I’m including today’s payment brief as a blog post. I push these briefs out daily, and they are separate from the blog. To register, go to the blog and select newsletter, or directly by visiting http://pmtclaw.com . There is no cost for the newsletter. It is built with openclaw, and scours the internet for updates in 6 primary topic areas: payments, banking, regulatory/legislative, identity/auth, retail and advertising.
TODAY’S TOP STORIES
1. ILLINOIS BECOMES THE THIRD STATE TO IMPOSE REAL CONSUMER PROTECTIONS ON BNPL LENDERS
Illinois Governor J.B. Pritzker signed SB3561 on June 25, making the Buy Now Pay Later Loan Regulation Act law. Effective immediately, BNPL lenders must be licensed in Illinois, cap rates at the existing 36% ceiling that applies to other consumer lenders, conduct ability-to-repay underwriting before originating, and disclose all costs upfront. The law also prohibits automatic payment mandates and bars lenders from re-debiting a failed bank account more than once — a practice that triggered cascading overdraft fees for subprime borrowers. BNPL’s user base skews heavily toward people with subprime credit scores and is disproportionately Black, Hispanic, female, and young.
So what? California required licensing, New York passed the first comprehensive framework — Illinois is the third domino in a growing state-level BNPL regulatory ring that is filling the vacuum left by the CFPB’s rollback. Illinois is the third-largest US state by population. Watch for a domino effect in other large states — NCLC has already published a template other legislatures can follow.
→ Source: NCLC
2. EBA PUTS NUMBERS BEHIND MICA ENFORCEMENT: STABLECOIN ISSUERS FACE QUANTIFIED FINES
The European Banking Authority published a Consultation Paper on June 26 laying out its draft methodology for calculating supervisory fines under MiCA. As the direct supervisor of significant crypto-asset issuers — including issuers of e-money tokens (EMTs) and asset-referenced tokens (ARTs) — the EBA is moving from broad statutory powers to an explicit, formula-based approach for fine calculation. The methodology aims for consistency and proportionality across the EU; responses will inform the final binding framework that governs how large fines get set for issuers like Circle (EURC).
So what? Publishing a fine-setting methodology is an enforcement signal, not a policy paper. Until now, MiCA’s penalty powers were on paper only — issuers of significant stablecoins could estimate their exposure was “material but unknown.” The EBA is now making that downside calculable, which changes how compliance teams at Circle, Tether (if it pursues EU licensing), and banks issuing EMTs assess regulatory risk. This is the operational turn that separates MiCA’s “compliance encouraged” phase from “compliance enforced” — especially as Binance’s July 1 EU exit shows the EBA is prepared to let non-compliant players exit rather than grant grace periods.
→ Source: EBA
3. WARSH’S FED IS LEANING ON INTERNAL VETERANS — INCREMENTAL REFORM, NOT DISRUPTION
Fed Chair Kevin Warsh named two senior internal economists — Daniel Covitz (deputy director, research & statistics) and Eric Engstrom (associate director, monetary affairs) — as key advisors, and announced five task forces covering communication, data, inflation, technology, and the Fed’s balance sheet. Both appointees retain their existing division roles while serving on rotation. These are Warsh’s first internal appointments; prior picks included Paul Winfree and a Project 2025 author.
So what? Warsh drawing on Fed career staff rather than outside hawks suggests the rate and balance-sheet regime is more likely to evolve gradually than break sharply — a relatively stabilizing signal for the rate-sensitive fintechs, lenders, and BNPL players whose cost-of-funds and consumer credit performance are directly tied to Fed policy. The technology task force is the one to watch for payments implications: it could affect how the Fed engages with FedNow, stablecoin oversight, or CBDC positioning.
