The EMI authorization process follows a structured regulatory sequence common across all EU member states, though exact timelines vary by NCA and application complexity. Well-prepared applications with complete documentation consistently progress faster than those requiring multiple rounds of supplementary information requests from the NCA. In practice, the end-to-end journey from initial engagement through to NCA authorization and SEPA go-live takes 9-12 months for most applicants. The single biggest driver of delays is documentation quality: NCAs pause the formal review clock each time they issue a supplementary information request, which can extend the process by weeks or months. A thorough preparation phase, a pre-submission meeting with the NCA and a complete, internally consistent application pack are the most effective ways to protect your timeline. MAXCORP manages each of these stages, from the initial legal opinion through to post-authorization compliance setup.
1. Legal Opinion & Preparation
Assess your model, select jurisdiction and plan the full documentation package.
Business model structuring, jurisdiction selection, AML/CFT framework design and substance planning. Capital structure confirmed and company formation initiated.
~8
weeks
→
Practical note: Quality of preparation directly determines NCA review speed. Well-structured files receive fewer queries and progress significantly faster through the formal assessment.
What to prepare
Build the regulatory and corporate structure before submission.
- Jurisdiction selection and scope mapping
- Capital planning and own funds structure
- AML/CFT policies and governance framework
- Safeguarding and banking arrangements
2. Application Build & Pre-Meeting
Prepare the full documentation package and present it to the NCA.
Drafting business plan, AML/CFT programme, governance policies, MLRO appointment and safeguarding arrangements. Initial NCA meeting requested and held.
~10
weeks
→
Legal timeline: In Malta, the MFSA pre-application meeting takes 5-10 weeks after engagement. Lithuania encourages pre-submission consultation before the formal 3-month NCA review clock starts.
What must be complete
A coherent application prevents NCA queries and delays.
- Ownership, UBO and fit-and-proper packs
- Business plan with financial projections
- AML/CFT and transaction monitoring policies
- ICT security and outsourcing arrangements
3. NCA Review & Authorization
The NCA formally assesses the application. Queries pause the review clock.
NCA assesses governance, AML/CFT programme, management fitness, capital adequacy, safeguarding structure and operational readiness. Queries are responded to promptly.
~3-6
months
→
Legal timeline: Under EMD2, NCAs must decide within 3 months of a complete application. The clock is paused during supplementary information requests, so total review often runs longer in practice.
What is assessed
The NCA tests whether your EMI can operate compliantly.
- AML/CFT framework and KYC procedures
- Governance structure and management fitness
- Safeguarding and client fund protection
- ICT security and business continuity
4. Authorization & EU Passporting
Authorization granted. SEPA activated, passporting filed, operations commence.
Finalize SEPA connectivity, activate safeguarding account, file passporting notifications to target EU/EEA states and launch compliant operations with ongoing AML reporting in place.
~9-12
months total
→
Passporting note: Once authorized, your EMI notifies the home NCA of target EU/EEA states. The home NCA forwards the notification. No separate licence is required in each country.
What to maintain
Ongoing supervision expects live compliance, not just paper policies.
- Annual AML/CFT reporting to the NCA
- KYC, transaction monitoring and MLRO
- Capital adequacy and supervisory fees
- EU expansion via passporting notifications
* Timelines are indicative and depend on jurisdiction, documentation quality, NCA workload and the volume of supplementary information requests. MAXCORP manages the full process to minimize delays at each stage.
ⓘ Disclaimer: The content on this page is informational only and does not constitute legal, tax or regulatory advice. The EBA, national competent authorities (NCAs) and EU institutions update PSD2, EMD2 and related supervisory guidance regularly, and project specifics should be confirmed with our team before acting.