Ireland (IE)

Licensing, Authorisation & Market Access

Ireland operates a single-authority licensing architecture for payments and e-money firms. The Central Bank of Ireland is the competent authority for the authorisation and registration of payment institutions, e-money institutions, account information service providers and small EMIs under the European Union (Payment Services) Regulations 2018 (S.I. 6/2018, transposing PSD2) and the European Communities (Electronic Money) Regulations 2011 (S.I. 183/2011, EMD2); it applies the EBA authorisation and registration guidelines and charges no application fee. This positions the CBI as the gatekeeper to the EU market for any non-bank PI or EMI seeking access via Ireland, since CBI authorisation confers EU passporting rights.

The regime is distinctive in its full-scope character. The CBI does not offer a Small Payment Institution licence of the more limited kind available in some other EU member states, making Ireland's PI regime relatively full-scope; firms cannot use a lighter-touch route and must instead pursue full authorisation. As of 31 October 2021 Ireland had more than 40 authorised e-money and payment services firms, with EMIs and PIs able to passport across the EU under freedom of services and establishment. The reward for the heavier authorisation lift is EU-wide market access. This standing position carries the bank-PSP versus non-bank-PI/EMI distinction explicitly: the licensing framework here governs the non-bank PI/EMI route to market, while credit institutions follow the separate banking-authorisation track. The absence of a Small PI option is a structural feature that underpins Ireland's post-Brexit hub status, drawing firms that need a full-scope EU base rather than a constrained national footprint.

Outlook

The licensing trajectory is established and stable: the CBI's role as single competent authority and the full-scope, no-Small-PI design are durable structural features rather than moving targets. The forward pressure on licensed firms comes not from the authorisation gate itself but from the conduct, resilience and AML obligations layered on top of it, addressed in the W1b, W3 and W11 modules. Firms hubbing in Ireland should expect the authorisation bar to remain demanding and the passporting reward to remain the central commercial rationale for choosing the jurisdiction.

Conduct, Safeguarding & Promotions

Conduct and safeguarding obligations are the live regulatory frontier for Ireland's non-bank PIs and EMIs. Irish PIs and EMIs must safeguard consumer funds either by segregation in a separate account with an EEA-authorised bank or by coverage under an insurance or guarantee policy, per PSD2 and EMD2 as implemented through the Central Bank (Supervision and Enforcement) Act 2013, the PSR 2018 and the EMR 2011; safeguarding is a CBI key priority. The safeguarding model directly affects customer-fund protection and operating cost for IE-licensed PIs and EMIs, and it falls squarely on the non-bank PI/EMI population rather than on bank PSPs, which hold customer funds on balance sheet under separate prudential rules.

The dominant forward-dated item is the Consumer Protection Code 2025, which comes into effect on 24 March 2026 (published 24 March 2025), representing domestic gold-plating of consumer protection with cross-sectoral requirements against financial abuse, fraud and scams, and protections for vulnerable consumers; it is underpinned by S.I. 81/2025, and the corporate consumer threshold is raised to EUR 5m turnover from EUR 3m. All regulated firms, including payments firms, must implement the enhanced conduct, vulnerability and fraud requirements by that date. Because the Code applies cross-sectorally, it reaches both bank PSPs and non-bank PIs/EMIs, distinguishing it from the safeguarding obligation that is specific to the non-bank population.

Outlook

The conduct trajectory is escalating. The Consumer Protection Code 2025 is the defining near-term implementation deadline, with a hard in-force date of 24 March 2026 that requires firms to have remediated conduct, vulnerability and anti-fraud processes ahead of supervision. Safeguarding will remain a stated CBI priority, keeping the segregation-or-insurance model and its cost implications under active supervisory attention for non-bank firms. The combination signals a jurisdiction intensifying its conduct expectations even as the underlying licensing architecture stays stable.

