Iceland (IS)
Lead Signal
Iceland's payments landscape enters this monitoring baseline defined by a single dominant infrastructure event: the 24 June 2026 agreement between the European Central Bank and Seðlabanki Íslands for Iceland to join TIPS, the Eurosystem's instant-payments settlement service. The agreement itself is signed and confirmed by two independent T1 sources — the ECB and the Banque de France — but its operational effect is not immediate: ISK payments are set to settle instantly in central bank money from 2028, meaning this is a forward-dated infrastructure commitment rather than a completed accession. This distinction matters because earlier framing in the underlying research characterised the milestone as a completed 2026 accession; that has been corrected in this cycle to reflect the signed-agreement-now, operational-in-2028 reality. Once live, the shift will extend Eurosystem TARGET Services central-bank-money settlement to Icelandic payment service providers for the first time, a structural change to how ISK and EUR payments clear domestically and cross-border. The lead signal sits alongside a second, closely related structural concern: the International Monetary Fund's Financial Sector Assessment Program has flagged Iceland's near-total dependency of its two major acquirers on Visa and Mastercard debit processing as a system-wide operational-resilience vulnerability with potential financial-stability implications. That concentration risk is itself a downstream consequence of the 2020-21 wave of foreign-ownership transitions that saw Iceland's three domestic card-payment companies — Borgun, Valitor and Korta — pass into the hands of Teya (formerly SaltPay) and Rapyd. The Central Bank of Iceland has voiced explicit concern about this foreign-owned card infrastructure, and it is this same concern that is driving a parallel CBI-led exploration, coordinated through the Forum for the Future group and involving the National Security Council, of an independent domestic retail payment rail as a resilience hedge. The TIPS accession and the card-network dependency question are therefore two faces of the same underlying story: Iceland is simultaneously opening a new, sovereign-controlled settlement channel while working to reduce reliance on foreign-owned card rails.
Outlook
The defining forward marker for Iceland's payments environment is the 2028 operational date for TIPS-based instant ISK settlement in central bank money, a milestone the regulatory horizon tracker places in the "in force pending" stage, with interim testing and migration steps not yet detailed in available ECB or CBI material. Watch for interim announcements on that migration path, for further movement on Iceland's exact DORA in-force date once constitutional requirements are confirmed lifted, and for any concrete steps in the CBI's exploratory work on a domestic retail payment rail, which remains the structural counterweight to continued foreign-owned card-network concentration.
Other Developments
Iceland's Digital Operational Resilience Act position has also been clarified and corrected this cycle. DORA applied EU-wide from 17 January 2025, and the EEA Joint Committee adopted the decision incorporating DORA into the EEA Agreement on 20 February 2025; the exact date on which it enters into force for Iceland depends on the country lifting outstanding constitutional requirements, and a previously circulated "1 November 2025" in-force date could not be corroborated against primary EFTA or EIOPA sources and has accordingly been removed from the baseline position. The Central Bank of Iceland remains the sole supervisor of cyber and operational risk in the financial sector, coordinating industry resilience through the CBI-led SURF forum, with core-payment-system migration work now nearly complete. On the legal and enforcement side, two matters have concluded. Iceland's Supreme Court refused Landsbankinn leave to appeal after the Court of Appeal acquitted the Borgun/Teya purchaser entities of all damages claims, closing out long-running acquiring-sector litigation with Landsbankinn ordered to pay costs. Separately, the Financial Supervisory Authority within the Central Bank fined Fossa fjárfestingarbanki ISK 22 million (approximately €153,000) on 9 May 2025 for inadequate, non-ongoing sanctions screening and other anti-money-laundering lapses — the first publicised sanctions-related enforcement action of its kind in Iceland. On market structure, the Icelandic Competition Authority's 2025 merger-clearance file confirms that acquiring is now concentrated among four players — Rapyd, Teya, Kvika-subsidiary Straumur and Landsbankinn — with Straumur alone handling roughly a quarter of Iceland's payment transactions across more than 1,700 merchants through its January 2024 partnership with Adyen. On the digital-money front, Iceland has no bespoke stablecoin statute, and MiCA remains pending incorporation into the EEA Agreement, with the EFTA Surveillance Authority still evaluating that step; in its absence, the practical basis for euro-pegged digital money in Iceland continues to be Monerium's EMI-licensed EURe token, built on the same blockchain e-money licence — the world's first of its kind, granted by Iceland's former FME in 2019 — that anchors Iceland's broader nonbank digital-money position. Consumer protection continues to rest on a split architecture: FME/CBI for financial-sector conduct, the general Consumer Agency for broader consumer legislation, and the Data Protection Authority, empowered to fine up to €20 million or 4% of turnover for payment-data mishandling. No mandatory authorised-push-payment fraud reimbursement scheme comparable to the UK's PSR regime was identified in any of this material, leaving general consumer law and the European Consumer Centres Network as the operative redress channels for cross-border disputes.
