Philippines Plans a 12-Month Freeze on New Payment System Registrations

The next major change in digital payments may not come from a new app, a faster checkout button, or a cryptocurrency designed to move money across borders. It may come from a regulator deciding that the existing system has become too complicated to supervise with confidence.

In the Philippines, the Bangko Sentral ng Pilipinas (BSP) is proposing a 12-month suspension of new registrations for operators of payment systems. The draft circular would give the central bank time to reassess its regulatory framework while introducing tougher controls for payment institutions serving cryptocurrency businesses and other higher-risk merchants.

The proposal reflects a broader challenge facing modern finance. Digital payments increasingly depend on networks of aggregators, intermediaries, settlement providers, technology platforms, and merchants. These arrangements can make transactions faster and more convenient, but they can also make it harder to identify who is responsible when something goes wrong.

For fintech companies, the implications extend beyond a temporary pause in new registrations. The BSP is asking a more fundamental question: who should be allowed to operate within the payment ecosystem, what permissions should they hold, and how can regulators ensure that compliance responsibilities remain clear when money passes through several businesses?

A One-Year Pause on New Payment System Registrations

The BSP's draft circular proposes suspending new registrations for operators of payment systems, commonly referred to as OPS, for 12 months. The stated purpose is to support a comprehensive review of the existing framework, including how payment operators are classified, registered, and licensed, as well as the risk-management requirements that apply to them.

The proposed suspension would begin 15 calendar days after the final circular is published in the Official Gazette or a newspaper of general circulation.

The distinction between a proposal and a final rule is important. The circular remains a draft, meaning its wording, scope, and potential exceptions could change before it is formally issued. Businesses should therefore treat the measure as a regulatory development to prepare for, not as a finalized requirement already in force.

The proposed pause would also have a specific effect on applications already in the system. The BSP could continue technical assessments of applications submitted before the suspension, but it would not issue final approvals or rejections while the moratorium remained in effect.

That arrangement would allow the regulator to keep reviewing the underlying applications without making new entry decisions before completing its broader assessment.

Crucially, the suspension would not create a temporary exemption for businesses that have not obtained the required registration. Companies that need OPS registration would still need the BSP's permission before beginning regulated payment-system operations. A pause in processing applications is not permission to operate without authorization.

What Is Changing in the Regulatory Approach?

The proposal goes beyond limiting the number of new entrants. It signals that the BSP wants to examine how different payment activities fit into its regulatory structure.

Today's payment ecosystem includes more than banks and familiar payment processors. Merchant aggregators may serve many businesses through a single technical relationship. Platforms can connect merchants with payment providers. Intermediaries may handle parts of the transaction or settlement process, while pooled accounts can combine funds associated with multiple merchants.

These structures are not automatically improper. They can help small businesses accept digital payments without building their own financial infrastructure. They can also reduce technical complexity and allow payment providers to reach more customers.

The challenge arises when the number of participants makes it difficult to establish who controls a transaction, who knows the underlying merchant, and who must intervene when a payment raises compliance concerns.

A merchant may have a direct relationship with one platform while the payment itself passes through several other entities. Each participant may see only part of the transaction. If responsibilities are poorly defined, the system can develop gaps between the business accepting a payment, the institution processing it, and the party responsible for monitoring it.

The BSP's proposed review would examine this wider landscape, including merchant aggregators, intermediaries, pooled settlement arrangements, and structures involving multiple merchant-facing layers.

The underlying issue is straightforward: regulation must reflect how payments actually move, rather than relying solely on the labels businesses use to describe themselves.

Why Crypto-Linked Payments Face Greater Scrutiny

One of the proposal's most significant elements concerns merchant acquirers serving virtual asset businesses.

Merchant acquiring allows businesses to accept electronic payments. A merchant acquirer or other relevant payment institution may connect a merchant to payment networks, process transactions, or support the settlement of funds. In a layered arrangement, the institution performing these functions may not have a direct relationship with every business ultimately receiving payments.