Stablecoins & Digital Money

Ireland has positioned itself as a MiCA authorisation hub under a demanding national posture. The Central Bank of Ireland is the national competent authority under MiCA, transposed via the European Union (Markets in Crypto-Assets) Regulations 2024 (S.I. 607/2024) per MiCA Articles 60-62; the ART and EMT rules applied from 30 June 2024 and full CASP authorisation from 30 December 2024. Stablecoins are classified as EMTs or ARTs and are not legal tender; EMT issuers must be credit institutions or EMIs holding reserves, with redemption-at-par, disclosure and six-monthly reserve-audit obligations. This defines the stablecoin issuance and CASP authorisation route for firms hubbing EU crypto operations in Dublin, and it spans both bank and non-bank issuers depending on the EMT/ART structure.

The national discretion exercised in Ireland is stricter than in several peer member states. Ireland reduced the MiCA CASP transition to 12 months and did not grant existing VASPs a simplified-authorisation route, deeming the VASP regime not comparable to MiCA; the CBI applies a high authorisation threshold and is highly sceptical of CASP models marketing unbacked crypto-assets to retail for speculation. The shorter transition compresses the runway for incumbent VASPs and signals a high CBI authorisation bar relative to other EU NCAs.

As a dated illustration of hub status, Kraken secured a MiCA licence via the Central Bank of Ireland, with passporting activating once the CBI uploads the authorisation to ESMA's central register — a concrete demonstration of Ireland attracting major CASP authorisations.

Outlook

The stablecoin trajectory is established but escalating in supervisory intensity. The combination of a 12-month transition, no VASP grandfathering and overt CBI scepticism of speculative retail crypto models points to a continuing high authorisation bar. Dublin's attraction of major CASP authorisations such as Kraken suggests the hub positioning will persist, but firms should expect the authorisation process itself to remain rigorous, with EMT issuers held to credit-institution or EMI reserve and redemption standards.

Legal & Litigation

The landmark enforcement event of the cycle defines this module. The Central Bank of Ireland fined Coinbase Europe Limited EUR 21,464,734 on 6 November 2025 — a EUR 30,663,906 penalty with a 30% settlement discount — for breaching AML/CTF transaction-monitoring obligations under the CJA 2010 between 2021 and 2025, including failing to fully monitor over 30 million transactions, subject to Irish High Court confirmation. This is the first major CASP AML enforcement action via the CBI's Administrative Sanctions Procedure and signals a high supervisory bar and material litigation and penalty exposure for crypto-payments firms operating as non-bank entities in Ireland. The underlying illicit-finance conduct is routed to FIM; the World Payments Monitor carries only the enforcement and legal fact here.

The enforcement firepower behind that action is substantial. The CBI's Administrative Sanctions Procedure empowers fines up to EUR 10 million or 10% of turnover for firms and EUR 1 million for individuals; notable historic fines include Bank of Ireland's EUR 24.5 million in November 2021 for IT service-continuity and internal-control breaches. The CBI issued its first Financial Crime Bulletin in late 2025, flagging weak sanctions-screening — just under half of 40 assessed firms lacked transaction-screening — and sanctioned non-EU bank cards at EU ATMs. This quantifies the supervisory firepower and the sanctions-screening focus relevant to payments firms across both bank and non-bank populations.

Outlook

The litigation and enforcement trajectory is escalating. The Coinbase Europe fine, pending High Court confirmation, sets a precedent for CASP AML enforcement and signals the CBI's willingness to deploy its full ASP firepower. The first Financial Crime Bulletin's findings on sanctions-screening weakness suggest further supervisory attention on transaction-screening adequacy. Payments firms should anticipate continued, well-resourced enforcement activity and treat the EUR 10m / 10%-of-turnover ceiling as a live exposure.

Correspondent Banking, Settlement & Access

The analytical spine of this module is the bank versus non-bank access asymmetry, which is now shifting in non-bank firms' favour. Ireland runs euro settlement through the Eurosystem's TARGET Services: T2 (RTGS, which replaced TARGET2 on 20 March 2023) for large-value, T2S for securities and TIPS for instant settlement; the CBI operates the Irish component and provides participants access, settling in central bank money. EURO1 (EBA CLEARING), a Systemically Important Payment System, is the principal private large-value net-settlement system, ultimately settling in T2. Historically this central-bank-money settlement layer was the preserve of banks, with non-bank PSPs dependent on bank sponsorship for indirect access.

