Setting Up an EMI in Malta: Licence, Capital, Substance and Route Choice

Start with the product, not the company

The first decision is whether the business needs to issue electronic money or only provide payment services. A full Maltese EMI may issue electronic money, provide the payment services in the Second Schedule, grant qualifying payment-related credit, provide operational and ancillary services, operate payment systems and undertake other activities permitted by applicable law. The Malta Financial Services Authority supervises entities authorised under the Financial Institutions Act.

Before approaching the MFSA, map each customer flow: when funds arrive, whether electronic money is issued, what the customer can do with it, who holds the funds, and whether another regulated activity is involved. The current FIR/01 says applicants should identify the specific activities in the Act’s Schedules before applying. A payment institution route, licensed-provider partnership or agent or distributor structure may be more proportionate where the model does not require electronic-money issuance.

An EMI is not a bank

An EMI is not authorised to operate as a deposit-taking bank merely because it holds customer money. Electronic money must be issued at par value and redeemed at par value, while funds received by payment institutions for payment services do not constitute deposits or other repayable funds under the Banking Act. The customer-protection and insolvency position still depends on the applicable safeguarding method, contractual structure and facts.

That difference should shape the commercial plan. A bank relationship, safeguarding institution, correspondent arrangement, card scheme and payment processor are separate dependencies; none is guaranteed by obtaining an EMI licence. The Central Bank of Malta operates MTEUROPAY for eligible Malta-licensed institutions, but direct or indirect access and settlement arrangements must be confirmed for the proposed model.

Capital and own funds: the €350,000 figure is only the starting point

Under the current MFSA FIR/03, an institution authorised to issue electronic money must hold initial capital of at least €350,000 at authorisation. Its own funds for the e-money activity must be the higher of that initial-capital requirement or 2% of average daily outstanding electronic money. Where there is no operating history, projected outstanding electronic money may be used under the applicable calculation rules.

A hybrid EMI needs a fuller calculation. Where it provides Second Schedule payment services that are not linked to issuing electronic money, it must hold the sum of the own-funds amounts calculated for the e-money and payment-services activities. The payment-services calculation may use the relevant method selected or required under FIR/03, including fixed overheads, payment volume or an income-based method.

The MFSA may set a higher initial-capital requirement where services from multiple Schedules are proposed. It may also require own funds up to 20% higher or lower than the calculated amount based on its assessment of risk-management processes, loss data and internal controls. The financial model should therefore show the statutory baseline, the hybrid calculation and a sensible operating buffer rather than treating €350,000 as the full funding answer.

Substance, governance and outsourcing

A Maltese financial institution must have its head office and registered office in Malta and carry out at least part of its licensable or registrable activities there. The Act also requires at least two individuals to effectively direct the business from Malta. The current FIR/01 asks applicants to identify the local mind and management, key function holders, internal control functions and personnel based in Malta.

There is no universal headcount or office template that answers the substance question. The MFSA will examine where decisions are made, who controls risk, how compliance and internal controls work, and whether the Maltese company can supervise the business in practice. It expressly states that it will not accept a letterbox entity and will scrutinise heavy outsourcing, including intra-group arrangements.

Outsourcing can be part of a sensible operating model for technology, customer support, compliance or payment processing, but it does not transfer regulatory responsibility. The licence holder must retain oversight, sufficient internal control, provider monitoring, audit and access rights, and a credible ability to terminate, transfer, reintegrate or discontinue critical or important outsourced functions.

What the current application process needs to show

The current Chapter 1 of FIR/01, published by the MFSA in October 2025, requires applicants to engage with the authorisation process before submitting the formal application. A presentation must be provided at least 10 working days before the preliminary meeting and should cover the group structure, regulatory history, proposed activities, flow-of-funds diagram, three-year projections, organisation chart, Malta personnel, operating model, strategy, ICT and platform arrangements, DORA compliance, outsourcing and safeguarding.

In practical terms, prepare the customer journey, funds-flow diagram, safeguarding analysis, governance map, key-person responsibilities, AML/CFT framework, compliance monitoring plan, ICT architecture, DORA controls, incident process, business-continuity arrangements, outsourcing register and provider contracts. The MFSA may request additional information or documentation during the process, so the application should describe the actual operating model rather than present a generic fintech template with Malta added at the end.

Safeguarding and operational resilience

An EMI must safeguard funds received from people using its services and funds received in exchange for electronic money issued. At a high level, the operating model should be built around the permitted safeguarding methods: placing funds in a separate account with a credit institution or investing them in secure, liquid, low-risk assets. Where the investment method is used, FIR/03 requires the assets to be held with a custodian or depositary authorised in the European Union.

The MFSA’s May 13, 2026 circular specifically addresses safeguarding through investment in secure, liquid, low-risk assets. That development makes the choice of safeguarding method an operating decision, not a footnote: it affects counterparties, custody, liquidity monitoring, reconciliation, investment controls and the evidence the board must maintain over the arrangement.

DORA should be treated as an operating requirement, not a paragraph in the application. The proposed EMI needs governance around ICT risk, resilience, incident handling, testing, third-party technology and continuity. The board should be able to explain how the institution would respond to a provider outage, cyber incident, reconciliation failure or safeguarding disruption while continuing to protect customers.

MFSA process and timing

The Financial Institutions Act requires the competent authority to determine an application within three months of receiving it, or within three months after the application complies with the relevant requirements or requested information has been submitted, whichever is later. That is a statutory determination period, not a three-month business-launch promise.

