Morocco (MA)

Licensing, Authorisation & Market Access

Morocco operates a bespoke, non-EMI/non-PSD licensing framework anchored in Banking Law 103-12 (Dahir 1-14-193, 24 December 2014). The law creates a non-bank 'établissement de paiement' (payment institution) category authorised to hold payment accounts and provide payment services, sitting alongside e-money institutions. Licences are granted by the Bank Al-Maghrib (BAM) Governor following an opinion from the Credit Institutions Committee within a 120-day window under Circular 5/W/15. Two primary BAM sources anchor the regime, and foreign PSPs require either a local licence or a domestic partnership to operate. The framework establishes the market-access route for any non-bank PSP seeking to operate in Morocco, and the entry economics are shaped by both a capital floor and a multi-month processing horizon.

The distinction between bank-PSPs and non-bank PI/EMI entrants is central to this module. Payment institutions and EMIs require minimum capital assessed at MAD 3 million under the direct licensing pathway, with EMIs additionally authorised to issue e-money, and BAM processing typically taking 6-12 months. The capital floor is the primary entry-cost determinant for fintech challengers. This figure is held at Assessed rather than Confirmed confidence: a November 2025 same-firm source cites MAD 5 million while a December 2025 guide reaffirms MAD 3 million for the direct route, and the threshold may vary by licensing route pending verification against BAM circulars. The non-bank PI/EMI route is the structural gateway through which the market's new challenger layer is entering.

The live market-access milestone is the first VC-backed payment-institution licence, granted to Chari on 15 October 2025 — a precedent for fintech market access under the 103-12 regime.

Outlook

The licensing pathway is liberalising, with the December 2025 fintech project-holder guide formalising the route and the Chari precedent signalling regulator receptiveness to VC-backed non-bank entrants. The unresolved MAD 3m/5m capital ambiguity should be settled against a BAM primary circular before the capital floor can be treated as confirmed for entry-planning purposes.

Legal & Litigation

The landmark payments-sector enforcement matter is the Competition Council's Decision No. 152/D/2024 against CMI, triggered by a complaint from NAPS SA. The decision found CMI's all-in-one acquiring/processing model anti-competitive under Law 104-12 and Law 20-13, imposing binding commitments to dismantle its merchant-acquiring monopoly and to become a 'neutral technical platform'. From 1 November 2024 CMI could no longer sign new contracts. On 27 October 2025 the deadlines were extended: other merchant contracts must transfer by 31 January 2026 and government contracts by 30 April 2026, with daily penalties for non-compliance. CMI is the respondent and NAPS SA the complainant. The matter rests on a tier-2 Competition Council activity report plus corroborating sources and is Confirmed.

This decision opens Morocco's entire merchant-acquiring market to competing payment institutions — it is the single most consequential structural event for payments operators in the jurisdiction, restructuring the entire acquiring market rather than merely sanctioning a single firm.

Outlook

The near-term litigation horizon is dominated by the contract-transfer deadlines: non-government merchant contracts by 31 January 2026 and government contracts by 30 April 2026, with daily penalties driving compliance. The decision's enforcement trajectory is escalating, and its downstream effects on the acquiring market are tracked under W8.

Commercial Intelligence (M&A, Investment & Product)

Three discrete commercial events define the current W13 surface, all involving non-bank PI/EMI players. First, an investment milestone: on 15 October 2025 Bank Al-Maghrib granted its first payment-institution licence to a VC-backed startup, Chari, which simultaneously closed a record $12 million Series A — the largest funding round in Moroccan startup history, with total raised of roughly $17m. This completed investment event (Chari, series A, $12m disclosed) sets a precedent for fintech market access and signals investor confidence in Moroccan payments.

Second, an M&A event: ORA Technologies closed a $7.5m Series A in July 2025 (total roughly $11.9m) and in November 2025 acquired e-commerce logistics player Cathedis with Azur Innovation Fund — the first Moroccan startup consolidation financed entirely with local capital. This completed acquisition (ORA Technologies acquiring Cathedis) has a deal value that is not publicly disclosed, and signals maturing domestic capital markets for Moroccan fintech.

