Romania (RO)

Stablecoins & Digital Money

Romania's MiCA position has been corrected from draft to operative law. Romania transposed MiCA (Regulation EU 2023/1114) through Emergency Ordinance 10/2025, which entered into force on 13 March 2025. The ASF is competent for CASP authorisations and for asset-referenced token and other-crypto white-paper notifications; the BNR supervises e-money token issuance by credit institutions and EMIs. The implementing measure is operative law as of the cycle date, not a draft pending adoption. For a stablecoin or CASP operator, this allocation determines which authority must be notified, and the ASF/BNR EMT-versus-ART split governs market access for digital-money products — a both-banks-and-non-banks surface.

A near-term cliff-edge dominates the outlook. The MiCA transitional regime ends 1 July 2026, after which providing crypto-asset services in Romania without authorisation becomes a criminal offence; the Article 111 sanctions regime is mandatory. This is imminent as of the cycle date.

Real-world EMT issuance under MiCA in Romania is unobserved: only the competence allocation is evidenced, with no evidence of actual EMT issuance by Romanian credit institutions or EMIs under BNR supervision. Any future analysis of EMT issuance volumes or sanctions-evasion pathways is a Financial Integrity Monitor cross-reference, not a WPM conclusion.

Outlook

The framework is in force and the transitional window closes on 1 July 2026, converting unauthorised CASP activity into a criminal offence. The under-indexed question is real-world EMT issuance: domestic stablecoin and EMT product reality remains thin relative to framework coverage, and targeted rail and product research is warranted next cycle.

Scheme & Network Compliance

Two developments define scheme and network compliance in Romania, one stable and one escalating. The stable layer is interchange and surcharging: the directly-applicable EU Interchange Fee Regulation (EU 2015/751) caps interchange at 0.2% of transaction value for debit cards and 0.3% for credit cards, and Romania does not allow surcharging on regulated card transactions. Visa and Mastercard dominate, supported by 3DS under PSD2 strong customer authentication. These caps and the surcharging ban set the unit economics of card acquiring in the market and are predominantly a bank-PSP surface.

The escalating layer is the acceptance mandate. From 1 January 2026 a national fiscal mandate under Law No. 239/2025 requires all active Romanian businesses — extended to individual enterprises and self-employed professionals — to maintain a bank or Treasury account and accept electronic payments; the previous cash-receipt threshold was abolished and non-compliant businesses risk being classified high-risk or fiscally inactive. Romanian SMEs and self-employed professionals are the obligated acceptors. This universal e-payment acceptance mandate pushes acquiring adoption toward the SME long tail and saturation, making it a material acquiring-market expansion event affecting both bank and non-bank acquirers.

Outlook

The IFR caps and Romanian surcharging ban remain stable scheme parameters. The dynamic element is the Law 239/2025 acceptance mandate, effective 1 January 2026, which broadens the scheme acceptance base across the formal economy. Statutory primary anchoring of the mandate against the Monitorul Oficial text should be prioritised in the next RO run, given current reliance on aggregator sources.

Operational Resilience & Critical Infrastructure

DORA has been nationalised in Romania. Emergency Ordinance No. 14/2026 implements DORA by designating the BNR and ASF as competent authorities, with a sanctioning regime of fines up to 10% of annual turnover for entities and up to RON 23 million for individuals, requiring ICT risk-management frameworks and ICT-incident reporting. The designation defines the operational-resilience compliance burden for all Romanian banks, PIs, EMIs and CASPs — a both-banks-and-non-banks obligation.

A currency gap qualifies the picture. On 27 March 2025 the European Commission opened infringement procedures against thirteen member states including Romania for failing to fully transpose the DORA Directive (EU 2022/2556). The status as of 27 June 2026 has not been verified in this cycle; it is unknown whether transposition has been completed or whether a reasoned opinion has issued. This is recorded as a currency gap on a roughly 15-month-old enforcement notice.

Outlook

The national DORA designation via EO 14/2026 is established standing knowledge, with 10%-of-turnover fines anchoring the resilience compliance burden. Operational-resilience enforcement follow-through is under-tracked: the transposition-infringement status against Romania should be verified before the next periodic run to determine whether the procedure has closed, advanced to a reasoned opinion, or otherwise resolved.

Licensing, Authorisation & Market Access

Romania operates a two-track market-access regime that carries the central bank-PSP versus non-bank-PI/EMI distinction. The National Bank of Romania (BNR) authorises and supervises Romanian payment institutions (PIs) and account information service providers (AISPs) under Law 209/2019, which transposes PSD2 and is implemented by NBR Regulation No. 4/2019. The BNR is the authorising and supervising authority for the non-bank PI route, which sits separately from the OUG 99/2006 credit-institution licence. For non-bank fintech PSPs, this lighter-touch PI/EMI route — as opposed to a full credit-institution licence — determines the cost of market entry and defines the principal market-access pathway in Romania.

