Fintech & digital payments rules in Spain (2026)

Spain's CNMV granted Bit2Me the first MiCA Crypto-Asset Service Provider authorization issued to a native crypto fintech in Spain, following BBVA's earlier license in March 2025. This confirms the CNMV's fully operational MiCA authorization pipeline and sets a precedent for non-bank fintechs seeking passporting across the EU.

The Council of Ministers approved an Anteproyecto accompanied by two Royal Decree drafts that transpose DORA sanctions, allow payment institutions to participate directly in payment systems (ending reliance on bank intermediaries), and extend the Ley 7/2020 sandbox — the most comprehensive update to Spain's fintech framework in four years.

The Spanish government announced it would close the MiCA transitional window six months ahead of the EU-wide July 2026 deadline, requiring all crypto-asset service providers operating in Spain to obtain full MiCA authorization or exit the market by 31 December 2025.

Following RDL 7/2021, Banco de España activated the formal registration procedure for virtual-currency exchange and custodian wallet providers; existing operators had until 29 January 2022 to enroll, submitting an AML programme, risk assessment, and criminal records — Spain's first operational licensing gateway for the crypto sector.

RDL 7/2021 transposed the EU's 5th Anti-Money Laundering Directive (AMLD5), bringing virtual-asset service providers under full AML/CFT obligations and mandating registration with Banco de España — Spain's first statutory licensing requirement specifically targeting the crypto industry.

Law 7/2020 on the Digital Transformation of the Financial System created a controlled testing environment co-supervised by Banco de España, CNMV, and the Directorate-General for Insurance, attracting 67 projects in its inaugural 2021 cohort and setting the institutional template for Spain's innovation-friendly fintech policy.

RD 736/2019 transferred authorization power over payment institutions from the Ministry of Economy to Banco de España, prescribed three own-funds calculation methods, and codified detailed risk-control and client-protection requirements — closing the PSD2 transposition loop opened by RDL 19/2018.

RDL 19/2018 replaced Ley 16/2009 as Spain's primary payment-services law, introducing open-banking access rights for account information and payment initiation services, strong customer authentication, and a comprehensive ban on payment surcharges; enacted 11 months past the EU deadline, it remains the cornerstone of Spain's retail payments regulation.

Law 21/2011 transposed EU Directive 2009/110/EC (EMD2), establishing a dedicated electronic money institution (entidad de dinero electrónico) licence supervised by Banco de España, prohibiting deposit-taking, and allowing EMIs to provide payment services — opening the door for the first wave of non-bank digital payment operators in Spain.

Law 16/2009 on Payment Services transposed EU Directive 2007/64/EC, introducing the payment institution as a new Banco de España-regulated entity class and establishing transparency and execution-time rules for payment transactions — the foundational pillar on which all subsequent Spanish digital payments law was built.