Czech Republic (CZ)

Licensing, Authorisation & Market Access

The Czech National Bank is the sole licensing and supervisory authority for banks, payment institutions, electronic money institutions, account information service providers, small-scale payment service providers and electronic money institutions, and, from 15 February 2025, MiCA crypto-asset service providers, all under Act No. 370/2017 Coll. on the Payment System. The regime offers four distinct licence tracks: full payment-institution and full electronic-money-institution authorisations that carry EU/EEA passporting rights, and small-scale payment-service-provider and small-scale electronic-money-institution tracks that are domestic-only and capped at roughly EUR 3 million in average monthly transaction volume, with no passporting rights attached. Capital minimums range from EUR 20,000-125,000 for payment institutions up to EUR 350,000 for electronic money institutions and CZK 500 million for a bank licence.

The most consequential development of the cycle is structural rather than a single rule change: payment institutions and electronic money institutions gained direct participation in CERTIS, the CNB's real-time gross settlement and instant-payments system, following a Senate-approved amendment to Act No. 370/2017 Coll. The amendment was approved by the Senate on 22 January 2025 with an intended effective date of 9 April 2025 -- a more precise dating than the loose 'since 2025' framing found in some secondary sources, and one confirmed against the CNB's own press release. Direct CERTIS access gives nonbank payment firms settlement finality in central-bank money, a status previously available only to banks and a small number of other regulated settlement participants.

That widening of access sits alongside the CNB's parallel build-out of its MiCA authorisation function. The CNB issued its first six CASP authorisations on 11 February 2026, out of 248 applications received -- one of the highest MiCA application volumes recorded anywhere in the EU -- while cautioning publicly that authorisation does not amount to an endorsement of investment safety. The scale of that application queue, set against a licensing authority that also supervises banks, PIs, EMIs and AISPs under a single roof, indicates a CNB balancing a rapidly expanding nonbank/crypto remit with its long-standing prudential mandate.

Outlook

Watch for the CNB's authorisation throughput against the remaining MiCA application backlog as the 1 July 2026 transitional deadline approaches, and for the practical operation of nonbank CERTIS participation now that direct access has taken effect -- both will test whether Czech market-access liberalisation continues to keep pace with the volume of applicants it is attracting.

Stablecoins & Digital Money

The Czech Republic applies MiCA directly as EU law, operationalised nationally through Act No. 31/2025 Coll., the Digital Finance Act, in force since 15 February 2025, with a full 18-month CASP transitional period running to 1 July 2026. That transitional window is longer than those chosen by some neighbouring markets, extending the runway for existing crypto-asset firms to keep operating without full CASP authorisation. Under the regime, MiCA e-money tokens may be issued only by a credit institution or a Payments-Act-authorised electronic money institution, keeping EMT issuance tied to the existing bank/EMI licensing perimeter rather than opening it to unlicensed issuers. Stable Europe s.r.o. has already become the first authorised domestic issuer under the new regime, holding MiCA authorisation to issue CZKI, a koruna-referenced e-money token. The CNB received 248 CASP applications in total, one of the highest volumes recorded anywhere in the EU, before issuing its first six authorisations on 11 February 2026.

Outlook

The 1 July 2026 close of the transitional period is the key date to watch: any pre-existing crypto-asset firm still without full CASP authorisation at that point loses its ability to operate lawfully in the Czech market, which should concentrate CNB authorisation activity in the weeks immediately beforehand.

Conduct, Safeguarding & Financial Promotions

Czech payment institutions operate under a narrower safeguarding mandate than electronic money institutions. PI funds may be held only in dedicated payment accounts for defined transaction execution, not for indefinite storage, a function reserved for EMIs, which carry broader stored-value safeguarding obligations under the segregation model. This bank/nonbank-adjacent distinction -- PI as a transaction-execution vehicle, EMI as a stored-value vehicle -- remains the structural spine of Czech conduct regulation for nonbank payment firms.

The CNB backs that structure with active supervisory enforcement against firms that lack genuine local substance. It enforces a physical-presence requirement against letterbox companies lacking real local substance or management, treating that absence as grounds for licence revocation -- a policy lever that sits alongside, and reinforces, the licensing-track distinctions described in W1a.

On dispute resolution, the Office of the Financial Arbitrator provides free dispute resolution for payment services and e-money user disputes under the Payment System Act, giving consumers of both bank and nonbank payment services a no-cost route to redress that does not require litigation.

Outlook

Expect continued CNB use of the anti-letterbox / physical-presence tool as a supervisory lever against thinly substanced nonbank entrants, particularly as CERTIS access and MiCA authorisation volumes (see W1a) bring a wider population of nonbank firms into direct CNB supervision.

Operational Resilience & Critical Infrastructure

DORA, the EU's Digital Operational Resilience Act, became fully applicable in the Czech Republic on 17 January 2025, transposed via Act No. 31/2025 Coll., with the CNB acting as supervisory and sanctioning authority. Breaches can draw fines of up to CZK 50,000,000, roughly EUR 2,000,000, under the Act on Digitalisation of the Financial Market. A national Critical Infrastructure Resilience Act, transposing the EU Critical Entities Resilience Directive, took effect in November 2025, adding enhanced incident-reporting obligations for covered financial institutions on top of the DORA baseline. Observers note overlapping supervisory scope between the CNB's DORA remit and NUKIB, the national cybersecurity authority, as a coordination point to watch.

