Every Fintech Passport guide, grouped by country. Start with a comparison hub for the cross-border view.
Comparison hubs
- Account registers compared across the EU
- AML data returns compared — beyond the SAR
- AML officer roles compared: eight EU national regimes
- AnaCredit across national central banks, compared
- Asset freeze reporting compared: eight EU channels
- CESOP reporting compared: national channels in the EU
- Company registers compared across the EU — a KYB guide
- Complaints reporting compared across eight EU markets
- CRS reporting compared: ES, FR, IT, NL, DE and LU for EMIs
- External-sector reporting compared across the EU
- PSP registers compared: eight EU national registers
- Remote onboarding compared — six EU markets
- Reporting channels compared — the enrolment problem
- Safeguarding compared across the EU
- Transaction reporting compared: MiFIR, EMIR and SFTR
EU-wide (151)
- Account registers compared across the EU
- Agent and distributor reporting — what the network owes
- Agent vs distributor — the line EMIs keep crossing
- AI data quality and the GDPR accuracy principle
- AML data returns compared — beyond the SAR
- AML officer roles compared: eight EU national regimes
- AML record retention — what to keep, and how long
- AML training — the duty that reaches your agents
- AMLA entity risk scoring — how supervisors will rate you
- AMLA’s draft rules for cross-border STRs
- AMLA’s harmonised STR format under the AMLR
- AMLCO in Belgium: Article 9, Law of 18 September 2017
- AMLR governance — the compliance manager and officer split
- AMLR outsourcing — six tasks you can never delegate
- AnaCredit across national central banks, compared
- AnaCredit for payment firms: scope and the 95 attributes
- AnaCredit forbearance — status values and FINREP
- AnaCredit phases 1, 2 and 3 — and what replaced them
- ANIFI — Spain’s new AML authority, and what it absorbs
- Answering a supervisory data-quality query
- Asset freeze reporting compared: eight EU channels
- Beneficial owner — the 25% test and control tests
- Beneficial ownership registers — filing and discrepancies
- Branch vs Freedom of Services: PSD2 and EMD2 passporting
- BSI and MIR — the ECB statistical returns for MFIs
- Building a regulatory reporting pipeline that survives
- Building the CESOP file: quarterly cycle and XML mapping
- Building the CRS return — from onboarding to file
- Building the PSD2 fraud return — from case to file
- Business-wide risk assessment — the six mandatory inputs
- Buying an EMI or PI licence: the change-of-control rules
- Card fraud typologies — the five reportable types
- CARF explained — and how it lines up with DAC8
- Cash-intensive business — a named higher-risk factor
- Central Bank of Ireland payment statistics: PSQ, PSS, PSR
- Central Bank of Ireland register for PIs and EMIs
- CESOP data and system readiness: the four layers
- CESOP reporting compared: national channels in the EU
- CESOP reporting: rules, thresholds and who must file
- CJEU C-70/25: gross negligence cannot block a PSD2 refund
- Company registers compared across the EU — a KYB guide
- Complaints reporting compared across eight EU markets
- Correspondent relationship — the five extra duties
- CRS for EMIs — when you are a Financial Institution
- CRS reporting compared: ES, FR, IT, NL, DE and LU for EMIs
- CRS reporting in Ireland: Revenue, ROS and 30 June
- Crypto laundering typologies — what the AMLR names
- Customer risk profile — the decision you cannot delegate
- DAC7 — the EU digital platform reporting rules
- DAC8 explained — crypto reporting and the CRS extension
- DAC8 XML reporting integration — schema and systems
- Data point model — the layer everyone skips
- De-risking — the line between exit and exclusion
- Designated payment system — what designation means
- Designating an AML representative across the EU
- DORA Article 30: the mandatory clauses for ICT contracts
- DORA in Spain — sanctions and payment processors
- DORA register of information: what it is, how to build it
- DORA threat-led penetration testing (TLPT)
- E-money tokens under MiCA: EMI issuance and white paper
- EBA remote customer onboarding guidelines
- ECB payment statistics — the derogation nobody claims
