Portugal (PT)

Industry Structure & Commercial Dynamics

Portugal's most significant recent financial-sector ownership change has concluded. NovoBanco's sale process -- initiated in summer 2024, formalised via a memorandum of understanding in June 2025 and a sale-and-purchase agreement in October 2025 -- completed on 30 April 2026, with BPCE acquiring NovoBanco for a final price of approximately EUR6.7 billion. This corrects the original research framing, which had characterised the sale as merely "expected to occur in 2025"; the transaction is now confirmed closed, with implications for market concentration and cross-border banking-group consolidation in Portugal.

Beneath this headline transaction, Portugal's broader payments market structure remains anchored by SIBS's Multibanco and MB WAY infrastructure, which commands near-universal bank participation. International PSPs -- Stripe, Adyen, PayPal, Revolut -- operate via EU passporting rights alongside domestic fintechs such as Eupago, easyPay and ifthenpay, which bridge SMEs into local payment rails. This structural landscape is unchanged this cycle aside from the NovoBanco transaction.

Outlook

With the NovoBanco/BPCE deal now closed, the next structural question is how BPCE integrates NovoBanco into its wider European banking-group footprint, and whether further consolidation follows among Portugal's remaining mid-tier banking and payments players.

Conduct, Safeguarding & Promotions

Portugal's payment institutions and e-money institutions safeguard client funds under the PSD2 Article 10 regime, which permits either the Segregation Method or the Insurance Method. Under the Segregation Method, safeguarded funds must be held in a separate account with an authorised credit institution, or invested in secure liquid assets, by close of the following business day -- the baseline protection standard for non-bank PI/EMI customers in Portugal as elsewhere in the EEA.

A challenge-stage correction is material here. BdP's Notice No 2/2025, published 20 March 2025, does not stand as a freestanding governance instrument; it amends the base Notice No 3/2020 framework covering governance, internal-control systems and organisational culture for supervised institutions. The amended framework addresses sound administrative and accounting procedures, gender-neutral remuneration policies, and suitability requirements for members of management and supervisory bodies. Institutions tracking their governance obligations should read Notice 2/2025 as a layer on top of the still-live Notice 3/2020 baseline, not as its replacement.

On promotions, a new BdP notice governing advertising of financial products and services and institutional advertising was under public consultation as of late December 2025. Whether that consultation has since closed, whether the notice has been finalised, or whether it remains pending, is unverified as of this July 2026 cycle -- a currency gap flagged for next-cycle verification given financial-promotion enforcement is an under-indexed category in this methodology's bias-correction framework.

Outlook

The trajectory here is escalating rather than stable: the governance-notice correction resolves one open question, but the advertising-notice's live status is the clearer near-term watch item, together with how safeguarding practice evolves as PIs/EMIs increasingly intermediate stablecoin-adjacent products under the new MiCA framework (W2).

Legal & Litigation

Banco de Portugal holds broad inspection and fining powers over credit institutions and payment institutions for anti-money-laundering, conduct and consumer-information breaches, including the power to publish sanctions and warnings; recent enforcement activity spans AML control failures and conduct-rule breaches across the payment-institution population.

The single most significant competition-law action in this space is the AdC's fine against SIBS Group, and the module's live development is SIBS's response to it: SIBS has announced it will contest the roughly EUR13.9 million fine for abuse of dominant position. Under Portuguese administrative law, an appeal does not suspend fine execution unless SIBS demonstrates considerable harm and provides effective guarantees, meaning the practical consequences of the AdC decision may take hold before the appeal is resolved. The appeal's outcome is unconfirmed this cycle.

Outlook

Resolution of the SIBS appeal is the clearest litigation marker to track into the next cycle; a confirming decision would harden the AdC's tying-abuse theory as applied precedent for scheme-access disputes, while a reversal would reopen questions about how SIBS's scheme-access practices should be regulated going forward.

