Founders and COO teams
Use this hub to decide whether your wallet, embedded finance, remittance, merchant settlement, or card program requires an EMI, PI, or a narrower PSP setup.
EMI/PSP LICENSE HUB 2026
An EMI license for sale usually means the acquisition of a company that already holds an electronic money institution authorization, not the transfer of a standalone license. In 2026, buyers must assess change in control, safeguarding, AML remediation, passporting scope, and whether an EMI license, PI license, or another PSP license is the correct regulatory perimeter for the target business model.
Last legally reviewed: 2026. This page is an editorial compliance guide, not legal advice. Timelines, fees, and supervisory expectations vary by jurisdiction and by file quality.
An EMI license is an authorization for an electronic money institution to issue electronic money and provide payment services. If your product holds customer balances, operates wallets with stored value, issues redeemable e-money, or supports account-like balances linked to cards, transfers, or merchant flows, an electronic money license is often the correct perimeter. If your model only executes payment transactions without issuing e-money or holding stored value, a PI license may be sufficient. The term PSP license is commercial shorthand; legally, the relevant authorization is usually EMI, PI, AISP, or PISP depending on the service set. The term PSD2 license is also SEO shorthand, not a formal license name.
Use this hub to decide whether your wallet, embedded finance, remittance, merchant settlement, or card program requires an EMI, PI, or a narrower PSP setup.
Use this page to benchmark capital, safeguarding, governance, AML, DORA, outsourcing, and change-in-control expectations before filing or buying a target.
Use this page to evaluate whether an acquisition target has clean capital, usable infrastructure, credible management, and remediable compliance debt.
Issue e-money, redeem it at par, provide payment services listed in PSD2 Annex I, operate wallets, support payment accounts and cards, and provide ancillary FX linked to payment transactions, subject to authorization scope and local implementation.
An EMI is not a bank. It may not accept deposits as a credit institution, does not benefit from deposit guarantee protection, and cannot use safeguarded client funds for proprietary lending.
Under the EU framework, an authorised EMI must hold at least €350,000 in initial capital and maintain ongoing own funds at the higher of that floor or 2% of average outstanding electronic money.
Buying a licensed entity can shorten market entry, but it does not eliminate regulatory scrutiny. Buyers still face controller assessments, source-of-funds review, AML and sanctions checks, and operational due diligence on safeguarding, outsourcing, and regulatory history.
An EMI license usually refers to authorization as an electronic money institution. In the EU, the legal framework is built around Directive 2009/110/EC (EMD2) and Directive (EU) 2015/2366 (PSD2). In the UK, the regime is governed by the Electronic Money Regulations 2011 and the Payment Services Regulations 2017.
This is the precise legal expression for an authorization allowing issuance of electronic money and provision of certain payment services. It is more accurate than generic commercial phrases such as PSP license or PSD2 license.
A shorter commercial label for EMI authorization. It is widely used in advisory and search contexts, but legal documentation should refer to the institution type and the governing statute.
A payment institution license authorizes payment services without the issuance of electronic money. It is often the better fit for narrow payment flows, acquiring support, remittance, or transaction execution models that do not maintain stored value balances.
A PSP license is not one single legal category. It may refer to EMI, PI, AISP, or PISP status depending on the jurisdiction and product scope. Any serious scoping exercise should map the business model to the exact regulated service.
The phrase PSD2 license is commonly used online but is not a formal license title. PSD2 is a directive covering payment services, conduct rules, access to payment accounts, and prudential requirements for relevant institutions.
Safeguarding means protecting client funds through segregation or another legally accepted method such as insurance or a comparable guarantee where permitted. In practice, regulators look for reconciliation logic, safeguarding policy, bank account structure, acknowledgement wording, and insolvency remoteness.
Passporting allows an authorised institution in one EEA state to provide services in another EEA state through notification procedures. It is not automatic, and it depends on the current EEA framework and the institution’s authorized scope.
An electronic money token under MiCA is a crypto-asset that purports to maintain a stable value by referencing one official currency. EMI status is highly relevant to EMT issuance, but EMI authorization alone does not replace MiCA-specific obligations.
A full electronic money institution license is the standard route for businesses issuing e-money, maintaining customer balances, operating wallets, or building account-like payment products. It is the default perimeter for many fintechs that need stored value, redemption rights, and broader product flexibility.
