Between our early-August and mid-September snapshots, the EBA's register of payment and e-money institutions gained 17 newly authorised firms across nine member states, and the FCA's UK register added two payment institutions, cancelled five authorisations and dropped one bank from its public extract. Some of these were announced; most were not. Here is the register's own list, with what each authorisation actually permits.
The EU table below comes from the EBA Payment Institutions Register (a consolidation of the national competent authorities' registers) and the FCA Financial Services Register, as of 17 September 2026; the UK section summarises the FCA register and links to it. The entity-type codes are the EBA's: PSD_PI authorised payment institution, PSD_EMI authorised e-money institution, PSD_EPI exempted (small) payment institution, PSD_EEMI exempted (small) e-money institution, PSD_EXC a service provider operating under a PSD2 exclusion (typically the limited-network exemption) that the regulator has registered.
EU/EEA: 17 new institutions on the EBA register
| Regulator | Entity | Type | National ref |
|---|---|---|---|
| Austria — FMA | Bybit Payments GmbH | PSD_EMI | 636179h |
| Bulgaria — BNB | MUVU Bulgaria EOOD | PSD_EMI | 208462740 |
| Netherlands — DNB | Ypsilon EMI Services BV | PSD_EEMI | R202368 |
| Spain — Banco de España | Prosegur Custodia de Activos Digitales, S.L. | PSD_PI | 6950 |
| Finland — FIN-FSA | NorthCrypto Oy | PSD_PI | 29182549 |
| Malta — MFSA | Pyvio Europe Limited | PSD_PI | C107946 |
| Malta — MFSA | Macropay Ltd | PSD_PI | C102747 |
| Malta — MFSA | Credybl Finance Limited | PSD_PI | C 112145 |
| Malta — MFSA | TPF Malta Ltd. | PSD_PI | C105673 |
| Netherlands — DNB | Yapifi BV | PSD_PI | R203521 |
| Romania — BNR | Agricover Payments S.A. | PSD_PI | 50660291 |
| Sweden — Finansinspektionen | Digitala Kassan Europe AB | PSD_PI | 559571-7918 |
| Netherlands — DNB | Timothy | PSD_EPI | R203234 |
| Netherlands — DNB | Bundll | PSD_EPI | R202884 |
| Netherlands — DNB | Afbouwborg Nederland B.V | PSD_EPI | R203769 |
| Poland — KNF | Wowpay sp. z o.o. | PSD_EPI | 5253048844 |
| Sweden — Finansinspektionen | Nordrest Holding AB | PSD_EXC | 556943-6560 |
Two of these deserve a closer look.
Bybit Payments GmbH — Austria's FMA, e-money institution. This one was announced on 4 August, so the register confirms rather than reveals. What it adds is structure: the EMI is a separate Vienna entity from Bybit EU GmbH, the group's MiCA-authorised crypto-asset service provider. Fiat e-money and payment services under PSD2/EMD2 on one licence; crypto trading, custody and transfers under MiCA on another. Expect more crypto groups to end up on both registers — a MiCA CASP authorisation does not cover issuing euro balances or acquiring card payments, and an EMI licence does not cover crypto. See the Austrian provider listing.
Prosegur Custodia de Activos Digitales — Banco de España, payment institution. Prosegur is the cash-in-transit and security group; Custodia de Activos Digitales is its crypto-custody arm. A Spanish PI authorisation for the custody unit is an unusual combination — payment-institution permissions (transfers, payment accounts) attached to a business whose core product is safekeeping digital assets — and we found no announcement of it. Whether this is the fiat leg of a custody-plus-settlement offering or groundwork for something broader, the register will show it when the entity's services or host states change.
Also notable: NorthCrypto Oy, a Finnish crypto exchange, taking a payment institution authorisation — the same "one register is not enough" pattern as Bybit — and MUVU Bulgaria, a new EMI in a jurisdiction that has issued few.
UK: two grants, five cancellations, one delisting
The FCA's register recorded two new payment-institution authorisations, five cancelled authorisations and one bank dropping out of its public credit-institution extract between the two snapshots. We don't reproduce the FCA register here — look any firm up on the FCA Financial Services Register itself. Two of the changes concern providers in our directory:
Amazon Payments UK's payment-institution authorisation was cancelled, effective 15 September — the end of a migration we have followed since July, when the same company was authorised as an e-money institution. Full story here.
Citibank UK Limited disappeared from the FCA's public credit-institution extract. This is the weakest signal in this article — a delisting from an extract, not a recorded status change — and we flag it as such; Citibank's directory profile is unchanged pending a recorded status.
What it means
For merchants choosing a provider: an authorisation on one of these registers is the floor, not the recommendation. It tells you the entity may lawfully provide the service in that jurisdiction and which category it sits in — a small/exempted institution (PSD_EPI, Small PI) operates under transaction-volume caps and lighter safeguarding rules than an authorised one. Filter the UK and EU listings by regulatory status when the licence category matters to you.
For compliance and partnerships teams: five UK cancellations in six weeks, none announced. If any of these entities is in your PSP cascade, your evidence file needs updating this month.
For anyone building on crypto rails: the summer's pattern is groups holding both a PSD2/EMD2 licence and a MiCA authorisation in separate entities — Bybit, NorthCrypto, and on the MiCA side the incumbent banks (Deutsche Bank, the Volksbanken). The registers are converging on the same firms from two directions.
Why the register beats the announcement
Of the 25 changes in this article, we found announcements for one. License Watch diffs the EBA, ESMA MiCA, FINTRAC and ASIC registers every week and publishes every grant, cancellation, revocation and status change with a citation link to the regulator's own record. No claim without a citation — if we can't cite it, we don't publish it.
Read the latest issue, or request access to the weekly digest.
PaymentProviders.io is an informational service. Registry data belongs to the issuing regulators; status labels reflect the regulator's own wording. This article is not financial or legal advice, and PaymentProviders.io is not affiliated with any entity named.
