Enforcement: How hard does the regulator enforce?

Enforcement exposure this cycle centres on a procedural tightening rather than a new sanctions regime. EMTA must now consult the Financial Intelligence Unit during licensing decisions, and annual auditor reviews of licensed operators must cover more detail, both effective from 1 January 2026 under an enabling amendment that is durable in its core mandate, though the implementing detail of how deep those consultations and audits run is more likely to be elaborated through guidance of a more fragile character. Three risk drivers follow from this cycle's changes: reliance on funding rails outside the newly codified closed list of licensed EEA credit institutions, payment institutions, electronic money institutions and crypto-asset service providers; failure to complete the transition to the amended crypto-inclusive 'bet' definition and remote-gambling scope by the 1 January 2027 deadline; and the more direct route an adverse financial-intelligence signal now has into EMTA's licensing decisions. The statutory detail underpinning these findings rests on law-firm and trade-press secondary reporting rather than a directly retrieved gazette text, a limitation worth preserving in any external-facing risk assessment.