How to Get a Payment License in China for Foreign Fintech Companies: 2026 Guide
For a foreign fintech company, obtaining a 支付业务许可证 (Payment Business License, zhīfù yèwù xǔkězhèng) from the 中国人民银行 (People’s Bank of China / PBOC, Zhōngguó Rénmín Yínháng) is among the most capital-intensive regulatory endeavors in Asia — fewer than 10 majority foreign-owned entities have successfully secured one since the licensing regime began in 2011. This guide breaks down the eligibility criteria, procedural timeline, and strategic alternatives facing foreign applicants as regulatory frameworks evolve toward 2026.
Of the roughly 240 active payment licenses held by 非银行支付机构 (non-bank payment institutions, fēi yínháng zhīfù jīgòu) at the end of 2024, only an estimated 3% are controlled by foreign investors with effective operational control. The PBOC has signaled incremental liberalization under the Administrative Measures for the Payment Business of Non-bank Payment Institutions, effective May 2024, though practical approval remains fragmented across provincial PBOC branches. Understanding this landscape is the first prerequisite for any market-entry decision.
Understanding China’s Payment License Framework
China classifies payment licenses into three main business types: 互联网支付 (internet payment, hùliánwǎng zhīfù), 银行卡收单 (bank card acquiring, yínhángkǎ shōudān), and 预付卡发行与受理 (prepaid card issuance and acceptance, yùfùkǎ fāxíng yǔ shòulǐ). For most foreign fintech companies, the internet payment license is the relevant target, as it enables online merchant acquiring, digital wallet operations, and cross-border payment processing.
The regulatory authority over these licenses has been consolidated under PBOC’s 支付结算司 (Payment and Settlement Department, zhīfù jiésuàn sī), which reviews applications in a two-stage process: preliminary provincial-level assessment followed by central-level approval. Since 2022, the PBOC has frozen new license issuance for certain categories, but internet payment licenses remain open — albeit with an estimated approval rate of only 12% for first-time foreign applicants.
Key thresholds that define this framework include a minimum registered capital of 100 million RMB (approx. USD $13.8 million) for nationwide internet payment operations, and 30 million RMB for regional licenses. These figures are not merely capital requirements; they signal to PBOC the applicant’s long-term commitment to compliance infrastructure and consumer protection.
| License Type | Scope | Min. Registered Capital | Est. Processing Time | Foreign Ownership Limit |
|---|---|---|---|---|
| Internet Payment (Nationwide) | Online merchant acquiring, wallets, cross-border | 100 million RMB | 12–18 months | Up to 55% (case-by-case) |
| Internet Payment (Regional) | Online payments within one province | 30 million RMB | 8–12 months | Up to 55% (case-by-case) |
| Bank Card Acquiring (Nationwide) | POS and online acquiring | 100 million RMB | 12–18 months | Up to 50% |
| Prepaid Card (Regional) | Closed-loop prepaid cards | 30 million RMB | 6–10 months | Up to 50% |
Eligibility Requirements for Foreign Applicants
Foreign fintech companies face distinct hurdles beyond the standard capital and operational norms. Since 2018, the PBOC has gradually eased the foreign ownership cap from 50% to 55% for internet payment licenses, but this still means a Chinese partner must hold a controlling or substantial minority stake. The 外商投资负面清单 (Negative List for Foreign Investment, wàishāng tóuzī fùmiàn qīngdān) classifies payment services as “restricted,” meaning any foreign-invested entity must pass a national security review if the transaction value exceeds 100 million RMB or involves sensitive data.
In practice, PBOC expects foreign applicants to demonstrate:
- Operational history: At least three years of payment business experience in the applicant’s home market, verified by audited financial statements.
- Technology compliance: All payment systems must pass a 网络安全等级保护 (classified protection of cybersecurity, wǎngluò ānquán děngjí bǎohù) Level 3 assessment — a process that typically costs 1–3 million RMB and requires local data hosting.
- Anti-money laundering (AML) framework: A dedicated AML compliance officer based in China, with systems integrated into PBOC’s 反洗钱监测系统 (AML monitoring system, fǎn xǐqián jiāncè xìtǒng).
- Contingency capital reserve: An additional 20% of registered capital must be held in a designated escrow account to cover potential consumer losses — a requirement that has caught many foreign applicants off-guard.
Since 2021, PBOC has also imposed a “same-business restriction,” meaning the licensed entity cannot simultaneously operate non-payment fintech services (e.g., lending, insurance brokerage) under the same legal entity without a separate regulatory approval from the 国家金融监督管理总局 (National Financial Regulatory Administration / NFRA, guójiā jīnróng jiāndū guǎnlǐ zǒngjú). This structural requirement often forces foreign fintech groups to create an additional 外商独资企业 (Wholly Foreign-Owned Enterprise / WFOE, wàishāng dúzī qǐyè) for non-payment activities, adding 6–9 months to the setup timeline.
