A robust application file for the supervisory assessment
“We prepare the business plan, programme of operations and structure to pass the SSM assessment with consistency and evidence.”
End-to-end legal advice to obtain a banking license in Spain from the Bank of Spain and the ECB (SSM). We prepare a robust application file (business plan, programme of operations, capital, governance and internal control), handle information requests and remediation and hand you a roadmap ready to start operating with legal certainty.
“We prepare the business plan, programme of operations and structure to pass the SSM assessment with consistency and evidence.”
“We coordinate answers, remediation and documentation to cut the back-and-forth and keep your application file from stalling.”
“We align capital, shareholders and source of funds with the required standard: solvency, transparency and traceability.”
“We design AML/KYC policies, governance and reporting so you start operating with real compliance, not just ‘on paper’.”
Regulatory fit for access to credit institution status: solvency, governance, internal control and authorization to start operations.
It is the administrative authorization to operate as a credit institution (taking deposits and granting credit, among other services), subject to supervision and prudential requirements.
Corporate governance design: suitability of directors and senior management, key functions, and policies and procedures for sound and prudent management.
Preparing the application file, filing, dialogue with the supervisor and answers to information requests. Goal: consistent documentation and traceable decisions.
Design of anti-money laundering policies, risk model, KYC procedures, reporting and control structure for a safe start of operations.
Managing remediation and evidence: we respond quickly, in an orderly and consistent way, avoiding the “contradictions” that delay authorization.
The critical point is not “filing paperwork” but sustaining a consistent application file: business plan, capital, corporate governance, internal control, technology and AML/KYC compliance. Preparation and the handling of information requests usually make the difference in timing.
Key figures: minimum share capital of €18 million, fully paid up in cash; a prior deposit of 20% of that capital with the Bank of Spain (in cash or in pledged public debt); and a decision within 6 months of the application (or of the file being complete), with a 12-month maximum. If no decision is issued in time, the application is deemed rejected. The ECB decides on a proposal from the Bank of Spain. Source: Royal Decree 84/2015 (arts. 3, 4 and 5) and Regulation (EU) No 1024/2013 (art. 14).
Diagnosis and regulatory fit: we determine whether you really need a banking license or an alternative authorization.
Preparing the application file: business plan, programme of operations, structure and internal policies.
Filing and admission: registration, formal review and start of the supervisory assessment.
Information requests and remediation: consistent answers, evidence and follow-up meetings.
Decision and launch: authorization (decided by the ECB on a proposal from the Bank of Spain), registration and start of operations with controls up and running.
A credit institution is an obliged entity for AML/CFT purposes. From the project design stage, it is key to implement an operational AML/KYC system: risk assessment, customer due diligence, special examination of unusual transactions, reporting to SEPBLAC (Spain's Financial Intelligence Unit) and an internal control structure. At Molina Law Boutique we build AML compliance into the application file and into your day-one operations.
We prepare and defend the application file before the supervisor: documentation, structure, solvency, governance and compliance. Everything focused on consistency, evidence and real operational capability.
Drafting and review of the business plan, programme of operations, internal policies and annexes. The key is an application file that is consistent and defensible before the Bank of Spain and the ECB.
We define the shareholder structure, the suitability of shareholders and directors, key functions and the traceability of the source of funds. We align solvency and corporate governance with the prudential standard.
We design risk management, internal control and AML/CFT policies and procedures so you start operating with working controls, evidence and reporting from day one.
Many fintechs confuse a “banking license” with other authorizations. Choosing the right license type avoids unnecessary costs and speeds up your launch. We analyze your actual activity, clients and services to find the right route.
| Feature | Credit institution (banking license) | Other authorizations (payment / e-money) |
|---|---|---|
| Activity | Banking services with a prudential focus: solvency, supervision and enhanced governance. | Payment/e-money services (depending on the model), with their own regime and a different scope. |
| Supervisor / decision | Application filed with the Bank of Spain; the ECB always takes the decision under the European framework (SSM), on a proposal from the Bank of Spain. | Procedure depends on the applicable license type and the specific requirements of the service provided. |
| Minimum capital | €18 million, paid up in cash, plus a prior deposit of 20% with the Bank of Spain (arts. 4.b and 5.f Royal Decree 84/2015). | Lower, set by the rules of each license type. |
| Decision deadline | 6 months (12 at most). Without a decision in time, the application is deemed rejected (art. 3.2 Royal Decree 84/2015). | Each regime sets its own deadline. |
| Structural requirements | Governance, key functions, risk, internal control and solvency to a high standard. | Significant requirements, but usually with a structure and scope different from a bank's. |
| Goal | Operate as a bank with a banking license in Spain and the capacity to scale under a prudential framework. | Launch specific services without over-regulating the project when “being a bank” is not needed. |
*The choice depends on the specific activity, product and operations. A prior diagnosis reduces rework and speeds up the right authorization.
