Philippines

For non-bank market access, the principal route is OPS registration. BSP Circular 1049 requires all Operators of Payment Systems to register with the BSP; entities self-assess against the OPS definition and register within one month of commencing operations, or prior in specified cases. Any PSP collecting or transferring funds must register as an OPS, making this the mandatory non-bank gateway.

The e-money regime is deliberately bifurcated. The E-Money rules (BSP Circular 649 [2009] as revised by Circular 1049 [2019]) create Electronic Money Issuer licensing for banks and non-bank entities, imposing a PHP 100-million minimum capital for non-bank EMIs, with EMIs split into EMI-Bank and EMI-NBFI categories. The bank versus non-bank EMI routes are distinct, and there is no single EMI passport — a structural feature that shapes entry economics. The PHP 100-million capital floor and the bank/non-bank split together determine entry costs for e-money issuers.

The live development is the moratorium lift. The BSP lifted its moratorium on new EMI-NBFI licences — in force since 2021 and extended to December 2024 — effective 16 December 2024 to promote digital payments and financial inclusion, with reportedly around 42 EMI-NBFIs and 27 EMI-banks licensed. This re-opens new non-bank EMI market entry after a multi-year freeze, creating a live licensing window for fintech entrants on the non-bank PI/EMI track specifically.

Outlook

With the EMI-NBFI moratorium lifted, the non-bank entry channel is open and the licensing gateway is the operative consideration for entrants. The bank versus non-bank distinction remains the structural axis of the regime, and the established trajectory of this module reflects a mature, settled licensing architecture now in a more permissive posture for non-bank applicants.

Safeguarding of customer funds is handled through a strict placement rule. E-money float is subject to a 100% domestic placement rule — holding float offshore or in crypto is prohibited — and the BSP applies a risk-based capital adequacy ratio of 8% of risk-weighted assets to EMIs effective 2024. This segregation mechanism is the customer-fund protection backbone for non-bank e-money on the non-bank PI/EMI track.

On financial promotions and conduct, the live enforcement item concerns gambling links. Under conduct and promotions oversight, the BSP, via Memorandum M-2025-029, ordered e-wallets GCash and Maya to remove in-app links and icons redirecting to online gambling platforms, citing addiction and accessibility risks. GCash (G-Xchange Inc.) and Maya Philippines Inc. were the directed parties. The suspension remains pending finalisation of the BSP's online-gambling-payments policy as of the baseline date.

Outlook

The pending BSP follow-on policy on online gambling payment services is the open conduct question: the M-2025-029 suspension is set to remain until that policy is finalised. Safeguarding rules — the 100% domestic float placement and the 8% CAR — are established and apply principally on the non-bank PI/EMI track, while the RA 11765 consumer-protection regime provides the standing conduct framework across both bank and non-bank institutions.

On the bank-led side, a group of Filipino banks — UnionBank, RCBC, Cantilan Bank and Rural Bank of Guinobatan — is preparing PHPX, a peso-backed multi-issuer stablecoin initially operating on the Hedera DLT network. This contrasts with the non-bank single-issuer PHPC.

The wholesale CBDC strand is advancing: the BSP completed proof-of-concept testing of Project Agila in December 2024 (announced 5 December 2024), with experiments focused on interbank payments covering functional, performance, security and end-to-end testing. The live target sits later in the decade.

The crypto perimeter remains restrictive. The BSP extended its freeze on new VASP licences indefinitely; prudential oversight of exchanges and custodial wallets sits with the BSP under Circular 1108, while the SEC's CASP framework requires a domestic corporation with at least PHP 100 million paid-up capital. The result is a dual BSP/SEC perimeter with VASP licensing frozen.

Outlook

The controlled-innovation posture is likely to persist: a graduated non-bank stablecoin (PHPC), an emerging bank-led multi-issuer stablecoin (PHPX), and a wholesale CBDC moving from completed PoC toward a live target later in the decade, all against an indefinite VASP freeze. Date precision for the PHPC sandbox exit and Project Agila completion rests on tier-3 sources, with BSP primary confirmations not directly captured for those exact dates.

