Electronic Money Institution (EMI) License in Cyprus
Cyprus’s Authorised Electronic Money Institution (EMI) licence, issued by the Central Bank of Cyprus (CBC) under the Electronic Money Directive (2009/110/EC), authorises firms to issue electronic money, hold client funds, and provide payment services across the EU via EEA passporting. The framework aligns with PSD2 and AMLD, and DORA digital operational resilience requirements have applied to all licensed EMIs since January 2025.
Key parameters: €350,000 minimum capital, a registered and head office in Cyprus, and a genuine in-country compliance presence. The CBC applies a statutory 3-month review deadline once the file is complete, with a transparent fee structure: €5,000 at submission plus €1,000 per additional PSD2 service. Cyprus applies a 12.5% corporate income tax rate — among the lowest in the EU.
One important scope boundary: a Cyprus EMI licence does not replace MiCA CASP authorisation. Firms offering crypto custody or exchange must obtain a separate CySEC-supervised CASP authorisation under MiCA.
This page covers CBC-licensed Cyprus EMI entities currently available for transfer, with a full breakdown of eligible activities, capital requirements, and post-acquisition compliance obligations.
Our team facilitates both ready-made acquisitions and new CBC applications — compliance documentation, safeguarding structure, and DORA readiness.
Ready to Buy EMIs in Cyprus
Electronic Money Institution (EMI) in Cyprus With EU Passporting for Sale #1
Main Details:
• Fully licensed Electronic Money Institution based in Cyprus
• EU passporting in place for cross-border operations
• Regulated and supervised by the competent national authority
• Operational and compliant structure
Licensed Activities:
• Issuance of electronic money
• Cash withdrawals from payment accounts
• Execution of payment transactions
• Issuing and acquiring payment instruments
• Account information services
• Payment initiation services
Banking and Connectivity:
• SEPA connectivity with direct access planned
• SWIFT access via established banking partners
• Modern core-banking and embedded finance infrastructure
Operational Setup:
• Experienced team across operations, compliance, onboarding, and payments
• Efficient and scalable organisational structure
• Diversified client portfolio across multiple business sectors
Opportunity:
• Acquisition of an operational EU EMI with full passporting
• Suitable for expansion of cross-border euro-zone payment flows
• Platform ready for scale and product expansion
Related EU e-money licences and Cyprus financial structures
Key Takeaways for an Electronic Money Institution (EMI) in Cyprus
- Cyprus EMI license allows EU-wide PSD2 services and e-money issuance under the Central Bank of Cyprus; no deposit-taking, and client funds must be safeguarded.
- Capital & fees: €350,000 capital at authorisation; CBC fees €5,000 plus €1,000 per extra PSD2 service and €500 for AISP; budget for translations, banking onboarding, ICT, and audit.
- Local substance & timing: a Cyprus legal person with registered and head office in Cyprus and activity on the island; law sets a 3-month decision after a complete file, but Q&A and banking often extend timelines.
- EU obligations: DORA applies from 17 Jan 2025; Instant Payments Regulation adds equality of charges (9 Jan 2025), Verification of Payee (9 Oct 2025), and instant send/receive (9 Apr 2027 for euro-area EMIs).
- Ongoing duties & tax: maintain own funds and daily safeguarding reconciliations, file AML STR/SAR via MOKAS goAML, keep ICT/outsourcing registers; corporate tax is 12.5%; authorised EMIs appear in the EBA register for passporting.
- How Legasset helps: purchase a ready-made EMI or apply for a new authorisation; we handle CBC filing, safeguarding setup, DORA/IPR delivery, and (where relevant) MiCA scoping for EMT or CASP activities.
What You Need to Know About the EMI License in Cyprus
Table of Contents
A Cyprus EMI lets you issue e-money and provide PSD2 payment services across the EU under Directive 2009/110/EC, supervised by the Central Bank of Cyprus. It does not allow deposit-taking. Client funds must be safeguarded via segregation or insurance/guarantee. Typical use cases include IBAN wallets with cards, merchant acquiring, and cross-border transfers.
