Portugal: fintech & payments regulation

Regulated

Portugal fintech regulated by BCP under PSD2; VASP registration via Article 112-A

Lead regulator
Banco de Portugal
Also involved
CMVM (securities/ICO) · ASF (insurance) · CNPD (data)
Core law
Decree-Law No. 11-A/2018 (transposing PSD2)
Entry capital
EUR 300,000 (Payment Institution)
Approval timeline
3-6 months for PI/EMI license
Customer assets
Segregated in dedicated accounts
Data protection
GDPR + Lei 58/2019 · CNPD
Sandbox
No

Portugal maintains a mature, EU-aligned regulatory framework for fintech and payments. The Banco de Portugal (BdP) is the primary supervisor for Payment Institutions (PIs) and Electronic Money Institutions (EMIs), enforcing strict prudential and conduct standards under Decree-Law 11-A/2018. For Virtual Asset Service Providers (VASPs), the BdP manages a specific registration regime under Article 112-A of Law 83/2017, distinct from the banking license. The regulatory environment is stable, with recent updates focusing on operational resilience, instant payments, and AML transparency.

Which licence do you need?

Your activityRequirementCapitalTimelineAuthority
Payment processing / gatewayLicencePayment Institution[1]

Requires authorization under DL 11-A/2018

EUR 300,0003-6 monthsBanco de Portugal
E-money & wallet issuanceLicenceElectronic Money Institution[1]

Higher capital than PI; regulated under same decree

EUR 350,0003-6 monthsBanco de Portugal
Domestic money transferLicencePayment Institution[1]

Domestic transfers fall under PI scope

EUR 300,0003-6 monthsBanco de Portugal
Cross-border remittanceLicencePayment Institution[1]

Cross-border payments require PI license

EUR 300,0003-6 monthsBanco de Portugal
Agent networkRegistrationAgent Network Registration[1]

Agents must be registered with the BdP

Banco de Portugal
Open banking / account informationLicenceAIS/PSP[1]

AISPs and PISPs regulated under PSD2

Banco de Portugal
Foreign-exchange servicesLicencePayment Institution[1]

FX services included in PI authorization

EUR 300,0003-6 monthsBanco de Portugal

New — what changed recently

  • 2025-06-26Instruction No. 9/2025Amended SICOI operational rules for interbank compensation.[2]
  • 2025-01-30Instruction No. 2/2025Updated SICOI framework for electronic payments and direct debits.[3]
  • 2024-11-28Circular Letter No. CC/2024/00000051Imposed obligations on instant euro credit transfers for PIs and EMIs.[4]
  • 2024-01-01Notice No. 4/2024Mandated ultimate beneficiary identification in payment references.[5]

Market-entry checklist

  1. 1Secure PI/EMI LicenseApply to BdP with EUR 300k/350k capital and fit/proper tests.
  2. 2Register VASPsRegister virtual asset providers under Article 112-A of Law 83/2017.
  3. 3Implement AML/KYCAdhere to strict transparency rules for ultimate beneficiaries.
  4. 4Setup Instant PaymentsEnsure compliance with new instant euro credit transfer obligations.
  5. 5Register AgentsRegister any agent network with the Banco de Portugal.
This guide is compiled automatically from 5 primary-source documents published by Portugal's regulators, reviewed by RegAlert, and refreshed monthly (last updated 2026-07-12). It is not legal advice — always confirm requirements with the regulator or local counsel before acting.