The forward-looking change in this module is the EU PSD3/PSR package. Under PSD3/PSR the separate EMI licence is abolished and EMIs re-authorise as payment institutions authorised to issue e-money. PSD3 is a directive requiring Romanian transposition. Final compromise texts were published in April 2026, with Official Journal publication anticipated in H1 2026 and an approximately 18-month transposition period to follow. As of 27 June 2026 the directive had not yet entered into force, so transposition has not begun. The practical consequence is that EMI re-authorisation will force Romanian e-money issuers to migrate licences — a material compliance and timeline cost for non-bank operators that should be planned against the H2 2027 transposition horizon.

Outlook

The domestic PSD2-based PI/EMI architecture is established and stable. The next structural shift is PSD3/PSR transposition, expected in the second half of 2027 after the directive's entry into force, which collapses the EMI category into the payment-institution licence. Operators on the non-bank route should treat the abolition of the standalone EMI licence as the defining medium-term licensing event.

Conduct, Safeguarding & Financial Promotions

Safeguarding and the EMI capital floor anchor the conduct-and-safeguarding picture for non-bank issuers. Romanian electronic money institutions must be authorised by the NBR with initial capital of not less than EUR 350,000 and are entered in the NBR Electronic Money Institutions Registry; credit institutions issuing e-money need no separate authorisation. This is the explicit bank versus non-bank line in W1b. Safeguarding rests on Article 10 PSD2-style segregation — the deposit of user funds in a separate account at a credit institution or central bank, investment in secure low-risk liquid assets, or insurance or guarantee. Together the EUR 350,000 capital floor and the segregation safeguarding requirement set the regulatory cost base for EMI entrants in Romania.

The forward change is PSD3's safeguarding regime. PSD3 keeps safeguarding largely unchanged but adds an option to safeguard customer funds directly in a central-bank account, at that bank's discretion, and mandates EBA regulatory technical standards on safeguarding risk-management frameworks; own-funds method B becomes the default for PIs. These changes are pending PSD3 transposition into Romanian law.

Outlook

The present segregation-based safeguarding regime and EUR 350,000 capital floor remain the operative cost base for non-bank EMIs. The central-bank-account safeguarding option and the EBA RTS on safeguarding risk-management arrive with PSD3 transposition, expected in the second half of 2027, alongside own-funds method B becoming the default. Non-bank issuers should treat these as the principal forward conduct and safeguarding changes.

Payment Corridor Dynamics

Romania's corridor architecture is SEPA-aligned despite its non-eurozone status. Romania adopted SEPA standards — SEPA Credit Transfer and SCT Inst — even for local-currency payments. Domestic instant payments run on TRANSFOND's SENT ACH with final settlement by the BNR; ReGIS is the RON RTGS and a TARGET2/T2 component handles EUR; messaging follows SCT Inst on ISO 20022 with AliasPay proxy. Romania extended Regulation 924/2009 equal-charges to its national currency. The SENT/SCT Inst rails on ISO 20022, together with the 924/2009 equal-charges extension, shape domestic instant-payment economics and corridor pricing — primarily a bank-PSP surface.

At the supranational layer, the Instant Payments Regulation (EU 2024/886), adopted 13 March 2024, requires PSPs offering euro credit transfers also to send and receive instant credit transfers; it amends the SEPA Regulation, the cross-border payments regulation, the Settlement Finality Directive and PSD2.

Corridor-level observations record RO-DE as largely SEPA for EUR and stable; RO-UK as more complex post-Brexit, outside the EU direct financial area; and RO-IN as constrained, subject to rigorous compliance checks and reliant on correspondent banking.

Outlook

The domestic instant-payment infrastructure is established and SEPA-aligned. The Instant Payments Regulation advances the euro instant-transfer mandate across PSPs offering euro credit transfers. Corridor pricing and access for RO-DE, RO-UK and RO-IN remain on their recorded stable-to-constrained trajectories.

Industry Structure & Commercial Dynamics

Romania's payment landscape is consolidating and displacing cash. The market spans incumbent banks (Banca Transilvania, BCR, CEC Bank, BRD, Raiffeisen, ING), processors (PayU GPO, Netopia, euplatesc, Stripe, Adyen), BNPL and e-wallets; cash-on-delivery still serves 60-65% of e-commerce orders per ARMO. Cash use fell from 45% in 2020 to 21% in 2023, while bank-account penetration reached 76% in 2024 with 22.4 million active cards. Bank-led consolidation plus cash displacement reshape competitive dynamics and acquiring concentration.

