#
KNF licenses payment institutions (KIP), small payment institutions (SPI/MIP) and e-money institutions (EMI) under Poland's Payment Services Act (transposing PSD2). A March 2026 amendment (Journal of Laws 2026 item 340, in force 28 March 2026) implements PSD2 Art. 35a and prepares for the EU Instant Payments Regulation, creating new payment-system direct-access rights for KIP/EMI and non-discriminatory indirect access for SPI, effective from 9 January 2027. A separate amendment (Journal of Laws 2026 item 623) empowers KNF to fine payment providers up to 10% of net revenue for breaches of instant-payment provisions.
Layered onto this national measure is Poland's status, as a non-euro EU Member State, under the EU Instant Payments Regulation. Polish PSPs face 2027 compliance deadlines for instant-transfer, equal-charges and Verification-of-Payee obligations, aligning closely with the national amendment's own 2027 horizon, plus a distinct and later deadline of 9 June 2028 for enabling out-of-hours sending from national-currency accounts. This staggered timeline is the defining licensing-and-market-access structural fact for Poland this cycle. Both findings are assessed with Assessed-tier confidence, the national amendment on a Tier-1/2 basis and the Instant Payments Regulation deadline structure on a Tier-2 industry-source basis.
The new KNF reporting obligation introduced by the same amendment — requiring PSPs to report annually on transfer-fee levels, including instant-transfer pricing, and on the percentage of transactions rejected due to EU financial-sanctions screening — functions as a market-access-adjacent transparency measure: it does not itself restrict entry, but it materially increases the ongoing reporting burden attached to holding a Polish payment-institution or electronic-money-institution authorisation.
Carrying the bank-PSP versus non-bank-PI/EMI distinction through this picture: the amendment's provisions apply across the payment-service-provider population generically, but the annual KNF reporting obligation and the new sanctioning powers will likely fall with particular practical weight on non-bank payment institutions and electronic money institutions, which typically carry thinner compliance infrastructure than bank-owned PSPs. This front-loading of national conduct infrastructure ahead of PSD3/PSR's EU-wide transposition is itself a market-access signal: KNF is positioned to exercise a materially strengthened supervisory toolkit before the EU-wide framework equalises requirements across Member States, meaning firms already operating in Poland, or seeking to enter via a Polish authorisation rather than an EU passport from another Member State, face incremental national-level requirements ahead of peers licensed elsewhere in the EU.
Outlook
The core question for market entrants and existing licence-holders alike is how KNF will operationalise its new reporting and sanction powers between now and the 2027 effective date. No implementing guidance or KNF communication on this point was identified in this cycle's evidence. The convergence of the national amendment's 2027 horizon with the EU Instant Payments Regulation's own 2027 deadline for non-euro states, followed by the 2028 out-of-hours deadline, gives firms a reasonably clear compliance calendar, but the absence of KNF implementing detail on the reporting-return format and the sanction-power exercise threshold remains the principal open item to watch into next cycle.
Licensing, Authorisation & Market Access
Poland's Payment Services Act has been amended, published in the Journal of Laws 2026 as item 623, to implement Regulation (EU) 2024/886, the Instant Payments Regulation. The amendment introduces a new Article 9a documentation regime governing direct-participant access to designated payment systems for krajowe instytucje platnicze (KIP, national payment institutions) and e-money institutions. To obtain direct-participant status, an institution must satisfy documentation requirements covering safeguarding of client funds, governance and ICT risk management, and a winding-up plan. This expands the set of institutions that can access designated payment systems directly, rather than through a sponsoring bank or scheme intermediary, a change that bears on non-bank payment institutions specifically since bank payment-service providers have generally had more established direct-access routes.
Alongside the access expansion, the amendment hands the Komisja Nadzoru Finansowego (KNF) a materially strengthened enforcement toolkit specific to Instant Payments compliance. A payment service provider found in breach of SEPA Instant or Instant Payments Regulation obligations faces a fine of up to 10% of its net payment-services revenue; the individual manager found responsible faces a personal fine of up to PLN 21,500,000. Both elements of this sanctions power take legal effect on 9 January 2027, meaning the current period functions as a compliance run-up window before the regime is enforceable.
Outlook
The 9 January 2027 effective date for KNF's new sanctions power is the key date for payment service providers operating in Poland. Providers relying on the new Article 9a direct-participant access route should expect the documentation standard — safeguarding, governance/ICT, and winding-up planning — to be the practical gating requirement for that access, distinct from and in addition to their existing authorisation status as a KIP or e-money institution.
3 earlier distinct update(s)
Licensing, Authorisation & Market Access
Poland's Payment Services Act amendments this cycle materially reshape the non-bank market-access picture. The Act of 23 January 2026 (Journal of Laws 2026 item 340), in force since 28 March 2026, implements PSD2 Article 35a, granting national payment institutions (KIP) and e-money institutions (EMI) the right to act as direct participants in payment systems rather than being routed exclusively through bank sponsorship. From 9 January 2027, this direct-access model is complemented by a non-discriminatory indirect-access right for small payment institutions (SPI), timed ahead of the EU Instant Payments Regulation's broader compliance horizon. This is a clear instance of the bank-PSP versus non-bank-PI/EMI access asymmetry narrowing by statute rather than by scheme concession.
The access expansion comes with new safeguarding documentation obligations. A new Article 9a requires any KIP or EMI seeking direct payment-system participation to document its client-fund safeguarding measures as a condition of that access; the National Bank of Poland (NBP) is empowered to hold accounts for payment institutions, subject to Presidential consent, and the KNF may issue a confirming opinion on the adequacy of safeguarding arrangements at the institution's request. This structure gives non-bank PSPs a documented path to direct system participation, but conditions that path on a safeguarding standard that previously did not need to be demonstrated to gain system access at all.
