Malta Payment Institution vs EMI Licence: Which Route Fits Your Product?

Start with the customer journey, not the company name

The product team has a working wallet, a European launch plan and a deceptively simple question: PI or EMI? Start with the customer promise, funds flow and redemption rights. If the business executes payments, acquires card transactions, remits money or initiates payments without issuing electronic money, a PI may be the relevant route. If it issues electronic money, examine an EMI authorisation. An account-information-only model is a separate registration question, not automatically a PI application.

The Malta Financial Services Authority supervises entities authorised under the Financial Institutions Act, including institutions undertaking payment services and institutions issuing electronic money. The precise classification depends on the product’s legal and economic features, including who accepts the value, whether customers have a redemption claim, how settlement occurs and how funds move.

What a Malta PI can do—and where registration matters

The Second Schedule covers payment-account services, cash withdrawals, direct debits, card and credit-transfer execution, issuing or acquiring payment transactions, money remittance and payment initiation. The permitted scope depends on the authorisation granted and the actual operating model.

Payment-initiation services require authorisation. By contrast, an entity providing only account-information services generally follows the registration route for an account-information service provider. A PI or EMI may also provide account-information services within its wider authorisation, so the distinction affects both the application route and the capital analysis.

A PI cannot issue electronic money. It may hold funds received for payment transactions in the context of its authorised services, but that does not turn the balance into electronic money or permit the PI to issue a redeemable monetary claim accepted by third parties.

What changes with an EMI

An EMI may issue electronic money and may also provide the payment services listed in the Second Schedule. Electronic money is electronically or magnetically stored monetary value representing a claim on the issuer, issued on receipt of funds for payment transactions and accepted by a person other than the issuer.

That distinction matters for stored-value balances, branded wallets and prepaid instruments. A product should not be treated as e-money merely because its marketing calls it a wallet, and it should not be treated as outside the regime merely because the balance is represented by a token. Map issuance, redemption, acceptance, settlement and customer rights before selecting the licence.

An EMI licence alone does not complete the analysis for an e-money token. An EMI issuing such a token must also address the applicable MiCA requirements, including the e-money-token white-paper notification and other issuer obligations. The same feature-by-feature analysis is needed for products that may instead fall within financial-instrument or other crypto-asset rules.

Capital is the first financial test, not the whole budget

The current MFSA FIR/03 rulebook sets minimum initial capital at €20,000 for a PI providing only money-remittance services, €50,000 for a PI providing only payment-initiation services and €125,000 for a PI providing services under Second Schedule paragraphs 2(a)–(e). The standard minimum initial capital for an EMI is €350,000.

These are minimum initial-capital floors, not a reliable implementation budget. The MFSA may require a stronger capital position where the applicant combines activities, presents a higher-risk model or needs additional resilience. An EMI’s ongoing own funds are generally the higher of the initial-capital requirement or 2% of average daily outstanding electronic money; payment services generate their own applicable calculation.

Safeguarding, controls and operational resilience

A PI providing the services in Second Schedule paragraphs 2(a)–(f) and an EMI must safeguard the relevant customer funds. Safeguarding is a statutory protection arrangement for payment or e-money funds; it is not deposit-taking or permission to use customer money as bank funding. Funds held for payment services should not be described as bank deposits merely because they sit in a payment account.

PIs, EMIs and account-information service providers must maintain operational and security-risk frameworks, mitigation measures, incident-management procedures and relevant reporting arrangements. Where the institution provides payment-initiation or account-information services, professional-indemnity insurance or a comparable guarantee is also required under the applicable framework.

As at October 1, 2026, DORA should be treated as applicable current law for the entities within its scope, including PIs and EMIs. Technology, outsourcing, incident response and resilience therefore belong in the licence case and operating model from the beginning, rather than being left as a post-approval technology project.

Substance in Malta is an operating question

A Malta-licensed financial institution must have both its head office and registered office in Malta and carry out at least part of its licensable or registrable activities there. The Act also requires, unless the MFSA determines otherwise, at least two individuals—or another number determined by the competent authority—to effectively direct the business from Malta, alongside sound management, defined responsibilities, risk procedures and internal controls.

That baseline should not be confused with a minimalist registered address. The MFSA will assess governance, senior management, control functions, outsourcing oversight, safeguarding arrangements, systems and decision-making against the business model. Incorporation does not create an MFSA licence, regulatory eligibility or credible operating substance.

Tax residence is separate from regulatory substance

A company incorporated in Malta on or after July 1, 1994 is generally resident in Malta under the Income Tax Act, and the Malta Tax and Customs Administration states that companies incorporated in Malta must register for income-tax purposes. That tax-residence point should be kept separate from the regulatory question: incorporation does not, by itself, create an MFSA licence, satisfy substance expectations or determine the final tax outcome for a group.

