
Why Czechia in 2026
In the Czech Republic, obtaining an EMI License for an Electronic Money Institution is supervised by the Czech National Bank (ČNB / CNB) under the Payment System Act. The application for an emi license is handled as a formal administrative procedure and must be submitted electronically via the applicant’s corporate data box (Datová schránka).
This guide is written for founders and compliance leads who need a practical licensing playbook: what to prepare, how to structure the file, what timelines to plan for, and how to survive regulator questions without endless rework.
Step 1 — Confirm your regulated scope (what exactly you want the licence for)
Start by mapping your operating model into two buckets:
- Electronic money issuance (core EMI activity)
- Payment services not related to e-money (optional add-ons)
Why this matters: the CNB decision for an EMI licence can also specify which “non-e-money” payment services your licence covers.
Practical output you need: a one-page “Scope & Products Matrix” (products → legal activity → customer journey → money flows → safeguarding approach → outsourcing/IT dependencies).
Step 2 — Build the “licensable” operating setup (not just policies)
2.1 Capital and own funds
- Initial capital: at least EUR 350,000 (minimum paid-up share capital). In practice, the required capital level is often higher and should be justified by the business plan, the financial model, and stress scenarios.
- Ongoing capital adequacy: for e-money issuance, the capital requirement to cover risks is at least 2% of the average e-money in circulation (plus additional calculations if you also provide other payment services).
What CNB expects in practice: a clean capital story (source of funds, source of wealth, timing, bank evidence), and a financial model that reconciles volumes → e-money outstanding → capital metrics.
2.2 Governance that looks real
CNB will test whether your governance is credible and “operational”, not theoretical. A useful internal minimum:
- clear management accountability (who owns risk, compliance, AML, IT/security, operations, finance),
- decision-making records (approvals, reporting cadence),
- outsourcing oversight (vendor governance + controls).
In addition, a key European Banking Authority expectation is that information remains true, complete, accurate, and up to date, is proportionate to the business, and that directors and senior management are fit and proper for the intended scope.
2.3 ICT, security, and outsourcing readiness (2026 reality)
Even when your EMI file is “about payments”, supervisors will heavily probe operational resilience, especially where core functions are outsourced.
DORA is applicable from 17 January 2025, so by 2026 many supervisors expect DORA-style evidence (risk management, incident handling, third-party oversight) to be embedded into how you run tech.
Step 3 — Assemble the application file (recommended structure)
Czech law explicitly points out that application details, formats and technical requirements are set by secondary regulation, and CNB recommends using its forms.
Below is a structure that typically reduces CNB back-and-forth:
A) Executive
- Cover letter (scope, business summary, list of annexes)
- Application form(s)
- Contact point for the proceeding (name + details)
- “Document index” (master checklist with cross-references)
B) Corporate & Ownership
- Group structure chart + UBO narrative
- Shareholder documentation, close links explanation
- Corporate documents
C) Programme of Operations
- Product descriptions + customer journeys
- Geography (where services will be offered)
- Distribution model (direct vs partners)
- Revenue model (fees, margins, projected volumes)
D) Financial Model & Capital
- 3-year projections (P&L, balance sheet, cash-flow)
- Assumptions book (unit economics, growth drivers)
- Capital evidence (bank letters/statements, funding agreements)
- Capital adequacy calculations (incl. e-money outstanding logic)
- Stress scenarios
E) Governance & Internal Control
- Org chart + key role descriptions
- Policies: risk management, internal control, compliance monitoring
- Board/management procedures (approvals, reporting)
F) Safeguarding & Money Flows
- Funds flow diagrams (customer funds vs own funds)
- Safeguarding setup (accounts, segregation logic, operational controls)
- Reconciliation & incident playbooks
G) ICT, Security, Outsourcing
- Systems architecture (core components)
- Security framework, access management, logging
- BCP/DR and incident handling (tabletop evidence helps)
- Outsourcing register + contracts + oversight controls
H) AML/CFT
- AML policy
- Risk assessment (product, customer, geography, channels)
- CDD/EDD, monitoring, sanctions screening, SAR workflow
- Training and internal audit/testing plan
I) Fit-and-Proper Pack
- CVs, experience mapping to responsibilities
- Diplomas
- Certificates
- Reference letters
- No criminal records
- Integrity documents (and approach for foreign documents where applicable)
Step 4 — Submit correctly (so your timeline actually starts)
- Applications to the CNB can be submitted only electronically via a data box (Datová schránka).
