Slovenia

Market access sits against a heavily consolidated bank-PSP landscape. Following OTP Bank's 2019 acquisition of SKB and its 2021 acquisition and merger of Nova KBM with Abanka — the combined entity renamed OTP banka d.d. in 2024 — NLB and OTP each now hold roughly 30% of Slovenia's domestic banking market. That concentration means non-bank entrants relying on EU passporting or Banka Slovenije authorisation are competing for distribution and partnership access against two dominant incumbents controlling roughly 60% of sector assets between them, rather than a fragmented field of smaller banks. For payment institutions and EMIs seeking correspondent or safeguarding-account relationships with Slovenian credit institutions, this concentration is a structural fact of the market rather than a regulatory constraint, but it bears directly on negotiating leverage and account-access terms for smaller non-bank entrants.

Outlook

Absent a change to ZPlaSSIED's statutory architecture, Banka Slovenije's single-authority model is likely to remain the standing baseline for market access. The more relevant forward question is competitive: with NLB and OTP together holding roughly 60% of banking-sector assets, non-bank payment institutions and EMIs entering Slovenia will continue to depend on securing workable safeguarding and settlement-account relationships with a concentrated bank-PSP tier, a dynamic worth monitoring alongside any further OTP Group regional consolidation.

Second, payment institutions and e-money institutions operating in Slovenia must safeguard customer funds through segregation from own funds — either via a separate safeguarding account with an authorised credit institution or through investment in liquid assets — with the segregation required by close of business the day following receipt of funds. Firms offering only payment-initiation or account-information services are exempt from this safeguarding obligation, consistent with their non-custodial function. This is the standard PSD2/EMD2 safeguarding baseline as applied nationally; no bespoke Slovenian variant beyond the EU framework was identified this cycle. The bank-versus-non-bank distinction is explicit here: safeguarding accounts must sit with an authorised credit institution, meaning non-bank PI/EMI safeguarding compliance depends on maintaining a workable banking relationship in a market where two banking groups hold roughly 60% of sector assets.

Outlook

The EUR 1,000,000 notification-and-audit threshold for limited-network exclusions is likely to remain the key conduct-monitoring lever on the non-bank population absent a legislative change. Continued growth in Slovenia's online/APP scam losses (see W10) may increase pressure on Banka Slovenije to tighten safeguarding or conduct oversight further, though no such proposal was identified this cycle.

A more contested data point concerns the transition away from Slovenia's pre-MiCA virtual-currency/VASP regime. A single third-tier source indicates the national transitional window for legacy providers expired 1 July 2025 without a simplified authorisation-conversion procedure, which — if accurate — would represent a shortened national window relative to the EU-wide 18-month default that runs to 1 July 2026 in member states that did not shorten it. This claim was flagged during baseline research as conflating a possible national policy choice with the EU-wide default, and a primary Banka Slovenije or Official Gazette citation confirming the precise national mechanics was not located this cycle. The distinction matters commercially: if the window has indeed already closed, legacy virtual-currency providers still operating in Slovenia without MiCA authorisation are already outside the transitional safe harbour and exposed to enforcement action (see W7), a full year before peers in jurisdictions retaining the full EU default would face the same exposure.

Outlook

Two things should resolve this ambiguity next cycle: a primary-source confirmation of Slovenia's actual national transitional-window length and legal basis, and observation of whether the EU-wide 1 July 2026 default expiry triggers any additional Slovenian enforcement activity distinguishable from action already taken against providers whose (shorter) national window lapsed a year earlier.

That national implementing picture, however, remains unresolved. A proposed Regulation on the implementation of the EU regulation on digital operational resilience — which would distribute supervisory tasks among Banka Slovenije, ATVP and the Insurance Supervision Agency — was submitted for government procedure on 4 April 2025. Whether it has since been adopted or published was not independently verified this cycle, a gap flagged during baseline research as warranting confidence downgrade pending confirmation. In practical terms, Slovenian PSPs are already subject to DORA's substantive obligations but face uncertainty over exactly which domestic authority handles which supervisory function — incident-reporting receipt, third-party-provider oversight coordination, and enforcement — until the national implementing act's status is confirmed.

