How to Obtain a Non‑bank Financial Institution Licence in Romania (2026), Step‑by‑step

Non-bank financial institution licensing romania is the gateway for fintechs, consumer lenders, leasing firms, factoring companies and payment service providers that want to operate legally in one of the EU’s growing financial markets. This guide sets out the process, the regulator-ready documents you should prepare, realistic timelines, cost ranges and the 2026 context driven by the EU anti-money-laundering package and updated prudential and reporting expectations. It is written for founders, compliance officers, CFOs, in-house counsel and foreign investors who need a practical, sequenced roadmap rather than a theoretical overview.

Every regulatory point is anchored to primary sources, the Banca Națională a României (BNR), which maintains the register of non-bank financial institutions and supervises payment and e-money institutions, the Autoritatea de Supraveghere Financiară (ASF), the Oficiul Național pentru Prevenirea și Combaterea Spălării Banilor (ONPCSB) and the Oficiul Național al Registrului Comerțului (ONRC).

Eligibility, who needs non-bank financial institution licensing in Romania

A non-bank financial institution (in Romanian, instituție financiară nebancară, IFN) is a company that carries out lending and related financial activities on a professional basis but, unlike a bank, cannot take deposits or other repayable funds from the public. In Romania, IFNs are governed primarily by the legal framework administered by the Banca Națională a României, which maintains the General Register and Special Register of non-bank financial institutions. Before investing in the process, confirm whether your intended activity falls within the regulated perimeter and which authority supervises it. The supervisory split matters: BNR handles IFN registration, prudential matters and payment and e-money institutions, while ASF supervises capital-markets, insurance and private-pension activities.

The correct regulator determines the forms, fees and prudential expectations that apply.

Types of non-bank financial activities that require registration or licensing

The activities most commonly requiring registration or a licence include:

• Consumer and commercial lending, granting credit on a professional basis.
• Financial leasing, leasing arrangements with a financing character.
• Factoring, purchase and management of receivables.
• Issuing guarantees and assuming commitments and other financing activities within the IFN perimeter.
• Payment services and e-money, activities falling under the EU payment services and e-money frameworks, authorised and supervised by BNR.

Certain activities are exempt or fall outside the regulated perimeter, for example, occasional intra-group financing or purely ancillary credit tied to the sale of a seller’s own goods may be treated differently. Always confirm classification against BNR (and, where relevant, ASF) guidance before filing, because misclassification is a frequent cause of rejected or delayed applications.

Legal forms allowed and corporate governance expectations

An IFN must be established as a Romanian commercial company, typically a joint-stock company (SA) or, where permitted for the activity, a limited liability company (SRL). The choice of form affects capital structure and governance: an SA is commonly expected where higher capital, multiple shareholders and a formal board structure are involved. Regardless of form, the regulator expects a credible governance framework: fit and proper directors, clear segregation of duties, a dedicated compliance function, an appointed person responsible for anti-money-laundering (MLRO), and documented internal controls. Governance quality is assessed substantively, not as a box-ticking exercise.

Step-by-step licensing process

The journey runs from business-model design through company incorporation, documentation assembly, AML registration, submission, supervisory review and post-authorisation set-up. The sequence below is ordered so that dependencies are respected, for example, you cannot evidence paid-in capital before the company exists, and the regulator will not progress a file with an incomplete AML framework. Treat the steps as largely sequential, with AML preparation running in parallel to documentation drafting.

