European Economic Area

Licensing, Authorisation & Market Access

The Council COREPER endorsed final compromise texts for the PSD3/PSR legislative package on 22-23 April 2026, with an ECON committee vote scheduled for 5 May 2026. Official Journal publication is anticipated in the second half of 2026, and general application is expected approximately 21 months after publication, placing the regime effective start near 2028. This licensing-and-market-access development is corroborated across multiple independent law-firm advisories, though no primary Council or Official Journal text was retrieved this cycle, capping the finding at assessed rather than high confidence for the specific dates involved.

The structural feature of this package most relevant to market access is consolidation: PSD3, a directive requiring national transposition, and the Payment Services Regulation, a directly-applicable regulation, together repeal both PSD2 and the second E-Money Directive, merging the separate payment-institution and e-money-institution authorisation categories into a single supervisory framework. For non-bank payment and e-money institutions, this is a structural change to the authorisation perimeter itself, not merely a tightening of existing rules within the current PI/EMI split. Bank-PSPs, which are authorised under a separate credit-institution regime and merely notify rather than seek fresh authorisation for payment services, are less directly affected by this consolidation than non-bank PIs and EMIs, for whom the merged authorisation category is the primary market-access mechanism into the EEA payments market.

Although the safeguarding and conduct-of-business detail sits primarily under the conduct module, it is the licensing-and-authorisation change that creates the underlying single framework within which those safeguarding rules will operate: once PI and EMI categories merge, whatever safeguarding standard applies to the merged category becomes the market-access baseline for any new entrant seeking non-bank payment-services authorisation in the EEA, rather than a bifurcated standard depending on which of the two legacy categories a firm happened to seek.

The practical market-access implication for firms currently authorised as either a payment institution or an e-money institution is that the regulatory category they currently hold is scheduled to be absorbed into a single framework by around 2028, with the intervening period, from Official Journal publication in the second half of 2026 through to general application roughly 21 months later, as the window in which national competent authorities and firms alike will need to work through transitional arrangements. The gap register for this cycle flags that no Tier-1 primary EU official text, whether from the Council, the European Parliament, or the Official Journal, was retrieved for the PSD3/PSR final compromise texts; the finding rests on convergent Tier-4 law-firm commentary. This does not undermine the substance of the finding, given the consistency across multiple independent advisory sources on both the COREPER-endorsement date and the general timeline, but it does mean that firms should treat the specific dates as assessed rather than confirmed pending Official Journal publication itself.

Outlook

The two dates to track for licensing and market access are Official Journal publication, expected in the second half of 2026, and general application, expected near 2028. Firms currently authorised under the existing PI/EMI split should treat the intervening period as the practical window for assessing what a consolidated authorisation category means for their existing licence, particularly where a firm currently holds separate PI and EMI permissions that the new regime may treat differently. No transitional-mapping guidance was identified this cycle, and that absence is itself worth monitoring as Official Journal publication approaches.

Conduct, Safeguarding & Financial Promotions

The Payment Services Regulation shifts fraud liability onto payment service providers: a PSP that fails to implement suitable anti-fraud mechanisms becomes liable for the resulting customer losses, and transactions initiated or altered by a fraudster are treated as unauthorised, placing the full fraudulent amount on the PSP rather than the customer. This is a direct conduct-of-business change with material commercial consequence for any PSP whose current fraud-prevention controls were built to the older, more consumer-liability-tolerant standard; the reallocation effectively makes fraud-control adequacy a balance-sheet question for PSPs rather than solely a customer-redress question.

Alongside the fraud-liability shift, the PSD3/PSR safeguarding regime for e-money institutions tightens materially: EMIs face a stricter T+1 deadline for securing incoming funds, together with new concentration-risk-management rules governing the custodians and hedging instruments EMIs use to protect client money. This safeguarding change is explicitly a non-bank-PI/EMI-facing rule; bank-PSPs, whose deposit-taking model already carries prudential capital and deposit-guarantee-scheme protections that EMIs do not have, are not the direct target of this tightening, which is aimed specifically at closing the structural safeguarding gap between how banks and non-bank EMIs each protect client funds.

The Instant Payments Regulation adds two further conduct-relevant obligations that are now live. First, mandatory free payer-side Verification-of-Payee has applied to euro-area PSPs since 9 October 2025, a Tier-1, high-confidence finding directly sourced to the European Central Bank; non-euro-area EEA Member States face a materially later compliance date of 9 July 2027, meaning the EEA currently operates under two different VoP compliance timelines depending on currency area. Second, and independently of Verification-of-Payee, Instant Payments Regulation Article 5d requires PSPs offering instant credit transfers to verify at least daily whether any payment-service user is subject to targeted financial restrictive measures, a standing sanctions-screening obligation layered on top of, but distinct from, the payee-verification requirement.