Wallets, stored balances, merchant settlement structures involving redeemable e-money, payment accounts, cards, transfers, remittance, direct debits, ancillary FX linked to payments, and in some cases PIS/AIS if separately scoped and authorized.
A PI license is the correct route where the business executes payments but does not issue electronic money. It is often more efficient for narrower payment flows and can reduce prudential and operational burden compared with a full EMI structure.
Money remittance, payment execution, merchant acquiring support, payment initiation, account information services where separately applicable, and transaction processing without stored value issuance.
For open banking models, a narrower authorization may be enough. Businesses that only access account data or initiate payments from existing bank accounts should not default to EMI if they do not hold funds or issue e-money.
Account information services, payment initiation services, API-based open banking products, personal finance tools, and payment orchestration layers.
A banking license is required where the business model depends on deposit-taking, broader lending, or full credit institution status. It is not a substitute decision for EMI; it is a different prudential category with a different balance-sheet logic and supervisory burden.
Deposit-taking, lending funded from deposits, broader treasury activities, and full banking products.
An EMI can be relevant to a stable-value crypto model, but it does not create automatic permission to issue a tokenized product. Under Regulation (EU) 2023/1114 (MiCA), an electronic money token (EMT) is a distinct regulated category. In 2026, fintechs exploring tokenized money products must assess both the EMI perimeter and the MiCA perimeter together.
An electronic money institution license is often the starting point for businesses evaluating an EMT model because MiCA links electronic money tokens to the logic of redeemable value referenced to a single official currency. That said, the legal analysis does not stop at EMI status. The issuer must also satisfy MiCA-specific obligations such as white paper requirements, governance, prudential safeguards, complaints handling, reserve asset controls where relevant, and conduct rules.
The strategic question is not whether an EMI can ‘do crypto’. The real question is whether the proposed token is legally an EMT, whether the issuer structure is eligible, and whether the operating model can satisfy both payments regulation and crypto-asset regulation. This matters for treasury design, safeguarding interfaces, distribution, redemptions, outsourcing, and sanctions controls. A common mistake is to build a wallet or token wrapper first and only later test whether the liability is actually e-money, a crypto-asset, or both in different layers of the stack.
For groups comparing an EMI license for sale with a fresh MiCA build, the key diligence issue is integration risk: legacy EMI infrastructure may not be suitable for token issuance, reserve reporting, or on-chain/off-chain reconciliation without major remediation.
This route fits firms building regulated fiat-backed payment tokens, wallet ecosystems, or hybrid fintech-crypto products that need a credible legal bridge between e-money and tokenized distribution.
This route does not fit firms seeking an unregulated stablecoin shortcut, projects without robust AML and redemption controls, or teams assuming that a generic crypto setup can be retrofitted into EMI-grade governance later.
MiCA entered into force on 29 June 2023, with EMT and ART provisions applying from 30 June 2024. In 2026, token projects are expected to design for MiCA from day one rather than treat it as a future add-on.
EMI authorization can be central to an EMT structure, but it does not remove MiCA-specific disclosure, governance, reserve, and conduct obligations.
The difficult part is usually not the legal label alone. It is reconciliation between fiat liabilities, safeguarding arrangements, wallet architecture, sanctions screening, and redemption mechanics.
A credible EMI file is evidence-driven. Regulators and M&A buyers look for internal consistency between the business model, financial projections, safeguarding mechanics, AML controls, and outsourcing structure. The fastest way to lose time is to submit generic templates that do not match the actual product flow.
Defines the exact regulated services, customer journey, payment flow, jurisdictions, counterparties, and operational model. It should identify where funds enter, when e-money is issued, when redemption occurs, and which outsourced providers support critical functions.
Explains segregation logic, reconciliation frequency, treatment of incoming and settled funds, safeguarding account structure, escalation thresholds, and insolvency protection. This is one of the most scrutinized prudential documents in both licensing and due diligence.
Must cover customer risk scoring, onboarding controls, PEP and sanctions screening, adverse media, transaction monitoring, suspicious activity escalation, recordkeeping, and enhanced due diligence for higher-risk corridors and ownership structures.
Usually prepared for a 3-year horizon. Regulators test whether revenue assumptions, customer volumes, safeguarding balances, own funds, and burn rate are realistic. Buyers use the same file to detect whether the target’s economics ever matched its authorization scope.
Includes shareholder structure, UBO evidence, CVs, criminal record extracts where required, role descriptions, conflict management, board setup, and proof that management can effectively direct the institution rather than merely lend names to the file.