Key conditions at a glance: €350,000 initial capital, €5,000 application fee, and a 3-month decision once the file is complete. The EMI must be incorporated in Cyprus, have its registered and head office in Cyprus, and carry out part of its activity locally.
Operational limits that matter: EMIs may distribute and redeem e-money via third parties but cannot issue e-money through agents. Payment services through agents are allowed only under PSD2 conditions. If you plan SEPA Instant, factor in Regulation (EU) 2024/886 deadlines for sending/receiving and Verification of Payee.
Why this license is timely: DORA has applied since 17 January 2025, adding ICT governance, incident reporting, testing, and third-party oversight. PSD3/PSR moved into trilogues in June 2025 and will reshape authorisation and conduct rules once adopted.
Regulator, legal basis, tax, and near-term obligations
The competent authority is the Central Bank of Cyprus (CBC). Its EMI page sets the local-presence rule, forms, and supervision scope. National law sets the 3-month decision from a duly completed file; EMD2 sets initial capital and safeguarding.
Instant Payments obligations phase in through 2025–2027 for euro-area and non-euro PSPs, including send/receive and payee-name check requirements that affect product and pricing. Corporate income tax is 12.5% per the Tax Department.
Passporting and visibility: once authorised, firms can passport services across the EU and appear in the EBA central register for payment and e-money institutions.
You can purchase a ready-made Cyprus EMI or apply for a new one. We support both paths end-to-end: model scoping, CBC filing, safeguarding setup, and DORA/Instant Payments readiness before launch. Next, we cover eligibility and requirements so you can map timelines and costs with confidence.
Eligibility Requirements for Obtaining a Cyprus EMI License
Who can apply and legal form
A Cyprus EMI must be a legal person incorporated in Cyprus with its registered and head office in the Republic, and it must conduct part of its e-money or related payment services from Cyprus. Passporting to the EU is available after authorisation under PSD2.
Capital and prudential facts
Minimum initial capital €350,000 is required. Own funds must be maintained on an ongoing basis, and safeguarding of customer funds is mandatory via segregation or an equivalent guarantee. Capital forms part of own funds and is not an escrow deposit.
Local presence and governance
Effective management must operate from Cyprus. The board and key function holders must meet fit-and-proper and time-commitment standards under the CBC’s 2025 suitability directives. A local office and staff responsible for risk, compliance, and operations are expected.
AML, DORA, and instant payments
EMIs are obliged entities under the CBC’s Prevention of Money Laundering and Terrorist Financing Directive of 2025 (R.A.A. 120/2025). Registration and STR/SAR filing occur through MOKAS goAML. DORA applies from 17 January 2025. Under the Instant Payments Regulation (EU) 2024/886, EMIs in the euro area must support receiving and sending instant euro transfers by 9 April 2027, and verification of payee in the euro area by 9 October 2025.
Documentation and submission
Applications go through the CBC e-platform and must follow EBA/GL/2017/09 content requirements. CBC publishes the EMI application pack, qualifying-holding forms, a time-commitment table, and a list of common errors to avoid. Include a receipt for the application fee.
Timelines and fees
By law, the CBC decides within three months of a complete file. Official fees: €5,000 to examine an EMI application, plus €1,000 per additional payment service and €500 for AISP. Plan for iterative Q&A that can extend practical timelines.
Ongoing costs and tax
Expect annual audit, safeguarding-account costs, supervisory engagement, and ICT-risk compliance under DORA. Corporate income tax is 12.5% for Cyprus-resident companies.
Common challenges and how we help
Frequent pitfalls include generic policies, weak safeguarding descriptions, thin governance, and over-optimistic financials. Banks and PSPs may apply de-risking standards, so thorough AML, source-of-funds, and realistic projections are essential. Our team builds documentation aligned with CBC and EBA expectations to reduce avoidable rounds of questions.
If you want a ready-made Cyprus EMI or prefer a new application, our team handles both paths end-to-end—licensing, passporting, and compliance setup—following the sources above.