Outlook

Resolving the adoption/publication status of Slovenia's DORA implementing regulation is the single most concrete verification task carried into the next cycle for this module. Until then, Slovenian PSPs should be treated as operating under confirmed EU-level DORA obligations but an unconfirmed national supervisory-task allocation.

Domestically, Bankart operates Slovenia's Card Settlement payment system, with Banka Slovenije acting as settlement agent on a daily net-settlement basis. The system incorporates a twice-yearly loss-sharing scheme among direct participants and charges a EUR 1,678.93 per-month, per-card-product participant clearing fee. This scheme rulebook dates to an October 2020 vintage, so the fee figures in particular should be treated as indicative pending reconfirmation of current currency.

Outlook

With EU-wide interchange caps stable and no scheme-rule change identified this cycle, the near-term monitoring priority for this module is reconfirming Bankart's current fee schedule, given the underlying rulebook's 2020 vintage, and watching for any Commission follow-up on the flagged Slovenia-specific merchant-service-charge data gap.

Domestically, Flik — a mobile-based peer-to-peer instant-transfer solution enabling transfers via mobile number or email across participating Slovenian bank apps — supplements growing SEPA Instant Credit Transfer adoption, alongside Bankart's SIMP-PS and SEPA EKP retail clearing rails. The Flik claim rests on a single vendor-blog source; a primary Banka Slovenije or Bankart citation for Flik-specific adoption figures was not located this cycle, so usage-volume claims about the scheme should be treated as directional rather than confirmed.

Outlook

TARGET2-Slovenia and SEPA (SCT/SCT Inst) should remain the stable core corridor baseline. The more useful next-cycle task is sourcing a primary Banka Slovenije or Bankart citation for Flik's actual adoption figures, to move that claim from vendor-sourced to independently confirmed.

NLB Group, Slovenia's largest banking and financial group, has been an ECB-designated Significant Institution since late 2014, placing it under direct ECB supervision rather than solely Banka Slovenije oversight. NLB reported 2025 profit after tax of EUR 503.1 million, a scale marker consistent with its position as the largest Slovenian bank by assets.

Outlook

With the OTP/Nova KBM-SKB integration now fully bedded in and NLB continuing to post strong profitability, further consolidation pressure is more likely to come from below — smaller banks or non-bank entrants seeking scale or partnership — than from another top-tier merger. Any further OTP Group regional consolidation activity is worth monitoring for spillover effects on the Slovenian market structure.

A newer enforcement dimension arises from MiCA. Slovenian crypto-asset service providers and e-money-token issuers face legal-person fines of up to EUR 5,000,000 or 5% of annual turnover for serious breaches, with natural-person fines up to EUR 700,000, rising to EUR 15,000,000 or 15% of turnover for market-abuse breaches. The principal risk vectors flagged are unauthorised operation and reliance on the reportedly expired national transitional window for legacy virtual-currency providers (see W2) — though, as with that transition claim, the specific fine ceilings rest on a single third-tier source and should be treated as indicative pending a primary ATVP or Banka Slovenije enforcement-framework citation. No named individual court rulings or landmark payments litigation specific to Slovenian PSPs were identified this cycle beyond the aggregate penalties-register count.

Outlook

The next verification priority for this module is confirming the MiCA fine ceilings against a primary ATVP or Banka Slovenije source, and watching the Banka Slovenije penalties register for any enforcement action specifically tied to the reportedly expired legacy-VASP transitional window.

For card-not-present dispute and chargeback mechanics specifically, Slovenia does not appear to operate a bespoke national acquiring-dispute regime; instead, SEPA direct-debit refund rules (an eight-week customer refund-request right) and PSD2 Strong Customer Authentication requirements shape how disputes are resolved. This is a generic EU-wide mechanic rather than Slovenia-specific primary sourcing, and should be read accordingly.

