# Fintech Domain Map: Licenses, Operator Banking, Payments and Stablecoins

> Navigator for the fintech cluster: US, EU, Asia and UAE licensing, the operator compliance stack, acquiring, stablecoin regimes and profiles of the firms already running them.

Author: Oleg Ryabtsev — Partner, Family Office (https://wiki.private.law/en/authors/ryabtsev)
Last modified: 2026-08-14T13:12:00.000Z
Canonical: https://wiki.private.law/en/fintech-hub
Topics: banking
Jurisdictions: global, eu, usa, uk, canada, singapore, hong-kong, uae, switzerland
Product tags: banking, compliance, crypto, stablecoin, custody, bank
Semantic tags: banking, compliance, crypto, stablecoin, custody, bank
Article type: hub

---

## How this cluster is organised

This domain is built around one question: what happens to money that sits not with a bank but with a licensed operator. One side of it is the balance in an EMI account, the wallet float, the coins with a custodian and whatever protects them. The other is the licence, the product and the operator's answerability to a regulator for other people's money. Most sections below cover both sides.

The neighbouring map, [Financial Licenses by Jurisdiction](https://wiki.private.law/fintech-license-map), answers exactly one question: where to get licensed. This page covers the whole domain — what is decided before a licence \(whether you need one at all\) and everything that begins after it: a bank account for the operator itself, the compliance stack, sanctions screening, card acquiring, stablecoin regimes, and profiles of the companies where all of this already runs.

> 🧭 **If this is your problem, start here**
> **Obtain a payments or crypto licence** → [the map of regimes](https://wiki.private.law/fintech-license-map), then the relevant jurisdiction block below
> **Open a bank account for a licensed operator** → [Banking for MSBs, MSOs and EMIs](https://wiki.private.law/banking-for-msb)
> **Issue a stablecoin** → [GENIUS Act](https://wiki.private.law/genius-act) in the US, [MiCA](https://wiki.private.law/mica-eu) in the EU, [Stablecoins Ordinance](https://wiki.private.law/hk-stablecoin-ordinance) in Hong Kong
> **Accept cards on your own platform** → [PayFac, ISO and merchant of record](https://wiki.private.law/payfac-vs-iso), then [BIN sponsorship](https://wiki.private.law/bin-sponsorship)
> **Work out whether you are inside the regulated perimeter** → [Regulatory Perimeter 2026](https://wiki.private.law/regulatory-perimeter-trends)
> **Find out where your money physically sits** → [Correspondent banking and safeguarding](https://wiki.private.law/correspondent-banking-safeguarding)

## Maps and navigators

The top-level view before the detail. Four pages pick a jurisdiction; three explain when you need no licence of your own and where renting one hits its ceiling. Starting here is rational: a large share of licensing projects turn into no-licence projects at the first serious costing.

- [Financial Licenses by Jurisdiction](https://wiki.private.law/fintech-license-map) — Canada, Singapore, Hong Kong, Luxembourg and Dominica in one table: regulator, capital, timeline, use case
- [US Financial and Crypto Licenses](https://wiki.private.law/usa-license-map) — three axes of choice: the federal layer, state licences and the crypto perimeter
- [UAE Financial and Crypto Licenses](https://wiki.private.law/uae-license-map) — five regulators in one country: the central bank, VARA, DFSA, FSRA and SCA
- [Kazakhstan: Financial and Crypto Licenses](https://wiki.private.law/kazakhstan-crypto-licenses) — AFSA, the National Bank and the Alatau City regime
- [Licence for Rent](https://wiki.private.law/license-for-rent) — agency, white-label and BaaS: how a product lives under someone else's authorisation
- [Regulatory Perimeter and 2026 Trends](https://wiki.private.law/regulatory-perimeter-trends) — why liability cannot be rented, and where the boundary of regulated activity is moving
- [Crypto-Friendly Jurisdictions](https://wiki.private.law/crypto-jurisdictions) — the UAE, Switzerland, Singapore and the MiCA bloc compared side by side
## Licensing: United States and Canada

North America is two-layered, and that is where most expensive mistakes originate. Federal registration covers AML only — FinCEN in the US, FINTRAC in Canada. The right to actually move customer money comes from the second layer: state money transmitter licences in the US, the Bank of Canada's RPAA regime in Canada. Vendors selling "ready-made MSBs" are usually silent about that second layer.

