The phrase usually arrives from below. It is in a footer, in the fifth paragraph of a terms document, or in the onboarding pack that landed the week your company opened an account somewhere that is not a bank.

A payment institution is a firm licensed to move money for other people without being a bank. Put simply, it is an undertaking that provides payment services and which is not a CRR credit institution or an e-money institution, and in most of Europe it needs a licence from its national regulator to operate at all.

That definition is accurate and it is not yet useful. What follows is the version that changes decisions: where the category came from, the one legal rule that defines it, the limit it puts on your account, and how the same firm looks from a UK desk and a German one.

Where the category came from

Payment institutions were invented, deliberately, to break a monopoly.

Before 2007 there was no clean way to provide payment services in Europe without being a bank or an e-money issuer. The first Payment Services Directive introduced payment institutions as a new category of payment service provider, a single licence allowing legal persons outside the existing categories to provide payment services throughout the Union, on the condition that they are prohibited from accepting deposits from users and permitted to use funds received from users only for rendering payment services.

Read that condition twice. It is the whole design. Regulators opened the payments market to non-banks by fencing off the one activity that makes a bank a bank.

The UK version of this framework is the Payment Services Regulations 2017, which implemented the second Payment Services Directive. The PSRs 2017 establish a class of firms authorised or registered to provide payment services, collectively referred to as payment institutions, and the business models expected to fall into it include money remitters, non-bank credit card issuers, merchant acquiring firms, payment initiation service providers and account information service providers.

So the label covers a wider range of firms than most people assume. The company running your card terminal and the company holding your multi currency balance can both be payment institutions.

The rule that defines the category: your balance is not a deposit

Everything else follows from this one sentence, which almost never appears in customer-facing material.

The Payment Services Regulations 2017 provide an authorisation regime for payment service providers which are neither deposit-takers nor electronic money institutions, and articles 9AB and 9L of the Regulated Activities Order provide that funds received by payment institutions from payment service users, with a view to the provision of payment services, constitute neither deposits nor electronic money.

Your money in a payment account is not a deposit. Not colloquially, not as a matter of law.

Two things follow. The first is good: because it is not a deposit, it is not funding a lending book, and the firm cannot put it at risk in the way a bank puts deposits at risk by design. The second is the trade: because it is not a deposit, deposit protection does not reach it. The substitute is what the authorised status obliges a firm to do with client money, which is a genuine protection built on a different mechanism.

If the firm holding your money issues stored value rather than simply transferring it, it is an electronic money institution instead, which is a different licence with materially similar customer protections.

Three UK licences hide behind one word

People say payment institution as though it names one thing. In the UK it names three, and the differences are not cosmetic.

The FCA recognises three non-bank provider types: electronic money institutions, authorised payment institutions, and small payment institutions, all of which must be authorised or registered before they can operate.

Authorised payment institution. The full licence. Capital requirements, safeguarding obligations, ongoing supervision, and no ceiling on transaction volume. This is what a serious provider holds.

Small payment institution. A lighter registration regime. It is broadly relevant only to firms executing payment transactions with a monthly average of 3 million euros or less over a 12 month period, and which do not carry on account information services or payment initiation services. Small payment institutions are not subject to the capital requirements in Part 3 of the regulations, and they are not required to safeguard.

Registered account information service provider. A registration for firms that only read account data and never touch funds. Your accounting aggregator, not your account.

That middle tier is the one worth checking. Two firms can both appear on the FCA register and only one of them has to ring-fence your balance. The full picture of how a payment institution differs from a bank in practice starts with getting this tier right, not with comparing app screenshots.

None of these is optional for a firm in scope. The regulations set out the conditions for authorisation as a payment institution and for registration as a small payment institution, and make it an offence for an authorised payment institution, a small payment institution or a registered account information service provider to act without permission.

The limit nobody puts on the pricing page

Here is the part that catches finance teams out, and it is a rule rather than a policy.

Payment accounts held by a payment institution must only be used in relation to payment transactions under regulation 33 of the PSRs 2017, and the FCA's view is that a payment institution cannot hold funds for a payment service user unless accompanied by a payment order for onward transfer, whether to be executed immediately or on a future date. Funds cannot be held indefinitely, and should not be held for longer than is necessary for operational and technical reasons.

A payment account is an operating account. It is built to receive, convert and send, and the regulation assumes money is passing through it on the way somewhere.

This is not a warning that a provider will close your account for holding a balance across a weekend. It is a structural fact about what the licence permits, and it explains a lot of otherwise puzzling product design: why payment institutions compete on rails, speed and conversion cost rather than on what your balance earns, and why a treasury reserve and an operating float are two different problems that tend to sit in two different places.

In Germany the same firm is a Zahlungsinstitut

If your business spans the Channel, you are dealing with two registers and one concept.