Third, a pending M&A event: in February 2026 AfricInvest's evergreen FIVE fund moved to acquire joint control of licensed payment institution VPS (brands Payzone/Payexpress, founded 2014), sharing control with Equity Invest SA. The Competition Council opened a comment window closing 16 February 2026 under Law 104-12. The deal value is not publicly disclosed, and the transaction is pending regulatory clearance via the comment window. PE acquisition of a licensed PI signals investor appetite for established Moroccan acquiring assets amid market liberalisation.

Outlook

The commercial-intelligence trajectory is escalating, with an active M&A and investment pipeline spanning the Chari record Series A, the ORA/Cathedis consolidation and the pending AfricInvest/VPS deal. The near-term watch-point is the Competition Council clearance of the AfricInvest/VPS acquisition following the 16 February 2026 comment window. All three events rest on tier-3 sources and carry Assessed confidence.

Conduct, Safeguarding & Financial Promotions

Conduct and consumer protection for Moroccan payments rests on Law 103-12 together with consumer-protection Law 31-08, enforced by Bank Al-Maghrib through transparency, complaint-handling and banking mediation. Law 31-08 grants an 8-day credit-withdrawal right. A primary BAM source anchors the regime. Critically for non-bank operators, customer funds at payment institutions are safeguarded by segregation/escrow at a bank: the operative example is Joro Cash wallet funds, held via Lana Cash — a CIH subsidiary — at CIH Bank under BAM PI rules. Safeguarding via bank escrow is therefore the operative customer-fund-protection mechanism for non-bank e-money issuers.

The bank-PSP versus non-bank PI/EMI distinction is consequential here. Whereas bank-PSPs hold customer funds within the regulated banking entity, non-bank payment institutions must segregate and escrow customer funds at a bank, shifting fund protection onto segregation discipline. Morocco operates no UK-style section 21 financial-promotions regime, and there is no FSCS-style deposit-guarantee scheme covering e-money — the absence places the weight of protection on the segregation arrangement rather than a compensation backstop.

Outlook

The conduct and safeguarding framework is established and stable. The operative watch-point is the integrity of bank-escrow segregation as the non-bank challenger layer expands; in the absence of a compensation scheme, segregation discipline carries the protective load for the growing population of e-money customers.

Stablecoins & Digital Money

Morocco's digital-money posture combines a licensed e-money route with a restrictive stance on crypto-assets and an active central-bank pilot. EMIs licensed under Law 103-12 (MAD 3m capital) may issue e-money. Cryptocurrencies remain banned domestically, and a draft digital-asset law incorporating AML/CFT requirements is in preparation but not enacted. BAM is piloting the e-Dirham CBDC, with the pilot reported to encompass retail P2P use and a cross-border experiment with the Central Bank of Egypt under World Bank support, though no deployment timeline has been published. There is no in-force stablecoin framework. This assessment carries Assessed confidence and rests on a tier-3 source.

The regime constrains stablecoin and crypto rails domestically while signalling a future digital-money infrastructure direction through the e-Dirham pilot. The cross-border Egypt experiment detail is not present in the cited evidence, so horizon dating is indicative only.

Outlook

The draft digital-asset law, if enacted, would introduce a regulated framework potentially lifting the domestic crypto ban under rigorous AML/CFT obligations — but it remains a draft and its timing is uncertain. The e-Dirham pilot is the leading forward indicator of digital-money infrastructure, though the absence of a deployment timeline keeps any horizon dating provisional.

