Philippines (PH)

Licensing, Authorisation & Market Access

The Philippine licensing perimeter rests on RA 11127 (the National Payment Systems Act, 2018), which provides the first comprehensive legal/regulatory framework governing Philippine payment systems and empowers the BSP to supervise and regulate payment systems. This is a single-regulator architecture: the BSP holds exclusive oversight of the payments perimeter, and it functions as the licensing/registration gateway any payments operator must clear to access the Philippine market.

For non-bank market access, the principal route is OPS registration. BSP Circular 1049 requires all Operators of Payment Systems to register with the BSP; entities self-assess against the OPS definition and register within one month of commencing operations, or prior in specified cases. Any PSP collecting or transferring funds must register as an OPS, making this the mandatory non-bank gateway.

The e-money regime is deliberately bifurcated. The E-Money rules (BSP Circular 649 [2009] as revised by Circular 1049 [2019]) create Electronic Money Issuer licensing for banks and non-bank entities, imposing a PHP 100-million minimum capital for non-bank EMIs, with EMIs split into EMI-Bank and EMI-NBFI categories. The bank versus non-bank EMI routes are distinct, and there is no single EMI passport — a structural feature that shapes entry economics. The PHP 100-million capital floor and the bank/non-bank split together determine entry costs for e-money issuers.

The live development is the moratorium lift. The BSP lifted its moratorium on new EMI-NBFI licences — in force since 2021 and extended to December 2024 — effective 16 December 2024 to promote digital payments and financial inclusion, with reportedly around 42 EMI-NBFIs and 27 EMI-banks licensed. This re-opens new non-bank EMI market entry after a multi-year freeze, creating a live licensing window for fintech entrants on the non-bank PI/EMI track specifically.

Outlook

With the EMI-NBFI moratorium lifted, the non-bank entry channel is open and the licensing gateway is the operative consideration for entrants. The bank versus non-bank distinction remains the structural axis of the regime, and the established trajectory of this module reflects a mature, settled licensing architecture now in a more permissive posture for non-bank applicants.

Consumer Protection & APP Fraud

The most consequential live consumer-protection development is the Anti-Financial Account Scamming Act (RA 12010 / AFASA, 2024), which establishes prohibited acts and enforcement mechanisms — coordinated verification of disputed transactions, BSP authority to apply for cybercrime warrants under RA 10175, and criminalisation of money muling, social engineering and economic sabotage. This is the core APP-fraud and scam statute for the Philippines.

The liability model imports a safe-harbour/restitution structure. Under AFASA implementing rules, institutions may hold disputed funds for not more than 30 calendar days, extendable only by court, with the held amount credited but non-withdrawable. AFASA provides a safe-harbour and restitution framework requiring reimbursement where institutional due-diligence lapses contributed, with protection for compliant institutions — the Philippine analogue to APP reimbursement regimes elsewhere.

The operational obligations are extensive. AFASA mandates real-time fraud detection covering velocity, geolocation, behavioural anomaly and blacklist screening; extends real-time monitoring obligations to clearing switch operators InstaPay and PESONet; requires transaction logs retained at least five years; and mandates a phase-out of SMS/email OTPs for high-risk transactions by June 2026. All of these apply across bank and non-bank institutions.

Outlook

This module is escalating. The June 2026 OTP phase-out is the binding forward compliance deadline and materially raises compliance cost across the InstaPay and PESONet rails. The safe-harbour/restitution liability model and the extension of real-time monitoring to clearing-switch operators represent a structural lift in fraud-control obligations that will shape institutional cost and conduct expectations going forward.

Stablecoins & Digital Money

Digital money in the Philippines is bifurcating into a non-bank track and a bank-led/institutional track, against a deliberately controlled BSP innovation posture. On the non-bank side, the BSP approved PHPC, a peso-pegged stablecoin issued by Coins.ph at a 1:1 peg, aimed at improving transaction efficiency and reducing remittance costs for OFWs; PHPC exited the BSP regulatory sandbox in June 2025 after meeting or exceeding its KPIs within roughly two months. It is the first BSP-regulated peso stablecoin, with remittance-cost reduction as the commercial thesis for the dominant US-PH corridor.

