Malta EMI Licence: The EU Passporting Route With Heritage

Malta's Position in the European EMI Landscape

Malta has operated as a financial services licensing jurisdiction for over two decades, with particular strength in gaming, insurance, and — since the transposition of the e-Money Directive — electronic money issuance. The Malta Financial Services Authority (MFSA) has licensed a steady stream of EMIs, and the jurisdiction offers a combination of English-language regulatory proceedings, established legal infrastructure, and Mediterranean operational advantages that distinguish it from newer competitors such as Lithuania.

For fintech businesses seeking an EU EMI licence with a more mature regulatory environment, Malta presents a credible alternative, albeit with longer processing times and somewhat more rigorous application scrutiny.

Legal Framework

Malta's EMI licensing regime is governed by the Financial Institutions Act (Chapter 376 of the Laws of Malta), which transposes the Electronic Money Directive 2009/110/EC (EMD2) into Maltese law. The MFSA regulates EMIs under a dual framework that also incorporates PSD2 requirements for payment services.

An EMI licence in Malta permits the holder to:

• Issue electronic money as defined under EMD2
• Provide all payment services listed in Annex I of PSD2
• Appoint agents and distributors for e-money distribution and redemption
• Passport services across the EEA via the single market notification procedure

Capital and Financial Requirements

The initial capital requirement mirrors the EU minimum established by EMD2:

• Minimum initial capital: €350,000
• Ongoing own funds: The greater of €350,000 or 2% of average outstanding e-money (Method D under Article 5 of EMD2)
• Safeguarding: Client funds must be held in segregated accounts at an approved credit institution, or covered by an insurance policy or comparable guarantee from an authorised insurer

Malta additionally requires EMIs to maintain a risk management framework that meets the MFSA's internal capital adequacy assessment expectations, which may result in the regulator requiring own funds above the statutory minimum for higher-risk business models.

The Application Process

The MFSA operates a structured licensing process that typically runs eight to twelve months from initial submission to licence grant:

Pre-application engagement The MFSA encourages applicants to submit a preliminary questionnaire outlining the business model, target markets, product suite, and anticipated transaction volumes. This allows the regulator to identify potential concerns before the formal application is prepared.

Formal application submission The application dossier includes:

• A comprehensive business plan with three-year financial projections
• Programme of operations detailing all e-money and payment service activities
• Governance and organisational structure, including fit-and-proper questionnaires for all directors, qualifying shareholders (10%+ holders), and key function holders
• AML/CFT compliance framework aligned with Malta's Prevention of Money Laundering Act (Chapter 373)
• IT systems architecture, including cybersecurity and business continuity arrangements
• Outsourcing arrangements and third-party dependency mapping
• Safeguarding evidence

Assessment and queries The MFSA's assessment involves multiple rounds of queries. Applicants should expect two to four rounds of supplementary information requests, each requiring a response within 15-30 business days. The statutory review period is three months from receipt of a complete application, but the clock stops during query periods.

Licence grant and passporting Upon approval, the MFSA issues the EMI licence and the firm is listed on the MFSA's register and the EBA's centralised register. EEA passporting follows the standard notification procedure, typically processed within one to two months.

Cost Structure

Malta's cost structure is moderate by EU standards:

• Application fee: Approximately €3,000 (MFSA fee schedule)
• Annual supervisory fee: Based on revenue bands, typically €5,000-€20,000
• Capital requirement: €350,000 minimum

Total advisory and setup costs typically fall in the range of €200,000 to €450,000 beyond the capital requirement, broken down as:

• Legal and licensing advisory: €60,000-€120,000
• AML/CFT framework and compliance: €30,000-€50,000
• IT security and infrastructure documentation: €20,000-€40,000
• Ongoing compliance and local staffing: €80,000-€150,000 per annum

Substance and Governance

The MFSA applies stringent substance requirements. A Malta-licensed EMI must demonstrate:

• Board composition: At least two directors must be resident in Malta or the EU. The MFSA prefers at least one Malta-resident director
• Key function holders: The compliance officer, MLRO, and risk officer must be genuinely based in Malta or readily accessible to the regulator
• Physical presence: A functional office in Malta is required, not merely a registered address
• Outsourcing limits: While operational outsourcing is permitted, the MFSA requires that core risk management and compliance functions are not outsourced outside the firm's direct control

The MFSA's approach reflects the EBA's Guidelines on Internal Governance (EBA/GL/2021/05) and its expectation that regulated entities maintain genuine decision-making capacity in the licensing jurisdiction.

Banking Access in Malta

One of Malta's traditional challenges for fintech businesses has been banking access. The Maltese banking sector, dominated by Bank of Valletta and HSBC Malta, has historically been cautious about onboarding EMIs, particularly those with crypto-adjacent business models.

However, the landscape has improved:

• Several challenger banks and payment institutions now offer safeguarding accounts to Malta-licensed EMIs
• The MFSA's introduction of the Virtual Financial Assets (VFA) framework has normalised fintech business models within the local banking ecosystem
• Correspondent banking relationships through larger EU banking networks remain accessible for compliant EMIs

Applicants should nonetheless begin banking discussions at the pre-application stage, as securing safeguarding accounts can take three to six months.

Malta's Virtual Financial Assets Framework

Malta's Financial Institutions Act operates alongside the Virtual Financial Assets Act (Chapter 590), which established one of the EU's first comprehensive crypto regulatory frameworks. While MiCA has now harmonised crypto regulation across the EU, Malta's existing VFA experience gives the MFSA institutional familiarity with digital asset business models.

For EMIs that also intend to provide services involving crypto-assets, Malta offers a regulator with practical experience in assessing hybrid business models. This can be an advantage during the application process, as the MFSA is less likely to apply blanket resistance to crypto-related EMI applications than regulators with less exposure.

Malta vs Lithuania: A Direct Comparison

The most common comparison for prospective EMI applicants is between Malta and Lithuania:

• Speed: Lithuania is significantly faster (4-6 months vs 8-12 months)
• Cost: Lithuania is cheaper in terms of total advisory costs
• Regulatory heritage: Malta has a longer track record with complex financial services regulation
• Language: Both operate in English
• Banking: Malta is improving but Lithuania currently offers easier initial banking access
• Substance: Both require genuine local presence; Malta's requirements are somewhat more demanding
• Crypto familiarity: Malta's VFA framework gives the MFSA deeper experience with digital asset business models

Post-Licence Obligations

A Malta EMI must comply with ongoing regulatory obligations including:

• Annual audited financial statements submitted to the MFSA
• Quarterly prudential returns covering own funds, safeguarding, and transaction volumes
• Annual AML/CFT risk assessment updates
• Notification of material changes to directors, shareholders, or business model
• Compliance with the MFSA's ongoing fitness and properness requirements
• Cooperation with the MFSA's supervisory review process

The MFSA conducts periodic on-site inspections and thematic reviews. EMIs should budget for ongoing compliance costs of €100,000-€200,000 per annum, depending on the complexity of the business model.

Key Takeaways

• Malta offers a well-established EMI licensing regime under EMD2 with full EU passporting rights, overseen by the experienced MFSA
• The minimum capital requirement is €350,000, with total setup costs of €550,000 to €800,000 including advisory and compliance expenditure
• Application timelines run eight to twelve months, longer than Lithuania but within the EU average
• The MFSA's familiarity with digital asset business models, developed through the VFA Act, makes Malta particularly suitable for EMIs with crypto-adjacent operations
• Banking access has improved but remains a consideration that should be addressed early in the application process
• English-language regulatory proceedings and a common law legal heritage make Malta accessible to international fintech businesses
• Post-licence compliance obligations are substantive and should be factored into ongoing operational budgets