For an emi license for sale scenario, this pack should include at least the last 3 years of accounts where available, regulatory correspondence, audit findings, safeguarding evidence, complaints logs, outsourcing agreements, passporting records, tax exposures, and remediation history.
Covers architecture, access control, incident response, business continuity, vendor mapping, critical function oversight, audit rights, subcontracting chains, API security, and where relevant alignment with DORA, RTS on SCA and CSC, PCI DSS, and ISO 20022 interfaces.
Regulators authorize operating models, not paperwork bundles. A strong file shows that capital, governance, AML, sanctions, safeguarding, outsourcing, and ICT security all work together in the actual business flow. In 2026, reviewers also expect licensing strategy to account for the PSD3/PSR transition path, even where current authorization still sits under PSD2 and EMD2.
For an authorised EMI in the EU framework, the minimum initial capital is €350,000. Ongoing own funds must remain at least the higher of that floor or 2% of average outstanding electronic money. Example: if average outstanding e-money is €20 million, the own funds requirement by formula is €400,000. This matters for growth planning because rapid wallet adoption can increase prudential needs before profitability catches up.
Safeguarding is a daily control system, not just a segregated account label. Regulators expect clear identification of relevant funds, timely segregation or equivalent protection where legally allowed, reconciliation logic, exception handling, and evidence that safeguarded funds are insulated from the institution’s own creditors. A mature file also explains cut-off times, failed payments treatment, and how refunds and chargebacks interact with safeguarded balances.
Regulators test whether the institution has effective management, not nominal directors. In practice, many supervisors expect at least two genuinely active managers, clear board oversight, a compliance function, AML responsibility, and enough local substance to control critical decisions. The exact staffing model is jurisdiction-specific, but the trend is consistent: outsourced support is acceptable only if the institution retains real oversight and decision-making capacity.
An EMI must show how it screens customers, beneficial owners, counterparties, and transactions for AML and sanctions risk. In 2026, regulators and acquirers pay particular attention to source of funds, source of wealth for controllers, PEP exposure, adverse media, high-risk third-country links, and whether transaction monitoring rules are calibrated to the actual product. A strong framework also defines escalation thresholds, SAR/STR workflows, and governance over false positives and alert backlogs.
For digital payment businesses, ICT governance is part of licensing readiness. Since 17 January 2025, DORA has applied across the EU financial sector, raising expectations around ICT risk management, incident handling, resilience testing, and oversight of critical third-party providers. Where the model touches open banking or card payments, the file should also align with RTS on SCA and CSC, 3D Secure 2, PCI DSS, secure API authentication practices such as OAuth 2.0/OpenID Connect, and payment messaging standards including ISO 20022 where relevant.
In an emi license for sale or psp license for sale transaction, the core question is whether the target is clean enough to inherit. Buyers should test safeguarding continuity, unresolved AML alerts, audit qualifications, complaints trends, outsourcing concentration, tax liabilities, regulatory correspondence, and whether passporting notifications are current and usable. A dormant license without functioning controls can be slower to fix than filing a new application.
A reliable EMI decision should be anchored to primary sources. The institutions below are the main reference points for EU, EEA, and UK EMI and PI analysis, plus the MiCA layer relevant to EMT structures.
The EBA is central to the supervisory framework for payments and e-money institutions through guidelines, registers, and technical standards. It is a key source for understanding authorization expectations, outsourcing, ICT risk, and prudential interpretation across the EU and EEA.
Directive 2009/110/EC is the core EU legal instrument for electronic money institutions. It defines electronic money, redemption rights, and prudential foundations for EMIs.
Directive (EU) 2015/2366 sets the broader payment services framework, including service categories, conduct rules, access to payment accounts, and prudential mechanics for payment institutions and related actors.
The Bank of Lithuania is one of the most watched regulators in the EMI market because of its experience with fintech authorization and the practical relevance of Lithuania for SEPA-oriented business models.
The FCA supervises UK EMIs and PIs under the Electronic Money Regulations 2011 and Payment Services Regulations 2017. It is the key source for UK-only EMI strategy and for controller assessments in UK acquisition deals.
The Central Bank of Cyprus is the relevant authority for Cyprus EMI and PI authorization and for local supervisory expectations on governance, documentation, and operations.
Regulation (EU) 2023/1114 is the core framework for crypto-assets in the EU, including electronic money tokens and asset-referenced tokens.
