Payment Institution Licence Liechtenstein Requirements (2026): PSD3, PSR, FMA Application & Capital

Last reviewed: 25 May 2026

Understanding the payment institution licence Liechtenstein requirements is the essential first step for any fintech, payment service provider, or corporate treasury function planning to authorise in the Principality during 2026. This year marks a regulatory inflection point: the Payment Services Regulation (PSR), which is directly applicable across the EEA, and the revised Payment Services Directive (PSD3) fundamentally reshape authorisation standards, safeguarding obligations, and governance expectations for payment institutions (PIs) and e‑money institutions (EMIs). Concurrently, the Markets in Crypto-Assets Regulation (MiCAR) reaches full application on 1 July 2026, creating new licensing intersections for firms offering crypto-asset services alongside traditional payments.

For applicants, the practical question is immediate: apply as a PI or an EMI, quantify capital needs, assemble the FMA dossier, and map the transitional timeline.

Three actions demand priority attention in 2026. First, conduct a gap analysis against the PSR’s enhanced organisational and safeguarding requirements, referencing the EU Council text (ST-8222-2026-INIT) and the FMA’s own Guidance 2019/8. Second, determine whether planned services, particularly any crypto-asset element, require a standalone crypto-asset service provider (CASP) authorisation under MiCAR Article 60, or whether they can be accommodated within a PI or EMI licence. Third, engage the Liechtenstein Financial Market Authority (FMA) in a pre-application dialogue, as early supervisory interaction materially reduces processing time and rejection risk.

Legal Framework Governing Payment Institution Licence Liechtenstein Requirements

Liechtenstein’s payments regulatory architecture sits within the EEA framework. The Principality transposes EU directives into national law and, for directly applicable EU regulations, incorporates them via the EEA Joint Committee mechanism. The existing national legal basis for PI authorisation derives from Liechtenstein’s implementation of PSD2, administered by the FMA’s Financial Institutions Division. For e‑money institutions, the Electronic Money Act and the accompanying Electronic Money Ordinance published by the Liechtenstein Government set out additional national-level rules on initial capital, safeguarding, and operational conditions.

Industry observers expect that the introduction of PSD3 and the PSR will require Liechtenstein to amend its national payments legislation to align with the new directive, while the PSR, as a regulation, will apply directly once incorporated into the EEA Agreement. This dual-instrument structure means that applicants must satisfy both the directly applicable PSR provisions and any additional national transposition measures that Liechtenstein implements through its domestic legislative process.

PSD3 vs PSR, What Changed?

Under the previous framework, PSD2 was a single directive requiring full national transposition. The 2026 reform splits the regime. The PSR consolidates the conduct-of-business rules, including strong customer authentication (SCA), fraud liability allocation, and transparency obligations, into a single, directly applicable regulation. PSD3, by contrast, governs prudential authorisation and supervision of PIs and EMIs, and must be transposed by each EEA state. The practical effect for Liechtenstein applicants is that conduct rules apply uniformly from the PSR’s application date, while prudential requirements depend on the pace of national transposition. According to the EU Council position (ST-8222-2026-INIT), the PSR also introduces enhanced safeguarding standards and tighter rules on the application of SCA to payment transactions.

How MiCAR Intersects, Article 60

MiCAR Article 60 permits authorised credit institutions, PIs, and EMIs to provide certain crypto-asset services without obtaining a separate CASP licence, provided they notify the competent authority and meet specific conditions. From 1 July 2026, when MiCAR reaches full application, Liechtenstein-authorised PIs that intend to offer services such as crypto transfers or exchange between crypto-assets and fiat currency must assess whether MiCAR’s notification pathway applies or whether a full CASP authorisation is required. This intersection is particularly relevant in Liechtenstein, given the Principality’s well-established crypto licensing framework under the Token and TT Service Provider Act (TVTG).