A practical methodology: diagnosis, application file, dialogue with the supervisor and closing. The goal is to move from “loose paperwork” to a consistent application file you can defend before the supervisor.
We define the fit: a banking license or another authorization. We pin down services, product, clients and risk map to choose the right route.
We prepare the business plan, programme of operations, structure, internal policies and annexes. We aim for consistency and evidence in every piece.
We manage information requests, meetings and remediation with traceable answers. We reduce contradictions and speed up timelines with well-organized documentation.
Preparing “day one”: governance, internal control, compliance and operations. The goal is to start operating with working controls and reporting ready.
In a bank authorization in Spain, what makes the difference is consistency: business plan, capital, governance, internal control and AML/KYC backed by evidence and traceability.
What you do, for whom, how you make money and how you control risk. It must match your structure and resources.
Transparency and traceability of capital and funding, with consistent, verifiable documentation.
Board, senior management and key functions: experience, independence, time commitment and fit with the model.
Policies, procedures and lines of defense: risk, internal audit, compliance and reporting.
KYC procedures, risk assessment, alerts, special examination and reporting: operational, not declarative.
With a banking license in Spain, the risk is not just “taking longer”: an inconsistent application file triggers information requests and rework, and holds up the authorization.
A polished but inconsistent document: revenue, risks, structure and resources don't add up. A lack of operational consistency is penalized.
The source of funds or the shareholder structure is not justified. Without transparency, information requests follow and the application file stalls.
Governing bodies and managers who are not suitable, or poorly defined roles. Authorization requires clear governance and key functions.
Generic policies with no real operations behind them: KYC, alerts, special examination and reporting not put into practice. The supervisor expects effectiveness, not templates.
Beyond “filing”, what matters is consistency: structure, solvency, governance, risk and AML/KYC backed by real operations and evidence.
Key to avoiding delays caused by documentary inconsistencies.
The supervisor quickly spots “generic text”: your documentation must reflect your actual operations and your risks.
Fit & proper is not a “formality”: it must support the business model.
What “passes” at authorization is what you will be able to run on day one.
A banking license in Spain requires operational controls. We design the application file so that your launch is viable: governance, risk, AML/KYC and evidence.
Regulatory risk: carrying out a reserved activity without prior authorization.
Penalties and measures: orders to cease activity, information requests and significant administrative consequences.
Reputational risk: loss of trust from clients, investors and banking counterparties.
Operational blockages: friction with bank accounts, partners, audits and critical providers.
Cost of correction: regularizing late is usually more expensive than structuring the project correctly from the outset.
We support you from start to finish: regulatory diagnosis, application file, dialogue with the supervisor and launch preparation with governance, risk management and AML/KYC fully operational.
A banking license in Spain (formally, a credit institution license) is the administrative authorization to operate as a credit institution. It requires meeting solvency, governance, internal control and compliance requirements.
The goal is to ensure that the institution can operate with stability, transparency and working controls from day one.
It is not just a formality: it means designing a model that is viable, supervisable and defensible.
The application is filed with and assessed by the Bank of Spain, which then submits a proposal to the European Central Bank. Under the Single Supervisory Mechanism (SSM), the ECB always takes the final decision to authorize a new credit institution. That is why it is key to prepare an application file built to supervisory standards and with full documentary consistency.
The quality of your dialogue with the supervisor and of your remediation usually sets the pace of the process.
Minimum share capital is €18 million, fully paid up in cash, and you must evidence a prior deposit of 20% of that amount with the Bank of Spain (in cash or in pledged public debt). The institution must be a public limited company (sociedad anónima).
The application must be decided within 6 months of receipt or of the file being complete, and within 12 months at most; if no decision is issued in time, it is deemed rejected (arts. 3, 4 and 5 of Royal Decree 84/2015).
A banking license in Spain falls under national and European banking regulation: access to credit institution status, solvency, corporate governance, internal control and supervision.
The exact fit depends on your model, services and group structure.
A robust application file includes the business plan, programme of operations, shareholder structure and capital, governance and suitability, risk policies, internal control, technology and AML/KYC.
It lets you operate under a stable framework, with institutional credibility and the capacity to scale. It makes relationships with counterparties, investors and partners easier.
When well planned, the authorization reduces operational friction and improves the project's access to banking services.
Before you start, you should have defined: a realistic business model, shareholder structure and capital, a suitable management team, a risk map, AML/KYC policies, internal control and technology implementation.
The more “grounded” your day one is, the less friction there will be in the assessment and launch.
Carrying out a reserved activity without authorization can lead to penalties, information requests and orders to cease activity, as well as reputational risk and blockages with banks and providers.
Getting the fit right from the outset is usually the most cost-effective decision.
It depends on the complexity of the model, the group structure, the country or countries of operation, the volume of documentation and the maturity of policies and controls.
We give you a quote after a quick diagnosis of fit, scope and available documentation.