Licence strategy, applications and regulator engagement for gaming, payments, e-money, investment and crypto-asset businesses.
Industry 02
Fintech & Payments
Authorisation, safeguarding, partnerships and ongoing compliance for businesses that move, hold or issue money.
Topics: EMI & PI licensingSafeguardingOpen bankingEmbedded finance

Who we advise
- Electronic money and payment institutions
- PSPs, gateways and payment orchestrators
- Banking-as-a-service and card programme providers
- Open banking (AIS / PIS) providers
- Platforms embedding payments or accounts
Specialisations
Business models we advise
- 01Payment Institutions
- Authorisation, safeguarding and conduct of business for payment institutions, including agent networks.
- 02Electronic Money Institutions
- E-money licensing, safeguarding, distribution through agents and distributors, and card programmes.
- 03PSPs & Acquirers
- Acquiring, gateway and payment service provider models, scheme rules and merchant onboarding obligations.
- 04Payment Facilitators
- Sub-merchant onboarding, card scheme registration and the regulatory position of the flow of funds.
- 05Merchant Services
- Merchant onboarding, underwriting and monitoring, and the contracts between providers and merchants.
- 06Embedded Finance
- Allocating regulatory responsibility between licensed providers and the brands that distribute their products.
- 07Payment Platforms
- Platforms that collect and pay out funds for others, and the licences and exemptions that apply to them.
Context
The regulatory landscape
Payments and e-money businesses operate under close supervisory attention. Regulators expect robust safeguarding, operational resilience and governance from the first day of authorisation, and banks expect the same before they provide the accounts that make the model work.
We advise payment and e-money institutions, PSPs, BaaS providers and companies embedding financial services into their products — from licence selection and application through to partnerships, outsourcing and supervisory engagement.
Challenges
Where businesses need support
- 1.
Selecting the regime
Payment institution, e-money institution or an agent model — and in which jurisdiction — for a given product.
- 2.
Safeguarding
Designing and evidencing safeguarding that satisfies regulators, auditors and partner banks.
- 3.
Operational resilience
ICT risk management, outsourcing and third-party oversight requirements under frameworks such as DORA.
- 4.
Partner bank relationships
Securing and keeping safeguarding and operational accounts with credit institutions.
- 5.
Passporting and expansion
Using EU passporting rights and planning for markets where passporting is not available.
- 6.
Embedded finance allocation
Allocating regulatory responsibility between licensed providers and the brands distributing their products.
Services
How we help
Bank account opening, merchant account and acquiring setup, payment flows and safeguarding for businesses banks consider high-risk.
AML/CFT programmes, MLRO-as-a-Service, independent AML/CFT audits, risk assessments, monitoring, sanctions and inspection support.
Information security compliance, security governance and policies, gap assessments, DORA, NIS2, vendor risk and incident governance.
Privacy compliance and GDPR programmes, notices and DPAs, DPIAs, data mapping and ROPA, transfers, audits and breach response.
Platform, white-label, B2B supply, SaaS, affiliate and outsourcing agreements drafted for regulated environments.
Market prioritisation, regulatory roadmaps and launch readiness for businesses expanding into new jurisdictions.
Jurisdictions
Relevant frameworks

Europe18
- EUEU / MiCAPayment and e-money institutions
- CYCyprusPayment / e-money institution
- CZCzech RepublicPayment / e-money institution
- EEEstoniaPayment / e-money institution
- FIFinlandPayment / e-money institution
- DEGermanyPayment / e-money institution
- ITItalyPayment / e-money institution
- LVLatviaPayment / e-money institution
- LILiechtensteinPayment / e-money institution
- LTLithuaniaElectronic money institution · Payment institution
- MTMaltaFinancial institution licence
- PLPolandPayment / e-money institution
- PTPortugalPayment / e-money institution
- RORomaniaPayment / e-money institution
- ESSpainPayment / e-money institution
- CHSwitzerlandFintech licence · SRO affiliation
- UAUkrainePayment / e-money institution
- GBUnited KingdomEMI / authorised payment institution
Asia & Middle East3
Americas & Caribbean3
Africa & Indian Ocean1
Insights
Related analysis

Regulatory update
The EU AML package: preparing for the single rulebook and AMLA
The EU's AML reform replaces national transposition with a directly applicable regulation and a new supervisory authority. Regulated businesses have time to prepare — but not unlimited time.
5 min read

Practice note
DORA in practice for payment and e-money institutions
The Digital Operational Resilience Act has applied since January 2025. For smaller payment and e-money institutions, the practical burden sits largely in ICT third-party arrangements.
5 min read
Questions
Frequently asked
Do we need our own licence to offer payments in our product?
Not always. Depending on the flow of funds, an agent or distributor model with a licensed partner, or a specific exemption, may be available. We analyse the flow before recommending an authorisation route.
Discuss your matter with a senior advisor.
Share a few details about your business and plans. We will come back to arrange a confidential initial conversation.