How MiCA affects an EMI in Cyprus
MiCA is the EU’s single rulebook for crypto. Stablecoin rules have applied since 30 June 2024, and CASP rules since 30 December 2024. Cyprus granted the full 18-month transition for pre-MiCA CASPs, ending 1 July 2026.
What changes: CASPs face prudential safeguards equal to the higher of the Annex IV capital floor (€50k for order-type services, €125k for custody or exchange, €150k for operating a trading platform) or ¼ of prior-year fixed overheads, plus stricter governance and conduct rules. EMI issuers of EMTs must redeem at par, pay no interest, and notify an EMT white paper before public offers or listings.
Scope boundaries: An EMI licence does not replace a CASP authorisation. Under MiCA Article 60, an EMI may only provide custody/administration and transfer services for the EMTs it issues, after a 40-working-day notification to CySEC. Any broader crypto-asset services require CASP authorisation.
Interplay with payments: Where EMT transfers look like payment services, the EBA has asked NCAs not to enforce PSD2 licensing until 2 March 2026, then to apply streamlined dual authorisation.
Who supervises: CySEC supervises CASPs under MiCA. The CBC licenses and supervises EMIs; its AML Directive 120/2025 applies from 2 June 2025. DORA applies from 17 January 2025.
Pros & Cons of Acquiring an EMI in Cyprus
+ EU passporting & EBA visibility. After CBC authorisation you can passport EMI/PSD2 services across the EU/EEA and appear in the EBA public register—streamlining partner onboarding and due diligence.
+ Statutory 3-month decision. Cyprus law requires a decision on a duly completed file within three months—helps set realistic project milestones and go-live planning.
+ Transparent regulator fees. Pay €5,000 at submission plus €1,000 per extra PSD2 service and €500 for AISP—clear budgeting with known authority charges.
+ EU-harmonised prudential baseline. Initial capital €350,000 and safeguarding under Directive 2009/110/EC (segregation or guarantee) support predictable treasury and risk controls.
+ 12.5% corporate income tax. On €200,000 profit, tax is €25,000; at a 25% comparator that would be €50,000—freeing €25,000 for hiring or tech (group situations vary).
+ Defined EU compliance roadmap. DORA applies from 17 Jan 2025; Instant Payments requires equality of charges from 9 Jan 2025, Verification of Payee by 9 Oct 2025, and instant send/receive by 9 Apr 2027 (euro area).
+ Clear local-presence rule. CBC requires a Cyprus-incorporated entity with registered and head office in Cyprus, giving certainty on substance and management expectations.
– Subsцtance and governance costs. You must keep the head office in Cyprus and run part of activities locally—premises, executive time, and fit-and-proper files add recurring costs.
– Not a banking licence. EMIs cannot accept deposits or grant credit from safeguarded funds—some products still need bank partners, affecting margins and UX.
– Banking de-risking. Opening safeguarding and operating accounts can take weeks with multiple counterparties; expect enhanced KYC/KYB, flows-of-funds, and sanctions controls.
– DORA uplift. Mandatory ICT risk governance, incident reporting, testing, and critical third-party oversight expand pre-launch scope and annual OpEx; board engagement is required.
– Instant Payments build. Implementing VoP and instant rails impacts core banking integration, liquidity buffers, AML/fraud tooling, and customer comms—creates budget and timeline pressure.
– Qualifying-holding approvals. Buying a ready-made EMI triggers prior CBC approval at 20%/30%/50% thresholds; closing can slip while suitability and funding source are assessed.
– Clock vs reality. The “3 months” starts only when the file is complete; pre-filing Q&A and evidence gathering often add months—plan for iterative regulator questions.
– Liquidity ring-fencing. Safeguarded client funds cannot finance operations—maintain separate working-capital lines and stress-test cash coverage for peak issuance days.
How to Get an EMI License in Cyprus
- Step 1: Route selection and scope 1-2 weeks
Choose between a ready-made EMI and a new application. Define PSD2 services (Annex I) and geographies, and confirm whether SEPA Instant is in scope.
Key Documents: services matrix, target markets, initial org chart, high-level flows.
Estimated Cost: advisory and internal planning - variable.