Cross-Monitor Connections
The Fossa fjárfestingarbanki sanctions-screening and AML enforcement action, and the underlying Act No. 140/2018 AML/CFT regime it sits within — supervised by the FME within the CBI, backstopped by an independent Financial Intelligence Unit within the District Prosecutor's Office, and recently upgraded on Iceland's FATF recommendation compliance — carry illicit-finance and sanctions-compliance significance that sits outside this monitor's payments-instrument scope. Those findings, sourced through the Sentinel feed rather than original WPM analysis, have been routed to the Financial Intelligence Monitor for AML/sanctions-specific follow-up; this monitor's role is limited to noting where payment-instrument regulation and enforcement intersect with that separate illicit-finance workstream, not to conducting illicit-finance analysis itself.
Legal accessibility by product
overall:Domains
14 regulatory modules · click to expand the full sub-briefLicensing, Authorisation & Market Access
ConfirmedPayment licensing and market access in Iceland is administered under Act No. 114/2021 on Payment Services, the PSD2 transposition, together with the Act on Financial Undertakings No.
Conduct, Safeguarding & Promotions
HighConduct-of-business oversight for Icelandic payment services is split across three institutions rather than concentrated in a single conduct regulator: the Financial Supervisory Authority, now folded within the Central Bank of Iceland, supervises financial-sector conduct matters, the general Consumer Agency covers broader consumer legislation, and the Data Protection Authority can fine payment-data mishandling up to €20 million or 4% of turnover.
Stablecoins & Digital Money
AssessedIceland has no bespoke stablecoin or crypto-asset statute; digital-asset activity is captured mainly through the general AML Act (No.
Operational Resilience & Critical Infrastructure
ConfirmedDORA applied EU-wide from 17 January 2025, and the EEA Joint Committee adopted the decision incorporating DORA into the EEA Agreement on 20 February 2025; Iceland's exact in-force date remains pending confirmation that outstanding constitutional requirements have been lifted, correcting an earlier, unverified '1 November 2025' date that could not be corroborated against primary EFTA or EIOPA sources.
Scheme & Network Compliance
AssessedNo Iceland-specific interchange-fee or scheme statute distinct from general EEA-applicable rules was identified; Icelandic acquirers and merchants are instead bound to PCI DSS and Visa/Mastercard scheme rulebooks contractually, through their acquiring agreements rather than through domestic legislation.
Payment Corridor Dynamics
ConfirmedIceland's principal corridor infrastructure remains SEPA for EUR credit transfers and traditional SWIFT correspondent banking for non-EUR cross-border flows, with certain foreign transactions still reportable to the Central Bank of Iceland despite the lifting of currency controls.
Full per-domain detail — all 14 modules
W1aConfirmedLicensing, Authorisation & Market Access
see this theme across all jurisdictions →5 claimsIceland regulates payment services under Act No. 114/2021 on Payment Services (PSD2 transposition) and the Act on Financial Undertakings No. 161/2002, both administered by the Central Bank of Iceland (CBI), which absorbed the former standalone Financial Supervisory Authority (FME) in 2020. EEA passporting is the dominant market-access route for foreign PSPs; domestic licensing (EMI/PI/credit institution) remains available and has produced notable precedents such as Monerium's blockchain e-money licence.
No periodic updates yet · baseline brief is current.
