How to Buy a Licensed E-Money Institution Without Taking Blind Regulatory Risk
For a fintech, payment or crypto business, the longest part of entering the European market is often not technology, branding or hiring. The real bottleneck is regulation. Before a company can issue e-money, open payment accounts, support IBANs or process regulated payment transactions, it must pass through a licensing process, prepare a complete compliance framework and satisfy a national financial supervisor.
This is why many founders look at a ready-made EMI company in Europe as an alternative to applying for a new licence from zero. In simple terms, the buyer is not starting with an empty legal entity. The buyer is looking at an existing company that already has authorisation to operate as an Electronic Money Institution in an EU or EEA country.
This route can save a significant amount of time. But it is not a magic shortcut. A licensed EMI is a regulated institution, not an ordinary shelf company. It has a history, a capital position, internal policies, banking arrangements, compliance officers, supervisory records and ongoing legal duties. The buyer must understand all of this before taking over the company.
AMS Europe assists clients with the acquisition of ready-made EMI companies in different European jurisdictions. Our work covers target selection, legal and regulatory review, banking and safeguarding checks, preparation of the buyer for the supervisor’s assessment, and support until closing.
This guide explains what is really being purchased, what an EMI licence can be used for, how change of control works, what risks must be checked, and why proper due diligence is more important than the advertised price of the company.
Buying an EMI Is Not the Same as Buying a Shelf Company
A normal shelf company is usually just a legal entity with registration documents. It may have no activity, no licence, no clients, no regulator and no financial history. Buying it is mainly a corporate transaction.
A ready-made EMI company is different. It is already part of the regulated financial sector. The company has been authorised by a national competent authority and must continue meeting the rules that apply to Electronic Money Institutions.
An EMI may be allowed to issue electronic money, redeem e-money, provide payment accounts, process transfers, support client IBANs, issue cards and provide other payment services. The exact activities depend on the licence scope approved by the regulator.
The European legal basis is built around two key frameworks: the second Electronic Money Directive, Directive 2009/110/EC, and the second Payment Services Directive, Directive (EU) 2015/2366. These rules are implemented by EU and EEA countries through national law. As a result, the main principles are similar across Europe, but the practical attitude of each regulator can differ.
That difference matters. The licence may look similar on paper in Lithuania, Ireland, Malta, Cyprus or Estonia, but the acquisition process, banking access, supervisory expectations and market reputation may not be the same.
What the Buyer Actually Gets
When a buyer acquires a licensed EMI, the transaction usually happens through a share purchase. The buyer purchases the company that owns the authorisation. The licence itself is not sold as a separate object.
A good EMI target may include:
- an authorised legal entity;
- approved payment and e-money permissions;
- board and management structure;
- AML and compliance documentation;
- safeguarding arrangements;
- regulatory correspondence history;
- internal policies and operational procedures;
- possible banking or sponsor-bank relationships;
- passporting notifications, where already completed;
- reporting and audit history.
This is the reason such companies can be valuable. A buyer may receive not only authorisation, but also part of the infrastructure needed to operate in the payments sector.
But the same point creates risk. If the company has unresolved supervisory issues, weak safeguarding, insufficient own funds, outdated AML policies or unstable banking relationships, the buyer may inherit those problems together with the licence.
The first question should never be “How fast can we buy it?” The better question is “What exactly is inside this licensed institution, and will it survive regulatory review after we enter the ownership structure?”
Why Businesses Choose the Acquisition Route
Applying for a new EMI licence can be a long process. Even in a relatively efficient jurisdiction, a well-prepared applicant may spend several months on the licence file before it is submitted. After submission, the regulator reviews the application, asks questions, checks governance, studies the business plan, reviews safeguarding, analyses AML systems and assesses the people behind the project.
Depending on the country and the quality of the application, the full timeline may take from several months to well over a year. Some applicants also lose time because the file is not ready, the financial model is weak, the management team is incomplete, or the banking setup is not credible.
Buying a ready-made EMI company in Europe can reduce part of that delay because the company has already passed the initial authorisation stage. For a buyer with a serious business plan, this can mean faster movement toward launch.
The acquisition route may be attractive when the buyer wants:
- faster entry into the European payments market;
- an existing regulated structure instead of a new application;
- a licence with a defined scope of permissions;
- a company that may already have compliance systems in place;
- a base for EEA passporting;
- a regulated vehicle for payment, fintech or crypto-related activity;
- a stronger position when discussing banking or partnerships.
Still, buying an EMI does not remove regulatory obligations. It simply changes the path. Instead of asking the regulator to approve a new institution, the buyer asks the regulator to accept a new controller of an already authorised institution.
