Payment service provider (PSP)

A payment service provider (PSP) is any firm authorised to provide payment services. Under EU law, that includes banks, e-money institutions, payment institutions and account information or payment initiation providers. In everyday use, PSP usually means the company that lets a merchant accept card and online payments.

section

Two meanings of PSP

The legal meaning comes from the EU's Payment Services Directive (PSD2), which lists who may provide payment services: credit institutions, e-money institutions, post office giro institutions, payment institutions, and central banks and public authorities when they aren't acting in an official capacity. If a firm moves money for others as a business, it's a PSP in this sense and needs to be authorised.The merchant meaning is narrower. When an online shop says "our PSP", it means the company that processes its card and online payments, connects it to acquirers and payment methods, and pays out the proceeds. Most of these are PSPs in the legal sense too, but the everyday word focuses on checkout, not on the licence.
section

Types of PSP

TypeAuthorised toExample of what it does
Credit institution (bank)Take deposits, lend, provide all payment servicesCurrent accounts, loans, card issuing
E-money institutionIssue electronic money and provide payment servicesBusiness accounts with IBANs, transfers, cards
Payment institutionProvide payment services, without issuing e-moneyMoney remittance, merchant acquiring, payment accounts
Account information or payment initiation providerRead account data or start payments, with the customer's consentAccounting tools that pull bank data, pay-by-bank checkouts
AcquirerProcess card payments for merchants (a payment service)Settling a shop's card takings into its account
A payment gateway is the odd one out: it's the technology that passes payment data from a checkout to a processor, and on its own it isn't a payment service. Many companies sell a gateway and a licensed service together.
section

How PSPs are regulated in the EU

Under PSD2, a firm needs authorisation from its national supervisor before providing payment services, or a lighter registration for some limited activities. Authorised PSPs have to safeguard client funds, apply strong customer authentication and follow conduct rules. Once authorised, they can passport their licence across the EEA.PSD2 is due to be replaced by two new laws: PSD3, a directive on licensing and supervision, and the Payment Services Regulation (PSR), which will apply directly in every EU country. PSD3 also brings e-money institutions into the same framework as payment institutions. The texts were agreed in late 2025, but as of October 2026 they still await formal adoption and publication in the Official Journal. Most of the new rules will apply around 21 months after they enter into force, so not before 2028.
section

PSP vs payment gateway vs acquirer

PSP (merchant sense)Payment gatewayAcquirer
What it isThe company a merchant signs with to accept paymentsThe technology that captures and sends payment dataThe institution that processes card payments for the merchant
Holds or moves fundsUsually, through its own licence or a partner'sNoYes
Needs a payment licenceUsuallyNoYes
section

What a PSP needs from its own accounts

A PSP that handles client money needs more than one account. It has to keep client funds in a safeguarding account, separate from its operational money. It needs settlement accounts to receive card scheme or acquirer payouts, and payout rails to send funds to merchants in many countries and currencies. For the details, see what a PSP needs from its accounts and payout rails and how safeguarding works.Platforms that want to offer accounts to their own users can also build on a provider's licence through banking as a service.
section

FAQ

Yes. PayPal is a PSP in both senses: it processes payments for merchants, and in Europe it operates under a Luxembourg banking licence.

Yes. Banks are the first category of payment service provider listed in PSD2. In the merchant sense, though, people usually mean a checkout or processing company rather than a bank.

Yes, in the EU. Providing payment services requires authorisation as a credit institution, e-money institution or payment institution, or registration for some limited services.
section
section
Last reviewed October 22, 2026Disclaimer
This publication is provided for general information purposes and does not constitute legal, tax, or other professional advice from Narvi Payments Oy Ab or its affiliates, and it is not intended as a substitute for obtaining advice from a financial advisor or any other professional.
section