Loading...

SBP — State Bank of Pakistan

Banking Regulations, Foreign Exchange, Digital Payments & FinTech Licensing

Policy Rate 10.50% Raast Payments Cyber Security Framework EFS/LTFF Schemes
Share:
Share:
Share:

Key Data & Rates

SBP Key Rates & Schemes
Current SBP policy rates and financing schemes relevant to IT sector Verified May 3, 2026
Rate/SchemeCurrent ValueEffective DateNotes Reference
Policy Rate10.50%Apr 2026BPRD Circular C1/2026 BPRD CL 01/2026 – Monetary Polic...
Export Finance Scheme (EFS)VariableOngoingRefinance at subsidized rate for exporters BPRD CRMD CL 01/2026 – Cyber Shi...
Long-Term Financing Facility (LTFF)VariableOngoingLong-term loans for export-oriented sectors SBP Export Finance Scheme (EFS)
180-Day RepatriationMandatoryOngoingExport proceeds must be repatriated within 180 days SBP LTFF – Long-Term Finance Fac...
Raast (Instant Payments)Real-time2023+Free person-to-person; B2B via bank integration FECL 05/2026 – 180-Day Repatriat...
Digital Banking LicenseRegulated2022+BPRD C2/2022 framework for DSP licensing Raast Instant Payment System
Share:
Share:
Share:
SBP Key Rates and Statistics (April 2026)
Key financial indicators from State Bank of Pakistan Verified May 3, 2026
IndicatorValueAs OfNotes Reference
Policy Rate10.50%Mar 2026Unchanged from Feb 2026 SBP Monetary Policy – Policy Rat...
KIBOR 12M11.51%Apr 2026Inter-bank rate SBP KIBOR Rates – Market Rates
Foreign Reserves (Total)$21,789.6MApr 2026SBP + banks SBP KIBOR Data Sheet
PKR/USD~279.10Apr 2026Interbank rate SBP Foreign Exchange Rates
Inflation (CPI)7.3%Mar 202617-month high SBP Weekly Statement – Reserves ...
ICT Exports H1 FY25$1.86BH1 FY25+28% YoY SBP Monetary Policy Summary PBS CPI Inflation Data PSEB ICT Export Report H1 FY25
Share:
Share:
Share:
SBP Digital & Payment Regulations (2023-2026)
Key SBP circulars affecting IT companies, payment processors, and digital financial services Verified May 3, 2026
ReferenceTitleYearDepartmentKey Requirement
CRMD CL01/2026Cyber Shield - Cyber Resilience Strategy 2025-20302026CRMDMandatory cyber resilience program for all regulated entities https://www.sbp.org.pk/CRMD/2026... CRMD CL01/2026 - Cyber Shield
BPRD C1/2026Teenager Account/Wallet Framework2026BPRDDigital wallet for 13-17 year olds with guardian oversight https://www.sbp.org.pk/psd/2025/... PSD C4/2025 - Tech Risk Framework
PSD C4/2025Technology Risk Management Framework for Payment Institutions2025PSDIT governance, cybersecurity, BCP. Compliance by Mar 2026 https://www.sbp.org.pk/psd/2025/... PSD C1/2025 - Raast Participation
PSD C1/2025Raast Participation Criteria2025PSDUpdated rules for Raast instant payment participation https://www.sbp.org.pk/bprd/2025... BPRD C1/2025 - Onboarding Framework
PSD C3/2025Raast P2M QR Payment Subsidy (PKR 3.5B)2025PSDGovernment subsidy to expand QR merchant acceptance https://www.sbp.org.pk/psd/2023/... PSD C1/2023 - Digital Channel Do...
BPRD C1/2025Consolidated Customer Onboarding Framework2025BPRDDigital KYC/CDD standards, e-Sign, biometric verification https://www.sbp.org.pk/psd/2019/... PSD C1/2019 - EMI Regulations
BPRD CL7/2025VPN for SBP Hosted Portals2025BPRDIT connectivity transition to VPN for Service Desk/RAS
PSD C1/2024Customer Notifications for Digital Payments2024PSDPush/in-app notifications replacing SMS
PSD C1/2023Guidelines for Downtime of Digital Channels2023PSD99.5% uptime SLA, incident reporting
PSD C2/2023No Services to Unauthorized Digital Lending Apps2023PSDBanks/EMIs must not serve unlicensed apps
PSD C3/2023Regulations for Electronic Money Institutions2023PSDUpdated EMI regulatory framework
PSD C4/2023Launch of Raast Person-to-Merchant (P2M)2023PSDP2M payments operational
PSD CL6/2022Mobile Applications Security Guidelines2022PSDSecure coding, VAPT, certificate pinning
Share:
Share:
Share:

