These are interesting times from a risk management perspective for regulated FinTech and PayTech firms. Kevin Still argues that the conduct risk frameworks and compliance programmes that are required may seem disproportionate for a small entity but says that the downstream rewards are likely to warrant the necessary investment in building financial and operational resilience.