Regulators & Licenses
Map of who runs each rail, what licensing you (the integrator) need to plug in, and what changes if you're crypto.
Regulators by jurisdiction
| Jurisdiction | Primary regulator | Payments-rail operator(s) | Crypto-specific regulator / framework |
|---|---|---|---|
| United States | FinCEN (federal), state banking departments (NYDFS for NY), OCC, Federal Reserve | Federal Reserve (Fedwire, FedNow, ACH operator), TCH (RTP, ACH operator), Nacha (ACH rules) | SEC, CFTC, state MTL regimes; FinCEN MSB |
| European Union | EBA, ECB (Eurosystem), national NCAs | EPC (SEPA schemes), ECB (TIPS), EBA Clearing (STEP2, RT1) | MiCA (EU 2024+); national VASP registrations |
| United Kingdom | FCA, PSR, Bank of England | Pay.UK (FPS, BACS), BoE (CHAPS) | FCA cryptoasset registration; FSMA expansion |
| India | RBI, FIU-IND | NPCI (UPI, IMPS, RuPay), RBI (NEFT, RTGS) | FIU-IND PMLA registration; PMLA / Crypto-as-VDA |
| Brazil | BACEN (Central Bank of Brazil) | BACEN (PIX, TED, RTGS), CIP (TED, DOC) | BACEN VASP framework (Marco Cripto, Lei 14.478/22) |
| Singapore | MAS | ABS (PayNow), MAS (MEPS+) | MAS DPT (Digital Payment Token) license under PS Act |
| Hong Kong | HKMA, SFC | HKMA (FPS), HKICL | SFC VATP license |
| Japan | FSA | JBA (Zengin), BoJ (BOJ-NET) | FSA crypto exchange registration (PSA) |
| South Korea | FSC, FSS | KFTC (retail), KRX | FSC VASP under SPFIA; real-name banking rule |
| Philippines | BSP | BancNet (InstaPay, PESONet) | BSP VASP framework (Circular 1108) |
| Indonesia | Bank Indonesia (BI), OJK | ASPI (QRIS), BI-RTGS | Bappebti (commodity-classified crypto) |
| Thailand | BoT, SEC TH | NITMX (PromptPay) | SEC TH digital asset license |
| Malaysia | BNM, SC | PayNet (DuitNow, IBG, FPX) | SC DAX (Digital Asset Exchange) license |
| Mexico | Banxico, CNBV | Banxico (SPEI, CoDi) | CNBV IFPE / IFC under Ley Fintech (crypto restricted) |
| Argentina | BCRA, CNV | BCRA (Transferencias 3.0) | CNV PSAV crypto registration |
| Colombia | SFC | ACH Colombia (PSE) | UIAF reporting; pilot crypto framework |
| Chile | CMF | CCAv (interbank) | CMF fintech law (2023) |
| Nigeria | CBN, SEC NG | NIBSS (GIP, NIP) | SEC ARIP / digital-asset rules (2024) |
| Kenya | CBK | Safaricom (M-Pesa), IPSL (Pesalink) | VASP bill in flux; CMA / CBK joint guidance |
| South Africa | SARB, FSCA | BankservAfrica (EFT, PayShap), PASA | FSCA CASP license (2023) |
| UAE | CBUAE, VARA (Dubai), SCA (federal) | Al Etihad Payments (Aani, IPP), UAEFTS | VARA (Dubai), SCA (federal), ADGM FSRA |
| Saudi Arabia | SAMA | Saudi Payments (Mada, sarie), Mada | VA framework in development; SAMA sandbox |
| Egypt | CBE | EBC, Meeza, Fawry | Crypto restricted |
| Turkey | BDDK, CBRT | BKM (Troy), TCMB | MASAK reporting; crypto payment ban for purchases |
License types you need to know
| License | Jurisdiction | What it permits | Capital requirement (typical) | Usefulness for crypto on/off-ramp |
|---|---|---|---|---|
| MTL (Money Transmitter License) | US (state-by-state) | Receive and transmit fiat / value for another party | $50K–$1M+ per state in bond/net worth | Required to move USD on behalf of users in 49 states (plus DC). 50-state coverage is the boss-level licensing project for US crypto. |
| MSB (Money Services Business) | US (FinCEN federal) | BSA/AML registration (federal) | None | Required, but trivial vs MTL. Federal registration only. |
| BitLicense | NY state (NYDFS) | Virtual currency business activity in NY | Significant; ~$100K application + ongoing | Required to operate with NY residents. |
| Special Purpose Depository Institution (SPDI) | Wyoming | Bank charter without lending | Higher; bank-tier | Crypto-native bank charter; rare. |
| EMI (E-Money Institution) | UK, EU | Issue e-money, hold customer funds | €350K (full EMI); €50K (small EMI in UK) | Lets you hold customer fiat balances. Common for crypto on-ramps in EU/UK. |
| PI (Payment Institution) | UK, EU | Initiate / acquire payments, no e-money issuance | €20K–€125K (depending on services) | Cheaper than EMI; can do PIS / AIS. |
| AISP / PISP | UK, EU (PSD2) | Account info / payment initiation only | ~€50K PII cover for AISP | Open Banking on-ramp. |
| VASP | EU member states pre-MiCA; many global | Virtual asset service provider | Varies | Generic term; specific implementations differ per country. |
| CASP (under MiCA) | EU (from 2024-2025) | Crypto Asset Service Provider — passportable in EU | €50K–€150K + ongoing capital adequacy | The replacement for national VASP regimes in EU. |
