Financial Services SpeedRead: 6 November 2025 edition
17 November 2025
Welcome to the latest edition of the Financial Services SpeedRead, designed to help you keep on top of key regulatory developments in financial services over the preceding fortnight.
Please get in touch if you want to explore any of the topics covered in this fortnight's edition of Financial Services SpeedRead in more detail.
On 23 October 2025, the FCA published guidance for asset management and alternative firms on the UK’s transition from a T+2 to a T+1 securities settlement cycle.
As set out in our previous Financial Services SpeedRead (here), all transferable securities traded on a UK trading venue and settled through a UK central securities depository will be required to settle on a T+1 basis from 11 October 2027, unless exempted.
The FCA has now stated it expects that, by the end of 2025, firms should:
be familiar with the recommendations in the Accelerated Settlement Task Force Final Report and have a project plan to move to T+1 settlement;
carry out end-to-end reviews of their trading, clearing and settlement arrangements;
review inventory management arrangements to ensure cash and securities are ready and in the right place to support T+1 settlement;
contact their settlement agent(s) to discuss any required changes in order to settle transactions within a T+1 settlement cycle;
(if outsourcing operational services) work closely with providers to ensure compliance; and
(if regularly lending securities) prepare for timely recalls to support settlement.
By the end of 2026, all necessary changes should be implemented (such as standardising settlement instructions and trade date processes). In 2027, firms are then expected to test their updated settlement processes (both internally and with any external parties) to ensure they are ready to settle on a T+1 basis from 11 October 2027.
On 22 October 2025, ESMA published its final report on draft regulatory technical standards (RTS) for the establishment of an EU code of conduct for issuer-sponsored research via the Listing Act Directive.
The report sets out draft rules to ensure that research paid for by issuers is fair, clear and not misleading. The draft RTS further aims to:
manage conflicts of interests by requiring issuer-sponsored research providers to maintain a conflicts of interest policy;
enhance transparency by introducing an "issuer-sponsored research" label;
ensure sponsorship does not undermine the independence and objectivity of research results; and
prevent undue pressure on issuer-sponsored research providers by maintaining that the initial term of any contract agreed between an issuer and an issuer-sponsored research provider shall be subject to a minimum term of two years, and a minimum upfront payment of 50% of the annual remuneration (at the start of the contract and at each contract anniversary).
ESMA’s goal is to create a consistent approach across the EU, improving trust in issuer-sponsored research and encouraging its use by prospective investors.
The draft RTS have been submitted to the European Commission for adoption. The European Commission shall decide whether to adopt the draft RTS within three months.
On 28 October 2025, the Prudential Regulation Authority (PRA) published a near-final policy statement on retiring the “refined methodology” for Pillar 2A as part of its Basel 3.1 implementation and wider Pillar 2 streamlining.
Currently, the PRA allows the refined methodology to apply to certain firms that are considered relatively low risk and well managed. However, in consultation paper (CP) 9/24, the PRA proposed to retire the refined methodology.
This policy statement builds on the following chapters of CP9/24:
Chapter 2 – Retiring the refined methodology to Pillar 2A.
Chapter 4 – Interest rate risk in the banking book (IRRBB) and pension obligation risk Pillar 2A approaches – minor clarifications.
In relation to Chapter 2 of CP9/24, the PRA outlines its feedback on responses in the following areas: IRB-SA differential and impact on competition, costs and burden in maintaining the methodology, impact on firms’ capital requirements, implementation approach, and additional feedback.
The retirement of the refined methodology will take effect on 1 January 2027 (aligned with UK Basel 3.1 and the IRRBB), while the minor clarification changes take effect on 1 July 2026.
On 28 October 2025, the PRA published a near-final policy statement (PS19/25) outlining its approach to restating the Capital Requirements Regulation (CRR) provisions in the PRA Rulebook, with a focus on securitisation standards, other CRR requirements, and the mapping of external credit rating agency ratings to credit quality steps (ECAI mapping).