- Enhanced due diligence — when EDD is mandatory
- ESMA ‘report once’ — merging MiFIR, EMIR and SFTR
- EU AI Act deadlines for financial institutions
- EU asset freeze reporting — the two-week Article 8 duty
- External-sector reporting compared across the EU
- FATCA for EU e-money institutions — the Model 1 IGA
- Fraud losses — who bore them, and when they count
- Funds transfer information — payer and payee data
- Group-wide AML — what a parent must push down
- Home or host — who you report to when passporting
- IFRS 18 — NIIF-UE 18 and the 2027 accounts reset
- Incident reporting clocks — four regimes, one incident
- Information-sharing partnerships — the AMLR gateway
- Instant payments reporting — building the IPR return
- Late filing — what to do when a return will miss
- Major ICT incident reporting: DORA rules for PIs and EMIs
- Manipulation of the payer — the EU name for APP fraud
- Mapping source data to a reporting template
- MiCA CASP grandfathering has closed — what now
- MiCA Travel Rule: the Funds Transfer Regulation for crypto
- MiFID II best execution, refreshed — the new RTS
- MiFIR transaction reporting — how a report is built
- Money mule typologies — the indicators that hold up
- NACE Rev. 2.1 — activity-code migration for payments firms
- NBB lists of payment and e-money institutions (Belgium)
- New product, new returns — the scoping questions
- Nil return — reporting that nothing happened
- Obliged entity — who the EU AML rules actually bind
- Ongoing monitoring — the AMLR Article 26 duty
- Outsourcing reporting — what stays with you
- Own funds — initial capital and Methods A, B, C and D
- Own funds reporting — the four methods and the return
- Payment account — the PSD2 definition and its edges
- Payment Accounts Directive — fees and switching
- Payment exception management: rejects, returns and recalls
- Payment fraud typologies — the supervisor’s taxonomy
- Payment system access in Spain for EMIs and PIs
- PCF-52 Head of AML: Ireland’s pre-approved AML role
- Policies, procedures and controls — two approval levels
- Politically exposed person — who qualifies, what to do
- Prudential vs statistical reporting — why they differ
- PSD2 agents — the register and where liability sits
- PSD2 fraud reporting under Article 96(6)
- PSD3 and the Payment Services Regulation: a tracker
- PSP registers compared: eight EU national registers
- Reconciling returns — which differences are real
- Reference date vs remittance date — the two clocks
- Register discrepancies — the 14-day reporting duty
- Regulatory reporting for EU payment firms — the guide
- Reliance vs outsourcing — two different AML routes
- Remote onboarding compared — six EU markets
- Reporting agent — who actually owes the return
- Reporting at market entry — the sequencing that works
- Reporting channels compared — the enrolment problem
- Reporting data quality — the metrics worth tracking
- Reporting governance — who signs, and on what basis
- Reporting suspicions — AMLR Article 69 and its clocks
- Reporting thresholds — four designs, four consequences
- Resubmission — correcting a return without breaking it
- Safeguarding account — the two PSD2 methods
- Safeguarding compared across the EU
- Safeguarding in Belgium: Arts 42 and 194 of the 2018 Law
- Safeguarding reporting — the notification nobody files
- Sanctions screening at instant-payment speed
- SCA exemptions under the PSD2 RTS
- Settlement finality — what the directive actually does
- Simplified due diligence — five measures, one 60-day cap
- Small payment institutions — the Article 32 exemption
- Source of funds vs source of wealth — the difference
- Spain’s AML law after MiCA — CASPs as obliged subjects
- Structuring and smurfing — what detection actually needs
- Supervisory reporting — the anatomy of a return
- Surviving a framework release — the upgrade playbook
- Testing a new return before the first submission
- The AnaCredit data model and how a submission is built
- The EU AML package — AMLR, AMLD6 and AMLA dates
- The EU Digital Identity Wallet — who must accept it
- The PSD2 limited network exclusion — Article 3(k)
- The reporting operating model — roles that work
- Timing of verification — AMLR Article 23 explained
- Tipping-off — the prohibition and its exceptions