Critical settlement infrastructure has been formally designated. The Peso RTGS system (PhilPaSSplus) has been designated a Systemically Important Payment System by the BSP Monetary Board; the PhP-RTGS, Domestic Dollar Transfer System and PhP-USD PvP system are publicly designated SIPS. These designations anchor the resilience expectations applied to the country's most critical rails.

A forward rule change is in train. The BSP proposed tougher fines for payment-data reporting lapses by payment system operators, including daily monetary penalties and potential non-monetary sanctions on responsible officers, at consultation stage in late 2025.

Outlook

The established PFMI-aligned oversight framework and SIPS designations form a settled resilience baseline. The live forward item is the proposed payment-data penalty framework, which sits at consultation and would raise the cost of reporting lapses for payment system operators on both bank and non-bank sides once finalised.

The national interoperability standard is mandatory. BSP Circular 1055 adopts the National Quick Response Code Standard (QR Ph), built on the EMV QR Merchant Presented Mode specification and routing real-time interbank settlement via InstaPay through BancNet; Circular 1033 governs Confirmation of Eligibility for ACH participation in PESONet and InstaPay. All BSP-supervised institutions, including EMIs, must support QR Ph.

Outlook

The scheme interchange model is stable, with no statutory Philippine cap on the horizon in this cycle. The mandatory QR Ph standard binds all supervised institutions and remains the structural lever for account-to-account interoperability, narrowing the space in which card-based MDR economics operate.

Cross-border capability is expanding. It is widening via InstaPay-PayNow (Singapore) and regional interoperability projects such as BIS Nexus, alongside ASEAN QR corridor linkages spanning Singapore PayNow, Indonesia QRIS and Thailand PromptPay/TrueMoney. PhilPaSS-REMIT, operating since May 2010, settles OFW remittances with same- or next-day credit.

Outlook

The US-PH corridor is stable and dominant, while the SG-PH corridor is opening through the InstaPay-PayNow linkage. Regional ASEAN QR interoperability and Nexus participation are advancing, positioning the Philippines within a widening cross-border instant-payments mesh. Note that the cross-border corridor and PHPC stablecoin elements carry downstream FIM significance for remittance-laundering risk, which WPM treats only as payment-instrument trust.

Maya's commercial scale is a distinct signal. Maya processed over PHP 1 trillion in 2024 and is described as the leading merchant acquirer for Visa in the country, with both major wallets leveraging InstaPay and PESONet for fund transfers.

Outlook

The wallet duopoly is an established market-structure feature. With both wallets heading toward IPOs and Maya leading Visa acquiring, the commercial centre of gravity remains with the non-bank wallets, even as bank incumbents retain settlement and balance-sheet advantages. Structural M&A or competitive shifts would register here, distinct from the discrete deal events tracked in commercial intelligence.

The statutory penalty backdrop is set by RA 11127, which provides that willful violation of the Act or BSP directives is punishable by a fine of PHP 200,000 to PHP 2,000,000, imprisonment of two to ten years, or both; unauthorised EMI operation triggers enforcement under RA 11211 sections 18-19. Enforcement nonetheless remains primarily administrative and supervisory in practice, applying to both bank and non-bank actors.

Outlook

The forward legal item is the BSP's pending follow-on online-gambling-payments policy, on which the M-2025-029 suspension depends. Financial-promotion and conduct enforcement is methodology-flagged as under-indexed, and this Philippine item is recency-uncertain, so the operative status of the suspension should be treated as provisional pending confirmation.

A structural risk distinction separates push rails from cards. InstaPay merchant acceptance is push-only — the customer actively sends funds — which structurally eliminates chargeback exposure for that transaction type, unlike merchant-initiated card payments. This is a meaningful difference in acquiring-risk profile between account-to-account push rails and card acceptance.

Outlook

Merchant acquiring is an established part of the BSP perimeter through the MAL regime, with push-rail QR and InstaPay acceptance offering a structurally chargeback-free profile. Acquiring operational stress, chargeback volumes and high-risk MCC exposure — particularly for Maya as the leading Visa acquirer — are not evidenced beyond the fee structure this cycle, and merchant-acquiring operations remain a thinly evidenced, methodology-flagged under-indexed surface.