That asymmetry has been structurally narrowed. Non-bank PSPs (PIs and EMIs) in Ireland gained TARGET access from October 2025, under the IPR's amendments to PSD2 and the Settlement Finality Directive making non-bank PSPs eligible to participate in designated payment systems; those meeting TARGET Guideline requirements can access TARGET Services including T2, broadening settlement access for Irish non-bank PSPs. Direct TARGET and T2 access for non-bank PSPs reduces dependency on bank sponsorship and reshapes settlement economics — the core analytical development for the module this cycle.

Outlook

The settlement-access trajectory is escalating. The October 2025 grant of direct TARGET and T2 access to qualifying non-bank PSPs is a structural change that narrows the long-standing bank versus non-bank asymmetry and reduces dependence on bank sponsorship. Ireland's reliance on Eurosystem central-bank-money settlement and the SIPS-designated EURO1 net-settlement layer remains the durable backbone. The forward question is how many Irish non-bank PSPs meet the TARGET Guideline requirements and convert eligibility into direct participation.

Commercial Intelligence

Ireland's commercial-payments momentum is captured in two discrete events this cycle. On the investment side, the Irish fintech sector attracted $259.38 million in deals in 2025, up 9% year-on-year per the KPMG Pulse of Fintech H2'25, with 7 fintech acquisitions in 2025 versus 5 in 2024; the largest deal was Teybridge Capital Europe at $58.61m in trade finance, payment software firm NomuPay raised $77m across two deals at growth stage, and Dublin-based Wayflyer raised $35m for revenue-based financing. This quantifies the jurisdiction's deal and investment momentum as a commercial-significance signal for market structure.

The flagship M&A and valuation event is Stripe. Stripe was valued at more than $159 billion following a February 2026 tender offer, up from approximately $91.5bn in 2025; it acquired Privy, with more than 110 million programmable wallets, and Metronome, and expanded stablecoin integration having acquired Bridge in 2025, focusing on stablecoins and agentic AI in commerce. The Privy and Metronome acquisitions, whose transaction values are not publicly disclosed, build out programmable-wallet and billing capability as part of a stablecoin and agentic-AI commerce expansion. Stripe's valuation and stablecoin and wallet M&A signal the commercial heft of Ireland's flagship payments firm and the sector's stablecoin direction of travel. The stablecoin illicit-finance dimension of the Bridge integration is routed to FIM, and the agentic-AI angle may warrant AI-governance routing; the World Payments record carries the commercial event only.

Outlook

The commercial-intelligence trajectory is established and, at the firm level, escalating. The recovering deal market — $259.38m across 2025 with seven acquisitions — and Stripe's $159bn February-2026 valuation point to a strengthening commercial centre of gravity around Dublin's flagship firms. Stablecoin and programmable-wallet M&A signal the strategic direction. A standing limitation is private-company signal opacity: several events, including the Stripe acquisitions of Privy and Metronome, have undisclosed transaction values, constraining the precision of commercial-significance assessment.

Operational Resilience & Critical Infra

Operational resilience in Ireland is now governed by a harmonised EU framework actively supervised by the CBI. The Digital Operational Resilience Act (Regulation (EU) 2022/2554) has applied in Ireland under Central Bank of Ireland supervision since 17 January 2025, covering ICT risk management, harmonised incident classification and reporting, resilience testing and critical ICT third-party oversight, for in-scope firms including credit institutions, investment firms, CASPs, PIs and EMIs. DORA imposes uniform ICT and resilience obligations across the entire in-scope payments population — both bank PSPs and non-bank PIs/EMIs — and its critical third-party provider oversight reshapes how firms manage outsourced technology dependencies.

The domestic guidance landscape has been reorganised around DORA. The CBI revised its 2021 Cross-Industry Operational Resilience Guidance in 2025 to align with DORA and withdrew its 2016 cross-industry IT and cybersecurity guidance, as DORA now sets the harmonised good-practice minimum; operational resilience and DORA implementation is a key CBI supervisory priority for 2025/26. The effect is that CBI domestic guidance is now subordinated to the EU regime, with the supervisor treating resilience as an active focus area rather than a settled baseline.

