Payment processing without a licence: risks and legal routes

Short answer: payment processing without a licence means accepting, holding or transferring other people's money as a business without the authorisation that local law requires. In most jurisdictions that is an offence, and even where enforcement is slow the commercial risks are severe: frozen accounts, lost merchant funds, card-scheme penalties and personal liability for the people involved. There are legitimate routes into payments that do not require your own licence on day one, such as working as a registered agent of a licensed institution, as a technical service provider, or under a sponsored model. This article explains the risks and those routes; it is not legal advice.

Searches for "payment processors without a licence" usually come from two groups: merchants who were refused by regulated providers and are looking for alternatives, and entrepreneurs who want to start a payments business quickly. Both deserve a clear picture of what is actually being offered and what it costs when it goes wrong.

What a "payment service" is in law

Most regimes regulate activities, not company names. If you do any of the following for others as a business, you are likely providing a regulated payment service:

• accepting funds from payers on behalf of merchants (acquiring or collection);
• executing transfers between accounts or wallets;
• issuing payment instruments or storing value (e-money);
• money remittance without opening an account for the client;
• initiating payments from a customer's bank account.

In the EU, the Payment Services Directive (PSD2) requires such providers to be authorised as a payment institution, an e-money institution or a bank, and agents acting for them must be registered. The UK follows a similar structure under the Payment Services Regulations 2017, where providing payment services without authorisation or registration is a criminal offence. Russia treats money transfers as a banking operation that requires a Bank of Russia licence, and Ukraine licenses payment institutions through the National Bank under its Law on Payment Services. Crypto-asset services are covered by separate regimes, such as MiCA in the EU.

How "unlicensed processing" usually works

Offers marketed as "processing without a licence" or "no-KYC merchant accounts" typically rely on one of these schemes:

• Transaction laundering: your payments run through another merchant's account under a different business description or merchant category code.
• Nominee and personal accounts: payments go to cards or bank accounts registered to individuals ("drops") who are paid for the use of their accounts.
• Undisclosed sub-merchants: an intermediary aggregates many businesses under its own merchant account without telling the acquirer.
• Offshore shells: a newly registered company with no real operations opens accounts to collect funds for others.

All four share one feature: someone in the chain is misleading a bank or card scheme about whose money it is. That is why these arrangements fail suddenly, usually when volumes grow.

Risks for merchants

If you are a merchant using an unlicensed processor, the main risks are commercial and immediate:

• Loss of funds: when the bank freezes the collection accounts, your money is frozen with them, and you have no contract with the bank to claim it.
• No safeguarding: licensed institutions must safeguard client funds; an unlicensed intermediary has no such duty and may simply disappear.
• Chargebacks and fraud: disputes are handled by someone with no obligation to defend you.
• Reputational damage: your brand may appear in descriptor complaints, fraud reports or enforcement news.
• Legal exposure: knowingly using disguised processing can create liability for the merchant, especially in regulated sectors such as gambling, and may breach your own licence conditions.

Risks for those who run unlicensed processing

For founders, team leads and account holders, the risks are personal:

• Criminal liability: many countries treat unlicensed payment services or banking activity as a crime. Russia, for example, criminalised illegal banking activity long ago and in 2025 added criminal liability for transferring control of bank accounts and cards to third parties ("droppers").
• AML exposure: handling funds of unknown origin can lead to money-laundering investigations even if you did not intend to launder anything.
• Asset freezes and blacklisting: banks share information, so account holders may lose access to banking for years.
• Card-scheme penalties: acquirers can be fined for transaction laundering, and they pass those costs and terminations down the chain.

Legal routes into payments

If your goal is to build a payments business or to accept payments for a high-risk vertical, there are lawful ways to start:

1. 1.Become an agent of a licensed institution. Under PSD2 and similar regimes, a licensed payment institution can register agents who provide services on its behalf. The licence holder remains responsible and supervises the agent.
2. 2.Operate as a technical service provider. Gateways, cashier software and orchestration tools that never hold client funds can fall outside payment-services licensing, provided funds flow only between licensed parties. Check the exact exclusion with counsel. See payment orchestration providers for examples of this model.
3. 3.Use a sponsored or payment-facilitator model. A payment facilitator onboards sub-merchants under an acquirer's sponsorship, with the acquirer's knowledge and under scheme rules.
4. 4.Partner with a licensed PSP. White-label and referral arrangements let you sell a licensed provider's service under contract; see our guide on becoming a payment agent.
5. 5.Apply for your own licence. Payment institution, e-money institution or crypto-asset service provider licences take time and capital, but they give you control. Specialist compliance consultants and law firms can scope requirements, and EMIs and banks can provide safeguarding and settlement accounts.

Due-diligence checklist for any payment partner

Before you send a single transaction through a provider, verify:

• the legal entity that signs the contract and the entity that will hold your funds;
• the licence number, and that it appears in the regulator's public register for the services offered;
• whether the provider is a principal, an agent or a technical provider, and who the licensed party is;
• the merchant category code and business description under which you will be processed;
• where your funds are safeguarded and how settlements are made;
• how disputes, refunds and chargebacks are handled.

Our articles on checking a P2P processor before serious volume and on verifying payment partner representatives give step-by-step checks.

What to do if you are already exposed

If you discover that your current provider is unlicensed or misrepresents your business:

• stop increasing volume and request a full statement of your balances;
• move to a licensed provider in parallel rather than waiting for a freeze;
• keep records of contracts, communications and settlements;
• take advice from a qualified lawyer in your jurisdiction before making statements to banks or authorities.

FAQ

Is it legal to process payments without a licence?

Generally no, if you accept, hold or transfer money for others as a business. Exceptions exist for registered agents, certain technical service providers and limited networks, but they are narrow and depend on the jurisdiction.

Why do providers offer processing without KYC or a licence?

Usually because the payments are being routed through someone else's licence or accounts without disclosure. That model collapses when the underlying bank discovers it, and merchants' funds are often frozen.

Can a high-risk merchant get legitimate processing?

Often yes. Many licensed PSPs and acquirers specialise in high-risk sectors, at higher fees and with reserves. Browse high-risk merchants and card acquiring providers to see who works with which verticals.

Does Nominal hub verify licences?

Nominal hub is an information directory, not an intermediary or a regulator. Always check licences in the official public registers yourself and take independent legal advice.