Regulation (EU) 2022/2554 on digital operational resilience applies to financial entities and materially affects ICT governance, incident handling, and third-party risk oversight.
A license without workable banking and infrastructure is not a launch-ready business. EMI projects succeed or fail on whether they can secure safeguarding accounts, settlement arrangements, scheme relationships, and operational connectivity to the payment rails they plan to use.
Many applications look viable on paper but struggle in practice because safeguarding bank onboarding is delayed or denied. Buyers of an existing EMI should verify whether the target’s safeguarding arrangements are active, transferable in practice, and compliant with current operating volumes.
An EU EMI may pursue SEPA-linked operations, but actual access depends on the chosen model, counterparties, and infrastructure path. In Lithuania, CENTROLINK is often part of the strategic discussion, but firms should assess eligibility, operational fit, and ongoing compliance burden rather than assume automatic connectivity.
Card issuing, acquiring, BIN sponsorship, 3DS2, PCI DSS, chargeback handling, and scheme onboarding are separate workstreams. A licensed EMI can still be commercially blocked if these relationships are not in place.
Modern payment operations increasingly depend on structured messaging, API orchestration, and robust authentication. Institutions that design their stack around reconciliation, audit trails, and standards from the start usually face fewer remediation issues later.
The realistic path has two versions: a fresh authorization track and an acquisition track. A new EMI file usually takes 6–18 months end to end once preparation, completeness review, supervisory questions, and operational readiness are included. An acquisition can shorten market entry, but it adds change-in-control work, target due diligence, and often hidden remediation.
Start by deciding whether the product issues e-money, only executes payments, only accesses account data, or needs a banking perimeter. This is the stage where many teams discover that a PI license or AISP/PISP route is enough, or that their supposed EMI model is actually a bank-like or MiCA-adjacent structure.
Compare Lithuania, Cyprus, the UK, and other candidate jurisdictions on passporting, SEPA access, local substance, safeguarding bank feasibility, management availability, and regulator style. Wrong jurisdiction selection can cost a year of rework because the same documents rarely port cleanly across supervisors.
For a fresh application, this means the program of operations, business plan, financial projections, AML and sanctions framework, safeguarding design, outsourcing pack, governance file, and IT/security controls. For an acquisition, it means due diligence, SPA structuring, controller documentation, source-of-funds pack, and post-deal governance plan.
After filing, regulators test completeness, ask follow-up questions, and assess effective control over AML, safeguarding, outsourcing, ICT risk, and management fitness. The most common delays come from weak source-of-funds evidence, generic policies, no credible safeguarding bank path, and outsourced technology without internal oversight.
Authorization is not the same as commercial launch. Firms still need safeguarding accounts, banking and scheme onboarding, processor integrations, reporting workflows, audit readiness, complaints handling, and often passporting notifications before cross-border operations begin.
Regulated United Europe OÜ (RUE) is a European legal consulting firm specializing in financial licensing, company formation, and regulatory compliance. Since 2016, we have helped hundreds of businesses obtain crypto, gambling, forex, and EMI/PSP licenses across 35+ jurisdictions.
With offices in four EU countries and a team of experienced lawyers, we provide end-to-end support — from initial consultation and company registration to license acquisition and ongoing compliance management.
500+
Clients Served
35+
Jurisdictions
Since 2016
Years in Business
4
EU Offices
Fully registered and regulated EU company with partnerships across major financial centers.
Our experts speak English, German, Russian, Chinese, and 12+ other languages for global client support.
From company registration to license acquisition and compliance — we handle the entire process end-to-end.
Personal consultant assigned to each client. Direct communication channels, no call centers.
Tax is not the licensing perimeter, but it changes the viability of the structure. EMI groups need accounting, transfer pricing where relevant, payroll, VAT analysis for ancillary services, and a substance model that matches governance and outsourcing reality. Tax rates change and should always be checked against current official sources in the target jurisdiction.
Substance is not only a tax concept. In regulated payments, weak local substance can undermine licensing credibility, controller assessments, and post-authorization supervision even if the corporate tax analysis looks acceptable on paper.
Finance teams should be able to reconcile statutory accounts, safeguarding records, regulatory returns, and management reporting. A mismatch between customer liabilities, safeguarded balances, and general ledger treatment is a red flag in both audits and M&A diligence.
Where technology, compliance, support, or treasury functions sit in different group entities, the institution should document transfer pricing, service agreements, outsourcing boundaries, and who actually controls each critical function.
