How to Obtain a Crypto Payment (EMI) Licence Across the EU, UK and UAE, 2026 Guide

Securing a crypto payment emi licence is now one of the most strategic regulatory decisions a digital-asset business can make, because it determines where you can legally offer fiat on-ramps, issue or redeem stablecoins, and move customer funds across borders. This guide sets out, jurisdiction by jurisdiction, how operators obtain an EMI or payment institution authorisation for crypto payments and stablecoin on-ramps across the EU, UK and UAE. Whether you are pursuing an emi licence eu under the Markets in Crypto-Assets Regulation, a UK payment institution authorisation, or a UAE free-zone virtual-asset permission, the pathways, capital thresholds and compliance expectations differ materially.

We provide a practical decision flow, a seven-step application playbook, a side-by-side comparison table, and authoritative citations to primary regulatory sources so that commercial teams and their counsel can act with confidence.

Snapshot: what this guide covers

This guide explains product classification, the step-by-step application process, EU, UK and UAE licensing routes, capital and governance requirements, passporting mechanics, and realistic timelines and costs for obtaining a crypto payment emi licence or an equivalent payment institution authorisation for stablecoin on-ramps.

Trending regulatory hooks

Three regulatory shifts are reshaping the market. The finalisation and phased application of the EU’s Markets in Crypto-Assets Regulation (MiCA) has created a coherent framework for e-money tokens and asset-referenced tokens, interacting directly with the existing e-money and payment services regimes. In the UK, the Financial Conduct Authority and the Payment Systems Regulator have advanced guidance on stablecoins and payments through 2025–26. In the UAE, reforms across ADGM, the DFSA and Dubai’s VARA have opened explicit pathways for regulated stablecoin on-ramps. Each change expands where an EMI or payment institution licence can underpin a crypto payment product.

Which licence fits your product? Quick decision flow

Before you pursue any crypto payment emi licence, you must classify your product precisely, because the wrong authorisation wastes months and capital. The core question is whether you are handling stored value, executing payment transactions, or providing crypto-asset services, and often a combination of all three.

Payment Institution vs E-Money Institution vs VASP licensing

The decision turns on a handful of points:

• Stored value and issuance: If customers hold a redeemable balance or a token that behaves like electronic money, you likely need an e-money institution licence.
• Payment execution only: If you move funds but do not issue stored value, a payment institution licence is usually the right fit.
• Crypto-asset services: Custody, exchange and transfer of crypto-assets typically require a VASP or MiCA crypto-asset service provider authorisation, which may sit alongside an EMI.
• Hybrid models: Many stablecoin on-ramp operators need both an EMI and a crypto-asset authorisation because the fiat leg and the token leg are regulated separately.

When EMI/PI is appropriate for a stablecoin on-ramp licence

An EMI or payment institution route is generally appropriate for a stablecoin on-ramp licence when you convert fiat to tokens, hold redeemable balances, or issue an e-money token. Where the token qualifies as e-money under EMD2 or a MiCA e-money token, the EMI licence can cover issuance and redemption, subject to safeguarding and prudential rules. Pure custody or secondary-market trading usually demands additional authorisations.

Process, How to obtain a crypto payment (EMI) licence (numbered steps)

The following seven-step playbook reflects the typical lifecycle of a crypto payment emi licence application across the EU, UK and UAE. While competent authorities differ in form and emphasis, the underlying sequence, classify, remediate, capitalise, control, document, engage, operationalise, is remarkably consistent. Treat each step as a gate: regulators will not progress an application where earlier foundations are weak.

Step 1, Product classification and regulatory mapping

Begin by mapping your product to the applicable legal definitions. In the EU, determine whether your token is an e-money token or asset-referenced token under MiCA, and whether your fiat flows constitute payment services under PSD2 or e-money under EMD2. In the UK, test against FCA e-money and payment services definitions. In the UAE, assess ADGM FSRA, DFSA and VARA scopes. Correct classification dictates every downstream requirement, capital, safeguarding, custody and reporting, so this step should be documented in a formal regulatory mapping memorandum that your chosen competent authority can follow without ambiguity.