- [FinCEN MSB registration](https://wiki.private.law/msb-fincen-usa) — the registration that does not replace a state licence, though it is often sold as if it does
- [Money transmitter licensing in the US](https://wiki.private.law/money-transmitter-license-usa) — fifty licences instead of one: surety bonds, net worth, state-by-state timelines
- [NYDFS: BitLicense and the trust charter](https://wiki.private.law/nydfs-bitlicense) — New York's two doors into US crypto and when each is the cheaper one
- [The OCC national trust charter](https://wiki.private.law/occ-trust-charter) — a bank without deposits: the federal route around the state patchwork
- [Federal Reserve payment accounts](https://wiki.private.law/fed-payment-accounts) — the skinny master account and the end of the sponsor-bank monopoly
- [The 2026 ILC wave](https://wiki.private.law/ilc-industrial-banks) — industrial bank charters as the entry route for non-financial corporates
- [Canadian MSB and FMSB: FINTRAC Registration and the Bank of Canada PSP Regime](/en/fintech-license-map) — the dual perimeter: registration without a licence, supervision without discounts, and the 2026 penalty regime
- [RPAA: Bank of Canada oversight](https://wiki.private.law/rpaa-canada) — the second regime layered on FINTRAC: safeguarding and operational risk
## Licensing: Europe, the UK and Switzerland

The European perimeter is being rebuilt wholesale: PSD3 merges EMIs and PIs into a single licence, MiCA has closed the transitional window for legacy VASP registrations, and the AML package adds AMLA as a directly supervising authority. A 2026 application is filed under current rules but has to be designed against texts that will apply in 2028–2029.

- [PSD3 and PSR](https://wiki.private.law/psd3-psr) — the single PI licence, the end of the EMI regime and the reauthorisation calendar
- [Lithuania: EMI and specialised bank](https://wiki.private.law/emi-license-lithuania) — the second door into the EEA after the supervisory clean-up
- [Luxembourg: EMI and payment licence](https://wiki.private.law/emi-license-luxembourg) — the premium CSSF route: slower and dearer, but no questions from correspondents
- [An EU banking licence through the ECB](https://wiki.private.law/eu-banking-license-ecb) — when an EMI should become a bank: route, capital, timeline
- [MiCA](https://wiki.private.law/mica-eu) — the base framework: token classes, issuers, perimeter
- [The CASP licence under MiCA](https://wiki.private.law/casp-license-guide) — procedure, cost and choosing which member state to file in
- [White-label CASP](https://wiki.private.law/white-label-casp) — running a crypto service on someone else's MiCA licence, and the ceiling on that model
- [UK 2026–2028](https://wiki.private.law/uk-safeguarding-crypto-regime) — safeguarding for EMIs and the FCA and Bank of England crypto regime
- [Appointed representatives and regulatory hosting](https://wiki.private.law/uk-regulatory-hosting) — the UK entry route without your own FCA authorisation
- [Swiss fintech and crypto licences](https://wiki.private.law/fintech-license-switzerland) — the 1b regime, the DLT Act and FINMA's stablecoin requirements
## Licensing: Asia and the Middle East

Asia splits its regimes on a single question — do you hold a customer balance. Hong Kong separates MSO from SVF, Singapore separates SPI from MPI, and both licence crypto on a separate track. The UAE takes the opposite approach: one country, five regulators, and the door you pick determines everything downstream, from capital to which banks will talk to you.

