Debanking (de-risking)
Debanking is when a bank or payment provider closes a customer's account or refuses to open one. De-risking is the wider practice behind much of it: exiting whole categories of customers, such as crypto firms or payment businesses, because of the risk they're seen to carry, rather than assessing each customer on its own merits.
Why providers debank
The most common reason is cost. Checking and monitoring a higher-risk customer takes more compliance work, and when that cost outweighs what the account earns, a provider may decide not to serve the whole category.Other reasons stack on top. A provider's risk appetite may simply exclude certain sectors. Its own correspondent banks may pressure it to drop customers they consider risky. And reputational concerns or sanctions exposure can push a provider to exit relationships that are lawful but uncomfortable.None of these reasons is about whether a particular business has done anything wrong. That's what separates de-risking from closing an account because of a specific suspicion.
Which businesses are most affected
The categories most often exited are crypto-asset businesses, payment service providers, iGaming operators, money service businesses, charities and NGOs working in high-risk regions, and companies whose owners are politically exposed persons. Businesses with cross-border structures and owners in several countries also tend to face more questions.Rules that limit debanking
| Rule | Where | What it does |
|---|---|---|
| EBA guidelines on access to financial services (EBA/GL/2023/04) | EU | Tell institutions to manage ML/TF risk rather than refuse whole categories, and to consider options short of refusal before declining or ending a relationship |
| EBA guidelines on ML/TF risk factors, amended (EBA/GL/2023/03) | EU | Explain how to assess not-for-profit organisations so they aren't refused by default |
| PSD2 Article 36 | EU | Requires banks to give payment institutions access to payment account services on an objective, non-discriminatory and proportionate basis, and to explain refusals to their supervisor |
| 90-day notice rule | UK | Requires providers to give at least 90 days' notice, with reasons, before closing a payment account. Applies to contracts agreed from 28 April 2026 |
What a business can do
Ask for the reason in writing. A provider may not be able to share everything, especially where suspicion reporting is involved, but a reasoned decision is easier to challenge or fix.Use the complaints route. In the EU, that means the provider's own complaints procedure, then the national ombudsman or supervisor where one handles business complaints. A payment or e-money institution refused an account by a bank can raise it with its national supervisor under PSD2 Article 36.Keep your compliance file ready: ownership structure, licences, source of funds evidence and a clear description of your business model. The know your business entry lists what providers look for.And don't rely on a single provider. A second account, at a different kind of institution, keeps payments moving if one relationship ends. For companies with complex structures, see business accounts for funds, holdings and hard-to-bank structures.FAQ
In the UK, yes, for payment accounts under contracts agreed from 28 April 2026, with at least 90 days' notice. In the EU there's no single rule for business accounts, but the EBA expects institutions to document and justify their decisions.
Yes, through the provider's complaints procedure and then the ombudsman or supervisor, depending on the country. Regulated payment and e-money institutions refused by a bank can also involve their supervisor.
Generally, yes. Providers can choose their customers within their contract terms and the law. The rules above limit how they do it, not whether they can.
Last reviewed October 21, 2026Disclaimer
This publication is provided for general information purposes and does not constitute legal, tax, or other professional advice from Narvi Payments Oy Ab or its affiliates, and it is not intended as a substitute for obtaining advice from a financial advisor or any other professional.
This publication is provided for general information purposes and does not constitute legal, tax, or other professional advice from Narvi Payments Oy Ab or its affiliates, and it is not intended as a substitute for obtaining advice from a financial advisor or any other professional.
What We Offer
IBAN Accounts For Your Business
Support & Compliance
Narvi Knowledge Center
Alternative Investment Funds [whitepaper]Family Offices [whitepaper]Shipping Industry [whitepaper]How to Open a Business Account in FinlandNarvi vs. Wise, Revolut, N26, and other alternativesNarvi vs. Stable.comNarvi vs. payabl.Narvi vs. ConnectPayNarvi vs. IBAN4UNarvi vs. GenomePayments BlogPayments Glossary
Narvi Payments Oy Ab is an Authorized Electronic Money Institution (EMI). Narvi’s EMI license is granted by the Finnish Financial Supervisory Authority (FIN FSA) with the registration number 3190214-6. Narvi’s license is passportised to all European Union countries.
Built and regulated in Finland© 2026 Narvi. All Rights Reserved.
v1.322.0