Step 2, Pre-application compliance and governance remediation

Regulators expect a fully designed control environment before you file, not a promise to build one. This step involves drafting and embedding the core policy suite: KYC and customer due diligence, transaction monitoring, sanctions screening, suspicious-activity reporting, conflicts of interest, outsourcing, business continuity and complaints handling. It also means establishing a credible governance structure, a board with appropriate independence, clearly allocated senior-management responsibilities, and a compliance and risk function with genuine authority. Crypto payments compliance is scrutinised closely because stablecoin on-ramps are a known vector for financial crime. Supervisory expectations published by the European Banking Authority and ESMA set the benchmark for AML/CFT and prudential treatment, and applicants should align their frameworks to those standards.

A realistic assessment of your current state against these expectations, followed by targeted remediation, dramatically reduces the risk of rejection or protracted questioning.

Step 3, Capital plan and liquidity model

Every e-money institution licence and payment institution authorisation carries a minimum initial capital requirement that varies by jurisdiction and activity. Beyond the statutory floor, you must evidence ongoing own-funds adequacy and, critically, a safeguarding model for customer funds, typically ring-fencing in segregated accounts or an insurance/trust arrangement that protects clients on insolvency. For stablecoin issuers, the reserve-backing and redemption model must be demonstrably robust and liquid. Your capital plan should include stress scenarios, a funding runway, and a clear explanation of how safeguarded funds are reconciled daily. Regulators reject applications where the capital narrative does not match the business plan’s projected volumes.

Step 4, Technology, custody and operational risk controls

Operational resilience is now a front-line supervisory concern. You must document custody arrangements for any stablecoins or crypto-assets you hold, distinguishing legal custody from technical safekeeping, and set out key-management, wallet architecture, and segregation of client assets. Transaction-monitoring systems, blockchain analytics integration, incident response, and change-management controls all form part of the operational risk picture. Where you outsource custody or technology, the regulator will examine the contractual controls, audit rights and exit plans. For a crypto payment emi licence, the ability to demonstrate secure, recoverable and auditable handling of both fiat and token legs is frequently the deciding factor in whether an application progresses.

Step 5, Preparing the application pack

The application pack is the centrepiece of your filing. It typically includes the completed application forms, a detailed three-year business plan with financial projections, the full policy suite, your AML/CFT programme, safeguarding documentation, organisational charts, and fit-and-proper evidence for directors, qualifying shareholders and senior managers, including CVs, references and probity declarations. Depending on the jurisdiction and activity, you may need an ICAAP or ILAAP-style capital and liquidity assessment. For the EU EMI licence checklist and the UK payment institution licence playbook, authorities expect internal consistency across every document: the capital plan must reconcile to the business plan, the governance map to the responsibilities, and the risk assessment to the monitoring controls.

Incoherence between documents is the most common cause of regulatory queries and delay.

Step 6, Regulator engagement and submission

Early, structured engagement with the competent authority shortens timelines. Many regulators offer or encourage pre-application meetings where you can test your classification and model. Use these to surface novel features, stablecoin issuance, on-chain custody, or cross-border flows, before you file. Submit a complete pack, pay the applicable fee, and maintain a single point of contact to respond rapidly to information requests. Applications that respond to regulator questions within days, not weeks, authorise faster.

Step 7, Post-authorisation obligations and go-live checklist

Authorisation is the beginning of supervision, not the end of compliance. Post-authorisation obligations include regular prudential and transaction reporting, notification of material changes under change-control rules, maintenance of safeguarding, and, in some jurisdictions, local agent or establishment requirements. Build a go-live checklist covering reporting calendars, audit, and ongoing fit-and-proper monitoring before you accept your first customer.

EU licensing pathway (MiCA + EMD2/PSD2 interaction)

The EU offers the most structured route to a crypto payment emi licence because MiCA, EMD2 and PSD2 now interlock to cover stablecoin on-ramps, issuance and payment execution across a single market. Understanding how these three instruments interact is essential to choosing the right authorisation and host member state.