Licensing, Authorisation & Market Access

Portugal's payments licensing architecture runs two parallel tracks, and the distinction between them is the module's analytical spine. Non-bank payment institutions and e-money institutions are authorised by Banco de Portugal under the RJSPME (Decree-Law 91/2018): PIs under Article 13(1), as companies whose main activity is providing payment services, and EMIs under Article 14(1), as issuers of e-money within the meaning of Article 2(ff). A domestic small-PI/EMI exemption track also exists under Article 37 RJSPME, consolidated by Executive Order 239/2019, applying where the monthly average of the preceding 12 months' payment transaction value does not exceed EUR3 million and no management-level money-laundering or terrorist-financing convictions exist -- a materially lighter-touch route than full PSD2 authorisation for smaller domestic players.

The bank-PSP route runs on an entirely different authority. Credit institutions, governed by the RGICSF (Decree-Law 298/92, Article 1-A(1)), are authorised exclusively by the European Central Bank within the Single Supervisory Mechanism for euro-area participating states -- BdP has no independent authorisation power over this population. Around 150 credit institutions operate in Portugal, with the market concentrated among four large groups: Caixa Geral de Depositos, Millennium BCP, Santander Totta and BPI. This bank/non-bank split matters commercially: a fintech or PSP seeking to operate in Portugal must decide at the outset whether to pursue the non-bank PI/EMI route through BdP or partner with (or become) a credit institution subject to ECB authorisation -- two routes with materially different capital, governance and supervisory-relationship implications.

No material change in this baseline licensing architecture was identified this cycle; both tracks are confirmed as stable, standard EEA PSD2/EMD2 and CRD/CRR transpositions.

Outlook

The licensing architecture itself is not in flux, but its interaction with newer regimes is: entities holding PI/EMI authorisation may increasingly need to layer MiCA CASP authorisation (W2) or DORA compliance (W3) on top of their base RJSPME licence, and the distinction between bank and non-bank routes will remain relevant wherever new product categories -- stablecoins, open banking -- test which authorisation track is the natural home for a given activity.

Stablecoins & Digital Money

Portugal now has, for the first time, a dedicated national framework governing crypto-assets and stablecoins. Law 69/2025, published 22 December 2025, transposes MiCA nationally through a twin-peaks supervisory model: Banco de Portugal holds prudential authority, including authorisation of asset-referenced and e-money token issuance and of crypto-asset service providers, together with prudential and governance supervision; CMVM supervises market conduct. Before this law, there were no specific national guidelines or legislation governing stablecoins in Portugal at all -- the new framework is a genuine regime shift rather than an incremental update, and it establishes the licensing gateway that banks and PSPs must now use to offer stablecoin or CASP products domestically.

The framework's transitional provisions have now reached their deadline. Entities registered under Portugal's prior national regime were permitted to continue operating until 1 July 2026, or until their MiCA authorisation was granted or refused, whichever occurred first. That date has passed as of this cycle's 4 July 2026 reference point. Whether the CASP authorisation register is now complete for previously-registered entities -- and what enforcement posture BdP/CMVM will take toward any that have not yet secured authorisation -- is unverified this cycle; this is flagged as an active market-access cliff-edge to monitor directly rather than assume resolved.

Outlook

Two forward markers matter most: post-deadline completeness of the MiCA CASP register, and the pace at which bank-led stablecoin products (see Bison Bank, W13) come to market under the new authorisation gateway. Both will determine whether Law 69/2025's twin-peaks model translates into an orderly transition or a contested one.

Operational Resilience & Critical Infra

The EU's Digital Operational Resilience Act (Regulation (EU) 2022/2554) has been fully applicable since 17 January 2025, and Portugal's implementing arrangements designate Banco de Portugal as the national focal point for major ICT-incident notifications and for voluntary reporting of significant cyber threats, with formal cooperation duties running among BdP, ASF and CMVM. This layers a harmonised EU-wide resilience regime on top of the pre-existing PSD2 Instruction 01/2019 incident-reporting framework that PIs and EMIs already operated under.

The national DORA implementing law also carries a sanctions regime: infringements may draw fines of up to EUR5 million, 10% of total annual turnover, or three times the economic benefit derived, applicable to both legal entities and natural persons, with serious and very serious enforcement decisions subject to public disclosure.

No PT-specific deviation from the harmonised EU baseline was identified this cycle; the module remains stable.

