Skip to main content

The Fintech Regulatory Puzzle: From AISP to Bank

 


When discussing the dynamic world of Fintech, particularly in the context of neo-banks and payment Fintechs, licenses play a crucial role. This regulatory aspect, while less glamorous than cutting-edge user experiences, is a fundamental component of the Fintech ecosystem. Unfortunately, it often does not receive the attention it deserves in Fintech media.

Yet, with Fintech funding drying out, the changed interest rate climate, and increased regulatory scrutiny, the discussion around licenses has once again risen to prominence among Fintech executives.

Regulation, especially in terms of licenses, is an intricate domain typically navigated with the assistance of specialized law firms. These firms guide Fintech companies through a labyrinth of complex regulations, compliance requirements, and the intricate nuances of each country’s unique interpretation of supra-national regulations. Furthermore, securing a license remains a somewhat informal process, wherein Fintech executives must convince regulators that their operations pose no threat to the existing financial system. Building strong relationships with regulators can significantly ease this complex journey.

Now, let us explore some fundamental concepts related to licenses, particularly within European countries. It is essential to note that licenses in the European Union (EU) are, in principle, EU licenses. This means that a license obtained in one EU country can, with minimal effort, be passported to another EU country. Consequently, many Fintechs search for the EU country with the most accommodating regulatory environment. Lithuania, for example, has attracted numerous Fintechs seeking an EU license due to its favorable regulatory climate.

In addition to selecting the right country, Fintechs can choose from a range of licenses, such as:

  • AISP (Account Information Service Provider): Offers account aggregation services, providing customers with a single view of all their accounts in one place.

  • PISP (Payment Initiation Service Provider): Facilitates direct bank transfers from a customer’s account.

  • PI (Payment Institution): Supports various payment and money transfer services. A payment institution must specify which payment services it wishes to offer, including:

    • Service 1: Cash depositing (e.g. ATM).

    • Service 2: Cash withdrawal (e.g. ATM).

    • Service 3: Execution of payment transactions (credit transfers, direct debits and other money transfers).

    • Service 4: Similar to service 3 but involving credit lines.

    • Service 5: Issuing and acquiring services (merchant acquiring and payment card issuing).

    • Service 6: Money remittance (cross-border international payments).

  • EMI (Electronic Money Institution): Licensed to manage electronic money, allowing the issuance, distribution and redemption of eMoney, the execution of transactions (e.g. payments and remittances) and the issuing of payment cards.

  • Bank: Offers all the services of an EMI institution but with additional capabilities, such as using client deposits for internal investments or financing credits. Lending is where a bank distinguishes itself from an EMI institution.

These licenses are ranked in order of complexity to obtain and maintain. As you move down the list, the capital requirements, reporting demands, compliance checks, and regulatory oversight become more rigorous. For instance, a bank typically needs a capital base of at least 5 million EUR, while an EMI can operate with a capital base as low as 350,000 EUR, and a PI with a base of less than 125,000 EUR. As licenses become more comprehensive, entities lower on the list are often automatically licensed for services higher on the list, or they can easily obtain them. For example, a "Bank" automatically holds licenses as an AISP, PISP, PI, and EMI.

Consequently, choosing the right license is a critical decision for Fintech companies. Some Fintechs may opt to operate without a license by partnering with third parties that possess the necessary licenses. For instance, for a Fintech wanting to offer

  • AISP / PISP services : Companies like Tink, Digiteal, or Ibanity/Ponto offer an abstraction layer, eliminating the need for a license while simplifying PSD2 integration with various banks.

  • Payment services (requiring a PI license): Payment Service Providers (PSPs) like Mollie, Adyen, or Stripe facilitate these services. More complex services are sometimes required, e.g. for marketplaces that handle funds collected from one party to pay another. Some PSPs like MangoPay or Thunes are specialized in offering these kinds of services.

  • Holding money (requiring an EMI license): Companies such as Stripe, Adyen, Swan, or Tresor offer these services, making them valuable partners for Fintechs. Cfr. my blog "Fintech Fusion: How Integration is Driving Change" (https://www.finextra.com/blogposting/24977/fintech-fusion-how-integration-is-driving-change).

