From 7 May 2026, new safeguarding rules require larger payment and e-money firms to run daily reconciliations, report monthly, and complete annual audits.