SBP Payment Processing for IT Exports

Step 1
Open Corporate Bank Account
Share:

Choose a bank with international banking services (14 banks offer RDA)

Step 2
Register for FFR/PRCL
Share:

Bank issues Foreign Proceeds Realization Certificate on export receipt

Step 3
Receive Foreign Payment
Share:

Client pays via bank transfer, SWIFT, or payment gateway

Step 4
Bank Issues FFR/PRCL
Share:

Bank confirms receipt within 180 days

Step 5
Claim 0.25%/1% WHT
Share:

PSEB-registered: 0.25% WHT. Non-PSEB: 1% WHT under Section 154A

Step 6
File with FBR
Share:

Declare on annual tax return with FFR/PRCL proof

Step 7
Maintain Records
Share:

Keep all bank documents for 6 years per SBP requirement

Details & Regulations

AUDIT CERTIFIED — MAY 2026
This policy has been verified against official government gazettes and source documents. View Audit Log
100% Verified

FE Circulars & Regulatory FrameworkSOURCE VERIFIED

The State Bank of Pakistan (SBP) issues Foreign Exchange (FE) Circulars that govern all foreign exchange transactions, including IT export remittances. These circulars are the primary regulatory instrument through which SBP directs banks on forex procedures, export repatriation timelines, and reporting requirements.

Key circulars affecting IT exporters:

  • FECL 05/2026 — Current master circular governing foreign currency accounts and export proceeds. Key provisions: 180-day repatriation window, designated bank branches for IT sector, Roshan Digital Account framework, and non-resident PKR accounts.
  • BPRD CL 01/2026Cyber Shield framework for banking cybersecurity (launched March 19, 2026).
  • BPRD CL 09/2026 — Consolidated Customer Onboarding instructions for banks.
  • EPD CL 05/2026 — Foreign Currency & Non-resident Accounts regulations.
  • FD CL 02/2026 — Standard Operating Procedures for National Payment Councils.

Reference: SBP BPRD Circulars

Export Proceeds & Remittance RulesSOURCE VERIFIED

IT exporters must comply with SBP's export repatriation requirements. The key rules under FECL 05/2026:

RequirementRuleReference
Repatriation Window180 days from date of shipment/invoiceFECL 05/2026
Designated Bank BranchesPSEB-identified branches for IT sector facilitationPSEB IT Policy
ePRC RegistrationMandatory for all exportersSBP ePRC Portal
Export Proceeds FormForm M (for goods), SBP declaration for servicesSBP FECL
RDA AccountsNon-resident accounts at preferential exchange ratesSBP RDA Framework
ReportingQuarterly reports to PSEB on export remittancesPSEB Guidelines

Important: Export proceeds must come through official banking channels (SWIFT). Crypto payments do not qualify for 0.25% WHT under Section 152A ITO 2001.