Which EU authorisations apply to crypto payments and stablecoin services

Under MiCA, an e-money token is regulated as electronic money, so issuers typically require an e-money institution licence under EMD2 in addition to MiCA obligations. Asset-referenced tokens follow a distinct MiCA issuer regime. Pure payment execution falls under PSD2. A stablecoin on-ramp that converts fiat and issues or redeems an e-money token therefore commonly needs both an EMI and MiCA compliance, layered carefully.

Member-state enforcement and competent authorities

While MiCA harmonises the rules, authorisation and supervision are delivered by national competent authorities in each member state, with the European Banking Authority playing a coordinating role for significant tokens. This means the substantive standards are common across the EU, but the application experience, responsiveness, language of filing, and interpretive nuance vary by host state. Applicants should assess a competent authority’s track record with crypto and e-money files, its published guidance, and its typical processing times. The EMD2 and PSD2 directives set the framework, but local supervisory culture shapes the practical path to an emi licence eu.

PSD2 passporting, EMD2 constraints and MiCA implications for stablecoins

One of the most valuable features of an EU authorisation is psd2 passporting: an EMI or payment institution authorised in one EEA state can passport its services across the entire EEA, either through establishment or freedom of services, under the PSD2 framework. EMD2 constrains how e-money is issued, redeemed and safeguarded, and MiCA adds disclosure, reserve and governance obligations for token issuers. For stablecoins, significant e-money tokens attract enhanced requirements, including stricter reserve and interoperability rules. Operators should model how passporting interacts with MiCA token thresholds before committing to a host state, because scaling a stablecoin across the EEA can trigger significance thresholds that materially raise the regulatory burden.

Practical tips: selecting a host member state and common pitfalls

Select a host state based on regulator responsiveness, local substance requirements, banking access for safeguarding, and language. Common pitfalls include underestimating substance expectations, assuming passporting removes all local obligations, and misclassifying a token as e-money when it is asset-referenced. For deeper detail, see our crypto licence global, comparative guide, and an EU EMI licence checklist is being developed as a dedicated jurisdictional playbook.

UK licensing pathway (FCA / PSR updates)

The UK offers a mature, well-documented route to a payment institution licence uk or e-money institution authorisation, supervised by the FCA, with the PSR shaping payment-system access. Post-Brexit, however, the UK no longer participates in EEA passporting, which changes the strategic calculus for firms operating across both blocs.

Payment institution and e-money authorisations in the UK

The Financial Conduct Authority authorises both payment institutions and e-money institutions. The right category depends on whether you issue stored value (e-money) or only execute payments. The FCA applies rigorous fit-and-proper, safeguarding, capital and systems-and-controls tests, and expects applicants to demonstrate genuine UK substance, a credible business plan, and effective governance before authorising a crypto payment emi licence equivalent.

PSR and FCA guidance on stablecoins and crypto payments (2025–26 updates)

Through 2025–26, the Payment Systems Regulator and the FCA have advanced their approach to stablecoins used for payments and to crypto payments compliance more broadly. The policy direction treats fiat-backed stablecoins used as a means of payment with heightened attention to backing assets, redemption rights and consumer protection. Where a stablecoin meets the e-money or emerging stablecoin criteria, the UK framework can permit on-ramps and payment arrangements, subject to regulator determination. Applicants should track the latest FCA and PSR policy statements closely, because the treatment of reserves, redemption at par, and systemic designation continues to develop, and may alter the authorisations required for a UK stablecoin on-ramp licence.

Passporting, branch vs subsidiary considerations and practical routing

Because UK firms no longer passport into the EEA, groups serving both markets typically establish separate authorised entities, a UK EMI or payment institution and an EEA-authorised sister company, or rely on third-country and local-establishment routes. The branch-versus-subsidiary decision affects capital, governance and tax, and should be modelled early.

Practical tips for UK filings

Engage the FCA through pre-application channels, evidence real UK substance and senior-manager accountability, and ensure safeguarding banking is arranged before filing. A detailed UK payment institution licence playbook is in development to support step-by-step applications.

