CardsIntermediate
3-D Secure, tokenisation and mobile-wallet provisioning
3-D Secure authenticates, tokenisation protects card credentials, and wallet provisioning depends on issuer, processor and network. None of it is automatic.
Read guideInsights
Fintech infrastructure knowledge centre
Practical guides for understanding, selecting and operating fintech infrastructure across banking, payments, cards, compliance and digital assets.
Featured guides
Regulation
Bank vs EMI vs payment institution vs CASP
Credit institutions, EMIs, payment institutions and CASPs carry different permissions. Identify the contracting regulated entity behind the brand before you build.
Banking
How to choose an EMI or BaaS provider
Evaluate the regulated entity, client-funds model, account structure, payment access, compliance responsibilities and operational resilience before selecting an EMI or BaaS partner.
Compliance
KYC, KYB and transaction-monitoring architecture
KYC, KYB, screening, fraud detection and transaction monitoring solve different problems. Vendor tools do not set your risk appetite or transfer your obligations.
Digital Assets
Stablecoins under MiCA: e-money tokens versus asset-referenced tokens
Under MiCA, a stablecoin may be an e-money token, an asset-referenced token or another crypto-asset. Classification depends on the asset and structure, not the label.
Payments
SEPA payment rails explained: SCT, SCT Inst and direct debit
SEPA covers SCT, SCT Inst, SDD Core and B2B, settled via infrastructure such as TIPS. Rails differ in speed, mandates, returns and scheme access.
Browse by topic
Banking3
Accounts, IBANs, safeguarding and the banking-as-a-service and e-money models behind them.
Payments5
Acquiring, gateways, orchestration, SEPA rails, instant payments and cross-border flows.
Cards2
Issuing roles, BIN sponsorship, processing, 3-D Secure, tokenisation and wallet provisioning.
Compliance2
KYC, KYB, screening, fraud signals and transaction-monitoring architecture.
Digital Assets4
Stablecoin payments, MiCA classification, CASP roles, custody and the crypto Travel Rule.
Regulation4
Provider types, licensing perimeters, DORA and the EU AML package explained.
Open Banking1
Account information, payment initiation, consent, SCA and variable recurring payments.
Infrastructure3
Core banking, ledgers, payment hubs, embedded finance and provider due diligence.
Browse by objective
- Understand licensingWork out which regulated provider type your product needs.
- Select a providerRun structured due diligence and a comparable RFP.
- Launch accountsChoose between named accounts, virtual IBANs and pooled accounts.
- Accept paymentsSeparate gateway, PSP, acquirer and orchestration roles.
- Issue cardsMap issuer, BIN sponsor, processor and programme manager.
- Build complianceDesign KYC, KYB, screening and transaction monitoring.
- Add open bankingUse account information, payment initiation and VRP.
- Use stablecoinsBuild a compliant stablecoin payment and settlement stack.
- Improve resilienceMeet DORA expectations across ICT and third-party risk.
- Design core infrastructureSeparate core banking, ledger and payment-hub concerns.
All guides
Glossary →RegulationIntroductory
Bank vs EMI vs payment institution vs CASP
Credit institutions, EMIs, payment institutions and CASPs carry different permissions. Identify the contracting regulated entity behind the brand before you build.
Read guideDigital AssetsAdvanced
Building a compliant stablecoin payment stack
Stablecoin payments, institutional settlement and issuance are different models. Banking, liquidity, custody, screening and the Travel Rule remain essential onchain.
Read guideCardsIntermediate
Card issuing: sponsor, processor and programme manager explained
The issuer, BIN sponsor, processor and programme manager perform different roles. Card issuing needs more than an issuing API — disputes, funding and tokenisation matter.
Read guideBankingIntermediate
How to choose an EMI or BaaS provider
Evaluate the regulated entity, client-funds model, account structure, payment access, compliance responsibilities and operational resilience before selecting an EMI or BaaS partner.
Read guidePaymentsIntermediate
How to compare cross-border payment providers
A provider's country list is not corridor capability. Assess collection, holding, conversion and payout separately, and test coverage and all-in cost against real corridors.
