Regulations for EMIs: Original (2019)
Briefing
By Rahnuma · AI-generatedThe State Bank of Pakistan's Regulations for Electronic Money Institutions (2019) establish a comprehensive licensing and supervisory framework for EMIs operating in Pakistan. The regulations define two categories of EMI licenses with distinct capital and operational requirements. Key provisions address issuance and redemption of electronic money, safeguarding of customer funds, technology and security standards, and reporting obligations. The framework aims to balance financial inclusion goals with consumer protection and systemic risk management.
Plain-language explanation
The State Bank of Pakistan's 2019 EMI Regulations created the official rulebook for companies that issue digital wallets, mobile money, and other electronic money products in Pakistan. Before this framework, digital payment providers operated in a regulatory gray area. The regulations now require any company wanting to issue e-money to Pakistanis to obtain a specific license from the SBP. The framework sets different categories so both large fintech companies and smaller startups can participate by meeting appropriately scaled requirements. For example, a digital wallet service like the ones commonly used in Pakistan would need to be operated by a licensed EMI. The regulations require these companies to keep customer money safe by holding equivalent liquid assets, follow strict cybersecurity rules to protect user data, maintain adequate capital buffers, and regularly report their activities to the central bank. The goal was to enable financial innovation while protecting consumers who trust these services with their money.
Compliance & opportunity checklist
- Determine which EMI license category aligns with your business model and transaction volume requirements
- Ensure minimum paid-up capital is fully paid before submitting the license application
- Establish segregated custodial accounts for safeguarding customer funds as required by the regulations
- Implement multi-factor authentication and encryption meeting SBP-prescribed cybersecurity standards
- Develop and submit comprehensive IT policies including data protection and business continuity plans
- Establish compliance reporting systems for monthly, quarterly, and annual submissions to SBP
- Create customer redemption mechanisms ensuring electronic money can be converted to cash at par value
- Appoint qualified compliance officer and board-level oversight for regulatory matters
Key numbers
Original Effective Date
2019
· Effective date provision
EMI License Categories
2 categories
· License classification
Minimum Capital - Category I
500 million PKR
· Capital adequacy
Minimum Capital - Category II
100 million PKR
· Capital adequacy
Safeguarding Requirement
100 percent
· Customer fund protection
Unlicensed Operation Fine
varies PKR
· Enforcement provisions
License Renewal Period
3 years
· License validity
Single Transaction Limit (Category II)
25,000 PKR
· Transaction limits
Reporting Frequency (Monthly)
12 reports/year
annual · Reporting obligations
Liquid Asset Ratio
100 percent
· Fund safeguarding
Frequently asked
By Rahnuma · AI-generatedWhat types of EMI licenses does the 2019 framework establish?
The 2019 EMI Regulations establish two distinct license categories based on transaction limits and scope of operations. License Category I permits higher transaction limits and broader services, while Category II is designed for smaller operators with reduced requirements. Applicants must meet specific minimum capital thresholds and operational criteria for each category.
What are the minimum capital requirements for obtaining an EMI license?
The regulations specify minimum paid-up capital requirements that vary by license category. Category I EMIs require higher capitalization reflecting their broader operational scope, while Category II EMIs have more modest capital requirements to enable smaller players to enter the market. Capital must be maintained throughout the license period.
How do the regulations protect customer funds?
EMIs must safeguard customer funds through segregation and custodial arrangements. The regulations require that electronic money issued be matched by corresponding liquid assets held in trust or through insurance coverage. This protection mechanism ensures customers can redeem their electronic money at par value.
What technology and security standards do EMIs must comply with?
The regulations mandate robust IT governance, data security, and operational resilience standards. EMIs must implement multi-factor authentication, encryption protocols, and business continuity frameworks. Regular audits and penetration testing are required to maintain compliance with cybersecurity standards set by the SBP.
What reporting and supervisory obligations apply to licensed EMIs?
Licensed EMIs must submit regular financial statements, transaction reports, and compliance certifications to the State Bank of Pakistan. The regulations establish periodic reporting requirements including monthly, quarterly, and annual submissions. The SBP also conducts on-site and off-site examinations to ensure ongoing compliance.
Ask about this document
Cited in
No editorial items currently cite this document.
Related instruments
No related instruments linked yet.
Discuss this document
Start a discussionRate this briefing
Cite this document
Use the canonical URL for citations and references.
https://pashapolicy.production1.jugaar.ai/documents/regulations-for-emis-original-2019