The BSP's draft would require stronger due diligence, closer monitoring, and transaction or settlement limits calibrated to the risks involved when BSP-supervised institutions process payments for virtual asset businesses through intermediaries.

This approach matters because cryptocurrency-related businesses can present different risk profiles depending on their activities, customers, jurisdictions, and transaction patterns. Some may operate legitimate services with established compliance programs. Others may create exposure to fraud, money laundering, sanctions violations, or unclear sources of funds.

The proposal does not mean that every crypto merchant is suspicious. Rather, it points toward a risk-based supervisory approach in which the level of scrutiny depends on the nature of the business and the payment arrangement.

For financial institutions, this can mean looking beyond the immediate customer. A processor may need to understand not only the intermediary with which it has signed a contract, but also the merchants behind that intermediary and the types of transactions moving through the network.

That is a more demanding operational model. It requires reliable information, effective monitoring systems, and contractual arrangements that allow institutions to obtain the information they need.

How the Proposed Controls Would Work

The draft targets several areas where payment networks can lose visibility.

Merchant identification and verification. Institutions would need to establish who the merchants are and understand the businesses they operate. Depending on the relationship and applicable requirements, this can involve know-your-customer (KYC) and know-your-business (KYB) checks.

Anti-money-laundering controls. Payment providers would need to ensure that their controls can identify and manage relevant financial crime risks across the payment chain, rather than assuming that another participant has handled every obligation.

Sanctions screening. Screening processes would need to account for the relevant parties and transactions within the institution's responsibilities. In a complex network, screening only the immediate intermediary may not provide sufficient visibility into the underlying activity.

Fraud monitoring. Institutions would need to monitor transaction behavior and investigate suspicious patterns. Depending on the risks, this could include unusual transaction volumes, inconsistent merchant information, or activity that differs substantially from an expected business profile.

Transaction and settlement limits. The draft proposes limits appropriate to the risks associated with certain merchant-acquiring arrangements. These controls could help contain exposure while institutions investigate unusual activity or reassess a business relationship.

The proposal also addresses arrangements involving pooled accounts and shared QR channels. These tools can support efficient payments, particularly when multiple merchants use common infrastructure. However, they can complicate the identification of individual merchants and the tracing of funds if records are incomplete or responsibilities are unclear.

The central objective is not necessarily to eliminate intermediaries. It is to make the chain of responsibility visible and enforceable.

What the Numbers Tell Us

The scale of the market helps explain why the BSP is considering a broader review.

According to the regulator's public register, there were 314 registered operators of payment systems as of August 28. The register also identified operators authorized to conduct merchant acquisition.

That figure provides a snapshot of the registered market, but it should not be interpreted as a count of identical businesses. Payment operators can perform different functions, operate under different permissions, and occupy different positions within the transaction process.

The distinction between OPS registration and other financial permissions is particularly important. Registration as an operator of a payment system is not, by itself, equivalent to a banking licence, an electronic-money licence, or a merchant-acquisition licence.

In other words, a business may be recognized as an operator of a payment system without automatically receiving permission to perform every financial activity connected to payments.

This distinction is central to the BSP's proposed review. The regulator wants to reassess which activities require which permissions and how accountability should be assigned when several firms participate in a single payment flow.

The available information does not establish how many new applications would be affected, how many operators currently serve crypto-linked merchants, or what the financial impact of the proposed suspension would be. Those figures should not be assumed.

Nevertheless, the existing register illustrates that the payment sector is already substantial enough to contain a diverse set of business models. A regulatory framework designed for a simpler market may need to evolve as payment relationships become more layered.

Where Payment Companies Create Value

Payment companies create value by making transactions easier, faster, and more reliable. They provide infrastructure that allows merchants to accept payments without independently negotiating every technical and commercial relationship required to reach customers.

Aggregators can bring many smaller merchants onto a payment network. Technology platforms can simplify integration. Settlement services can help businesses manage incoming funds, while shared infrastructure can lower the cost of accepting digital payments.