The MTCA states that companies are charged at a flat rate of 35% on net chargeable income for the relevant year of assessment. That general rate does not establish a special PI or EMI rate, a particular shareholder-distribution result or the treatment of a cross-border structure. Treaty residence, management and control, filing obligations, distributions and anti-abuse rules require fact-specific advice.

Passporting and alternatives to a Malta licence

A Malta-authorised PI or EMI may provide covered services in other EU Member States through the European passport framework, subject to the applicable notification, service, agent, branch, conduct and host-state requirements. A Malta licence is not a blanket permission to operate every product in every market, and passporting does not remove continuing home- and host-state obligations.

For some products, the more efficient answer is to use an already authorised EU or EEA provider while the Malta company remains a technology provider, programme manager or commercial group company. That can reduce the Malta entity’s licensing scope, but the unregulated company must not perform regulated functions or present itself as the licensed provider. Contracts, customer disclosures, control over funds and operational responsibilities need to reflect reality. A broader overview appears in Setting Up a Fintech Company in Malta.

Small regimes and future product plans

Small-PI and small-electronic-money-issuer routes should be assessed separately against the current Maltese rules, projected volumes, geographic scope and product structure. They are limited domestic regimes with different thresholds and restrictions; they should not be treated as automatically equivalent to a full authorisation or assumed to carry full EU passporting rights without confirmation.

If the roadmap may later include redeemable stored value, branded wallets, prepaid instruments, tokenised money or an e-money token, decide whether that extra scope is commercially real before choosing a PI simply because it is cheaper to capitalise. Conversely, an EMI is not automatically sufficient: an e-money token brings an additional MiCA workstream, and other products may raise separate financial-instrument or crypto-asset questions.

A practical MFSA application sequence

The MFSA says the process begins with an intention to submit an application and expects the pertinent documentation to be submitted in one instance. The application should follow a completed product-and-funds-flow analysis, not precede it. Prepare the programme of operations, financial projections, governance and control-function structure, safeguarding model, outsourcing arrangements, risk framework and evidence of Malta substance as one connected case.

The MFSA also says timing depends materially on the completeness and quality of the application and the applicant’s responsiveness, while circumstances can cause delay beyond either side’s control. Common pressure points include unclear classification, underdeveloped local decision-making, weak outsourcing oversight, incomplete safeguarding mechanics, unrealistic projections and a mismatch between the proposed licence and the customer journey.

Before committing to incorporation, map each product feature to the proposed licence or registration route, identify which regulated activities will be performed by the Malta entity, test whether an existing EU or EEA provider is more efficient, and obtain Malta legal, regulatory and tax advice on the final structure. Check the MFSA’s current rulebook and the status of PSD3 and the Payment Services Regulation again before filing: as at October 1, 2026, those measures have advanced through political-agreement and final-compromise stages but are not treated here as applicable law until formally adopted, published and effective.

Questions people ask

Can a Malta PI issue a wallet?

Possibly, depending on what the wallet does. A PI may provide authorised payment services and hold relevant payment funds under safeguarding, but it cannot issue electronic money. A wallet that issues redeemable value accepted by third parties may require an EMI or another regulatory analysis.

Does account-information activity require a PI licence?

Not necessarily. An entity providing only account-information services generally requires registration as an account-information service provider. A PI or EMI may provide account-information services within its wider authorisation.

Is an EMI licence always better than a PI licence?

No. An EMI offers broader product scope but normally involves higher capital and additional prudential, safeguarding and operational requirements. A PI may be more proportionate where the business only provides payment services.

Can either licence be used across the EU?

A full Malta PI or EMI authorisation may support passporting into other EU Member States, subject to the relevant notifications, service scope, agents or branches and continuing home- and host-state obligations. Small or limited regimes should not be assumed to have equivalent rights.

Does forming a Malta company create Malta tax residence?

A company incorporated in Malta is generally resident in Malta under the Income Tax Act. That is separate from MFSA authorisation, regulatory eligibility and operational substance. The final tax treatment still depends on the company’s facts, group structure and applicable rules.

Does an EMI licence cover an e-money token?

No. An EMI issuing an e-money token must also address the applicable MiCA requirements, including the relevant white-paper notification and issuer obligations. The EMI licence alone does not complete the analysis.

How long does MFSA approval take?

There is no reliable universal timetable. The MFSA links an effective process to a complete, high-quality application and a responsive applicant, while noting that circumstances can cause delay.