Netherlands Payments & Fintech Regulation

Licensing, Authorisation & Market Access

The Netherlands' payment-institution licensing framework under the Wft remains stable in its current form this cycle, but the legislative process that will eventually reshape it has reached a fixed milestone. The Dutch Payments Association reports that trilogue negotiations on PSD3 and the Payment Services Regulation (PSR) concluded in March 2026, with formal entry into force now expected in early 2027. Once in force, Member States will have an 18 to 21 month national implementation window, which for the Netherlands is expected to involve amendment of the Wft to align domestic licensing and authorisation requirements with the new EU framework.

This is a different kind of development than an enforcement action or a single licensing decision: it is a structural signal that the legislative vehicle governing payment-institution market access is moving from a negotiated proposal to a fixed instrument with a known, if not yet final, timetable. For payment institutions and e-money institutions currently licensed or seeking licensing in the Netherlands, the practical implication is that the current Wft-based authorisation regime should be treated as the operative framework for the near term, while the PSD3/PSR national implementation window becomes the point at which licensing and authorisation requirements are expected to change. The requirement differs for bank and non-bank payment service providers in one respect worth carrying forward: PSD3/PSR is understood as applying to the licensing and authorisation layer that governs payment institutions and e-money institutions specifically, rather than to credit institutions' banking licences, so the market-access implications of this timetable fall most directly on the non-bank PSP population.

No further NL-specific licensing or market-access development was located this cycle beyond the trilogue conclusion itself.

Outlook

The timetable to track is PSD3/PSR's expected early-2027 entry into force, followed by the 18 to 21 month window within which the Netherlands is expected to amend the Wft. Payment institutions planning authorisation strategy over the next two to three years should treat this as the operative horizon for licensing-framework change, while current Wft requirements remain in force until that amendment occurs.

Conduct, Safeguarding & Financial Promotions

The Netherlands completed a key conduct-layer milestone under the EU Instant Payments Regulation this cycle. From 9 October 2025, Dutch payment service providers are required to offer a Verification of Payee service, confirming that a payee's name matches the provided IBAN before an instant credit transfer is sent, under EU Regulation 2024/886. This anti-fraud verification mandate is designed to reduce misdirected-payment and authorised-push-payment-style fraud risk at the point of transfer initiation, and it applies across both bank-PSPs and non-bank PSPs offering instant credit transfer services in the Netherlands.

This conduct obligation builds on an earlier phase of the same regulation: since 9 January 2025, Dutch PSPs receiving instant credit transfers have been required to apply a harmonised sanctions-screening procedure rather than conducting transaction-by-transaction checks. Together, the sanctions-screening and Verification of Payee obligations represent the conduct and safeguarding dimension of the Netherlands' full instant-payments build-out, layering fraud-prevention and financial-crime controls directly into the payment-execution chain rather than treating them as separate back-office processes.

Outlook

With both the receive-side sanctions-screening obligation and the send-side Verification of Payee mandate now in force, the conduct-layer build-out under the Instant Payments Regulation is complete for the Netherlands. The next conduct-relevant development to monitor is how PSD3/PSR's eventual transposition will interact with these existing instant-payments conduct obligations for non-bank PSPs required to seek PI reauthorisation.

Stablecoins & Digital Money

The defining development for Dutch digital-money infrastructure this period is the joint AFM/DNB exploratory report, published 12 October 2026, finding that the current legal framework in the Netherlands does not yet provide a basis for securities issued, held and transferred exclusively as tokens. The regulators located the gap specifically in Dutch civil and securities law, the Burgerlijk Wetboek and the Wet giraal effectenverkeer, which together have no provision recognising a token itself as the sole legal basis of title and transfer for a security. This is a market-infrastructure and property-law finding rather than a MiCA-licensing restriction: it concerns whether Dutch private law can give full legal effect to a security that exists only as a token, not whether a crypto-asset service provider is authorised to deal in such instruments.

AFM and DNB warned explicitly of migration risk, the prospect that issuance and market-infrastructure activity could move to jurisdictions offering clearer legal bases for native tokenisation, and recommended a joint follow-up process involving government and market participants to address the gap. In the interim, market participants seeking to tokenise securities in the Netherlands must continue to rely on hybrid dual-registration arrangements, layering a token representation over a conventional legal title, which introduces reconciliation complexity that a single-layer legal basis would avoid. The joint nature of the AFM/DNB publication, a conduct regulator and a prudential regulator acting together, signals that this is being treated as a capital-markets infrastructure policy question affecting the broader digital-money and tokenised-asset landscape, not a narrow crypto-sector supervisory matter.

No other stablecoin or digital-money development specific to the Netherlands was identified this period.

Outlook

The AFM/DNB recommendation for a joint follow-up process has no confirmed timetable. Whether the Dutch government pursues a legislative amendment to the Burgerlijk Wetboek and Wet giraal effectenverkeer to give token-based securities a clear legal basis, or market participants continue relying on dual-registration structures indefinitely, is the central open question for digital-money market infrastructure in the Netherlands going forward.