Taken together, these four developments, fraud-liability reallocation, tightened EMI safeguarding, live euro-area Verification-of-Payee, and daily instant-payments sanctions screening, represent a coordinated tightening of the conduct-and-safeguarding perimeter around instant and account-to-account payments specifically, rather than a single isolated rule change. The structural effect is to move both fraud risk and screening obligations further toward the PSP itself and away from the customer or from a purely post-hoc enforcement model, while simultaneously narrowing the safeguarding gap between bank-PSPs and non-bank EMIs, without fully closing it, given that EMIs still operate under a segregation-based safeguarding model rather than the deposit-guarantee-scheme model available to banks.

Outlook

The non-euro-area Verification-of-Payee deadline of 9 July 2027 is the next scheduled conduct-and-safeguarding milestone, and the practical question for PSPs in non-euro EEA Member States is whether they build toward that deadline on the same technical rulebook the euro area already uses, given that the European Payments Council Scheme Rulebook already exists and entered into force ahead of the euro-area deadline. For EMIs, the T+1 safeguarding deadline and the new concentration-risk-management rules are the most immediate operational change to plan around, since the safeguarding tightening does not carry a phased or staggered implementation date in the material identified this cycle. Whether the fraud-liability reallocation under the PSR produces a measurable shift in PSP anti-fraud-control investment ahead of general application near 2028 is a further point worth tracking in subsequent cycles.

Stablecoins & Digital Money

The Markets in Crypto-Assets Regulation reached full enforcement across all 27 Member States on 1 July 2026, as its transitional grandfathering window closed. This is the single most consequential digital-money milestone in the EEA this cycle, though it is corroborated only at Tier 4 through commercial secondary sources, with no ESMA or EBA primary text retrieved confirming the milestone in primary-regulator language.

The compliant euro-stablecoin market grew materially around this milestone. Eight MiCA-compliant euro-denominated stablecoins were recorded as of June 2026, up from five, with compliant market capitalisation up 128 percent year-on-year to approximately 673.9 million dollars. Three tokens, EURT, EURS and EURA, exited compliance over the period, while four new entrants, EUROP, EURQ, EURI and EURAU, achieved compliance, indicating a churning rather than a simply additive market. Circle EURC remains the dominant issuer, holding roughly 41 percent of euro-stablecoin market capitalisation as of the first quarter of 2026, up from 17 percent a year earlier in capitalisation terms, even as independent reporting suggests its trading-volume share is declining as MiCA-compliant rivals such as EURCV, EURI and EURAU grow. The apparent tension, rising capitalisation share alongside declining volume share, suggests EURC retains an outstanding-balance advantage while newer entrants are capturing a growing share of transactional flow.

A distinct regulatory development this cycle addresses the boundary between payments regulation and crypto-asset regulation directly. Following a 2025 EBA no-action letter whose transition period ended 2 March 2026, an EBA Opinion issued 12 February 2026 narrowed the scope of e-money-token-related activities that require dual authorisation under both PSD3 and MiCA, though the Opinion stops short of eliminating dual-licensing altogether: two-licence outcomes remain necessary for some business models. This is a market-access-relevant clarification for any e-money-token issuer structuring its EEA entity around a single-licence model, and it sits at the direct intersection of this module and the licensing-and-authorisation module, since the practical effect is to narrow, but not close, the population of firms that need both a payment-institution-type authorisation and a MiCA crypto-asset-service-provider authorisation for the same underlying activity.

Outlook

Further EBA clarification on the PSD3/MiCA dual-licensing boundary for e-money-token activity is anticipated, following the 12 February 2026 Opinion, though its timing is uncertain and no confirmed publication date was identified this cycle. Whether the euro-stablecoin issuer landscape continues to diversify away from Circle EURC dominance in trading-volume terms, even as EURC capitalisation share holds up, is the key market-structure question for this module going forward, and the growing set of bank-affiliated issuers entering the market, discussed further under the commercial-intelligence module this cycle, is a direct input into that diversification trend. Any forward-looking framing here is offered as analytical orientation only, not as investment or compliance advice.