Preparation, preliminary engagement, clarification rounds, due diligence, commercial onboarding and remediation can all extend the overall timetable. The common avoidable delay is misalignment between the product, financial projections, governance structure, safeguarding model and technology design. Before submission, have the founders, compliance lead, technology lead, finance team and proposed board work through the same customer journey and funds-flow documents.

EEA passporting, agents and distributors

A Maltese licence to issue electronic money or provide payment services is valid throughout the European Union under the European-rights framework, subject to the applicable notification and supervisory conditions. A qualifying EMI may use a branch or the freedom to provide services, but passporting does not remove the need to decide where management, risk control and operational substance genuinely sit.

The agent and distributor distinction matters. An EMI cannot issue electronic money through agents. Payment services may be provided through agents, while electronic money may be distributed and redeemed through agents or distributors, subject to the applicable conditions, notification and register requirements. An agent may only start providing the relevant activities once entered in the public register.

For an EEA launch, map the target countries, customer-acquisition model, branch or services structure, agents, distributors, AML controls and oversight responsibilities early. The home-state notification route and host-state requirements should be confirmed before launch; an agent or distributor arrangement is a regulated extension of the EMI’s model, not a way to place the activity outside supervision.

Small issuer, partnership or full licence?

A small-electronic-money issuer route should remain on the route-selection list only as a proposition requiring current Maltese-law confirmation. The MFSA’s 2019 guide described Malta-specific limits and no equivalent EEA passporting rights, but the current FIR/01 and FIR/03 materials reviewed for this article do not establish that those historical figures remain the applicable requirements. The €2 million and €250 amounts should therefore not be used for product design or launch planning without a fresh legal and MFSA check.

A partnership with an existing authorised provider can be commercially sensible where speed, distribution or product validation matters more than owning the regulated platform. It can also limit control over customer data, pricing, roadmap, risk appetite, geography and exit. Compare total cost, dependency, customer ownership, termination rights, migration planning and regulatory accountability—not just the cost of an EMI application.

Tax and residence need separate analysis

For Maltese corporate tax purposes, incorporation, management and control, and carrying on an activity in Malta are separate relevant factors. The Malta Tax and Customs Administration states a general corporate income-tax rate of 35% on net chargeable income, but that headline rate does not establish the company’s residence, effective outcome, shareholder refund position, VAT treatment or transfer-pricing consequences.

The EMI’s regulated substance and its tax analysis should therefore be coordinated but not conflated. Directors, decision-making, staff, functions, intercompany arrangements, customer geography and intellectual-property ownership may all matter. The appropriate next step is fact-specific Maltese and cross-border tax advice alongside regulatory advice, rather than selecting Malta on the assumption that incorporation produces a particular refund or effective rate.

A practical preparation sequence

Begin by writing the product and funds-flow map, then choose the regulatory perimeter. Next test the Malta substance model, identify the board and senior management responsibilities, secure preliminary banking and safeguarding discussions, and design the ICT, AML/CFT, safeguarding, outsourcing and continuity frameworks. Only then should the three-year financial model and formal application documents be locked.

The right next step is a documented route-selection exercise: full EMI, payment institution, small issuer subject to current confirmation, agent or distributor model, or licensed-provider partnership. Review that decision with Maltese regulatory counsel, tax advisers and the proposed banking and safeguarding counterparties. Check the MFSA’s current materials again immediately before submission, particularly for safeguarding, reporting, DORA, outsourcing and passporting procedures.

Questions people ask

How much capital does a full EMI need in Malta?

The current FIR/03 states that an institution authorised to issue electronic money must hold at least €350,000 in initial capital. The MFSA may set a higher initial-capital requirement where services from multiple statutory Schedules are proposed.

What own funds does a Maltese EMI need?

For e-money issuance, own funds must be the higher of €350,000 or 2% of average daily outstanding electronic money. If the EMI provides payment services unrelated to e-money issuance, it must add the applicable payment-services own-funds requirement. The MFSA may adjust the calculated amount by up to 20% higher or lower under FIR/03.

Does an EMI licence make the business a bank?

No. An EMI may issue electronic money and provide permitted payment services, but it is not automatically authorised to take deposits as a bank. Electronic money is issued and redeemed at par, and payment-service funds are not automatically bank deposits.

Can a Maltese EMI serve customers across the EEA?

A qualifying Maltese EMI may use the European passporting framework through a branch or freedom to provide services, subject to the applicable notifications and conditions. Agents and distributors require separate analysis: an EMI cannot issue e-money through agents, while payment services may be provided through agents and e-money may be distributed or redeemed through agents or distributors.

Can an EMI outsource technology and compliance?

Outsourcing may be possible, but it does not transfer regulatory responsibility. The EMI must retain oversight, sufficient substance, third-party-risk controls, audit and access rights, and a credible ability to exit, transfer or reintegrate critical outsourced functions.

Is the small-electronic-money issuer route currently available in Malta?

The route should be treated as subject to current Maltese-law and MFSA confirmation. The MFSA’s 2019 guide described Malta-specific thresholds, but the current materials reviewed do not establish that those figures remain applicable. They should not be used for product design or launch planning without verification.

Does incorporating an EMI company in Malta determine its tax result?

No. Incorporation, management and control, and activity in Malta are separate factors. Tax residence, the corporate tax position, VAT, transfer pricing and any shareholder refund outcome require fact-specific Maltese and cross-border analysis.