Regulators in India and South Africa sanctioned banks in the same week

India: a fine for money moving to the wrong people

The Reserve Bank of India imposed a monetary penalty of 9 lakh rupees on One Mobikwik Systems Limited for non-compliance with the central bank's directions on prepaid payment instruments and fraud reporting. The penalty followed a statutory inspection covering the company's operations from June 2025 to March 2026. The inspection found that the company allowed fund transfers by prepaid payment instrument holders to non-pre-registered beneficiaries beyond prescribed limits, and failed to report certain frauds within the prescribed timeline. m:…4982

The amount is small; the finding is not. Prepaid instruments are supposed to move money only to beneficiaries the holder has registered in advance, and fraud is supposed to be reported on a fixed clock. Both controls failed at once, which is why the central bank acted. For a payments firm, the registered-beneficiary rule is the core of the product's safety design, and the penalty says the regulator found it was not being enforced. m:…4982

South Africa: two banks, one law

South Africa's Prudential Authority imposed administrative sanctions on the Standard Bank of South Africa Limited for non-compliance with the Financial Intelligence Centre Act. The same authority imposed administrative sanctions on HBZ Bank Limited, also for non-compliance with the Financial Intelligence Centre Act. The two actions were announced together, and they target the same obligation: the anti-money-laundering and counter-terrorist-financing duties that banks carry under the Act. m:…9371 m:…9370

The details differ in one respect: for HBZ Bank, the specific nature of the non-compliance and the details of the sanctions were not disclosed in the initial announcement. That is normal for these actions — the sanction is the public record, and the detail follows in the regulator's own time. The pairing matters more than the detail. Two banks sanctioned under the same law in the same week is a signal to the rest of the sector that the Prudential Authority is working through its supervisory findings, not making an example of one institution. m:…9370

The other regulators chose guidance

The same week looked very different in the United States and Europe, where regulators chose to extend and simplify rather than punish. The Federal Reserve, the FDIC, the OCC and the NCUA extended the comment period for proposed third-party risk management guidance until December 16, 2026; comments were originally due November 16. The proposed guidance is principles-based and non-binding, and is intended to help banks and credit unions tailor risk management practices to individual third-party relationships. The agencies plan to rescind existing third-party risk management guidance and replace it with the finalised guidance, and the Federal Reserve also extended the comment period for a separate guide for traditional community banks. m:…0161

In Europe, the European Banking Authority has finalised proposals to simplify supervisory reporting, and has issued a statement regarding the 2027 EU-wide stress test, according to BBVA Research's weekly regulatory update. The European Commission is consulting on a limited assurance standard, the Single Resolution Board has issued a bi-annual reporting note to the Eurogroup, and the Prudential Regulation Authority has issued a policy statement on amendments to the large exposure framework. The direction of travel is the same in both regions: less reporting friction, and more reliance on banks' own judgement. m:…6300

The contrast is the story. In India and South Africa, regulators used their enforcement powers against specific failures in payments controls and anti-money-laundering compliance. In the US and Europe, regulators used the same week to give banks more time to comment and less reporting to do. Both approaches are supervision; they are just aimed at different problems. The first says the rules were broken. The second says the rules were too complicated. A bank operating across all four jurisdictions has to answer to both at once. m:…4982 m:…9371 m:…0161 m:…6300