  • Banking services: Banking as a Service (BaaS) providers like Solarisgroup, Treezor, Contis, Railsr, Bankable, ClearBank, 11:FS Foundry, or traditional incumbent banks acting as partners (e.g. BBVA, Starling Bank, J.P. Morgan, or Goldman Sachs) provide these services.

Besides working with third parties, it is possible to circumvent specific licensing requirements by avoiding certain financial flows or securing particular exemptions. For example:

  • A marketplace that intermediates between a buyer and a seller should have a PI license if the buyer pays to the marketplace and the marketplace then pays out the seller. This can be avoided by working with an intermediary PSP (see above) but can also be avoided by just mediating between the buyer and seller, meaning the buyer directly pays to the seller and the marketplace just gets a commission for the mediation.

  • "Commercial Agent" principle, i.e. institution acts as an intermediary on behalf of the principal. For instance, a city wants to issue a small city voucher to its citizens. This could be managed entirely by a voucher issuer (including all money flows), but this would require the voucher issuer to have an EMI license. The voucher issuer could however also function as a commercial agent on behalf of the city. In this case all money linked to the vouchers stays in the city’s bank account, but the voucher issuer offers the commercial platform for the city voucher on behalf of the city.

  • Limited network exemption: the PSD2 regulation exempts also certain financial instruments from the definition of eMoney. As a result, the issuing company does not need a license. Typically these are financial instruments which only allow to pay in a limited network (e.g. a gift card for 1 store or 1 chain), for a specific product (e.g. a fuel card, phone card or meal voucher) or for instruments for which there is a specific social or fiscal law in place in the local country (e.g. meal vouchers, service vouchers…​).
    Under this last category, we could also categorize specific regulated money flows, like e.g. social secretariats paying out salaries to employees or notaries paying out the seller of a house.

  • Cash collection and delivery within the framework of a nonprofit or charitable activity

  • Small institutions: institutions which manage eMoney but stay under certain limit in the amount of payment transaction and/or money issued, can avoid also a license (until they excecoed the threshold), as long as they execute a certain self-declaration.

Ultimately, licenses and regulations aim to safeguard the financial system and ensure that customer funds remain secure, and financial commitments made by financial institutions are met. This complexity is ensured through several mechanisms:

  • Operational Controls: These encompass security measures, IT processes, documented procedures, and independent audits, all designed to minimize the risk of mishandling money or illegal activities.

  • Restrictions on Fund usage: These define how institutions can use customer deposits for investments and credits. They also require mechanisms to manage risk (including hedging techniques and insurances) and ensure liquidity. E.g. payment institutions and EMI should put in place necessary safeguards to protect those funds, while banks can use the funds to generate revenues.

  • Capital Requirements: These serve as buffers that institutions can tap into in case of (temporary) issues.

  • Deposit Guarantee Schemes: These schemes, organized at the country level, act as insurance in the event that other mechanisms fail.

Understanding these risk management mechanisms provides insight into why different licenses exist and why regulators enforce varying levels of control. Notably:

  • Money deposited with an EMI institution is not protected by the "Deposit Guarantee Scheme" but with proper safeguards, this may not be a concern, as all EMI deposits are typically ring-fenced.
    As a result one could say that money at an EMI is less safe (as there is no deposit guarantee scheme), but on the other hand they are more safe, as an EMI should (if all processes are correctly in place) protect all funds, while a bank’s deposit are only protected up to 100.000 EUR.

  • EMIs cannot typically offer interest on accounts (although some do) since they ring-fence deposits, preventing them from generating revenue.

  • EMIs can lend using their own capital but cannot use client deposits for lending, which distinguishes them from banks with more extensive lending capabilities.

  • An EMI is allowed to store clients' funds for a longer period, in contrast to a PI, which can only keep clients' funds for a short period (enough to manage the transfer).

  • An EMI institution should protect customers’ rights to the same high standards as banks - for example, the right to information before and after a payment and fair treatment when something goes wrong.

  • EMI institutions must adhere to similar Know Your Customer (KYC) and Anti-Money Laundering (AML) standards as banks.

As you can see, there’s considerable nuance in these licenses. Given their high cost in terms of acquisition and maintenance, it is vital for Fintech companies to assess whether a license is necessary for their business and explore potential exemptions or partnerships with third parties. If a license is indeed required, selecting the right one is of paramount importance, including the possibility of obtaining a more favorable license in a different country.