On the bank-led side, a group of Filipino banks — UnionBank, RCBC, Cantilan Bank and Rural Bank of Guinobatan — is preparing PHPX, a peso-backed multi-issuer stablecoin initially operating on the Hedera DLT network. This contrasts with the non-bank single-issuer PHPC.

The wholesale CBDC strand is advancing: the BSP completed proof-of-concept testing of Project Agila in December 2024 (announced 5 December 2024), with experiments focused on interbank payments covering functional, performance, security and end-to-end testing. The live target sits later in the decade.

The crypto perimeter remains restrictive. The BSP extended its freeze on new VASP licences indefinitely; prudential oversight of exchanges and custodial wallets sits with the BSP under Circular 1108, while the SEC's CASP framework requires a domestic corporation with at least PHP 100 million paid-up capital. The result is a dual BSP/SEC perimeter with VASP licensing frozen.

Outlook

The controlled-innovation posture is likely to persist: a graduated non-bank stablecoin (PHPC), an emerging bank-led multi-issuer stablecoin (PHPX), and a wholesale CBDC moving from completed PoC toward a live target later in the decade, all against an indefinite VASP freeze. Date precision for the PHPC sandbox exit and Project Agila completion rests on tier-3 sources, with BSP primary confirmations not directly captured for those exact dates.

Commercial Intelligence (M&A, Investment & Product)

This module carries discrete commercial events, and the dominant story this cycle is the 2026 wallet IPO pipeline. In June 2026, Mynt's board and shareholders authorised filing a registration statement with the SEC and a PSE listing application; the offer would equal roughly 12% of Mynt's post-IPO outstanding capital, with an approximately USD 8-billion valuation discussed — the Philippines' first $5bn-plus unicorn. This is an announced investment event; the valuation is not publicly disclosed as a firm offer figure, only discussed.

PLDT's Maya is pursuing a USD 500 million–1 billion IPO penciled for Q3 2026, spearheaded by KKR as an approximately 30% stakeholder seeking a profitable exit alongside Tencent and IFC, eyeing a dual US/Hong Kong and PSE listing. This announced investment event carries a disclosed amount range. The IPO thesis is underpinned by Maya's results: Maya posted PHP 1.7 billion net income for full-year 2025 — its first profitable year — with cumulative loans disbursed reaching PHP 256 billion and Visa naming Maya its top acquirer for merchant transaction volume in the Philippines.

Outlook

Commercial intelligence is active. Both wallet IPOs are expected across the second half of 2026, with Maya's dual-listing penciled for Q3, and the GCash listing setting a valuation benchmark for the wallet sector. The GCash valuation remains discussed rather than a disclosed offer figure, and final pricing and timing for both listings are unconfirmed. These discrete deal events are distinct from the structural market-concentration view tracked separately.

Correspondent Banking, Settlement & Access

The analytical spine of this module is the bank versus non-bank access asymmetry — and the Philippine settlement layer is notable precisely because it narrows that asymmetry. PhilPaSSplus, the sole Peso RTGS owned and operated by the BSP under the NPSA, has participants including banks, NBFIs with quasi-banking functions, non-bank EMIs and government agencies; sponsored participants are brought into settlement by account-holding participants. The system adopted ISO 20022 and has 176 participants. Non-bank EMI direct RTGS access lowers settlement dependency on bank sponsors, a structural advantage for Philippine fintechs relative to jurisdictions where non-banks must settle through bank intermediaries.

