On September 7, 2026, the regulatory bulletin clarified that financial institutions and third-party platforms must establish a pre-assessment mechanism for conducting transfer channel services, which must be signed by management. If a platform has a short operating history, weak capacity, low security level, or insufficient financial attributes, it is classified as high-risk. Some institutions have already initiated internal investigations, focusing on reviewing existing partnerships and evaluating platform qualifications, data security, and fee adequacy. The bulletin requires the introduction of a triple-check mechanism involving external expert evaluation, board of directors review, and reporting to local regulatory authorities for high-risk partnerships, along with establishing a regular follow-up and rectification system. This regulation, as part of the “Financial Product Online Marketing Management Measures,” aims to clarify responsibilities and boundaries, prevent risks associated with data and brand confusion, and the industry’s compliance window period is only remaining for over twenty days.
On September 7, a report on institutional supervision clarified that financial institutions must establish an pre-assessment mechanism and obtain approval from management when cooperating with third-party platforms for transfer services. If the platform has a short operating history, weak capacity, low security level, or insufficient financial attributes, it is classified as high-risk. Some institutions have already initiated internal inspections, focusing on reviewing existing transfer cooperation and assessing platform qualifications, data security, and fee structure. The report requires introducing a triple-check mechanism involving external expert evaluation, board of directors review, and reporting to local regulatory authorities for high-risk cooperation, and establishing a regular follow-up and rectification system. This regulation, as part of the “Management Measures for Online Marketing of Financial Products,” aims to clarify responsibilities and boundaries, prevent data and brand confusion risks, and the industry’s compliance window period is only remaining for over twenty days.