Timeline: 1-2 weeks. - Step 2: Incorporation and local presence 2-4 weeks
An EMI must be a Cyprus legal person with its registered and head office in Cyprus. Secure premises and core roles locally (management, compliance, operations).
Key Documents: incorporation set, UBO chart, directors’ IDs, office lease or service agreement.
Estimated Cost: company setup and office - variable.
Timeline: 2-4 weeks. - Step 3: Capitalization and safeguarding design 2-4 weeks
Set initial capital €350,000 and choose safeguarding (segregated account or insurance/guarantee). Safeguarded client funds cannot finance operations.
Key Documents: proof of capital, safeguarding methodology, reconciliation procedures, eligible assets policy.
Estimated Cost: banking/insurance and treasury setup - variable.
Timeline: 2-4 weeks, parallel to Step 2. - Step 4: Governance, AML/CFT, and key functions 3-6 weeks
Appoint a fit-and-proper board and establish compliance/MLRO, risk, and internal audit. Register on goAML to file STRs/SARs to MOKAS (FIU). Align policies with CBC’s 2025 AML directive.
Key Documents: board resumes, fit-and-proper evidence, AML/KYC policy, risk framework, complaints handling, training plan.
Estimated Cost: hiring, background checks, policy drafting - variable.
Timeline: 3-6 weeks (hiring often drives timing). - Step 5: ICT controls (DORA) and Instant Payments plan 4-12 weeks
Implement ICT governance, incident reporting, testing, and third-party oversight per DORA. For euro services, plan Instant Payments Regulation milestones: equality of charges (9 Jan 2025), Verification of Payee (9 Oct 2025), and instant send/receive (9 Apr 2027 for euro-area EMIs).
Key Documents: ICT policies, BCP/DR, incident playbooks, outsourcing register, VoP and instant payments project plan.
Estimated Cost: vendors, integration, monitoring - variable.
Timeline: 4-12 weeks depending on stack and scope. - Step 6: Build the CBC application dossier (or refresh file for ready-made) 4-8 weeks
Follow EBA/GL/2017/09 for content: programme of operations, business plan and financials, safeguarding model, governance, IT/outsourcing, policies, head-office details. For a ready-made EMI, refresh the file to current standards before change-control.
Key Documents: CBC application forms, policies, financial projections, outsourcing inventory, head-office attestations.
Estimated Cost: professional drafting and assembly - variable.
Timeline: 4-8 weeks to reach “complete” quality. - Step 7: Submission and official fees 3 months
Submit to CBC and pay €5,000. Add €1,000 per additional PSD2 service (Annex I points 1-7) and €500 for AISP (point 8). The 3-month decision clock starts only after the file is deemed duly completed.
Key Documents: signed forms, fee receipt, final policies and annexes.
Estimated Cost: official fees as above; professional support - variable.
Timeline: statutory 3 months from completeness; expect pre- and post-completeness Q&A. - Step 8: Banking and safeguarding onboarding 4-8 weeks
Open safeguarding and operating accounts. Expect detailed AML and model scrutiny; plan parallel onboarding with multiple counterparties to mitigate de-risking delays.
Key Documents: KYC/KYB pack, flows of funds, sanctions and monitoring scenarios, forecast volumes.
Estimated Cost: account opening, minimum balances, attestations - bank dependent.
Timeline: commonly 4-8 weeks, often overlaps Steps 6-7. - Step 9: Supervisory checks and readiness testing 1-3 weeks
CBC may review operational readiness (safeguarding, ICT, reporting) before granting authorization. Close any action items quickly to avoid slippage.
Key Documents: live procedure evidence, test logs, user access matrices, vendor SLAs, audit trail extracts.
Estimated Cost: remediation and tooling - variable.
Timeline: 1-3 weeks depending on findings. - Step 10: Authorization, register entry, and passporting 1-3 weeks
On approval, you appear on the CBC/EBA registers. Notify cross-border services to passport across the EEA.
Key Documents: authorization letter, passporting notifications, host-state plans and disclosures.
Estimated Cost: notifications, translations - modest.