- Use the official CNB forms.
- In practice, you should structure your documents rigorously (folders, master index, and consistent numbering) and submit the complete set in one go. As a result, the regulator can review the file faster, follow-up requests are reduced, and the assessment process is more likely to move forward without avoidable delays.
Step 5 — Timelines (legal clock vs real-world clock)
The legal decision period
In practice, for an EMI licence, the Czech National Bank typically issues its decision within 6–12 months after the proceedings commence.
The practical timeline you should plan for (2026)
In reality, end-to-end timing depends on:
- how complete your initial file is,
- how many Q&A rounds you trigger,
- how fast you answer and whether answers are “evidenced”, not narrative.
EBA’s expectation is explicit: if the authority asks for clarifications, the applicant should provide them without delay.
Practical planning tip: treat “Q&A readiness” as a workstream, not as an afterthought.
Step 6 — CNB regulator Q&A: what they usually test
Expect questions in these clusters:
- Scope hygiene
Are you inadvertently doing something outside EMI permissions? Are payment services clearly defined and ring-fenced? - Safeguarding reality
Where do client and operational funds sit (bank(s), safeguarding account structure, and legal ownership), and how is segregation evidenced? - Governance & competence
However, who makes the risk decisions, who owns AML, and who owns tech resilience—and is the team’s experience credible for the level of complexity? - Outsourcing and control
If vendors run core functions, how do you oversee, audit, and recover? - Financial credibility
Are projections coherent, are volumes realistic, does capital coverage scale with e-money outstanding?
How to answer like a regulated institution (not like a startup):
- reply with documented evidence (screens, logs, signed policies, contract extracts),
- keep a single “Q&A tracker” with owners + due dates,
- don’t send “new stories” — send controlled updates to the existing file.
Step 7 — CNB decision and post-licensing obligations (EMI)
Such notifications are handled electronically only.
After the CNB issues its decision, you may start operating only within the scope of the granted authorisation and in line with the conditions on which the licence was granted.
Any changes to the information provided in the application or its annexes (e.g., ownership structure, management, service model, safeguarding setup, outsourcing, etc.) must be notified to the CNB without undue delay.
FAQ: EMI Licence in the Czech Republic in 2026
EMI licence vs Payment Institution (PI) in Czechia: what’s the difference?
EMI licence in the Czech Republic allows you to issue electronic money (e-money) and provide payment services linked to that model. A Payment Institution (PI) licence typically covers payment services without e-money issuance. If your business requires holding customer value as e-money (e.g., wallets/balances), you generally need an electronic money institution licence in Czechia, not only PI.
Can a foreign (non-Czech) company apply for an EMI licence in the Czech Republic?
In practice, CNB licensing is usually structured around a Czech legal entity as the applicant/operator. If you’re a foreign group, the common approach is to set up a Czech subsidiary that will apply for the CNB EMI authorisation, while the group provides funding, governance support, and (where appropriate) outsourcing resources — all properly documented.
What is “source of funds” vs “source of wealth” for Czech EMI licensing — and why CNB cares?
For an e-money licence, CNB will typically want a clear capital story:
- Source of funds (SoF): where the money used for capital actually comes from (bank trail, transfers, agreements).
- Source of wealth (SoW): how the shareholder/investor earned the wealth overall (business income, exits, salary history, dividends, etc.).
Weak SoF/SoW evidence is a common reason for additional questions and delays.
Do we need local Czech directors/management for an EMI licence?
CNB focuses less on “passport nationality” and more on real governance and competence: who is accountable, who can be present locally, who is available to run the institution day-to-day, and whether management can control risk, AML, and technology resilience. In practice, having Czech-based management is preferable, but EU citizens can be a workable alternative — it depends on the business model and whether someone can reliably cover local presence and day-to-day execution. Many applicants fail not because managers are foreign, but because governance looks paper-only (no real decision-making, unclear accountability, weak oversight of vendors).
What are the most common red flags that slow down CNB EMI authorisation?
The delays usually come from avoidable issues like:
-
- unclear product wording (looks like you’re doing more than EMI permissions allow),
- money flow diagrams that don’t match safeguarding accounts and reconciliation logic,
- outsourcing that effectively hands “core control” to a vendor without oversight/audit rights,
- financial model that doesn’t reconcile volumes → e-money outstanding → capital metrics,
- AML pack that is generic (not tailored to products, geography, and channels).