Merchant-acquiring concentration sharpens this. Banca Transilvania built merchant acquiring on BPC's SmartVista, growing the second-largest POS network serving over 110,000 merchants with above-40% market share; Romania has roughly 260,000 card-accepting terminals against approximately 521,000 SMEs, so merchant enablement lags demand. This is a both-banks-and-non-banks structural view, distinct from discrete commercial events tracked under W13.

Outlook

The structural trajectory is bank-led consolidation with accelerating cash displacement and acquiring concentration. The terminal-to-SME gap signals continued enablement headroom, particularly as the Law 239/2025 acceptance mandate widens the obligated acceptor base. Specific announced deals and funding rounds belong to W13; this module continues to track the consolidation trend and competitive structure.

Legal & Litigation

A record antitrust event dominates this module. Romania's Competition Council announced on 7 June 2026 penalties totalling RON 3.73 billion — EUR 710 million — against the ten largest banks over alleged ROBOR interbank-rate collusion. The procedural status is preliminary: the full reasoned decision has not yet been served and is expected early autumn 2026; the decision becomes enforceable only after the reasoning is handed over; and all sanctioned banks intend to challenge. The BNR called for clarification, warning of financial-stability risk, and a borrower-compensation legislative draft was prepared. The event should be framed as announced, not concluded. A record EUR 710 million fine plus potential borrower-compensation legislation creates material litigation and balance-sheet risk for the ten largest Romanian banks — a bank-PSP surface.

The procedural caveat is itself a recorded gap: the full reasoned Competition Council decision had not been served as of the cycle date, and enforceability and individual bank challenge outcomes are pending and unverified.

Outlook

The ROBOR fine is high-impact but procedurally early. The next inflection is the full reasoned decision, expected in autumn 2026, which conditions enforceability; bank court challenges are anticipated thereafter. The fine's enforceability and the outcomes of bank challenges should be verified before treating the penalty as concluded.

Merchant Acquiring & Risk

Romanian merchant acquiring spans both bank and fintech acquirers. The ecosystem is offered by banks (Banca Transilvania, BRD/SocGen, Raiffeisen, UniCredit, ING) and local gateways (Netopia/MobilPay, PayU Romania) alongside international API providers (Stripe, Adyen). It is moderately mature, fragmented and consolidating, with high-risk verticals such as gaming and crypto expanding cautiously. Over 80% of POS payments are contactless. This is the explicit bank versus non-bank acquirer mix that the module tracks.

The acceptance mandate widens the base. The January 2026 universal e-payment acceptance mandate under Law 239/2025 pushes acquiring adoption toward the SME long tail, expanding the addressable acquiring base across both bank and non-bank acquirers and reinforcing the consolidation dynamic observed in W6.

Outlook

Merchant acquiring is expanding and consolidating, with the Law 239/2025 mandate pushing SME long-tail enablement. The bank-plus-fintech acquirer mix persists, with international API providers competing alongside domestic gateways and banks. Cautious expansion in high-risk verticals continues to shape acquirer risk posture.

Product Innovation & Market Development

Domestic account-to-account innovation centres on RoPay. RoPay, developed by TRANSFOND and jointly administered with the Romanian Banking Association, is an instant bank-transfer payment and collection method launched in 2023 on the SENT Instant Payments infrastructure, enabling card-free P2P, in-store, online and bill payments via QR code or phone number. Participating banks include BRD, Libra and CEC Bank, with BCR, ING and Banca Transilvania integrating. RoPay as a domestic A2A rail competes with card schemes for in-store and online volume — a bank-PSP surface. In July 2025 Banca Transilvania and Visa achieved the first EU Digital Identity Wallet card payments, marking an identity-payment convergence first.

A CBDC dimension is under-evidenced: the Digital RON pilot is supported by only a single pilot-signal reference, with pilot scope, timeline and ECB-programme linkage detail absent.

Outlook

RoPay is established as a domestic A2A rail and is broadening bank participation. The BT/Visa EU Digital Identity Wallet payments signal identity-payment convergence. CBDC development for Romania is under-indexed; targeted research on ECB and BNR CBDC communications and the Digital RON pilot scope is warranted to firm up the W9 and CBDC-tracker picture next cycle.

Consumer Protection & APP Fraud

The operative APP-fraud control in Romania is IBAN-name verification. From 9 October 2025 PSPs must provide, at no extra charge, a verification service matching IBAN to beneficiary name and alert payers to discrepancies suggesting fraud or error before authorisation — the principal EU-level APP-fraud-mitigation mechanism applicable in Romania. Romania has no UK-style mandatory APP-fraud reimbursement scheme; the absence of a reimbursement mandate is confirmed as not applicable in this regime. The free IBAN-name verification service is therefore the operative APP-fraud control, shaping PSP fraud-liability posture — primarily a bank-PSP surface. Separately, CCD2, with transposition due 20 November 2025, strengthens consumer-credit disclosure.