Outlook

The resilience trajectory is established. With DORA live and the CBI having realigned its own guidance, the framework is in steady-state application, but resilience remains a stated 2025/26 supervisory priority, meaning firms should expect continued supervisory engagement on ICT risk management, incident reporting and critical third-party oversight. The principal forward dimension is enforcement and testing intensity rather than further rule change.

Scheme & Network Compliance

Ireland's card and scheme economics are set by EU-level and scheme-global rules. Ireland is bound by the EU Interchange Fee Regulation caps on Visa and Mastercard interchange, by PCI DSS as maintained by the PCI SSC, and by the SEPA scheme rulebooks of the European Payments Council. The IFR's 2015 interchange caps contributed to the phase-out of several European national card schemes, and Ireland has no surviving national card scheme — leaving the international networks and SEPA framework as the structural basis of Irish card and A2A payment economics. These rules apply across both bank and non-bank participants in the card value chain.

Scheme-global compliance pressure is tightening on Irish acquirers. Visa's consolidated Acquirer Monitoring Program (VAMP) carries new thresholds taking effect across 2025-2026, and PCI DSS v4.0.1 future-dated requirements became effective on 31 March 2025. Ireland's acquiring market is dominated by fintech acquirers such as Stripe and Adyen alongside traditional banks, with high contactless adoption; these scheme rules bear most directly on the non-bank acquirer population that intermediates merchant card acceptance. VAMP and PCI v4.0.1 together raise the compliance burden on Irish acquirers and pass downstream to merchants.

Outlook

The scheme-compliance trajectory is broadly stable at the regulatory layer — IFR caps and SEPA rulebooks are durable — but escalating at the scheme-rule layer, where VAMP thresholds tighten through 2026 and PCI DSS v4.0.1 raises the technical bar. With no national card scheme to provide an alternative, Irish card economics will continue to track Visa, Mastercard and SEPA rule evolution, concentrating compliance attention on the fintech acquirers that dominate the market. The detailed enforcement mechanics of VAMP are carried in W8.

Payment Corridor Dynamics

The central corridor development is the EU Instant Payments Regulation. Regulation (EU) 2024/886 mandates that euro-area PSPs offering euro credit transfers must also offer instant credit transfers — receive from 9 January 2025 and send from 9 October 2025 — with charges capped at no higher than ordinary transfers, daily sanctions screening and a Verification of Payee service; non-bank PSPs (PIs and EMIs) gained TARGET access from October 2025. Ireland settles SCT Inst primarily on EBA CLEARING's RT1 and on TIPS, with no separate Irish clearing house, and the CBI is the lead national enforcer. The IPR forces universal instant euro capability and VoP and sanctions screening onto IE PSPs, reshaping the core account-to-account rails for both bank and non-bank firms.

The principal non-euro corridor is the UK link. The Ireland-UK payment corridor requires FX and faces Brexit-related cross-border friction; Ireland is in the SEPA euro zone but its strong ties to the UK in sterling, post-Brexit, require frequent currency conversion — in 2021 the UK accounted for 11% of Irish exports and 19% of imports. This makes the UK FX corridor Ireland's most material non-euro flow and a structural source of conversion cost and friction.

Outlook

The corridor trajectory is escalating, driven by the now-live IPR send-mandate that universalises instant euro capability and embeds Verification of Payee and sanctions screening as standing operational requirements. The intra-EEA SEPA corridor settling on RT1 and TIPS is the principal euro flow, while the UK FX corridor remains the material non-euro vector with persistent post-Brexit conversion friction. Firms should expect instant-payment economics and VoP obligations to be the dominant corridor-level pressure going forward.

