#
BaFin authorises PIs (ZAG §10) and EMIs (ZAG §11); AISPs register under §34; bank-PSP vs non-bank PI/EMI core split; EWR passporting available.
Outlook
The licensing architecture is established and stable as standing knowledge. The live pressure on the regime comes less from authorisation mechanics than from the tightening supervisory posture downstream — enforcement intensity in resilience, AML and stablecoin oversight is reshaping the effective cost of holding a German licence rather than the route to obtaining one.
Licensing, Authorisation & Market Access
German bank payment-service providers became subject this cycle to two binding provisions of the Instant Payments Regulation, Regulation (EU) 2024/886: a cost-parity mandate requiring that instant transfers cost no more than a standard SEPA credit transfer, and the abolition of the prior EUR100,000 per-transaction cap on SEPA Instant Credit Transfers, effective from 9 October 2025. The cost-parity mandate directly removes a monetisation line German bank PSPs had used: surcharges of EUR0.50 to EUR1.50 per instant transfer, layered on top of standard transfer pricing, are no longer permitted. The cap abolition removes a size-based friction that had constrained SCT Inst's use for larger corporate and treasury payments, subject now only to each individual bank's own anti-fraud limits rather than a regulatory ceiling.
Running in parallel, Verification of Payee became a mandatory anti-fraud control under the same Instant Payments Regulation framework and the 2025 SEPA Rulebook, adding payee-name matching to the instant-transfer flow at the same time that size and cost friction were removed. The sequencing is notable: the regulation removes friction on the payment side while simultaneously adding a new, mandatory verification control, a pairing that reflects the regulation's dual objective of adoption and fraud mitigation operating together rather than in tension.
The market-access picture bifurcates by entity type. Bank PSPs faced the 9 October 2025 deadline for both the receive-mandate, which had applied from 9 January 2025, and the send-mandate obligations, and are now operating under the full binding regime described above. Electronic money institutions and payment institutions, by contrast, have a materially later compliance deadline of 9 April 2027 for their own send and receive instant-transfer obligations under the same regulation. This eighteen-month-plus gap between the bank-PSP and non-bank-PI/EMI compliance timelines is a structural feature of the Instant Payments Regulation's German rollout, not an incidental delay, and it means that for roughly the next two years, bank PSPs and non-bank PIs/EMIs in Germany operate under materially different instant-payments obligations even though both categories are licensed payment-services providers under the same broader framework.
Confidence in the core cost-parity and cap-abolition findings is High, reflecting consistent reporting on provisions that are themselves unambiguous statutory text under Regulation (EU) 2024/886; the impact rating attached to these findings is HIGH, reflecting the direct compression of bank-PSP fee revenue and the removal of a longstanding transactional ceiling. The Verification of Payee finding carries an ELEVATED impact rating and Tier 2 sourcing, reflecting its status as a newly mandatory control rather than a discretionary fraud-prevention measure banks had previously been free to calibrate themselves.
For a payment institution or e-money institution considering market entry into Germany, the immediate licensing and market-access picture is more favourable than it will be from April 2027: an entrant licensed as a non-bank PI or EMI today has a compliance runway of close to two years before its own send/receive instant-transfer obligations bind, even as it can already observe how bank PSPs are adapting to the fully binding regime.
Sourcing for this cycle's findings rests on Tier 2 and Tier 3 secondary reporting, KPMG Germany, SMBC Group, adesso, and Bankdaten.de, rather than a located Tier 1 primary anchor from the European Central Bank, Bundesbank, or BaFin; the underlying legal provisions of Regulation (EU) 2024/886 are not themselves in dispute, but this monitor flags the absence of a Tier 1 anchor as a sourcing gap for this cycle rather than treating the finding as any less binding.
Outlook
The EMI/PI compliance deadline of 9 April 2027 is the next hard date in this module, and it will close the current bank-versus-non-bank timing asymmetry in instant-payments obligations. Whether German bank PSPs seek to recover the lost surcharge revenue through other fee structures, and whether non-bank PIs and EMIs begin early voluntary compliance ahead of the 2027 deadline to compete on instant-transfer availability, are the two clearest market-access signals to watch over the coming cycles.
1 earlier distinct update(s)
Licensing, Authorisation & Market Access
The German licensing and market-access environment is in a period of structured transition driven by the advancing PSD3 and Payment Services Regulation legislative package at the EU level and the continuing operation of the Zahlungsdiensteaufsichtsgesetz at the national level.
