EMI licence in Spain — the Banco de España application file
Banco de España’s EMI authorisation is one of the better-trodden licensing paths in the EU. The legal framework sits in Law 21/2011 transposing EMD2, supplemented by Royal Decree 778/2012 and Banco de España Circular 6/2012. The statutory review is three months from a complete file; realistic end-to-end with feedback rounds is four-to-six months for a well-prepared applicant. This piece walks through what BdE expects in the application file, where most first-pass drafts get held up, and how the post-grant reporting catalogue switches on.
1. Who grants and who supervises
The competent authority is Banco de España. BdE assesses the application, decides on grant, and remains the prudential supervisor after authorisation. Conduct and AML matters sit with BdE prudentially and with SEPBLAC on the AML side. Where the EMI offers investment services or distributes investment products, the CNMV is also involved.
2. Legal basis
- Directive 2009/110/EC (EMD2) — the EU framework
- Law 21/2011 on electronic money in Spain
- Royal Decree 778/2012 — implementing regulation
- Banco de España Circular 6/2012 — operational and supervisory rules
- EBA Guidelines on authorisation under PSD2 and EMD2 — directly applicable in Spain
3. Who can apply
- A Spanish-resident corporate vehicle (S.A. or S.L.), incorporated and with the necessary substance in Spain
- Initial capital of at least €350,000, fully paid up, in own funds at the time of authorisation
- Demonstrably fit-and-proper directors and senior management
- A complete application file in Spanish
Most applicants run a parallel corporate-incorporation track alongside the licensing file. The legal entity must exist and be properly capitalised at the moment of authorisation.
4. What goes in the application file
The core blocks of a complete EMI file:
- Programme of operations — the products offered, the customer journey, the channels, the geographies. BdE reads this for credibility as much as completeness.
- Business plan — three-year financial projections, capital, profitability, sensitivity to stress scenarios.
- Governance map — board, senior management, key-function holders, with the fitness-and-properness file for each named individual.
- Internal-control framework — risk management, compliance, internal audit, with the reporting lines documented.
- ICT and operational-resilience framework — aligned with DORA from January 2025: the ICT-third-party register, the incident-classification process, the threat-led-testing readiness.
- Safeguarding model — segregated-account model or insurance-backed model under Article 7 EMD2, with the contractual evidence.
- AML / CTF programme — risk assessment, policies, customer-due-diligence procedures, designated SEPBLAC representative, monitoring rules, retention schedule.
- Outsourcing register — every operational and ICT outsourcing arrangement, with the Article 30 DORA clauses where ICT.
- Conduct framework — complaint-handling procedure, marketing-communications policy, fees and charges schedule.
- Shareholder structure — direct and indirect shareholders down to ultimate beneficial owners, with fitness-and-properness on qualifying shareholders.
5. The own-funds calculation
EMD2 sets a €350,000 floor for initial capital. Ongoing own funds must be the higher of the floor and the result of one of three formulas (Method A, B or D in Article 5 EMD2). In Spanish practice:
- Method D — proportional to outstanding e-money — is the most common starting point
- Method B — proportional to payment volumes — applies where the EMI also offers payment services unrelated to e-money issuance
- The application includes worked examples under the chosen method and the chosen scenario
6. Fit-and-proper for key function holders
Banco de España applies the EBA fitness-and-properness guidelines. Each named director, CEO, CFO, CRO, head of compliance and head of internal audit submits:
- CV with documented experience in regulated financial services or equivalent
- Criminal-record certificate from each jurisdiction of residence in the past ten years
- Declaration of conflicts and other directorships
- Honourability statement
BdE may interview key function holders before grant, particularly the CEO and the head of compliance.
7. Realistic timing
| Phase | Typical duration |
|---|---|
| Pre-application engagement with BdE | 4–6 weeks |
| Application file drafting | 8–12 weeks in parallel |
| Statutory review (Article 11 EMD2) | 3 months from complete file |
| Feedback rounds with BdE | 1–3 rounds, 2–4 weeks each |
| Final grant decision | typically 4–6 months end-to-end |
A pre-application meeting with BdE is encouraged. It surfaces structural issues before the formal submission and accelerates the feedback rounds.
8. What switches on at grant
- FTF — monthly feed to SEPBLAC of every account holder
- DMO — monthly systematic AML reporting
- DTE — Banco de España balance-of-payments return
- BdE statistical returns under the EMD2 reporting framework
- CESOP — once cross-border payment volumes reach the EU threshold
- IPR statistical report — annual
- Passport notifications to host member states where activity will be offered cross-border
9. Passporting out
Once authorised in Spain, the EMI can passport into other EU member states under EMD2 free-establishment or freedom-of-services rules. The home regulator (BdE) notifies the host regulator; the host accepts. See our branch vs Freedom of Services piece for the model choice.
10. FAQ
Is Spanish required for the application file?
Yes. The application file is filed in Spanish. Supporting annexes from international parents (group governance documents, parent financials) can be filed in their original language; BdE may request a Spanish translation.
Can I apply without a Spanish corporate vehicle?
No. The EMI must be a Spanish-incorporated legal entity (S.A. or S.L.) with substance in Spain. Most applicants run incorporation in parallel with the file drafting.
What’s the difference from a Payment Institution licence?
An EMI may issue electronic money and offer payment services. A PI may only offer payment services. The capital floor is higher for an EMI (€350K vs the PI floors of €20K–€125K depending on services). See our PI licence piece for the comparison.
How does the safeguarding model affect the application?
The chosen model — segregation in a credit-institution account or insurance — must be documented in the file with the operational evidence. Banco de España scrutinises the contractual flow in detail; vague answers do not survive the first feedback round.
Can I appoint an outsourced AML representative?
Yes, conditionally. See our Modelo F22 piece for the Spain-specific requirements on residency, seniority and independence.
What is the most common reason for delay?
Three patterns: weak fitness-and-properness evidence on a named key function holder; an incomplete or generic ICT/DORA framework; and a safeguarding model that is described conceptually but not evidenced contractually. All three are predictable and addressable before submission.
11. What to do, today
- Engage BdE in a pre-application meeting before drafting begins; surface structural concerns early.
- Follow the BdE application checklist exactly — annex order matters.
- Name your key function holders early; CVs and criminal-record certificates can take weeks to assemble.
- Build the ICT/DORA framework against the actual Article 28 register layout — it becomes a live submission after grant.
- Plan the post-grant reporting catalogue alongside the application — many of the same data flows feed both.
Related: Where to base your EMI · What is SEPBLAC? · DORA Register of Information