→ Source: CNBC
4. CFTC IS INVESTIGATING POLYMARKET — PREDICTION MARKETS’ FASTEST GROWTH STORY HITS REGULATORY WALL
The CFTC has an ongoing, extensive investigation into Polymarket, confirmed by CNBC and first reported by the Wall Street Journal. The inquiry follows a WSJ investigation revealing that Polymarket ran a misleading marketing campaign where social media content creators appeared to be winning real money on the platform when they had wagered nothing. Polymarket hit $1B in annualized revenue just six weeks after re-entering the US market, and had begun rolling out identity verification. Both CFTC and Polymarket declined to comment on the investigation. Also covered by: Wall Street Journal
So what? The CFTC originally banned Polymarket in 2022 for operating without proper registration, then allowed its re-entry — the platform went from regulatory darling to investigation target within a year. The core issue is that Polymarket’s real-money settlement model requires CFTC compliance, and misleading marketing about real gains is a federal enforcement trigger regardless of the current administration’s crypto-friendly posture. For payments, prediction markets represent a growing real-money transaction category: if CFTC enforcement slows growth or triggers withdrawal restrictions, it removes a meaningful emerging payments use case. The broader lesson: even under a permissive regulatory regime, fraudulent marketing is not protected.
→ Source: CNBC
5. OCC AND FDIC ADVANCE GENIUS ACT IMPLEMENTATION: BANK-GRADE AML NOW REQUIRED FOR STABLECOIN ISSUERS
The OCC (June 22 NPR) and FDIC (June 5 NPR) have proposed Bank Secrecy Act and sanctions compliance standards for Permitted Payment Stablecoin Issuers (PPSIs) — the licensed category created by the GENIUS Act. The proposals build on coordinated NPRs already issued by FinCEN and OFAC (April 8) and a joint Customer Identification Program NPR (June 18). The combined framework requires PPSIs to implement AML/CFT programs and OFAC sanctions screening aligned with bank-level requirements, structured as principles-based (not prescriptive) compliance standards to allow implementation flexibility.
So what? Four federal regulators issuing coordinated NPRs in a compressed timeline is not normal regulatory velocity — it signals the GENIUS Act is being implemented at pace. The practical implication: any stablecoin issuer seeking PPSI status now needs KYC, AML, transaction monitoring, and sanctions screening infrastructure that banks have spent decades building. That’s a significant compliance cost for new entrants and a revenue opportunity for RegTech vendors. It also reinforces that “bank-grade” stablecoin is not a marketing phrase — it’s a compliance mandate. Issuers who built lean operations for crypto-native markets will need to invest or partner before PPSI licensing becomes viable.
→ Source: Sullivan & Cromwell
6. JUMIO + TRINSIC GIVE BANKS A SINGLE-VENDOR PATH TO DIGITAL ID VERIFICATION IN 60+ COUNTRIES
Jumio has integrated Trinsic’s digital ID gateway, enabling customers to accept government-issued digital IDs in 60+ countries for user onboarding — adding biometric authentication, liveness detection, and Jumio’s Identity Graph to digital credential checks. Juniper Research projects global digital identity verification checks to reach 175 billion by 2030. → Source: Biometric Update
IDENTITY AND AUTHENTICATION 🔐
- AI Agent Identity (x401 Protocol) — Proof’s x401 enables AI agents to present cryptographic proof of the human authorizing them, using Verifiable Credentials with selective disclosure; designed for agentic commerce payments where “who is the AI acting for?” is a live fraud and liability question → Crypto Briefing
- Agentic Commerce Authentication — AI shopping agents now completing purchases autonomously (browsing, comparing, checking out) but no major payment network or merchant has standardized who is liable when an AI agent pays for the wrong item or overspends → News9live
- Web3 Identity & AI Agents — Decentralized identity (DIDs, verifiable credentials, on-chain attestations) intersecting with AI agent authorization; relevant for payment flows where a human’s wallet identity needs to persist across agent-mediated transactions → Blockchain Council
- Moldova EVO 2.0 / Mastercard (eIDAS) — National digital ID wallet deployment with Mastercard partnership; covered in full in story #6 above.