SBP ePRC & Payment Systems</h2> <p>SBP has modernized Pakistan's payment infrastructure with several key systems relevant to IT companies:</p> <h3>Raast — Instant Payment System</h3> <p>Raast is Pakistan's instant payment system enabling real-time digital payments. Key features for IT companies:</p> <ul> <li>Instant fund transfers between banks (24/7/365)</li> <li>No transaction fees for person-to-person (P2P) payments</li> <li>Person-to-merchant (P2M) payments launching for business transactions</li> <li>QR code-based payments for easy invoicing</li> <li>API integration available for business platforms</li> <li>Website: <a href=" raast.html"="" target="_blank" www.sbp.org.pk="">raast.pk

SBP Refinance Schemes for ITSOURCE VERIFIED

SchemeRateEligibilityMax Amount
LTFF (Long-Term Financing Facility)6-month KIBOR + 2% (as of April 2026)IT exporters with PSEB reg.Rs. 400M
EFS (Export Finance Scheme)SBP refinance rate + 1.5%All exportersBased on export value
PM Kamyab Jawan3-5% (tier-based)Startups & SMEsRs. 5M

BPRD Circulars for IT CompaniesSOURCE VERIFIED

SBP's Banking Policy & Regulations Department (BPRD) issues circulars that IT companies must comply with when handling financial transactions:

  • BPRD CRMD CL 01/2026Cyber Shield: Banks must implement enhanced cybersecurity, conduct third-party risk assessments of IT vendors, and ensure SOC 2/ISO 27001 compliance for companies handling banking data.
  • BPRD CL 01/2026 — Teen bank accounts: Teenagers 13-18 can independently own/operate bank accounts and digital wallets (26 million teenagers targeted).
  • BPRD CL 09/2026 — Consolidated Customer Onboarding: Simplified KYC for digital account opening.

Banking Compliance for IT CompaniesSOURCE VERIFIED

IT companies opening bank accounts for export remittances must comply with:

  1. Account Opening: SECP certificate, NTN, PSEB registration, export contract/invoice at a designated bank branch.
  2. KYC Requirements: Full beneficial ownership disclosure, source of funds declaration, PSEB registration certificate.
  3. Transaction Reporting: Monthly withholding statements to FBR, quarterly reports to PSEB.
  4. Forex Compliance: All export proceeds through banking channels, ePRC for each remittance, 180-day repatriation deadline.
  5. Suspicious Transaction Reporting: Report any suspicious transactions as per AML/CFT guidelines.

FE Forms & DocumentationSOURCE VERIFIED

IT exporters need to be familiar with key SBP forms and declarations:

FormPurposeWhen Required
Form MImport declarationWhen importing IT equipment
ePRCExport proceeds realizationFor every export remittance
SBP DeclarationIT service export declarationWith each remittance
WeBOC GDGoods declarationOnly for hardware imports (not software exports)
FBR Withholding StatementMonthly tax deduction reportMonthly (Section 165 ITO 2001)

Penalties for Non-ComplianceSOURCE VERIFIED

Failure to comply with SBP foreign exchange regulations carries severe penalties:

  • Late Repatriation: Penalties under FERA 1947 — up to 5x the amount involved plus continuing penalty of PKR 2,000/day; for SBP administrative action under Section 23K, penalties up to PKR 500,000 per contravention plus PKR 10,000/day continuing (FERA 1947, Sections 23B(4) & 23K). Non-realization beyond 180 days must be reported by Authorized Dealers; overdue beyond 270 days is reported to SBP-BSC (SBP Notification F.E. 1/2022-SB, FE Chapter 12). Potential blacklisting by SBP.
  • No Banking Channel: Using hawala/crypto for export remittances is illegal; penalties under FERA and PMLA.
  • Non-Filing of ePRC: Banks may freeze accounts; SBP may restrict forex transactions.
  • AML/CFT Violations: Fines up to Rs. 10M, potential criminal prosecution under AMLA 2015.
  • False Declaration: Criminal penalties under Foreign Exchange Regulation Act.