Operational Resilience & Critical Infrastructure

De Nederlandsche Bank's phased implementation of the EU Instant Payments Regulation continues to reshape operational requirements for payment service providers in the Netherlands, with two distinct elements surfacing this cycle. First, DNB confirms that non-bank payment institutions and electronic-money institutions must be able to send and receive instant credit transfers from 9 April 2027, extending an obligation that, under the Regulation's phased timetable, has applied to banks on an earlier schedule. This closes a gap in instant-rail capability between bank and non-bank payment service providers, a distinction that matters here because the obligation timetable itself differs materially between the two PSP types rather than being a uniform requirement from a single date.

Second, and reported with slightly lower source confidence, DNB's compliance posture update indicates that transaction-based sanctions screening is no longer permitted for instant credit transfers. In its place, DNB requires harmonised periodic, name-based screening together with annual rejection-rate reporting. This is an operational-resilience and critical-infrastructure requirement rather than an AML/CFT policy change in its own right: it governs how screening is architected and reported for instant-payment infrastructure, not the underlying AML obligations that sit with financial-crime compliance functions. The practical effect for payment service providers, both bank and non-bank, is that the screening methodology they run against instant credit transfers must shift from a per-transaction check to a periodic, name-based process, with the added obligation of reporting rejection rates annually to the supervisor.

Both developments trace to DNB's own publications on the Instant Payments Regulation timetable rather than to a single incident or enforcement action, and both should be read as part of the same phased rollout: the Regulation progressively extends instant-rail capability and screening-methodology requirements across the Dutch payments market, with the April 2027 date for non-bank PSPs being the next concrete milestone.

Outlook

The operative deadline for non-bank PSPs is 9 April 2027, by which point instant credit transfer send-and-receive capability must be in place. The screening-methodology shift to periodic name-based checks with annual rejection-rate reporting is reported as already underway in DNB's compliance posture, and payment service providers should expect this to remain the operative screening architecture going forward absent a further DNB update.

Payment Corridor Dynamics

Dutch banks met both compliance deadlines under the EU Instant Payments Regulation: the SEPA Instant Credit Transfer receiving obligation, effective 9 January 2025, and the sending-plus-Verification-of-Payee obligation, effective 9 October 2025. This compliance outcome reflects the fact that near-universal domestic instant-payments infrastructure has existed in the Netherlands independent of the EU-wide regulatory timetable since 2019, meaning Dutch banks were positioned to meet the Regulation's requirements from a base of existing operational capability rather than needing to build new instant-payments rails to specification.

The next milestone in the Instant Payments Regulation's staggered rollout falls on 9 April 2027, when the compliance wave extends to electronic money institutions and payment institutions, covering both euro-area and non-euro-area scope. This wave will bring a materially different population of Dutch payment-services providers, specifically non-bank EMIs and PIs, into the same sending/receiving and Verification-of-Payee obligations that the banking sector has already satisfied. Given that the Dutch banking sector's compliance was underpinned by pre-existing domestic infrastructure built over several years, the 2027 wave represents a genuine test of whether Dutch non-bank payment institutions can meet the same standard on the EU-mandated timetable, without the multi-year infrastructure head start banks enjoyed.

Outlook

The defining date for this corridor going forward is 9 April 2027, when non-bank EMIs and PIs join the Instant Payments Regulation's scope. Whether Dutch non-bank payment institutions can replicate the domestic banking sector's smooth compliance record, or whether the shorter runway produces a more contested compliance path, is the open question worth tracking through that date.

Product Innovation & Market Development

The Netherlands has positioned itself as an early mover within the EU's Markets in Crypto-Assets framework. Rather than using the eighteen-month transition period available by default under MiCA, the Dutch government compressed that window to 30 June 2025, and the Autoriteit Financiele Markten issued some of the European Union's first crypto-asset service provider licences, to MoonPay, BitStaete, ZBD and Hidden Road, on MiCA's opening day of enforcement. Supervisory responsibility for digital assets in the Netherlands follows a twin-peaks structure: De Nederlandsche Bank supervises issuers of asset-referenced tokens and e-money tokens, while the AFM supervises most crypto-asset service providers, with the national implementation delivered through an implementation decree plus two parliamentary acts amending Dutch financial and anti-money-laundering law. This first-mover positioning is commercially significant beyond the Netherlands' own market: it establishes an early template for how quickly other EU member states might complete their own MiCA transitions, and creates an incentive for crypto-asset service providers assessing where to locate EU operations to consider the Netherlands ahead of jurisdictions still mid-transition.

Outlook

Having already completed its compressed transition and issued first-wave licences, the Netherlands' MiCA implementation is now in a steady-state supervisory phase under the DNB/AFM twin-peaks split, while other member states are still working through their own transition timelines; watch for whether the early-mover licensing cohort attracts further crypto-asset service provider relocation to the Netherlands in subsequent cycles.