Read guideInfrastructureIntermediate
Core banking versus ledger versus payment hub
Core banking, a double-entry ledger and a payment hub are not the same. Separate the system of record, the accounting layer and payment orchestration.
Read guideDigital AssetsIntermediate
Crypto custody versus wallet-as-a-service
Custody and wallet-as-a-service overlap but are not the same. Key management, control, segregation and regulatory treatment separate them.
Read guideRegulationAdvanced
DORA, fintech vendor risk and ICT outsourcing
DORA sets ICT risk, incident, testing and third-party requirements. It does not outsource responsibility, and exposure can be direct or contractual.
Read guideInfrastructureIntermediate
Embedded-finance architecture: from regulated partner to customer experience
Embedded finance spans a distributor, a regulated entity and a technology platform. Map accounts, payments, cards, compliance, safeguarding and exit before you build.
Read guideRegulationIntroductory
EMI versus payment institution: what is the difference?
Electronic money institutions and payment institutions are distinct regulated categories with different permissions, stored-value treatment and partner models under the current EU framework.
Read guideRegulationAdvanced
The EU AML package and AMLA: what fintech teams should prepare for
The EU AML package harmonises rules and creates AMLA. The AML Regulation mainly applies from 10 July 2027, so separate preparation from current obligations.
Read guideInfrastructureIntermediate
How to run fintech provider due diligence and an RFP
Run provider selection as a structured process: define requirements, review regulatory, financial, security and data-protection posture, then score without false precision.
Read guidePaymentsIntermediate
Instant euro payments and Verification of Payee
Instant euro transfers settle continuously and pair with Verification of Payee. Deadlines differ by PSP type, with later dates for payment institutions and EMIs.
Read guideComplianceAdvanced
KYC, KYB and transaction-monitoring architecture
KYC, KYB, screening, fraud detection and transaction monitoring solve different problems. Vendor tools do not set your risk appetite or transfer your obligations.
Read guidePaymentsIntermediate
Merchant acquiring pricing: interchange++, blended rates and hidden costs
Acquiring pricing is more than a headline rate. Understand interchange, scheme fees, acquirer margin and the many per-event charges that drive your effective cost.
Read guideDigital AssetsAdvanced
MiCA CASP authorisation and the EU crypto Travel Rule
MiCA authorises crypto-asset services; the Transfer of Funds Regulation adds Travel Rule data duties. They are separate but parallel workstreams.
Read guideDigital AssetsAdvanced
Stablecoins under MiCA: e-money tokens versus asset-referenced tokens
Under MiCA, a stablecoin may be an e-money token, an asset-referenced token or another crypto-asset. Classification depends on the asset and structure, not the label.
Read guideBankingIntermediate
Named accounts, virtual IBANs and pooled accounts explained
Named accounts, virtual IBANs and pooled accounts differ in ownership, reconciliation and safeguarding. A virtual IBAN is not necessarily a separate bank account.
Read guideOpen BankingIntermediate
Open banking explained: AIS, PIS and variable recurring payments
Open banking spans account information, payment initiation and variable recurring payments, built on consent and strong customer authentication with uneven coverage.
Read guidePaymentsIntroductory
Payment gateway vs PSP vs acquirer vs orchestration
Gateways, PSPs, acquirers, processors and orchestration platforms play distinct roles. Separate the money flow from the data flow before choosing an architecture.
Read guideBankingIntermediate
How safeguarding works for EMIs and payment institutions
Safeguarding protects customer funds through segregation and other permitted methods. It is not deposit insurance and not the same as a firm's prudential capital.
Read guideComplianceAdvanced
Sanctions, PEP and adverse-media screening architecture
Sanctions, PEP and adverse-media screening answer different questions. Matching quality, thresholds and alert triage matter as much as the data source.
Read guidePaymentsIntermediate
SEPA payment rails explained: SCT, SCT Inst and direct debit
SEPA covers SCT, SCT Inst, SDD Core and B2B, settled via infrastructure such as TIPS. Rails differ in speed, mandates, returns and scheme access.
Read guideNo guides match your filters. Try clearing them.