FINMA Sanctions Update Underscores EMI Compliance Gap: Stablecoin Settlement Requires Real-Time Screening at the Rail Layer
On 28 August 2026, SECO updated its SESAM sanctions database to reflect changes enacted by the UN Security Council Committee, requiring financial intermediaries to immediately freeze affected assets and report sanctioned business relationships. The amendment followed similar updates in March and July, each requiring Swiss institutions to screen their client base and transaction flows against new designations, often within hours of publication. This cadence is routine for sanctions compliance. What has changed is the surface area that compliance infrastructure must cover.
For EMIs operating fiat-only payment corridors, this surface area has been manageable. Traditional rails. SEPA, SWIFT, domestic ACH equivalents, move at speeds that accommodate batch screening and manual review. But as institutional clients push EMIs to support stablecoin settlement, the compliance calculus shifts. Stablecoins settle in minutes or seconds, across time zones, with finality that does not pause for overnight list updates. The infrastructure that screens a SEPA transfer cannot screen a USDC payment on the same timeline without architectural changes.
FINMA's expectations leave little room for delay. According to recent regulatory guidance, banks must screen sanctions amendments against their client base within hours of publication, if an amendment is published at noon and enters into force at 6pm, the institution must complete screening within that window. For other financial intermediaries, new entries on sanctions lists are generally expected to be checked within 24 hours. These timelines assume a fiat-centric operating model. Add a stablecoin rail, and the screening window compresses to the settlement window itself.
The compliance burden is compounded by the jurisdictional complexity that stablecoins introduce. A Swiss EMI serving institutional clients across European payment corridors must screen against SECO lists, but also EU sanctions, OFAC designations where there is US nexus, and UN consolidated lists that inform them all. OFAC enforces civil penalties on a strict-liability basis, a violation can occur without knowledge or intent. By 2025, OFAC had issued 17 cryptocurrency-related enforcement actions totalling $48.7 million in penalties, and the agency announced a Digital Asset Sanctions Task Force comprising 35 specialists dedicated to crypto enforcement. The message is unambiguous: sanctions compliance for digital asset rails is no longer discretionary.
This enforcement posture arrives as institutional demand for stablecoin settlement intensifies. The structural shift is visible in how treasury teams are evaluating payment infrastructure. Stablecoins enable real-time liquidity management that traditional banking cannot match, treasury teams can move funds between entities and geographies on demand, eliminating capital lockup from multi-day settlements. For EMIs, this creates competitive pressure: institutional clients want settlement speed and regulatory certainty delivered together, not one at the expense of the other.
The European Banking Authority's June 2025 opinion clarified the regulatory stakes. CASPs providing EMT transfer services could operate under MiCA authorisation alone until 1 March 2026, but now require PSD2 authorisation, or partnership with a licensed PSP, to continue EMT transfers. This dual-licensing requirement reshaped the EMT infrastructure landscape, evident in France's emergence as a stablecoin hub with five authorised issuers holding both MiCA and payment services authorisations. The implication for EMIs is structural: stablecoin settlement is not a feature to bolt onto existing fiat infrastructure, but a distinct capability requiring parallel compliance architecture.
The revision of Switzerland's AMLA, adopted by Parliament in September 2025 with entry into force planned for the second half of 2026, codifies this convergence. The amended law explicitly enshrines organisational obligations to prevent sanctions violations, intensifying the integration of AML and sanctions compliance. For banks, this represents legislative consolidation of FINMA's existing expectations. For EMIs expanding into stablecoin rails, it represents a compliance framework that assumes real-time, multi-regime screening as baseline infrastructure.
The operational reality is that relying solely on third-party screening providers creates lag. Institutions must independently ensure their systems function on a real-time, up-to-date basis. When sanctions lists update, as the Taliban list did three times this year, and as OFAC's SDN list does with similar frequency, the screening infrastructure must propagate those changes across all rails simultaneously. A fiat payment paused for manual review is a customer service issue. A stablecoin payment executed against a stale sanctions list is an enforcement event.
EMIs at this juncture face a choice that is architectural before it is commercial. The institutional clients driving demand for stablecoin settlement are not asking for speed alone, they are asking for speed that does not create compliance exposure. The providers who capture this corridor business will be those who embed sanctions screening at the rail layer, not those who treat it as a post-execution overlay. The FINMA update is a reminder that sanctions compliance is not a one-time implementation but continuous infrastructure, and that infrastructure must now span rails that did not exist five years ago.
The competitive question for EMIs is not whether to add stablecoin settlement capability, but whether their compliance architecture can scale to meet the screening obligations that come with it. The answer determines whether they retain institutional corridor business or cede it to providers who have already solved the integration problem.
References
[1] FINMA, Aktualisierte Sanktionsmeldung: Taliban, 31 August 2026
[4] CMS Law, Financial market law obligations of Swiss banks in dealing with sanctions, June 2026
[5] Ashurst, When do crypto firms need additional EU licences for stablecoin transfers?, June 2025
