Post-quantum cryptography becomes mandatory for financial institutions

The cryptographic foundations underpinning the global financial system are about to get a forced upgrade. A coordinated push from regulators across the G7, the US federal government, and Switzerland is turning post-quantum cryptography from a theoretical concern into a compliance deadline with real teeth. The regulatory squeeze The G7 Cyber Expert Group published a roadmap in January 2026 laying out a phased migration plan for the financial sector. The timeline breaks into three stages: planning from 2025 to 2027, risk assessments through 2029, and full execution of the migration by 2034. The US moved faster and harder. Executive Order 14412, issued on June 22, 2026, mandates that federal agencies migrate to NIST post-quantum cryptography standards. The deadlines are specific: key establishment algorithms must be in place by December 31, 2030, and digital signature algorithms by December 31, 2031. Switzerland’s financial regulator, FINMA, added its own layer with Guidance 05/2026, published in July 2026. It requires all supervised institutions to have board-approved PQC strategies in place by mid-2027. Then in August 2026, the US Treasury established a Quantum-Readiness Task Force ...