Read the full sub-brief
Licensing, Authorisation & Market Access
Payment licensing and market access in Iceland is administered under Act No. 114/2021 on Payment Services, the PSD2 transposition, together with the Act on Financial Undertakings No. 161/2002, both supervised by the Central Bank of Iceland since the former standalone Financial Supervisory Authority merged into the CBI in 2020. EEA passporting remains the dominant route for foreign payment service providers to access the Icelandic market, alongside domestic licensing for both bank and non-bank entities. Iceland's most notable domestic licensing precedent is Monerium EMI ehf., which received the world's first e-money licence for blockchain-based issuance from Iceland's then-standalone FME in 2019, passportable EEA-wide and to third countries subject to approval. That licence anchors a bank-versus-non-bank distinction that recurs across Iceland's payments regulatory architecture: credit institutions and payment/e-money institutions operate under the same CBI-administered licensing regime, but the practical route into Icelandic digital-money markets for non-bank entities runs through the EMI authorisation Monerium first tested.
Outlook
No change to the underlying licensing statute is expected in the near term; the module remains stable, with continued EEA passporting activity and the Monerium precedent likely to remain the reference case for future non-bank e-money licensing in Iceland.
Iceland regulates payment services under Act No. 114/2021 on Payment Services (PSD2 transposition) and the Act on Financial Undertakings No. 161/2002, both administered by the Central Bank of Iceland (CBI), which absorbed the former standalone Financial Supervisory Authority (FME) in 2020. EEA passporting is the dominant market-access route for foreign PSPs; domestic licensing (EMI/PI/credit institution) remains available and has produced notable precedents such as Monerium's blockchain e-money licence.
Evidence — 5 structured claims
Key facts
- Content Tier
- SB
- Sentinel Feed
- False
Event Findings
Sources
Case Study: Iceland World Bank Project FASTT EXP Payment Instruments [T1] World’s first e-money license for blockchains issued to Monerium img: press-emi-licence.jpg description: REYKJAVIK--Monerium ehf. has received a license from the Financial Supervisory Authority of Iceland to issue e-money on blockchains through its subsidiary, Monerium EMI ehf. The full license is the world’s first e-money license for blockchains issued under EU e-money regulations. The license is passportable within the largest global economic zone, the European Economic Area, and to external jurisdict [T3]
Conduct-of-business and safeguarding obligations for Icelandic PSPs/EMIs sit within Act 114/2021's PSD2-derived framework, supplemented by GDPR-based data-protection duties and Consumer Agency oversight of general consumer legislation, with FME/CBI supervising financial-sector-specific conduct matters.
No periodic updates yet · baseline brief is current.
Read the full sub-brief
Conduct, Safeguarding & Financial Promotions
Conduct-of-business oversight for Icelandic payment services is split across three institutions rather than concentrated in a single conduct regulator: the Financial Supervisory Authority, now folded within the Central Bank of Iceland, supervises financial-sector conduct matters, the general Consumer Agency covers broader consumer legislation, and the Data Protection Authority can fine payment-data mishandling up to €20 million or 4% of turnover. Secure customer authentication for payment services rests on Iceland's full implementation of the eIDAS Regulation 910/2014 through Act No. 55/2019, which underpins strong customer authentication infrastructure for PSD2-based services. These three strands together define the current conduct and safeguarding perimeter for both bank and non-bank payment service providers in Iceland.
Outlook
Expect continued reliance on the split FME/CBI-Consumer Agency-DPA architecture, with safeguarding-rule implementation the primary near-term conduct-compliance item to track for both bank and non-bank payment service providers.
Conduct-of-business and safeguarding obligations for Icelandic PSPs/EMIs sit within Act 114/2021's PSD2-derived framework, supplemented by GDPR-based data-protection duties and Consumer Agency oversight of general consumer legislation, with FME/CBI supervising financial-sector-specific conduct matters.
Evidence — 4 structured claims
Key facts
- Content Tier
- SB
- Sentinel Feed
- False
Event Findings
Sources
Government of Iceland | Consumer Affairs [T1] Electronic Signature Laws & Regulations - Iceland [T3]
Iceland has no bespoke domestic stablecoin statute; crypto/DLT activity is lightly regulated and captured mainly via AML law. MiCA is not yet incorporated into the EEA Agreement for Iceland, leaving the existing EMI/e-money route (illustrated by Monerium's EURe token) as the practical basis for euro-pegged digital money.
No periodic updates yet · baseline brief is current.