Check out all my blogs on https://bankloch.blogspot.com/

Comments

Popular posts from this blog

Transforming the insurance sector to an Open API Ecosystem

1. Introduction "Open" has recently become a new buzzword in the financial services industry, i.e.   open data, open APIs, Open Banking, Open Insurance …​, but what does this new buzzword really mean? "Open" refers to the capability of companies to expose their services to the outside world, so that   external partners or even competitors   can use these services to bring added value to their customers. This trend is made possible by the technological evolution of   open APIs (Application Programming Interfaces), which are the   digital ports making this communication possible. Together companies, interconnected through open APIs, form a true   API ecosystem , offering best-of-breed customer experience, by combining the digital services offered by multiple companies. In the   technology sector   this evolution has been ongoing for multiple years (think about the travelling sector, allowing you to book any hotel online). An excellent example of this

Are product silos in a bank inevitable?

Silo thinking   is often frowned upon in the industry. It is often a synonym for bureaucratic processes and politics and in almost every article describing the threats of new innovative Fintech players on the banking industry, the strong bank product silos are put forward as one of the main blockages why incumbent banks are not able to (quickly) react to the changing customer expectations. Customers want solutions to their problems   and do not want to be bothered about the internal organisation of their bank. Most banks are however organized by product domain (daily banking, investments and lending) and by customer segmentation (retail banking, private banking, SMEs and corporates). This division is reflected both at business and IT side and almost automatically leads to the creation of silos. It is however difficult to reorganize a bank without creating new silos or introducing other types of issues and inefficiencies. An organization is never ideal and needs to take a number of cons

RPA - The miracle solution for incumbent banks to bridge the automation gap with neo-banks?

Hypes and marketing buzz words are strongly present in the IT landscape. Often these are existing concepts, which have evolved technologically and are then renamed to a new term, as if it were a brand new technology or concept. If you want to understand and assess these new trends, it is important to   reduce the concepts to their essence and compare them with existing technologies , e.g. Integration (middleware) software   ensures that 2 separate applications or components can be integrated in an easy way. Of course, there is a huge evolution in the protocols, volumes of exchanged data, scalability, performance…​, but in essence the problem remains the same. Nonetheless, there have been multiple terms for integration software such as ETL, ESB, EAI, SOA, Service Mesh…​ Data storage software   ensures that data is stored in such a way that data is not lost and that there is some kind guaranteed consistency, maximum availability and scalability, easy retrieval and searching

IoT - Revolution or Evolution in the Financial Services Industry

1. The IoT hype We have all heard about the   "Internet of Things" (IoT)   as this revolutionary new technology, which will radically change our lives. But is it really such a revolution and will it really have an impact on the Financial Services Industry? To refresh our memory, the Internet of Things (IoT) refers to any   object , which is able to   collect data and communicate and share this information (like condition, geolocation…​)   over the internet . This communication will often occur between 2 objects (i.e. not involving any human), which is often referred to as Machine-to-Machine (M2M) communication. Well known examples are home thermostats, home security systems, fitness and health monitors, wearables…​ This all seems futuristic, but   smartphones, tablets and smartwatches   can also be considered as IoT devices. More importantly, beside these futuristic visions of IoT, the smartphone will most likely continue to be the center of the connected devi

Neobanks should find their niche to improve their profitability

The last 5 years dozens of so-called   neo- or challenger banks  (according to Exton Consulting 256 neobanks are in circulation today) have disrupted the banking landscape, by offering a fully digitized (cfr. "tech companies with a banking license"), very customer-centric, simple and fluent (e.g. possibility to become client and open an account in a few clicks) and low-cost product and service offering. While several of them are already valued at billions of euros (like Revolut, Monzo, Chime, N26, NuBank…​), very few of them are expected to be profitable in the coming years and even less are already profitable today (Accenture research shows that the average UK neobank loses $11 per user yearly). These challenger banks are typically confronted with increasing costs, while the margins generated per customer remain low (e.g. due to the offering of free products and services or above market-level saving account interest rates). While it’s obvious that disrupting the financial ma

Can Augmented Reality make daily banking a more pleasant experience?