PSD3/PSR Legislative Progression
On 17 April 2026, the Council of the EU issued a formal 'I' Item Note circulating the final compromise texts of PSD3 and the PSR to COREPER for approval. This followed provisional political agreement between the Council and the European Parliament reached in November 2025. The issuance of the 'I' Item Note is a procedural signal of imminent formal adoption: 'I' Items are placed on the Council agenda for approval without debate, indicating that the text is considered settled at the political level. Formal adoption by both institutions is the next step before the package enters the Official Journal and the transposition clock begins for member states.
For Germany, the significance of this progression is immediate and operational. BaFin has flagged that PSD3 expectations will be reflected in new authorisation files from 2026 onward, meaning that firms currently in the authorisation pipeline — or planning to enter it — are already being assessed against a forward-looking standard that anticipates the PSD3 framework, even before formal transposition.
EMI Reauthorisation: The End of the EMD2 Regime
The most structurally significant licensing change embedded in PSD3 for the German non-bank payment sector is the elimination of the separate Electronic Money Directive 2 regime. Under PSD3, EMIs are reclassified as a sub-category of payment institutions, and existing EMIs are required to seek reauthorisation as PIs. This is not a grandfathering arrangement: it is a mandatory reauthorisation process that will require affected firms to demonstrate compliance with the PI authorisation standard, which carries different — and in several respects more demanding — requirements than the EMD2 track.
For Germany, where EMIs are currently authorised under the ZAG's EMI provisions, this creates a defined transition task. The ZAG transposes both PSD2 and EMD2 and governs BaFin's authorisation of both PIs and EMIs. The reauthorisation requirement means that the ZAG's EMI track will effectively be wound down as a standalone licensing category once PSD3 is transposed into German law. Firms that have built their operating models around the EMI licence — including those using the EMI framework for e-money issuance in conjunction with payment account services — will need to assess whether their current authorisation scope maps cleanly onto the PI sub-category structure or whether material changes to their regulatory perimeter are required.
The bank versus non-bank distinction is directly relevant here. Credit institutions authorised under the KWG are not affected by the EMI reauthorisation requirement; the structural change falls entirely on non-bank PIs and EMIs. This asymmetry reinforces the existing market-access differential between bank and non-bank payment service providers in Germany, at least during the transition period.
BaFin Authorisation Practice
BaFin's forward-signalling on PSD3 expectations in new authorisation files is assessed as a practical anticipatory measure rather than a formal regulatory instrument. The ZAG remains the operative licensing statute until PSD3 is transposed. However, the signal that BaFin is already calibrating its authorisation assessments to PSD3 expectations means that firms seeking new PI or EMI authorisations in Germany in 2026 are effectively operating in a dual-standard environment: formally assessed under ZAG, but with BaFin applying forward-looking PSD3 criteria in its substantive review. This creates planning complexity for applicants, particularly on substance requirements, governance standards, and the safeguarding architecture that PSD3 will mandate.
Outlook
The near-term outlook for W1a in Germany is one of accelerating transition. Formal PSD3/PSR adoption is expected to follow the COREPER approval process, after which the transposition period will begin. BaFin's anticipatory posture on authorisation files means the practical impact of PSD3 on German licensing is already being felt. The EMI reauthorisation requirement is the single most operationally significant change for the non-bank sector and will require affected firms to initiate transition planning well in advance of the transposition deadline. The coverage gap on DE-specific insolvency-law primary sources for PSD3 safeguarding ring-fencing provisions is noted; that gap is carried forward to the next cycle.
1 further periodic run re-emitted the standing brief unchanged and is not shown.
Sources and findings (5)
- T1https://www.bafin.de/EN/Aufsicht/ZahlungsdienstePSD2/ZahlungsdienstePSD2_node_en.html
- T1https://www.bundesbank.de/en/tasks/banking-supervision/individual-aspects/payment-institutions-and-e-money-institutions-622962
- T3https://crassula.io/guides/licenses/germany-bafin-zag/ [CAVEAT: Tier 3 secondary source — Assessed; verify vs primary pre-publication]
- T1https://www.bafin.de/EN/PublikationenDaten/Datenbanken/ZahlungsinstituteRegister/register_zahlungsinstitute_node_en.html
- T3https://www.globallegalinsights.com/practice-areas/fintech-laws-and-regulations/germany/ [CAVEAT: Tier 3 secondary source — Assessed; verify vs primary pre-publication]