On correspondent access, de-risking pressure is easing. The AMLC noted that before and during grey-listing some foreign banks avoided Philippine entities rather than manage ML/TF risk; the FATF exit may prompt foreign banks to review and resume correspondent relationships, with banks and fintechs finding it easier to establish or restore correspondent banking.

Outlook

The settlement and correspondent-access picture is improving. Direct non-bank EMI RTGS access remains a distinctive structural feature that compresses the usual bank versus non-bank access gap, and the grey-list exit is expected to ease the correspondent de-risking that previously raised cross-border friction for Philippine entities.

AML/CFT & Financial Crime (Sentinel-fed)

This module is sourced from the Sentinel feed and is carried, not re-analysed, with original illicit-finance analysis routed to the Financial Intelligence Monitor. Per the Sentinel position, the FATF removed the Philippines from its grey list in February 2025 after a January 2025 on-site visit confirmed significant AML/CFT progress; the AMLC noted the exit is expected to speed up and lower the cost of cross-border transactions. The payments-relevant consequence carried by WPM is lower cross-border friction and the prospect of correspondent-banking resumption.

Also per the Sentinel feed, BSP-supervised financial institutions must secure a Certificate of Registration with the AMLC pursuant to RA 9160 (AMLA, as amended) and RA 10168 (Terrorism Financing Prevention and Suppression Act); reforms included MVTS registration, sanctions on illegal remittance operators, and enhanced LEA access to beneficial-ownership information. This AML registration perimeter is carried for payments context and routed to FIM for original analysis.

The Sentinel intelligence for this module is attributed to the Sentinel feed; see the Sentinel sources at philstar.com and amlc.gov.ph linked in the source register.

Outlook

The AML/CFT trajectory is improving following the grey-list exit. WPM's interest is confined to the payments-friction and correspondent-banking consequences; the illicit-finance, mule-network and sanctions dimensions are flagged to FIM as the owning monitor for original analysis.

Legal & Litigation

Enforcement in the Philippine payments regime is primarily administrative and supervisory. The live enforcement episode concerns gambling access: following BSP Memorandum M-2025-029 (issued 14 August 2025), GCash and Maya removed access to gaming/gambling platforms by an August 16, 2025 deadline, and the suspension is to remain in place until the BSP finalises policy on online gambling payment services. This event is around ten months old at the baseline date and is framed as historical enforcement; whether the suspension remains operative at the baseline date is not independently verified.

The statutory penalty backdrop is set by RA 11127, which provides that willful violation of the Act or BSP directives is punishable by a fine of PHP 200,000 to PHP 2,000,000, imprisonment of two to ten years, or both; unauthorised EMI operation triggers enforcement under RA 11211 sections 18-19. Enforcement nonetheless remains primarily administrative and supervisory in practice, applying to both bank and non-bank actors.

Outlook

The forward legal item is the BSP's pending follow-on online-gambling-payments policy, on which the M-2025-029 suspension depends. Financial-promotion and conduct enforcement is methodology-flagged as under-indexed, and this Philippine item is recency-uncertain, so the operative status of the suspension should be treated as provisional pending confirmation.

Conduct, Safeguarding & Financial Promotions

The core conduct anchor is the Financial Products and Services Consumer Protection Act (RA 11765), under which the BSP is empowered to protect the public against unfair, unconscionable or deceptive practices by supervised institutions, and every BSFI must maintain a Consumer Assistance Management System (CAMS). This is the FCPA-equivalent regime for the Philippines and applies to banks and non-banks alike.

Safeguarding of customer funds is handled through a strict placement rule. E-money float is subject to a 100% domestic placement rule — holding float offshore or in crypto is prohibited — and the BSP applies a risk-based capital adequacy ratio of 8% of risk-weighted assets to EMIs effective 2024. This segregation mechanism is the customer-fund protection backbone for non-bank e-money on the non-bank PI/EMI track.

