EU Payment Institution Licence: Requirements, Process, Capital Rules (2026)

An EU Payment Institution licence authorises an entity to provide regulated payment services within the European Union. Its core purpose is to ensure that market participants operate with robust governance, sound financial and operational controls, and effective safeguards against money laundering, fraud, and other risks to clients and the financial system.

The requirements are detailed, the process long, and capital rules apply up front, here is what corporates and fintechs need to know about the EU Payment Institution licence:

Permitted services of a Payment Institution

Under EU Payment Services regulations, a payment service is defined as:

1. Services enabling cash to be placed on a payment account as well as all the operations required for operating a payment account.
2. Services enabling cash withdrawals from a payment account as well as all the operations required for operating a payment account.
3. Execution of payment transactions, including transfers of funds on a payment account with the user’s payment service provider or with another payment service provider:
   • execution of direct debits, including one-off direct debits;
   • execution of payment transactions through a payment card or a similar device;
   • execution of credit transfers, including standing orders.
4. Execution of payment transactions where the funds are covered by a credit line for a payment service user:
   • execution of direct debits, including one-off direct debits;
   • execution of payment transactions through a payment card or a similar device;
   • execution of credit transfers, including standing orders.
5. Issuing payment instruments and/or acquiring payment transactions.
6. Money remittance.
7. Payment initiation services (see Payment Information Service Provider).
8. Account information services (see Account Information Service Provider).

Excluded activities of a Payment Institution

Payment Institutions are not permitted to hold client funds for extended periods, whether in cash or electronic money form (such activity needs banking or EMI license).

Use Cases for a Payment Institution license

Authorised Payment Institutions (often called payment service providers or PSPs) can over a wide range of payment services:

1. Money transfer: remitting money from one country to another.
2. Foreign exchange: converting currencies and hedging forward positions.
3. Card schemes: providing debit and credit cards.
4. Payment processing: providing online and mobile payment solutions.
5. Payment acquiring: accepting payments from merchants, marketplaces and payment gateways.
6. Payment gateway operations: specialist technology solution to accept and process payments.
7. Open Banking: providing data and payment initiation on 3^rd party bank accounts.

Buy Now Pay Later is changing, see FAQ.

PSPs are well-suited to digital business models, enabling payments to be “embedded into commercial transactions, increasing automation and customer experience.”

Payment Institution licensing process

Payment Institution licensing varies by jurisdiction, but the normally occurs in three phases:

Exploration	Assessment	Decision
The applicant will participate in a sandbox, have an initial meeting, and then submit information.	The competent authority assesses the submission in line with guidance and SLA.	The applicant receives an authorisation or decline. Marginal cases may be given the opportunity to make adjustments.

What is in a Payment Institution application

To secure a Payment Institution license, applicants must submit a comprehensive application to the competent authority in their home jurisdiction.

Applicants must demonstrate operational readiness at the time of application, including business plans, financial models, technology architecture, risk frameworks, and governance structures. Start-ups face extra scrutiny as they lack financial and client conduct history.

Key areas the competent authority will assess include:

1. Entity: what is the legal status of the entity, group structure, financial history, compliance history, licensing history, etc.
2. Local Substance: does the business have a rationale for applying in that market, and a suitable local presence, including key personnel in-country.
3. Business Model: a clear description of how the business will make money and operate. this must define services, clients, locations, channels to market, technology, service structure, compliance structure, etc. Volumes are expected.
4. Financial Viability: a financial model showing profit and loss, balance sheet, and cash flow for a minimum of 3yrs. The applicant must demonstrate an ability to reach break-even, and fund losses until then.
5. Capital: a Payment Institution must meet regulatory capital and own funds requirements, and demonstrate adequate (treasury) skills to measure and manage capital. See FAQ.
6. Risk Assessment: applicants must define the inherent risks in the business and those that arise in operation, for example money laundering or technological. A risk management framework is require demonstrating how risk will be managed and mitigated.
7. Outsourcing: outsourcing is usually permitted to group or external parties, but applicants must show that have appropriate management, especially in key functions like compliance and technology.
8. Safeguarding: detailed forecast of client fund volumes, how these will be safeguarded and by which reputable partner.
9. Business Continuity: applicants must demonstrate they can maintain service, and have an orderly plan to wind down in the event of failure.
10. Management Structures: an organisation change is required detailing functions, roles and reporting lines. Staffing plans are required, especially if the business is scaling. Profiles for senior management and directors are required, with some regulators requiring professional qualifications and/or ‘fitness and probity’ checks.
11. Ownership: all shareholders up to and including the ultimate beneficial owner (UBO) are required, including their % ownership and control. Owners appears on sanctions or PEP lists create additional complexity.
12. Timeline: applicants should define when they will start operations and make their full submission.

It also important to note that adjacent regulations such as DORA are applicable, overlooking these will lead to rejection.

Passporting across the EU

Once authorised in its home jurisdiction, a Payment Institution can offer services in other EU countries.

This is achieved by establishing branch offices, engaging agents in other EU countries, or the provision of cross‑border services without physical presence

An authorised Payment Institution must apply to their home competent authority who will assess the application, on approval this will be transmitted to the equivalent authority in host countries.

Payment Institution Compliance

Payment Institutions are subject to continuous supervision to ensure compliance with their stated plans, legislation and regulatory obligations.

Key areas the competent authority will assess include:

1. Governance: is there strong management, appropriate segregation of duty, and an appropriate framework of policies and procedures.
2. Risk Management: PIs must implement comprehensive compliance programs, including AML (Anti-Money Laundering) and KYC (Know Your Customer) measures. Risk management systems must address operational, credit, and other risks in line with regulatory requirements.
3. Technology: do the systems and their providers meet requirements about information security, PSD2 and DORA.
4. Safeguarding: are client funds adequately safeguarded, can Payment Institution easily quantify these and separate them from own funds.
5. Consumer Protection: does the Payment Institution have defined and effective approaches to ensure the interests of clients, meet service requests, and resolve disputes.
6. Fitness & Probity: do senior managershave the qualifications, experience, and knowledge to perform their function. Is their past behaviour clear.
7. Reporting: Payment Institution’s have extensive reporting obligations including volumes, suspicious payment activity, fraud, operational incidents  and financial statements. Frequency may vary, but is trending to daily via automated channels.
8. Annual Accounts: annual audited accounts are typically submitted within 6mths of the end of the relevant financial year end.
9. External Audit: auditors must audit the financial statements. FinTech consultants are increasingly required to undertake periodic independent GRC audits.

FAQ about Payment Institution Licensing

Payment Institution license Summary

A Payment Institution licence provides access to a rapidly expanding and profitable market. While barriers to entry remain manageable, regulatory expectations are increasing, requiring upfront investment and ongoing compliance.

Selecting the right licence type and jurisdiction is critical. Sure FinTech supports clients end‑to‑end — strategy, licensing, technology sourcing, and ongoing compliance. Contact us today for an exploratory call.