| DPT (Digital Payment Token) | Singapore (MAS, PS Act) | Crypto exchange / wallet | S$100K (Standard) / S$250K (Major) | MAS-supervised crypto regime. |
| VATP | Hong Kong (SFC) | Virtual Asset Trading Platform | HK$5M paid-up | HK exchange license. |
| VARA license | Dubai (VARA) | Various virtual-asset activities | Activity-dependent | Required for Dubai-based VA business. |
| IFPE | Mexico (CNBV) | Electronic payment fund institution | ~MX$15M | Fintech license; crypto not directly permitted but adjacent. |
| CASP (FSCA) | South Africa | Crypto Asset Service Provider | FSCA-set | Mandatory since 2023. |
| PMLA / FIU-IND | India | AML reporting as designated entity | None (reporting only) | Mandatory for crypto exchanges since March 2023. |
What license each rail requires from the integrator
| Rail | Direct participation | Via sponsor/partner | Crypto-on-top adder |
|---|---|---|---|
| UPI (India) | Bank (PSP) or licensed payment aggregator | PSP bank as sponsor + TPAP | FIU-IND PMLA registration |
| PIX (Brazil) | BACEN Direct Participant (bank, payment institution) | Indirect via PIX participant | BACEN VASP framework |
| SEPA (SCT, SCT Inst) | Bank or licensed PI/EMI | PI/EMI via sponsor bank | MiCA CASP |
| FPS (UK) | Bank or e-money / Faster Payments DCA | EMI as agent of a settling bank | FCA cryptoasset registration |
| Open Banking (UK/EU) | PISP/AISP license | Use TrueLayer / Tink / Yapily as agent | Crypto AR via the BaaS partner |
| ACH (US) | Bank ODFI | Originate via partner bank (Modern Treasury, Column, Increase) | State MTLs + FinCEN MSB |
| RTP / FedNow (US) | Federal Reserve / TCH participant bank | Sponsor bank | State MTLs + FinCEN MSB |
| Wire / Fedwire | Federal Reserve member bank | Bank partner | MTLs |
| SPEI (Mexico) | CNBV-regulated entity (bank, IFPE) | IFPE partner | Crypto not directly permitted; partner with offshore |
| PayNow (Singapore) | MAS-licensed bank | Bank partner via BCAP | MAS DPT |
| InstaPay (PH) | BSP-licensed bank or EMI | EMI partner (BSP) | BSP VASP |
| GIP (Nigeria) | CBN-licensed bank | Sponsor bank + SEC NG crypto reg | SEC NG ARIP |
| M-Pesa | Safaricom Paybill / Till | Aggregator (Cellulant, Flutterwave) | CBK + CMA guidance |
| Card schemes | Scheme membership (issuer or acquirer) | Acquirer-of-record + payment facilitator (PayFac) | MCC 6051 acceptance + 3DS + ID match |
| Stablecoin | Self-custody or qualified custodian | Bridge / Brale for orchestrated rails | VASP / CASP / MTL stack as relevant |
Crypto licensing — the global stack
If you operate globally, your license matrix usually looks like this:
| Market | Minimum license stack | Ongoing obligations |
|---|---|---|
| US | FinCEN MSB + state MTLs (49 + DC) + NY BitLicense (if NY) | BSA reporting (SAR, CTR), state exams, NY DFS quarterly |
| EU (post-MiCA) | CASP (passportable) | MiCA ongoing capital adequacy, conduct, governance, white-paper for token issuance |
| UK | FCA cryptoasset registration; EMI if holding fiat | FCA Financial Promotions rules; consumer-duty compliance |
| Singapore | MAS DPT (Major) | AML/CFT, conduct, custody segregation |
| UAE | VARA (Dubai) or SCA (federal) or ADGM FSRA | VARA rulebook; capital; outsourcing controls |
| Brazil | BACEN VASP (Marco Cripto, effective from 2025) | BACEN reporting; AML |
| India | FIU-IND PMLA | STR / CTR filings; TDS deduction (1% on VDA transfers) |
| South Africa | FSCA CASP | FSCA conduct rules |
| Nigeria | SEC NG ARIP | SEC reporting; AML |
Travel Rule — jurisdictional implementation grid
FATF Recommendation 16 says: VASPs sending crypto over a threshold must share originator + beneficiary info. Implementation varies.
| Jurisdiction | Threshold | In force since | Common protocol vendors |
|---|---|---|---|
| EU (TFR / MiCA-adjacent) | €0 (all transfers, no de minimis) | Dec 2024 | Notabene, Sumsub, TRP, Veriscope |
| UK (FCA) | £1,000 | Sep 2023 | Notabene, Sumsub |
| US (FinCEN) | $3,000 (legacy bank rule applied to VASPs) | Pending crypto-specific rule; current via guidance | TRP, Notabene |
| Singapore (MAS) | S$1,500 | 2020 | Notabene, Sumsub |
| Hong Kong (SFC) | HK$8,000 | Jun 2023 | Sumsub, Veriscope |
| Japan (FSA) | ¥0 effectively (mandatory) | Jun 2023 | Sumsub, TRP |
| Switzerland (FINMA) | CHF 1,000 | 2020 (revised) | 21 Analytics, Notabene |
| Canada (FINTRAC) | C$1,000 | Jun 2021 | Notabene |
| South Korea (FIU) | KRW 1M | Mar 2022 | Domestic vendors (CODE) |
| UAE (VARA) | AED 3,500 | 2023 | Notabene, Sumsub |