The innovation architecture is dual-regulator. The SEC established the PhiliFinTech Innovation Office and launched the SEC StratBox thematic sandbox for Crypto-Asset Service Providers, while the BSP operates a Test-and-Learn/Regulatory Sandbox framework allowing exceptions for novel non-bank EMI business models and pursues CBDC initiatives (Project CBDCPh, Project Agila). This gives fintech and CASP innovation two distinct sandbox entry points.

Outlook

The NRPS/InstaPay build-out is advancing, with QR Ph adoption growth underpinning the trajectory, and the dual BSP/SEC sandbox architecture supports continued product innovation. Open-banking and open-finance framework detail — tiering and data-sharing rules — is asserted at standing-position level but not evidenced with a specific BSP open-finance circular this cycle, leaving that regulatory surface under-evidenced for an emerging-market rail.

The liability model imports a safe-harbour/restitution structure. Under AFASA implementing rules, institutions may hold disputed funds for not more than 30 calendar days, extendable only by court, with the held amount credited but non-withdrawable. AFASA provides a safe-harbour and restitution framework requiring reimbursement where institutional due-diligence lapses contributed, with protection for compliant institutions — the Philippine analogue to APP reimbursement regimes elsewhere.

The operational obligations are extensive. AFASA mandates real-time fraud detection covering velocity, geolocation, behavioural anomaly and blacklist screening; extends real-time monitoring obligations to clearing switch operators InstaPay and PESONet; requires transaction logs retained at least five years; and mandates a phase-out of SMS/email OTPs for high-risk transactions by June 2026. All of these apply across bank and non-bank institutions.

Outlook

This module is escalating. The June 2026 OTP phase-out is the binding forward compliance deadline and materially raises compliance cost across the InstaPay and PESONet rails. The safe-harbour/restitution liability model and the extension of real-time monitoring to clearing-switch operators represent a structural lift in fraud-control obligations that will shape institutional cost and conduct expectations going forward.

Also per the Sentinel feed, BSP-supervised financial institutions must secure a Certificate of Registration with the AMLC pursuant to RA 9160 (AMLA, as amended) and RA 10168 (Terrorism Financing Prevention and Suppression Act); reforms included MVTS registration, sanctions on illegal remittance operators, and enhanced LEA access to beneficial-ownership information. This AML registration perimeter is carried for payments context and routed to FIM for original analysis.

The Sentinel intelligence for this module is attributed to the Sentinel feed; see the Sentinel sources at philstar.com and amlc.gov.ph linked in the source register.

Outlook

The AML/CFT trajectory is improving following the grey-list exit. WPM's interest is confined to the payments-friction and correspondent-banking consequences; the illicit-finance, mule-network and sanctions dimensions are flagged to FIM as the owning monitor for original analysis.

On correspondent access, de-risking pressure is easing. The AMLC noted that before and during grey-listing some foreign banks avoided Philippine entities rather than manage ML/TF risk; the FATF exit may prompt foreign banks to review and resume correspondent relationships, with banks and fintechs finding it easier to establish or restore correspondent banking.

Outlook

The settlement and correspondent-access picture is improving. Direct non-bank EMI RTGS access remains a distinctive structural feature that compresses the usual bank versus non-bank access gap, and the grey-list exit is expected to ease the correspondent de-risking that previously raised cross-border friction for Philippine entities.

PLDT's Maya is pursuing a USD 500 million–1 billion IPO penciled for Q3 2026, spearheaded by KKR as an approximately 30% stakeholder seeking a profitable exit alongside Tencent and IFC, eyeing a dual US/Hong Kong and PSE listing. This announced investment event carries a disclosed amount range. The IPO thesis is underpinned by Maya's results: Maya posted PHP 1.7 billion net income for full-year 2025 — its first profitable year — with cumulative loans disbursed reaching PHP 256 billion and Visa naming Maya its top acquirer for merchant transaction volume in the Philippines.

Outlook

Commercial intelligence is active. Both wallet IPOs are expected across the second half of 2026, with Maya's dual-listing penciled for Q3, and the GCash listing setting a valuation benchmark for the wallet sector. The GCash valuation remains discussed rather than a disclosed offer figure, and final pricing and timing for both listings are unconfirmed. These discrete deal events are distinct from the structural market-concentration view tracked separately.