Malta's New Rules Could Change How Payment Firms Handle Your Money

Alejandro Martínez · 2026-07-21

The latest two MFSA circulars signal a clear shift toward tighter governance and smarter supervision across Malta's financial services sector. One focuses on how payment institutions and electronic money institutions may safeguard client funds through secure, liquid, low-risk assets, while the other introduces the Harmonised Regulatory Reporting Framework, a new reporting model designed to simplify domestic returns and improve data quality. Together, they point to a regulator that is sharpening prudential expectations while also reducing unnecessary reporting friction. For firms, the message is simple: safeguarding arrangements must be well-justified, well-documented and continuously monitored, and reporting systems must start preparing now for a more structured, JSON-based future. ### What These Circulars Actually Mean If you're in the payments space, you've probably seen a lot of regulatory noise lately. But these two circulars from the Malta Financial Services Authority deserve your full attention. They're not just bureaucratic updates. They're a roadmap for how the regulator expects firms to operate going forward. Let's break down each one. ### Safeguarding Client Funds: The New Standard The first circular tackles something that's always been a bit fuzzy: how payment institutions and electronic money institutions should protect client money. The MFSA is now saying that these firms need to invest client funds only in secure, liquid, and low-risk assets. No more parking money in anything that could be considered risky. Here's what that means in practice: - Funds must be held in accounts that are clearly segregated from the firm's own money. - Investments must be in assets like government bonds or highly rated corporate debt. - Firms need to document their rationale for choosing specific safeguarding arrangements. - Regular monitoring is non-negotiable. You can't just set it and forget it. The regulator is essentially saying: if you're holding client money, you better be able to prove it's safe at all times. This aligns with broader European trends toward greater consumer protection in financial services. ### The Harmonised Regulatory Reporting Framework The second circular introduces something called the Harmonised Regulatory Reporting Framework, or HRRF. This is a new reporting model designed to simplify domestic returns and improve data quality across the sector. Think of it like this: instead of filling out different forms for different regulators, firms will eventually submit everything in a standardized, JSON-based format. That means less manual work, fewer errors, and faster processing times for everyone involved. > "The shift toward JSON-based reporting is a game-changer for compliance teams who've been drowning in spreadsheets and PDFs." ### What Firms Need to Do Now For firms operating in Malta or planning to enter the market, the message is clear. Start reviewing your safeguarding arrangements today. Make sure your documentation is airtight. And begin preparing your reporting systems for the JSON future that's coming. The MFSA isn't just tightening rules. It's also trying to make life easier for compliant firms by reducing unnecessary friction. But the window to adapt is closing fast. Firms that wait until the last minute will find themselves scrambling. ### Why This Matters for the European Payments Landscape Malta has positioned itself as a hub for fintech and payments innovation. These circulars signal that the regulator is maturing alongside the industry. It's no longer enough to just have a license. You need to demonstrate ongoing compliance with clear, enforceable standards. For professionals following European payments news, this is a trend worth watching. Similar moves are happening across the EU payment system news landscape, with regulators in Ireland, Lithuania, and the Netherlands all tightening their approaches. The wero europe initiative and other cross-border payment projects will likely face similar scrutiny. ### The Bottom Line The MFSA is raising the bar for payment institutions and electronic money institutions. But it's also providing clarity. Firms that embrace these changes early will build trust with regulators and clients alike. Those that don't will face an uphill battle. Start with your safeguarding documentation. Then look at your reporting infrastructure. And keep an eye on future circulars. This is just the beginning of a more structured regulatory environment in Malta.