Insights
News and articles on EU fintech topics — licensing, AML, payments, reporting for operators.
ZAIT repealed — ICT risk under DORA in Germany
ZAIT was repealed and DORA took over: which articles a German payment or e-money institution applies, BaFin's reporting channel and the incident…
CESOP data and system readiness: the four layers
CESOP data and system readiness: what a PSP must prove each quarter — scope, the 25-payment count, which member states you file…
MiFID II best execution, refreshed — the new RTS
MiFID II best execution under Delegated Regulation (EU) 2026/825: the venue list, firm-set monitoring thresholds and 12 February 2028.
AMLA’s draft rules for cross-border STRs
AMLA's draft RTS on cross-border suspicious-transaction reports: how FIUs identify affected member states, and the 6 October 2026 consultation deadline.
DAC7 — the EU digital platform reporting rules
DAC7 explained: who is a digital platform operator under Directive (EU) 2021/514, which sellers are reportable, and the 31 January deadline.
Money muling and tech-enabled fraud — UIF red flags
Money muling and tech-enabled fraud red flags for Italian EMIs: the UIF's June 2026 communication, the new SOS codes, and how to…
Conduct complaints in Luxembourg — the CSSF route
Conduct complaints in Luxembourg: the CSSF Regulation 16-07 handling duty, the one-month response clock, and the out-of-court resolution procedure.
Major ICT incident reporting — from PSD2 to DORA
Major ICT incident reporting moved from PSD2 Article 96 to DORA Article 19: the classification test, the deadlines and the parallel GDPR…
Transparenzregister deadline Germany — §23a duties
Transparenzregister deadline Germany: no periodic date — § 20(1) GwG requires filing unverzüglich. Dates by legal form, and the §23a discrepancy report.
SIRA — the DNB systematic integrity risk analysis
The DNB SIRA explained: its Bpr and Wwft legal basis, the integrity risks it must cover, and the inherent-to-residual method a payments…