Under Article 95(2) of (EU) Regulation 2015/2366 (PSD2), payment service providers must submit an assessment of their operational and security risks to the supervisory authority on an annual basis.
We therefore ask you to send us an updated version of your organisation's risk analysis by 30 June 2021 at the latest. In updating your risk analysis, we would like to draw your attention to last year’s feedback (if any) and the guidance provided.
We will inform payment institutions and exempt payment service providers about how to submit their risk analyses in a separate letter.
13 April 2026
News item supervision
On Thursday May 7th from 3:00-4:45 PM CET DNB will organize an online information session about fit and proper assessments.
Read more Information session about fit and proper assessments DNB – Thursday May 7th, 2026
25 March 2026
News item supervision
In the context of the implementation of the Markets in Crypto Assets Regulation (MiCAR), De Nederlandsche Bank (DNB) is making a limited amendment to the existing FINREP reporting framework.
Read more Limited amendment to existing FINREP reporting in relation to MiCAR
19 March 2026
News item supervision
To facilitate a smooth licensing process, De Nederlandsche Bank (DNB) has further clarified and updated the explanatory notes to the licence application forms for payment service providers and electronic money institutions.
Read more Revised explanatory notes to the licence application form for payment service providers and electronic money institutions
13 March 2026
The resolution of a payment or electronic money institution (hereinafter: payment institutions) entails many operational, legal and financial challenges, particularly if the institution makes extensive use of agents or outsourcing partners.
Read more Review exit plans for payment and electronic money institutions