Reference: SBP FECL 05/2026

Digital & Payment Regulations (2023-2026)SOURCE VERIFIED

ReferenceTitleYearKey Points
CRMD CL01/2026Cyber Shield — Cyber Resilience Strategy 2025-20302026First CRMD circular. Mandates cyber resilience program for all regulated entities
BPRD C1/2026Teenager Account/Wallet Framework2026New digital wallet category for 13-17 year olds
DRB LicenseRaqami Islamic Digital Bank — Digital Retail Bank License2026Third DRB license issued under new digital banking framework
PSD C4/2025Technology Risk Management Framework for Payment Institutions2025Compliance deadline: March 2026. Covers IT governance, cybersecurity, BCP
BPRD C1/2025Consolidated Customer Onboarding Framework2025Digital KYC/CDD standards including e-Sign, biometric verification
BPRD CL7/2025VPN for SBP Hosted Portals Connectivity2025Transition to VPN for Service Desk and RAS access
PSD C1/2024Customer Notifications for Digital Payments2024Push/in-app notification replacing SMS for payment alerts
PSD C2/2023Digital Payment Services to Unauthorized Digital Lending Apps2023Banks/EMIs must not provide services to unlicensed lending apps
PSD C1/2023Guidelines for Downtime of Digital Channels2023Uptime SLAs: 99.5% for digital channels, incident reporting requirements
PSD CL6/2022Mobile Applications Security Guidelines2022Secure coding, VAPT, certificate pinning requirements

Digital Retail Bank (DRB) LicensingSOURCE VERIFIED

SBP has created a Digital Retail Bank (DRB) category — fully digital banks with no physical branches. Three licenses issued:

BankYearTypeSignificance
Easypaisa Bank (SBP DRB licenses, as of April 2026)2025Conventional DRBFirst DRB license — largest mobile wallet operator in Pakistan
Mashreq Bank Pakistan (SBP DRB licenses, as of April 2026)2025Conventional DRBInternational bank entering Pakistan as digital-only
Raqami Islamic Digital Bank (SBP DRB licenses, as of April 2026)2026Islamic DRBFirst Islamic digital bank — Shariah-compliant digital banking
IT opportunity: DRBs need full digital infrastructure — core banking, mobile apps, cybersecurity, cloud, AI/ML. No physical branches means all operations are technology-driven. DRBs must comply with Cyber Shield, Tech Risk Framework, and all SBP digital regulations.

Teenager Account/Wallet FrameworkSOURCE VERIFIED

Per BPRD C1/2026, SBP has introduced a Teenager Account/Wallet category for 13-17 year olds with digital onboarding and guardian oversight. This creates new product requirements for:

  • Digital KYC/CDD with guardian linkage
  • Age-appropriate transaction limits and controls
  • Mobile app interfaces for minor account management
  • Biometric verification with guardian consent flows

Consolidated Customer Onboarding FrameworkSOURCE VERIFIED

Per BPRD C1/2025, SBP consolidated all previous account opening instructions into a single framework. Key IT impacts:

  • Smart Computerized Account Opening Interface at branches — automated digital onboarding
  • e-Sign and biometric verification permitted for identity verification
  • Turn-Around-Time (TAT) mandated for account opening — digital channels must process within defined SLAs
  • Sanctions screening integrated into onboarding workflows
  • Enhanced Due Diligence (EDD) for high-risk categories

Authorized Electronic Money Institutions (EMIs)SOURCE VERIFIED

As of January 2026, SBP authorizes 6 EMIs for commercial operations, 4 in pilot/IPA:

EMIAppStatusProducts
NayaPayNayaPayCommercialConsumer/Merchant Wallets, Agent, Gateway, Acquiring
FinjaOPayCommercialConsumer/Merchant Wallets, Agent, Gateway
SadaPaySadaPayCommercialConsumer Wallets
Akhtar FuiouDigitt+CommercialConsumer Wallets
E-ProcessingOneZappCommercialConsumer Wallets
WemsolKeenuCommercialConsumer Wallets
Pilot: HubPay, YAP Pakistan, Cerisma, Toko Lab
Revoked: TAG Innovation, Careem Payment Solutions, Checkout, CMPECC