- Trade-based money laundering — the document tells
- Transaction reporting compared: MiFIR, EMIR and SFTR
- Unauthorised transactions — issuance vs modification
- Validation rule — why your submission was rejected
- Verification of Payee under the Instant Payments Regulation
- What is IPR reporting? Instant Payments
- When due diligence fails — refrain, terminate, consider
- XBRL taxonomy — what it is and why filings fail
Spain (51)
- AI data quality and the GDPR accuracy principle
- ANIFI — Spain’s new AML authority, and what it absorbs
- Asset freezes in Spain — Tesoro and article 42 Ley 10/2010
- Banco de España Registro de entidades: PIs, EMIs, agents
- CESOP in Spain — Modelo 379, thresholds and deadlines
- CIRBE explained — Banco de España’s credit register
- DORA in Spain — sanctions and payment processors
- EMI and PI licence in Spain: Banco de España
- ETE — Spain’s external transactions return, by threshold
- Examen especial — the analysis before a Spanish SAR
- Examen externo — Spain’s annual AML audit
- Financia Europa account in Spain: who can offer it
- FINREP for Spanish PIs and EMIs — the reduced taxonomy
- How to file a SAR in Spain
- How to issue Spanish IBANs
- How to register your SEPBLAC representative
- IFRS 18 — NIIF-UE 18 and the 2027 accounts reset
- Investment firm authorisation in Spain: CNMV and IFR
- ITA — telematic file exchange with the Banco de España
- Ley 10/2025: Spain’s complaints rules and BdE reporting
- Ley 2/2023: Spain’s whistleblowing channel for payment firms
- Ley de Integridad Pública — FTF access and Libro de Socios
- MiCA CASP authorisation in Spain and France: CNMV, AMF
- Modelo 170 — Spain’s monthly card and mobile-payment return
- Modelo 171 — cash deposits and withdrawals over €3,000
- Modelo 172, 173 and 175 — Spain’s crypto returns
- Modelo 174 — Spain’s annual card-issuer return
- Modelo 181 — Spain’s annual loans and credits return
- Modelo 196 is monthly now — what changed in 2026
- Modelo 289 — Spain’s annual CRS account return
- Modelo 290 — Spain’s annual FATCA account return
- Modelo 720 — Spain’s foreign asset declaration
- Mule-account aggregated reporting under Ley 10/2010
- Orden ECM/531/2026: the CIR threshold from January 2027
- Órgano de control interno (OCI): Spain’s AML control body
- Payment statistics in Spain — Circular 2/2022
- Payment system access in Spain for EMIs and PIs
- Real Decreto 813/2026: Spain’s AML Regulation from 28 Oct
- Registro de Titularidades Reales — the Spanish UBO register
- Registro Mercantil — the Spanish company register
- Safeguarding in Spain: art. 21 RDL 19/2018 and Ley 21/2011
- SEPBLAC EP/EDE Questionnaire: Spain’s Annual AML Return
- SEPBLAC explained — Spain’s FIU and what you must report
- SEPBLAC video-identification — remote onboarding in Spain
- Spain’s AML law after MiCA — CASPs as obliged subjects
- Spain’s financial sandbox, reformed
- The Spanish reporting calendar for a PI or EMI
- What is EDITRAN? The BdE and SEPBLAC file channel
- What is the DMO? SEPBLAC monthly reporting
- What is the DTE? Spain’s BdE Circular 1/2012
- What is the FTF? Spain’s Fichero de Titularidades
France (32)
- ACPR complaints handling in France: Recommendation 2024-R-02
- ACPR customer protection questionnaire: who files in France
- AMF MiFID II investment firm authorisation in France
- Carte de Visite Fonctionnelle — your ACPR reporting scope
- CESOP in France: art. 286 sexies CGI filing to the DGFiP
- COSI TRACFIN — France’s systematic reporting duties
- CRS/DAC2 filing in France — the XML specification
- ERMES and TRACFIN: filing a déclaration de soupçon
- FCC and FNCI — the Banque de France cheque registers
- FICOBA — France’s account register, and who must file
- FICP — declaring credit incidents to Banque de France
- How to issue French IBANs
- ONEGATE — the Banque de France portal and test environment
- Open banking in France — AISP and PISP access
- OSCAMPS Cartographie des moyens de paiement
- OSCAMPS Fraude — the French payment fraud census
- OSMP — France’s payment fraud figures and how to use them
- PI and EMI licence in France: ACPR authorisation
- QLB: the ACPR annual AML questionnaire for payment firms
- Rapport de contrôle interne LCB-FT (ACPR, 30 April)
- REGAFI: reading France’s register of financial agents
