A regulatory barrier is a legal or supervisory requirement standing between a firm and a market it wants to serve — a licence it must hold, capital it must lock up, a local entity it must incorporate, an approval a supervisor can simply decline. In payments these barriers are deliberate, and they are why the sector does not behave like software.
Barriers at the door, and barriers after it opens
Entry barriers are the visible ones: authorization as an electronic money or payment institution in the EU and UK, money transmitter licences state by state in the US, virtual asset service provider registration for crypto activity. Each carries minimum capital, a compliance function with named individuals, safeguarding arrangements and a fitness assessment of the owners.
Continuing barriers cost more over the life of the business — supervisory reporting, safeguarding audits, strong customer authentication rules, data residency, and tax compliance in every market served. Founders budget for the application and are surprised by the annuity.
The licence is not the whole permission
Authorization only makes the activity legal. The firm still needs a bank willing to hold its safeguarding account, scheme sponsorship or a partner acquirer to reach the card rails, and local payout capability wherever it intends to send money. Any of those counterparties can withdraw, and none of them is a regulator. A licence with no banking behind it is a certificate, not a business.
The asymmetry that protects incumbents
Compliance cost is largely fixed. Spread across a large book it is a rounding error; spread across a startup's first thousand customers it is the entire budget. That asymmetry is the barrier's real economic effect, whatever its stated purpose, and it bites hardest in expansion, where a firm authorized in one country may still need a local entity, a resident director or a separate registration next door — sometimes with a marketplace compliance duty in one market that contradicts a rule in another.
Three routes past a permission you do not hold
Apply directly and accept the timeline, the cost and the real possibility of refusal. Operate as an agent or distributor under someone else's authorization, which is quicker but caps what you control and ties your fate to the principal. Or buy a company that already holds the permission, turning a licensing question into a transaction — the reason authorized entities trade well above the value of their customer books.
Change of control is a barrier too
Buyers underestimate this one. Most regulators must approve a change of control before a licensed firm can be sold, and that assessment examines the buyer rather than the target: source of funds, fitness of the new owners, the plan for the business. It regularly takes longer than the commercial negotiation. Before signing, check the exact permissions granted rather than the licence category, whether safeguarding has ever been criticized, and whether any supervisory action is open.