Read the full sub-brief
Stablecoins & Digital Money
Iceland has no bespoke stablecoin or crypto-asset statute; digital-asset activity is captured mainly through the general AML Act (No. 140/2018), and MiCA remains pending incorporation into the EEA Agreement, with the EFTA Surveillance Authority still evaluating that step. In the absence of a MiCA-equivalent regime, the practical basis for euro-pegged digital money in Iceland is Monerium's EURe token, a fully regulated e-money instrument issued by licensed EMI Monerium and described as backed 1:1 by fiat reserves, though the precise safeguarding structure — trust versus segregated account — is not detailed in available material. This EMI-based route, rather than a bespoke stablecoin licence, is what fills the gap left by MiCA's non-incorporation for Iceland.
Outlook
Watch for the EFTA Surveillance Authority's evaluation of MiCA's EEA incorporation for Iceland; until that process concludes, Monerium's EMI-based EURe token will likely remain the sole practical euro-pegged digital-money instrument available under Icelandic authorisation.
Iceland has no bespoke domestic stablecoin statute; crypto/DLT activity is lightly regulated and captured mainly via AML law. MiCA is not yet incorporated into the EEA Agreement for Iceland, leaving the existing EMI/e-money route (illustrated by Monerium's EURe token) as the practical basis for euro-pegged digital money.
Evidence — 4 structured claims
Key facts
- Content Tier
- SB
- Sentinel Feed
- False
Event Findings
Sources
EU's MiCA Crypto Regulation Takes Full Effect on July 1 | TheCCPress [T3] Markets in Crypto-Assets Regulation (MiCA) Updated Guide (2026) [T3]
W3ConfirmedOperational Resilience & Critical Infrastructure
see this theme across all jurisdictions →6 claimsCBI is sole supervisor of cyber/operational risk in Iceland's financial sector and has driven a multi-year core-payment-system migration alongside the SURF industry-coordination forum. DORA enters into force in Iceland on 1 November 2025, formalising ICT risk-management duties; the IMF has flagged acquirer dependence on Visa/Mastercard rails as a residual structural vulnerability.
No periodic updates yet · baseline brief is current.
Read the full sub-brief
Operational Resilience & Critical Infrastructure
DORA applied EU-wide from 17 January 2025, and the EEA Joint Committee adopted the decision incorporating DORA into the EEA Agreement on 20 February 2025; Iceland's exact in-force date remains pending confirmation that outstanding constitutional requirements have been lifted, correcting an earlier, unverified '1 November 2025' date that could not be corroborated against primary EFTA or EIOPA sources. The Central Bank of Iceland is the sole supervisor of cyber and operational risk in the country's financial sector, coordinating industry resilience through the CBI-led SURF forum, and core-payment-system migration work is now nearly complete. Separately, the IMF's Financial Sector Assessment Program has flagged the concentrated dependency of Iceland's two major acquirers, Teya and Rapyd, on Visa and Mastercard debit processing as a factor reducing system-wide operational resilience with potential financial-stability implications.
Outlook
The exact Iceland DORA in-force date is the key item to track pending confirmation of constitutional completion, while the card-network concentration risk flagged by the IMF is likely to keep feeding directly into the CBI's parallel exploration of a domestic retail payment rail (see W9).
CBI is sole supervisor of cyber/operational risk in Iceland's financial sector and has driven a multi-year core-payment-system migration alongside the SURF industry-coordination forum. DORA enters into force in Iceland on 1 November 2025, formalising ICT risk-management duties; the IMF has flagged acquirer dependence on Visa/Mastercard rails as a residual structural vulnerability.
Evidence — 6 structured claims
Key facts
- Content Tier
- SB
- Sentinel Feed
- False
Event Findings
Sources
No Iceland-specific interchange-fee or scheme statute distinct from general EEA-applicable rules was located; Icelandic acquirers and merchants are bound to PCI DSS and Visa/Mastercard scheme rules contractually via acquiring agreements.
No periodic updates yet · baseline brief is current.
Read the full sub-brief
Scheme & Network Compliance
No Iceland-specific interchange-fee or scheme statute distinct from general EEA-applicable rules was identified; Icelandic acquirers and merchants are instead bound to PCI DSS and Visa/Mastercard scheme rulebooks contractually, through their acquiring agreements rather than through domestic legislation. This is a genuine regulatory gap rather than a research coverage failure, reflecting Iceland's general pattern of relying on EEA-wide and scheme-level rules in place of bespoke domestic scheme statutes.
Outlook
No change to this contractual, scheme-governed arrangement is expected; any future shift would most likely arrive via EU-level interchange or scheme regulation applied through the EEA Agreement rather than a domestic Icelandic initiative.