The policy statement follows a consultation paper where the PRA proposed to restate the remaining relevant provisions in the CRR in the PRA Rulebook and other policy material (CP13/24). Some of the proposals in CP13/24 were finalised in a later policy statement (PS12/15), with the remainder being covered by this PS19/25.
The PRA proposed to:
restate rules relating to the level of application of CRR requirements, as well as restate the CRR requirements on counterparty credit risk and settlement risk, with no substantive changes;
mostly preserve the current supervisory framework for securitisation, while introducing some targeted policy changes;
not restate CRR Article 93 relating to initial capital requirement on going concern, and to restate CRR Articles 109, and 119(5) and (6) with some minor modifications. The PRA also proposed to amend the near-final supervisory statement (SS3/24) on the credit risk definition of default; and
update rules regarding ECAI mapping by amending its final policy published in PS12/25 to reflect the implementation of the Basel 3.1 standards and the expected revocation of a related technical standard.
The PRA intends to publish the relevant final policies and rule instruments in the first quarter of 2026. Such policies and rules are intended to take effect from 1 January 2027 (noting that, certain proposals finalised in PS12/25 will take effect from 1 January 2026).
On 28 October 2025, the PRA published a near final policy statement on a simplified capital regime for Small Domestic Deposit Takers (SDDTs), due to be implemented on 1 January 2027 alongside Basel 3.1. This follows the FCA's consultation paper published in September 2024 on the proposals for the final phase of the simplified capital regime (CP7/24).
The PRA will be proceeding largely as previously consulted in CP7/24, whereby the key elements of the regime include: (i) Pillar 1 requirements based on Basel 3.1 standardised approaches to credit risk and operational risk; (ii) simplifications to the Pillar 2A methodologies for credit risk, credit concentration risk and operational risk; and (iii) a new single capital buffer framework to replace the current framework.
The PRA intends to publish the final policy statement in Q1 2026, alongside (or shortly after) its policy statement with final rules on its implementation of Basel 3.1. This alignment is in order that the Pillar 1 requirements for SDDTs are based on the final rules for the Basel 3.1 standardised approaches to credit risk and operational risk.
The majority of the final rules for the SDDT capital regime are intended to come into force on 1 January 2027. Due to the alignment of the final rules with Basel 3.1, the interim capital regime will no longer be required.
On 21 October 2025, ESMA published a final report containing draft regulatory technical standards (RTS) on open-ended loan originating AIFs under the revised AIFMD.
The draft RTS seek to harmonise regulatory requirements across the EU, with a focus on liquidity management, redemption policies, stress testing, and the consideration of loan portfolio characteristics. This follows ESMA's previous consultation paper published on 12 December 2024, which sought feedback on the proposed standards (see our previous SpeedRead entry on the CP here).
The RTS remove the requirement for AIFMs to set a fixed amount of liquid assets that an open-ended loan-originating AIF need to hold to meet redemption requests, instead obliging them to ensure sufficient liquidity is met, considering the specific characteristics of the fund and its portfolio. Liquidity stress testing is now required at least annually, rather than quarterly as initially proposed.
The draft RTS have been submitted to the European Commission for adoption, following which it has three months to determine whether the RTS will be adopted. The new rules are set to apply from 16 April 2026.
For further detail on the report, please see our Ashurst briefing here.
On 24 October 2025, the FCA published its whistleblowing data for the third quarter (Q3) of 2025, covering reports received and actions taken between July and September 2025.
The key findings include that:
the FCA received 405 new whistleblowing reports in Q3 2025, increased from 322 reports for the same period in 2024, and 315 reports in the previous quarter;
70% of whistleblowers chose to share their identity and contact details, while 30% remained anonymous;
the reports contained a total of 1,379 allegations, with the most frequently reported issues relating to fitness and propriety (209 reports); organisational culture (206 reports); compliance (196 reports); and Consumer Duty (125 reports); and
356 whistleblowing reports were closed during Q3 2025, of which 5% resulted in a significant action by the FCA to manage harm (such as enforcement measures or restrictions on firms or individuals); 40% led to actions by the FCA aimed at reducing harm (such as firm visits or requests for information); and 51% led to no direct action (but informed the FCA's work).
