Licensing Atlas: fintech licences, regulators and laws worldwide

Search the Atlas

Browse

• Browse

  Regulators

  43 central banks, securities commissions, FIUs and gaming authorities

• Browse

  Licences

  12 families and 234 concrete licences, compared by country

• Browse

  Activities

  46 regulated activities and the licence each needs

• Browse

  Laws

  44 laws with summaries and links to the official full texts

• Browse

  Countries

  36 jurisdictions on one map

• Browse

  Tools

  Pre-application meetings, sandboxes, fees and timelines, comparison, statistics

Coverage

Latest regulatory changes

• V.4 of the VARA Company Rulebook and Activity-based Rulebooks, effective 19 June 2025¹ n/a VARA
• 2027-10-25: UK's new FSMA regulatory regime for cryptoassets is scheduled to come into full force, after which only FSMA-authorised firms or firms protected by statutory saving provisions may provide regulated cryptoasset services in the UK.² n/a FCA
• 2027-04-09 (12 months after 2026-04-08 royal assent): the Corporations Amendment (Digital Assets Framework) Act 2026 commences, requiring operators of digital asset platforms and tokenised custody platforms to hold an ASIC Australian Financial Services Licence in addition to any AUSTRAC registration: an AUSTRAC-only registration will no longer be sufficient for custodial digital-asset businesses.³ n/a AUSTRAC
• 2026-09-30: FCA opens the cryptoasset authorization gateway at 7:00 AM for firms to apply for Part 4A permission or permission variations under the new FSMA cryptoasset regime ahead of full commencement (gateway application window closes 28 February 2027).⁴ n/a FCA
• 2026-09-23: ESAs (EBA, EIOPA, ESMA) issued Autumn 2026 joint risk update identifying ICT external third-party dependencies, cyber threats, and private credit as key structural vulnerabilities.⁵ n/a EBA
• 2026-09-18: EBA published its final Guidelines on the management of third-party risk, delivering a simplified and proportionate framework aligned with DORA focusing on critical or important functions (CIFs).⁶ n/a EBA
• 2026-09-18: MGA launched the AI Gaming Charter in partnership with the Malta Digital Innovation Authority (MDIA) to establish governance principles for AI integration in gaming systems.⁷ n/a MGA
• 2026-09-17: the CGA disclosed unauthorised access to its online gaming portal; the incident was contained but the investigation's full scope was not yet established.⁸ n/a CGA
• 2026-09-16: European Parliament plenary confirmed Thomas Gstädtner as the new Executive Director of the EBA for a five-year renewable term.⁹ n/a EBA
• 2026-09-16: ESMA updated and republished the Interim MiCA Register across all five datasets, recording 352 authorised CASPs, 174 non-compliant entities, 49 EMT white papers, 0 ART issuers, and 998 crypto-asset white papers.¹⁰ n/a ESMA

How the Atlas is built

Every fact on every page carries a numbered source: a regulator page, an official register, a legislation portal or EUR-Lex: and the date it was read. Specialists review the pages, and the data is re-checked on a schedule. Read the methodology, download the open dataset (CC BY 4.0), or report an error.