Industry Structure & Commercial

Ireland is a post-Brexit EU payments and fintech hub with a deep institutional base. It combines a deep base of CBI-authorised EMIs and PIs mixing incumbents such as Bank of Ireland and AIB with global infrastructure players including Stripe, Wise, Circle and Square and homegrown firms such as Fenergo, TransferMate, Wayflyer, Fire Financial Services and Humm; the Banking & Payments Federation Ireland, with its affiliates FIBI and FPAI, represents more than 120 institutions. This establishes the competitive landscape and the concentration of EU payments infrastructure in Dublin, spanning both bank and non-bank participants.

The market is being actively steered by policy. The National Payments Strategy launched on 15 October 2024, addressing cash, payment resilience, fraud and the future of payments; the Department of Finance was to provide the CBI with orderly-wind-down and liquidation powers for payment firms, with recommendations by end-June 2025. The CBI is also increasing scrutiny of point-of-sale BNPL lending and is expected to bring BNPL under formal credit rules. The new liquidation powers change firm-exit dynamics, and the looming BNPL formalisation signals tighter treatment of embedded-credit models. The structural M&A and investment events themselves are carried in W13; this module covers the market-structure frame within which they occur.

Outlook

The industry-structure trajectory is stable in its concentration of EU infrastructure in Dublin but active at the policy layer. The National Payments Strategy will continue to steer market development, the new CBI liquidation powers reshape how distressed payment firms exit, and BNPL formalisation under formal credit rules looms as a discrete tightening. The hub's competitive depth — incumbents alongside global infrastructure and homegrown firms — is a durable structural feature.

Merchant Acquiring & Risk

Scheme-level merchant-risk enforcement has tightened materially. Visa's VAMP enforcement started for acquirers on 1 October 2025, consolidating older dispute and fraud programs into a single VAMP ratio — total disputes divided by total card-not-present sales — applied directly to acquirers who pass the pressure to merchants; the VAMP excessive-merchant threshold dropped from 220 to 150 basis points, and Mastercard's Excessive Chargeback Program monitors merchants over consecutive months. These rules bind Irish acquirers such as Stripe and Adyen and the merchants downstream of them, raising chargeback-management cost and high-risk-merchant scrutiny across the non-bank acquirer population.

The cardholder-recourse framework operates through voluntary scheme procedures. The Irish cardholder chargeback framework operates via voluntary Visa and Mastercard scheme procedures in card operating contracts allowing chargebacks for non-delivery and lack of conformity, with filing windows typically 120 to 180 days and a 14-day merchant response window before automatic refund; acquirers apply higher due diligence to high-risk verticals such as travel, gaming, forex, crypto and international e-commerce. This defines cardholder recourse windows and acquirer high-risk underwriting practice in Ireland. Quantitative operational metrics — chargeback ratios by merchant category, acquirer reserve and stress data, and high-risk-MCC volume share — are not evidenced beyond these qualitative scheme-rule descriptions, an acknowledged under-indexed area for the jurisdiction.

Outlook

The merchant-acquiring trajectory is escalating. The October 2025 VAMP enforcement start and the threshold drop from 220 to 150 basis points, combined with Mastercard's Excessive Chargeback Program, raise the compliance and chargeback-management burden on the fintech acquirers that dominate Irish acquiring. High-risk verticals will continue to attract heightened underwriting scrutiny. The principal intelligence gap is quantitative operational depth, which remains under-indexed for Ireland.

Product Innovation & Market Development

The CBI is engaging payments innovation through a structured sandbox. The Central Bank of Ireland Innovation Sandbox Programme runs its second cohort themed 'Innovation in Payments', announced on 23 September 2025, a six-month programme beginning January 2026 with applications closed on 10 November 2025, intended to foster safer, faster, greener and more inclusive payments and to give the CBI early insight into emerging risks. The sandbox signals supervisory engagement with payments innovation and offers fintechs — bank and non-bank alike — a route to test products under regulatory observation.

The most consequential long-run product-access development is the digital euro. The digital euro project moved to its next phase on 30 October 2025, following an ECB Governing Council decision, with a possible pilot exercise from 2027 and possible first issuance in 2029, assuming co-legislators adopt the digital euro Regulation; the CBI participates as part of the Eurosystem. Digital euro progression carries long-run distribution and intermediation implications for Irish PSPs and banks, even though issuance remains several years out and contingent on the legislative process.

