The Guarantee Behind Your Money

This week three institutions were shaken. Part of the guarantee rested on an official record, part only on the institution's own word.

Evidence maturity: UNDER WATCH

Three questions guide this article. What actually happened beneath the headlines? Why did a similar question arise in several places in the same week? Who bears the cost?

IParaguay: a threshold set by rule

Start with the depositor. Paraguay's central bank (BCP) opened a resolution procedure for Ueno Bank. The board took the decision unanimously on 2 November. The trigger was capital adequacy falling below half of the required minimum.

This is an official record, and the event is confirmed. The record states the date of the decision, the unanimous vote and the threshold. It does not state how many depositors are affected. How the procedure will end is not yet known either.

For the depositor, the record settles one thing. The procedure has started. It does not yet say how long it will take or how many people it will reach.

Resolution does not mean the bank has closed. It means the central bank has started a procedure defined in law. The central bank set out the scope of deposit protection in its own announcement. We quote that text word for word in the Reflection section.

An analogy may help. A fire alarm in a building does not sound until smoke reaches a set density. Once the threshold is crossed, the alarm sounds by rule and the response begins. Nobody decides separately whether it should sound.

For the banking professional, the question is different. How often do risk and capital teams report how far they are from this threshold? The threshold itself is known. How regularly the distance is tracked varies from institution to institution.

IIFrance and Binance: what does the word rest on?

In the same week two institutions made statements after cyber incidents. This time the danger came from outside.

The French bank Crédit Mutuel Arkéa said on 4 November that customer assets were not affected. According to the bank, the incident only delayed some transfers. The source of this information is the bank's own statement. The statement gives neither the length of the delay nor the number of customers affected.

The crypto exchange Binance published initial findings on 3 November about a security incident on 29 October. According to Binance, about 6.34 billion dollars in digital assets were affected. About 2.85 billion dollars of that was frozen or intercepted. Binance says it, not its users, will absorb the loss.

Both statements come from the institutions' own websites. It is certain that the institutions said this. No independent source has yet confirmed that what they said is accurate.

The two promises do not carry the same weight. In banking, a legal deposit-protection framework stands behind deposits. At a crypto exchange, the guarantee is the exchange's own resources and its promise. No protection mechanism was triggered at Arkéa this week. We are referring only to the existence of the framework. This comparison is a CalibrateAtlas interpretation.

The professional's question arises in two places. At the bank, the operational resilience team asks: which service commitment did the transfer delay touch? On the crypto side, the team measuring counterparty risk asks something else: how much weight should a risk model give to an exchange's promise to cover the loss itself?

IIIUnited States: cutting an institution off the system

The third shock came from a regulator. FinCEN, part of the US Treasury, issued an order on 6 November concerning the crypto exchange MEXC Global. The order bars US financial institutions from transferring funds with the exchange.

The basis is FinCEN's finding. According to FinCEN, the exchange facilitated at least 16 billion dollars in illicit transactions. These transactions are connected to the evasion of Iranian, North Korean and Russian sanctions.

The order is an official record and is confirmed. But it is an administrative order, not a court ruling. The 16 billion dollars is likewise FinCEN's finding, not a court's judgment.

The effect on individual users in the US is not yet measured. The official text is directed at institutions. The question for correspondent banking and payments teams is clear: how quickly can they apply such an order in counterparty screening?

IVIs the protected perimeter shrinking?

Put the three shocks side by side and a question follows. Are the places where money can be held safely becoming fewer? The week's other records show a different picture.

New Zealand's central bank, the RBNZ, registered Revolut as a bank in the country on 3 November. With this registration Revolut can provide banking services. Revolut's valuation, meanwhile, rose to 115 billion dollars in a secondary share sale. That last figure comes from a secondary source, TechCrunch.

For a Revolut customer in New Zealand, this means the service will now be provided under a banking licence. How many customers fall under it was not disclosed.

In the US, staff at the derivatives regulator CFTC issued a letter. According to the letter, a clearing organisation may use a trust company for daily settlement. The condition is that it treats the trust company as it would a settlement bank. This is a staff position, not a rule of the commission.

The professional's question lies here. If the definition of a settlement bank widens, how does the counterparty risk framework change? The letter opens that question but does not answer it.

These records may point in one direction. Regulators are widening the places where money can be held, but by binding them to the same set of rules. This is our hypothesis. It rests on a few records seen in a single week. Its scale and persistence have not been measured.

VWhat the evidence says, and what is missing

The events are confirmed. The Paraguay decision, the FinCEN order, the RBNZ registration and the CFTC letter are primary official records. The Arkéa and Binance statements are also primary sources, but their content is an institutional statement.

What is missing is outcome data. None of the four events disclosed the number of affected customers or users. The SEC's crypto broker rule is still only a proposal. The text is under White House review and has not been published.

What did this week add, and to which source group? It added six records to the Control source group: Ueno, FinCEN, OFAC, Arkéa, Binance and TD. It added five records to the Customer source group: Barclays, NerdWallet, PNC, the Fed and NIQ. It added no new evidence to the Infrastructure source group. USDC purchases opened in Samsung Wallet on Stripe's infrastructure. But 82 million eligible devices are not usage data.

VISignals to watch

Back to the alarm. It has sounded, but the extent of the damage is not yet on record. Over the coming weeks we will watch three signals.

Our forecast: Paraguay's central bank will publish a new official announcement on the Ueno resolution by 31 December 2026. We are 90 per cent confident. The criterion is the BCP's own website.

Our forecast: France's banking supervisor will not issue a separate statement on the customer impact of the Arkéa incident by 31 December 2026. We are 60 per cent confident. The criterion is the supervisor's publications page.

Our forecast: the text of the SEC's proposed crypto broker rule will be published by 31 January 2027. We are 75 per cent confident. The criterion is an SEC or Federal Register record.

You can read what official institutions wrote to depositors, word for word, in the Reflection section.

These forecasts are now in our record book. We will show their outcomes on the Whole page.