PRA Publishes Dear CEO Letter Reaffirming Its Position and Clarifying Expectations on Innovations in the Use of Deposits, E-Money and Stablecoins

Why It Matters

The clarification tightens the regulatory perimeter for fintech‑driven money products, forcing banks to embed stronger governance and risk frameworks or face supervisory action. It signals that the UK will not tolerate regulatory arbitrage in the fast‑moving stablecoin and tokenised‑deposit space.

Key Takeaways

• Deposit‑takers must offer digital money innovations only as deposits to retail customers
• Firms lacking a deposit‑taking licence must move UK users to a licensed entity quickly
• Innovations must meet FSCS protection rules and AML/CTF obligations
• Risk controls must address liquidity, operational and third‑party provider risks
• Senior managers must sign off risk assessments for any digital‑money product

Pulse Analysis

The Prudential Regulation Authority’s May 2026 Dear CEO letter reflects a regulatory pivot as the UK’s payments landscape becomes increasingly digitised. By superseding its 2023 guidance, the PRA acknowledges that tokenised deposits, e‑money and regulated stablecoins are no longer niche experiments but mainstream offerings that demand clear supervisory oversight. The letter underscores that any innovation aimed at retail customers must be structured as a traditional deposit, preserving the safety net provided by the Financial Services Compensation Scheme (FSCS) and ensuring that customers retain the same level of protection regardless of the underlying technology.

Beyond depositor protection, the PRA places a heavy emphasis on anti‑money‑laundering and terrorist‑financing safeguards. Firms venturing into digital‑money products are required to integrate the PRA’s General Organisational Requirements, conduct rigorous ML/TF risk assessments, and comply with the 2017 Money Laundering Regulations and FCA SYSC rules. Operational resilience is another focal point: new payment rails, third‑party wallet providers and deposit aggregators introduce novel operational and outsourcing risks. The regulator expects banks to recalibrate liquidity models, strengthen third‑party risk frameworks, and embed robust monitoring mechanisms to mitigate these emerging threats.

For senior leadership, the letter is a clear call to embed digital‑money risk considerations at the board level. Senior managers must understand the safety‑and‑soundness implications of tokenised products and personally endorse risk‑assessment frameworks before launch. This heightened accountability, combined with proportionate but firm supervisory expectations, signals that the UK will continue to foster innovation while safeguarding financial stability. Banks that adapt quickly will gain a competitive edge, whereas those that overlook these requirements risk regulatory penalties and reputational damage.