Portugal

The bank-PSP route runs on an entirely different authority. Credit institutions, governed by the RGICSF (Decree-Law 298/92, Article 1-A(1)), are authorised exclusively by the European Central Bank within the Single Supervisory Mechanism for euro-area participating states -- BdP has no independent authorisation power over this population. Around 150 credit institutions operate in Portugal, with the market concentrated among four large groups: Caixa Geral de Depositos, Millennium BCP, Santander Totta and BPI. This bank/non-bank split matters commercially: a fintech or PSP seeking to operate in Portugal must decide at the outset whether to pursue the non-bank PI/EMI route through BdP or partner with (or become) a credit institution subject to ECB authorisation -- two routes with materially different capital, governance and supervisory-relationship implications.

No material change in this baseline licensing architecture was identified this cycle; both tracks are confirmed as stable, standard EEA PSD2/EMD2 and CRD/CRR transpositions.

Outlook

The licensing architecture itself is not in flux, but its interaction with newer regimes is: entities holding PI/EMI authorisation may increasingly need to layer MiCA CASP authorisation (W2) or DORA compliance (W3) on top of their base RJSPME licence, and the distinction between bank and non-bank routes will remain relevant wherever new product categories -- stablecoins, open banking -- test which authorisation track is the natural home for a given activity.

A challenge-stage correction is material here. BdP's Notice No 2/2025, published 20 March 2025, does not stand as a freestanding governance instrument; it amends the base Notice No 3/2020 framework covering governance, internal-control systems and organisational culture for supervised institutions. The amended framework addresses sound administrative and accounting procedures, gender-neutral remuneration policies, and suitability requirements for members of management and supervisory bodies. Institutions tracking their governance obligations should read Notice 2/2025 as a layer on top of the still-live Notice 3/2020 baseline, not as its replacement.

On promotions, a new BdP notice governing advertising of financial products and services and institutional advertising was under public consultation as of late December 2025. Whether that consultation has since closed, whether the notice has been finalised, or whether it remains pending, is unverified as of this July 2026 cycle -- a currency gap flagged for next-cycle verification given financial-promotion enforcement is an under-indexed category in this methodology's bias-correction framework.

Outlook

The trajectory here is escalating rather than stable: the governance-notice correction resolves one open question, but the advertising-notice's live status is the clearer near-term watch item, together with how safeguarding practice evolves as PIs/EMIs increasingly intermediate stablecoin-adjacent products under the new MiCA framework (W2).

The framework's transitional provisions have now reached their deadline. Entities registered under Portugal's prior national regime were permitted to continue operating until 1 July 2026, or until their MiCA authorisation was granted or refused, whichever occurred first. That date has passed as of this cycle's 4 July 2026 reference point. Whether the CASP authorisation register is now complete for previously-registered entities -- and what enforcement posture BdP/CMVM will take toward any that have not yet secured authorisation -- is unverified this cycle; this is flagged as an active market-access cliff-edge to monitor directly rather than assume resolved.

Outlook

Two forward markers matter most: post-deadline completeness of the MiCA CASP register, and the pace at which bank-led stablecoin products (see Bison Bank, W13) come to market under the new authorisation gateway. Both will determine whether Law 69/2025's twin-peaks model translates into an orderly transition or a contested one.

The national DORA implementing law also carries a sanctions regime: infringements may draw fines of up to EUR5 million, 10% of total annual turnover, or three times the economic benefit derived, applicable to both legal entities and natural persons, with serious and very serious enforcement decisions subject to public disclosure.

No PT-specific deviation from the harmonised EU baseline was identified this cycle; the module remains stable.

Outlook

With the regime now over a year into full applicability, the next signal to watch is enforcement activity -- whether BdP begins publishing DORA-related sanctions decisions, which would test the practical bite of the EUR5 million/10%-turnover/3x-benefit framework against Portuguese institutions.

The scheme's dominance is now under sustained competition-law pressure. The Autoridade da Concorrencia (AdC) fined SIBS Group EUR13,869,000 for tying processing services to scheme access, following a Statement of Objections issued 28 July 2022; SIBS held over 90% market share in the affected markets across roughly three years of the tying practice. SIBS has appealed the decision. Under Portuguese administrative law, an appeal does not automatically suspend execution of the fine unless SIBS can demonstrate considerable harm and provide effective guarantees -- meaning the fine's practical effect may persist through the appeal period regardless of its eventual outcome, which remains unconfirmed this cycle.

