Spain: fintech & payments regulation

Regulated

Spain fintech & payments: Bank of Spain regulates PIs/EMIs under PSD2; CNMV oversees investment services

Lead regulator:: Bank of Spain
Key law:: Royal Decree 736/2019
Last updated:: 2026-07-12

Spain maintains a robust regulatory framework for fintech and payments, primarily overseen by the Bank of Spain for payment and electronic money services. The core legal basis is Royal Decree 736/2019, which fully transposes the EU Payment Services Directive 2 (PSD2) into national law. This decree transfers authorization and supervisory powers for payment institutions directly to the Bank of Spain, ensuring alignment with European standards.

The issuance of electronic money is regulated under Law 21/2011, which reserves this activity for specific entities including authorized electronic money institutions and credit institutions. The Bank of Spain also enforces prudential and reporting requirements through various circulars, such as Circular 5/2020 for financial reporting and Circular 2/2022 for payment statistics.

For investment services and securities markets, the National Securities Market Commission (CNMV) acts as the primary supervisor. Its role is supported by Royal Decree 813/2023 and Royal Decree 815/2023, which transpose EU directives and establish comprehensive supervisory frameworks for investment service companies. The regulatory environment is characterized by strict adherence to EU directives, with recent updates focusing on transparency, solvency, and operational resilience.

Who regulates

Bank of Spain
Primary supervisor for payment institutions, electronic money institutions, and payment systems; issues prudential and operational circulars.
^{[1][2][3][4][5][6][7][8][9][10][11][12][13][14][15][16][17]}
Comision Nacional del Mercado de Valores (CNMV)
Supervises securities markets, investment service companies, and collective investment schemes; issues fees and administrative supervision rules.
^{[5][18][19][20][21]}

Core laws & rules

Royal Decree 736/2019 (2019)
Transposes PSD2 into Spanish law, establishing the legal regime for payment services and institutions, and transferring authorization powers to the Bank of Spain.
^[1]
Law 21/2011 (2011)
Regulates the professional issuance of electronic money and establishes the prudential supervision framework for electronic money institutions.
^[2]
Royal Decree 813/2023 (2023)
Transposes Directive 2019/2034/EU and establishes the prudential supervision regime for investment service companies under Law 6/2023.
^[18]
Royal Decree 815/2023 (2023)
Develops the administrative supervisory powers of the CNMV under the Securities Markets and Investment Services Law.
^[5]

Licensing & registration

Payment Institution
Authorization required for providing payment services; powers transferred to the Bank of Spain under Royal Decree 736/2019.
^[1]
Electronic Money Institution
Authorization required for issuing electronic money; reserved for specific entities under Law 21/2011 and Royal Decree 778/2012.
^[2][22]
Investment Service Company
Authorization required under the Securities Markets and Investment Services Law; supervised by the CNMV.
^[18][5]

Restrictions & warnings

Electronic money issuance is reserved for authorized entities; credit institutions and authorized e-money institutions are the primary eligible actors.
^[2]
Payment service providers must submit regular payment statistics and fraud data to the Bank of Spain in compliance with ECB regulations.
^[7][8]
Basic payment accounts must be offered to vulnerable persons or those at risk of financial exclusion, with specific fee caps and transparency requirements.
^[23][24][25]

Direction of travel

Regulatory framework continues to align with EU directives, with recent updates focusing on prudential supervision, reporting obligations, and operational resilience in payment systems.
^[1][18][5]

Sources

Email alerts for Spain updates

New circulars, rules and guidance — a digest in your inbox, same day.

This guide is compiled automatically from 25 primary-source documents published by Spain's regulators, reviewed by RegAlert, and refreshed monthly (last updated 2026-07-12). It is not legal advice — always confirm requirements with the regulator or local counsel before acting.