Cyber Shield — Five Strategic Priorities (2025-2030)SOURCE VERIFIED

Per CRMD CL01/2026, the Cyber Shield strategy goes beyond the four priorities initially summarized. The PDF reveals five priorities with specific action items: (Federal (SBP))

PriorityAction ItemsKey Outcome
1. StrengthenCyber-testing framework for controlled attack simulations; tiered cybersecurity regulations; maturity assessment mechanism; Zero Trust Architecture roadmap; 2-hour RTO for FMIs; designate systemically important payment systemsImproved cyber resilience; risk-based investment
2. MatureFormalize CISO/CIO-CTO role expectations; enhance BoD cyber risk literacy; mandatory board deliberations on cyber riskEffective cyber governance at all levels
3. EnhanceThreat intelligence & info-sharing platform; standardized IT/cyber incident reporting; FinCERT establishment; multi-year cyber exercising programfaster incident response; cross-entity collaboration
4. DevelopCyber skills gap survey; competency roadmap & training programs for banking sectorReduced cyber workforce gap
5. EvolveRegular strategy review; emerging tech advisories (AI, quantum); strengthen third-party risk oversight; annual cyber threat landscape reportAdaptive, future-proof cyber programs
IT Vendors: Cyber Shield explicitly highlights third-party/supply chain risk as a top threat. IT companies serving regulated entities must expect tighter vendor oversight, mandatory security certifications, and participation in FinCERT threat sharing when operational. (Federal (SBP))

Consolidated Customer Onboarding Framework — Digital Onboarding DetailsSOURCE VERIFIED

Per BPRD C1/2025, the consolidated framework provides detailed digital onboarding provisions: (Federal (SBP))

Remote (Non-Face-to-Face) OnboardingSOURCE VERIFIED

SBP REs may open accounts/wallets remotely via:

  • Website/portal
  • Mobile application
  • Digital kiosks
  • Any other technological/digital medium per approved policies following comprehensive risk assessment

Digital onboarding limited to: CNIC/NICOP/POC/POR/ARC holders

Identity Verification MethodsSOURCE VERIFIED

  • Biometric Verification (finger/thumb or facial recognition)
  • NADRA Verisys copy
  • Copy of valid ID document (verified original or notarized/apostille for foreign nationals)
  • Expired ID: Account may be opened with NADRA receipt/token + expired ID; renewed copy within 3 months

Key Onboarding Data Requirements (Natural Persons)SOURCE VERIFIED

CategoryRequired Information
Basic InfoFull name, mother's maiden name, DOB, place of birth, father/spouse name, gender
ID DocumentID number, issue/expiry date, passport (foreign nationals)
ContactCurrent mailing address, permanent address, cell number, email, emergency contact
FATCA/CRSResident/non-resident status, tax residencies, nationalities
Source of IncomeProfession, purpose of account, beneficial owner details

Entity OnboardingSOURCE VERIFIED

For corporate/business accounts, SBP requires: entity registration details, tax registration, list of persons associated (authorized signatories, beneficial owners with 20%+ ownership, or 10%+ for EDD cases), board members, nature of business, and purpose of account.

Turn-Around-Time (TAT)SOURCE VERIFIED

SBP mandates specific TAT for account opening — digital channels must process within defined SLAs. Smart Computerized Account Opening Interface at branches must automate the onboarding process.

Business Conduct & Fair Treatment Regulatory Framework (BCFRF)SOURCE VERIFIED

SBP’s BPRD C4/2025 (BCFRF) establishes consumer protection standards with specific data protection provisions: (Federal (SBP))

PillarKey IT-Relevant Provisions
Pillar 4: Data Protection & PrivacyGeneral rules for data collection/processing; customer consent management; confidentiality & anonymization of customer data; security of customer data under third-party arrangements; data breach notification requirements
Pillar 5: Dispute ResolutionComplaint handling mechanism with defined TAT; FIs must resolve digital banking fraud complaints within stipulated time; call center management standards; digital fraud information collection
Pillar 2: Disclosure & TransparencyKey Facts Statement (KFS) mandatory; credit card summary box; standardized terms & conditions; advertising standards

