[…] regulator sent a letter to payments firms in March cautioning them that it expects their controls to be “sufficiently robust” and that […]