Outlook

With the regime now over a year into full applicability, the next signal to watch is enforcement activity -- whether BdP begins publishing DORA-related sanctions decisions, which would test the practical bite of the EUR5 million/10%-turnover/3x-benefit framework against Portuguese institutions.

Scheme & Network Compliance

Multibanco, operated by SIBS, remains Portugal's dominant domestic card and interbank scheme, co-badged with Visa and Mastercard for international acceptance. Debit interchange is capped at 0.2% and credit interchange at 0.3% under the EU Interchange Fee Regulation (Reg. (EU) 2015/751) -- the same EU-wide caps applicable across the bloc, with no Portugal-specific variation.

The scheme's dominance is now under sustained competition-law pressure. The Autoridade da Concorrencia (AdC) fined SIBS Group EUR13,869,000 for tying processing services to scheme access, following a Statement of Objections issued 28 July 2022; SIBS held over 90% market share in the affected markets across roughly three years of the tying practice. SIBS has appealed the decision. Under Portuguese administrative law, an appeal does not automatically suspend execution of the fine unless SIBS can demonstrate considerable harm and provide effective guarantees -- meaning the fine's practical effect may persist through the appeal period regardless of its eventual outcome, which remains unconfirmed this cycle.

Outlook

The AdC appeal is the clearest near-term marker for this module: its resolution will determine whether SIBS's scheme-access practices are confirmed as an antitrust violation on appeal or overturned, with direct implications for how acquirers and PSPs negotiate Multibanco access going forward.

Payment Corridor Dynamics

As a euro-area member, Portugal's cross-border payment rails run through the Eurosystem's TARGET2 RTGS system and TIPS instant-settlement service, with SEPA Credit Transfer, SCT Instant and SEPA Direct Debit governing retail euro payments. Portugal migrated to TARGET2 in the system's second migration wave, on 18 February 2008. This corridor infrastructure is long-established and unchanged this cycle: no disruption to euro-area access or settlement arrangements was identified.

Outlook

Corridor dynamics remain the most stable element of Portugal's payments environment; the principal forward development to watch is not a corridor-access change but the digital euro's technical readiness phase (W9), which will eventually run alongside, rather than replace, the existing TARGET2/TIPS/SEPA architecture.

Merchant Acquiring & Risk

Card acquiring in Portugal is structurally dependent on SIBS scheme access for Multibanco and MB WAY acceptance -- the same dependency at the centre of the AdC's 2024 tying-abuse finding against SIBS (W4, W7). International acquirers such as Adyen and Worldline compete alongside SIBS-linked local providers, but they do so under general EU card-scheme rules and PSD2 conduct requirements rather than any dedicated Portuguese acquiring statute; no distinct national merchant-acquiring or high-risk-MCC regime exists. This absence limits the granularity of acquirer-specific risk analysis available for the Portuguese market and is flagged as an under-indexed category for future-cycle attention.

Outlook

The acquiring landscape will track the SIBS appeal outcome (W4/W7) closely, since any change to SIBS's scheme-access obligations would directly affect the competitive terms on which international and domestic acquirers operate in Portugal.

Product Innovation & Market Development

The digital euro project entered its technical readiness phase on 1 November 2025, expected to run for 26 months, preparing for potential issuance in 2029 assuming the underlying Regulation is adopted in 2026; a pilot test is planned for the end of 2027. Banco de Portugal participates in this work as a Eurosystem national central bank.

Separately, Portugal's fintech-sandbox infrastructure includes the Technological Free Zones established under Decree-Law 67/2021 and CMVM's Market4Growth sandbox, launched 22 November 2023. Despite this testing infrastructure, open-banking and third-party-provider adoption remains structurally slow: as of October 2024, Portugal had no domestically registered third-party providers, a gap attributable in part to Multibanco's continuing market dominance.

Outlook

The digital-euro timeline (Regulation adoption expected in 2026, pilot testing planned for late 2027) is the clearer near-term marker; the open-banking adoption lag is a slower-moving structural question tied directly to whether Multibanco's dominance (W4) is loosened by ongoing competition scrutiny.

