Financial AtlasTo the mapУкраїнська

PAYMENTS

Digital payments

Makes paying easy: one tap, a phone number, right inside an app.

Open on the interactive map →

This page is the text version of one zone of the interactive map.

Its role in the system

A layer of convenience on top of banks and card networks: companies that let you pay with one tap, start accepting payment on a website in minutes, send money to a phone number or embed payments in any app. For the most part they do not build new rails — they use the old ones in new ways: cards, bank accounts and instant transfers.

Functions

  1. Accepting online payments (PSPs, payment providers) — 🌍 Stripe, Adyen and PayPal connect online shops and platforms to cards, wallets and local payment methods through one integration, and take on anti-fraud and settlement with the merchant.
  2. Digital wallets — Apple Pay and Google Pay replace the card number with a token in the phone; PayPal stores the payer's details or its own balance so they need not be entered every time.
  3. Instant account-to-account transfers — payment without a card, by QR code or phone number: 🇧🇷 Pix, 🇮🇳 UPI, 🇵🇱 BLIK, 🇪🇺 Wero (from 2026 absorbing the Dutch iDEAL under the brand "iDEAL | Wero").
  4. Open banking — with the client's consent a third-party service can see their accounts through an API or initiate a payment from them (🇪🇺 PSD2, 🇬🇧 Open Banking).
  5. Embedded finance (BaaS) — non-financial companies (marketplaces, ride-hailing, accounting software) offer accounts, cards or instalments inside their own product, relying on a partner bank's licence.
  6. A new generation of international transfers — 🌍 Wise and similar fintechs hold money locally in each currency and transfer through mirrored accounts, bypassing the long correspondent chain.

What makes it special

  • How it earns, and why it is not a bank: income comes from a percentage or a flat charge on every transaction, the exchange rate margin, interest on client balances and fees for extra services; the business scales, but the margin is thin, so volume and the share of successful payments decide everything. It works under a separate licence: a payment institution or an electronic money institution does not lend out client money and must keep it segregated (safeguarding). 🇪🇺 the rules are set by PSD2 and the e-money directive.
  • Security: 🇪🇺 strong customer authentication (SCA) under PSD2; since October 2025 payment providers in the euro area must check free of charge that the beneficiary's name matches the IBAN. The new wave of fraud is talking a person into sending the money themselves — which is why 🇪🇺 PSD3/PSR (political agreement in November 2025, application expected from 2027–2028) will tighten providers' liability, including a duty to refund fraud where someone impersonates the bank.
  • Who regulates: central banks and financial regulators (🇪🇺 national authorities under PSD2, 🇬🇧 the FCA, 🇺🇸 state regulators and the CFPB, whose powers have been substantially narrowed since 2025). In embedded finance responsibility is blurred between the fintech, the intermediary and the bank — and that is exactly where things go wrong.
  • The state as a competitor: central banks increasingly build instant payments themselves (🇧🇷 Pix, 🇺🇸 FedNow, 🇪🇺 the EU rule making instant euro transfers compulsory), reducing dependence on card networks and private wallets.
  • 🇨🇳 China: the country that skipped cards: retail payments went straight to QR codes inside the Alipay and WeChat Pay apps — the customer pays from a wallet balance or a linked account, and the merchant needs a printed code rather than a terminal, so accepting payments is cheap even for a street vendor. Since 30 June 2018 payments from non-bank wallets to banks must pass through the state clearing platform NetsUnion: the central bank sees every transaction, and the wallets lost their direct deals with banks. The convenience is private; the pipe underneath it is public.
  • 🇮🇳 India: the rail was built by the state: the UPI interface belongs not to a company but to the non-profit NPCI, set up by the banks with the central bank behind it, and every bank and app (Google Pay, PhonePe, Paytm) plugs into it as an equal participant — which is why a payment by phone number or QR code works between any of them. The scale is enormous: 23.2 billion UPI transactions in May 2026 alone. For people it is free: a ban on charging merchants applied from January 2020, and only in August 2026 did parliament allow the government to introduce small fees, aimed mainly at large chains.

Why it matters

Digital payments have become the main way millions of people and businesses settle up. When a payment provider or a fintech intermediary falls over, clients' money can be stuck for weeks — even though formally it is "in a bank".

🇮🇳 Paytm Payments Bank, 2024

The Reserve Bank of India barred the payments bank of one of the country's largest fintechs from taking new deposits or wallet top-ups, over persistent breaches, in particular in customer verification (KYC). Millions of users and merchants had to be moved to other partner banks. The case shows that even a mass digital platform works only for as long as it meets the regulator's requirements.

🇺🇸 Synapse, 2024

the intermediary between fintech apps and partner banks went bankrupt in April 2024; the money of more than 100 thousand clients was frozen, because Synapse's records did not match the banks' records. On the CFPB's estimate between 60 and 90 million dollars of client funds were never found — a lesson in the risks of embedded finance.

Links to other zones · 13

Regulation and supervision

Supervised by: Anti-Money Laundering

Wallets, neobanks and payment apps open an account in minutes — so this is where remote identity checks, limits on anonymous products and hunting for money-mule accounts matter most. Rules: 🌍 FATF, 🇪🇺 AMLR and Transfer of Funds Regulation 2023/1113, 🇺🇸 FinCEN.