Outlook

The AdC appeal is the clearest near-term marker for this module: its resolution will determine whether SIBS's scheme-access practices are confirmed as an antitrust violation on appeal or overturned, with direct implications for how acquirers and PSPs negotiate Multibanco access going forward.

Outlook

Corridor dynamics remain the most stable element of Portugal's payments environment; the principal forward development to watch is not a corridor-access change but the digital euro's technical readiness phase (W9), which will eventually run alongside, rather than replace, the existing TARGET2/TIPS/SEPA architecture.

Beneath this headline transaction, Portugal's broader payments market structure remains anchored by SIBS's Multibanco and MB WAY infrastructure, which commands near-universal bank participation. International PSPs -- Stripe, Adyen, PayPal, Revolut -- operate via EU passporting rights alongside domestic fintechs such as Eupago, easyPay and ifthenpay, which bridge SMEs into local payment rails. This structural landscape is unchanged this cycle aside from the NovoBanco transaction.

Outlook

With the NovoBanco/BPCE deal now closed, the next structural question is how BPCE integrates NovoBanco into its wider European banking-group footprint, and whether further consolidation follows among Portugal's remaining mid-tier banking and payments players.

Outlook

Resolution of the SIBS appeal is the clearest litigation marker to track into the next cycle; a confirming decision would harden the AdC's tying-abuse theory as applied precedent for scheme-access disputes, while a reversal would reopen questions about how SIBS's scheme-access practices should be regulated going forward.

Outlook

The acquiring landscape will track the SIBS appeal outcome (W4/W7) closely, since any change to SIBS's scheme-access obligations would directly affect the competitive terms on which international and domestic acquirers operate in Portugal.

Separately, Portugal's fintech-sandbox infrastructure includes the Technological Free Zones established under Decree-Law 67/2021 and CMVM's Market4Growth sandbox, launched 22 November 2023. Despite this testing infrastructure, open-banking and third-party-provider adoption remains structurally slow: as of October 2024, Portugal had no domestically registered third-party providers, a gap attributable in part to Multibanco's continuing market dominance.

Outlook

The digital-euro timeline (Regulation adoption expected in 2026, pilot testing planned for late 2027) is the clearer near-term marker; the open-banking adoption lag is a slower-moving structural question tied directly to whether Multibanco's dominance (W4) is loosened by ongoing competition scrutiny.

Separately, Law 24/2023 (29 May) imposes consumer-protection limitations on financial-services charges, including a prohibition on commissions for photocopies and duplicate statements -- part of the baseline consumer-protection legislative framework.

Outlook

The fraud-complaint surge is the clearer escalating signal in this module; whether BdP's compliance-verification-only remedial model comes under pressure to expand toward direct compensation powers, given the scale of the complaint increase, is a question worth tracking into subsequent cycles.

Outlook

These developments are flagged onward to the Financial Intelligence Monitor for continued illicit-finance analysis, including any downstream implications of the new stablecoin framework (W2) for Travel Rule compliance; this brief draws no independent illicit-finance conclusions from them.

Outlook

With direct Eurosystem settlement access already extended to non-bank PIs/EMIs where enabled, the correspondent-banking access gap that constrains non-banks in many other jurisdictions is comparatively muted in Portugal; the module remains structurally stable with no material change this cycle.

Second, BPCE completed its acquisition of NovoBanco on 30 April 2026 for a final price of approximately EUR6.7 billion, following the October 2025 sale-and-purchase agreement and the June 2025 memorandum of understanding with Portugal's Resolution Fund -- the largest recent PT financial-sector M&A transaction, correcting the original research's "expected 2025" framing (see also W6).

Third, MB WAY formed a partnership with ECOMMPAY in January 2025 to improve the e-commerce payments experience in Portugal, giving merchants enhanced online payment options; the value of this partnership was not publicly disclosed.

Fourth, at the market level, Portuguese fintech companies raised $71.2 million in equity funding across eight rounds through September 2025, versus $31 million across six rounds in the same period of 2024 -- a 129.83% year-on-year increase. As of January 2026, 310 active fintech companies had collectively raised $408 million, led by Ethena at $156 million; this aggregate metric is a market-level indicator rather than a single discrete event.

Outlook

The clearest near-term marker is whether Bison Bank's stablecoin launches within its targeted first-half-2026 window; more broadly, the combination of completed banking M&A, rising fintech funding and an early bank-led stablecoin product suggests continuing commercial momentum in Portuguese payments even as the underlying MiCA and safeguarding frameworks (W1b, W2) are still settling into practice.