- Registre des bénéficiaires effectifs — France’s UBO register
- Registre national des gels — asset freezes in France
- Remote onboarding in France — pick two of six
- RPC, CRT and CRC: French balance-of-payments returns
- RUBA: ACPR unified reporting for PIs and EMIs in France
- Safeguarding in France: L. 522-17 and L. 526-32 CMF
- SIREN, SIRET and the RNE — French company data
- SURFI and RUBA — French supervisory reporting
- The French AML framework beyond TRACFIN
- The French reporting calendar for a payment firm
- TRACFIN déclarant and correspondant: French designation
Italy (37)
- Anagrafe dei rapporti — Italy’s account data return
- Banca d’Italia Albo of IPs and IMEL: reading the register
- Banca d’Italia Reclami Return: Circolare 217 Voce 52430
- Banca d’Italia Segnalazioni — the reporting matrix
- CAI — the Centrale di allarme interbancaria
- Centrale dei Rischi: Banca d’Italia’s credit register
- CESOP in Italy: SID filing to the Agenzia delle Entrate
- Circolare 217 — supervisory reporting for IP and IMEL
- Comunicazioni oggettive — Italy’s monthly cash return
- Conduct and complaints in Italy — ABF and ACF
- CONSOB MiFID II authorisation — the SIM regime
- CONSOB MiFIR transaction reporting in Italy
- CRS reporting in Italy: Agenzia Entrate, SID, 30 June
- Direct Reporting: Banca d’Italia external-sector returns
- EMI and PI licence in Italy: Banca d’Italia (IMEL, IP)
- Filing a suspicious transaction report (SOS) in Italy
- How to issue Italian IBANs
- INFOSTAT — the Banca d’Italia reporting channel
- Italian AML framework: laws, authorities and returns
- Money muling and tech-enabled fraud — UIF red flags
- OAM — the Italian agent and crypto register
- Registro dei titolari effettivi — Italy’s UBO register
- Registro Imprese — the Italian company register
- Relazione annuale antiriciclaggio and autovalutazione
- Remote onboarding in Italy — the eleven-step script
- Responsabile antiriciclaggio and SOS delegate in Italy
- Safeguarding in Italy: TUB art. 114-duodecies explained
- SARA — Italy’s monthly aggregate AML return
- SCIPAFI: Italy’s identity-fraud check for PSPs
- Segnalazioni periodiche antiriciclaggio (Italy)
- SID — the Agenzia delle Entrate data exchange channel
- SIPAF and SIMEC: card-fraud reporting to UCAMP in Italy
- The Italian reporting calendar for a payment firm
- UIF anomaly indicators — the 2023 framework
- UIF freeze communications — art. 7 D.lgs. 109/2007
- UIF Italy and the Archivio Unico Antiriciclaggio
- UIF schede di feedback: how Italy benchmarks your SOS
Germany (28)
- § 154 AO Kontenwahrheit — Germany’s account-truth rule
- §43 GwG — filing SARs in Germany via goAML
- AWV reporting — Germany’s Z4 and Z5 returns
- BaFin licence in Germany — which authorisation you need
- BaFin video identification — remote onboarding in Germany
- BaFin Zahlungsinstituts-Register (§§ 43, 44 ZAG) explained
- Bundesbank Finanzsanktionen — frozen-funds reporting
- Bundesbank Zahlungsverkehrsstatistik: payment statistics
- CASP authorisation in Germany — the BaFin MiCA licence
- CESOP in Germany: § 22g UStG reporting to the BZSt
- Conduct complaints in Germany — BaFin and Schlichtung
- EMI licence in Germany — the BaFin application under the ZAG
- FKAustG: CRS reporting to the BZSt for EMIs and PIs
- Geldwäschebeauftragter (§ 7 GwG): Germany’s AML officer
- German supervisory reporting — Bundesbank ExtraNet
- Handelsregister and Unternehmensregister — German KYB
- How to issue German IBANs
- Investment firm licence in Germany — BaFin and the WpIG
- Kontenabrufverfahren — the § 24c KWG account file in Germany
- Millionenkredit reporting under § 14 KWG ends in 2026
- MVP-Portal — registering and filing with BaFin
- Payment institution licence in Germany — the ZAG file
- Safeguarding in Germany: § 17 ZAG after the 2025 reform
- The German reporting calendar for a payment firm
- Transparenzregister deadline Germany — §23a duties
- ZAGAnzV — notifications for German PIs and EMIs
- ZahlPrüfbV — the German payment institution audit report
- ZAIT repealed — ICT risk under DORA in Germany
Netherlands (25)
- Article 2d Wwft: compliance function and Wwft policymaker
- CASP authorisation in the Netherlands and Italy (MiCA)
- DNB Digitaal Loket Rapportages — the reporting channel