Outlook

The IBAN-name verification requirement is established as the operative APP-fraud control absent a reimbursement mandate. CCD2 transposition strengthens creditworthiness assessment and structured consumer disclosures binding Romanian lenders into 2026 under BNR oversight. The absence of a mandatory reimbursement scheme remains the defining feature of Romania's APP-fraud-liability framework.

AML/CFT & Financial Crime (Sentinel-fed)

This module is sourced from the Sentinel feed; WPM carries provenance only and conducts no original illicit-finance analysis. Per Sentinel, the ONPCSB is Romania's designated Financial Intelligence Unit under Law 129/2019, which transposes 4AMLD and 5AMLD; other compliance-monitoring authorities include the BNR, ASF and the National Gambling Office, and the remittance reporting threshold is the RON equivalent of EUR 2,000. Law 86/2025, in force 26 May 2025, modernised the regime in response to the 2023 MONEYVAL fifth-round mutual evaluation report and AMLD6; a National AML/CFT Strategy 2025-2030 is in train; and Romania sits in MONEYVAL enhanced follow-up. This AML supervisory architecture sets the financial-crime compliance baseline for Romanian PSPs across both bank and non-bank entities. The intelligence is attributed to the Sentinel feed; the underlying material is available via the Sentinel source link.

This surface has been routed to the Financial Integrity Monitor via cross-monitor flags. Original illicit-finance analysis belongs in FIM, not WPM.

Outlook

The AML/CFT regime is modernising following the MONEYVAL fifth-round evaluation, with Law 86/2025 and the National AML/CFT Strategy 2025-2030 driving the trajectory while Romania remains in enhanced follow-up. WPM continues to carry the Sentinel-fed provenance only; any analysis of financial-crime typologies or enforcement is for FIM.

Correspondent Banking, Settlement & Access

The analytical spine of this module is the bank versus non-bank settlement-access asymmetry, and that asymmetry is now narrowing. From 16 June 2025, under ECB Decision (EU) 2025/222, non-bank payment service providers can request and receive access to TARGET from Eurosystem central banks on meeting set requirements, with participation terminable or suspendable on insolvency or loss of access criteria. This represents a direct opening of Eurosystem settlement to non-bank PSPs — historically a bank-only domain — and reduces correspondent-bank dependency for Romanian fintech PSPs handling EUR.

Romania remains outside the eurozone: the leu remains the currency, with working assumptions of ERM II entry around 2026-2027 and euro adoption around 2029-2030. Settlement runs on ReGIS (the RON RTGS) and a TARGET2/T2 EUR component. The euro-adoption date is a pending horizon. The MiCA stablecoin/CASP perimeter and the TARGET access structure carry illicit-finance and sanctions-evasion significance beyond WPM's payment-instrument scope and have been flagged to FIM; WPM treats these only as payment-access observations.

Outlook

Non-bank PSP settlement access is opening via Decision 2025/222 even ahead of euro adoption, structurally reducing the correspondent-bank dependency that has historically disadvantaged non-bank PIs and EMIs. Euro adoption is repeatedly deferred, with settlement remaining in RON until adoption on working assumptions pointing to the end of the decade. The bank versus non-bank access asymmetry should be tracked as the module's continuing analytical spine.

Commercial Intelligence (M&A, Investment & Product)

Two discrete commercial events are recorded this cycle, both as dated entries rather than standalone explainers. First, an M&A completion: UniCredit completed its acquisition of a 90.1% stake in Alpha Bank România; the deal value is not publicly disclosed. This bank consolidation removes a competitor and concentrates the Romanian acquiring and PSP market under UniCredit. Second, an investment event: Instant Factoring secured EUR 30 million for company financing in Romania and Spain in November 2025, among recent Romanian fintech funding events. This cross-border RO/ES growth funding signals investor appetite for Romanian SME-finance fintech.

No specific Romanian product-release commercial event was evidenced in the trailing twelve months beyond these M&A and funding events. Structural M&A and competitive-landscape analysis is tracked under W6, and thematic product-access regulation under W9; this module carries only the discrete announced events.

Outlook

The commercial-intelligence trajectory is active, dominated by bank-market consolidation (the completed UniCredit/Alpha transaction) and fintech funding activity (Instant Factoring). Product-launch events for Romania are under-indexed in the trailing window; targeted research on specific product releases would strengthen coverage next cycle, with any structural consolidation trend remaining a W6 matter.