- Stablecoin Issuer KYC (GENIUS Act) — OCC/FDIC BSA compliance NPRs for PPSIs require CIP/KYC programs matching bank standards — identity verification is now a statutory requirement for stablecoin issuers, not an optional compliance layer → Sullivan & Cromwell
REGULATORY & LEGISLATIVE 🏛️
- MiCA (EBA Fine Methodology) — EBA published June 26 consultation on draft fine-setting methodology for significant crypto-asset issuers (EMTs, ARTs); moving from statutory powers to formulaic enforcement — consultation period open → EBA
- Binance EU Exit (MiCA non-compliance) — Binance halting all EU services July 1, 2026 after missing MiCA licensing deadline; EU users must withdraw or migrate assets; signals MiCA enforcement has teeth — non-compliant exchanges face market exit, not grace periods → Coindoo
- Coinbase vs US Banks (Debanking) — Coinbase CEO Brian Armstrong publicly criticizing US banks for blocking crypto firms’ access to banking services despite pro-crypto White House; OCC guidance has not resolved bank risk appetite — debanking of crypto firms remains an active regulatory conflict → Crypto Briefing
RETAILER WATCH 🛒
- Amazon (Prime Day 2026) — Opening of Prime Day is softer than prior years; consumers front-loading essentials and gift cards rather than big-ticket items — basket composition and checkout behavior shift has implications for Amazon Pay, BNPL at POS, and average order value metrics → Modern Retail
- Amazon (ChatGPT Advertising) — Amazon becomes the first major retailer to buy paid placements inside ChatGPT for a shopping event; if AI chat converts to checkout, it creates a new advertising-to-payment funnel entirely outside Amazon’s own search and discovery stack → Modern Retail
- Affiliate Marketing (AI + Substack disruption) — AI-generated content and Substack newsletters are displacing traditional affiliate links for driving retail traffic; commission economics are shifting as AI platforms (not publishers) sit between the consumer and the checkout → Modern Retail
- Stitch Fix — Vision platform’s new “see it on me” AI virtual try-on aims to reduce returns and improve conversion; lower return rates directly improve per-order payment economics and reduce dispute rates → Digital Commerce 360
- Home Depot Retail Media — Home Depot’s Orange Apron Media network is opening to non-endemic (non-home improvement) advertisers via Reddit and Pinterest integrations; retail media maturing beyond category targeting, with loyalty and payment data as the targeting asset → Digital Commerce 360
CAPABILITY WATCH 🔧
- Visa (Agentic Commerce / AI Fintechs) — Visa partnering with AI fintechs Alchemy and Nuvion to build out value-added services for agentic commerce; no transaction volume data yet but signals Visa is investing in the AI agent payments layer → American Banker
- Backbase acquires Kasisto — Backbase integrates Kasisto’s banking AI into its AI-native Banking OS, expanding agentic banking capability for financial institution clients; acquisition rather than build, suggesting speed-to-market priority → Backbase
- AI Fraud Detection — Tech firms beginning to apply AI to detect AI-generated fraud at the checkout and transaction layer; early-stage industry conversation, not yet deployment proof → Digital Transactions
- Stablecoin Market Sizing (Morningstar) — Morningstar analyst commentary on stratospheric stablecoin market growth; useful for sizing the opportunity but no deployment signal → Morningstar
- AI at Checkout (Newsweek) — General media coverage of AI shopping agent friction at the checkout step — authentication, authorization, and dispute resolution all unresolved; confirms the problem is real but no named merchant solutions cited → Newsweek
START-UP NEWS 🚀
- Airwallex raises $320M Series H at $11B valuation — 74% annualized revenue growth to $1.3B; clients include McLaren, Qantas, Canva, Shein; launching T:0 (AI-native corporate finance automation) and Airi (agentic consumer wallet with delegated agent payments and spending controls); 85+ regulatory licenses across four regions → CNBC
- Attention raises $30M Series B — AI-powered revenue intelligence platform with CRM and deal-flow automation; payments relevance via B2B enterprise workflow implications → VC News Daily
- Limitless Labs raises $20M Series A — Fintech/AI startup with early-stage institutional validation; limited detail available → VC News Daily
- Noah — Stablecoin payment startup targeting everyday consumer payments, bridging crypto rails and traditional merchant acceptance → Connecting the Dots in Payments
NEWS FROM ANALYSTS AND PEOPLE I FOLLOW 📬
- PayPal CEO AI Reset — PayPal CEO Lores unveiled a major AI restructuring and $1.5B cost savings plan at the Bernstein conference, reorganizing into three core business units → Author: Glenbrook Partners / PaymentsNews |