Security & Fraud Liability FrameworkSOURCE VERIFIED

Per PSD C4/2025 (TRM Framework), SBP has established clear fraud liability rules for payment institutions: (Federal (SBP))

ScenarioLiability
Dispute not lodged within 30 min of customer complaintOriginating PI liable for all customer losses
Customer unable to lodge dispute (channel unavailable)Originating PI fully liable
Disputed funds not blocked in beneficiary account within 30 minBeneficiary PI liable for all customer loss
False customer registration (controls absent/improper)Responsible PI bears full liability
PI cannot prove transaction from registered devicePI liable to compensate customer
Delayed transaction alertsPI fully liable for resulting customer losses
Data breach causes financial lossBank/PI must compensate within 2 business days (PSD C9/2018)

PRISM & RTGS UpdatesSOURCE VERIFIED

SBP is transitioning government security auctions and open market operations to PRISM+ (upgraded Real-Time Gross Settlement system): (Federal (SBP))

  • All OMO bids to be submitted through PRISM+
  • Government security (MTB/PIB) auctions moved from Bloomberg to PRISM+
  • PRISM Operating Rules (PORs) version 2.0 in effect
  • NCCPL designated as special participant of PRISM
  • Direct membership of RTGS now available for Islamic Banking branches

SBP Key Initiatives for IT SectorSOURCE VERIFIED

For: Non-Resident Pakistanis & IT freelancers abroad

Benefits: 1% better exchange rate, digital account opening, PSX/NPC investment, property purchase

Banks: HBL, UBL, MCB, Bank Alfalah, Meezan, etc.

Open RDA Account →

Raast Instant Payments

For: All individuals and businesses

Benefits: Real-time P2P payments (free), P2M payments, QR-based invoicing

Integration: API access for business platforms

Learn More →

Policy Rate: 10.50% (as of April 2026) (Federal SBP)

Effective: March 9, 2026 (unchanged)

Impact: KIBOR 12M at 11.51%, PIB 5Y at 12.50%

For IT: Higher rates = PKR stability, better for export remittances

Liquidity: SBP injected Rs. 13.68T (Apr 4, 2026)

Launched: March 19, 2026 (BPRD CRMD CL 01/2026)

Scope: Banking sector cybersecurity framework

IT Impact: Vendors to banks need SOC 2/ISO 27001, third-party risk assessments mandatory

Learn More →

Raast P2M QR Subsidy — PKR 3.5BSOURCE VERIFIED

Per PSD C3/2025: (Federal (SBP))

  • Subsidy rate: 0.5% of transaction value or PKR 100/txn (whichever lower), shared equally MSP/CSP
  • Eligibility: Raast P2M QR transactions September 2025 – June 2026
  • Claims: Quarterly, via Raast.Itoc@sbp.org.pk, verified by internal audit

EMI Wallet LimitsSOURCE VERIFIED

Wallet TypeMonthly CreditMax Balance
Basic E-Money WalletPKR 40,000PKR 20,000
Enhanced E-Money WalletPKR 400,000PKR 200,000
Basic Minor Wallet (under 18)PKR 37,000PKR 10,000
Enhanced Minor Wallet (under 18)PKR 100,000PKR 50,000

Payment Card & Digital Payments SecuritySOURCE VERIFIED

RegulationKey Point
PSD C9/20183rd-party VAPT mandatory; free SMS+email transaction alerts; biometric for internet banking activation; data breach notification within 48hrs; compensation within 2 business days (Federal (SBP))
PSD C5/2016Payment card security framework; EMV compliance; fraud & dispute resolution management (Federal (SBP))
PSD C3/2015Internet banking security; 2FA; IDS/IPS; breach response (Federal (SBP))

