What Is an EMI? Cyprus’s Payments Sector Explained
- 10 minutes ago
- 8 min read
There is a layer of licensed businesses sitting between your card and the merchant you paid. Most people have never heard of any of them. Cyprus hosts more than fifty
You buy something online at eleven at night from a company in another country. The money leaves your account. A few seconds later the merchant is told the payment has gone through. Some days after that, the money actually arrives with them.
Between those two moments, the transaction passes through a series of licensed businesses. Almost nobody could name one of them, and that is by design: the layer is invisible when it works, and only becomes visible when it does not. It is also a real industry, employing real people, and Cyprus has quietly become a base for a meaningful part of it.
This is an explanation of what those businesses actually do, how the island came to host so many of them, and how significant the sector genuinely is, including the parts we cannot measure.
What an e-money institution (EMI) actually is
IN PLAIN TERMS An electronic money institution is a company licensed to issue electronic money, the digital balance behind a payment app or prepaid card, and to provide payment services alongside it. A payment institution provides the payment services without issuing electronic money of its own. In Cyprus both are authorised and supervised by the Central Bank of Cyprus, under the Electronic Money Laws of 2012 and 2018 and the payment services legislation that implements the European framework. |
The distinction most people miss is that these are not banks. They can hold your money and move it, but they cannot lend it out, and they are not covered by the deposit guarantee scheme that protects bank deposits. Instead, client money is protected by what the rules call safeguarding: it must be held separately from the firm's own funds, either in a segregated account at a credit institution or covered by an insurance policy or comparable guarantee.
That difference matters. If a bank fails, a depositor is protected up to the guaranteed limit. If a payment or e-money institution fails, the client's protection depends on whether the safeguarding was done properly. The regime is designed to make that likely. It is not the same promise.
For a business holding meaningful balances with one of these providers rather than a bank, that is worth understanding rather than worrying about. The practical questions are ordinary ones: whether the provider is authorised and by whom, where client funds are actually held, and whether the balance sitting there is working capital that needs to be reachable tomorrow or simply money in transit. The answers are usually reassuring. They are rarely asked.
What they actually do all day
Stripped of the terminology, the work falls into a handful of recognisable activities.
Issuing electronic money. The balance sitting in a payment app or on a prepaid card is not a bank deposit. It is electronic money, issued by a licensed institution against funds it received.
Acquiring card payments for merchants. When a business accepts cards online or in a shop, somebody has to connect it to the card networks, take the money in, and pass it on. That is a licensed activity.
Operating payment accounts. Accounts that look and behave much like current accounts for everyday purposes, without being bank accounts.
Moving money across borders and between currencies. Remittances, currency conversion, and the settlement work that sits behind both.
None of it is glamorous. All of it is infrastructure, in the same sense that a water main is infrastructure, and it is noticed on roughly the same terms.
Traced through the purchase at the start, the sequence runs roughly like this. The merchant has a contract with an acquiring institution, which is licensed to accept card payments on its behalf. That institution routes the transaction through the card network to the bank or e-money institution that issued the card, which checks the funds and either approves or declines. The approval takes seconds.
The money itself follows over the next few days, through settlement arrangements that the merchant never sees and the customer never thinks about. At several points in that chain sits a licensed business, and in a growing number of cases that business is authorised in Cyprus.
How Cyprus ended up hosting so many of them
The sector did not appear because somebody decided to build a fintech industry. It grew on foundations laid for something else.
The Cyprus Securities and Exchange Commission was established in 2001. When Cyprus joined the European Union in 2004, CySEC came inside the European framework for investment services, which meant that a firm authorised in Cyprus could serve clients across the rest of the bloc without seeking permission in each country. The euro followed in 2008. Those two facts, taken together, made a small island a viable base for financial businesses whose customers were mostly somewhere else.
What arrived first was foreign exchange and contract-for-difference brokers, in significant numbers. What they built, over roughly two decades, turned out to matter more than the firms themselves: lawyers who understood financial regulation, compliance consultants, auditors familiar with regulated entities, IT specialists who had implemented reporting systems, and a multilingual workforce used to working in that environment.
When European payment services legislation opened a comparable route for payment and e-money firms, the companies that came to Cyprus were not arriving at an empty island offering a low tax rate. They were arriving somewhere that already had the people who knew how to support a regulated financial business. Skilled workers relocating from Ukraine, Russia and Israel over the following decade deepened that pool further.