- [Singapore: PSA payment licences](https://wiki.private.law/singapore-psa-payments) — money-changing, SPI, MPI and seven regulated services under one framework
- [Singapore's DTSP regime](https://wiki.private.law/singapore-dtsp) — why a crypto firm domiciled in Singapore must license or leave
- [The Hong Kong MSO licence](https://wiki.private.law/mso-license-hk) — remittance and currency exchange without holding balances; the working format for OTC
- [The Hong Kong SVF licence](https://wiki.private.law/svf-license-hk) — stored value, wallets and the line where a bank begins
- [Hong Kong: the Stablecoins Ordinance](https://wiki.private.law/hk-stablecoin-ordinance) — the HKMA issuer licence and the limits of the regime
- [UAE Financial and Crypto Licenses](https://wiki.private.law/uae-license-map) — how to choose between the central bank, VARA, DFSA, FSRA and SCA
- [Collect & Pay in the AIFC](https://wiki.private.law/collect-pay-kazakhstan-route) — an AFSA payment account and the rouble-renminbi corridor
## The operator side

A licence is the starting line, not the finish. What follows is where operators actually fail: no bank will open an account for the licensee itself, sanctions screening catches the wrong names or misses the right ones, safeguarded funds sit concentrated in a single bank, the ICT framework does not survive inspection. This block is the infrastructure a regulator will test roughly a year after granting the licence.

- [The operator compliance stack](https://wiki.private.law/compliance-stack) — what must physically exist inside an EMI, MSB or CASP: people, policies, systems
- [Banking for a licensed operator](https://wiki.private.law/en/banking-for-msb) — how MSBs, MSOs, EMIs and PSPs open accounts, which banks actually onboard licensed financial firms, and why applications get declined
- [Correspondent banking and safeguarding](https://wiki.private.law/correspondent-banking-safeguarding) — where client money physically sits and what actually protects it
- [Sanctions screening at an operator](https://wiki.private.law/sanctions-screening) — the discipline that keeps payments moving and, when absent, closes the business
- [The Travel Rule](https://wiki.private.law/travel-rule) — two regimes, different thresholds and the data that travels with a transfer
- [DORA](https://wiki.private.law/dora-eu) — what operational resilience costs the holder of an EU licence
- [The EU AML package](https://wiki.private.law/eu-aml-package) — AMLR, AMLD6 and AMLA: what genuinely changes in 2027–2028
- [When the bank closes your account](https://wiki.private.law/bank-account-closure) — de-risking from the other side of the table: timelines and an orderly exit
## Payments, cards and acquiring

A separate layer that runs on card-scheme rules and sponsor contracts rather than licensing logic. The question is always the same: who carries chargeback risk and whose BIN is on the card. The licence matters less here than the contract.

- [PayFac, ISO and merchant of record](https://wiki.private.law/payfac-vs-iso) — three platform models and how risk is allocated between them
- [Card programmes: roles and risks](https://wiki.private.law/bin-sponsorship) — BIN sponsor, processor, programme manager: who owns what
- [Agents and passporting in payments](https://wiki.private.law/payment-agents-eu) — entering the EU and UK through the agency model
- [BaaS: banking products without a licence](https://wiki.private.law/baas-sponsor-bank) — the sponsor bank, its risk appetite and the price of dependency
- [Agentic payments](https://wiki.private.law/agentic-payments) — protocols and liability when an AI agent is the one paying
## Stablecoins and digital money

Three jurisdictions wrote their regimes almost simultaneously and arrived at different constructions: the US built a fully reserved payment stablecoin, the EU folded the instrument into MiCA as an e-money token, Hong Kong created an HKMA issuer licence. Central bank money in digital form runs as a separate line. The difference is not technical — it is who the holder has a claim against if the issuer fails.

- [Stablecoins: types and regulation](https://wiki.private.law/stablecoins) — the base map: what backs them, who issues them, how redemption works
- [The GENIUS Act](https://wiki.private.law/genius-act) — the US federal regime for payment stablecoins
- [The digital dollar in four legal forms](https://wiki.private.law/digital-dollar-forms) — deposit token, stablecoin, EMT and tokenised fund, and how holder rights differ
- [Stablecoins in Asia](https://wiki.private.law/asia-stablecoin-regimes) — Hong Kong, Singapore, Japan, Korea and the renminbi question
- [CBDCs in 2026](https://wiki.private.law/cbdc-landscape) — the digital euro, the digital rouble and the American fork in the road
- [Real-world asset tokenisation](https://wiki.private.law/tokenization-rwa) — the digital wrapper around real assets and its legal nature
- [The OCC national trust charter](https://wiki.private.law/occ-trust-charter) — the federally supervised custodian for an issuer's reserves
- [Federal Reserve payment accounts](https://wiki.private.law/fed-payment-accounts) — where an issuer holds reserves if not at a commercial bank
## Projects and infrastructure

Company profiles are the fastest test of whether a regime works in practice. If a jurisdiction has no live licensee running your model, the licence exists on paper only. These pages also show who banks with whom and whose rails carry the settlement — a dependency map rather than a showcase.