Operational Resilience & Critical Infrastructure

Morocco's operational-resilience regime is a bespoke national construct without a DORA-equivalent. It rests on cybersecurity Law 05-20 (Dahir 1-20-69, 2020) and Decree 2-21-406 (2021), with the DGSSI as national cyber authority and maCERT handling incident response. The updated DNSSI (January 2023) sets an A/B/C classification for vital infrastructure with a 6-month compliance window. Layered over this national regime is a sector-specific overlay: BAM Directive 3/W/16 (10 June 2016) sets minimum penetration-test rules for credit institutions, and BAM Banking Supervision collaborates with the DGSSI. Primary DGSSI sources anchor the regime. Moroccan banks are flagged as African digitalisation leaders and consequently high-value cyber targets.

For PSPs and banks alike, the cyber-resilience obligations covering credit institutions and operators of vital importance shape IT compliance cost. Notably, there is no DORA-CTP-style critical-third-party regime yet, so concentration risk in technology providers is not addressed by a dedicated oversight instrument.

Outlook

The resilience regime is established and stable, anchored in national cyber law plus a banking-sector pen-test overlay. The forward gap is the absence of a critical-third-party oversight framework; as the challenger layer relies increasingly on shared switches and platforms (HPSS, HPS Switch), third-party concentration is the structural watch-point not yet captured by the current regime.

Scheme & Network Compliance

Card scheme rails in Morocco run through CMI, the bank-owned interbank operator. PCI-DSS and 3D Secure 2.0 are mandatory for online card processing, with annual PCI-DSS validation required by BAM. Visa and Mastercard operate domestically via partner banks, and merchant surcharging is illegal — the Competition Council has reminded merchants that surcharging, card-minimums and foreign-card refusal are illegal, though enforcement is weak. This standing scheme-compliance position rests on tier-3 sources and is held at Assessed confidence.

The defining scheme-economics change is the interchange cap: interchange fees were capped at 0.65% from October 2024, a structural change to the economics of card payments in Morocco that materially reshapes acquirer and issuer economics. This rests on a single tier-3 source and should be corroborated against a BAM or Competition Council primary instrument before Confirmed treatment. PCI-DSS and 3DS2 remain the mandatory gateway requirements, and CMI's historical chokehold on card processing is the structural backdrop to the antitrust action examined under W7.

Outlook

The interchange cap and the CMI demonopolisation together open the card market: the cap reshapes pricing while the antitrust remedy reshapes acquiring access. The priority intelligence gap is primary-source anchoring of the 0.65% cap, currently resting on aggregator-only sourcing for a structural pricing change in an under-indexed emerging-market scheme-rule environment.

Payment Corridor Dynamics

Morocco's dominant payment corridor is inbound diaspora (MRE) remittances, which reached MAD 122.02 billion ($13.377bn) at end-2025, up 2.6%, with BAM forecasting roughly 3.1% average annual growth across 2025-2027 to MAD 130bn. Morocco is the second-largest MENA remittance recipient after Egypt. The principal send markets are France, Spain, Italy, Germany, Belgium and the Netherlands, and FX is controlled by the Office des Changes. This corridor data, citing the Office des Changes, carries High confidence on tier-2 sourcing. At roughly $13.4bn, remittances are the core commercial opportunity for money-transfer and digital-wallet operators.

The corridor's forward dimension was reshaped on 7 July 2025, when BAM signed the PAPSS membership agreement, making Morocco the 17th country to join the Pan-African Payment and Settlement System, positioned to enable faster cross-border digital payments across the continent. PAPSS membership opens pan-African settlement rails, reducing correspondent-banking friction and supporting Moroccan fintech expansion into neighbouring markets. The precise signing date and 17th-member status were challenger-corrected against official Afreximbank/PAPSS T1 releases, and confidence is held at Assessed pending T1 anchoring in the source register.

Outlook

The EU-MA diaspora corridor is stable and dominant, while the MA-PAPSS corridor is opening. PAPSS membership and the e-Dirham cross-border pilot widen future rail options for the remittance flow that underpins the jurisdiction's payment economics. Registering the T1 PAPSS anchors would lift confidence on the membership claim.

