FSB Puts Stablecoin and AI Risks Before G20
The Financial Stability Board has delivered a pointed warning to the world's leading finance ministers: cross-border stablecoin safeguards are not fit for purpose, and artificial intelligence is creating new attack surfaces across critical financial infrastructure. For accounting firms, auditors, and CFOs with any exposure to digital assets, the FSB's pre-G20 letter is a signal that the regulatory environment will keep tightening, and that gaps in your crypto accounting software or reporting workflows could become a liability faster than expected.
What the FSB Actually Said
FSB Chair Andrew Bailey addressed the letter to G20 finance ministers and central bank governors ahead of their scheduled Thursday meeting. The FSB functions as the international body coordinating financial regulation across G20 member states, so its communications ahead of these ministerial gatherings carry real policy weight.
The stablecoin gap
Bailey's language on stablecoins was direct. Cross-border mechanisms for stablecoin oversight and crisis management, he wrote, "remain immature or are not yet developed." This is not a vague concern about future risks. It is an acknowledgement that the plumbing needed to manage a stablecoin stress event across multiple jurisdictions simply does not exist in a reliable form.
The FSB's own 2025 review of progress across surveyed jurisdictions found that only 11 of 28 had finalized stablecoin regulatory frameworks. That means more than half of the jurisdictions the FSB tracks are still operating without settled rules. For any institution that issues, holds, or settles in stablecoins across borders, that patchwork creates direct compliance risk: what is permissible in one jurisdiction may be unregulated or outright prohibited in another, and the absence of coordinated crisis management tools means there is no international backstop if a major stablecoin faces a run.
Reserve assets and contagion risk
The FSB's accompanying report went further on the mechanics of how a stablecoin failure could spread. A run on a large stablecoin would likely force the issuer to liquidate reserve assets quickly, pushing down prices in the underlying markets where those reserves are held, typically short-term government securities or money market instruments. Simultaneously, bank deposit withdrawals triggered by the run could tighten liquidity in the traditional banking system. These are not hypothetical transmission channels; they mirror the dynamics that regulators observed during earlier episodes of market stress in the digital asset space.
The report also called out a specific structural risk in multi-issuer stablecoin arrangements. Redemption pressure could concentrate on a single issuer even when reserves are spread across different jurisdictions, creating a mismatch between where the demand hits and where the assets sit. Resolving that mismatch in real time requires exactly the kind of cross-border coordination mechanisms that Bailey conceded are not yet in place. This concern aligns with points the European Central Bank President Christine Lagarde raised in 2025 regarding stablecoins issued both inside and outside the European Union.
AI: Governance Practices and Cyber Threats
The second major strand of Bailey's letter concerned artificial intelligence. The FSB finalized 12 practices for responsible AI adoption in the financial sector in June, and Bailey used the G20 letter to urge member jurisdictions to actively support their uptake. The practices span four areas: organization-wide AI governance, AI development and deployment standards, cybersecurity risk management, and oversight of third-party AI service providers.
The threat the FSB is most concerned about
Bailey's sharpest warning was on the offensive use of AI by bad actors. Sophisticated cyber threats enabled by AI, he wrote, could undermine the resilience of critical financial institutions and market infrastructure. This is a meaningful escalation in official language. European central bankers made a comparable point in July, warning that AI advances were amplifying cybersecurity threats across the financial system. When both the FSB and regional central banking authorities converge on the same concern within months of each other, it is reasonable to treat it as a near-term operational risk rather than a long-run structural worry.
Third-party concentration deserves attention
One aspect of the FSB's AI practices that is easy to overlook is the focus on third-party service risk. A significant share of AI capability in financial services is delivered through a small number of large technology providers. If those providers are themselves compromised, or if they change their terms, pricing, or model behaviour, institutions that have embedded those tools deeply into compliance or accounting workflows face disruption. The FSB's guidance explicitly asks institutions to manage this concentration risk at the governance level, not just the IT level.
Implications for Compliance and Accounting Operations
The FSB's letter is addressed to finance ministers, but its practical consequences fall on the institutions those ministers regulate. Accounting firms advising digital asset clients, in-house CFOs at firms holding stablecoins on the balance sheet, and auditors signing off on crypto-related disclosures all need to factor in what this signals about the direction of travel.
Stablecoin exposure reporting
With only 11 of 28 jurisdictions having finalized stablecoin frameworks, firms operating across multiple markets face a disclosure challenge: the accounting treatment for stablecoin holdings may differ materially depending on where the entity is domiciled and where the stablecoin is issued. Under IFRS, most stablecoins are currently treated as financial assets measured at fair value through profit or loss or as cash equivalents if they meet the strict criteria, but that classification is sensitive to the regulatory status of the instrument. A stablecoin that loses its regulatory standing in a key jurisdiction could require reclassification with P&L consequences. Your crypto bookkeeping software needs to be able to capture jurisdiction-specific metadata on each stablecoin position so that reclassification can be executed quickly if the regulatory picture shifts.