PSD3 and PSR Liechtenstein: 2026 Updates and Practical Impacts

The 2026 payments reform introduces several material changes that directly affect the payment institution licence Liechtenstein requirements for both new applicants and existing licence holders. The principal areas of impact span governance and organisational expectations, safeguarding mechanics, SCA enhancements, and new authorisation or notification obligations.

On governance, the PSR raises the bar for internal control frameworks. PIs must demonstrate robust risk-management functions, clear lines of responsibility at board level, and documented ICT security policies. Early indications suggest the FMA will align its supervisory expectations with these enhanced standards, requiring applicants to submit more granular governance documentation than was previously the norm under PSD2.

Safeguarding rules tighten considerably. Under the PSR, client funds must be deposited in a segregated account at a credit institution or covered by an insurance policy or comparable guarantee, but the regulation introduces stricter conditions on the quality and accessibility of the safeguarding assets. For Liechtenstein applicants, this means updated safeguarding agreements and potentially a renegotiation of existing banking arrangements. The likely practical effect will be higher compliance costs for firms that previously relied on less rigorous segregation models.

SCA provisions are refined to address emerging fraud typologies. The PSR extends SCA requirements to certain mail-order and telephone-order transactions and tightens exemption thresholds. For PIs offering card-based or account-information services, this translates to mandatory technology upgrades and updated customer communication protocols.

Existing PIs and EMIs benefit from transitional arrangements. Industry commentary from Norton Rose Fulbright and other leading advisory firms notes that a 24-month compliance window is anticipated for existing EMIs, meaning firms authorised before the PSR’s application date will have up to 24 months to align their operations with the new requirements. New applicants, however, must meet PSR standards from day one.

Timeline of Key Dates

Transitional Requirements for Existing PIs and EMIs

Firms already holding a Liechtenstein PI or EMI licence should not assume continuity without action. The transitional period requires existing licence holders to submit a remediation plan to the FMA demonstrating how they will meet the new PSR and PSD3 standards within the compliance window. This plan should address updated safeguarding arrangements, enhanced governance documentation, revised IT security policies, and any changes to passporting notifications. Failure to submit or implement the plan within the prescribed period could result in licence conditions, restrictions, or, in extreme cases, revocation.

FMA Payment Institution Licence Liechtenstein: Application Process Step by Step

The FMA’s authorisation process for payment institutions is detailed in FMA Guidance 2019/8, which remains the procedural backbone for applications, supplemented by any updates reflecting PSD3/PSR requirements. The process involves a structured submission, a completeness review, substantive assessment, and, if successful, the granting of the licence.

Processing times vary, but a well-prepared application typically undergoes an initial completeness check within four to six weeks. The substantive assessment phase, during which the FMA evaluates governance, capital adequacy, safeguarding, and AML/CFT compliance, generally takes an additional three to six months. Incomplete applications or delayed responses to FMA information requests are the most common causes of prolonged timelines.

Documents to Prepare

The following documents form the core of the FMA submission dossier, as specified in FMA Guidance 2019/8:

• Business plan with 24-month financial projections. Must detail target markets, payment services to be provided, projected transaction volumes, revenue model, and capital adequacy forecasts.
• Governance and organisational chart. Include board composition, reporting lines, key function holders, and internal control framework.
• Fit & Proper documentation for directors and qualifying shareholders. Curriculum vitae, criminal-record certificates, proof of relevant professional experience, and declarations of conflicts of interest.
• AML/CFT policies and procedures. Risk assessment, customer due diligence procedures, transaction monitoring framework, and suspicious activity reporting protocols aligned with Liechtenstein’s Due Diligence Act.
• IT and security documentation. Systems architecture, SCA implementation plan, business continuity and disaster recovery procedures, and cyber-incident response protocols.
• Safeguarding proof. Draft segregated-account agreement with a Liechtenstein credit institution, or insurance policy / comparable guarantee documentation.
• Proof of initial capital. Bank confirmation of deposited capital meeting the applicable minimum threshold.
• Proof of local presence. Lease agreement or property deed for the Liechtenstein office, plus evidence that at least one director is resident in or commutes regularly to Liechtenstein.