Which is the point worth taking from the history. The passport that made all this possible was available to every member state in Europe. Cyprus did not have a mechanism nobody else had. What it had, by the time payments regulation arrived, was two decades of accumulated expertise in using it. Clusters form around know-how, not around headline rates.
How significant is the sector, really?
This is where it is worth being careful, because the honest answer has two halves and only one of them can be measured.
The Central Bank of Cyprus publishes a payment statistics report drawing on every payment service provider resident in Cyprus, including banks, payment institutions and e-money institutions. For the second half of 2025 it recorded 174 million non-cash transactions worth 148 billion euros, increases of 8 and 9 per cent respectively on the previous year.
Two figures in it stand out. Card payments made up 75 per cent of all non-cash transactions by volume, the highest share anywhere in the euro area. And in an earlier edition of the same report, the single largest category of card payment value in Cyprus was payments received by payment institutions, at 10 per cent of the total, ahead of grocery stores and supermarkets at 9 per cent. The sector is not a curiosity operating at the edge of the economy. By that measure it is the largest single destination of card spending on the island.
But those numbers describe the domestic market. They capture money moving in and out of providers resident in Cyprus. What they do not capture is what a Cyprus-licensed institution processes for a merchant in Germany or Poland under its European passport, which is precisely the activity that makes the island interesting as a base in the first place.
The same report offers two further details that say something about how the island actually pays for things. Cross-border activity accounted for 45 per cent of card payment volumes and 56 per cent of their value, which is high, and reflects an economy where a great deal of spending crosses a border. And cheques, remarkably, remained the second most important payment instrument by value, at 6 per cent of the total, with an average transaction of around 4,000 euros against roughly 1,200 across the euro area. Cyprus is simultaneously the most card-intensive market in the currency union and one that still settles substantial business and property transactions on paper.
As far as we can establish, that figure is not published by anyone. Not by the Central Bank of Cyprus, not by the European Banking Authority. The international volumes handled from this island are genuinely invisible in public data, and anybody quoting a headline number as though it represents them is quoting the wrong number.
Why firms choose Cyprus, and why some do not
Both halves of this are worth stating, because the promotional version of the story only tells one.
WHY FIRMS COME
| WHY SOME GO ELSEWHERE
|
It is also worth being plain about scale. Cyprus is not competing with London, Frankfurt or Amsterdam on absolute size and does not claim to. What it has built is a specialised cluster, internationally oriented, positioned between the European Union and markets in the Middle East, Africa and Asia. That is a genuine position. It is a different one from being a major financial centre.
Who is actually here
The register is public, which makes this easy to check rather than assert. Cyprus currently has in the region of fifty authorised payment and electronic money institutions, the majority of them e-money institutions, with further applications reported to be under evaluation.
Names appearing on the register include payabl., Sureswipe EMI, XRYMA, Zipp Europe, Wise Wolves Payment Institution, Altery EU and AEON Payment Technologies. Most will be unfamiliar even to people who live here, which is consistent with everything else about this industry. They are largely business-to-business operations, serving merchants and platforms rather than consumers directly.
What changes next
Two developments are worth knowing about without needing the detail.
The European payment services framework is being rewritten. The successor rules will fold electronic money institutions into payment institutions as a single licensing category, which means the separate e-money licence, as a distinct thing, goes away and existing holders will re-authorise under the new regime.
Timing is not yet fixed, but the practical effect lands somewhere in 2027 and 2028.
Separately, payments regulation and crypto-asset regulation increasingly touch the same activities. Where a digital token is used to make payments, a firm may find itself dealing with both frameworks at once, and the boundary between them has needed clarification from European authorities more than once.
For a business using one of these providers rather than running one, neither development changes very much day to day. Both are worth knowing about if you are choosing a provider now and expect the relationship to last.
The practical takeaway
Return to the payment at eleven at night. It worked, so nobody thought about it, which is the whole ambition of the industry that made it work.
Cyprus ended up hosting a meaningful share of that industry for reasons that are less exotic than they are sometimes made to sound. It had European market access, which every member state has. It had lower costs than the large financial centres, which several countries have. And it had, when the rules changed and the opportunity appeared, the accumulated expertise of people who already knew how a regulated financial business is run. That third thing is the one that took twenty years to build and the one that wo
Comments