How Payment Institutions Operate

What is a payment institution?

A payment institution is a regulated business authorised to provide specified payment services without holding a conventional banking licence. It may execute transfers, process card payments for merchants, operate payment accounts or provide money remittance.

The term has a specific legal meaning in the European Union and United Kingdom. Other jurisdictions regulate similar activities through different categories, including money transmitters and payment service providers. A familiar-looking app therefore does not necessarily represent the same legal structure everywhere.

The essential distinction is between moving money and taking bank deposits. A payment institution can receive customer funds to execute payments, but its authorisation does not generally allow it to accept deposits and use them for ordinary bank lending.

What services can it provide?

Its permissions determine what it can actually do. Depending on the jurisdiction and licence, services may include:

• Operating payment accounts used to send and receive funds.
• Executing credit transfers, direct debits and card transactions.
• Issuing payment instruments, such as payment cards.
• Acquiring card payments for merchants.
• Sending remittances without opening a continuing payment account.
• Initiating payments from accounts held with another provider.

Account information services are also regulated within some payment frameworks, although they may require registration rather than full payment-institution authorisation.

A payment account is not necessarily a bank account

An account may have local bank details, support salary receipts and offer a debit card without being a bank deposit. The account details identify where payments should be routed; they do not establish the legal status of the balance.

Electronic money is another distinction. In the EU and UK, issuing electronically stored monetary value accepted by third parties generally requires electronic-money permissions or another appropriate authorisation. A payment-institution licence alone does not authorise e-money issuance.

Some groups consequently use several entities: a payment institution, an electronic money institution and a partner bank. The contract should identify which entity supplies each service.

How a payment moves through the system

Consider a business paying an overseas supplier through a payment institution. The app displays a simple transfer, but several processes sit underneath it.

1. Customer onboarding

The institution identifies the customer and performs relevant anti-money-laundering checks. For a business, this normally includes understanding its activities, ownership and beneficial owners.

Checks are risk-based. An unusual ownership structure, destination or transaction pattern may require additional information about the payment’s purpose or source of funds.

2. Payment instruction and authentication

The customer supplies the recipient details, amount and, where relevant, currency. The institution checks that the instruction is valid and that sufficient funds are available.

Authentication establishes that the instruction comes from an authorised user. In the EU and UK, strong customer authentication requirements apply to many electronic payments, subject to exemptions and other conditions. Other jurisdictions use their own security frameworks.

3. Funding and recording

Funding might arrive through a bank transfer, card payment or an existing payment-account balance. The institution records the customer’s entitlement in its internal ledger.

That ledger is not necessarily a collection of separate bank accounts. Customer funds may sit in pooled accounts, while detailed records attribute the appropriate amount to each customer.

4. Routing, clearing and settlement

The institution routes the transaction through a suitable payment system or partner. It may connect directly to a system where eligible, or use a bank or another payment provider.

Clearing involves exchanging payment information and determining obligations. Settlement discharges those obligations through the transfer of funds between participants.

Cross-border services can involve correspondent banks, foreign-exchange transactions or local payout partners. Some providers use pre-funded balances in the destination country, paying the recipient locally while managing their funding positions separately.

5. Reconciliation and exceptions

The institution compares its ledger with bank statements, processor records and settlement reports. Reconciliation helps identify missing receipts, duplicate entries, failed payouts and safeguarding shortfalls.

If a payment fails, staff or automated systems investigate, retry, return funds or request more information. An app showing “sent” does not always mean the recipient has received usable funds.

How customer money is protected

Safeguarding separates payment funds from operating money

In the EU and UK, payment institutions subject to safeguarding requirements must protect relevant customer funds using permitted arrangements. These can include segregation from the institution’s own money or qualifying insurance or guarantees, depending on the applicable rules.

Under a segregation model, customer money is placed in designated accounts or other permitted assets. It should not be treated as the institution’s cash for paying salaries, rent or ordinary business creditors.

Effective safeguarding requires more than opening a labelled bank account. The institution needs accurate records, reconciliations, appropriate legal arrangements and controls over when funds enter and leave protection. The precise scope and timing requirements vary.

Safeguarding is not deposit insurance

Safeguarding is designed to protect customer funds if the payment institution fails. It does not necessarily provide the same payout mechanism or timetable as a bank deposit-guarantee scheme.

Returning money may require an insolvency process. Delays, reconciliation problems, shortfalls or administration costs can affect recovery, depending on local law and the circumstances.

A partner bank’s deposit insurance does not automatically mean every payment-account customer has direct coverage. Any pass-through protection depends on the jurisdiction, account structure, recordkeeping and other conditions. It also generally addresses failure of the insured bank, not failure of the payment provider itself.