How to Demonstrate Local Presence and Proof of Office

The FMA requires that a PI maintain a genuine physical presence in Liechtenstein. This is not a mere letterbox requirement. Applicants must provide a lease or ownership document for office premises, evidence of staffing (even if minimal), and confirmation that the place of effective management is in Liechtenstein. For applicants using the FMA Liechtenstein entity search or company registry, the registered office address must correspond to a functioning business location. The FMA may conduct on-site verification during the application process.

Contact and Submission Channels at FMA

Applications are submitted to the FMA Financial Institutions Division. The FMA encourages pre-application meetings, which can be requested via the contact details published on its website. These meetings allow applicants to discuss the scope of proposed services, identify potential regulatory issues early, and clarify documentation expectations, a step that industry observers consider essential for reducing processing time.

Capital, Own Funds, and Safeguarding Requirements Liechtenstein

Capital adequacy is a threshold gating factor for any payment institution licence Liechtenstein application. The minimum initial capital requirement for a PI depends on the category of payment services to be provided. Under the framework carried forward from PSD2, and expected to be updated under PSD3, the tiered structure operates as follows:

• Money remittance only: EUR 20,000 minimum initial capital.
• Payment initiation services only: EUR 50,000 minimum initial capital.
• Any other payment services (e.g., execution of payment transactions, issuing payment instruments, acquiring): EUR 125,000 minimum initial capital.

For an e‑money institution in Liechtenstein, the minimum initial capital is materially higher, EUR 350,000 under the Electronic Money Ordinance published by the Liechtenstein Government. Banks, which fall under a separate prudential regime, require significantly greater capital.

Comparison: PI vs EMI vs Bank Obligations

Example Own-Funds Calculations

Beyond the minimum initial capital, PIs must maintain ongoing own funds calculated according to a formula based on payment volumes. The calculation typically uses a percentage of the previous year’s payment transaction value (or projected value for new applicants), tiered across defined thresholds. For a PI processing EUR 50 million in annual payment transactions, the own-funds requirement would be derived by applying the applicable scaling factors to successive volume bands. Applicants should prepare these calculations in their business plan and demonstrate headroom above the minimum in their capital adequacy forecasts.

Safeguarding Options and Evidence to Submit

Liechtenstein law recognises two primary safeguarding methods for client funds held by PIs:

• Segregated account method. Client funds are deposited in a ring-fenced account at a Liechtenstein or EEA credit institution, separate from the PI’s own funds. The applicant must submit the draft account agreement and confirmation from the credit institution.
• Insurance or comparable guarantee. An insurance policy or bank guarantee covering the full value of client funds held at any time. The applicant must submit the policy terms and confirmation of cover from the insurer or guarantor.

Under the PSR, the conditions attached to both methods tighten. The likely practical effect will be that the FMA requires more frequent reporting on safeguarding adequacy and that the quality standards for acceptable credit institutions or insurers become more restrictive.

Governance, Operational Controls, and AML/CFT Readiness

The FMA assesses an applicant’s governance framework as a core element of the payment institution licence Liechtenstein requirements. Governance expectations encompass the following principal areas.

Control Evidence the FMA Expects

• Fit & Proper assessment. Directors and qualifying shareholders must demonstrate competence, integrity, and appropriate experience. The FMA reviews CVs, references, criminal-record checks, and declarations regarding regulatory proceedings in other jurisdictions.
• Risk management framework. A documented risk-management policy, including operational risk, credit risk (where relevant), and IT risk, with clear escalation procedures and board-level oversight.
• AML/CFT compliance. Policies must align with Liechtenstein’s Due Diligence Act and the FMA’s supervisory expectations. The FMA expects a documented risk assessment, customer due diligence procedures (including enhanced due diligence for higher-risk categories), ongoing transaction monitoring, and a designated compliance officer.
• IT security and SCA. Documentation of systems architecture, SCA implementation methodology, penetration testing results, and incident-response plans. The PSR’s enhanced SCA rules require applicants to demonstrate compliance from the point of authorisation.