No Iceland-specific interchange-fee or scheme statute distinct from general EEA-applicable rules was located; Icelandic acquirers and merchants are bound to PCI DSS and Visa/Mastercard scheme rules contractually via acquiring agreements.
Evidence — 2 structured claims
Key facts
- Content Tier
- D
- Sentinel Feed
- False
Event Findings
Sources
Iceland's principal corridor infrastructure is SEPA (EUR credit transfers) plus SWIFT for non-EUR cross-border flows; the standing position shifted materially in 2026 with Iceland's accession to the ECB's TIPS instant-payments system, extending Eurosystem TARGET Services to Icelandic PSPs for the first time.
No periodic updates yet · baseline brief is current.
Read the full sub-brief
Payment Corridor Dynamics
Iceland's principal corridor infrastructure remains SEPA for EUR credit transfers and traditional SWIFT correspondent banking for non-EUR cross-border flows, with certain foreign transactions still reportable to the Central Bank of Iceland despite the lifting of currency controls. On 24 June 2026 the European Central Bank and Seðlabanki Íslands signed an agreement for Iceland to join TIPS, the Eurosystem's instant-payments settlement system; ISK payments will settle instantly in central bank money as of 2028, meaning this is a signed accession agreement rather than a completed 2026 milestone. The SEPA/SWIFT corridor will continue operating in parallel through the transition period leading up to TIPS's operational go-live.
Outlook
The corridor picture will remain unchanged in practice until 2028; watch for any interim ECB or Seðlabanki Íslands announcements on testing and migration phases ahead of the TIPS go-live, alongside continued SWIFT dependency for non-EUR flows.
Iceland's principal corridor infrastructure is SEPA (EUR credit transfers) plus SWIFT for non-EUR cross-border flows; the standing position shifted materially in 2026 with Iceland's accession to the ECB's TIPS instant-payments system, extending Eurosystem TARGET Services to Icelandic PSPs for the first time.
Evidence — 4 structured claims
Key facts
- Content Tier
- SB
- Sentinel Feed
- False
Event Findings
Sources
Iceland joins TIPS for instant payments [T1] International payments - International transfers are easy - Landsbankinn.is [T3]
Iceland's financial sector is concentrated around three commercial banks and one investment bank; the acquiring/card-payments layer has passed almost entirely to foreign ownership (Teya, Rapyd) since 2020-2021, prompting explicit CBI concern, while a small but growing fintech/challenger-bank scene (indó, Kvika-affiliated Straumur) has emerged.
No periodic updates yet · baseline brief is current.
Read the full sub-brief
Industry Structure & Commercial Dynamics
Iceland's card-payments and acquiring layer has passed almost entirely into foreign ownership since 2020-21, when the country's three domestic card-payment companies, Borgun, Valitor and Korta, were sold to SaltPay (now Teya) and Rapyd, prompting explicit Central Bank of Iceland concern about foreign-owned card infrastructure. A domestic counterweight has emerged in Straumur, a subsidiary of Kvika banki, which handles roughly a quarter of Iceland's payment transactions across more than 1,700 merchants and has partnered with Adyen as its card-acquiring bank since January 2024. The structure of the sector is therefore bifurcated between foreign-owned acquiring giants and a smaller but bank-affiliated domestic processor.
Outlook
Expect the foreign-ownership structure of acquiring to remain the baseline condition, with Straumur's bank-affiliated model and any CBI-backed domestic-rail initiative (see W9) the main levers available for shifting the balance back toward domestic control.
Iceland's financial sector is concentrated around three commercial banks and one investment bank; the acquiring/card-payments layer has passed almost entirely to foreign ownership (Teya, Rapyd) since 2020-2021, prompting explicit CBI concern, while a small but growing fintech/challenger-bank scene (indó, Kvika-affiliated Straumur) has emerged.
Evidence — 6 structured claims
Key facts
- Content Tier
- SB
- Sentinel Feed
- False
Event Findings
Sources
Iceland’s Central Bank Concerned About Foreign Ownership of Card Payment Systems [T3] Iceland's Fintech Revolution - International Fintech Business [T3]
The standing enforcement/litigation position centres on the CBI's first publicised sanctions/AML fine (Fossa fjárfestingarbanki, May 2025) and the long-running Landsbankinn v. Borgun/Teya damages litigation, which concluded in 2025 with the purchaser entities fully vindicated and Landsbankinn ordered to pay costs.