### Stablecoin rails and issuers

- [Bridge](https://wiki.private.law/bridge-stripe) — Stripe's stablecoin bank with a federal charter
- [BVNK](https://wiki.private.law/bvnk) — the stablecoin rails Mastercard bought
- [Conduit](https://wiki.private.law/conduit) — settlement corridors for trade with Latin America and Africa
- [Zerohash](https://wiki.private.law/zerohash) — the invisible crypto back end behind Wall Street
- [SoFi and SoFiUSD](https://wiki.private.law/sofi) — the first stablecoin issued by a US national bank
- [Anchorpoint Financial](https://wiki.private.law/anchorpoint-financial) — the first HKMA stablecoin issuer licence
- [Custodia and Vantage](https://wiki.private.law/custodia-vantage-avit) — tokenised deposits and the fight over a master account
### Custody and crypto infrastructure

- [Fireblocks](https://wiki.private.law/fireblocks) — the custody infrastructure sitting behind everyone else
- [Anchorage Digital](https://wiki.private.law/anchorage-digital) — crypto custody under a federal bank charter
- [HashKey Group](https://wiki.private.law/hashkey-group) — Hong Kong's licensed crypto infrastructure
- [Morgan Stanley Digital Trust](https://wiki.private.law/morgan-stanley-digital-trust) — Wall Street enters crypto custody
- [Coinbase Prime](https://wiki.private.law/coinbase-prime) — prime brokerage built for institutional size
### Banks and correspondents for fintech

- [Clear Junction](https://wiki.private.law/clear-junction) — banking infrastructure for payment companies
- [BCB Group](https://wiki.private.law/bcb-group) — payment infrastructure for the crypto industry
- [ClearBank](https://wiki.private.law/clearbank) — the clearing bank behind UK fintechs and EMIs
- [Cross River Bank](https://wiki.private.law/cross-river-bank) — the sponsor bank of American fintech
- [Column N.A.](https://wiki.private.law/column-bank) — a bank built for developers and BaaS programmes
### Payment accounts and neobanks

- [Airwallex](https://wiki.private.law/airwallex) — a corporate neobank for cards and payouts across MSO, SVF and MPI licences
- [Aspire](https://wiki.private.law/aspire) — the Singapore platform for SME accounts and APAC spend
- [FOMO Pay](https://wiki.private.law/fomo-pay-dpt-payment-services) — a Singapore MPI with a DPT licence for merchant and crypto flow
- [Statrys](https://wiki.private.law/statrys-hong-kong-payment-account) — a Hong Kong payment account for small companies
- [Currenxie](https://wiki.private.law/currenxie-hong-kong-payment-account) — a Hong Kong account for cross-border trade and marketplaces
### Settlement infrastructure and new charters

- [Partior](https://wiki.private.law/partior) — DLT clearing from DBS, J.P. Morgan and Temasek
- [Fnality](https://wiki.private.law/fnality) — interbank settlement in central bank money
- [Thunes](https://wiki.private.law/thunes) — a direct payout network that bypasses correspondent chains
- [Erebor Bank](https://wiki.private.law/erebor) — a new US bank aimed at crypto and defence technology
- [PayPal Bank](https://wiki.private.law/paypal-bank) — the giant returning to the banking system through an ILC
- [Klarna Bank USA](https://wiki.private.law/klarna-bank-usa) — a European lender entering the US at state level
- [Nubank in the US](https://wiki.private.law/nubank-na) — the largest foreign de novo charter application
### Banks built for digital assets

