MFSA Issues Supervisory Priorities for 2026

The Malta Financial Services Authority (MFSA) has published its supervisory priorities for 2026, outlining plans to “step up” oversight of how financial services firm integrate AI into their operations. The document reflects the MFSA’s continued commitment to strengthening market integrity, improving consumer outcomes, and ensuring Malta remains closely aligned with EU regulatory developments.  

The seven supervisory pillars are: Resilience of Supervised Entities, Sustainable Finance, Digital Finance, Governance Risk & Compliance, Financial Crime Compliance, Consumer Protection & Education, and Cross-Border Supervision. 

Digital finance and a proportionate approach to AI oversight 

Digital finance remains an important area of supervisory activity. The MFSA will continue overseeing the transition of Virtual Asset Service Providers (VASPs) to Crypto-Asset Service Providers (CASPs) under the Markets in Crypto-Assets Regulation (MiCA), monitor readiness for PSD3, and assess ICT and cyber-resilience frameworks in line with the Digital Operational Resilience Act (DORA).  

The MFSA will step up its monitoring of AI adoption across the sector, focusing on governance, internal controls, and potential consumer impact, particularly in areas such as creditworthiness assessments, monitoring tools, and operational efficiencies. 

The direction of travel is clear: with the EU AI Act reshaping the regulatory landscape, the MFSA expects firms to treat AI risk management, algorithm transparency, and data governance as board-level responsibilities.  

Financial crime compliance as a central priority 

In 2026, the MFSA will place significant emphasis on financial crime compliance, reflecting Malta's continued drive to reinforce high standards across Anti-Money Laundering (AML), sanctions compliance, and proliferation financing controls. Supervisory work will align with the new EU AML legislative package, while strengthening cooperation with national and EU bodies. 

The MFSA will deepen its review of Money Laundering Reporting Officer (MLRO) effectiveness, governance arrangements, risk assessments, customer screening processes, and transaction monitoring systems across all sectors, including financial institutions and CASPs.  

Consumer protection and market confidence 

Consumer protection remains a major supervisory priority. In 2026, the MFSA will continue its work on value-for-money assessments, transparent disclosures, the fair treatment of vulnerable consumers, and improvements to the quality and clarity of credit and insurance information. 

The Authority will also oversee the implementation of Malta’s pension auto-enrolment framework and expand its national financial education initiatives. 

Cross-border supervision and EU alignment 

Cross-border supervision continues to be integral to the MFSA’s regulatory strategy. In 2026, the Authority will maintain strong engagement with European counterparts, participating in supervisory actions and peer reviews, and enhancing oversight of firms operating across multiple jurisdictions. 

Kenneth Farrugia, Chief Executive Officer, said: “Our 2026 priorities reflect the MFSA's commitment to proportionate, risk-based supervision. Strengthening financial crime compliance and consumer protection remains central to our work, while we continue to support innovation and ensure that Malta’s financial sector evolves responsibly and sustainably.”  

The MFSA encourages all supervised entities to review the 2026 priorities at board level and assess their preparedness for the year ahead. For boards and senior leadership, the broader signal is unmistakable: regulatory strategy is no longer a compliance function but rather is a core element of corporate strategy and operational resilience.