UAE licensing pathway (ADGM, DFSA, VARA and federal reforms)

The UAE has emerged as a leading hub for a crypto payment emi licence and virtual-asset authorisation, offering multiple regulators with distinct but complementary regimes. The 2025–26 reforms have specifically expanded pathways for regulated stablecoin on-ramps, making the UAE an attractive base for firms targeting the Middle East and beyond.

Overview of UAE frameworks and 2025–26 reforms

The UAE operates a layered model: federal oversight from the Central Bank of the UAE for stored-value facilities and payment services, alongside financial free zones and the emirate-level VARA in Dubai. Recent reforms have clarified the treatment of stablecoins and stored value, enabling certain on-ramps under appropriate licences. Operators seeking an emi licence uae equivalent should confirm whether their product falls under federal payment rules, a free-zone regime, or VARA’s virtual-asset framework.

ADGM FSRA and DFSA approaches vs Dubai VARA and licensing scopes

Within the free zones, ADGM’s FSRA operates a well-established digital-asset regime covering money services, stored value and virtual-asset activities, while the DFSA in the DIFC regulates crypto tokens and investment tokens with a parallel but distinct approach. In Dubai outside the DIFC, VARA licenses virtual-asset service providers across activity categories, including exchange, custody and issuance. The right choice depends on your product mix: a payments-led stablecoin on-ramp may align best with a money-services or stored-value authorisation, whereas custody and exchange activities may be licensed separately. Each regulator applies its own capital, governance and AML expectations, so cross-regulator mapping is essential.

Practical selection: mainland vs free zone, local sponsor/agent rules

Choosing between mainland and free-zone establishment affects ownership structure, local presence, and which regulator applies. Free zones such as ADGM and DIFC offer common-law frameworks, English-language proceedings and dedicated financial regulators, which many international operators prefer. Mainland and federally regulated stored-value activities bring the Central Bank into scope. Local substance, a physical office, resident senior managers, and in some cases local agents, is increasingly required, and banking relationships for safeguarding must be arranged early. A UAE crypto licensing playbook covering the ADGM, DFSA and VARA split is being prepared to help operators choose the optimal route.

Comparison: requirements, costs and timelines for a crypto payment emi licence

The table below summarises the practical dimensions of a crypto payment emi licence across the three blocs. Figures are indicative ranges only; applicants must verify exact capital and fee numbers against the relevant competent authority’s current published requirements before filing, as thresholds change with product type and regulatory updates.

The headline difference is passporting: an EU authorisation unlocks the entire EEA, whereas UK and UAE licences are jurisdiction-specific and require local establishment or separate authorisations to scale internationally. Capital and timeline ranges overlap, but stablecoin complexity consistently pushes applications toward the upper end of each band. For a fuller breakdown, a dedicated licensing timelines and costs reference is in development.

Key Requirements / Eligibility

Although each regulator has its own rulebook, the eligibility foundations for any crypto payment emi licence converge on four pillars: capital and safeguarding, governance and suitability, AML/KYC, and custody and technical controls. Strength in all four is the prerequisite to authorisation.

Minimum capital and safeguarding requirements

Expect a statutory minimum initial capital that scales with activity, plus an ongoing own-funds requirement and a robust safeguarding model. Safeguarding, segregation of client funds through ring-fenced accounts, trust structures or insurance, is non-negotiable and is tested rigorously, with daily reconciliation expected under an e-money institution licence.

Governance and suitability of management and shareholders

Regulators apply fit-and-proper tests to directors, senior managers and qualifying shareholders, examining integrity, competence and financial soundness. You must evidence an effective board, clear allocation of responsibilities, independent compliance and risk functions, and genuine local substance. Shell structures and nominee arrangements are routinely rejected.

KYC/AML and transaction monitoring expectations

Crypto payments compliance demands comprehensive AML/CFT controls: risk-based customer due diligence, ongoing monitoring, sanctions and PEP screening, blockchain analytics, and suspicious-activity reporting aligned to EBA and national standards. Ongoing compliance, not just the application-stage framework, is supervised continuously.