Industry Structure & Commercial Dynamics

The Moroccan payments market is bank-centric and concentrated. CMI historically ran the entire card-acquiring and processing chain, handling more than 200 million transactions in 2024. The PSP base is led by bank-owned payment institutions — Cash Plus, Wafacash, Damane Cash/BCP, Attijari Payment, Lana Cash/CIH and M2T — with telcos participating via partnership and a growing fintech challenger layer comprising NAPS, Chari, ORA, PayTic and VPS. Cash dominates, accounting for roughly 80% of transactions, with currency in circulation at around 26% of GDP and roughly 94,387 POS terminals deployed; more than 60% of 2024 card operations were ATM withdrawals. This structural picture rests on multiple tier-3 sources plus BAM data on cash dominance and carries High confidence.

The high cash dominance and bank concentration define the addressable digitisation gap that the fintech challenger layer is targeting. The structural backdrop to this module is the historical concentration of acquiring and processing in CMI, now being unwound by the Competition Council remedy examined under W7 and the acquiring-market opening under W8.

Outlook

The market structure is presently stable but under structural pressure: the demonopolisation of acquiring, the interchange cap and the arrival of VC-backed non-bank entrants are progressively eroding the bank-centric concentration. The persistence of cash at roughly 80% of transactions is the defining constraint on — and opportunity for — the digitisation thesis.

Merchant Acquiring & Risk

Merchant acquiring in Morocco was historically monopolised by CMI, which held roughly 55,000 merchant contracts and around 65,000 POS terminals. It is now being opened to competing payment institutions and acquiring subsidiaries — Al Filahi Cash, Attijari Payment, Damane Cash and NAPS — effective from 1 May 2025, as the direct downstream consequence of the W7 antitrust decision. Contract assignment requires merchant consent under the Dahir of Obligations and Contracts, plus terminal migration and reprogramming, so new entrants face genuine operational friction even as the market opens. Card settlement runs D+1 to D+3, with acquiring fees of roughly 1.5%-3.5% on local cards. This picture carries High confidence on tier-3 sourcing.

The opening creates direct competitive entry opportunities for non-bank acquirers while imposing the merchant-consent requirement as a migration constraint. High-risk verticals remain limited due to regulatory caution, narrowing the addressable segment for new acquirers in the near term.

Outlook

The acquiring market is escalating in openness, with new acquirers entering through 2025 and 2026 as CMI's contracts transfer under the Competition Council deadlines. The operative friction operators must navigate is contract migration and terminal reprogramming under the merchant-consent requirement, alongside continued regulatory caution on high-risk verticals.

Product Innovation & Market Development

Product innovation in Morocco is BAM-led and inclusion-focused. Maroc Pay is the national interoperable QR mobile-payment standard, operated on HPS Switch, with BAM-mandated wallet interoperability delivered via the GP2M economic-interest group — an approach that deliberately avoids the closed-silo M-Pesa model. Virement Instantané (GSIMT, June 2023) provides instant interbank transfer on ISO 20022, operating 24/7 with a MAD 20,000 cap. In December 2025 BAM published a fintech project-holder guide formalising the licensing pathway, and a Morocco FinTech Center launched in January 2025. Open-banking APIs remain nascent. This picture rests on mixed tier-2/tier-3 sources and carries High confidence.

The mandated wallet interoperability and the December 2025 fintech project-holder guide together lower barriers and define the regulatory product-access pathway for new entrants — distinct from the discrete commercial product launches tracked under W13.

Outlook

The product-innovation trajectory is developing, with interoperable QR rails and instant transfer established and the fintech guide lowering entry barriers. The forward gap is open banking: no primary BAM instrument or roadmap for a PSD3-equivalent API framework was retrieved, so the product-access forward view is incomplete in an under-indexed emerging-market open-banking environment.