What an EMI Licence Can Be Used For
An Electronic Money Institution licence can support a broad range of commercial models in the payment industry. The exact scope must always be checked in the authorisation decision and regulator register.
A licensed EMI may be able to issue electronic money and redeem it at nominal value. It may also provide payment accounts, support IBAN-based services, process SEPA transfers, handle direct debits, issue prepaid or payment cards and execute payment transactions for clients.
Where the licence includes the relevant permissions, the institution may also provide account information services or payment initiation services.
The key commercial advantage is European reach. An EMI authorised in one EU or EEA country can use passporting to provide its services in other EEA markets. The EEA covers the 27 EU member states plus Iceland, Liechtenstein and Norway. This is one of the main reasons a European EMI licence is more powerful than many offshore structures.
For businesses targeting European clients, this passporting mechanism can be central to the business model. It allows a company to expand across the single market through notification, rather than applying for a separate licence in each country.
Why EMI Structures Matter for Crypto and Stablecoins
The EMI licence has become especially relevant for digital asset projects. Under the Markets in Crypto-Assets Regulation, Regulation (EU) 2023/1114, e-money tokens are linked to the EMI framework because fiat-backed stablecoins may be issued only by credit institutions or authorised EMIs.
For a stablecoin project planning to issue an e-money token in the EU, the EMI licence can therefore become a core regulatory requirement. It is not only a payment licence. It may be the foundation for a broader digital asset structure.
This is one reason crypto businesses, wallet providers and stablecoin projects increasingly review ready-made EMI companies. The acquisition of an already authorised EMI may shorten the route to a regulated setup, but the buyer still needs to satisfy the supervisor and align the post-acquisition business plan with MiCA, AML and payment services rules.
A licensed company alone is not enough. The business model must fit the licence, the capital must fit the volumes, the safeguarding must fit the flows, and the management team must fit the expectations of the regulator.
The Change-of-Control Point Buyers Often Miss
The most important legal point is simple: buying the shares does not mean the buyer can immediately control the EMI without regulator involvement.
An EMI licence stays with the company, but a change in ownership is a regulated event. If the buyer acquires a qualifying holding, generally 10% or more, or obtains control or significant influence, the national competent authority must be notified before completion.
The transaction is normally structured with conditions. The parties can sign a share purchase agreement, but closing should wait until the regulator reviews the buyer and gives a non-objection or equivalent approval.
This is where many unrealistic offers on the market become dangerous. A seller may present the company as “ready for instant transfer”, but a licensed EMI cannot be treated like a simple shelf entity. The supervisor has the right to assess who is entering the ownership structure.
The regulator will normally review the buyer’s reputation, financial standing, source of funds, ownership chain, beneficial owners, proposed directors, senior managers, compliance function and future business plan.
A strong EMI target can still fail to close if the buyer is not prepared. The incoming owner must be able to show clean funds, transparent ownership, competent management and a credible plan for the regulated business.
Capital Requirements: The €350,000 Floor Is Only the Beginning
Under EMD2, an authorised EMI must have minimum initial capital of €350,000. This is the legal starting point, not a guarantee that the company is properly capitalised for any future activity.
An EMI must also maintain ongoing own funds. For active e-money issuance, the required amount can depend on the average outstanding electronic money. In many cases, the calculation may require at least 2% of average outstanding e-money over the previous six months.
Supervisors usually expect a buffer above the bare legal minimum. In practice, many institutions maintain around 120–150% of the minimum requirement, and the expected level may be higher if the business model is larger or riskier.
For a buyer, this means the capital review must be forward-looking. It is not enough to confirm that the company currently has €350,000. The buyer must check whether the company will remain adequately funded after the acquisition, after growth, after new services, after passporting and after increased transaction volumes.
If the future business plan requires more capital than the company has, the regulator may delay the approval or request additional commitments.
Safeguarding: The Licence Is Weak Without a Working Client-Fund Setup
EMIs are not banks. They cannot use client money for lending or treat customer balances as their own operating funds. Client funds must be protected in accordance with the safeguarding rules.
Safeguarding may be arranged through segregated accounts with a credit institution, investment in secure low-risk liquid assets, or an insurance or comparable guarantee mechanism. The aim is to ring-fence client funds and protect them from the institution’s own financial risks.
In an EMI acquisition, safeguarding is one of the most critical review areas. A company may have authorisation, but if its safeguarding bank relationship is weak, inactive or likely to be terminated after the change of ownership, the commercial value of the licence drops sharply.