On financial promotions and conduct, the live enforcement item concerns gambling links. Under conduct and promotions oversight, the BSP, via Memorandum M-2025-029, ordered e-wallets GCash and Maya to remove in-app links and icons redirecting to online gambling platforms, citing addiction and accessibility risks. GCash (G-Xchange Inc.) and Maya Philippines Inc. were the directed parties. The suspension remains pending finalisation of the BSP's online-gambling-payments policy as of the baseline date.

Outlook

The pending BSP follow-on policy on online gambling payment services is the open conduct question: the M-2025-029 suspension is set to remain until that policy is finalised. Safeguarding rules — the 100% domestic float placement and the 8% CAR — are established and apply principally on the non-bank PI/EMI track, while the RA 11765 consumer-protection regime provides the standing conduct framework across both bank and non-bank institutions.

Operational Resilience & Critical Infrastructure

The oversight architecture is PFMI-aligned. The Payment System Oversight Framework (BSP Circular 1089) sets a risk-based oversight approach through designation of systemically or prominently important payment systems, with designated systems subject to periodic assessment against the PFMI (adopted via Circular 1126). This establishes the resilience and oversight spine for the Philippine payments perimeter across both bank and non-bank participants.

Critical settlement infrastructure has been formally designated. The Peso RTGS system (PhilPaSSplus) has been designated a Systemically Important Payment System by the BSP Monetary Board; the PhP-RTGS, Domestic Dollar Transfer System and PhP-USD PvP system are publicly designated SIPS. These designations anchor the resilience expectations applied to the country's most critical rails.

A forward rule change is in train. The BSP proposed tougher fines for payment-data reporting lapses by payment system operators, including daily monetary penalties and potential non-monetary sanctions on responsible officers, at consultation stage in late 2025.

Outlook

The established PFMI-aligned oversight framework and SIPS designations form a settled resilience baseline. The live forward item is the proposed payment-data penalty framework, which sits at consultation and would raise the cost of reporting lapses for payment system operators on both bank and non-bank sides once finalised.

Scheme & Network Compliance

Card-scheme economics in the Philippines run on an uncapped interchange model. Interchange fees are one component of the Merchant Discount Rate established by acquirers and paid by merchants; the schemes set interchange paid by acquirers to issuers, with no statutory interchange cap in the Philippines comparable to the EU. This absence of a statutory cap is a defining feature of the scheme-compliance environment and applies across bank and non-bank participants.

The national interoperability standard is mandatory. BSP Circular 1055 adopts the National Quick Response Code Standard (QR Ph), built on the EMV QR Merchant Presented Mode specification and routing real-time interbank settlement via InstaPay through BancNet; Circular 1033 governs Confirmation of Eligibility for ACH participation in PESONet and InstaPay. All BSP-supervised institutions, including EMIs, must support QR Ph.

Outlook

The scheme interchange model is stable, with no statutory Philippine cap on the horizon in this cycle. The mandatory QR Ph standard binds all supervised institutions and remains the structural lever for account-to-account interoperability, narrowing the space in which card-based MDR economics operate.

Payment Corridor Dynamics

The Philippines is a major remittance recipient, recording USD 38.34 billion in personal remittances in 2024. The US is the largest corridor at roughly 41.5% of inflows and Singapore around 6.9%, with the InstaPay-PayNow linkage facilitating direct Philippines-Singapore digital transfers. The US-PH dominance and the USD 38-billion pool define where remittance and stablecoin cost-reduction plays compete.

Cross-border capability is expanding. It is widening via InstaPay-PayNow (Singapore) and regional interoperability projects such as BIS Nexus, alongside ASEAN QR corridor linkages spanning Singapore PayNow, Indonesia QRIS and Thailand PromptPay/TrueMoney. PhilPaSS-REMIT, operating since May 2010, settles OFW remittances with same- or next-day credit.