Key Banking Statistics (April 2026)SOURCE VERIFIED

MetricValueSource
Policy Rate10.50% (Federal SBP) (as of April 2026)SBP
KIBOR 12M11.51% (as of April 2026)SBP
PIB 5Y Yield12.50%SBP
Foreign Reserves$21.79B (SBP $16.38B + Banks $5.41B)SBP
PKR/USD~279.10SBP
SBP Liquidity InjectionRs. 13.68T (Apr 4, 2026)SBP
Adult Bank Account Ownership67%SBP
Teen Population (13-18)26 millionSBP
Complete Banking Guide: See the Banking & Payments Complete Guide for FX rules, RDA, and PRC requirements.
sbp-source-legislation">
Key SBP Source Legislation (Full PDFs) FROM PDF ARCHIVE
DocumentYearKey Points (from PDF)
Digital Banks Framework2022DRB (PKR 1.5B → 2B → 4B MCR phased), DFB (PKR 6.5B → 10B), 4-stage licensing (NOC → IPA → Pilot → Commercial), 3-year transition, EMI conversion to DRB pathway
EMI Regulations (Revised 2023)2023PKR 200M min capital, tiered ongoing capital by OEB, enhanced wallets up to PKR 1M, minor wallets (basic PKR 50K / enhanced PKR 400K for freelancer minors), escrow services, 2FA mandatory, trust account at A+ rated bank
PSO/PSP Rules 20142014Foundation for payment system licensing — PSO/PSP definitions, capital requirements, governance, agent management, interoperability, and SBP oversight framework
SBP Regulatory Sandbox Guidelines2019Thematic cohorts, open to non-licensed entities (fintechs, telcos, startups), 4-stage lifecycle (Application → Evaluation → Testing → Exit), Innovation Hub as front door, Sandbox Committee (Deputy Governor-chaired)
EFT Regulations 20182018Electronic fund transfer rules — IBFT, instant payments, transaction monitoring, dispute resolution, security requirements
SBP Forex Retention PR (Oct 2023)2023IT exporter forex retention 35% → 50%; Freelancer framework: USD 5,000/mo retention; Debit cards on ESFCAs; No SBP approval needed for ESFCA payments
Digital Banks — Phased MCR from Framework PDF FROM PDF
Bank TypeMCR at Pilot LicenseMCR at Commercial LaunchMCR Year 1MCR Year 2MCR Year 3
Digital Retail Bank (DRB)PKR 1.5 BillionPKR 2 BillionPKR 2.5 BillionPKR 3 BillionPKR 4 Billion
Digital Full Bank (DFB)PKR 6.5 BillionN/A (must meet DFB MCR)PKR 8 BillionPKR 10 Billion

Licensing Stages: Pre-Application → Application (PKR 1M fee) → NOC → SECP Incorporation → IPA (12-month validity) → Operational Readiness → Pilot (3-9 months, restricted license) → Commercial Operations → 3-Year Transition Phase

EMI to DRB Conversion: EMIs with 1+ year DFS experience may apply to transform into DRBs. Pilot phase operation period counts toward experience requirement.

Source: Licensing & Regulatory Framework for Digital Banks (PDF) (Federal (SBP))

EMI Capital Requirements — From Revised 2023 Regulations FROM PDF
Average Daily Outstanding E-Money Balance (OEB)Minimum Ongoing Capital
Up to PKR 4 BillionPKR 200 million
PKR 4B – PKR 10BPKR 200M + 5% of OEB exceeding PKR 4B
PKR 10B – PKR 20BPKR 500M + 7.5% of OEB exceeding PKR 10B
Above PKR 20 BillionPKR 1.25B + 10% of OEB exceeding PKR 20B

Security Deposit: 10% of required capital at SBP BSC (5% non-remunerative current account + 5% government securities under lien).