No periodic updates yet · baseline brief is current.
Read the full sub-brief
Legal & Litigation
Two matters define Iceland's current payments legal and enforcement position. The Financial Supervisory Authority, within the Central Bank of Iceland, fined Fossa fjárfestingarbanki ISK 22,000,000 (approximately €153,000) on 9 May 2025 for compliance failings including inadequate, non-ongoing sanctions screening and other anti-money-laundering lapses, the first publicised sanctions-related enforcement action of its kind in Iceland. Separately, Iceland's Supreme Court refused Landsbankinn leave to appeal after the Court of Appeal acquitted the Borgun/Teya purchaser entities of all damages claims, concluding the long-running acquiring-sector litigation in 2025 with Landsbankinn ordered to pay costs.
Outlook
With the Borgun/Teya litigation now closed, the Fossa fine stands as the operative enforcement precedent; watch for whether it prompts broader sanctions-screening remediation activity across other Icelandic payment institutions.
The standing enforcement/litigation position centres on the CBI's first publicised sanctions/AML fine (Fossa fjárfestingarbanki, May 2025) and the long-running Landsbankinn v. Borgun/Teya damages litigation, which concluded in 2025 with the purchaser entities fully vindicated and Landsbankinn ordered to pay costs.
Evidence — 4 structured claims
Key facts
- Content Tier
- SB
- Sentinel Feed
- False
Event Findings
Sources
Iceland – bank fined for sanctions compliance failings – European Sanctions Enforcement [T3] Borgunarmálinu lokið og bankinn fær ekki krónu - Vísir [T3]
Merchant acquiring in Iceland is concentrated among foreign-owned Teya and Rapyd plus Kvika's Straumur subsidiary and the three commercial banks; PCI DSS and scheme chargeback/dispute rules govern day-to-day operations, while the IMF has flagged reliance on Visa/Mastercard processing as an operational-resilience risk.
No periodic updates yet · baseline brief is current.
Read the full sub-brief
Merchant Acquiring & Risk
Merchant acquiring in Iceland is concentrated among four principal competing players, Rapyd, Teya, Straumur (the Kvika banki subsidiary) and Landsbankinn, per the Icelandic Competition Authority's 2025 merger-clearance file. Day-to-day acquiring risk management operates within PCI DSS and Visa/Mastercard scheme dispute and chargeback rules rather than a bespoke domestic acquiring statute, consistent with the module's general reliance on scheme-level rather than statutory governance.
Outlook
Expect the four-player concentration confirmed by the 2025 Competition Authority clearance to persist as the market structure baseline, with any further consolidation subject to the same competition-clearance scrutiny applied in 2025.
Merchant acquiring in Iceland is concentrated among foreign-owned Teya and Rapyd plus Kvika's Straumur subsidiary and the three commercial banks; PCI DSS and scheme chargeback/dispute rules govern day-to-day operations, while the IMF has flagged reliance on Visa/Mastercard processing as an operational-resilience risk.
Evidence — 4 structured claims
Key facts
- Content Tier
- SB
- Sentinel Feed
- False
Event Findings
Sources
Borgartún 26, 125 Reykjavík www.samkeppni.is Eintak án trúnaðarupplýsinga [T3]
The dominant current product-innovation story is Iceland's 2026 TIPS/Eurosystem accession, layered on an existing PSD2 open-banking build-out (sandboxes, API partnerships) and a CBI-led push to explore an independent domestic retail payment rail as a resilience hedge against card-network dependency.
No periodic updates yet · baseline brief is current.
Read the full sub-brief
Product Innovation & Market Development
The dominant product-innovation story for Iceland is the TIPS/Eurosystem accession agreement signed with the ECB on 24 June 2026, which will let Icelandic payment service providers offer real-time ISK/EUR settlement over central-bank-money rails once operational in 2028 — a major forward capability, not yet live. Alongside that, the Central Bank of Iceland and the National Security Council, coordinated through the Forum for the Future group, are expediting work on an independent domestic retail payment system as a resilience hedge against Iceland's dependency on Visa and Mastercard card-network processing. Both strands sit on top of an existing PSD2 open-banking build-out among Icelandic banks and fintechs.
Outlook
The 2028 TIPS go-live and the domestic-rail exploratory work are the two innovation items to track most closely; both are direct responses to the card-network concentration risk identified at W3, and progress on either would materially reshape Iceland's payments product landscape.