Step-by-Step Application Process: 2026 Outlook
Under the 2024 revised Administrative Measures, the PBOC introduced a “pre-application consultation” mechanism that allows foreign applicants to submit a preliminary business plan and receive non-binding feedback within 60 working days. This is a meaningful improvement over the previous “file-and-hope” approach. However, for foreign-controlled entities, the PBOC still requires additional scrutiny from the 外汇管理局 (State Administration of Foreign Exchange / SAFE, wàihuì guǎnlǐ jú) regarding cross-border fund flows.
- Pre-application consultation (2–3 months): Submit a business plan, capital structure, and proof of home-market payment license to the provincial PBOC branch. They will issue a written opinion on eligibility likelihood.
- Formal application filing (1 month): Submit complete documentation, including audited financials, AML policies, technology architecture, and a Chinese shareholder agreement if applicable. Filing fee: approximately 5,000 RMB (admin only).
- Provincial review (4–6 months): PBOC provincial branch conducts on-site inspection of office premises, IT systems, and interviews with key personnel. Non-compliance can delay this stage by 2–3 months.
- Central PBOC review (3–6 months): The Payment and Settlement Department performs a final legal and policy review. Since 2023, an additional “data security review” has been added for foreign applicants, referencing the 数据安全法 (Data Security Law, shùjù ānquán fǎ).
- License issuance & post-approval conditions: If approved, the license is valid for five years and must be renewed at least 6 months before expiry. Post-approval, the entity must maintain a minimum transaction volume of 100 million RMB annually within the first two years, or face license revocation.
For 2026, industry analysts expect the PBOC to further digitize the application process through a unified online portal, potentially reducing the central review stage to 3–4 months. However, the data security review for foreign applicants is likely to remain a bottleneck, given heightened scrutiny of cross-border financial data flows under the 跨境数据流动安全管理规定 (Cross-border Data Flow Security Management Provisions, kuàjìng shùjù liúdòng ānquán guǎnlǐ guīdìng).
Key Challenges and Strategic Options
The most common mistake foreign fintech executives make is underestimating the implicit “national treatment plus” standard — PBOC expects foreign applicants to meet not only the same criteria as domestic firms but also additional foreign-investor-specific requirements. For example, a domestic Chinese fintech can obtain a regional internet payment license with 30 million RMB and two years of domestic operational history. A foreign applicant needs 30 million RMB, three years of any market experience, and a verified AML track record in their home jurisdiction — a threshold that rules out many early-stage fintech startups.
Decision Framework
If your fintech has been operating profitably in at least two regulated markets for five or more years, and you are willing to commit a minimum of 15 million RMB to compliance infrastructure (including cybersecurity audits, local legal counsel, and a dedicated China compliance team), choose the direct license application path — it offers full operational control and the ability to scale nationwide.
If your business is pre-revenue or operates in only one market, choose the acquisition of an existing licensed entity. Since 2020, the PBOC has permitted 100% foreign acquisition of licensed payment companies, provided the acquirer passes the same eligibility criteria. Acquisition costs for a small regional internet payment license range from 50–150 million RMB, depending on transaction volume history and regulatory compliance record.
If your timeline is under 12 months and your primary goal is to process payments for cross-border ecommerce (e.g., Chinese consumers buying from your overseas platform), choose a partnership with a licensed domestic payment gateway such as Alipay or WeChat Pay via a 合作模式 (cooperation model, hézuò móshì) that does not require a separate license. This route allows market entry within 3–6 months but caps revenue at processing fees negotiated by the domestic partner.
Three Critical Pitfalls to Avoid
Comparison: Direct License vs. Acquisition vs. Partnership
| Factor | Direct License Application | Acquisition of Licensed Entity | Partnership with Licensed Gateway |
|---|---|---|---|
| Time to first transaction | 12–18 months | 6–12 months | 3–6 months |
| Total capital outlay (RMB) | 15–30 million (including escrow) | 50–150 million (acquisition + integration) | 1–5 million (negotiation + integration) |
| Operational control | Full (via contractual arrangements) | Full (post-acquisition) | Limited to processing layer |
| Revenue model | Full merchant fees retained | Full merchant fees retained | Revenue-sharing (typically 70/30 in favor of domestic partner) |
| Data sovereignty risk | Low (all data in China) | Low (existing infrastructure) | Low (partner’s infrastructure) |
| Regulatory risk for foreign parent | High (first-time applicant scrutiny) | Medium (legacy compliance issues) | Low (no direct PBOC oversight) |
Next Steps
- Begin your pre-application compliance audit now. The 6-month lead time for a PBOC readiness review is non-negotiable. Use our China Payment License Readiness Checklist to identify gaps in your data localization, AML framework, and capital reserves before engaging legal counsel.
- Evaluate acquisition targets for existing licensed entities. With fewer than 20 regional internet payment license holders currently open to foreign acquisition, early targeting is critical. Read our Guide to Acquiring a Licensed Payment Company in China in 2026 for due diligence criteria and pricing benchmarks.
- If timeline is your constraint, structure a partnership agreement now. A well-negotiated cooperation agreement with Alipay or WeChat Pay can include a commercial clause allowing you to migrate to a direct license later. Download our Fintech Partnership China: Template and Negotiation Points to protect your future licensing options.
— China Gateway 360 —
Remote China market entry support, built around execution.