Before signing, the buyer should understand where funds are safeguarded, whether the relationship is active, whether the bank has been informed about the planned transaction, and whether the arrangement can support the buyer’s future business model.
Where the EMI relies on a sponsor bank or key banking partner, the change of control should be discussed early. Otherwise, the buyer may close the deal and then discover that the banking infrastructure does not support the new ownership or planned activity.
Due Diligence on the Target Company
Proper due diligence should go far beyond checking the regulator’s public register. The register may confirm that the company is authorised, but it will not reveal every operational, financial or supervisory issue.
The buyer should review the exact licence scope, passporting status, capital position, own-funds calculations, safeguarding structure, bank accounts, AML framework, compliance records, customer due diligence files, reporting history, outsourcing arrangements, IT systems, corporate documents, tax position, accounting records and outstanding liabilities.
Regulatory correspondence is especially important. If the supervisor has raised concerns, imposed remediation, questioned governance or criticised safeguarding, the buyer must know this before becoming committed to the transaction.
The same applies to enforcement history. Past problems do not disappear because shares change hands. A new owner may inherit a company that is already under regulatory pressure.
The cleanest EMI is not always the cheapest one. A lower price can reflect hidden risk: weak capital, poor banking continuity, unresolved regulatory questions or a business model that no longer works.
Preparing the Buyer for the Regulator
The regulator will not only look at the EMI. It will also look at the acquirer.
The buyer must be ready to show who controls the acquiring structure, where the acquisition money comes from, how the group is funded, who the beneficial owners are and why the transaction is being made.
The regulator may also review the proposed directors, management team and key function holders, including the MLRO and compliance officers. These people must satisfy fit-and-proper expectations.
A strong buyer package usually includes ownership charts, corporate documents, financial statements, source-of-funds evidence, source-of-wealth explanations, CVs, declarations, business plan, forecasts, governance model, compliance plan and operational resilience materials.
Operational resilience deserves special attention because the Digital Operational Resilience Act, Regulation (EU) 2022/2554, applies to EMIs from January 2025. This means ICT risk, outsourcing, incident response, business continuity and third-party technology providers should be treated as part of the regulatory file, not as later technical details.
If the buyer submits an incomplete or inconsistent package, the review can become slow. If the regulator asks multiple rounds of questions, the timeline can stretch significantly.
Jurisdictions Where Ready-Made EMI Companies Are Commonly Considered
Ready-made EMI companies may appear in several European jurisdictions. The most common options include Lithuania, Ireland, Malta, Cyprus and Estonia.
Lithuania has one of the largest EMI markets in Europe and is often considered by fintech companies because of its developed regulatory ecosystem. The Bank of Lithuania has extensive experience with payment and e-money institutions. At the same time, banking and sponsor-bank continuity must be checked carefully.
Ireland is usually viewed as a strong-reputation jurisdiction. The Central Bank of Ireland may take a more detailed and slower approach, but its approval can be valuable for businesses that need institutional credibility.
Malta has an established financial services and fintech environment, supervised by the MFSA.
Cyprus may be relevant for payment and e-money models that fit its regulatory and banking environment.
Estonia attracts digital businesses because of its technology-friendly corporate infrastructure, but an EMI still requires real regulatory substance and proper local compliance.
The right jurisdiction depends on the buyer’s product, clients, banking needs, target corridors, reputation requirements, cost expectations and growth plan. Choosing only by price is risky. A cheap company in the wrong jurisdiction may be more expensive in the long run than a better-structured option with stronger banking and regulatory standing.
Typical Acquisition Process
A well-organised EMI acquisition usually starts with defining the buyer’s requirements. This includes the country, licence permissions, target clients, planned services, budget, banking needs and expected timeline.
After that, suitable targets are identified and reviewed under a non-disclosure agreement. The buyer then examines the licence, financial position, compliance framework, banking status and regulatory background.
If the target looks suitable, the parties agree on a term sheet and move into detailed due diligence. At the same time, the buyer begins preparing the documents needed for the change-of-control notification.
The share purchase agreement is usually signed with a condition that closing can occur only after the competent authority has no objection to the acquisition. The qualifying-holding notification is then submitted to the regulator.
The supervisor reviews the file, asks questions where needed and assesses both the target and the incoming owner. Once the non-objection is received, the parties can close the transaction. After closing, the company may update its board, management, internal structure, business plan and operational setup.
The most common reason for delay is not the formal process itself, but weak preparation. Missing source-of-funds evidence, unclear ownership, unrealistic forecasts or incomplete governance documents can turn a relatively standard review into a long supervisory exchange.
