Buy-side acquisition
Buy a Payment Institution in Cyprus
A Cyprus PI gives the acquirer a CBC-supervised, PSD2-passportable payments rail with euro-area settlement, an English-law-influenced corporate code, and a 12.5% headline corporate tax rate. We work for the buyer only: no split mandate, no seller-side conflict.
Acquirers come to us when the Greenfield CBC application timeline (typically 12 to 18 months) collides with a commercial deadline they cannot move: a partner integration, a regulator-driven exit window, or a card-scheme go-live. Buying a pre-vetted, banking-ready Cypriot PI compresses that path to a change-of-control approval rather than a fresh authorisation.
Why Cyprus
The CBC perimeter and what it really lets you do
The Central Bank of Cyprus authorises and supervises payment institutions under the Provision and Use of Payment Services and Access to Payment Systems Laws of 2018 to 2025, the local transposition of PSD2 (Directive (EU) 2015/2366). The CBC’s Payment Systems Oversight Section runs the prudential side; AML supervision sits with the same regulator under the Prevention and Suppression of Money Laundering Activities Law.
The licence passports across the 27 EU member states plus Iceland, Liechtenstein and Norway under the standard PSD2 notification procedure. Cyprus’s English-language regulatory practice and common-law-flavoured corporate code make it disproportionately popular with UK-headquartered fintechs that lost EU passporting at Brexit. We see that buyer profile often.
One contrarian observation worth flagging: the headline appeal is the 12.5% corporate tax rate, but the harder-won advantage is the CBC’s track record of granting passporting notifications without re-litigating the underlying authorisation. Some EU NCAs treat each new host-state notification as a fresh fit-and-proper review. Cyprus generally does not.
Scope
What a Cyprus PI permits, and what it does not
A CBC-authorised Payment Institution may carry out any combination of the eight payment services listed in the Annex to PSD2: account servicing, direct debits, card-based instruments, money remittance, credit transfers (instant included), payment initiation services and account information services. The split between PI and Electronic Money Institution matters because a PI cannot issue e-money; that is reserved to an EMI authorisation.
Statutory minimum initial capital is tiered by service scope: €20,000 for money remittance only, €50,000 for payment initiation services only, and €125,000 where the entity offers any of services 1 to 5 (account servicing, direct debits, card payments, credit transfers and similar). The CBC layers an own-funds calculation on top under the standard PSD2 methods A, B or C.
Safeguarding of client funds (segregation in a separate account at a credit institution, or coverage by an approved insurance policy) is a continuous obligation, not an authorisation-stage check. A 2025 supervisory wave of three CBC directives tightened governance, ICT risk and outsourcing expectations for licensed PIs and EMIs; an acquirer should expect those to be live in any target’s recent supervisory correspondence. The Instant Payments Regulation (Regulation (EU) 2024/886) imposed an inbound-instant-credit-transfer go-live by 9 October 2025 for all in-scope PSPs.
Change of control runs through CBC’s qualifying-holding approval. Any acquirer crossing 10%, 20%, 30% or 50% of capital or voting rights must notify the CBC in advance; the regulator has up to 60 working days (extendable) to oppose. We structure the SPA conditions-precedent around that window so signing-to-completion does not stall.
Our book
What we broker in Cyprus
The Cypriot PI candidates in our book share a recognisable profile: live CBC authorisation in good standing, a working SEPA correspondent or direct settlement chain, a clean AML supervisory record (no open enforcement files), and an ICT environment that survives a DORA-aligned diligence read. We do not list candidates publicly. Profile detail and the change-of-control roadmap go to acquirers on a signed NDA.
Three diligence gates determine whether a target survives our pre-vetting before it ever reaches a buyer’s desk. Banking continuity asks whether the safeguarding arrangement has actually been honoured by the credit institution holding it, or whether the bank has quietly de-risked the relationship into a wind-down posture. AML programme depth asks whether there is an in-house MLRO with documented CBC engagement, or whether compliance is outsourced to a service provider whose retainer ends on day one. FTE retention asks whether the regulator-facing senior management will stay through the change of control or trigger a re-approval cycle.