These benefits help explain why layered arrangements have become attractive. A small merchant may not have the resources to build a sophisticated payment operation, but it can use a platform that already has the necessary connections and technology.

The same structure, however, creates a commercial trade-off. The more a payment provider relies on intermediaries to expand its reach, the harder it may become to maintain direct knowledge of every merchant and transaction.

If regulatory requirements become more demanding, payment companies may face additional costs for onboarding, monitoring, reporting, data management, and compliance staffing. They may also need to renegotiate contracts or restrict certain business relationships when they cannot obtain adequate information.

These costs can affect margins, especially for smaller firms. But effective compliance can also become a competitive advantage. A provider that can demonstrate reliable merchant verification, transparent settlement records, and strong monitoring may be more attractive to banks, enterprise customers, and regulated partners.

Trust is not merely a legal obligation in payments. It is part of the product.

Is the BSP Regulating a Product or an Entire Platform?

The proposal highlights the difference between regulating a single financial product and supervising an ecosystem.

A conventional product may have a clearly identifiable provider, customer, and transaction. A modern payment platform can involve multiple businesses, technical systems, and settlement relationships. The customer-facing brand may not be the same institution that processes the payment or holds responsibility for a particular stage of the transaction.

That makes platform oversight more complicated.

A regulator must consider how individual participants interact, whether information can move across the chain, and whether a company can outsource operational tasks without losing responsibility for the risks it is required to manage.

For example, outsourcing merchant onboarding does not necessarily remove the need for an institution to understand the merchants it serves. Similarly, routing payments through an aggregator does not automatically make the underlying merchant irrelevant to risk assessment.

The BSP's proposed review appears designed to address this gap between the formal structure of a business relationship and the practical movement of money.

The result could be a framework that pays closer attention to the actual functions performed by each participant. That would make it more difficult for a business to rely on a narrow description of its role if its activities create broader payment-system responsibilities.

Competitive Pressures and Potential Advantages

The proposed moratorium could affect new entrants differently from established operators.

A startup that depends on OPS registration to launch a new payment service may face uncertainty over when it can begin operations. Even if its application receives technical review, the absence of a final decision could complicate fundraising, hiring, product launches, and commercial agreements.

Existing operators may have more time to adapt their systems, although they should not assume that the broader review will leave their business models unchanged. The proposal specifically signals an interest in the classification of payment activities and the management of risks across layered merchant-acquiring arrangements.

Larger institutions may be better positioned to absorb the cost of enhanced compliance systems. Smaller providers may need to focus on fewer merchant categories, simplify their operating structures, or partner with institutions that already have suitable controls.

At the same time, the proposal could reward companies with clearer transaction records and more transparent relationships. A payment provider that knows its merchants, can trace settlement flows, and has documented responsibility across its partners may be better placed to demonstrate compliance.

It is too early to identify definitive winners or losers. The final scope of the circular, its exceptions, and the outcome of the regulatory review remain unknown.

The Risks of a Regulatory Pause

A temporary freeze can give regulators space to reconsider a framework, but it also introduces uncertainty.

For startups and investors, a 12-month suspension of new registrations could delay business plans and make it harder to estimate when a new payment service can enter the market. Companies that have already invested in technology or partnerships may have to maintain those costs while waiting for a decision.

A prolonged pause could also affect competition if existing operators face fewer new entrants during the review period. That risk depends on the final design of the measure and the extent to which alternative, lawful routes to market remain available.

There is also a risk that more demanding controls could raise operating costs without delivering proportional improvements if the rules are unclear or difficult to implement. Smaller merchants could face additional onboarding requirements, slower approvals, or fewer available payment partners.

On the other hand, insufficient oversight carries its own costs. Weak merchant identification, unclear settlement records, and inconsistent monitoring can leave payment providers exposed to fraud and financial crime. Problems in one part of a payment chain can damage confidence in the wider network.