The FCA reiterated its commitment to maintaining transparency and safeguarding the interests of whistleblowers.
On 23 October 2025, the FCA fined Neil Sedgwick Dwane, a former advisor at ITM Power Plc (ITM), £100,281 for insider dealing, and banned him from working in UK financial services.
In 2022, while working as an advisor for ITM, Mr Dwane learned about a market announcement that would cause ITM’s share price to drop. The day before the announcement, he sold 125,000 shares belonging to himself and a family member, then bought 180,000 shares after the price fell, making a profit of £26,575.
Mr Dwane also failed to obtain permission from ITM to deal in its shares, which he was required to do under ITM's internal policies.
The FCA said that, as a result of his having deliberately and dishonestly engaged in insider dealing, Mr Dwane did not meet the standard of integrity required to satisfy his fitness and propriety requirements.
The FCA also stressed it will continue to use its full range of powers in respect of market abuse.
On 20 October 2025, the FCA published findings from its survey on financial crime controls at 303 corporate finance firms.
The FCA identified the following, suggesting many firms may not be complying with their obligations under the Money Laundering Regulations (MLRs):
The FCA also noted evidence of good practice, such as regular senior management reporting, use of customer risk assessment forms and detailed management information with respect to financial crime. The FCA is taking action by writing to firms identified as non-compliant, setting out the improvements required and expecting prompt remedial action.
On 30 October 2025, the EBA responded to the European Commission’s call for advice (dated 12 March 2024) to support the swift launch of the new Anti-Money Laundering Authority (AMLA).
The package proposes a proportionate, risk-based and harmonised framework spanning: (i) a common methodology for national supervisors to assess inherent and residual money laundering/terrorist financing risk of obliged entities; (ii) a methodology for the AMLA to select institutions for direct supervision; (iii) customer due diligence (CDD) information requirements (focused on the type and nature of information rather than prescriptive documents); and (iv) criteria for classifying breaches by severity and setting pecuniary sanctions, administrative measures and periodic penalty payments.
The EBA also set out preparatory options on intra group information exchange and base amounts for fines. Following consultation and data collection from 100 institutions, the EBA reduced data points for supervisory risk assessments by around 15%, meaning most firms will be required to report an average 100–150 data points, and aligned datasets so one submission can serve both national supervisors and AMLA. The proposals include flexibility to reflect national specificities, with safeguards for EU wide comparability, and transitional measures such as excluding certain harder to obtain data points from AMLA’s first selection round and permitting risk based updates of existing CDD records prioritising higher risk relationships. Once adopted by AMLA and endorsed by the Commission, these instruments are intended to provide a solid foundation for an effective EU AML/CFT system.
The EBA will transfer its AML mandate to the AMLA on 31 December 2025 and will continue to cooperate on financial crime from a prudential perspective.
On 30 October 2025, the FCA issued a warning to investors about the risks of investing in Contracts for Difference (CFDs).
It describes CFDs as complex financial products which "carry a considerable risk of substantial losses". The FCA is concerned that some firms are using high-pressure tactics to encourage investors to classify themselves as professional clients, which removes important retail client protections (including, for example, leverage limits and client loss protections). The FCA highlights that these protections prevent nearly 400,000 people a year from risking more than their original stake in CFDs, and provide £267m to £451m worth of protection.
The FCA also warned against finfluencers, who may not make it clear that they are promoting unregulated firms operating offshore. It also notes that some of these finfluencers promise unrealistic returns if consumers copy trades, invest in managed accounts, or pay for daily trading tips.
In the coming months, the FCA will launch a consultation around client categorisation to ensure appropriate rules are in place for both retail and professional clients.
On 20 October 2025, the FCA published a review of corporate finance firms' compliance with COBS 3 client categorisation rules, and COBS 4 certification requirements.
The FCA identified several areas requiring improvement:
Record-keeping: Many firms took a superficial approach to client categorisation, either by lacking proper documentation, failing to properly document the rationale for their client categorisation assessments, or inadequate record-keeping. Good practice involves recording the client categorisation in a defined document, setting these out against the applicable COBS criteria and evidencing how the client meets the criteria;
Corporate finance contacts: Firms often treated investors informally as "corporate finance contacts" without clear records or rationale, affecting regulatory protections. The FCA expects regular reviews and updates of contact lists, especially before issuing financial promotions.
