Between our early-August and mid-September snapshots, the EBA's register of payment and e-money institutions gained 17 newly authorised firms across nine member states, and the FCA's UK register added two payment institutions, cancelled five authorisations and dropped one bank from its public extract. Some of these were announced; most were not. Here is the register's own list, with what each authorisation actually permits.
All rows below come from the EBA Payment Institutions Register (a consolidation of the national competent authorities' registers) and the FCA Financial Services Register, as of 17 September 2026. The entity-type codes are the EBA's: PSD_PI authorised payment institution, PSD_EMI authorised e-money institution, PSD_EPI exempted (small) payment institution, PSD_EEMI exempted (small) e-money institution, PSD_EXC a service provider operating under a PSD2 exclusion (typically the limited-network exemption) that the regulator has registered.
EU/EEA: 17 new institutions on the EBA register
| Regulator | Entity | Type | National ref |
|---|---|---|---|
| Austria — FMA | Bybit Payments GmbH | PSD_EMI | 636179h |
| Bulgaria — BNB | MUVU Bulgaria EOOD | PSD_EMI | 208462740 |
| Netherlands — DNB | Ypsilon EMI Services BV | PSD_EEMI | R202368 |
| Spain — Banco de España | Prosegur Custodia de Activos Digitales, S.L. | PSD_PI | 6950 |
| Finland — FIN-FSA | NorthCrypto Oy | PSD_PI | 29182549 |
| Malta — MFSA | Pyvio Europe Limited | PSD_PI | C107946 |
| Malta — MFSA | Macropay Ltd | PSD_PI | C102747 |
| Malta — MFSA | Credybl Finance Limited | PSD_PI | C 112145 |
| Malta — MFSA | TPF Malta Ltd. | PSD_PI | C105673 |
| Netherlands — DNB | Yapifi BV | PSD_PI | R203521 |
| Romania — BNR | Agricover Payments S.A. | PSD_PI | 50660291 |
| Sweden — Finansinspektionen | Digitala Kassan Europe AB | PSD_PI | 559571-7918 |
| Netherlands — DNB | Timothy | PSD_EPI | R203234 |
| Netherlands — DNB | Bundll | PSD_EPI | R202884 |
| Netherlands — DNB | Afbouwborg Nederland B.V | PSD_EPI | R203769 |
| Poland — KNF | Wowpay sp. z o.o. | PSD_EPI | 5253048844 |
| Sweden — Finansinspektionen | Nordrest Holding AB | PSD_EXC | 556943-6560 |
Two of these deserve a closer look.
Bybit Payments GmbH — Austria's FMA, e-money institution. This one was announced on 4 August, so the register confirms rather than reveals. What it adds is structure: the EMI is a separate Vienna entity from Bybit EU GmbH, the group's MiCA-authorised crypto-asset service provider. Fiat e-money and payment services under PSD2/EMD2 on one licence; crypto trading, custody and transfers under MiCA on another. Expect more crypto groups to end up on both registers — a MiCA CASP authorisation does not cover issuing euro balances or acquiring card payments, and an EMI licence does not cover crypto. See the Austrian provider listing.
Prosegur Custodia de Activos Digitales — Banco de España, payment institution. Prosegur is the cash-in-transit and security group; Custodia de Activos Digitales is its crypto-custody arm. A Spanish PI authorisation for the custody unit is an unusual combination — payment-institution permissions (transfers, payment accounts) attached to a business whose core product is safekeeping digital assets — and we found no announcement of it. Whether this is the fiat leg of a custody-plus-settlement offering or groundwork for something broader, the register will show it when the entity's services or host states change.
Also notable: NorthCrypto Oy, a Finnish crypto exchange, taking a payment institution authorisation — the same "one register is not enough" pattern as Bybit — and MUVU Bulgaria, a new EMI in a jurisdiction that has issued few.
UK: two grants, five cancellations, one delisting
| FRN | Entity | Change | Effective |
|---|---|---|---|
| 1050385 | Computershare Advantage Payment Services Limited | Granted — Authorised Payment Institution | 2026-08-19 |
| 1045688 | Financia Strategy Limited | Granted — Small Payment Institution | 2026-08-14 |
| 799814 | Amazon Payments UK Limited | Cancelled — Authorised PI | 2026-09-15 |
| 900027 | CFS-ZIPP Limited | Cancelled — Authorised EMI | 2026-08-10 |
| 570843 | Connect Plus Business Ltd | Cancelled — Authorised PI | 2026-09-11 |
| 833374 | DOS & Co. Ltd. | Cancelled — Small PI | 2026-09-03 |
| 931352 | Fintelli Ltd | Cancelled — RAISP | 2026-08-04 |
| 805574 | Citibank UK Limited | Removed from the FCA's credit-institution extract | — |
Computershare Advantage Payment Services is the one to watch: Computershare is a share-registry and employee-equity administrator, and a UK payment institution licence in a dedicated payments subsidiary points at bringing dividend, proceeds and plan payouts in-house rather than through a bank partner. It arrived on the register without announcement.
Amazon's cancellation is the end of a migration we have followed on the register since July — full story here. CFS-ZIPP Limited's e-money authorisation was cancelled on 10 August; the register records the cancellation, not the reason. Citibank UK Limited disappearing from the FCA's public credit-institution CSV is the weakest signal in this list — a delisting from an extract, not a recorded status change — and we flag it as such; Citibank's directory profile is unchanged pending a recorded status.
Each UK row is verifiable on the FCA register by FRN, e.g. FRN 1050385. The status labels are the regulator's own.
What it means
For merchants choosing a provider: an authorisation on one of these registers is the floor, not the recommendation. It tells you the entity may lawfully provide the service in that jurisdiction and which category it sits in — a small/exempted institution (PSD_EPI, Small PI) operates under transaction-volume caps and lighter safeguarding rules than an authorised one. Filter the UK and EU listings by regulatory status when the licence category matters to you.
For compliance and partnerships teams: five UK cancellations in six weeks, none announced. If any of these entities is in your PSP cascade, your evidence file needs updating this month.
For anyone building on crypto rails: the summer's pattern is groups holding both a PSD2/EMD2 licence and a MiCA authorisation in separate entities — Bybit, NorthCrypto, and on the MiCA side the incumbent banks (Deutsche Bank, the Volksbanken). The registers are converging on the same firms from two directions.
Why the register beats the announcement
Of the 25 changes above, we found announcements for one. License Watch diffs the EBA, FCA, ESMA MiCA, FINTRAC, FinCEN and ASIC registers every week and publishes every grant, cancellation, revocation and status change with a citation link to the regulator's own record. No claim without a citation — if we can't cite it, we don't publish it.
Read the latest issue, or request access to the weekly digest.
PaymentProviders.io is an informational service. Registry data belongs to the issuing regulators; status labels reflect the regulator's own wording. This article is not financial or legal advice, and PaymentProviders.io is not affiliated with any entity named.