Outsourcing and Third-Party Risk (Including Cloud)

PIs that outsource critical functions, including IT infrastructure, cloud hosting, or customer-service operations, must notify the FMA and demonstrate that outsourcing does not impair supervisory access or the PI’s ability to manage risks. The FMA expects written outsourcing agreements containing audit rights, data-protection clauses, and exit strategies. Cloud-service arrangements are subject to heightened scrutiny, consistent with EBA and EIOPA guidelines that Liechtenstein’s supervisory practice increasingly mirrors. Applicants should include their outsourcing register and risk assessments as part of the initial submission dossier.

Passporting, Cross-Border Services, and MiCAR Interaction

A Liechtenstein-authorised PI can passport payment services across the EEA by notifying the FMA, which then communicates with the host-state competent authority. The PSR updates the passport notification framework, requiring more detailed information about the services to be provided in the host state and the agents or branches to be used. For firms planning cross-border operations, this means preparing passport notification documentation alongside the initial licence application to avoid delays.

Scenarios: Existing PI, Existing EMI, and New Applicants Offering Crypto

• Existing PI adding crypto services. Under MiCAR Article 60, an authorised PI may provide certain crypto-asset services by notifying the FMA at least 40 working days before commencing those services. The notification must include a programme of operations, evidence of governance arrangements for crypto activities, and proof of adequate insurance or own funds. If the planned services fall outside MiCAR Article 60’s scope, a full CASP authorisation is required.
• Existing EMI adding crypto services. The same Article 60 notification pathway applies, but the EMI must also address any safeguarding interactions between e‑money obligations and crypto-asset custody. Industry observers expect the FMA to scrutinise these dual-safeguarding arrangements closely.
• New applicant offering both payments and crypto. The most efficient approach is to apply for the PI (or EMI) licence and simultaneously prepare the MiCAR notification. This parallel pathway requires careful coordination to ensure that governance documentation, capital calculations, and safeguarding arrangements address both regimes consistently. More detail on the crypto-licensing dimension is available in our guide to crypto licences in Liechtenstein.

Practical Timeline and Recommended Next Steps: 2026 Checklist

For firms targeting a Liechtenstein payment institution authorisation in 2026, the following action plan translates the regulatory requirements into a concrete operational sequence.

Conclusion

The payment institution licence Liechtenstein requirements in 2026 are shaped by three converging regulatory forces: PSD3’s revised prudential framework, the PSR’s directly applicable conduct and safeguarding rules, and MiCAR’s full application from 1 July 2026. For new applicants, the path to authorisation demands a thorough FMA dossier grounded in FMA Guidance 2019/8, demonstrable capital adequacy, robust safeguarding arrangements, and governance documentation that meets the elevated expectations of the new regime. For existing licence holders, the transitional compliance window provides breathing room, but not inaction. A structured remediation plan, submitted early and executed decisively, is essential to maintaining uninterrupted authorisation.

Liechtenstein’s combination of EEA passporting access, a well-resourced supervisory authority, and an established fintech ecosystem, including its pioneering blockchain legislation, makes it a compelling jurisdiction for payment services. However, the compliance bar is rising. Firms that invest in early preparation, engage the FMA proactively, and align their applications with the PSR/PSD3 standards from the outset will be best positioned to secure authorisation efficiently and to operate with confidence across the EEA.

Sources

1. Finanzmarktaufsicht Liechtenstein, Payment Institutions
2. FMA Guidance 2019/8, Licence as a Payment Institution (PDF)
3. Regierung.li, Electronic Money Ordinance (Translation)
4. EU Council, ST-8222-2026-INIT (PSD3/PSR Instruments)
5. Norton Rose Fulbright, PSD3 & PSR: From Provisional Agreement to 2026 Readiness
6. Freshfields, PSD3/PSR: What the EU’s New Payments Rules Mean for Your Business
7. Chambers Practice Guides, Banking Regulation 2026: Liechtenstein
8. Global Law Experts, Crypto Licence Liechtenstein