UA Payment Services Law

1. 2026-10-12 Medium
   NBU approves amendments to Regulations on remote supervision of the payment market

   The National Bank of Ukraine has approved amendments to the Regulations on remote supervision of the payment market by the National Bank of Ukraine for non-bank …

   Amendment Action required

2. 2026-09-30 Medium
   NBU amends Instruction on cash operations by banks and payment services provision in Ukraine

   National Bank of Ukraine made changes to the Instruction on the procedure for organizing cash operations by banks and conducting payment operations by payment service providers …

   Amendment Action required

1. 2026-06-19 NBU Resolution No. 66 amendments to Regulation No. 43 on information protection and cyber protection by payment market participants take effect
2. 2022-08-01 The Law on Payment Services is put into effect
3. 2021-05-29 NBU Regulation No. 43 on information protection and cyber protection in payment systems takes effect

1. 2026-06-26
   Law No. 1591-IX (edition of 26 June 2026, Law No. 4465-IX) AmendmentCurrent text

   Further provisions of Law No. 4465-IX of 3 June 2025 on developing financial inclusion were put into effect. source

2. 2025-12-26
   Edition of 26 December 2025 (Law No. 4465-IX) Amendment

   Law No. 4465-IX on developing financial inclusion entered into force. source

3. 2025-08-28
   Edition of 28 August 2025 (Law No. 4196-IX) Amendment

   Amended by Law No. 4196-IX of 9 January 2025 on legal entities of certain organisational and legal forms in the transitional period. source

4. 2024-11-08
   Edition of 8 November 2024 (Law No. 3994-IX) Amendment

   Law No. 3994-IX of 8 October 2024 on improving the National Bank's functions in regulating financial services markets amended many articles, including Article 66(3) on identifying the parties to erroneous and improper payment transactions and Article 84(1)(2) on fines. source

5. 2022-08-01
   Edition of 1 August 2022 (put into effect) Amendment

   The law was put into effect twelve months after entering into force, replacing the Law on Payment Systems and Funds Transfer. source

Security duties fall on banks and non-bank payment service providers; Regulation No. 43 covers payment service providers, resident payment system operators and technological operators.

Regulation 43 subjects

Payment service providers (except e-money institutions, the National Bank and public bodies), resident payment system operators and technological operators of payment services (Regulation No. 43, point 3(16)). source

Staged provisions

The law entered into force the day after publication and was put into effect after 12 months; Article 66(2) on incident reporting took effect 12 months after that, and Article 38(3) and Chapter 4 of Section IV 36 months after (Final provisions, point 1). Law No. 2463-IX of 27 July 2022 later replaced the 12-month wording in that point with "from 1 December 2022"; the database card dates the law's putting into effect 1 August 2022. source source source

Pending edition

A further edition under Law No. 3153-IX on consumer protection takes effect not earlier than the day martial law ends or is lifted. source

Providers run their own information protection system and security risk rules, report significant incidents to the National Bank and apply strong customer authentication.

Security risk rules

Banks and non-bank payment service providers approve and follow internal rules to reduce and control operational, cyber and security risks (Article 66(1)). source

Incident reporting

They report significant operational incidents, cyber incidents and security incidents linked to payment services to the National Bank in the order it sets (Article 66(2)). source

Information protection

Payment service providers set up an information protection system ensuring integrity, confidentiality, availability and traceability of payment information (Article 67). source

Strong authentication

Strong authentication is required for remote account access, initiating remote payments and any action where fraud is suspected (Article 68(3)). source

The National Bank applies measures of influence to supervised entities other than banks, including fines.

Measures of influence

For breaches of payment market legislation or of National Bank requirements, the National Bank may apply measures of influence to supervised entities other than banks (Article 84(1)). source

1. Law text Закон України «Про платіжні послуги» № 1591-IX
2. Law text Постанова НБУ від 19.05.2021 № 43 «Про затвердження Положення про захист інформації та кіберзахист учасниками платіжного ринку»
3. Law text Постанова НБУ від 12.06.2026 № 66 (critical information infrastructure of the financial sector; amends Regulation No. 43)

1. PSD2 SCA

   The EU strong customer authentication rules under PSD2, set by an EU regulatory technical standard rather than by National Bank regulation.

2. NBU Regulation 143

   The National Bank's regulation for non-bank financial service providers, which excludes payment service providers.

3. NBU Regulation 95

   The National Bank's information security regulation for banks.

Verified against official sources on 18 October 2026. We monitor the official sources for this framework. Watching since 24 September 2026. Subscribe to UA Payment Services Law (RSS)