Custody, custody of stablecoins and technical controls

Where you hold stablecoins or crypto-assets, you must distinguish legal custody from technical safekeeping, segregate client assets, and operate secure key management, wallet architecture and recovery procedures. These controls are central to whether a stablecoin on-ramp licence is granted and maintained.

Passporting and cross-border access between EU, UK and UAE

PSD2 passporting mechanics, post-Brexit UK access routes, and UAE cross-border realities

Cross-border strategy is where many groups miscalculate. Within the EEA, psd2 passporting lets an EU-authorised EMI or payment institution serve all member states through establishment or freedom of services, under the PSD2 regime. Post-Brexit, the UK no longer benefits from this; UK firms serving the EEA must authorise a separate EEA entity, and EEA firms serving the UK rely on local establishment or third-country routes. The UAE offers no automatic passporting into the EU or UK, cross-border access there depends on local licences, branch approvals, or regulatory memoranda of understanding. Groups operating across all three blocs typically run parallel authorised entities, each tailored to its home regulator, rather than relying on any single licence to reach every market.

Timelines, typical costs and practical tips

Expected timeframes by jurisdiction and cost bands

Realistic planning prevents commercial disappointment. UAE free-zone and VARA authorisations often complete in roughly 2–9 months; UK FCA authorisations typically run 3–9 months depending on complexity; and EU authorisations, with the MiCA overlay, commonly take 4–12 months. Novel stablecoin issuance, bespoke custody, or significant-token thresholds extend each range. Costs comprise regulator fees, legal and consulting support, capital injection, safeguarding banking setup, technology and audit, frequently far exceeding the headline regulator fee. The strongest predictor of a shorter timeline is application quality: a complete, internally consistent pack supported by early regulator engagement authorises materially faster than a rushed filing. Budget for ongoing supervision costs, not just the one-off application, when modelling the total cost of a crypto payment emi licence.

Conclusion and next steps

Choosing and securing the right crypto payment emi licence is a decision that shapes your product’s legal reach, cost base and growth trajectory across the EU, UK and UAE. The regimes are converging on common principles, rigorous safeguarding, credible governance, strong AML controls and clear token classification, yet they diverge sharply on passporting, capital thresholds and stablecoin treatment. Operators who classify their product precisely, build a complete control environment before filing, and engage regulators early will authorise faster and with fewer surprises.

Immediate checklist for applicants

• Classify your product: confirm whether you are issuing e-money, executing payments, or providing crypto-asset services under MiCA, PSD2, EMD2, FCA rules or UAE frameworks.
• Choose your jurisdiction: weigh passporting, capital, substance and timeline using the comparison table and your target markets.
• Build before you file: embed governance, safeguarding, capital and AML/KYC controls ahead of submission.
• Verify the numbers: confirm exact capital and fee figures against the relevant regulator’s current published requirements.
• Engage early: use pre-application meetings to de-risk novel stablecoin and custody features.

How Global Law Experts supports cross-jurisdiction EMI/PI applications

Global Law Experts connects operators with local counsel across the EU, UK and UAE to navigate every stage of a crypto payment emi licence or stablecoin on-ramp licence application, from product classification and regulatory mapping to application drafting, regulator engagement and post-authorisation compliance. Explore the crypto licence global, comparative guide for a wider jurisdictional view, and look out for the dedicated EU, UK and UAE playbooks and the stablecoin on-ramp compliance resources currently in development.

Sources

• EUR-Lex, Markets in Crypto-Assets Regulation (MiCA), EMD2 and PSD2 texts
• European Commission, Payment services (PSD2)
• UK Financial Conduct Authority, Payments and e-money
• Payment Systems Regulator (UK), guidance and statements
• Abu Dhabi Global Market (ADGM), FSRA Digital Asset Regime
• Dubai Virtual Assets Regulatory Authority (VARA)
• Dubai Financial Services Authority (DFSA)
• Central Bank of the UAE
• European Banking Authority (EBA)
• European Securities and Markets Authority (ESMA)