The dominant current product-innovation story is Iceland's 2026 TIPS/Eurosystem accession, layered on an existing PSD2 open-banking build-out (sandboxes, API partnerships) and a CBI-led push to explore an independent domestic retail payment rail as a resilience hedge against card-network dependency.
Evidence — 5 structured claims
Key facts
- Content Tier
- SB
- Sentinel Feed
- False
Event Findings
Sources
Iceland: Financial Sector Assessment Program-Technical Note on Cyber and Operational Resilience, Supervision and Oversight in: IMF Staff Country Reports Volume 2023 Issue 280 (2023) [T1] Iceland joins TIPS for instant payments [T1]
Consumer protection in Icelandic payments is split between the general Consumer Agency and the FME/CBI's financial-sector-specific oversight, with EEA-wide ECC-Net support for cross-border disputes; no dedicated mandatory APP-fraud reimbursement scheme comparable to the UK's was identified after search of CBI/FME consumer-facing material.
No periodic updates yet · baseline brief is current.
Read the full sub-brief
Consumer Protection & APP Fraud
No mandatory authorised-push-payment fraud reimbursement rule comparable to the UK's Payment Systems Regulator regime was identified in Central Bank of Iceland, Financial Supervisory Authority, or Consumer Agency material; redress instead relies on general consumer law together with European Consumer Centres Network support for cross-border disputes. This is treated as a genuine, confirmed regulatory gap rather than a research coverage failure, following a direct and specific search of the relevant consumer-protection sources.
Outlook
Absent a dedicated APP-fraud reimbursement scheme, Icelandic consumers facing push-payment fraud will continue to depend on general consumer-protection law and cross-border ECC-Net assistance; watch for any EU-level APP-fraud harmonisation initiative that could eventually extend into the EEA Agreement.
Consumer protection in Icelandic payments is split between the general Consumer Agency and the FME/CBI's financial-sector-specific oversight, with EEA-wide ECC-Net support for cross-border disputes; no dedicated mandatory APP-fraud reimbursement scheme comparable to the UK's was identified after search of CBI/FME consumer-facing material.
Evidence — 4 structured claims
Key facts
- Content Tier
- SB
- Sentinel Feed
- False
Event Findings
Sources
Assistance outside the EU, Norway or Iceland | European Consumer Centers Network [T3]
Sentinel.gi payments-context position: Iceland's AML/CFT regime rests on Act No. 140/2018 (5AMLD transposition), supervised for financial/payment/e-money institutions by the FSA within the CBI, with an independent FIU, and a recent FATF-recognised compliance upgrade; the FSA's May 2025 fine against Fossa fjárfestingarbanki is the most recent notable payments-context enforcement action.
No periodic updates yet · baseline brief is current.
Read the full sub-brief
AML/CFT & Financial Crime
This module is sourced from the Sentinel.gi feed and reflects payments-context AML/CFT intelligence rather than original illicit-finance analysis. Iceland's AML/CFT regime rests on Act No. 140/2018, transposing the 5AMLD framework, with the Financial Supervisory Authority within the Central Bank of Iceland supervising financial institutions, payment institutions and e-money institutions for compliance, an independent Financial Intelligence Unit sitting within the District Prosecutor's Office, and Iceland having recently been upgraded on its FATF 14-recommendation compliance assessment. The most recent notable payments-context enforcement action is the Financial Supervisory Authority's May 2025 fine against Fossa fjárfestingarbanki for sanctions-screening and AML lapses. For illicit-finance-specific analysis of this enforcement action and the wider AML/CFT regime, readers should consult the Sentinel.gi feed directly.
Outlook
Further payments-context AML/CFT developments will continue to be tracked via the Sentinel.gi feed; this module will report supervisory and enforcement structure as it bears on payment institutions without conducting independent illicit-finance analysis.
Sentinel.gi payments-context position: Iceland's AML/CFT regime rests on Act No. 140/2018 (5AMLD transposition), supervised for financial/payment/e-money institutions by the FSA within the CBI, with an independent FIU, and a recent FATF-recognised compliance upgrade; the FSA's May 2025 fine against Fossa fjárfestingarbanki is the most recent notable payments-context enforcement action.
