Overhauling UK Payment Regulations for Tokenised and Agentic Finance

The initiative, announced on 14 July 2026, solicits industry input on how existing regulations should adapt to tokenised payments, Open Banking architectures, and the emerging class of agentic payment systems. For the embedded finance and BaaS ecosystem, this is a structural signal: the UK is preparing to rewrite the compliance baseline that every API-driven payment provider and banking-as-a-service intermediary must meet.

Regulatory Arbitrage Is Ending

The consultation frames payment services regulation as a framework that "played a crucial role" in cementing the UK's position — but acknowledges explicitly that the pace of innovation has outstripped the rulebook. Tokenised payments, where value transfers occur on programmable ledgers rather than through traditional clearing rails, currently operate in a regulatory grey zone. Agentic payments — systems where software agents initiate transactions autonomously on behalf of users — present an even thornier compliance question: who holds liability when the payment initiator is not a human but a middleware layer?

For BaaS providers acting as sponsor banks or API gateway operators, the distinction between agent and principal in payment flows has direct capital adequacy and audit implications. The consultation's inclusion of these categories signals that HM Treasury is not waiting for a systemic failure before defining the perimeter.

Open Banking Maturation

Open Banking has been a UK regulatory priority since the original PSD2 transposition, but the framework's treatment of third-party providers has remained largely passive — a compliance checkbox rather than an active licensing architecture. This consultation suggests a shift toward defining Open Banking participants as regulated entities in their own right, not merely as extensions of account-servicing institutions. For neobanks and middleware platforms that rely on account aggregation or payment initiation services, this could mean direct regulatory obligations rather than the current delegated-authorisation model.

The ledger reconciliation and data-sharing requirements embedded in such a shift would hit firms that have optimised for speed over compliance infrastructure. A parallel trend is visible in Japan's evolving stance on digital asset classification, where regulators are similarly tightening crypto and tokenised product rules to close arbitrage windows.

What to Track

The consultation is public — meaning industry responses will shape the final regulatory architecture. Firms operating embedded payment stacks in the UK should monitor two variables: the scope of "agentic payment" definitions (narrow versus broad) and whether tokenised payment instruments are classified as e-money, securities, or a new category entirely. Each classification triggers different capital, licensing, and audit frameworks.

No draft legislation has been published. The consultation itself is the mechanism — a structural review, not a rule change. But the regulatory direction is clear: the UK intends to close the gap between what payment systems actually do and what the rulebook currently assumes they do. Firms running lean compliance functions on legacy exemptions have a closing window to audit their exposure before the framework hardens.