A parallel amendment (Journal of Laws 2026 item 623) sharply raises the compliance stakes attached to the instant-payment regime specifically: the KNF is now empowered to fine payment providers up to 10 percent of net revenue for breaches of provisions concerning instant payments, a materially higher ceiling than typical conduct-penalty regimes. Read together, these two amendments describe a market being opened to non-bank direct participation while simultaneously being subjected to a substantially sharper enforcement instrument specific to the instant-payment rails those institutions are being granted access to.
Outlook
The most consequential date to track is 9 January 2027, when the SPI indirect-access right takes effect; the intervening period is when institutions will need to complete the Article 9a safeguarding documentation required for direct participation. Early KNF enforcement activity under the new 10-percent-of-net-revenue fining power, once it occurs, will be a useful signal of how the supervisor intends to calibrate this considerably sharper penalty ceiling in practice.
Licensing, Authorisation & Market Access
KNF revoked mPay S.A.'s authorisation to operate as a national payment institution this cycle, a confirmed enforcement action against a nonbank payment institution. The revocation carries a hard operational deadline: mPay must wind down its agent and counterparty agreements and allow all users to withdraw or transfer their funds no later than 30 September 2026. This is a market-exit event for a licensed nonbank PI operating under Poland's national authorisation regime, distinct from the bank-supervised payment channel.
Separately, and with materially thinner sourcing, a reported Payment Systems Amendment 2026 would introduce revised rules on direct access to payment systems together with a compressed 14-day onboarding playbook for new entrants. This rests on a single Tier-4 source and is not independently corroborated this cycle; it is described as being positioned ahead of anticipated PSD3/PSR transposition rather than as a confirmed change to current practice.
The standing structure of Poland's nonbank payment-institution licensing remains relevant context for both developments: the Small Payment Institution (MIP) category, the most-used Polish payment licence, carries a EUR 1.5 million monthly transaction-volume cap and a EUR 2,000 per-client cap, and is domestic-only with no EU passporting rights — a materially different regime from the fully PSD2-authorised National Payment Institution (KIP) category that mPay held before revocation. This bank-PI/EMI distinction is central to understanding both the mPay revocation's market impact and the significance of any future direct-access reform.
Outlook
The mPay wind-down deadline of 30 September 2026 is the immediate item to track, as is whether the reported Payment Systems Amendment 2026 receives independent corroboration in a future cycle. Both developments sit ahead of the broader PSD3/PSR transposition horizon, which will eventually reshape the MIP/KIP distinction itself.
Licensing, Authorisation & Market Access
Poland's crypto-asset licensing position tightened this cycle. KNF confirmed it has missed the 1 July 2026 deadline to designate a national MiCA competent authority, continuing to appear on ESMA's competent-authority list without the formal powers designation would confer. In the interim, KNF operates only under limited cross-border-notification provisions, pending the still-unenacted domestic Act on the crypto-assets market. This finding is Confirmed-confidence and assessed at CRITICAL impact, reflecting direct risk to Polish crypto-asset businesses' ability to operate and to market entrants' licensing-timeline assessments.
KNF's own statement draws a stark consequence: domestic entities will lose the ability to provide crypto-asset services under Article 143(3) of MiCA absent authorisation, because the Regulation's transitional deadline cannot be extended nationally. This is a newly surfaced episode this cycle, converting an administrative delay into an imminent compliance-and-continuity risk for payments and crypto businesses active in Poland. Both findings concern non-bank payment-institution and e-money-institution-licensed crypto-asset service providers specifically, rather than bank-PSPs, since it is the CASP authorisation track under MiCA that is affected.
The pending Polish draft Act on the crypto-assets market would designate KNF as competent authority, but KNF's own supervisory blog indicates the draft would not delegate powers beyond the MiCA Article 111(6) minimum. That is a materially narrower mandate than the equivalent implementing law already adopted in Estonia. The narrow drafting signals KNF is likely to have fewer supervisory tools than peer regulators even once the Act is enacted, a factor relevant to market-access risk assessments. No enactment date for the Act has been confirmed.
A fourth development compounds the exposure. The European Banking Authority confirmed that the EU-wide PSD2/MiCA transitional no-action period for e-money-token-transacting CASPs, set by the EBA's No-Action Letter of 2 June 2025, ended on 2 March 2026. This shifts PSD2 authorisation supervisory expectations for a specified CASP subset onto national competent authorities including KNF, adding a new national compliance workstream for affected entities. This is again a non-bank PI/EMI-track authorisation question, concerning the PSD2 licensing status of a CASP subset rather than the bank-licensing perimeter.
Outlook
The determinative marker to watch is the enactment date of the Polish Act that would designate KNF as MiCA competent authority; until it passes, the Article 143(3) service-continuity risk persists with no confirmed timeline. A second marker is further EBA or KNF guidance on PSD2 authorisation for the e-money-token-transacting CASP subset now that the transitional period has closed.
1 further periodic run re-emitted the standing brief unchanged and is not shown.
Sources and findings (5)
- T1https://www.knf.gov.pl/en/CONSUMERS/POLISH_FINANCIAL_SUPERVISION_AUTHORITY Applies beyond this jurisdiction (EU)retrieved
- T3https://globallawexperts.com/how-to-get-a-psd2-license/ Applies beyond this jurisdiction (EU)retrieved
- T3https://www.dudkowiak.com/fintech-in-poland/small-payment-institution/retrieved
- T3https://www.dudkowiak.com/fintech-in-poland/small-payment-institution-vs-authorised-payment-institution-in-poland/ Applies beyond this jurisdiction (EU)retrieved
- T3https://finance.yahoo.com/news/provident-polska-secures-full-payment-093000380.html Applies beyond this jurisdiction (EU)retrieved