For a broader picture of what banks and financial institutions need to have in place right now, see our detailed look at what banks need to know about stablecoin AML compliance.
AI tools inside your own firm
If your firm uses AI-assisted tools for transaction monitoring, KYC screening, or financial reporting, the FSB's governance framework is a useful checklist. Do you have documented policies covering how AI models are selected, tested, and reviewed? Is there clear accountability at the senior management or board level for AI-related decisions? Are your contracts with third-party AI providers reviewed for concentration and resilience risk? The FSB's 12 practices are not yet mandatory in most jurisdictions, but they represent the direction regulators are moving. Building governance structures around them now is considerably less disruptive than retrofitting them after a regulatory inspection or an incident.
For a deeper look at how AI tools are already changing compliance workflows and what governance gaps firms commonly overlook, our article on how AI is reshaping crypto compliance programmes covers the operational detail.
Cross-border clients and jurisdictional mapping
For accounting firms advising clients in multiple G20 jurisdictions, the uneven state of stablecoin regulation creates a practical workflow problem. A client may hold the same stablecoin in two entities domiciled in different countries, one of which has a finalized framework and one of which does not. The accounting treatment, the AML obligations, and the disclosure requirements could all differ. Digital asset accounting software that cannot tag positions by issuer jurisdiction and local regulatory status will struggle to produce accurate, auditable records as more frameworks are finalized in the months ahead. Mapping your clients' stablecoin holdings to the current regulatory status of each relevant jurisdiction is not a future project; it is a current-quarter task given the pace of rulemaking the FSB's own data reveals.
The G20 Context
The G20 finance ministers' meeting that prompted this letter sits within a longer cycle of international regulatory coordination. The FSB reports to the G20 and uses these pre-meeting communications to set the agenda for what member jurisdictions are expected to prioritize. When the FSB flags stablecoin cross-border gaps and AI cyber risk in the same breath, it signals to national regulators that action in both areas will be on the scorecard when the FSB next assesses implementation progress.
For the EU specifically, MiCA is already in force for stablecoin issuers, so European firms have a head start on the framework side. But MiCA's cross-border provisions and the interaction between EU-regulated stablecoins and third-country issuers remain areas where the FSB's concerns about immature oversight mechanisms apply directly. The ECB's earlier comments on cross-border stablecoin risks suggest European supervisors are aligned with the FSB's position and are likely to translate that alignment into supervisory expectations for institutions under their watch.
Frequently Asked Questions
What is the FSB and why does its G20 letter matter?
The Financial Stability Board is an international body that monitors and makes recommendations about the global financial system. Its chair writes to G20 finance ministers before major meetings to set regulatory priorities. Because G20 members collectively represent the world's largest economies, FSB recommendations typically feed into national and regional legislation within one to three years.
What exactly did the FSB say was wrong with current stablecoin oversight?
The FSB found that cross-border mechanisms for stablecoin oversight and crisis management are either immature or not yet in place. Its 2025 review found only 11 of 28 surveyed jurisdictions had finalized frameworks. The accompanying report also identified the risk that a stablecoin run could force rapid reserve asset sales and trigger bank deposit withdrawals, spreading stress into traditional markets.
How does the multi-issuer stablecoin risk described by the FSB affect accounting?
In a multi-issuer arrangement, redemption demand could hit one issuer while reserves sit in a different jurisdiction. If that issuer cannot access those reserves quickly enough to meet redemptions, the stablecoin's peg could break. For firms holding such stablecoins at amortised cost or as a cash equivalent, a peg break triggers immediate fair value reassessment and likely a material write-down. Your digital asset accounting software should be able to flag multi-issuer exposure and support rapid reclassification with a full audit trail.
What are the FSB's 12 AI practices and are they legally binding?
The FSB finalized 12 practices for responsible AI adoption in June, covering governance, development and deployment, cybersecurity, and third-party risk. They are not legally binding in themselves. They function as international supervisory expectations that national regulators are encouraged to embed into their own rules and inspection frameworks. Firms that align with them early reduce the risk of being caught out when national regulators convert them into binding requirements.
What should an accounting firm do right now in response to this letter?
Three immediate actions are worth prioritizing. First, map every stablecoin position held by the firm or its clients to the regulatory status of the issuing jurisdiction, using the FSB's own data on which of the 28 surveyed jurisdictions have finalized frameworks. Second, review AI governance documentation to check it covers the four areas the FSB identifies: organization-wide governance, development and deployment, cybersecurity, and third-party risk. Third, confirm that your crypto accounting software can capture jurisdiction-level metadata on stablecoin holdings and support rapid reclassification if the regulatory status of an instrument changes.
Source: Cointelegraph