As we noted in our 2025 review, last year we saw the rise of AI, further moves towards real-time payments as the default, and the expansion of tokenisation. But what will 2026 hold? We’ve picked some highlights that we believe will form some significant narratives for the coming year. 

Before we look ahead, it’s time we have a glance in the rearview mirror. Last year, we predicted the following: 

• Upgrading payments to deliver more cost-efficient services
• Increasing focus cyber security and resilience
• The rise of Agentic AI
• Stablecoins primed for a much larger role in international payments
• Policy makers look to boost innovation, competition and growth
• The evolution of sustainable finance 

If we’re grading our own homework, that’s a solid B+. No clear errors, but potentially too much optimism regarding the pace of some changes.  

So, here’s what the ClearBank team believes the next 12 months have in store. 

2026 will mark a meaningful shift in Board and C-suite attitudes toward cybersecurity, recognising it as essential to organisational resilience and long-term value. A series of high-profile attacks this year has made one thing clear: cybersecurity directly affects the bottom line. Boards will demand more frequent updates, sharper insight into how attacks impact operations and clarity on the steps needed to strengthen resilience, especially across complex supply chains. Organisations will pour more time and investment into ensuring they can recover quickly, with minimal disruption to customers. 

Regulators will expect deeper transparency around cyber controls, clearer identification of weaknesses and concrete plans for improvement. With reliance on a few major cloud providers increasing, scrutiny of resilience and recovery measures will intensify. Investors and customers will similarly expect evidence that organisations can withstand and bounce back from cyber incidents. 

There are several key security developments businesses should have on their radar for 2026. 

• Cyber attackers will increasingly weaponise agentic AI 

We’ll see autonomous tools scanning networks for weaknesses, generating tailored attacks and executing breaches at speed. Phishing campaigns will also become far more sophisticated, with AI producing highly personalised messages that are significantly harder for employees to detect. The result: faster attacks, smarter targeting and a much smaller margin for human error. 

• AI agent proliferation 

Tech giants like Microsoft and Google are racing to deploy AI agents that automate repetitive tasks and boost productivity. As adoption surges - driven largely by the Fear of Missing Out (FOMO) - businesses will see quick wins. But the long-term oversight of these agents remains unclear. Without strong governance, they could become a new entry point for cyber attackers. 

• Ransomware sophistication 

Ransomware-as-a-Service (RaaS) is now so accessible that attacks will keep rising. While businesses have tools to protect themselves, home users remain exposed - making personal devices a growing weak spot. Companies must reinforce rules around device use and help remote workers maintain secure setups. 

As more employees become susceptible to outside influences, insider threats will climb. Human awareness becomes critical recognising when something feels off and knowing how to respond. Organisations can’t eliminate the risk entirely but helping people recognise when things are not right and how to handle attacks is crucial for businesses. While it is never going to be perfect, this is about reducing the impact if possible. 

• Quantum computing threat 

Quantum risk is edging closer. While full commercial capability may be 5–20 years away, major cloud providers and nation states could have early solutions within the next decade. Data harvesting for “decrypt later” attacks is already underway and will accelerate in 2026. Companies will focus more on cataloguing sensitive assets and planning what needs futureproofing. 

• Importance of identity and zero trust frameworks 

Identity is the bedrock of any organisation. Expect even greater scrutiny of identity controls from businesses and suppliers, alongside wider adoption of zero trust frameworks as organisations seek more robust, assume-nothing security models. 

Matt O’Neill, Head of Security Governance, Risk and Compliance 

Institutional adoption of digital assets is anticipated to accelerate in 2026 as traditional finance begins integrating them into its core operations. While we can expect to see sovereign entities starting to hold Bitcoin reserves, more broadly, it won’t be surprising if Bitcoin starts to gradually lose its prominence, giving way to a more stable, regulated, and sustainable growth model. 

Stablecoin supply is projected to double, hitting $500 billion by the end of the year and potentially reaching $2 trillion by 2030. Regulatory clarity, particularly in the U.S. with the GENIUS Act and in Hong Kong, which mandates 100% reserve backing, is expected to boost institutional confidence. 

US bank-issued stablecoins are becoming increasingly dominant, facilitating real-time cross-border payments, corporate treasury integration, and tokenised settlements. Meanwhile, the UK will complete its stablecoin and wider digital asset regime next year, following consultation and rule development in 2025. The UK must usher in a new regime that recognises banks alongside fintechs otherwise it risks losing its position as a global leader in finance and all the opportunities stablecoins provide.

Sean Forward, Business Manager, Digital Currency

Embedded finance poses a major opportunity for businesses in the UK next year, with the industry projected to grow from £6.47 billion in 2024 to £15.77 billion by 2029. 

According to a recent study of 200 senior business leaders at large UK-based corporates, nearly half (48%) of corporates see embedded finance as a way to drive new revenue streams, 38% of c-suite cite embedded finance as important for their company’s growth and 43% said they are actively considering offering branded accounts, savings, or lending tools within their own platforms. However, adoption is still early: only 5% say they have already launched embedded financial offerings. 

Historically, firms looking to deliver embedded services have faced a compromise – work with a BaaS provider offering agility or an incumbent bank with proven governance and control frameworks but lacking the real-time APIs they need. 

We expect next-generation, API-based banks to become the standard for embedded account and payments services, allowing corporates to create seamless experiences that deepen engagement, increase customer loyalty and drive new revenue streams. 

By building on top of a regulated bank’s proven infrastructure, businesses can deliver competitive and compliant services and features, such as FSCS protection on eligible deposits, without incurring the substantial cost of obtaining a banking licence. It also means brands don’t need to compromise the quality of their services and maintain a customer experience consistent with their brand. 

As embedded finance evolves, brands adopting these solutions will set themselves apart, delivering frictionless, secure, and personalised financial experiences that meet the demands of tomorrow’s customers. 

Andrew Crocombe, Head of Embedded Banking Propositions

With just five years until 2030 Net Zero targets, regulators are intensifying their focus on credible transition plans and capital mobilisation. In the UK, policymakers are moving to mandate robust strategies for financial institutions and large corporates, building on the ISSB S2 framework and aligning with the global push for standardised, decision-useful climate disclosures.

Trust among the public and employees remains fragile, with stakeholders demanding real progress over sustainability marketing. On top of this, regulatory scrutiny is rising: the FCA’s anti-greenwashing rule, in force since 2024, requires all sustainability claims to be fair, clear, and not misleading. Advertising enforcement has also tightened, with recent ASA rulings underscoring the importance of context and completeness, with omissions seen as misleading.  

Looking to 2026, the accelerating green transition and ‘great wealth transfer’ are reshaping consumer priorities and demographics. Fintechs and challenger banks are well positioned to lead and capitalise on this shift. Those that embed sustainability in their strategy, will not only meet evolving regulatory expectations but also turn these pressures into catalysts for meaningful, market-driven change. By innovating in sustainable finance, engaging new generations of customers, and building trust through transparency, these firms can transform sustainability from a compliance requirement into a powerful driver of growth and competitive advantage. 

Oliver Thornton, Head of Sustainability