- DNB IRAP: the Dutch integrity risk questionnaire
- DNB payment statistics: Dutch PI and EMI reporting
- DNB public register (Art. 1:107 Wft): PSPs, EMIs, agents
- DNB statistical reporting — BSI, MIR and AnaCredit
- Dutch conduct complaints: Kifid, Wft 4:17 and the AFM
- EMI and PI licence in the Netherlands: the DNB application
- FATCA/CRS filing in the Netherlands — portal or Digipoort
- FIU-Nederland — filing unusual transaction reports
- Handelsregister (KVK): the Netherlands company register
- How to launch Dutch IBANs
- How to report CESOP in the Netherlands — step by step
- MESRAP — the Dutch balance-of-payments return to DNB
- MiFID II investment firm licence in the Netherlands (AFM)
- Open banking in the Netherlands — AISP, PISP and PSD2 access
- Remote onboarding in the Netherlands — policy-led
- Safeguarding in the Netherlands: Wft 3:29a and DNB
- Sanctiewet 1977: reporting a sanctions hit to DNB
- SIRA — the DNB systematic integrity risk analysis
- The Dutch AML framework beyond goAML
- The Dutch reporting calendar for a payment firm
- UBO-register Netherlands — KVK access and terugmelding
- Verwijzingsportaal Bankgegevens — the Dutch account portal
Luxembourg (28)
- ACD CRS reporting in Luxembourg for EMIs and PIs
- Asset freezes in Luxembourg — loi du 19 décembre 2020
- BCL payment statistics: Luxembourg PI and EMI reporting
- BOP 1.2: Luxembourg external-sector reporting to the BCL
- CASP authorisation in Luxembourg — the CSSF licence
- CESOP in Luxembourg: AED filing through MyGuichet.lu
- Circular CSSF 26/906 — internal governance in Luxembourg
- Conduct complaints in Luxembourg — the CSSF route
- CRBA — Luxembourg’s central register of bank accounts
- CSSF AML/CFT questionnaire: the 2026 AMLA data collection
- CSSF eDesk — login, roles and the S3 filing channel
- CSSF legal reporting — the Z and W tables
- CSSF Regulation 12-02: AML rules, cadences and RC report
- CSSF Search Entities: Luxembourg PI and EMI register
- EMI licence in Luxembourg — the CSSF application file
- goAML Luxembourg — how to file an STR with the CRF
- How to issue Luxembourg IBANs
- MiFID investment firm licence in Luxembourg (CSSF)
- Outsourcing under Circular CSSF 22/806
- PI licence in Luxembourg — CSSF process and capital tiers
- PSD2 fraud reporting in Luxembourg: CSSF duty, BCL file
- RBE Luxembourg — beneficial owners register
- RCS Luxembourg: the Luxembourg company register for KYB
- Remote onboarding in Luxembourg — compensating measures
- Responsable du respect & du contrôle: Luxembourg AML roles
- RFT — Luxembourg’s register of fiducies and trusts
- Safeguarding in Luxembourg: LPS arts 14 and 24-10
- The Luxembourg reporting calendar for a payment firm
Ireland (16)
- Balance of payments reporting Ireland — CSO and CRS2
- Central Bank of Ireland payment statistics: PSQ, PSS, PSR
- Central Bank of Ireland Portal — PIA, PIS, EIA, EIS returns
- Central Credit Register — Ireland’s CIP obligations
- CESOP in Ireland: Revenue filing through ROS (Part 9A)
- CRBOT — Ireland’s trust beneficial ownership register
- CRO Ireland — the Companies Registration Office for KYB
- CRS reporting in Ireland: Revenue, ROS and 30 June
- Financial Sanctions Return — asset freezes in Ireland
- FSPO Ireland — complaints, time limits and binding decisions
- goAML Ireland: STR filing to FIU Ireland and Revenue
- ISBAR — Ireland’s bank and payment account register
- PCF-56 Head of Safeguarding: Ireland’s new PI/EMI role
- RBO Ireland — filing, Tier Two access and discrepancies
- Remote onboarding Ireland — CJA 2010 section 33
- Risk Evaluation Questionnaire (REQ) — Ireland’s AML return
Belgium (11)
- Asset freezes in Belgium — notifying the Treasury
- BCE/KBO — the Belgian enterprise number and register
- Centrale des Crédits aux Particuliers (CCP), Belgium
- CTIF-CFI — reporting suspicions in Belgium via goAML
- NBB payment statistics — Belgium’s MCC declaration
- NBB periodic AML questionnaire — Belgium’s OneGate return
- Ombudsfin: Belgian financial complaints and the 2026 reform
- OneGate — the NBB’s PI and ELMI reports (domain MBS)
- PCC / CAP — Belgium’s central register of accounts
- Remote identification in Belgium: Article 27
- UBO register Belgium — filing, confirmation and access