How to Get an EMI Licence in Cyprus (2026): The Central Bank Authorisation Process, Capital and Passporting

An Electronic Money Institution (EMI) licence lets a Cyprus company issue electronic money — prepaid balances, e-wallets, payment cards — and provide payment services across the entire European Economic Area from a single authorisation. In 2026 the route is materially different from previous years: the Central Bank of Cyprus has added a compulsory pre-application stage, and the EU's PSD3 / PSR reform is on the horizon. This guide walks through capital, the authorisation process, safeguarding, passporting and timing.Central Bank of Cyprus — Licensing and supervision of electronic money institutions

A quick scope note: Zeno is not a law firm. We coordinate independent Cyprus Bar advocates and ICPAC-licensed accountants who handle regulated licensing work; this article is general information, not legal advice for your specific application.

What is a Cyprus EMI licence and who needs one?

An EMI licence authorises a Cyprus company to issue electronic money and provide payment services, supervised by the Central Bank of Cyprus under the Electronic Money Laws of 2012 to 2018. You need it if your business stores customer funds as a prepaid balance or e-wallet — not merely moving money, but issuing a monetary claim against your firm.

The governing statute is the Electronic Money Laws of 2012 to 2018 (base Law 81(I)/2012), which transposes the EU Electronic Money Directive 2009/110/EC (EMD2). Because e-money issuance is bundled with payment services, the Provision and Use of Payment Services and Access to Payment Systems Laws of 2018 to 2025 — Cyprus's transposition of PSD2 — also apply, and the formal application draws on section 5 of those laws.Electronic Money Laws of 2012 to 2018, transposing Directive 2009/110/EC (EMD2)

The distinction that trips founders up is EMI versus a plain payment institution: an EMI can hold and issue stored value, a payment institution only executestransactions. If your product is a wallet, a prepaid card programme, or a balance customers top up and draw down, you are issuing e-money and need the EMI authorisation. If your product is purely crypto-asset services, that is a different regime entirely — see our Cyprus CASP / MiCA licence guide. Every applicant first needs a Cyprus legal vehicle; the mechanics are in our company registration guide.

How much capital do you need for a Cyprus EMI?

€350,000 in initial capital, fully paid-up at authorisation. Beyond that, the institution must maintain ongoing own funds of at least 2% of the average outstanding electronic money it has issued, and own funds may never drop below the €350,000 floor.

The €350,000 figure reflects the risk profile of holding customer money. Two practical points: first, the capital must be genuinely available and traceable to a clean source — the CBC scrutinises the provenance of funds and the financial standing of shareholders. Second, budget capitalabove the minimum. A firm operating at exactly €350,000 has no buffer for the 2% outstanding-e-money charge as volumes grow, and supervisors expect a credible capital plan, not a plan to sit on the floor.Central Bank of Cyprus — EMI own funds and initial capital

What is the Central Bank of Cyprus authorisation process?

You submit a formal application to the CBC with the information required under section 5 of the Payment Services Laws: business plan, programme of operations, governance, capital, safeguarding arrangements, AML/CFT framework, risk management, outsourcing and IT/operational setup, plus fit-and-proper documentation for owners and directors.

The CBC assesses whether the application presents a coherent, credible operating model consistent with how the institution actually intends to do business. Its review spans the business model, ownership and ultimate beneficial owners, governance and the four-eyes principle, capital adequacy, safeguarding, the AML/CFT programme, risk management, outsourcing arrangements and operational resilience. The CBC applies the European Banking Authority's authorisation guidelines throughout.EBA Guidelines on authorisation of payment and e-money institutions (EBA/GL/2017/09)

A meaningful part of the file is people. Directors and key function holders must satisfy fit-and-proper tests; the institution needs real substance in Cyprus — local management, premises and staff, not a brass plate; and the AML/CFT function, including a Cyprus-based compliance officer, must be operational, not aspirational. The output of a successful process is an authorisation entered on the CBC's public register of EMIs.

What is the 2026 pre-application exploratory stage?

From 3 August 2026 the CBC requires a mandatory pre-application exploratory stage before any formal EMI or payment-institution application. You file a pre-application document with a €5,000 non-refundable fee; the CBC responds within 30 working days — or 50 working days where an enhanced due diligence report is required.