- Illinois BNPL Law — 36% rate cap and underwriting mandate signed into law by Governor Pritzker — confirmed by curated digest as a significant consumer protection development → Author: Glenbrook Partners / PaymentsNews |
- Google Play Billing (June 30) — Google opening Play Store to external billing in US, UK, and Europe from June 30; developer fees drop to 10% for alternative billing — major structural change for app-based payment flows → Author: Glenbrook Partners / PaymentsNews |
- Modulr cVRP (UK) — Modulr launches commercial Variable Recurring Payments in the UK, offering a flexible alternative to direct debits for high-volume billers — Open Banking rails getting commercial traction → Author: Glenbrook Partners / PaymentsNews |
- Backbase / Kasisto Acquisition — Agentic AI for banking now integrated into Backbase’s Banking OS; confirmed as significant M&A signal for AI adoption in financial services → Author: Glenbrook Partners / PaymentsNews |
- Stablecoin Wallet Primer — Custodial vs self-custodial vs embedded stablecoin wallets; 77% of users would adopt if offered by their bank; $300B market — useful framework for thinking about where stablecoin payments will actually live → Author: Jas Shah / Fintech: Under the Hood
- Latin America Real-Time Payments — 93 billion transactions in 2025, 25% growth; Brazil at 373 transactions per capita; Colombia, Bolivia, and Peru surging — LATAM is now the world’s leading real-time payments market by volume metrics → Author: Jeremy Light / Agenda: Payments
- Prediction Markets + Meta’s “Arena” — Meta building a prediction market app (“Arena”); Polymarket rolling out identity verification under CFTC scrutiny; Dave Birch’s historical framing (Robert Walpole, political prediction markets) provides useful regulatory context → Author: Dave Birch / dgwbirch.substack.com
STORIES THAT DIDN’T MAKE THE CUT ✂️
- Polymarket annualized revenue surpasses $1 billion six weeks after its U.S. exchange launch — Context for the CFTC investigation: the platform is large enough to matter regulatorily. → CNBC
- SpaceX will join Nasdaq-100 — SpaceX joining Nasdaq-100 via tender-offer mechanism signals growing institutional appetite for private-company structured equity, with payments implications for employee stock monetization platforms. → CNBC
- OpenAI unveils GPT-5.6 amid US AI regulatory drama — OpenAI releases GPT-5.6 while AI regulatory landscape shifts under Trump — relevant backdrop for AI-powered payments fraud, underwriting, and agentic commerce use cases. → The Verge
- Amazon buys ads in ChatGPT to promote Prime Day — Amazon tests ChatGPT as a Prime Day ad channel — first major retailer to use AI chat for a shopping event push, blurring the line between search, discovery, and checkout. → Modern Retail
- The next challenges behind real-time payments adoption — American Banker on RTP/FedNow adoption friction: interoperability, fraud, and merchant incentives remain barriers; useful context for understanding why US real-time payments growth lags Brazil and the EU. → American Banker
- Oobit Integrates Pix: How the Tether-Backed App is Bringing USDT to 170M+ Brazilian Users — Tether-backed Oobit integrating with Pix to offer USDT access to Brazilian users — another stablecoin-meets-real-time-payments play in Latin America’s largest market. → Finsiders Brasil
- N26 Reaches a Major Milestone — N26 hits an undisclosed milestone — European neobank continuing to scale; limited detail available from source. → PYMNTS
- Digital euro cleared by EU committee in payments power shift — EU committee clears digital euro framework — CBDC regulatory pathway advancing; implementation timeline and merchant acceptance mechanics still to be determined. → Decrypt
- Chainlink’s 47-Bank Pilot And MiCA Pressure Redraw Crypto’s Institutional Map — Chainlink running a 47-bank pilot for tokenized asset settlement while MiCA reshapes EU crypto — if the pilot converts to production, it’s a real institutional DeFi bridge signal. → Blockchain Reporter
- Quantifind Secures $200M Growth Investment to Scale AI-Powered Financial Crime Solutions — Quantifind raises $200M growth round for AI-powered financial crime detection — signals continued VC conviction in RegTech/AML infrastructure as compliance costs rise. → PYMNTS
ON THE HORIZON 📅
- June 30: Google opens Play Store to external billing in US, UK, and Europe — developer fees drop to 10% for alternative billing integrations.
- July 1: Binance halts all EU services — MiCA licensing deadline enforcement takes effect; expect user migration to compliant platforms.
- Ongoing: GENIUS Act implementation NPR comment periods (OCC, FDIC, FinCEN, OFAC) — responses due; stablecoin compliance framework taking final shape.
Curated by AI · Payments Intelligence · https://pmtclaw.com