The policy challenge is therefore to balance market access with effective oversight. A pause can be useful if it produces a clearer framework, but uncertainty becomes harder to justify if businesses cannot understand what is expected of them or how long decisions will take.

What the Proposal Could Mean Beyond the Philippines

The Philippines' draft reflects a challenge shared by many markets: financial innovation increasingly relies on networks that cross institutional and technological boundaries.

Payments can connect merchants, platforms, banks, digital wallets, aggregators, and virtual asset businesses. Each participant may perform a legitimate function, yet the overall structure can be difficult to supervise when information and accountability are divided among several parties.

For international fintech companies, the lesson is that regulatory analysis cannot stop at determining whether a business has a general registration. Companies must also understand which activities require separate permissions, which counterparties are subject to additional conditions, and which responsibilities remain with the institution providing the service.

For businesses operating across multiple jurisdictions, this can mean designing compliance processes that can adapt to local rules rather than assuming one universal model will work everywhere.

The draft does not establish a global regulatory trend on its own, nor does it prove that other countries will adopt the same moratorium. But it illustrates a broader supervisory concern: as payment infrastructure becomes more interconnected, regulators want greater visibility into the participants behind a transaction.

What Businesses Should Do Now

Because the circular remains a draft, companies should prepare without treating every proposed measure as final.

First, map the payment chain. Identify every party involved in onboarding merchants, processing transactions, routing payments, holding funds, and settling balances. Record where pooled accounts, intermediaries, or shared QR channels are used.

Second, review the permissions required. Determine whether the company's activities fall within OPS registration or require another form of authorization. Do not assume that one registration covers every payment-related function.

Third, assess merchant due diligence. Review whether existing KYC and KYB procedures provide sufficient information about the businesses behind intermediaries. Identify gaps before they become operational problems.

Fourth, strengthen monitoring and records. Ensure that relevant transaction data can be traced and reviewed. Compliance teams should understand what information is available, who can access it, and how quickly potential problems can be investigated.

Fifth, examine partner contracts. Agreements with aggregators, payment processors, and technology providers should clearly define information-sharing duties, monitoring responsibilities, escalation procedures, and access to merchant records.

Sixth, plan for uncertainty. Companies awaiting registration should assess the financial consequences of delayed approval. They should not begin regulated operations without the required permission, and they should avoid making major commitments based on an assumed approval date.

Finally, monitor the final circular and subsequent guidance. The draft may change, and the exact requirements will depend on the version ultimately issued by the BSP.

A Test of Trust in Digital Payments

The Philippines' proposed 12-month suspension is more than an administrative pause. It is an opportunity for the central bank to reconsider how payment operators are classified, what permissions they need, and how responsibility should be enforced across complex transaction networks.

The public register's 314 registered OPS as of August 28 shows that the market includes a meaningful range of operators and activities. Yet registration alone does not answer every question about what a firm is authorized to do or how it manages risks when several businesses stand between a merchant and a payment.

For the industry, the message is clear. Growth built on intermediaries and shared infrastructure must be matched by equally strong visibility into merchants, transactions, and compliance responsibilities.

The final outcome remains uncertain because the circular is still a draft. If adopted, the proposed moratorium could delay some new entrants while giving the BSP time to build a more coherent framework. Its longer-term value will depend on whether the review produces clear rules, workable compliance expectations, and a fair path for legitimate businesses to enter the market.

Digital payments succeed when people and businesses trust that money will reach the right destination and that problems can be identified and addressed. Technology can make a payment move in seconds. Building the accountability behind that payment takes more careful work.

Philippines payment systems, BSP payment regulations, payment operator registration, OPS registration Philippines, crypto payment compliance, merchant acquiring rules, payment aggregator regulation, digital payments Philippines, BSP draft circular, KYC and KYB checks, anti-money laundering controls, virtual asset businesses, payment system licensing, fintech regulatory risk, merchant transaction monitoring