Scheme & Network Compliance

The European Payments Council published a dedicated Verification-of-Payee Scheme Rulebook, entering into force 5 October 2025, just days ahead of the 9 October 2025 regulatory deadline under the Instant Payments Regulation. This is a Tier-2, high-confidence finding, and the timing detail, the scheme rulebook entering into force ahead of rather than concurrent with the regulatory deadline, is itself a useful data point on scheme-level readiness: the European Payments Council built and activated the network-level rulebook with a small margin ahead of the legal deadline it was designed to support, rather than the two dates coinciding exactly or the rulebook lagging behind the regulation.

Signal on scheme and network compliance this cycle is otherwise limited: no further scheme-rulebook development, card-scheme rule change, or network-level dispute-resolution update was located for the EEA this cycle beyond the Verification-of-Payee Rulebook itself. The module is flagged as thin-signal accordingly, reflecting an honest account of what was found rather than an attempt to extend a single finding into a broader network-compliance narrative.

Outlook

The practical scheme-compliance question going forward is whether the European Payments Council Rulebook approach, building and activating a dedicated scheme rulebook ahead of a regulatory deadline, is repeated for the non-euro-area Verification-of-Payee deadline of 9 July 2027, or whether that later deadline is met through a different scheme-governance mechanism. No further scheme-level signal was identified this cycle to assess that question directly.

Correspondent Banking, Settlement & Access

The defining structural feature of correspondent banking and settlement access in the EEA this cycle is the bank-versus-non-bank access asymmetry, and this cycle records a material move to narrow it. Since October 2025, non-bank payment service providers meeting TARGET Guideline requirements have been able to access TARGET Services directly, both T2 for payment settlement and TIPS for instant-payment settlement, under a harmonised Eurosystem access policy. This is a Tier-1, high-confidence finding sourced directly to the European Central Bank.

Prior to this harmonised access policy, non-bank PSPs seeking instant or high-value settlement typically depended on a correspondent or agency-bank relationship with a directly-participating bank, a dependency that carries both cost and de-risking exposure, since correspondent banks retain discretion to terminate or restrict access to non-bank PSP clients they assess as higher-risk or lower-margin. Direct TARGET Services access removes that intermediation step for non-bank PSPs that meet the TARGET Guideline eligibility requirements, which is a structural de-risking-mitigation development: a non-bank PSP with direct settlement access is no longer solely dependent on a correspondent bank continuing relationship for its core settlement function, even though it may still rely on correspondent banks for other cross-border or non-euro functions.

This access change should be read as structural rather than incidental. It does not eliminate the underlying asymmetry between bank-PSPs, which have always had direct central-bank settlement access as an incident of their banking licence, and non-bank PSPs, for whom direct access has historically been unavailable regardless of scale or risk profile; but it does narrow the asymmetry specifically for the instant-payment and core payment-settlement functions that TARGET and TIPS cover, which is where the practical correspondent-dependency cost has historically been most acute for non-bank PSPs processing high transaction volumes.

Outlook

The practical question going forward is one of take-up: how many eligible non-bank PSPs move from correspondent-bank-intermediated settlement to direct TARGET Services access, and over what timeframe, is not established by the material identified this cycle, which confirms the policy change but not adoption data. The correspondent-banking de-risking dynamic that direct access is intended to mitigate remains a live background condition even as the harmonised access policy narrows its practical bite for the specific instant-payment and core-settlement functions TARGET and TIPS cover.

Commercial Intelligence & Fintech

Four dated commercial-intelligence entries surfaced for EEA euro-stablecoin issuance and distribution this cycle. AllUnity, a joint venture of DWS, Galaxy Digital and Flow Traders, obtained BaFin authorisation and launched its EURAU euro stablecoin in July 2025; the transaction value was not publicly disclosed. Societe Generale-FORGE cleared MiCA e-money-token requirements via its existing ACPR banking-law authorisation rather than a fresh e-money-institution licence, with its EURCV token settling on Ethereum and extended to Solana in 2024; no transaction value was publicly disclosed. ClearBank announced a partnership with Taurus on 13 January 2026 targeting MiCA-compliant EURC banking services; the financial terms were not publicly disclosed. Wirex, a Visa principal member, launched dual-stablecoin USDC/EURC settlement on the Stellar blockchain in November 2025, integrating Morpho Vaults for automated treasury yield; no transaction value was publicly disclosed.

These four entries are dashboard-tier, dated commercial events rather than a structural market-trend finding in themselves; the structural euro-stablecoin market-growth finding, compliant-issuer count and market-capitalisation trajectory, is carried under the stablecoins module this cycle and should be read alongside these entries rather than duplicated here.

Outlook

None of the four commercial events identified this cycle disclosed transaction values, which limits the depth of commercial-intelligence analysis possible at this time; subsequent cycles may surface disclosed-value follow-on activity for any of the four entities named.