Timeline: 1-3 weeks for initial passports. - Step 11: Ready-made route only - qualifying holding approval 4-8 weeks
Buying a ready-made EMI triggers prior approval at 20%/30%/50% thresholds. Expect suitability and source-of-funds questions and allow for conditions.
Key Documents: SPA draft, acquirer KYC, funding evidence, governance transition plan.
Estimated Cost: transaction and regulatory filings - variable.
Timeline: typically 4-8 weeks in practice. - Step 12: Post-licensing operations and reporting recurring
Maintain own funds, run safeguarding reconciliations, file AML reports via goAML, keep DORA controls current, and deliver Instant Payments commitments if in scope. Annual audit is expected.
Key Documents: periodic returns, audit files, AML training logs, incident reports, VoP compliance evidence.
Estimated Cost: audit, compliance staffing, ICT assurance - ongoing, variable.
Timeline: recurring per reporting and EU deadlines.
- Total timeline and cost snapshot: Preparation and Q&A often extend beyond the statutory 3-month decision period. A realistic end-to-end plan is 4-8 months depending on readiness, banking, and ICT scope.
- Official fees: €5,000 base + €1,000 per added PSD2 service + €500 for AISP.
- Capital: €350,000.
- Local presence: Cyprus company with registered and head office in Cyprus.
Post-Licensing Compliance Obligations for an EMI in Cyprus
Licensing is only the start. The Central Bank of Cyprus (CBC) supervises EMIs on an ongoing basis and may restrict or revoke authorisation for breaches.
- AML/KYC and reporting. Operate risk-based onboarding and monitoring, keep audit trails, and file STR/SAR via goAML to MOKAS. The CBC’s AML Directive 120/2025 has applied since 2 June 2025, tightening governance and reporting.
- Own funds and safeguarding. Maintain €350,000 initial capital at authorisation and adequate own funds thereafter. Safeguard client money via segregation or guarantee, with daily reconciliations and eligible-asset controls.
- ICT and outsourcing under DORA. From 17 January 2025, EMIs must evidence ICT governance, incident reporting, resilience testing, and third-party oversight; keep an up-to-date outsourcing register.
- Payments operations (Instant Payments Regulation). If you offer euro instant transfers, meet deadlines: equality of charges by 9 January 2025, Verification of Payee by 9 October 2025, and instant send/receive by 9 April 2027 for EMIs in the euro area. Align liquidity buffers, fraud tooling, and customer notices.
- Corporate changes and notifications. Obtain prior approval before acquiring or increasing a qualifying holding; notify director and key-function changes promptly. Keep financial statements and CBC-requested prudential data current.
- Tax and accounting. Keep Cyprus accounting and VAT duties up to date; the standard corporate income tax rate is 12.5% (higher 15% only for large MNEs under Pillar Two).
Legasset’s support
We run filing calendars, prepare CBC packs, test DORA controls, and deliver Instant Payments projects (VoP and rails). We also conduct AML health-checks and staff training so operations remain compliant while you scale.
Common Pitfalls and Challenges of Operating Under a Cyprus EMI
Overview. This license is strong, but operations stay under CBC oversight after approval. Failures in safeguarding, AML, or governance can trigger restrictions or withdrawal.
Key challenges to plan for:
- Banking onboarding can stall launches as some banks still “de-risk” EMI and crypto-adjacent models; build a multi-counterparty plan and prepare enhanced KYC packs.
- Local substance is real – you must keep the registered and head office in Cyprus, with decision making on the island. An EMI is not a bank – deposit-taking is prohibited and safeguarded funds cannot finance operations, so design separate working capital. Technology obligations now bite: DORA requires ICT governance, testing, incident reporting, and vendor oversight; the Instant Payments Regulation adds Verification of Payee and instant send/receive deadlines that affect liquidity and fraud tooling.
How we help. We sequence banking and safeguarding onboarding, build governance and AML files that pass scrutiny, and run DORA and Instant Payments projects with clear owners and dates. We also prepare change-of-control and key-person notifications so supervision stays smooth while you scale.