Outlook

Absent a Slovenia-specific acquiring-dispute framework, EU-wide SCA and SEPA refund mechanics will continue to govern chargeback and dispute resolution for card-not-present acquiring. The Bankart loss-sharing scheme's twice-yearly cadence is the more distinctly national risk-management feature worth continued tracking.

Separately, DDD Invoices, a Slovenia-based API-driven e-invoicing compliance infrastructure provider, closed a EUR 1.31 million seed funding round — backed by Fil Rouge Capital, 500 Global and angel investors — reported May 2026. This adjacent payments-compliance infrastructure investment is noted here as a dated product-development marker; see W13 for its treatment as a discrete commercial event.

Outlook

Confirming Aircash's EEA-passporting notification status with Banka Slovenije directly would upgrade that claim from company-sourced to independently verified. Beyond that, product-innovation activity in Slovenia this cycle remains modest relative to larger EU markets.

Against that baseline, online and authorised-push-payment scam losses have risen sharply: nearly EUR 28 million in losses through mid-October 2025 across roughly 2,000 cases, nearly matching the full-year 2024 total, with cumulative losses since 2020 exceeding EUR 130 million and approximately 75% borne by individual victims rather than institutions. The Bank Association of Slovenia convened a conference in response, urging systemic countermeasures. Notably, no dedicated statutory APP-fraud mandatory reimbursement scheme — of the kind seen in some other European markets — currently exists in Slovenia to offset these losses, a gap the banking-industry association itself has flagged. This is a recognised WPM under-indexed area for financial-promotion and consumer-redress enforcement in smaller EU member states, warranting deeper coverage next cycle.

Outlook

With scam losses already close to matching 2024's full-year total by mid-October 2025 and no statutory reimbursement scheme in place, continued growth in APP-fraud losses is likely, absent either a national reimbursement mandate or a material shift in fraud-prevention practice by Slovenian PSPs. The Bank Association's conference call for systemic countermeasures is a marker worth tracking for any resulting policy proposal.

Slovenia's most recent MONEYVAL follow-up evaluation (2023) rated the country Compliant on 11 and Largely Compliant on 28 of the FATF's 40 Recommendations — a strong technical-compliance showing — but Highly Effective on none and Substantially Effective on only one of the eleven Immediate Outcomes, indicating a substantial gap between formal rule adoption and demonstrated effectiveness. Slovenia remains in enhanced follow-up, with money-laundering investigations rising but still not commensurate with predicate-crime volume.

Outlook

See the Financial Intelligence Monitor for deeper analysis of Slovenia's AML/CFT effectiveness gap. From a payments-market-access perspective, the technical-compliance/effectiveness divergence is relevant primarily insofar as it may shape future supervisory intensity toward payment institutions and e-money issuers, particularly non-bank entities newly captured by MiCA's AML exposure (see W2, W7).

At the institutional level, UniCredit Banka Slovenija — the fourth-largest Slovenian bank by market share at 6.67% in 2025 — provides correspondent banking services alongside retail, private, corporate and institutional banking within the pan-European UniCredit Group network. This module's analytical spine is the asymmetry between bank-PSP access to correspondent networks like UniCredit's pan-European infrastructure and non-bank PI/EMI reliance on domestic safeguarding-account relationships (see W1b) — a structural feature of the Slovenian market rather than an emerging event this cycle.

Outlook

Absent a documented de-risking event, this module's baseline should hold. The persistent gap in this cycle's research — no Slovenia-specific correspondent-banking account-closure event identified — is itself worth flagging as a coverage item for next cycle rather than treated as evidence of an absence of risk.

Outlook

No further Slovenia-specific commercial events were identified this cycle. Both entries above are dated markers rather than developing situations requiring standing-brief treatment.