FinTech · Banking · Payments Law — Bucharest, EU

Counsel for the
regulated edge of
digital finance.

Twelve years helping payment and e-money institutions turn ambitious products into licensed, compliant, market-ready businesses across the EU.

12+ yearsAdvising fintechs & financial institutions since 2013
FounderTudor Nistor | Payments Lawyers
NBR & EU regulatorsLicensing, authorization & supervision
Scroll to read
01 — Profile
I work where innovation meets regulation — translating new payment models into structures regulators recognise and businesses can build on.

For more than a decade I have advised fintech companies, payment institutions and e-money issuers at the precise point where a commercial idea has to become a regulated reality.

My practice is built around a single conviction: compliance is not a brake on innovation but the structure that lets it scale. I help clients design business models, secure the right authorizations, and navigate the National Bank of Romania, EU regulators and card schemes — so that what they launch is both ambitious and defensible.

I founded my boutique payments law office in 2017, after advising on banking and financial services at Wolf Theiss. Since then I have led licensing campaigns, structured cross-border partnerships, and helped bring card programs, e-money wallets, acquiring businesses and MiCA-era token projects to market.

The thread through all of it is the same: clear, commercially aware legal counsel that anticipates the regulator's questions before they are asked.

Tudor NistorFounder · Tudor Nistor | Payments Lawyers · Bucharest Bar Association
12+
Years advising fintechs & financial institutions, since 2013
10+
Major payments projects delivered end-to-end, with real market impact
20+
Published articles on PSD2, MiCA, AML & payments law
3
Jurisdictions coordinated in a single mandate — EU, Switzerland & US
02 — Selected Work

Mandates that turned regulatory complexity into market access.

A selection of representative engagements. Client identities are confidential; each case reflects the strategy, role and outcome. Select a mandate to read the full account.

CS / 01

Payment Institution Licensing & Regulatory Strategy before the National Bank of Romania

OngoingPI authorizationBNR / NBRRegulatory strategy
Current engagement · Tudor Nistor | Payments Lawyers
Romania · EU

Context

Advising fintech and payments companies through the full lifecycle of obtaining authorisation as a payment institution before the National Bank of Romania (BNR) — an active, ongoing process spanning end-to-end regulatory structuring and execution.

The challenge

Bridging the gap between how a business actually operates and how the supervisor assesses risk, control and compliance — translating the client's operational, technical and governance setup into the regulatory "language" the regulator expects, while preserving the underlying business model.

My role & approach

  • Designing the licensing strategy and the regulatory positioning of the business model
  • Drafting the authorisation file — internal procedures and policies, organisational and governance documents, safeguarding arrangements, outsourcing and key contractual frameworks
  • Aligning internal processes with EU regulations, national implementing legislation and supervisory practice
  • Representing clients before BNR through meetings, written exchanges and follow-up clarifications
  • Managing iterative supervisory requests and calibrating solutions to meet regulatory expectations

Focus

  • Consistency, credibility and regulatory trust maintained throughout the authorisation process
CS / 02

E-Money Wallet & Mastercard Debit Card for a Web3 Ecosystem

E-moneyCard issuingWeb3 / CASPApple & Google Pay
Multi-party card & wallet launch
EU · cross-border

Context

A Web3 venture set out to issue an e-money wallet and a Mastercard debit card, bridging crypto assets and everyday spending. The structure spanned an e-money institution, card schemes, national payment processors, AML/KYC providers and a crypto-asset service provider (CASP).

The challenge

Aligning a novel digital-asset proposition with established payments regulation, while orchestrating approvals across multiple regulated entities and two national supervisors.

My role & approach

  • Led legal structuring, contract and terms-of-use drafting and negotiation across all parties
  • Liaised extensively with the National Bank of Romania to expedite the approval process
  • Coordinated with the CASP's regulatory teams and their EU national supervisor

Outcome

  • Regulatory alignment achieved and legal risk mitigated across the partnership
  • Apple Pay and Google Pay integration secured for the debit card
CS / 03

Closed-Loop Gift Card Exclusion from Payment Services Law

Regulatory qualificationNBR opinionPSD2 scope
Limited-network exemption
Romania

Context

A Romanian tech company needed formal certainty that its reloadable prepaid gift card — usable within a limited retail network — fell outside payment services and e-money legislation.

The challenge

The limited-network exclusion is narrow and fact-sensitive. Getting it wrong would have triggered full licensing obligations; getting it confirmed required convincing the regulator on first principles.

My role & approach

  • Led the legal analysis and regulatory strategy against EBA Guidelines and the national transposition of PSD2
  • Drafted the contractual and operational documentation supporting the exclusion

Outcome

  • Obtained a formal positive opinion from the National Bank of Romania confirming the card falls outside scope
  • Enabled lawful market entry of a closed-loop gift card across multiple shopping malls
CS / 04

Card Acquiring & Alternative Payment Methods — Built from the Ground Up

AcquiringPayFacMarketplace / split payHigh-risk verticals
New revenue line
Low- to high-risk industries

Context

A client wanted to stand up an online card acquiring business and an alternative payment methods (APM) offering from scratch — serving low-, medium- and high-risk industries, including travel/airlines and gambling.