- [FV Bank](https://wiki.private.law/fv-bank-digital-asset-custody) — a Puerto Rico IFE bank with digital asset custody
- [Pave Bank](https://wiki.private.law/pave-bank-georgia-digital-assets) — Georgia's programmable bank for stablecoin treasury
- [EQIBank](https://wiki.private.law/eqi-bank) — the Dominica bank for digital assets and OTC settlement
- [Nodabank](https://wiki.private.law/nodabank) — an offshore bank and family office under the Dominica regime
- [Banks of Puerto Rico](https://wiki.private.law/puerto-rico-banks) — how the IFE jurisdiction works end to end
## Where to go next: adjacent domains

Fintech borders private capital exactly where money stops being operational. These pages live in other clusters of the wiki but are needed here constantly, particularly once the subject shifts from operating money to personal capital.

- [Crypto for private capital](https://wiki.private.law/crypto-private-wealth) — custody, tax and structures for personal capital rather than for an operating perimeter
- [OTC crypto settlement and USDT](https://wiki.private.law/otc) — how crypto becomes fiat and what the receiving bank makes of it
- [CARF in practice](https://wiki.private.law/carf-practice) — what tax authorities will see about your crypto holdings from 2027
- [AML/KYC for the private client](https://wiki.private.law/aml-kyc-private-client) — the same discipline seen from the customer's side of the desk
- [Source of funds and source of wealth](https://wiki.private.law/source-of-funds) — the documentation without which nothing opens anywhere
- [Banks by jurisdiction](https://wiki.private.law/banks) — the banking domain map: accounts, deposit protection, private banking
- [Private banking](https://wiki.private.law/private-banking) — jurisdiction, entry thresholds and how capital origin is tested
- [Hong Kong](https://wiki.private.law/hong-kong-hub)  ·  [Singapore](https://wiki.private.law/singapore-hub)  ·  [UAE](https://wiki.private.law/uae-hub)  ·  [Kazakhstan](https://wiki.private.law/kazakhstan-hub) — jurisdiction hubs where licensing sits alongside company formation, accounts and residency
## What this cluster does not cover yet

An honest list of gaps as of 13 August 2026, so you do not hunt for pages that have not been written.

- **An FCA licensing map.** The UK is covered through the safeguarding regime and regulatory hosting; there is no dedicated treatment of EMI, API and PI authorisation with thresholds, timelines and refusal patterns.
- **Japan and Korea.** The Asian block rests on Singapore and Hong Kong. Japanese payment regimes and Korean licensing appear only inside the Asian stablecoin overview.
- **India and Brazil.** The two largest growth fintech markets — the RBI's PA/PG regimes and Banco Central do Brasil with PIX — sit entirely outside the wiki.
- **Card scheme rules.** Acquiring roles are mapped, but the Visa and Mastercard rulebooks themselves — chargeback cycles, interchange, high-risk merchant monitoring programmes — are not.
- **Change of control and buying a licence.** Regulatory approval for change of control, acquiring a licensed shell instead of filing from scratch, and how long consent takes: none of it is covered yet.
- **Licence withdrawal and wind-down.** What happens to client money when an EMI or CASP fails, and how a wind-down plan actually operates, is mentioned inside individual pages but has no treatment of its own.
- **ART and EMT issuance under MiCA.** The subject is spread across the base MiCA page, the CASP guide and the digital dollar analysis; it has no page of its own.
> 🍓 Read this domain in layers rather than alphabetically. Layer one is whether you need your own licence at all: agency, white-label and BaaS get a product live faster and cheaper. Layer two is jurisdiction, where capital and timeline scale with the right to hold other people's money, and where North America is always two-tiered — federal registration plus a second regime that confers the actual permission to operate. Layer three is the operator side, which is where businesses usually break: a bank account for the licensee itself, safeguarding, sanctions screening and ICT resilience. Layer four is product: cards, stablecoins, custody. The company profiles at the end exist to test a regime against reality, and the gaps section marks the honest edges of this map.

---

## Factual claims

- The European perimeter is being rebuilt wholesale: PSD3 merges EMIs and PIs into a single licence, MiCA has closed the transitional window for legacy VASP registrations, and the AML package adds AMLA as a directly supervising authority.
- An honest list of gaps as of 13 August 2026, so you do not hunt for pages that have not been written.