Debanking (de-risking)
Debanking is when a bank or payment provider closes a customer's accounts or refuses to open one, cutting a business or an individual off from banking services. De-risking is the wider practice behind much of it: exiting whole categories of customers, such as crypto firms or payment businesses, because of the risk they're seen to carry, rather than assessing each customer on its own merits.
Why providers debank
The most common reason is cost. Checking and monitoring a higher-risk customer takes more compliance work, and when that cost outweighs what the account earns, financial institutions may decide not to serve the whole category. Within the law, a provider has wide discretion over whom it serves.Other reasons stack on top. A provider's risk appetite may simply exclude certain sectors. Its own correspondent banks may pressure it to drop customers they consider risky. And reputational concerns or sanctions exposure can push a provider to exit relationships that are lawful but uncomfortable.None of these reasons is about whether a particular business has done anything wrong. That's what separates de-risking from closing an account because of a specific suspicion.
How debanking happens in practice
Most account closures start with a review process, not a single event. Typical triggers:- Automated monitoring: transaction monitoring systems flag payments that don't fit the customer's profile, and a review follows.
- Unanswered information requests: a provider asks for updated KYC documents or an explanation of a payment and doesn't get a reply in time.
- Financial crime risk: concerns about money laundering, terrorist financing or sanctions exposure, sometimes with no specific suspicion about the customer.
- Cost and low usage: accounts that are expensive to monitor or barely used get closed because they aren't worth managing.
- Reputational risk: providers exit customers or sectors they think could embarrass them, even when the business is lawful.
Which businesses are most affected
The categories most often exited are crypto-asset businesses, payment service providers, iGaming operators, money service businesses, charities and NGOs working in high-risk regions, and companies whose owners are politically exposed persons. Businesses with cross-border structures and owners in several countries also tend to face more questions.What debanking means for a business
Losing a business account is an operational problem first. Without it, a company can't receive payments from customers, pay suppliers or run payroll, and card acquirers and marketplaces may suspend payouts until a new account is verified.- Cash flow: funds can be frozen during the exit, and lenders may treat a closure as a warning sign, which limits credit and liquidity.
- Time: opening a replacement account means a full onboarding review, which can take weeks for higher-risk sectors.
- Reputation: counterparties and partners notice when payment details change at short notice, and new providers ask why the previous relationship ended.
Rules that limit debanking
| Rule | Where | What it does |
|---|---|---|
| EBA guidelines on access to financial services (EBA/GL/2023/04) | EU | Tell institutions to manage ML/TF risk rather than refuse whole categories, and to consider options short of refusal before declining or ending a relationship |
| EBA guidelines on ML/TF risk factors, amended (EBA/GL/2023/03) | EU | Explain how to assess not-for-profit organisations so they aren't refused by default |
| PSD2 Article 36 | EU | Requires banks to give payment institutions access to payment account services on an objective, non-discriminatory and proportionate basis, and to explain refusals to their supervisor |
| 90-day notice rule | UK | Requires providers to give at least 90 days' notice, with reasons, before closing a payment account. Applies to contracts agreed from 28 April 2026. Larger businesses can agree to opt out; consumers, micro-enterprises and small charities can't |
Debanking in the UK and the US
Debanking practices became a political issue in both countries after high-profile account closures, and both governments now push for more transparency.- UK: after the 2023 Coutts case, the Financial Conduct Authority reviewed how banks close accounts and found no evidence that they were closing accounts primarily because of customers' political views. New rules from 28 April 2026 require at least 90 days' notice and reasons for most payment account closures. Micro-enterprises and small businesses can take unresolved complaints to the Financial Ombudsman Service.
- US: on 7 August 2025, President Trump signed the executive order Guaranteeing Fair Banking for All Americans. It told federal banking regulators to remove reputational risk from their supervisory guidance and to review institutions for politicised or unlawful debanking.
What a business can do
Ask for the reason in writing. A provider may not be able to share everything, especially where suspicion reporting is involved, but a reasoned decision is easier to challenge or fix.Use the complaints route. In the EU, that means the provider's own complaints procedure, then the national ombudsman or supervisor where one handles business complaints. A payment institution refused an account by a bank can raise it with its national supervisor under PSD2 Article 36.Keep your compliance file ready: ownership structure, licences, source of funds evidence and a clear description of your business model. The know your business entry lists what providers look for.And don't rely on a single provider. A second account, at a different kind of institution, keeps payments moving if one relationship ends. For companies with complex structures, see business accounts for funds, holdings and hard-to-bank structures.FAQ
In the UK, yes, for payment accounts under contracts agreed from 28 April 2026, with at least 90 days' notice, unless a larger business agreed to opt out. In the EU there's no single rule for business accounts, but the EBA expects institutions to document and justify their decisions.
Yes. You can appeal through the provider's complaints procedure and then the ombudsman or supervisor, depending on the country. Payment institutions refused by a bank can also raise it with their supervisor under PSD2 Article 36.
Generally, yes. Providers can choose their customers within their contract terms and the law. The rules above limit how they do it, not whether they can.
Debanking is the outcome: an account is closed or refused. De-risking is one reason for it: a provider exits a whole category of customers because of the risk the category carries, rather than assessing each customer individually.
Yes, while it investigates a concern or if it has to under anti-money laundering or sanctions rules. Funds frozen under sanctions stay frozen until a licence is granted. In other cases, the provider must release the balance when the relationship ends.
Ask for the reason in writing, move critical payments to backup bank accounts, and complain through the provider's procedure if you think the decision is wrong. When you apply elsewhere, explain what happened and bring a complete compliance file.
Related terms and sources
Know your business (KYB) · Source of funds vs source of wealth · Correspondent bank · Browse the full glossary- EBA: Guidelines to challenge unwarranted de-risking (31 March 2023)
- Directive (EU) 2015/2366 (PSD2), Article 36
- Linklaters: New UK rules to protect against de-banking
- Directive 2009/110/EC (E-money Directive), Article 3
- Herbert Smith Freehills Kramer: UK final rules limiting PSPs' rights to exit customer relationships
- Mayer Brown: President Trump signs debanking executive order (August 2025)
- Directive 2014/92/EU (Payment Accounts Directive)
Last reviewed October 30, 2026Disclaimer
This publication is provided for general information purposes and does not constitute legal, tax, or other professional advice from Narvi Payments Oy Ab or its affiliates, and it is not intended as a substitute for obtaining advice from a financial advisor or any other professional.
This publication is provided for general information purposes and does not constitute legal, tax, or other professional advice from Narvi Payments Oy Ab or its affiliates, and it is not intended as a substitute for obtaining advice from a financial advisor or any other professional.
What We Offer
IBAN Accounts For Your Business
Support & Compliance
Narvi Knowledge Center
Alternative Investment Funds [whitepaper]Family Offices [whitepaper]Shipping Industry [whitepaper]How to Open a Business Account in FinlandNarvi vs. Wise, Revolut, N26, and other alternativesNarvi vs. Stable.comNarvi vs. payabl.Narvi vs. ConnectPayNarvi vs. IBAN4UNarvi vs. GenomeNarvi vs. PaxumNarvi vs. BilderlingsNarvi vs. NetellerNarvi vs. KontistPayments BlogPayments Glossary
Narvi Payments Oy Ab is an Authorized Electronic Money Institution (EMI). Narvi’s EMI license is granted by the Finnish Financial Supervisory Authority (FIN FSA) with the registration number 3190214-6. Narvi’s license is passportised to all European Union countries.
Built and regulated in Finland© 2026 Narvi. All Rights Reserved.
v1.331.0