The challenge

Designing contractual and licensing structures that satisfied card scheme rules and payment-services law across very different risk profiles — without forcing merchants into licensing they could avoid.

My role & approach

  • Built the contractual acquiring infrastructure for card payments and APMs
  • Structured Payment Facilitator models — as both sponsor and PayFac — under Visa and Mastercard rules
  • Designed split-payment models letting marketplaces avoid licensing obligations
  • Opened safeguarding and settlement accounts with local and international banks

Outcome

  • A compliant, scalable acquiring and APM capability ready for local and international processing
CS / 05

PSD2 Licensing & Re-Licensing of Payment and E-Money Institutions

AuthorizationPSD2EBA Guidelines
Licensing campaigns
Romania

Context

Payment institutions seeking authorization, and an e-money institution facing re-authorization, all needed to align with PSD2, national law and applicable EBA Guidelines.

The challenge

Re-shaping live operations to meet new requirements within a fixed regulatory timeframe, while keeping the regulator engaged and confident.

My role & approach

  • Provided end-to-end strategic counsel through the authorization process
  • Reviewed existing operations, identified adaptation gaps, and formulated compliance roadmaps
  • Maintained transparent liaison with the national regulator to expedite review

Outcome

  • A successful re-licensing for the e-money institution and a clear path to authorization for the payment institutions
CS / 06

E-Money Tokens under MiCA — Pioneering Stablecoin Compliance

MiCAStablecoins / EMTsResearch & structuring
Pre-MiCA readiness
EU

Context

Ahead of MiCA entering into force, an e-money issuer and blockchain stakeholders explored issuing stablecoins and e-money tokens (EMTs) in a compliant way.

The challenge

Building a credible compliance position on a regulation that was not yet in force — interpreting MiCA alongside EMD2 and PSD2 to design something that would survive the regulator's later scrutiny.

My role & approach

  • Conducted comprehensive research aligning EMT issuance with MiCA, EMD2 and PSD2
  • Designed regulatory-compliant business propositions and an actionable issuance plan
  • Developed a foundational compliance framework for the next development phases

Outcome

  • A defensible compliance foundation and readiness for substantive discussions with the regulator
CS / 07

Card Program Manager — Two Banking Partnerships, Global Reach

Card issuing sponsorshipVisa / Mastercard / UnionPayUS–EU
Program manager enablement
EU & overseas

Context

A US–EU fintech and technology company wanted to operate as a card program manager in Europe and globally, which required securing two transformative banking sponsorships.

The challenge

Navigating the intricate landscape of card-issuing sponsorships while satisfying both regulatory requirements and the standards of Visa, Mastercard and UnionPay.

My role & approach

  • Led negotiation, contract drafting and regulatory compliance across the sponsorships
  • Built the legal framework enabling card-issuing services across Europe and beyond

Outcome

  • The client extended its financial products to a global customer base with scheme-compliant structures in place
CS / 08

Fintech–Bank Integration: Cash-to-Card & Card-to-Card at Scale

Strategic partnershipVisa Direct / MoneySendSelf-service terminals
Bank–fintech partnership
Romania

Context

A fintech innovator and a Romanian banking institution partnered to deliver Cash-to-Card and Card-to-Card transactions (Visa Direct / MoneySend), integrated with a large self-service terminal network and a dedicated mobile app.

The challenge

Aligning two very different organisations — and their risk appetites — behind one compliant, durable commercial structure.

My role & approach

  • Structured, negotiated and helped maintain the strategic partnership
  • Drafted the contracts, terms and conditions underpinning transparency and accountability

Outcome

  • Regulatory compliance secured and the partnership's value proposition maximised for all parties
CS / 09

ONJN Authorization — Payments for Gambling Operators

ONJN licensingGambling paymentsRegulator liaison
Sector authorization
Romania

Context

Several payment service providers needed authorization to provide payment services to gambling organizers in Romania — permits issued by the National Office for Gambling (ONJN).

The challenge

Coordinating multiple parallel authorization tracks through a specialised regulator with exacting expectations.

My role & approach

  • Managed the full authorization process from information-gathering to compliance strategy
  • Built a constructive working relationship with the regulatory authority

Outcome

  • Necessary permits obtained, enabling the providers to serve gambling organizers lawfully
CS / 10

Visa Principal Membership — Issuing & Acquiring License

Visa Principal MembershipScheme licensingE-money institution
Scheme membership
Romania

Context

An e-money institution sought a Visa Principal Membership license covering both card issuing and card acquiring.

The challenge

Meeting Visa's stringent membership requirements while satisfying regulatory mandates in parallel.

My role & approach

  • Guided the institution through the Principal Membership process end-to-end
  • Provided strategic counsel improving its compliance posture and operational readiness
  • Liaised with Visa to address inquiries and maintain transparent communication

Outcome

  • A strengthened path to Visa Principal Membership for issuing and acquiring
03 — Expertise

Where regulation, commerce and technology intersect.

Six domains where I do my most consequential work — each one a place where a wrong structural decision is expensive and a right one compounds.