Consumer Protection & APP Fraud

Consumer protection in Morocco rests on Law 31-08 and Law 103-12, enforced by BAM. The dispute route requires an internal complaint first, then escalation to the Centre Marocain de Médiation Bancaire (CMMB, 'Al Wassit Al Banki'), created in March 2014 as a free, voluntary out-of-court mediation body governed by Law 31-08 and Circular 9/W/16; a client may escalate after 40 working days. A May 2026 expansion signed consumer-federation partnerships, and approximately 99% of cases over a two-year period were resolved via mediation. Mediation extends to payment institutions. The regime is anchored in a primary BAM source and is Confirmed.

Morocco operates no UK-style mandatory APP-fraud reimbursement regime — this is treated as not applicable to the regime per absent-field provenance. The mediation-centred dispute resolution, without a mandatory APP-fraud reimbursement obligation, keeps consumer-redress liability lower than UK and EU benchmarks for PSPs.

Outlook

The consumer-protection regime is stable, with the May 2026 CMMB expansion broadening mediation reach via consumer-federation partnerships. The structural watch-point is whether the absence of an APP-fraud reimbursement regime persists as the digital-wallet and instant-transfer base grows and authorised-push-payment fraud exposure rises.

AML/CFT & Financial Crime

This module is sourced from the Sentinel feed; the World Payments Monitor carries the finding as provenance only and does not conduct original illicit-finance analysis. Per the Sentinel feed, Morocco exited the FATF grey list in February 2023 after a 15-point action plan. Per MENAFATF's May 2024 follow-up, Recommendations 24, 25, 31, 32 and 38 were re-rated to largely compliant and R.15 to partially compliant, giving 39 Recommendations rated compliant or largely compliant; the country remains in enhanced follow-up. AML rests on Law 43-05 (2007) amended by Law 12-18 (2021); BAM supervises banks and payment institutions; UTRF/ANRF is the financial intelligence unit; and ML convictions rose to 134 in 2024 from 74 in 2021. The intelligence is anchored in T1 FATF/MENAFATF sources via the Sentinel feed (sentinel://www.fatf-gafi.org/en/publications/Mutualevaluations/fur-morocco-2024.html).

The FATF grey-list exit lowers correspondent-banking de-risking pressure on Moroccan PSPs, while the enhanced follow-up status keeps the AML compliance burden elevated. Any original illicit-finance, sanctions or beneficial-ownership analysis belongs to the Financial Integrity Monitor and is flagged as a cross-monitor reference, not a World Payments conclusion.

Outlook

The AML/CFT position is stable: grey-list exit achieved, broad Recommendation compliance reached, and enhanced follow-up ongoing. The forward dimension for payments operators is the bearing of the grey-list exit on correspondent-banking access, tracked structurally under W12. Detailed illicit-finance trajectory analysis is routed to FIM.

Correspondent Banking, Settlement & Access

The analytical spine of this module is the asymmetry between bank and non-bank access to settlement and correspondent rails. Large-value settlement in Morocco runs through SRBM (Système des Règlements Bruts du Maroc), the BAM-operated RTGS established by Governor Circular 14/G/06 (20 July 2006), alongside the SIMT/GSIMT interbank clearing system and electronic/mobile switches operated by HPSS. FMI oversight and settlement-account access sit with BAM under a January 2009 multilateral payment-system supervision agreement. This architecture rests on primary T1 sources and is Confirmed.

The bank versus non-bank access distinction is the operative concern. Direct SRBM RTGS and settlement-account access centre on banks, while non-bank operators gain remittance-channel access through a distinct route: cross-border FX and settlement are controlled by the Office des Changes, and independent money-transfer operators are authorised remittance intermediaries under a BAM licence introduced in 2007. The 2007 non-bank money-transfer licence is therefore the structural mechanism through which non-bank operators access the remittance channel without direct RTGS membership.

Outlook

The settlement architecture is established. The forward axis is whether the broader liberalisation — PAPSS membership, the acquiring opening and the FATF grey-list exit easing de-risking — translates into widening non-bank access to settlement and correspondent rails, or whether the bank-centric access asymmetry persists despite the opening of downstream acquiring.