Evidence — 6 structured claims
Key facts
- Content Tier
- SB
- Sentinel Feed
- True
Event Findings
Sources
Government of Iceland | Anti-Money laundering and Terrorist-Financing [T1] Iceland – bank fined for sanctions compliance failings – European Sanctions Enforcement [T3]
W12ConfirmedCorrespondent Banking, Settlement & Access
see this theme across all jurisdictions →5 claimsCBI operates Iceland's RTGS/interbank settlement system under an explicit statutory mandate, Nasdaq CSD provides CSDR-licensed securities settlement with ISK legs settling in CBI's RTGS and EUR legs integrated into pan-European T2S, and Iceland's 2026 TIPS accession newly extends Eurosystem central-bank-money settlement access to Icelandic PSPs; non-SEPA cross-border access still relies on SWIFT correspondent banking.
No periodic updates yet · baseline brief is current.
Read the full sub-brief
Correspondent Banking, Settlement & Access
The bank-versus-non-bank access asymmetry is the analytical spine of this module: the Central Bank of Iceland operates an explicit statutory mandate for the country's RTGS settlement system, and Nasdaq CSD settles ISK securities legs via that RTGS while EUR legs are integrated into the pan-European T2S platform. Non-EUR cross-border access for Icelandic banks continues to run through traditional SWIFT correspondent banking, with certain foreign transactions still reportable to the Central Bank despite the lifting of currency controls — a channel available to bank correspondents in a way that is not directly replicated for non-bank payment institutions. The 24 June 2026 ECB-Seðlabanki Íslands TIPS agreement will, once operational in 2028, newly extend Eurosystem TARGET Services central-bank-money settlement access to Icelandic payment service providers, correcting an earlier overstated framing of this as a completed 2026 accession.
Outlook
The 2028 extension of Eurosystem central-bank-money settlement access is the key structural development to track for this module; until then, the existing RTGS/Nasdaq CSD/SWIFT settlement architecture, with its embedded bank-access advantage, remains unchanged.
CBI operates Iceland's RTGS/interbank settlement system under an explicit statutory mandate, Nasdaq CSD provides CSDR-licensed securities settlement with ISK legs settling in CBI's RTGS and EUR legs integrated into pan-European T2S, and Iceland's 2026 TIPS accession newly extends Eurosystem central-bank-money settlement access to Icelandic PSPs; non-SEPA cross-border access still relies on SWIFT correspondent banking.
Evidence — 5 structured claims
Key facts
- Content Tier
- SB
- Sentinel Feed
- False
Event Findings
Sources
Case Study: Iceland World Bank Project FASTT EXP Payment Instruments [T1] Iceland joins TIPS for instant payments | Banque de France [T1]
W13ConfirmedCommercial Intelligence (M&A, Investment & Product)
see this theme across all jurisdictions →1 claimWithin the trailing 12-month baseline window (2025-07-04 to 2026-07-04), the standout commercial/infrastructure event is Iceland's formal accession to the ECB's TIPS instant-payments system; no other material M&A or funding events specific to Icelandic payments were confirmed within the window after search.
No periodic updates yet · baseline brief is current.
Read the full sub-brief
Commercial Intelligence (M&A, Investment & Product)
The standout commercial/infrastructure event in the trailing 12-month baseline window is the TIPS accession agreement between Seðlabanki Íslands and the European Central Bank, announced 24 June 2026, categorised here as a product/rail-access release rather than an M&A transaction: the parties are Seðlabanki Íslands and the European Central Bank, the event is a rail-category product release with launch jurisdiction Iceland, and financial terms are not applicable since this is an infrastructure-access agreement rather than a disclosed-value deal. No other material Icelandic payments M&A or funding event was confirmed within the trailing 12-month window; the nearest comparable events — the Rapyd/Síminn Pay competition clearance and the Borgun/Teya Supreme Court ruling — fall just outside the window and are treated instead under W7 and W8.
Outlook
The TIPS agreement's 2028 operational milestone remains the commercial event to track most closely for Iceland; absent a new disclosed transaction, no further W13-specific commercial events are expected before the next monitoring cycle.
Within the trailing 12-month baseline window (2025-07-04 to 2026-07-04), the standout commercial/infrastructure event is Iceland's formal accession to the ECB's TIPS instant-payments system; no other material M&A or funding events specific to Icelandic payments were confirmed within the window after search.
Evidence — 1 structured claim
Key facts
- Content Tier
- D
- Sentinel Feed
- False