01 / Licensing & AuthorizationGetting regulated, and staying that way

Payment institution and e-money licensing, re-authorization and ongoing supervision before the National Bank of Romania, ONJN and other competent EU authorities — under PSD2 and applicable EBA Guidelines.

02 / Regulatory StructuringDesigning models that fit the rules

Legal qualification, product design and risk mapping — including structuring business models that fall outside the scope of payment-services and e-money legislation, where that is the right commercial answer.

03 / Cards & AcquiringIssuing, acquiring & scheme rules

Card issuing and acquiring, Payment Facilitator and program-manager models, marketplace split-payments, and compliance with Visa, Mastercard and UnionPay scheme rules.

04 / Crypto & MiCADigital assets, on the right side of the law

MiCA-aligned issuance of stablecoins and e-money tokens, CASP partnerships and Web3 payment structures — read against EMD2 and PSD2.

05 / Partnerships & ContractsThe agreements that hold it together

Structuring, drafting and negotiating partnership agreements, terms of use, acquiring and sponsorship contracts — and maintaining them through the life of the relationship.

06 / Compliance & RiskAdvisory, audits & the regulator

Internal policies and procedures, AML/KYC alignment, risk assessment for new products, and representing clients in regulatory inquiries, audits and investigations.

04 — Professional Journey

From international practice to a focused payments office.

2017— Present

Founder & Legal Counsel

Tudor Nistor | Payments Lawyers · Boutique payments & fintech practice

Built an independent practice dedicated to the electronic payments field — advising regulated and non-regulated players on licensing, product structuring, partnerships and contracts; conducting risk assessments for new payment services; drafting internal policies; and representing clients in regulatory inquiries, audits and investigations to mitigate exposure.

2013— 2017

Attorney-at-Law · Banking & Finance

Wolf Theiss · International law firm

Advised on banking, e-money and financial services matters, including regulatory compliance and project finance. Drafted and negotiated complex financial documents, conducted due diligence for financing transactions, and advised US and EU companies on PSD1 and EMD2 aspects of entering the Romanian market — while tracking the arrival of PSD2 and its impact.

2013— 2015

Qualified Lawyer — Banking, Corporate, Finance & Securities Law

National Institute for the Training and Development of Lawyers · Member, Bucharest Bar Association (since 2013)

Formal qualification specialising in the regulatory and financial disciplines that have defined the practice ever since, following an LL.B. completed in 2013.

05 — Writing & Thought Leadership

A decade of reading payments regulation as it was written.

Published commentary on PSD2, MiCA, AML and the wider EU payments framework — much of it written as the rules themselves were taking shape. Filter by theme.

2026The PSD2 perimeter and the risk of over-qualification of ancillary fund-handling activitiesPSD2 & Payments Mar 2024Navigating Instant Credit Transfers: Compliance with sanctions screeningPSD2 & Payments Mar 2024Exciting Updates to PSD2 with the Publication of Regulation (EU) 2024/886PSD2 & Payments Oct 2021New EU Rules for Crypto Asset Service Providers: MiCA Regulation (II)Crypto & MiCA Oct 2021EU Rules for Crypto Assets: MiCA Regulation (I)Crypto & MiCA Aug 2018PSD2: When might we be providing an account information service?PSD2 & Payments 2018Storing funds in the "payment account": EMI or PI regime?PSD2 & Payments Mar 2018GDPR: Controller–Processor relationship in the Card Acquiring businessAML & Compliance Dec 2017ICOs: ESMA warning and call for complianceCrypto & MiCA Oct 2017E-money issuers and PSPs to appoint a Contact Point in RomaniaPSD2 & Payments Oct 2017Instant Payments in the EU: SCT Inst to be ready by 2017PSD2 & Payments Aug 2017PSD2 and its "secondary legislation" developed by the EBAPSD2 & Payments May 2017PSD2: 6 months of grandfathering — and the risk of losing authorizationPSD2 & Payments Apr 2017PSD2: Access to bank services for Payment Institutions — levelling the playing field?PSD2 & Payments Apr 2017Payments in Online Gambling in Romania — Class II license for PSPsPSD2 & Payments Mar 2017Virtual currencies in the EU Parliament: amending the AML4 DirectiveAML & Compliance Sep 2016Payment Accounts Directive: access to a bank account anywhere in the EUPSD2 & Payments Sep 2016AML4 Reloaded: exchange platforms & digital wallets for BitcoinAML & Compliance Aug 2016PSD2: EBA consults on "strong customer authentication"PSD2 & Payments Jul 2016Mortgage Bonds Guide — Romania (Ghidul obligațiunilor ipotecare)Banking & Markets May 2016The reform of payment services (PSD2)PSD2 & Payments Aug 2015The relevance of EMIR for non-financial actors in OTC businessBanking & Markets

Selected articles published on LinkedIn. Full archive available on the profile.

06 — Contact

Let's discuss your regulatory path to market.

tudor.nistor@payments-lawyers.com
LinkedIn in/tudor-nistor-ioan Based in Bucharest, Romania · Advising across the EU Practice Tudor Nistor | Payments Lawyers