FAQ About Purchasing a Cyprus EMI License
What does a Cyprus EMI license allow—and what are the limits?
A Cyprus Electronic Money Institution license lets you issue e-money and provide PSD2 services (e.g., cards, IBAN wallets, acquiring, transfers) across the EU/EEA. It does not permit deposit-taking, and client funds must be safeguarded via segregation or guarantee. The licence holder must be a Cyprus legal person with its registered and head office in Cyprus.
What is the cost to buy a ready-made Cyprus EMI or apply for a new Electronic Money Institution license in Cyprus?
Official CBC fees: €5,000 per application, €1,000 per additional PSD2 service (Annex I points 1-7), and €500 for AISP (point 8). Minimum initial capital is €350,000; maintain own funds at all times and keep safeguarded client money separate. Deal and professional costs depend on due diligence, file depth, and post-closing remediation.
How long does a Cyprus EMI authorization or acquisition take in practice?
Once the file is deemed duly complete, the Central Bank of Cyprus has a 3-month decision clock. Real projects run longer due to pre-submission Q&A, banking/safeguarding onboarding, and ICT/DORA evidence. For planning, budget 4–8 months end-to-end depending on readiness and vendors.
Do I need a head office in Cyprus and local staff for a Cyprus EMI license?
Yes. The EMI must keep its head office in Cyprus and conduct part of its activity locally. Expect fit-and-proper checks for the board and key functions (e.g., compliance/MLRO, risk, operations). Next steps: secure premises, appoint experienced officers, and prepare role charters and time-commitment evidence.
How difficult are banking and safeguarding for a Cyprus EMI—and what Instant Payments deadlines apply?
Banks apply heightened scrutiny to EMIs and crypto-adjacent models. Prepare multiple counterparties, a full KYC/KYB pack, flows-of-funds, and monitoring scenarios. If you offer euro instant transfers, the Instant Payments Regulation (EU) 2024/886 required Verification of Payee by 9 Oct 2025 and send/receive capability by 9 Apr 2027 (euro-area EMIs). Align liquidity, fraud tooling, and customer notices.
Does MiCA affect a Cyprus EMI or CASP activity?
MiCA applies EU-wide. If you issue e-money tokens (EMTs), MiCA Title IV obligations apply alongside EMI rules (e.g., white-paper notification, redemption at par, no interest). If you provide broader crypto-asset services, you need CASP authorisation (CySEC). Non-EU firms serving EU clients may still fall in scope.
How can Legasset help with a ready-made Cyprus EMI purchase, a new Electronic Money Institution license in Cyprus, and MiCA alignment?
We map your services to PSD2 and (where relevant) MiCA, build the CBC dossier or the qualifying-holding pack for acquisitions, and run post-approval work: safeguarding setup, DORA registers and incident flows, and Instant Payments (including Verification of Payee). For crypto models, we scope EMT issuance and CASP permissions, prepare filings, and set a dated compliance plan. Next step: share your target services and markets—we’ll convert them into permissions, capital, staffing, and a realistic project timeline.
Additional Links and Resources for an EMI License in Cyprus
Official hub for the Cyprus EMI license: application forms, eligibility, local head-office requirements, safeguarding, and supervisory guidance from the CBC.
II. EU MiCA Regulation (Regulation (EU) 2023/1114)
Full text of MiCA—rules for e-money tokens (EMTs), CASP authorisations, disclosure, custody, and consumer protection that can overlap with Cyprus EMI operations.
III. EBA Public Register – Payment and Electronic Money Institutions
Searchable EU register to verify authorised EMIs/PSPs and passporting status—useful for compliance checks and counterparty due diligence across the EEA.
IV. DORA – Digital Operational Resilience Regulation (EU) 2022/2554
The EU ICT-risk rulebook applying to EMIs: governance, incident reporting, testing, and third-party/outsourcing oversight relevant to Cyprus EMI compliance.
V. Instant Payments Regulation (EU) 2024/886
Deadlines and obligations (equality of charges, Verification of Payee, instant send/receive) that affect SEPA product design, liquidity, and fraud controls for a Cyprus EMI license holder.