With the   increased competition in the financial services landscape (between banks/insurers, but also of new entrants like FinTechs and Telcos), customers are demanding and expecting a more innovative and fluent digital user experience. Unfortunately, most banks and insurers, with their product-oriented online and mobile platforms, are not known for their pleasant and fluent user experience. The   trend towards customer oriented services , like personal financial management (with functions like budget management, expense categorization, saving goals…​) and robo-advise, is already a big step in the right direction, but even then, managing financials is still considered to be a boring intangible and complex task for most people. Virtual (VR) and augmented reality (AR)   could bring a solution. These technologies provide a user experience which is   more intuitive, personalised and pleasant , as they introduce an element of   gamification   to the experience. Both VR and AR

Beyond Imagination: The Rise and Evolution of Generative AI Tools

Generative AI   has revolutionized the way we create and interact with digital content. Since the launch of Dall-E in July 2022 and ChatGPT in November 2022, the field has seen unprecedented growth. This technology, initially popularized by OpenAI’s ChatGPT, has now been embraced by major tech players like Microsoft and Google, as well as a plethora of innovative startups. These advancements offer solutions for generating a diverse range of outputs including text, images, video, audio, and other media from simple prompts. The consumer now has a vast array of options based on their specific   output needs and use cases . From generic, large-scale, multi-modal models like OpenAI’s ChatGPT and Google’s Bard to specialized solutions tailored for specific use cases and sectors like finance and legal advice, the choices are vast and varied. For instance, in the financial sector, tools like BloombergGPT ( https://www.bloomberg.com/ ), FinGPT ( https://fin-gpt.org/ ), StockGPT ( https://www.as

From app to super-app to personal assistant

In July of this year,   KBC bank   (the 2nd largest bank in Belgium) surprised many people, including many of us working in the banking industry, with their announcement that they bought the rights to   broadcast the highlights of soccer matches   in Belgium via their mobile app (a service called "Goal alert"). The days following this announcement the news was filled with experts, some of them categorizing it as a brilliant move, others claiming that KBC should better focus on its core mission. Independent of whether it is a good or bad strategic decision (the future will tell), it is clearly part of a much larger strategy of KBC to   convert their banking app into a super-app (all-in-one app) . Today you can already buy mobility tickets and cinema tickets and use other third-party services (like Monizze, eBox, PayPal…​) within the KBC app. Furthermore, end of last year, KBC announced opening up their app also to non-customers allowing them to also use these third-party servi

Eco-systems - Welcome to a new cooperating world

Last week I attended the Digital Finance Summit conference in Brussels, organized by Fintech Belgium, B-Hive, Febelfin and EBF. A central theme of the summit was the cooperation between banks and Fintechs and more in general the rise of ecosystems. In the past I have written already about this topic in my blogs about "Transforming the bank to an Open API Ecosystem ( https://www.linkedin.com/pulse/transforming-bank-open-api-ecosystem-joris-lochy/ ) and "The war for direct customer contact - Banks should fight along!" ( https://www.linkedin.com/pulse/war-direct-customer-contact-banks-should-fight-along-joris-lochy/ ), but still I was surprised about the number of initiatives taken in this domain. In my last job at The Glue, I already had the pleasure to work on several interesting cases: TOCO   ( https://www.toco.eu ): bringing entrepreneurs, accountants and banks closer together, by supporting entrepreneurs and accountants in their daily admin (and in the f

PFM, BFM, Financial Butler, Financial Cockpit, Account Aggregator…​ - Will the cumbersome administrative tasks on your financials finally be taken over by your financial institution?

1. Introduction Personal Financial Management   (PFM) refers to the software that helps users manage their money (budget, save and spend money). Therefore, it is often also called   Digital Money Management . In other words, PFM tools   help customers make sense of their money , i.e. they help customers follow, classify, remain informed and manage their Personal Finances. Personal Finance   used to be (or still is) a time-consuming effort , where people would manually input all their income and expenses in a self-developed spreadsheet, which would gradually be extended with additional calculations. Already for more than 20 years,   several software vendors aim to give a solution to this , by providing applications, websites and/or apps. These tools were never massively adopted, since they still required a lot of manual interventions (manual input of income and expense transaction, manual mapping transactions to categories…​) and lacked an integration in the day-to-da