Outlook

The US-PH corridor is stable and dominant, while the SG-PH corridor is opening through the InstaPay-PayNow linkage. Regional ASEAN QR interoperability and Nexus participation are advancing, positioning the Philippines within a widening cross-border instant-payments mesh. Note that the cross-border corridor and PHPC stablecoin elements carry downstream FIM significance for remittance-laundering risk, which WPM treats only as payment-instrument trust.

Industry Structure & Commercial Dynamics

The Philippine payments market is dominated by two non-bank super-app wallets. GCash (Mynt) has roughly 94 million registered users, around 85% of adults, and Maya (PLDT-backed) has 50 million-plus users and holds a digital bank licence — both sitting alongside traditional banks. As of 18 July 2025 there were 305 registered OPS, and the top 2024 gateways were PayPal, PesoPay and DragonPay. This GCash/Maya duopoly defines the competitive landscape any market entrant or acquirer must navigate, and it sits firmly on the non-bank PI/EMI side of the bank versus non-bank divide.

Maya's commercial scale is a distinct signal. Maya processed over PHP 1 trillion in 2024 and is described as the leading merchant acquirer for Visa in the country, with both major wallets leveraging InstaPay and PESONet for fund transfers.

Outlook

The wallet duopoly is an established market-structure feature. With both wallets heading toward IPOs and Maya leading Visa acquiring, the commercial centre of gravity remains with the non-bank wallets, even as bank incumbents retain settlement and balance-sheet advantages. Structural M&A or competitive shifts would register here, distinct from the discrete deal events tracked in commercial intelligence.

Merchant Acquiring & Risk

Merchant acquiring sits inside the BSP perimeter via a dedicated licence. An OPS engaged in merchant payment acceptance activities must register with the BSP under the Merchant Acquisition License (MAL): a PHP 10,000 filing fee for Category A (sub-PHP 100m average monthly merchant funds) and PHP 20,000 for Category B, with licence fees of PHP 25,000 and PHP 60,000 respectively. The MAL brings merchant acquiring into the BSP perimeter and applies across bank and non-bank acquirers.

A structural risk distinction separates push rails from cards. InstaPay merchant acceptance is push-only — the customer actively sends funds — which structurally eliminates chargeback exposure for that transaction type, unlike merchant-initiated card payments. This is a meaningful difference in acquiring-risk profile between account-to-account push rails and card acceptance.

Outlook

Merchant acquiring is an established part of the BSP perimeter through the MAL regime, with push-rail QR and InstaPay acceptance offering a structurally chargeback-free profile. Acquiring operational stress, chargeback volumes and high-risk MCC exposure — particularly for Maya as the leading Visa acquirer — are not evidenced beyond the fee structure this cycle, and merchant-acquiring operations remain a thinly evidenced, methodology-flagged under-indexed surface.

Product Innovation & Market Development

The instant-payments build-out is the central product-development story. The NRPS is a BSP flagship program establishing safe, efficient, interoperable retail payments; InstaPay provides 24/7 real-time low-value transfers up to PHP 50,000 and is the foundation for the QR Ph national standard. QR Ph merchant adoption rose 148.7% year-on-year in 2024, signalling strong uptake across both bank and non-bank participants.

The innovation architecture is dual-regulator. The SEC established the PhiliFinTech Innovation Office and launched the SEC StratBox thematic sandbox for Crypto-Asset Service Providers, while the BSP operates a Test-and-Learn/Regulatory Sandbox framework allowing exceptions for novel non-bank EMI business models and pursues CBDC initiatives (Project CBDCPh, Project Agila). This gives fintech and CASP innovation two distinct sandbox entry points.

Outlook

The NRPS/InstaPay build-out is advancing, with QR Ph adoption growth underpinning the trajectory, and the dual BSP/SEC sandbox architecture supports continued product innovation. Open-banking and open-finance framework detail — tiering and data-sharing rules — is asserted at standing-position level but not evidenced with a specific BSP open-finance circular this cycle, leaving that regulatory surface under-evidenced for an emerging-market rail.