Common Mistakes in EMI Acquisitions
Many problems in ready-made EMI transactions are avoidable.
One mistake is assuming that the licence can be transferred instantly. It cannot. The regulator must review the change of ownership.
Another mistake is looking only at the licence and ignoring banking. A licensed EMI without stable safeguarding and operating accounts may be difficult to use.
A third mistake is treating €350,000 as the full capital answer. It is only the minimum initial capital. Future own-funds requirements may be higher.
A fourth mistake is relying on the seller’s summary instead of reviewing documents. The buyer should verify authorisation, regulatory history, AML framework, safeguarding, capital and liabilities independently.
A fifth mistake is underestimating the buyer’s own file. The regulator may reject or delay the acquisition if the incoming owners cannot show reputation, transparent funds and operational capability.
A sixth mistake is choosing the cheapest company. In regulated financial services, a discount can hide problems that later cost more than the saving.
PSD3 and the Future EMI Framework
Buyers should also consider the upcoming change in European payment regulation.
On 27 November 2025, the European Parliament and the Council reached provisional political agreement on PSD3 and the accompanying Payment Services Regulation. The planned framework is expected to replace EMD2 and integrate EMIs into a broader payment institution regime.
As currently proposed, existing EMI authorisations are expected to remain valid for 24 months after PSD3 enters into force. This period may be extended to 30 months at the discretion of the national authority. During that transition, existing institutions will need to demonstrate compliance with the new framework.
For buyers, this does not mean that buying an EMI now is pointless. It means the acquisition plan should include a transition roadmap. The company may provide a regulated platform under the current rules, but it must be prepared for the next regime.
A serious buyer should therefore review not only the current licence, but also whether the institution can adapt to PSD3, PSR, DORA, MiCA where relevant, and future supervisory expectations.
How AMS Europe Helps Buyers
AMS Europe supports clients throughout the acquisition of ready-made EMI companies in Europe.
We help define the most suitable jurisdiction, identify available EMI targets, review licence scope, check regulatory standing, analyse safeguarding and banking arrangements, coordinate due diligence, prepare the buyer’s change-of-control file and support communication with the competent authority.
Our focus is not simply to find a company for sale. The real goal is to help the buyer acquire a regulated structure that can pass supervisory assessment and operate after closing.
We also support clients who decide to apply for a new EMI licence instead of buying an existing company. This allows the client to compare both routes and choose the option that best matches timing, budget, regulatory risk and business strategy.
Looking for a Ready-Made EMI Company in Europe?
We can help you assess available options, choose the right structure, complete due diligence, prepare the change-of-control application and manage the acquisition process until supervisory approval and closing.
FAQ
Can I buy an EMI licence directly?
No. The licence is attached to the authorised company. In practice, the buyer usually acquires shares in the company that holds the EMI authorisation. If the acquisition creates a qualifying holding or control, the regulator must be notified before completion.
Is the transfer of a ready-made EMI fast?
It can be faster than applying for a new licence, but it is not instant. The regulator must assess the incoming owner, source of funds, beneficial owners, proposed management and future business plan. The transaction normally closes only after the supervisor issues a non-objection.
What minimum capital does an EMI need?
The minimum initial capital under EMD2 is €350,000. However, an active EMI must also maintain ongoing own funds. For e-money issuance, the requirement can depend on average outstanding e-money volumes. Buyers should check whether the company is capitalised for the planned business, not only whether it meets the minimum legal floor.
Why is safeguarding so important?
Safeguarding protects client funds. EMIs cannot use customer money as their own funds. A ready-made EMI with weak or inactive safeguarding arrangements may be commercially difficult to use, even if the licence still exists. Banking continuity should always be checked before signing.
Which European country is best for buying an EMI?
There is no universal answer. Lithuania may offer a deep EMI market. Ireland may provide stronger institutional reputation. Malta, Cyprus and Estonia can also be relevant depending on the business model. The choice should depend on licence scope, banking access, client markets, reputation and cost.
Can a European EMI work across the whole EEA?
Yes. An EMI authorised in one EEA country can passport its services into other EEA markets through a notification process. This gives access to the 27 EU countries plus Iceland, Liechtenstein and Norway.
How does PSD3 affect a ready-made EMI?
PSD3 is expected to replace EMD2 and bring EMIs into a broader payment institution framework. Existing EMI licences are expected to remain valid for a transitional period, currently planned at 24 months after entry into force, with a possible extension to 30 months. Buyers should include this future transition in their acquisition plan.