Capital has a different purpose

Regulators may require initial capital and continuing own funds. These support the institution’s resilience and ability to absorb losses.

Capital requirements do not replace safeguarding: one concerns the provider’s financial strength, while the other concerns the treatment of customer money.

How payment institutions earn revenue

Common revenue sources include:

• Transaction fees: charges per transfer, collection or payout.
• Foreign-exchange margins: a difference between the rate offered and a reference or wholesale rate.
• Merchant service charges: fees for accepting and processing payments.
• Subscriptions: charges for account features, software or reporting.
• Card-related revenue: contractual income associated with card programmes, subject to scheme rules and regulation.

Costs include banking and scheme access, fraud losses, compliance, technology, customer support and liquidity management.

A provider may need its own working capital to pre-fund payouts or meet settlement obligations before incoming funds become available. Customer funds cannot simply be treated as unrestricted financing for the business.

Pricing should therefore be assessed as a whole. A transfer advertised without a transaction fee may still involve a currency-conversion margin or recipient-side charges.

How regulation differs by jurisdiction

European Union

The established framework centres on the second Payment Services Directive, PSD2, and national implementing legislation. Payment institutions are generally authorised and supervised by their home member state’s competent authority. Eligible institutions can provide services across the European Economic Area through passporting procedures.

Electronic money institutions fall under a related but distinct framework, including the second Electronic Money Directive, EMD2. Small-institution regimes and exemptions have narrower conditions and do not necessarily provide passporting rights.

EU payment legislation evolves. Readers should check the European Banking Authority and the relevant national regulator for applicable rules and transition arrangements.

United Kingdom

The Financial Conduct Authority supervises payment institutions under the Payment Services Regulations and electronic money institutions under the Electronic Money Regulations. Authorised and small-institution categories carry different requirements.

UK authorisation does not provide an EEA passport. Safeguarding, reporting and operational obligations should be checked against applicable FCA requirements, including any implementation periods for rule changes.

United States

There is no single nationwide licence directly equivalent to an EU payment-institution authorisation. A non-bank payment business may need state money-transmitter licences, alongside federal registration with the Financial Crimes Enforcement Network as a money services business.

FinCEN registration is not a banking licence or an endorsement of the provider. State requirements, exemptions, permissible investments and bonding rules vary. Partnering with a bank does not automatically remove licensing obligations.

Depending on the service, federal consumer-protection rules can also govern electronic transfers and remittances. State regulators remain essential sources for licence verification.

Switzerland

Switzerland does not replicate the EU payment-institution category. The applicable framework depends on the activities, including whether the business accepts public deposits and how it handles customer funds.

Payment businesses may fall under anti-money-laundering supervision without holding a banking licence. FINMA’s FinTech licence permits certain deposit-taking activities under restrictions, including restrictions on investing deposits or paying interest. Deposits under this category are not covered by Swiss deposit insurance.

A firm's supervisory status must therefore be read carefully: anti-money-laundering supervision is not equivalent to bank-level prudential supervision.

United Arab Emirates

The Central Bank of the UAE regulates relevant activities under frameworks including the Retail Payment Services and Card Schemes Regulation and the Stored Value Facilities Regulation. The appropriate licence depends on the service and business model.

Financial free zones have separate regulatory frameworks. A permission from a free-zone regulator does not automatically authorise payment services throughout the UAE. Customers should verify the contracting entity, licence scope and geographical permissions.

Singapore

The Monetary Authority of Singapore regulates specified services under the Payment Services Act. Licence categories include money-changing, standard payment institution and major payment institution licences.

Permissions can cover activities such as account issuance, domestic and cross-border money transfers, merchant acquisition and e-money issuance. Requirements depend on the services and licence category; safeguarding obligations apply to relevant customer money held by major payment institutions, subject to the statutory framework.

What to check before using a provider

A practical review should focus on the legal arrangement rather than the app’s branding:

• Entity and permissions: Which company contracts with the customer, and does its register entry cover the service?
• Balance status: Is the money a bank deposit, e-money or funds held for payment execution?
• Protection: What safeguarding or insurance applies, and what happens on failure?
• Payment chain: Which banks, schemes or payout partners are involved?
• Total cost: Are currency margins, intermediary charges and withdrawal fees disclosed?
• Recourse: What complaint, error-resolution, refund and dispute procedures apply?
• Continuity: How can customers access records or retrieve funds during an outage or closure?

Payment institutions can provide useful alternatives for moving money. Their protections, however, follow the regulated entity and contractual structure—not the appearance of the account or the familiarity of its payment features.