1. Step 1, Pre-application planning and feasibility. Primarily driven by the sponsor, CEO and an external advisor. Decide the legal form (SA or SRL), scope your regulated activities precisely, and draft a realistic multi-year business plan with revenue, cost and capital assumptions. Define the governance structure and identify proposed directors and the person responsible for AML. Confirm which regulator (BNR or ASF) applies. This planning stage determines the entire capital and documentation burden, so it should not be rushed.
2. Step 2, Company registration (ONRC) and beneficial ownership. Handled by the company secretary, local counsel or advisor. Register the company with the Trade Registry (ONRC), adopt Articles of Association consistent with the intended activity, obtain the Romanian tax identification number and file beneficial ownership declarations. The incorporation documents (certificate of registration, shareholders register, Articles) become core exhibits in the file, so draft the corporate object clauses carefully to match your intended scope.
3. Step 3, Prepare regulator-ready documentation. Led by the compliance officer with support from the external auditor and advisor. This is where most applications stand or fall. Assemble corporate documents, governance and fit-and-proper evidence, the business plan, pro-forma financial statements, capital evidence, and the full suite of policies and manuals (AML/CFT, KYC, transaction monitoring, internal control, outsourcing). Foreign documents must be translated and apostilled or legalised. See the required-documents table below for the complete inventory and formatting standards.
4. Step 4, AML and FIU (ONPCSB) registration and internal policies. Owned by the person responsible for AML and the compliance team, run in parallel with Step 3. Prepare an AML/CFT policy aligned with Romania’s AML legislation (Law no. 129/2019, as amended) and ONPCSB guidance, KYC and customer due-diligence procedures, a transaction monitoring methodology and the MLRO appointment. IFNs performing regulated financial activities are obliged entities under the AML law and must register with ONPCSB and implement controls. Begin this early, AML frameworks are heavily scrutinised.
5. Step 5, Submission to the regulator (BNR or ASF). Submitted by the sponsor or a designated director. File the official application/registration documentation and proof of payment of any applicable fee through the regulator’s designated channel. Confirm the current fee schedule and filing format directly on the BNR or ASF website, and keep the regulator’s contact point on record for follow-up.
6. Step 6, Supervisory review, clarification requests and verification. A collaborative phase between the regulator and applicant. Expect written requests for clarification, requests for additional evidence, fit-and-proper assessment of directors and, in some cases, verification of operational readiness. The speed of this phase depends heavily on the completeness and quality of the original filing. Respond promptly, completely and consistently, contradictory responses extend the timeline.
7. Step 7, Registration/authorisation and follow-on obligations. Managed by compliance and the CFO. On approval, the regulator records the entity in the relevant register (for IFNs, the General or Special Register maintained by BNR) or issues the authorisation for payment/e-money institutions. From day one the entity is bound by ongoing obligations: maintaining minimum capital, submitting prudential and statistical returns, periodic reporting and notifying the regulator of material changes such as change of control.
8. Step 8, Post-authorisation operational set-up. Delivered by compliance, IT and operations. Stand up reporting channels to the regulator and ONPCSB, implement live AML transaction monitoring, finalise the internal audit function and complete operational resilience measures (business continuity/disaster recovery, outsourcing oversight, data protection). Registration or authorisation is the beginning of supervision, not the end of the compliance effort.

Step, responsibility and duration timeline

Required documents, regulator-ready checklist

Regulator-ready means every document is complete, internally consistent, properly certified and presented in the format the authority expects. Foreign corporate and personal documents generally require certified Romanian translations and apostille (or legalisation) under the relevant international conventions. Financial statements should be prepared under the applicable accounting framework (IFRS or Romanian accounting standards, depending on the entity) and, where available, auditor-reviewed. Directors and significant shareholders must provide fit-and-proper evidence, including criminal record extracts from their country of residence and signed integrity declarations. The table below is a baseline inventory; the exact set can vary by activity and regulator.

A disciplined approach to this checklist is the single biggest determinant of a smooth non-bank financial institution licensing romania process. Build a master index that maps each document to the regulator’s requirement, tracks its certification status, and flags items awaiting translation or auditor sign-off.

Timeline and deadlines, what to expect

For a complete, high-quality application, plan for an end-to-end timeline of roughly four to six months from the start of documentation to registration or authorisation. Where the regulator issues clarification requests, assesses fit-and-proper suitability of directors or conducts verification, the process commonly extends to six to twelve months or more. The decisive variable is completeness at filing: files that arrive fully evidenced and internally consistent move materially faster than those that trigger repeated information requests.

Confirm the current procedural reply deadlines directly with the applicable regulator, because BNR and ASF apply administrative processing rules under Romanian law that govern how long the authority has to respond and how long applicants have to remedy deficiencies. Diarise every regulator deadline the moment it is communicated; missing a response window can reset or prolong the review. Build at least a four-week buffer into your internal launch plan to absorb a typical round of clarifications.

Costs and fees, upfront and ongoing

Budget for both one-off set-up costs and recurring supervisory costs. The one-off costs cluster around incorporation, any regulator application fee, external audit and advisory support, and AML tooling. Recurring costs include any annual supervisory contributions, periodic audits and ongoing reporting. Minimum share capital and own-funds requirements vary by activity and legal form, verify the exact figure for your activity against the current BNR or ASF rules before committing capital.

Treat figures above as planning ranges, not quotations. Official fees are quoted in RON on the regulator’s schedules; where you model the budget in another currency, apply a current conversion and keep the RON source figure on record for the file.

