EMI, PSP, VASP or MSB: A Fintech Licensing Decision Framework

A decision framework for choosing between EMI, PSP, VASP and MSB licences: what each permits, capital and substance, jurisdictions, timelines and banking.

Most fintech founders ask the wrong first question. They ask which licence is fastest or cheapest, when the question that determines everything is what their product actually does with customer money. Get that right and the licence almost chooses itself. Get it wrong and you spend a year and a meaningful budget on an authorisation that does not cover your business model.

The four labels founders encounter most often — EMI, PSP, VASP and MSB — are not interchangeable rungs on a single ladder. They sit in different regulatory regimes, sometimes in different countries, and they answer different questions about what you are permitted to do. The right starting point is not "which is best" but "which question am I answering."

This guide sets out how we walk clients through that decision. It is a framework, not legal advice, and the specifics differ by jurisdiction and change over time.

The question each licence actually answers

An electronic money institution licence answers: may I issue stored value and hold customer funds in accounts or wallets over time? An EMI can issue e-money, hold balances for customers, and provide payment services on top of those balances. This is the regime behind most neobank-style and wallet products. Because an EMI holds client money, it sits under the heaviest of the payment regimes, with safeguarding obligations and ongoing prudential supervision.

A payment services authorisation — what many markets call a PSP or payment institution — answers: may I move money on behalf of others without holding it as stored value? Payment initiation, acquiring, money remittance and account-to-account transfers fall here. A payment institution typically cannot issue e-money; if your model needs persistent customer balances, you are usually looking at an EMI instead.

A virtual asset service provider registration or licence answers: may I deal in, exchange or custody crypto-assets? VASP regimes cover exchange between crypto and fiat, exchange between crypto-assets, transfer, and custody of customer assets. This is a distinct framework from the payments regimes above, and holding a payments licence does not authorise virtual-asset activity.

An MSB, or money services business, answers a similar question to a PSP but within a North American registration framework: may I transmit money, exchange currency or, in some registrations, deal in virtual currency? MSB is principally a United States and Canadian concept, registration-based at the federal level but layered with state or provincial requirements.

The single most useful filter is this: do you hold customer funds as a balance over time, or merely move them? Do you touch crypto-assets, or only fiat? Those two questions sort most businesses into the right regime before any jurisdiction is chosen.

Capital and substance

Each regime attaches its own price of entry, and the capital figure is only part of it.

EMI regimes typically carry the highest initial capital requirement of the payment licences, reflecting that the firm holds client money. Payment institutions sit lower, with the exact figure varying by the specific services and by jurisdiction. Beyond minimum capital, regulators apply ongoing own-funds requirements that scale with transaction volume or outstanding e-money, so the day-one number understates the real capital your business must carry as it grows.

Substance is where many applications stall. Regulators across the major payment and virtual-asset regimes expect genuine local presence: resident directors or senior managers, a real office, and locally accountable compliance and money-laundering reporting functions. A brass-plate structure with directors who live elsewhere and a compliance officer in name only will not pass serious supervision, and increasingly will not pass the banking relationships you depend on. Budget for real people in the jurisdiction, not just a registered address.

VASP and MSB frameworks attach their own substance and compliance expectations, particularly around anti-money-laundering systems, transaction monitoring and the travel rule for virtual-asset transfers. The compliance build is often the largest line in the project, regardless of the headline capital figure.

Typical jurisdictions

Jurisdiction follows from the activity and your target market, not the other way round.

For EMI and payment institution licences, the European Economic Area remains attractive because authorisation in one member state can, subject to passporting and notification, support activity across others — though the bar for substance and the patience of regulators vary considerably between them. The United Kingdom operates its own post-Brexit regime that no longer passports into the EEA, so firms serving both markets increasingly contemplate two authorisations.

For VASP activity, jurisdictions differ sharply in maturity and appetite, and the regulatory picture is moving quickly as comprehensive crypto frameworks come into force. Some established financial centres offer clear, if demanding, regimes; others remain in flux. Choosing a jurisdiction whose rules are still settling can mean re-papering your licence within a year or two.

For MSB activity aimed at North American customers, United States federal registration is the baseline, but the state-by-state money-transmitter licensing layer is the real undertaking, both in cost and in time. Canada operates its own federal MSB registration regime. Founders routinely underestimate how much heavier the United States state layer is than the federal step that precedes it.

Timelines

Treat every published timeline as an optimistic floor. Payment and e-money authorisations in the major regimes commonly run several months to a year or more from a complete, high-quality application, and the clock often only starts once the regulator deems your file complete — which is itself a milestone many applicants reach later than they expected.

VASP authorisations vary widely with the maturity of the regime; in fast-evolving markets, processing times shift as supervisors adjust. United States MSB activity has a relatively quick federal registration but a state-licensing programme that can take well over a year to complete across the priority states.

The largest variable in every case is the quality of your submission. Regulators send applications back when the business plan, financial projections, governance, and anti-money-laundering framework are thin or inconsistent. A well-prepared file moves; an underprepared one circles. The time you invest before filing is the cheapest time in the whole project.

Banking implications

A licence is permission to operate, not a guarantee that a bank will serve you, and this is where otherwise sound projects fail.

Every one of these business models needs banking — safeguarding accounts for an EMI, settlement and client accounts for a PSP, fiat on-ramps for a VASP, operating accounts everywhere. Banks assess your licence, your jurisdiction, your substance and your risk profile, and they are markedly more cautious with virtual-asset and money-transmission businesses. A licence from a jurisdiction banks distrust, or a structure with thin substance, can leave you authorised but unbanked.

We therefore advise clients to test banking appetite in parallel with the licence application, not after it. The choice of jurisdiction should account for whether credible banking partners will actually open accounts for that licence type from that location. An authorisation you cannot bank is not an asset.

Bringing it together

Start from what your product does with customer money and with crypto-assets, and the regime follows. Layer on the markets you serve to choose a jurisdiction, then pressure-test that choice against capital, substance, timeline and — decisively — banking. The right answer is the combination that you can actually fund, staff, bank and supervise, not the one that looks cheapest on a comparison sheet.

These regimes are detailed and they change, and the wrong call is expensive to unwind. This framework is where the conversation should start; the next step is mapping it to your specific model and target markets. That is the work we do with founders, and we are glad to help you get the first question right.