Safeguarding: build the evidence, not just the policy.
A practical operating file for relevant funds, reconciliations, third-party records and the reporting trail behind PS25/12.
The UK payments operating desk
Regulation,
made operational.
The rule, the next step, the evidence to keep. A practical playbook for UK payment and fintech teams.
The essential files
Start with the control that matters.
An API application should describe a business that can operate.
Organise the programme of operations, capital analysis, governance and control evidence into a coherent application file.
Test the service, not the disaster-recovery slide.
An operating file for important business services, impact tolerances, dependencies and severe-but-plausible scenarios.
A working method
From a rulebook to a repeatable process.
An editorial method for organising the work. Not a regulator-prescribed checklist.
01
Read the rule.
Identify the source, legal entity, activity and effective date.
02
Name the owner.
Turn an obligation into an accountable operating task.
03
Keep the evidence.
Retain records that another person can reproduce.
04
Test the result.
Separate implementation from evidence that it works.
On the operating desk
The next four questions.
04050607
Consumer Duty: put the customer outcome in the board pack.
Consumer Duty · From a product promise to a testable outcome: an operating sequence for payment firms, with evidence owners and escalation points.
Choose the payment rail. Then check the actual limit.
Payment rails · A comparison of Faster Payments, CHAPS and Bacs for an operations team that needs to know what happens before release.
Crypto regulation: keep today’s perimeter separate from tomorrow’s.
Regulatory change · A change-control file for current obligations, published future requirements and business decisions that depend on them.
A supervisory visit starts with a file someone else can follow.
Supervision · Organise the request, the evidence and the interview sequence without creating a second version of the business for the regulator.
Rule tracker / source snapshot
Not every date
means “in force”.
Publication, commencement and internal delivery are different events. Keep them separate.
Open the trackerCryptoasset perimeter guidance PS26/18
Published guidance. It is not the same event as commencement of the new regime.
New operational-incident reporting requirements
Future commencement stated by FCA. Current reporting obligations require separate consideration.
New cryptoasset regime commencement
Future start identified by FCA. Check source updates and the actual activity before acting.
Tools, not verdicts
Make the working
file easier to follow.
A reconciliation scenario, a register-check worksheet and exportable checklists. Your inputs stay in your browser.
Questions, answered.
What is Sterling Playbook?
An editorial project explaining UK payment regulation through practical operating scenarios, source notes and local-use tools.
Who is it written for?
Compliance officers, finance leaders and operations teams at payment and fintech firms. The material assumes that legal and regulatory scope will be assessed for the actual business.
Does a completed checklist prove compliance?
No. A checklist records work performed. It cannot establish the applicability, completeness or effectiveness of a firm’s arrangements.
Are the tracker and articles updated automatically?
No. This is a research edition dated 12 November 2026. Open the linked primary source before acting on a rule, deadline or status.