What changes in 2026, new rules and practical impact

The 2026 cycle is shaped by the EU anti-money-laundering package and the progressive implementation of strengthened supervisory expectations. In practical terms, the direction of travel is clear: more rigorous customer due diligence, reinforced beneficial-ownership verification, updated prudential and reporting templates, and heightened scrutiny of operational and ICT resilience (reflecting the EU Digital Operational Resilience framework for in-scope entities). The EU-level AML framework is set out on the European Commission’s anti-money-laundering pages and in the texts available on EUR-Lex, with technical standards and guidelines issued by the European Banking Authority (EBA) feeding into national supervision.

For applicants, the practical implications are concrete. Expect to prepare more detailed pro-forma capital plans that demonstrate resilience under stress, to supply additional evidence of operational and ICT resilience (including outsourcing oversight and continuity testing), and to engage ONPCSB with a mature AML framework rather than a draft. The practical effect is that documentation depth continues to increase, and supervisory review places greater weight on the substance of controls rather than their mere existence. Applicants who front-load AML and governance evidence generally experience shorter review cycles.

Compliance checklist after registration or authorisation

Registration or authorisation triggers a continuous compliance cycle. Build the following into your operating calendar from day one:

• Prudential and statistical returns. Submit periodic returns on the regulator’s schedule.
• Annual audited financial statements. Prepare and file accounts under the applicable framework, audited where required.
• AML monitoring and reporting. Operate transaction monitoring, file suspicious-transaction reports to ONPCSB and maintain KYC refresh cycles.
• Internal audit. Run an independent internal audit function covering key risks and controls.
• Capital maintenance. Monitor own funds against minimum requirements continuously, not just at reporting dates.
• Change-of-control and material-change notifications. Notify the regulator promptly of qualifying shareholding changes, director changes and significant business-model changes.

Common pitfalls in non-bank financial institution licensing romania

Most delays and rejections trace back to a small set of avoidable errors. Guard against these from the outset:

• Incomplete or non-certified documents. Missing apostilles, uncertified translations or unsigned declarations stall the file immediately.
• Weak AML policy. Generic, templated AML frameworks that are not tailored to the business model attract intensive scrutiny.
• Inadequate governance or unfit directors. Thin CVs, unexplained gaps or adverse records on proposed directors undermine the fit-and-proper assessment.
• Undercapitalisation. Filing without clearly evidenced paid-in capital meeting the activity-specific minimum.
• Missing translations. Foreign-language exhibits submitted without certified Romanian translations.
• Unrealistic business plans. Revenue assumptions the regulator cannot reconcile with the market or the stated capital base.

Comparison, NBFI (IFN) versus bank licence

Deciding between an IFN registration and a full banking licence is a strategic choice driven by whether your model requires taking deposits or other repayable funds from the public. The comparison below summarises the principal differences.

Conclusion and next steps

Non-bank financial institution licensing romania in 2026 is a disciplined, document-intensive exercise that rewards early preparation and penalises incomplete filings. The practical priorities are clear: classify your activity and confirm whether BNR or ASF supervises it, incorporate correctly through ONRC, build a substantive AML framework and comply with ONPCSB obligations early, evidence your capital to the activity-specific minimum, and assemble a regulator-ready file that is consistent and fully certified. Begin with a pre-application gap assessment against the required-documents checklist, then sequence the work to the timeline table above. Treating registration or authorisation as the start of continuous supervision, rather than a one-off hurdle, is the mindset that produces durable authorisation and a smooth relationship with the regulator.

Further reading and related resources

• Romania, Financial Services practice area page
• IFN registration, regulator-ready financial statements (cluster article)
• AML and KYC checklist for IFNs (cluster article)
• Tax & VAT implications for IFNs in Romania (cluster article)
• GLE Romania lawyer directory, financial services filter

Last updated: 2026-10-10. This guide reflects the 2026 regulatory context driven by the EU anti-money-laundering package and local implementing measures; verify current fees, capital thresholds and procedural deadlines against the regulator pages below before filing.

Sources

1. Banca Națională a României (BNR)
2. Autoritatea de Supraveghere Financiară (ASF)
3. Oficiul Național pentru Prevenirea și Combaterea Spălării Banilor (ONPCSB)
4. Oficiul Național al Registrului Comerțului (ONRC)
5. Legislație, Portalul oficial (legislatie.just.ro)
6. EUR-Lex (EU legislation)
7. European Commission, Anti-Money Laundering
8. European Banking Authority (EBA)