EMIs commonly need accounting, payroll, audit coordination, and legal maintenance in the licensing jurisdiction. These are not optional admin tasks; they are part of maintaining a credible supervised institution.
Open the key issues founders, compliance teams and legal leads usually need to confirm before launch.
An EMI license is an authorization for an electronic money institution to issue electronic money and provide payment services within the permitted scope. In the EU, the legal framework is based on EMD2 and PSD2. In the UK, the main framework is the Electronic Money Regulations 2011 and the Payment Services Regulations 2017.
The core difference is e-money issuance. An EMI license allows the institution to issue electronic money and maintain stored value liabilities to customers. A PI license allows payment services without e-money issuance. If your product holds customer balances in a wallet or account-like structure, EMI is often the correct perimeter.
No. PSP license is a commercial umbrella term, not a precise legal category. Depending on the business model, the correct authorization may be EMI, PI, AISP, or PISP. Any serious licensing or acquisition analysis should identify the exact regulated service rather than rely on the generic PSP label.
Under the EU framework, an authorised EMI must have at least €350,000 in initial capital. It must also maintain ongoing own funds at the higher of that floor or 2% of average outstanding electronic money. For example, if average outstanding e-money is €20 million, the formula produces €400,000.
Typical PI capital tiers under PSD2 are €20,000, €50,000, or €125,000, depending on the payment services provided. The correct tier depends on the authorized activity set, so a PI scoping exercise should be done before budgeting.
A realistic end-to-end EMI project in Europe often takes 6–18 months once preparation, completeness review, regulator questions, remediation, and post-approval operationalization are included. The formal statutory review period is only one part of the timeline and should not be confused with actual go-live readiness.
A Lithuania EMI license sits within the EU/EEA framework and can support passporting subject to notification rules. A UK EMI license is supervised by the FCA and is relevant for UK domestic operations, but it does not provide EU passporting after Brexit. The choice depends on market geography, not just licensing speed.
Usually, you do not buy a standalone transferable license. An EMI license for sale normally means buying shares in a company that already holds authorization. That transaction typically triggers change-in-control analysis, fit-and-proper review of the acquirer, source-of-funds scrutiny, and post-deal governance assessment.
Check regulatory history, safeguarding arrangements, AML and sanctions backlog, audit findings, own-funds calculations, tax liabilities, outsourcing contracts, complaints data, processor and bank dependencies, passporting status, and whether management substance is real. Review at least the last 3 years of records where available.
No. A UK EMI license does not allow EU passporting. Firms serving both UK and EU markets usually need a dual-structure strategy or a separate EU authorization depending on the business model and customer footprint.
A Lithuanian EMI may be relevant to an EMT structure, but EMI status alone does not complete the legal analysis. The issuer must also satisfy applicable MiCA requirements for electronic money tokens, including the relevant governance, disclosure, and operational obligations.
That is not a reliable way to compare them. Cyprus and Lithuania should be assessed by business fit, governance expectations, documentation burden, local substance, banking feasibility, and supervisory style. Any 'easy EMI license' claim should be treated with caution.
In practice, safeguarding means identifying relevant client funds, reconciling them accurately, segregating or otherwise protecting them under the permitted legal method, maintaining a clear audit trail, and ensuring insolvency protection. Regulators expect a working control framework, not just a statement that a segregated account exists.
Not exactly. PSD2 license is a common SEO and market shorthand, but the legal authorization is usually a payment institution, electronic money institution, AISP, or PISP authorization under the relevant national implementation of PSD2 and related laws.
A payment institution license is often enough when the business executes payments but does not issue e-money or hold stored value balances for customers. Examples can include remittance, payment execution, or payment initiation models where no redeemable e-money liability is created.
Because they often quote only one part of the project. They may exclude remediation, management substance, AML tooling, safeguarding bank onboarding, audit, IT security, DORA work, card scheme dependencies, and the cost of surviving regulator Q&A. A low headline price rarely reflects the real cost of a usable EMI platform.
The correct question is not whether an emi license for sale exists. The correct question is whether your business needs an EMI, a PI, a narrower PSP authorization, or a licensed acquisition target that can survive change-in-control review and operate without major remediation. Start with scope, jurisdiction, and diligence quality.
Our specialists will analyze your specific case, recommend the optimal jurisdiction and license type, and provide a detailed roadmap with timeline and costs.