Consumer Protection & APP Fraud

Banco de Portugal's complaints channel recorded an 80% year-on-year increase in complaints, with fraud allegations behind 47.4% of them -- a significant escalation in consumer-facing risk signals. BdP's own remedial power under direct complaints handling is limited to compliance verification rather than compensation orders; consumers seeking financial redress must rely on the courts for that remedy, a structural limitation on the regulator's consumer-protection toolkit.

Separately, Law 24/2023 (29 May) imposes consumer-protection limitations on financial-services charges, including a prohibition on commissions for photocopies and duplicate statements -- part of the baseline consumer-protection legislative framework.

Outlook

The fraud-complaint surge is the clearer escalating signal in this module; whether BdP's compliance-verification-only remedial model comes under pressure to expand toward direct compensation powers, given the scale of the complaint increase, is a question worth tracking into subsequent cycles.

AML/CFT & Financial Crime

This module's intelligence is sourced from the Sentinel.gi feed rather than original WPM analysis; illicit-finance findings are attributed to that feed and linked out rather than re-analysed here. Portugal's most recent FATF mutual evaluation characterises its AML/CFT regime as sound and effective, with recommended improvement in the implementation of measures applicable to non-financial businesses and professions. Laws 70/2025 and 72/2025, in force since December 2025, strengthen the framework further: Law 70/2025 implements the Travel Rule under Regulation (EU) 2023/1113 and formalises AMLA/EBA cooperation duties, while Law 72/2025 introduces restrictive-measures criminal offences; both amend the base Law 83/2017 AML/CFT and sanctions framework.

Outlook

These developments are flagged onward to the Financial Intelligence Monitor for continued illicit-finance analysis, including any downstream implications of the new stablecoin framework (W2) for Travel Rule compliance; this brief draws no independent illicit-finance conclusions from them.

Correspondent Banking, Settlement & Access

The bank-versus-non-bank access asymmetry is this module's analytical spine, and in Portugal that asymmetry is narrower than in many jurisdictions. Portuguese credit institutions, and non-bank payment institutions and e-money institutions where enabled, access central-bank settlement directly via TARGET2/T2 and TIPS as Eurosystem participants -- removing the need for a separate domestic correspondent-banking network for euro-denominated transactions. Banco de Portugal additionally sits within the Single Supervisory Mechanism and Single Resolution Mechanism as Portugal's national supervisory and resolution authority.

Outlook

With direct Eurosystem settlement access already extended to non-bank PIs/EMIs where enabled, the correspondent-banking access gap that constrains non-banks in many other jurisdictions is comparatively muted in Portugal; the module remains structurally stable with no material change this cycle.

Commercial Intelligence

Four discrete commercial events populate this module's baseline. First, Bison Bank announced plans to launch Portugal's first MiCA-compliant, fiat-pegged stablecoin, targeting introduction in the first half of 2026 alongside other blockchain-based services -- an amount not publicly disclosed, and the earliest identified bank-led stablecoin product initiative in the Portuguese market ahead of the full MiCA framework's maturation (W2).

Second, BPCE completed its acquisition of NovoBanco on 30 April 2026 for a final price of approximately EUR6.7 billion, following the October 2025 sale-and-purchase agreement and the June 2025 memorandum of understanding with Portugal's Resolution Fund -- the largest recent PT financial-sector M&A transaction, correcting the original research's "expected 2025" framing (see also W6).

Third, MB WAY formed a partnership with ECOMMPAY in January 2025 to improve the e-commerce payments experience in Portugal, giving merchants enhanced online payment options; the value of this partnership was not publicly disclosed.

Fourth, at the market level, Portuguese fintech companies raised $71.2 million in equity funding across eight rounds through September 2025, versus $31 million across six rounds in the same period of 2024 -- a 129.83% year-on-year increase. As of January 2026, 310 active fintech companies had collectively raised $408 million, led by Ethena at $156 million; this aggregate metric is a market-level indicator rather than a single discrete event.

Outlook

The clearest near-term marker is whether Bison Bank's stablecoin launches within its targeted first-half-2026 window; more broadly, the combination of completed banking M&A, rising fintech funding and an early bank-led stablecoin product suggests continuing commercial momentum in Portuguese payments even as the underlying MiCA and safeguarding frameworks (W1b, W2) are still settling into practice.