All guides
EMI / PIFintech

Payments & E-Money Licensing

How to tell whether you need a licence, which one, and in which jurisdiction. ~11 min for payments & fintech teams.

5 min read

How to tell whether your product needs a payments licence, which one it needs, and where to get it — without pushing a default jurisdiction or discovering the requirement after you’ve launched.

Dossier

For
Payments startups, wallets, neobanks, marketplaces handling funds, and fintechs expanding into a new market.
Covers
Activity assessment · EMI vs PI · jurisdiction ranking · the application pack.
Key question
Do you store customer funds, or only move them? The answer points to your licence.
Reality check
Licensing takes months, not weeks — and timelines vary widely by jurisdiction.

Do you even need a licence?

Before choosing between licences, establish whether your activity is regulated at all. The trigger isn’t your product category — it’s what your product does in regulatory terms. Two apps that look identical to a user can sit on opposite sides of the line depending on how money flows through them.

Start by writing your money flows out plainly: who holds funds, for how long, and who they belong to at each step. A marketplace that lets a payment processor handle settlement is in a very different position from one that takes funds into its own account and pays out later.

EMI vs payment institution — the core distinction

Most teams’ path comes down to one question: do you store value, or only execute payments?

  • E-money institution (EMI) — can issue and hold electronic money. If your users top up a balance and spend it later, you’re storing value, and this is usually the route.
  • Payment institution (PI) — executes payment transactions but generally can’t hold e-money. If you move funds from A to B without parking a stored balance, this is often the lighter-weight fit.

The distinction sounds clean but turns on the detail of your actual flows, which is why step 01 matters first. The right answer is the one that matches how money really sits in your system — not the licence that sounds most impressive.

Choose a licence and a jurisdiction

There is no universally "best" fintech jurisdiction — only the best fit for your markets, budget, timeline, and how much regulatory credibility you need to win customers and partners. The useful output is a ranked shortlist, not a single recommendation handed down from on high.

What goes into the ranking:

  • Capital requirements — the minimum you’ll need to hold, which varies by licence and place.
  • Timeline — how long authorisation realistically takes in that regulator’s queue.
  • Cost — application, advisory, and ongoing-supervision costs across the options.
  • Passporting — whether one authorisation lets you serve a whole region, or you’ll need more.
  • Credibility — how much weight the licence carries with your banking partners and customers.

Know what the regulator expects

Once you’ve chosen a route, the requirements become concrete. Across jurisdictions, supervisors look hard at the same few areas — and a thin showing in any one of them slows or sinks an application:

  • Governance — a credible structure, clear responsibilities, and people actually running the firm.
  • Safeguarding — how customer funds are protected and kept separate from your own money.
  • Fit-and-proper — the suitability and track record of directors and key function holders.
  • Substance — real operations in the jurisdiction, not a nameplate.

These aren’t boxes to tick at the end — they shape your hiring, your banking, and your operating model, so it pays to design for them early.

Prepare the application pack

The submission is where a strong plan becomes an approvable one. Regulators want a coherent pack that shows you understand your own business and its risks — not blank templates filled in at the last minute. The core of it:

  • Business plan — your model, financials, and how the numbers hold together.
  • Governance and safeguarding policies — written to your actual operations, not copied from a generic library.
  • The submission pack — assembled the way the specific regulator expects to receive it.

Get a licensing pathfinder

Want it done for you? See our Payment & E-Money Licensing solution, explore the Fintech Licensing Hub, or try Compass — our AI assistant for the EU financial framework.

Book a consultation
guideFintechEMI / PI

More from the journal

See all
Illia Prokopiev

From Cloud Concentration to AI Dependence: The UK’s Critical Third Parties Regime

The United Kingdom now directly oversees designated technology suppliers whose service failures could threaten financial stability. The question is whether the first cloud designations show a legal expansion toward AI-model providers, and what the present regime requires. This analysis assumes the quoted statement concerns the UK financial-services Critical Third Parties regime and assesses the law through 14 July 2026.

Alberta Regulated iGaming Market Launched on 13 July 2026 with 22 Operators

Alberta's regulated private iGaming market launched on 13 July 2026, making Alberta the second Canadian province to permit private online gambling operators after Ontario. The Alberta Gaming, Liquor and Cannabis Commission serves as market regulator and the Alberta iGaming Corporation oversees commercial operations and operator contracts. Twenty-two operator sites went live on day one, including FanDuel, DraftKings, BetMGM, and BetRivers. Operators must fully launch or exit the Alberta market by 13 October 2026.

European Commission Presents Cybersecurity and AI Action Plan on 7 July 2026

On 7 July 2026, the European Commission presented an Action Plan on Cybersecurity and Artificial Intelligence. The plan directs the Commission and ENISA to evaluate advanced AI models before they reach the EU market, establish a secure testing platform for critical-sector organisations, and launch an EU Grand Challenge on AI-powered cybersecurity solutions. It operates alongside the AI Act, NIS2 Directive, DORA, Cyber Resilience Act, and Cyber Solidarity Act, and introduces no new directly binding obligations.