Outlook

With DORA and the Critical Infrastructure Resilience Act both now in force, the operational-resilience compliance calendar for Czech payment firms is largely set; the practical test ahead is how CNB enforcement of the CZK 50 million fine ceiling interacts with NUKIB's parallel cybersecurity remit as incident-reporting obligations begin to accumulate.

Scheme & Network Compliance

The EU Interchange Fee Regulation directly caps consumer card interchange in the Czech Republic at 0.3% for credit and 0.2% for debit transactions; corporate and commercial cards fall outside those caps and can carry interchange of 1.5% or more. Before the EU regulation took effect, Czech domestic card interchange ran at approximately 1% under Visa/Mastercard rules, making the IFR caps a material reduction from the pre-regulation baseline. PCI DSS applies to all entities in the Czech card payment chain -- merchants, processors, acquirers, issuers and service providers -- through contractual incorporation by the card schemes rather than through domestic statute. No scheme rule changes specific to the Czech Republic were identified this cycle beyond this standing IFR/PCI-DSS framework.

Outlook

Scheme and network compliance in the Czech market remains a stable, EU-harmonised baseline; the more active developments to watch sit in adjacent modules -- MiCA/CASP licensing (W2) and instant-payments corridor dynamics (W5) -- rather than in interchange or card-scheme rulemaking itself.

Payment Corridor Dynamics

CERTIS, the CNB's instant-payments rail, sets a per-transaction ceiling of CZK 2,500,000 (minimum CZK 0.01), with a median inter-bank processing time of 0.5 seconds. Domestic usage is accelerating fast: CERTIS processed 40.8 million instant transactions in April 2026, up roughly 50% year-on-year. The CNB is also developing a bulk koruna instant-payments capability, for uses such as salary payments, targeted for 2026. On the cross-border corridor, non-eurozone banks including Czech banks face two distinct obligations under EU Instant Payments Regulation 2024/886 -- the ability to receive instant euro payments by 9 January 2027, and a separate, later obligation to send instant euro payments, including cross-border, by 9 July 2027. That two-stage structure is often compressed in market commentary into a single 'July 2027' deadline, a simplification operators should not rely on for compliance planning.

Outlook

The corridor to watch is CZ-EUR: receive-side readiness is due within about six months of this cycle, with send-side readiness following six months later, while the CNB's own domestic bulk-payments rollout is targeted for later this year -- three overlapping infrastructure builds landing in a compressed window.

Industry Structure & Commercial Dynamics

The Czech banking sector remains concentrated: the top four banks hold more than 60% of total sector assets of CZK 11,440 billion across 43 licensed credit institutions, as of September 2025. Alongside that concentrated core, a growing nonbank layer has emerged, comprising 23 neobank or mobile-payment entities as of November 2025 and an estimated 180-220 fintech firms overall. Financing-market structure is also evolving: PPF Group financed its takeover bid for Moneta Money Bank shares via a EUR 1.1 billion ING-led certain-funds facility, the first Czech certain-funds structured loan used for a voluntary takeover bid, though full deal parameters and status were not confirmed in available sourcing.

Outlook

The structural story is one of a concentrated, bank-dominated core coexisting with an expanding nonbank/neobank periphery; the PPF/Moneta certain-funds financing innovation is worth tracking as a template that other large Czech acquisitions may follow.

Legal & Litigation

Enforcement activity intensified this cycle across both bank and nonbank payment firms. The CNB fined Fio banka CZK 3 million in 2023 for anti-money-laundering violations and fined Expobank CZ CZK 20 million for lacking an effective managing and control system. On the nonbank side, GOPAY s.r.o. had its electronic money institution authorisation revoked on 16 April 2025, a licence originally granted on 23 November 2012 -- a finding independently confirmed through adversarial verification against the same registry source. The CNB must publish its final decisions on fines, administrative penalties and remedial measures without undue delay, including those issued under MiCA, DORA and Act No. 31/2025 Coll., giving the market a running public record of enforcement outcomes.

Outlook

Expect the CNB's published final-decisions register to keep growing as MiCA and DORA supervisory activity ramps up; the GOPAY revocation and the Fio banka/Expobank fines both signal a supervisor willing to use its full toolkit against banks and nonbanks alike rather than reserving hard enforcement for one segment.

Merchant Acquiring & Risk

GoPay and Comgate operate as CNB-authorised nonbank payment-institution and e-money-institution merchant acquiring gateways, serving Czech and wider Central European e-commerce merchants. Card scheme rules from Visa and Mastercard are incorporated by reference into Czech acquirer-merchant agreements, binding merchants automatically when schemes change chargeback windows, SCA/3DS requirements or merchant-category-code restrictions, without requiring a separate domestic rulemaking step.

