How the EEA Tracker is built

A monthly snapshot of regulated-fintech activity across the European Economic Area. Four panels — Authorisations, Banking Access, Enforcement, Pipeline — that together answer the question a CFO or MLRO actually needs answered every month: what changed, and does it affect us? Each panel cites its sources transparently, with a finconduit practitioner read where the public record alone does not tell the full story.

The snapshot is rebuilt on the first business week of every month. The current snapshot is tagged 2026-05 and was published at 2026-05-08. Snapshots are immutable: once shipped, the file is preserved so an old reading remains reproducible. Material between-snapshot events go into the next month's panel rather than retro-editing this one.

Counts of holders of each EEA licence type — CASP (MiCA Title V), EMT issuer (MiCA Title IV), ART issuer (MiCA Title III), EMI (EMD2), and PI (PSD2) — by jurisdiction and NCA, with new authorisations and withdrawals over the trailing 30 days. CASP / EMT / ART counts are read from ESMA's Interim MiCA Register (weekly CSV exports — directly reproducible by clicking the source URL in the panel). EMI and PI counts come from the public NCA registers (BaFin, DNB, ACPR, CBI, BoL, FI, CSSF, MFSA, CySEC); these are point-in-time and may differ by ±1–3 from a same-day live register read because NCA registers are not updated synchronously across jurisdictions. Source type: regulator-issued.

The differentiator. A jurisdiction-level temperature read (open / selective / constrained / frozen) for foreign-controlled regulated fintechs seeking euro IBANs, plus a tier-archetype posture grid (Tier-1 EU clearing, Tier-2 specialist, Tier-3 crypto-aware) and a dated feed of material events — derisking statements, correspondent-policy shifts, safeguarding-bank movements. Banks are never named; we work in tier archetypes only. This panel is the finconduit practitioner observation layer. Source type: practitioner-experience, calibrated against NCA derisking statements where they exist.

Chronological feed of NCA enforcement actions in the trailing 30 days: AML/CFT actions, authorisation revocations, governance findings, CASP supervisory notices, public warnings, fines, business restrictions, AMLA-readiness signals, and EU sanctions designations relevant to regulated fintechs. Each entry carries a one-line finconduit signal: what this tells operating firms about supervisor priorities. Where an entry refers to “an unnamed CASP / EMI / PSP”, that reflects either (a) the NCA's own anonymised publication or (b) finconduit's deliberate non-naming where an institution is under engagement; the source URL points to the relevant NCA enforcement-notice page where a named version is public. Source type: regulator-issued.

Forward-looking calendar of MiCA, DORA, AMLR, PSD3, ESA RTS milestones, national transpositions, and high-risk-jurisdiction list updates — bucketed by next-30-day, next-90-day, next-180-day, and beyond. Each entry has a short read on operational impact. Source type: primary-statute for the underlying regulations and regulator-issued for ESA and NCA timelines.

Five labels, applied to every cited source: primary-statute (EUR-Lex regulations, cited by article number); regulator-issued (NCA / EBA / ESMA / EIOPA published guidance); industry-association; practitioner-published (law-firm articles, Big-4 reg-watch); practitioner-experience (finconduit's engagement-derived observations). The last category is honest about what is calibration vs statute. Mirrors the taxonomy used across finconduit's practitioner tools.

Not investment advice. Not legal advice. Not a substitute for an engagement letter. The banking-access read is a practitioner observation, not a regulator-published index, and conditions in named jurisdictions can change between snapshots faster than this page refreshes. Bank names are deliberately withheld in deference to the institutions finconduit works with. For an institution-specific read, book a free assessment.