In Germany the authorisation requirements for payment institutions and e-money institutions, and the registration requirement for account information services, are set out in sections 10, 11 and 34 of the Payment Services Supervision Act, the ZAG. BaFin enters authorised firms in its Register of ZAG institutions under sections 43 and 44, and the European Banking Authority adds them to its register of institutions authorised in all Member States. A ZAG institution may then operate throughout the EEA under sections 38 and 39, through a branch, through agents, or under the freedom to provide services, after notifying BaFin.

Same category, same directive underneath, different regulator and different register. The practical consequence is that the licence is national. A firm authorised in Frankfurt is not automatically authorised in London, and the register you should be searching is the one belonging to the country where the firm holding your money is established.

It is also worth knowing what the licence costs a firm to hold, because it tells you how much supervision sits behind the badge. BaFin charges 6,150 euros for authorisation to provide a single payment service and 8,515 euros for several or all of them. Payment institutions and e-money institutions are then under ongoing supervision by BaFin and the Deutsche Bundesbank, must meet own funds requirements at all times, submit monthly returns, and have their accounts audited annually.

Monthly returns and an annual audit are not a light-touch regime. They are, however, a different regime from the one that governs a bank, aimed at a firm that does not lend.

What you trade away, and what you get instead

The honest summary of the deal is two sentences.

You give up deposit protection. For firms failing from 1 December 2025 the FSCS protects up to 120,000 GBP per eligible person per authorised firm, and that scheme covers deposits held at banks and building societies. It does not extend to payment institutions, because there is no deposit to protect.

You get segregation instead. Regulation 23 of the PSRs 2017 requires an authorised payment institution to keep relevant funds separated from its own money and placed in a designated safeguarding account or approved secure liquid assets. It is a real obligation with real teeth, and it works differently from a compensation scheme in ways that matter when a firm fails. That comparison deserves its own treatment, and gets it in safeguarding compared with FSCS cover.

Neither arrangement is simply better. They protect against different failures, and the useful question is not which is safer in the abstract but which one is holding the money you need on Tuesday.

How to check what is actually holding your money

Four steps, and they take about five minutes.

  1. Find the regulated firm named in the footer, terms or impressum. It is frequently not the brand on the app.
  2. Get its firm reference number, or its entry in the ZAG institutions register if it is German, and search the relevant regulator's register directly rather than trusting a badge on a homepage.
  3. Confirm which category it holds. Authorised payment institution, small payment institution and registered account information service provider are not interchangeable.
  4. Establish whether the company you are contracting with is the authorised firm or a distributor acting on its behalf. If it is a distributor, the reference number that matters belongs to the principal.

Step four is where most checks stop one layer too early, so here is our own structure stated plainly. EXFI is a trading name of EX Financial Solutions Ltd, company number 17105188, which is not itself authorised or regulated by the FCA and acts as a distributor of payment services provided by Gemba Finance Ltd, authorised and regulated by the FCA as a payment institution under FRN 804853. EXFI accounts are payment accounts, not bank accounts. They are not covered by the FSCS. Funds are safeguarded in segregated accounts in accordance with the Payment Services Regulations 2017.

Ask every provider for that paragraph. A firm that can produce it in one sentence has thought about your due diligence.

Once you know what kind of firm is holding the money, the remaining questions are operational: rails, currencies, conversion cost and who issues the account identifier. That is the work of choosing a multi currency business account on the things you can actually measure.

FAQ

Can a payment institution pay interest on my balance? No. A payment institution is prohibited from accepting deposits and may use funds received from users only for rendering payment services, so there is no lending activity behind the account to generate interest and no legal basis for paying it on a payment account balance.

What is the difference between a payment institution and a payment service provider? Payment service provider is the umbrella term. To provide payment services in the UK you must be an authorised payment institution, a small payment institution, a registered account information service provider, a credit institution with a Part 4A permission to accept deposits, an electronic money institution, the Post Office Limited, the Bank of England, a government department or local authority, or an exempt person such as a credit union. Payment institutions are one branch of that list.

Which regulator supervises a payment institution? In the UK, the FCA, which authorises under the PSRs 2017 and lists the firm on the Financial Services Register with a firm reference number. In Germany, BaFin authorises under the ZAG and supervises jointly with the Deutsche Bundesbank, with the firm listed in the ZAG institutions register.

Does a payment institution account come with an IBAN? Often, but the IBAN identifies a payment account rather than a bank account, and whether it is dedicated to your company or shared depends entirely on the provider. EXFI accounts hold balances in 16 or more currencies, each with its own dedicated IBAN where applicable, reachable over SWIFT, SEPA, FPS, BACS and CHAPS. Ask any provider which of those two things they are offering before you onboard.

Which firm is authorised behind EX FI? Gemba Finance Limited, FCA FRN 804853, provides the regulated payment services, for UK customers only. EX Financial Solutions Ltd, trading as EXFI, is the distributor and is not itself authorised or regulated by the FCA.