Outlook

The product-innovation trajectory is established and engaged. The Innovation-in-Payments sandbox running from January 2026 provides an active channel for supervisory engagement with new payment products. The digital euro is the dominant horizon item, with its phased path — possible pilot from 2027 and possible first issuance in 2029 — making it a long-run strategic variable for Irish PSPs rather than a near-term operational change. Firms should track the co-legislative process on the digital euro Regulation as the gating factor for that timeline.

Consumer Protection & APP Fraud

Ireland's approach to authorised push payment fraud diverges sharply from the UK. Ireland has no mandatory reimbursement scheme, unlike the UK, where the PSR introduced mandatory APP reimbursement from 7 October 2024; APP losses of around EUR 9.9m in 2022 are addressed via CBI Consumer Protection Outlook expectations and a whole-of-system National Payments Strategy approach, with a legislated shared fraud database to be developed by BPFI and the Department of Justice to legislate, and cross-sectoral cooperation extended to online platforms, telcos and their regulators. The absence of a mandatory reimbursement obligation materially differentiates Ireland's consumer-protection liability exposure from the UK's, affecting both bank and non-bank PSPs that hold consumer accounts.

Rather than imposing a reimbursement liability on PSPs, Ireland's model leans on system-wide coordination and a shared fraud database, drawing in non-financial actors such as platforms and telecommunications providers. This is a structurally lighter cardholder-recourse posture than the UK PSR regime, placing the emphasis on prevention and cross-sectoral data-sharing rather than on a backstop reimbursement guarantee.

Outlook

The consumer-protection and APP-fraud trajectory is escalating in policy activity even without a mandatory reimbursement scheme. The legislated BPFI-developed shared fraud database and the whole-of-system National Payments Strategy approach are the principal developments to watch, alongside the cross-sectoral extension to platforms and telcos. Ireland's continued divergence from the UK mandatory-reimbursement model is itself a standing feature that materially shapes liability exposure for Irish PSPs, and the Consumer Protection Code 2025's anti-fraud requirements (W1b) reinforce the prevention-led posture.

AML/CFT & Financial Crime

This module is carried from the Sentinel feed; the World Payments Monitor records only the payments-context AML position and does not re-analyse illicit finance, which is FIM-owned. Per the Sentinel feed, Ireland's AML/CFT regime is governed by the Criminal Justice (Money Laundering and Terrorist Financing) Act 2010 (as amended, CJA 2010), with the CBI as competent authority for credit and financial institutions including VASPs and CASPs; the recast Funds Transfer Regulation extends obligations to certain CASPs, effective December 2024, and Ireland implemented the recast travel rule via S.I. 389/2025, made 1 August 2025. This AML base instrument and travel-rule transposition define the financial-crime compliance baseline for Irish payments and CASP firms, spanning both bank and non-bank populations. Source: Sentinel (sentinel://gov.ie/department-of-finance/aml-cft).

The forward shift is the EU AML package. Per the Sentinel feed, the directly-applicable AML Regulation (AMLR) applies in all member states from 10 July 2027 with no national opt-outs, largely replacing the CJA 2010 for payments and crypto firms; AMLA in Frankfurt commenced operations on 1 July 2025, and former CBI Deputy Governor Derville Rowland was appointed to AMLA's Executive Board in May 2025. The AMLR harmonisation and AMLA central supervision will reshape AML compliance for Irish payments firms, with an Irish presence on the AMLA board. Source: Sentinel (sentinel://kpmg.ie/aml-amla-readiness).

Outlook

The AML/CFT trajectory is escalating. The CJA 2010 base plus the S.I. 389/2025 travel rule are the current standing position, while the AMLR binding Irish obliged entities from 10 July 2027 and AMLA's central supervision from 1 July 2025 are the major forward changes. Because this module is Sentinel-fed, original illicit-finance analysis — including FATF mutual-evaluation depth and bank-versus-non-bank supervision detail — is out of World Payments scope and routed to FIM; the record here is provenance-limited to the payments context.