Standards: FATF Recommendations 10, 15, 16 · EU AMLR 2024/1624 (limits on anonymous products) · EU Transfer of Funds Regulation 2023/1113 · EU PSD2 (agents and distributors) · US Bank Secrecy Act

Supervised by: Regulation & Supervision

Payment institutions and e-money issuers need a licence too: minimum capital, a duty to keep client money separate, strong customer authentication and resilient IT systems (🇪🇺 PSD2 and the incoming PSD3/PSR package plus DORA since 2025; 🇺🇸 state licences).

Standards: EU PSD2 (Directive 2015/2366) · EU PSD3 / Payment Services Regulation (in adoption) · EU E-Money Directive 2009/110 · EU DORA (Regulation 2022/2554) · CPMI-IOSCO PFMI (for large schemes) · US state money transmitter laws

Careers in this zone · 6

Payment product manager

Is responsible for how a client pays or gets paid inside the product: checkout, wallet, transfer to a phone number, payouts to merchants. Combines convenience with scheme and regulatory requirements and with the economics of every transaction — from fees to fraud losses.

What you need to know

  • Payment rails: cards, instant transfers, open banking, wallets
  • The unit economics of a payment: interchange, scheme fees, exchange rate margin
  • PSD2/PSD3, SCA and verification of payee rules
  • Tokenisation and mobile wallets

Skills

  • Product analytics (SQL, conversion funnels)
  • Writing requirements for developers
  • User research
  • Working with risk, compliance and partners

Certifications: Not required — products you have actually launched count

Payment optimisation and routing manager

Raises the share of successful payments: analyses why issuing banks decline transactions, sets up routing across several acquirers, adds local payment methods for new markets (iDEAL, Pix, BLIK). For a large shop, every percentage point of successful payments is real money.

What you need to know

  • Decline codes and authorisation logic
  • Payment orchestration and multi-acquiring
  • Local payment methods and payers' habits in different countries
  • The cost of processing by method and by country

Skills

  • SQL / Python, A/B tests
  • Working with real-time data
  • Negotiating with acquirers
  • A technical grasp of APIs

Certifications: Usually not required

Instant payments fraud prevention specialist

Fights the schemes in which a person is talked into sending the money themselves — the fake bank security team, bogus investments, romance scams. Builds the rules and prompts that stop a suspicious transfer before it leaves, and works with receiving banks to find money mule accounts.

What you need to know

  • Typologies of authorised push payment (APP) fraud
  • Behavioural analytics and payer risk models
  • Provider liability rules (🇬🇧 APP fraud reimbursement, 🇪🇺 PSD3/PSR)
  • Verification of payee and the sharing of fraud data between banks

Skills

  • Analysis of transaction data
  • Designing friction into the customer journey
  • Working with the police and other banks
  • Empathy in conversations with victims

Certifications: CFE (ACFE); 🇺🇸 APRP (Nacha)

Open banking / API partnerships manager

Builds products on access to bank accounts through APIs: paying from an account without a card, checking income for a loan, aggregating accounts for bookkeeping. Negotiates with banks and aggregators, watches the quality of their APIs and how clients give and withdraw consent.

What you need to know

  • PSD2: payment initiation services (PIS) and account information services (AIS)
  • Open banking API standards (🇬🇧 OBIE, 🇪🇺 the Berlin Group)
  • Consent management and data protection (GDPR)
  • The business models of aggregators and pay-by-bank buttons

Skills

  • Partnership negotiation
  • A technical grasp of REST APIs
  • Product analytics
  • Running joint projects with banks

Certifications: Not required

Compliance officer at a payment / e-money institution

Is responsible for the fintech's licence: safeguarding of client funds, reporting to the regulator, the AML programme, rules for agents and partners. In a small company this person is both the first and the second line of defence and the main interlocutor with the central bank.

What you need to know

  • Licensing regimes for payment and e-money institutions (🇪🇺 PSD2/EMD, 🇬🇧 FCA)
  • Safeguarding requirements and daily reconciliation of client funds
  • AML/KYC for remote onboarding
  • Outsourcing and oversight of partners

Skills

  • Building policies and controls from scratch
  • Dialogue with the regulator
  • Prioritising risks in a start-up
  • Training the team

Certifications: CAMS (ACAMS); 🇬🇧 the ICA International Diploma in Compliance

Embedded finance (BaaS) programme manager

Coordinates the triangle of brand, technology intermediary and licensed bank: who opens the accounts, who keeps the record of the funds, who answers to the regulator. Sets up daily reconciliation and control of partners so that the Synapse story is not repeated.

What you need to know

  • BaaS models and how responsibility is split between the parties
  • Accounting for client funds in pooled accounts, reconciliation
  • Regulatory expectations of sponsor banks (🇺🇸 OCC, FDIC)
  • Card programmes and schemes for non-bank brands

Skills

  • Partner and contract management
  • Control of operational risk
  • Working with data and reports
  • Communication between the business and the bank

Certifications: Not required

All zones of the Atlas