Outlook

Merchant acquiring in the Czech market remains structurally stable this cycle; the point to watch is how nonbank gateways such as GoPay and Comgate absorb scheme-driven rule changes relative to bank-owned acquirers, given the automatic contractual incorporation of scheme rules described above.

Product Innovation & Market Development

The CzechInvest Fintech Regulatory Sandbox entered its main operational phase in early 2026, with 21 selected projects spanning payments, accounting, investment and crowdfunding. The CNB's Open Banking Portal supports PSD2 account-information and payment-initiation APIs aligned with the Czech Open Banking Standard maintained by the Czech Banking Association. Consumer adoption of instant, QR-code-based payments is now substantial: 31% of Czechs use them in bricks-and-mortar or online shops, with 98% satisfaction among users.

Outlook

Watch the CzechInvest sandbox's 21 projects for graduation into licensed products over the coming cycles, and expect QR-instant-payment adoption to keep climbing given the high satisfaction levels already reported, reinforcing consumer demand for the CNB's planned 2026 bulk-instant-payments capability (see W5).

Consumer Protection & APP Fraud

The Czech Republic has no standalone domestic regime mandating reimbursement for authorised-push-payment fraud victims. That gap is expected to narrow only once the EU-level PSD3/Payment Services Regulation package, politically agreed in November 2025 to introduce harmonised online-fraud protections and platform liability, is formally adopted -- a date not yet confirmed in available sourcing. In the meantime, the Ministry of Industry and Trade routes consumer complaints about unfair payment-service conduct to the relevant sectoral supervisor, such as the CNB, which may fold the complaint into its own inspection planning.

Outlook

Until the PSD3/PSR package is formally adopted at EU level and transposed domestically, Czech consumers facing APP fraud will continue to rely on the existing complaint-routing and financial-arbitrator channels described in W1b rather than a dedicated reimbursement right.

AML/CFT & Financial Crime (Sentinel.gi-fed)

This module's intelligence is sourced from the Sentinel.gi feed; WPM carries it as provenance and cross-reference rather than performing original illicit-finance analysis. The Financial Analytical Office coordinates the national ML/TF risk assessment, now in its third round, alongside CNB supervision of the financial-institution segment under Act No. 253/2008 Coll. The Czech Republic approved its first national AML/CFT Strategy for 2025-2027 under Resolution No. 1 of 28 May 2025, and a first proliferation-financing risk-assessment round is also underway. An external evaluation assessed the FAU's and CNB's fines as not sufficiently dissuasive or proportionate and flagged limited AML/CFT supervisory human resources -- a finding this brief routes to FIM for deeper illicit-finance-specific analysis rather than resolving within WPM's payments-market lens.

Outlook

For deeper analysis of Czech AML/CFT supervisory capacity, consult Sentinel.gi directly; WPM's role here is limited to flagging that the capacity-constraint findings intersect with the payments-market access questions tracked elsewhere in this brief, particularly the pace of nonbank licensing in W1a.

Correspondent Banking, Settlement & Access

CERTIS admits direct participants including banks, credit unions and cooperatives, foreign bank branches, payment institutions, foreign EU/EEA payment institutions, and electronic money institutions, all settling in central bank money under EU settlement-finality rules. This module's analytical spine is the bank/nonbank access asymmetry: banks reach TARGET2 and EURO1 through their own or parent-group networks, while nonbank access runs through CERTIS itself and now, following the W1a amendment, extends directly to PIs and EMIs. No evidence of jurisdiction-specific correspondent-banking de-risking pressure was identified for the Czech Republic in this sweep; large Czech banks access TARGET2 and EURO1 via parent-group networks, and the koruna remains fully convertible with no foreign-exchange controls -- though this absence of findings is an evidentiary gap rather than a confirmed absence of risk.

Outlook

Correspondent-banking access in the Czech Republic looks stable and low-risk on current evidence, but the finding rests on an evidentiary gap rather than a targeted de-risking assessment; a dedicated correspondent-banking-relationship review would be needed to confirm the absence of pressure with higher confidence.

Commercial Intelligence (M&A, Investment & Product)

Param completed its acquisition of Twisto, the Czech buy-now-pay-later pioneer, from Zip Co, an M&A transaction confirmed as completed though the deal value was not publicly disclosed. The combined Param/Twisto entity now serves more than 85,000 merchants across the Czech Republic, Poland, Germany and the Netherlands, continuing a broader wave of BNPL-sector consolidation across Central and Eastern Europe. Banking Circle separately announced an expansion into the Czech Republic in 2026, citing the country's digital-finance growth and evolving payments ecosystem, though the sourcing available does not confirm a formal event status or full parties breakdown for that expansion. On the funding side, Czech Republic-based startups raised $45.8 million across ten equity rounds through May 2026, down about 0.86% year-on-year from $46.2 million across 15 rounds in the same period of 2025 -- an aggregate market trend rather than a single discrete transaction.

Outlook

The Param/Twisto deal continues a steady pattern of BNPL consolidation rather than a new commercial cycle, and the modest year-on-year funding decline suggests Czech fintech commercial activity is in a maturation phase; watch for whether Banking Circle's stated expansion converts into a confirmed, dated commercial event in a future cycle.