This is the biggest procedural change for 2026 applicants. The exploratory stage front-loads scrutiny of ownership, ultimate beneficial owners and group structure, so that issues affecting a later licensing decision — particularly the good repute of the ultimate beneficial owners — surface before anyone invests months in a full file. Only after clearing the exploratory stage may a prospective institution lodge its formal authorisation application.Central Bank of Cyprus — new licensing process for PIs and EMIs, effective 3 August 2026

The practical takeaway: get the ownership chain, UBO documentation and source-of-wealth story watertight first. A €5,000 non-refundable fee and a UBO who cannot evidence good repute is the fastest way to burn budget in the new regime.

How must an EMI safeguard client funds?

Funds received in exchange for issued e-money must be safeguarded, ring-fenced from the institution's own money and from its creditors in insolvency. The standard methods are segregation in a dedicated account at a credit institution, investment in secure low-risk assets, or coverage by an insurance policy or comparable guarantee.

Safeguarding is the core prudential protection of the whole regime, and the CBC has issued governance and safeguarding directives detailing how institutions must identify, manage, monitor and report the risks they face. In practice most Cyprus EMIs use the segregated-account method: client money sits in a dedicated trust account at a bank, kept separate from operating funds so that if the EMI fails, customer balances are not available to its creditors. Segregated funds must be reconciled and cannot be commingled with the firm's working capital.Central Bank of Cyprus — safeguarding and governance directives for EMIs

Can a Cyprus EMI passport across the EU?

Yes. A Cyprus EMI authorisation carries EEA passporting rights, so once the CBC has licensed the institution it can issue e-money and provide payment services across all EU/EEA member states — via a branch or on a freedom-of-services basis — without a separate licence in each country.

This single-passport principle is why Cyprus is a popular base: one authorisation, supervised in English-language practice by the CBC, opening the whole EEA market. Passporting is notified through the CBC to the host member states' competent authorities; the institution does not re-apply abroad. Combined with Cyprus's 15% corporate income tax rate from 1 January 2026 — the mechanics are in our Cyprus corporate tax guide— the passport plus tax package is the core of the Cyprus fintech proposition.

How long does authorisation take and what does it cost?

The statutory review period for a complete formal application is three months, but realistic end-to-end timing in 2026 is six to twelve months once you add the pre-application stage, document preparation and the CBC's follow-up questions. Costs run to professional fees plus the €350,000 capital you must lock up and the €5,000 pre-application fee.

The three-month clock only starts on a completefile, and it pauses each time the CBC asks for more information — which is why preparation quality drives timing more than any statutory deadline. The elements that most often stretch timelines are AML/CFT documentation, the safeguarding arrangement (you need a bank willing to open the segregated account), IT and operational resilience evidence, and fit-and-proper gaps in the management team. Beyond the €350,000 capital and the €5,000 exploratory fee, budget for legal and consulting fees to assemble the file, plus ongoing costs of local substance, audit and compliance staff once live.

How will PSD3 and the PSR change the EMI regime?

The EU reached provisional agreement on PSD3 and the Payment Services Regulation (PSR) in 2026, with entry into force expected around late 2027 and a transitional period for existing firms. EMIs will be folded into payment institutions as a sub-category, EMD2 will be repealed, and the combined initial-capital floor is set to rise from €350,000 to €400,000.

In April 2026 the Council of the EU issued final compromise texts for both instruments, signalling they are close to adoption. For a firm that both issues e-money and provides payment services, the initial-capital requirement moves from €350,000 today to at least €400,000 under the new regime. Already-authorised institutions are expected to be allowed to keep operating during a transitional window (reportedly 27 months after entry into force) before full compliance is required.Council of the EU — PSD3 and Payment Services Regulation compromise texts (April 2026)

For anyone applying in 2026 the message is: build for PSD3 now. Structure capital, governance and safeguarding so the eventual step-up to the new thresholds is an adjustment, not a rebuild. Applicants who plan only to today's €350,000 minimum risk being under-capitalised the moment the transitional period ends.