EMI License in Cyprus

Electronic Money Regulation in Cyprus

The issuance and management of electronic money (e-money) in Cyprus is regulated under the Electronic Money Law of 2012, Law 81(I)/2012, as amended, which transposes the EU’s Second Electronic Money Directive (EMD2-Directive 2009/110/EC) into Cyprus law. The Central Bank of Cyprus (CBC) is the competent authority responsible for authorising and supervising Electronic Money Institutions (EMIs).

An EMI license permits the holder to issue electronic money, monetary value stored electronically that is accepted as a means of payment by parties other than the issuer, as well as to provide the full range of payment services authorised under the Payment Services Directive (PSD2). This dual capability makes the EMI license one of the most versatile fintech licenses available in the EU.

What Is Electronic Money?

Electronic money is defined under EMD2 as electronically stored monetary value, represented by a claim on the issuer, which is issued on receipt of funds for the purpose of making payment transactions and accepted by persons other than the issuer. Common examples of e-money products include:

• Prepaid cards: physical or virtual cards loaded with monetary value.
• Digital wallets: electronic accounts that store monetary value for online and mobile payments.
• Virtual IBAN accounts: electronic accounts enabling customers to receive and send payments.
• Online payment instruments: any electronic device or system that stores value and facilitates payments.

Why Choose Cyprus for an EMI License?

Cyprus offers a compelling value proposition for e-money issuers:

• EU-wide passporting: An EMI licensed in Cyprus can issue e-money and provide payment services across all EU and EEA member states without requiring additional authorisation in each country.
• Competitive tax environment: The corporate tax rate of 15% and the availability of incentives such as the IP Box regime and Notional Interest Deduction make Cyprus cost-effective for fintech operations.
• Experienced regulator: The CBC has a track record of engaging constructively with fintech applicants and has established clear guidelines for the EMI licensing process.
• Growing fintech ecosystem: Cyprus is home to a growing community of fintech companies, payment processors, and digital financial services providers, supported by a skilled and multilingual workforce.
• Speed to market: While rigorous, the Cyprus licensing process is generally faster than in some larger EU member states, allowing companies to enter the market more quickly.
• Strategic location: Cyprus’s geographic position and time zone make it an ideal operational hub for serving European, Middle Eastern, and African markets.

Capital Requirements

The minimum initial capital for an EMI in Cyprus is €350,000. This must be fully paid up before the application is submitted.

In addition to the minimum initial capital, EMIs must maintain ongoing own funds calculated as the higher of:

• The initial capital requirement of €350,000; or
• 2% of the average outstanding e-money, calculated based on the average total amount of e-money in circulation at the end of each calendar day over the preceding six months.

For EMIs that also provide payment services not linked to e-money issuance, additional own funds requirements apply as prescribed under PSD2 (Methods A, B, or C).

Safeguarding Requirements

A fundamental obligation for EMIs is the safeguarding of funds received in exchange for e-money. The law requires that:

• Funds corresponding to outstanding e-money must be safeguarded immediately upon receipt.
• Safeguarded funds must be deposited in a separate account at a credit institution or invested in secure, liquid, low-risk assets as defined by the CBC.
• Alternatively, the EMI may cover the safeguarding obligation through an insurance policy or comparable guarantee from an authorised insurer or credit institution.
• Safeguarded funds are protected from claims by the EMI’s other creditors, including in the event of insolvency.

The safeguarding framework is critical to ensuring consumer protection and the integrity of the e-money system. The CBC monitors compliance closely through regular reporting and on-site inspections.

Application Process

1. Pre-application engagement: Meet with the CBC to discuss the proposed business model, the scope of services, and the regulatory expectations. This step helps align the application with the CBC’s requirements from the outset.
2. Corporate establishment: Incorporate a legal entity in Cyprus (or ensure an existing entity meets the requirements) with a board of directors, company secretary, and registered office in Cyprus.
3. Preparation of the application dossier: This is the most intensive phase and involves preparing:
   • A comprehensive business plan with three-year financial projections.
   • A programme of operations detailing the types of e-money products and payment services to be offered.
   • An organisational chart and governance framework.
   • Internal control, risk management, and compliance policies.
   • AML/CFT policies and procedures.
   • IT systems architecture, cybersecurity framework, and business continuity plans.
   • Safeguarding arrangements for client funds.
   • Fit-and-proper documentation for all directors, qualifying shareholders, and key function holders.
   • Evidence of the minimum initial capital of €350,000.
4. Submission to the CBC: File the formal application with all supporting documents and the application fee.
5. CBC assessment: The CBC conducts a detailed review of the application, including multiple rounds of questions, requests for additional information, and meetings with the management team. The statutory review period is 3 months from receipt of a complete application, extendable by a further 3 months.
6. Authorisation: Upon approval, the CBC issues the EMI license and the institution is registered in the CBC’s public register.

Services an EMI Can Provide

A licensed EMI in Cyprus can provide the following services:

• Issuance of electronic money: issuing prepaid cards, digital wallets, virtual IBANs, and other e-money instruments.
• Redemption of electronic money: converting e-money back into fiat currency at the holder’s request.
• All payment services under PSD2: including payment execution, money remittance, card issuing and acquiring, payment initiation services (PIS), and account information services (AIS).
• Distribution of e-money through agents: the EMI may appoint agents to distribute and redeem e-money on its behalf.
• Ancillary services: closely related ancillary services such as foreign exchange, safe-keeping of funds, and data storage.

Passporting Across the EU/EEA

An EMI licensed in Cyprus benefits from the EU single market passporting mechanism. This means the EMI can provide its authorised services, both e-money issuance and payment services, in any EU or EEA member state through:

• Freedom to provide services: cross-border provision without establishing a physical presence in the host state.
• Freedom of establishment: setting up branches or appointing agents and distributors in host member states.

Passporting requires notification to the CBC, which communicates with the host state’s regulator. The process typically takes 1 to 3 months.

Ongoing Compliance

Licensed EMIs must comply with extensive ongoing regulatory obligations, including:

• Maintaining minimum own funds and safeguarding arrangements at all times.
• Filing regulatory returns with the CBC on a regular basis (monthly, quarterly, and annually).
• Conducting annual independent audits.
• Ensuring robust AML/CFT compliance, including customer due diligence, transaction monitoring, and suspicious activity reporting.
• Implementing strong customer authentication (SCA) for electronic payments.
• Handling customer complaints within prescribed timeframes.
• Notifying the CBC of any material changes to the business, governance, or shareholding structure.