoin issuers, brokers. It also affects every bank and payments firm with crypto exposure or stablecoin ambitions, because the joint paper treats systemic stablecoins as payments infrastructure, not a novelty asset class. The authorisation gateway opens 30 September 2026 and closes 28 February 2027. A five-month window, opening in under ninety days.

The AI governance implication is the part almost nobody in the sector is discussing. Authorisation brings the full FCA Handbook, which brings SM&CR and the Consumer Duty. Crypto firms are among the most automated businesses in financial services, transaction monitoring, market surveillance, wallet screening, automated liquidations, algorithmic pricing. Under MARC, firms will need surveillance capability that in practice means AI systems watching markets at machine speed. Every one of those systems will need a named senior manager personally accountable for its outputs. Most crypto firms have never operated under a personal accountability regime. The individuals who accept those SMF roles will be accepting personal liability for models they did not build, and "the system did it" is not an answer the FCA accepts. That liability starts the day the gateway opens, not the day something goes wrong.

On 2 July the Upper Tribunal suspended parts of the FCA's motor finance consumer redress scheme, PS26/3, on terms the FCA agreed with the four challengers, Consumer Voice, represented by Courmacs Legal, Volkswagen Financial Services, Mercedes-Benz Financial Services, and Crédit Agricole Auto Finance. The scheme was designed to compensate millions of car finance customers over undisclosed commission arrangements. The tribunal will hear the challenges on 14 to 18 December 2026 or 16 to 26 February 2027.

Read the FCA's statement carefully, because the detail is where the risk sits. Firms are not required to calculate redress, pay redress, or send scheme communications until the tribunal process concludes. But firms must comply with every rule that is not suspended, they must continue identifying relevant complaints and agreements, and continue gathering the data needed to identify commission arrangements and disclosure practices, across portfolios running to millions of agreements going back to 2007. This affects every lender in the scheme's scope, and every firm watching this as the template for how the FCA runs industry-wide redress. The regulator's own framing is explicit, the partial suspension exists so firms keep preparing. The FCA has not stepped back. It has told firms to keep building the evidence base while the lawyers argue.

That is exactly where the AI governance implication lands. No firm reviews millions of historical agreements by hand. This work runs on automation, document extraction, complaint classification, data matching across decades of records. Every automated triage decision made during this suspension becomes part of the record examined when the scheme resumes. The firms that hold up in 2027 won't be the ones scrambling to reconstruct their reasoning after the fact. They'll be the ones who built the infrastructure now to capture, contemporaneously, what their systems decided and why, so the evidence is already there when someone asks for it.

Both developments expose the same gap. Two regulatory tracks, crypto authorisation and motor finance redress, converge on the same demand: prove a named individual oversaw what the automated system did. The crypto rulebook drops the most automated sector in finance into a personal accountability regime it has never operated under. The motor finance suspension pauses public scrutiny of the redress calculations, not the accountability of the individuals whose systems are classifying agreements right now, unseen, ahead of a tribunal that reopens in December. In both cases the technology is not the risk. The risk is that no named human can prove they oversaw what it did.

If you are a CCO, CRO, or named SMF holder, the work this week is not another policy document. It is mapping every automated decision system to a named accountable individual, and making sure evidence of their oversight exists before, during, and after each decision. Not a committee. A name.

Pick one automated decision your firm made this week: a complaint triaged, a transaction flagged, an agreement classified. Can you name the individual accountable for that decision, and can they show you the evidence that they exercised that accountability? Put it to your team on Monday. If the answer takes more than a day to produce, you have found the gap before the regulator does.

If this is a live problem in your organisation, reply to this email. BuildMoat works with UK financial services firms to build the human infrastructure that closes the gap between AI deployment and regulatory accountability.

BuildMoat — buildmoat.co.uk

If something landed, reply and tell me. If something was wrong, reply and tell me that too. I read every response.

Forward this to one person who should be reading it.

Find me on X and LinkedIn if you want to continue the conversation there.

For sponsorship enquiries, email [email protected]

Regulatory commentary is for informational purposes only and does not constitute legal, compliance, or financial advice. Consult a qualified professional for advice specific to your firm. BuildMoat product mentions are editorially assessed and disclosed where a conflict exists.