AML/CFT & Financial Crime

De Nederlandsche Bank imposed an administrative fine of €722,160 on Modulr Finance B.V. on 30 September 2026, published 5 October 2026, for serious shortcomings in the firm's anti-money-laundering controls during the 2023-2024 period. This is a Sentinel-fed finding carried from financial-crime monitoring and is presented here for its payments-sector relevance rather than as original illicit-finance analysis: DNB is the supervisory authority responsible for monitoring AML/CFT compliance by payment institutions and electronic-money institutions operating in the Netherlands, and can take enforcement action for non-compliance.

The Modulr Finance matter is notable within the payments sector because it establishes DNB's first publicly recorded AML fine against an electronic-money institution specifically, as distinct from a bank. Reporting associated with the fine indicates the firm had relied on intermediary partners, including crypto-platform counterparties, for aspects of customer and transaction monitoring that the firm itself should have performed. For non-bank payment institutions and electronic-money institutions operating in the Netherlands, this establishes a clear supervisory expectation that outsourcing monitoring functions to downstream platform partners does not substitute for the institution's own compliance obligations.

No other AML/CFT or financial-crime development specific to the Dutch payments sector was identified this period.

Outlook

Whether DNB's enforcement focus on payment-sector gatekeepers relying on downstream monitoring partners extends to further non-bank institutions is a pattern worth monitoring, though no further such action was identified this period. For full illicit-finance analysis of this and related matters, see the financial-integrity monitor's coverage, which this module does not duplicate.

Correspondent Banking, Settlement & Access

The Netherlands' instant-payments infrastructure, already six years mature, now carries two overlapping compliance obligations that define this cycle's correspondent-banking and settlement picture. First, since 9 January 2025, Dutch payment service providers have been required to use a harmonised sanctions-screening procedure for instant credit transfers, with DNB monitoring compliance including periodic reporting of sanctions-related rejection rates. This is a Confirmed, T1-sourced finding, and it applies to bank PSPs and non-bank PIs/EMIs alike engaged in instant euro transfers — the screening obligation attaches to the transaction type and currency, not to the type of institution executing it.

Second, Articles 5a-5d of the SEPA Regulation, given effect via the Instant Payments Regulation, require any PSP offering standard SEPA credit transfers to also offer instant credit transfers in euro at no higher cost than standard transfers. This obligation is verified through a mandatory Verification of Payee service applied consistently across the SEPA area. This is a Confirmed finding corroborated at T2 by the Dutch Payments Association alongside the primary T1 DNB material on the sanctions-screening mandate.

The analytical spine of this domain is the bank-versus-non-bank access asymmetry, and this cycle's findings illustrate a case where that asymmetry is narrowing rather than widening: both the sanctions-screening mandate and the mandatory instant-transfer-offering requirement apply uniformly across bank and non-bank PSPs, embedding a common compliance floor into the settlement layer itself rather than preserving differentiated treatment by institution type.

Outlook

The key marker to watch is DNB's periodic reporting on sanctions-related rejection rates for instant credit transfers, which would provide the first empirical signal of how the harmonised screening procedure is performing in practice. Continued monitoring of Verification of Payee service performance across the SEPA area will also indicate whether the mandatory instant-transfer-offering requirement is functioning smoothly for both bank and non-bank PSPs in the Dutch market.

Commercial Intelligence & Fintech

Mollie, the Amsterdam-founded payments and financial-services provider, completed its acquisition of GoCardless, the UK-based bank-payment specialist, on 1 September 2026. The deal is reported at USD1.1 billion in consideration. Alongside completing the acquisition, Mollie separately committed EUR350 million over five years toward expansion across the European Economic Area. The combination brings GoCardless's bank-payment (Pay by Bank) rails together with Mollie's existing card and local-payment-method capability across a reported thirty-eight countries, giving Mollie a broader multi-rail offering than it held previously.

Separately, Adyen, the other major Dutch-domiciled payments company, agreed two further acquisitions reported in the same period: Talon.One, a Berlin-based company, for approximately EUR750 million, and Orb, a US-based company, for USD335 million. Both deals were reported as slated to close on 1 July 2026; the Talon.One transaction's completion status has not yet been separately confirmed, and the Orb transaction's completion date likewise remains to be verified.

Taken as a set, these three transactions represent a concentrated period of M&A activity by the Netherlands' two leading independent payments companies, reinforcing the country's position as a centre of gravity for European payments-industry consolidation.

Outlook

The principal items to watch are whether the Adyen/Talon.One and Adyen/Orb transactions complete on or around the reported 1 July 2026 target date, and whether Mollie's integration of GoCardless's bank-payment rails together with its announced EUR350 million EEA expansion commitment translates into expanded multi-rail market reach over the coming periods.