Process
How an acquisition runs
The path is brief, NDA, profile shortlist, structured diligence, SPA negotiation, CBC qualifying-holding filing, and completion against regulatory non-objection. We coordinate the licensed counsel that signs the CBC submission and the corporate counsel that papers the SPA. We are the broker, not the law firm. See the process detail for the full sequence.
Expedited closings depend more on the target’s internal data-room readiness than on the CBC’s clock. The pre-vetting we run before introduction is what keeps the diligence phase short.
Why Cadena
What a buy-side-only mandate actually changes
- One-side fee structure. Sell-side success fees are paid by the seller; buy-side mandates align our economics with the buyer’s. No silent split, no dual-loyalty disclosure to manage.
- Pre-vetted compliance and banking. Every Cyprus candidate has been through CBC standing review, safeguarding-bank confirmation and AML file inspection before reaching you. We discard targets that fail any of the three.
- CBC-process literacy. The qualifying-holding filing is procedural but unforgiving on completeness. Pre-staged source-of-funds, UBO and fit-and-proper packs are how acquirers avoid the three-month re-clarification loop the CBC sometimes runs.
FAQ
Acquirer questions
Is there a Cyprus payment institution license for sale right now?
Profile-level availability of CBC-authorised PIs in our book changes month to month. We confirm under NDA. Public listing is incompatible with the standard CBC qualifying-holding pre-engagement and with the discretion most sellers stipulate; serious acquirers should expect a profile shortlist within days of brief acceptance, not a public catalogue.
How does buying a payment service provider license in Cyprus differ from applying directly to the CBC?
A direct application typically takes 12 to 18 months from formal submission and assumes the applicant has Cyprus-resident senior management, a fit-and-proper-cleared board, and a fully drafted ICT and safeguarding architecture from day one. Acquiring a live PI replaces that work with a CBC qualifying-holding approval, banking-continuity confirmation and an SPA. The result is substantively faster, with regulatory continuity as the dominant deliverable rather than a fresh authorisation.
What is the minimum capital for a Cyprus payment institution?
Initial capital depends on the service scope authorised. Money remittance only requires €20,000. Payment initiation services only require €50,000. Any combination of services 1 to 5 (account servicing, direct debits, card payments, credit transfers and similar) requires €125,000. On top of the initial figure, the CBC requires the entity to maintain own funds calculated under PSD2 method A, B or C, whichever is highest for the institution’s volumes.
Can a Cyprus PI passport into the rest of the EU?
Yes. The CBC notification under PSD2 covers all 27 EU member states plus Iceland, Liechtenstein and Norway, either freedom-to-provide-services or freedom-of-establishment. Some host states add layered ongoing reporting, particularly on AML; the CBC handles the home-state notification but the host NCA’s local conduct rules still apply once the entity passports in. We map the host-state burden during diligence.
How long does CBC change-of-control approval take?
The qualifying-holding assessment window is 60 working days from the CBC’s acknowledgement of a complete file, extendable up to 90 in defined cases. Practical experience: completeness on first submission is the single largest variable. UBO charts, source-of-funds evidence and the proposed acquirer’s fit-and-proper documentation are where most files slip. The SPA conditions-precedent should anchor on regulatory non-objection rather than on a calendar date.
Are there Cyprus-specific risks an acquirer should weigh against the headline tax advantage?
Two are worth flagging. First, banking continuity: Cypriot PIs occasionally rely on a single safeguarding-bank relationship that the credit institution has been quietly winding down. Confirm the bank’s posture before signing, not after. Second, the 2025 CBC directives on governance, ICT risk and outsourcing tightened supervisory expectations; targets with thin in-house compliance teams may need investment in the first six months post-completion to meet the new bar.
Open a buy-side mandate
Acquire a Cyprus PI
Send a one-page acquirer brief — target capital envelope, service-scope priority, group structure, banking preferences. We respond within one business day with profile match and process map.