Investor certification: Processes for certifying retail investors as high net worth or sophisticated were inconsistent, with outdated or incomplete statements and confusion over applicable rules (i.e. whether reliance was placed on the FCA financial promotion rule or under the Financial Promotion Order). Firms should specify which financial promotion rules apply and review certification processes annually.
Policies and procedures: Many firms had generic or outdated policies, or did not maintain a written policy at all, limiting effectiveness. The FCA expects firms to maintain policies tailored to the firms' business model, detailing regulatory permissions, business lines, clients and investors within the firm's risk appetite, and whether any investors are corporate finance contacts.
On 23 October 2025, the BoE and HM Treasury published an update on the development of a digital pound, a form of central bank digital currency (CBDC) intended to complement traditional payment methods. No final decision has been made on its introduction, with the 'design phase' of the project intended to run throughout 2026.
The BoE/HMT's recent work centered on three priorities:
advancing technical work on shared public infrastructure and hands-on experimentation to support private-sector innovation in money and payments;
investigating how a digital pound and other types of digital money can interoperate with existing forms of money and payment systems; and
gathering and integrating a range of stakeholder evidence to inform the design of any potential digital pound.
To further these aims, the Digital Pound Lab was launched in August to provide an experimental platform for industry to test use cases and explore potential business models for a digital pound. Phase 2 of the Lab is open for applications, and will enable participants to test innovative payments use cases.
The BoE/HMT have also published a series of design notes on its emerging policy and technical thinking, to facilitate industry engagement. These include the (i) interoperability models for UK based payments design note; (ii) the product strategy design note; (iii) the intermediary roles and scheme rulebook design note; (iv) the offline payments design note; and (v) the alias service design note. Feedback from stakeholders will inform HMT/BoE on next steps throughout 2026.
On 8 October 2025, the FCA published a lift on the ban on retail access to crypto exchange trade notes (cETNs). However, access is limited to cETNs that are listed on the FCA's Official List and admitted to trading on a UK Recognised Investment Exchange. In addition, firms who offer cETNs must ensure they have the correct regulatory permissions to do so and comply with the applicable rules. Prospectuses must be reviewed and approved before launch, and the FCA had already been reviewing retail cETN prospectuses ahead of the rule change. CETNs are classed as Restricted Mass Market Investments, so firms will need to comply with the applicable financial promotion rules regime. Firms must also meet Consumer Duty requirements.
Firms seeking authorisation or new permissions can request a pre application meeting with the FCA.
On 27 October 2025, the FCA published an press release welcoming draft Government legislation to bring environmental, social, and governance (ESG) ratings providers within its remit.
The draft Financial Services and Markets Act 2000 (Regulated Activities) (ESG Ratings) Order 2025 amends the Financial Services and Markets Act 2000 (Regulated Activities) Order 2001 (SI 2001/544) (the SI) to make the provision of an ESG rating a regulated activity where the rating is likely to influence a decision to make a specified investment. As such, ESG ratings providers will need FCA authorisation and supervision.
The SI sets out key exclusions, clarifies territorial and overseas application, and establishes savings and transitional arrangements ahead of the main commencement on 29 June 2028.
With the SI laid before parliament, the FCA will consult on rules before year end. These proposals will focus on transparency, governance, systems and controls, and conflicts of interest, and the FCA will publish guidance to help firms assess scope.
On 24 October 2025, ESMA published a press release calling on National Competent Authorities (NCAs) to maintain their focus on cyber risk and digital resilience as part of the Union Strategic Supervisory Priorities (USSPs) for 2026. ESMA emphasised the importance of close coordination with respect to the Digital Operational Resilience Act (DORA) oversight framework.
Separately, ESMA indicated that NCAs will now focus on consolidating successful supervisory work relating to ESG disclosures, particularly in high risk areas. ESMA also noted that additional supervisory priorities may be introduced in the future.
On 20 October 2025, the BoE, PRA and FCA published guidance on effective practices in cyber response and recovery for systemic firms and financial market infrastructures (FMIs). This publication aims to help firms strengthen their operational resilience in the face of increasingly severe and complex cyber threats, particularly as reliance on third-party suppliers grows.
Key recommendations include simulating destructive cyber-attack scenarios, setting and testing impact tolerances beyond just duration (such as value, volume and critical activities), and ensuring the rapid restoration of critical data and services.
Firms are advised to invest in immutable backup solutions, regularly test their ability to recover systems from scratch and prioritise the restoration of essential data and infrastructure. The guidance also stresses the importance of ensuring third-party providers have equivalent resilience capabilities, developing alternative solutions or manual workarounds, and maintaining robust crisis communication strategies. Sector-wide collaboration, such as participation in initiatives led by the Cross Market Operational Resilience Group (CMORG), is encouraged to support collective resilience.
Firms are expected to keep their operational resilience self-assessments up to date, participate in sector-wide exercises and adopt new guidance as it emerges. The UK regulators will continue to monitor firms’ progress and request regular updates.
On 24 October 2025, the Chancellor announced the launch of a new "Scale-up Unit" in Leeds, jointly led by the FCA and PRA. The initiative aims to provide tailored regulatory support to high potential financial services firms, including banks, insurers and fintechs, to help them expand, innovate and create jobs across the UK.
The Scale-up Unit will offer expert, bespoke regulatory guidance and provide financial services firms with a dedicated point of contact at the FCA and PRA, helping them to navigate a complex regulatory environment so that they can focus on investment and innovation. The service will initially focus on fast-growing deposit-takers and insurers, with plans to expand support to other financial services firms, such as fintechs, from early next year. The aim is to remove regulatory barriers to growth, streamline processes, and unlock investment needed to address the £2 billion fintech scale-up funding gap identified in previous reviews.
The Scale-up Unit will initially support dual-regulated firms, with expansion to FCA-only regulated firms in 2026.
On 21 October 2025, HM Treasury published a progress update on its Regulation Action Plan. The Regulation Action Plan had set out the Government's vision for how it will re-energise the regulatory system in order to both provide critical safeguards and support investment and innovation.
Among other things, the update confirms that HM Treasury will be consolidating the AML/CTF supervisory functions of 22 professional services supervisory bodies. These will become the responsibility of the FCA.
The update also highlights that, in early 2026, the FCA and PRA will be due to begin reporting progress against their new statutory deadlines for new firm authorisations, variation of permissions, and appointment of senior managers.
On 16 October 2025, the FCA responded to the Treasury Committee's request for an update on its progress following the Committee's "Sexism in the City" recommendations. Our summary of the initial inquiry can be found here.
The FCA emphasised that non financial misconduct is a regulatory issue linked to culture, decision making and risk management. It has extended its non financial misconduct rules to non banks effective from 1 September 2026. Serious, substantiated cases of non-financial misconduct in non-banks will fall within the scope of the conduct rules and should be mentioned in regulatory references. The FCA has not yet decided whether to issue additional guidance and will confirm before year end, informed by feedback to a consultation that closed in September.
On supervisory and enforcement activity, the FCA reports 76 open supervisory cases tagged to non financial misconduct across portfolios, and one live enforcement case with a Decision Notice published in March 2025 that has been referred to the Upper Tribunal. Following its 2024 culture and misconduct survey of wholesale firms, the FCA has engaged with outliers, seen firms enhance management information, training and handbooks, and is undertaking supervisory work across wholesale brokers to test detective and preventative controls. The FCA does not plan to run a similar survey in other sectors at this time.
On wider policy, the FCA will decide next year whether to review impacts of the removal of the bankers' bonus cap, coordinating with the PRA, Equality and Human Rights Commission (EHRC) and Government Equalities Office.
The information provided is not intended to be a comprehensive review of all developments in the law and practice, or to cover all aspects of those referred to.
Readers should take legal advice before applying it to specific issues or transactions.