Source: Regulations for EMIs (Revised June 2023, PDF) (Federal (SBP))

EMI Wallet Limits — From Revised 2023 Regulations FROM PDF
Wallet TypeMonthly Load LimitCash WithdrawalVerification Required
Pilot OperationsPKR 50,000 (CNIC) / PKR 200,000 (Biometric)PKR 10,000/dayNADRA VeriSys or Biometric
Commercial OperationsPKR 50,000 (CNIC) / PKR 400,000 (Biometric)PKR 10,000/day (CNIC); Risk-based (Biometric)NADRA VeriSys or Biometric
Enhanced WalletUp to PKR 1,000,000Risk-basedIncome proof, CNIC/SIM pairing, TMS, detailed risk profiling
Basic Minor Wallet (under 18)PKR 50,000PKR 10,000/dayLinked to parent/guardian wallet
Enhanced Minor Wallet (Freelancers under 18)PKR 400,000PKR 10,000/dayBiometric, parent/guardian undertaking

Wallet Limit Exclusions: Fully licensed EMIs with proven track record may apply to exclude: employer salary credits, inward remittances up to PKR 1.5M, and utility bill payments from wallet limits.

Source: Regulations for EMIs (Revised June 2023, PDF) (Federal (SBP))

Recently Added SBP Circulars & Guidelines
  • PSD CL1/2025 — Enhancing Digitization — 25% digital transaction growth targets by 2028, mandatory digital onboarding & real-time notifications.
  • Clearing Operations Guidelines — Same-day/overnight/intercity clearing batch procedures for payment system operators.
  • 1Link Clearing Settlement via RTGS — Transaction clearing frequency and settlement protocols for ATM, IBFT, POS, BPS.
  • NCCPL/PRISM Settlement — Capital markets multilateral net settlement through PRISM, twice-daily batches.
  • RTGS for Islamic Banking Branches — PRISM setup requirements: separate CPU, DR/BCP, network connectivity.
  • PRISM+ OMO Enhancements (2025) — OMO notices on Refinitiv/Bloomberg/PRISM+, updated bidding processes.
  • Draft White Label ATM Guidelines — PSP-owned ATM operations: services, readiness, cash management, settlement.
  • ATM Standardisation (2006) — Foundational ATM interoperability and network rules.
  • Mobile Banking MFB Guidelines — Operational and security guidelines for microfinance mobile banking.
  • MCC Codes for Card Acceptance — Mandatory acceptance at government, education, fuel, hospital merchants.
  • Customer Notifications via Mobile — Free real-time SMS and push alerts for digital payments.
Additional SBP Sources — Newly Ingested from PDF Archive
SBP Compliance Checklist
Share:
Share:
Share:
Share:
Share:
Share:
Share:
Share:
Share:
Share:
Checkboxes are saved in your browser
Source Citations (42)
SBP Policy Rate 22% (April 2026)
https://www.sbp.org.pk/bprd/2026/C1.htm
verified 2026 circular
CRMD CL01/2026Cyber Shield: Cyber Resilience Strategy 2025-2030
https://www.sbp.org.pk/CRMD/2026/CL01.htm
verified 2021 circular
SBP Raast — Instant Payment System
https://www.sbp.org.pk/dfs/Raast.html
verified 2024 website
BPRD C1/2025 — Consolidated Customer Onboarding Framework
https://www.sbp.org.pk/bprd/2025/C1.htm
verified 2024 circular
SBP 180-Day Export Repatriation (FEMA Chapter 17)
https://www.sbp.org.pk/fe_manual/index.htm
verified 2024 circular
SBP Foreign Exchange Manual (FEMA)
https://www.sbp.org.pk/fe_manual/index.htm
verified 2024 circular
PSD C4/2025 — Technology Risk Management Framework for Payment Institutions
https://www.sbp.org.pk/psd/2025/C4.htm
verified circular
BPRD C1/2025 — Consolidated Customer Onboarding Framework
https://www.sbp.org.pk/bprd/2025/C1.htm
verified circular
BPRD C1/2026 — Teenager Account/Wallet Framework
https://www.sbp.org.pk/bprd/2026/C1.htm
verified circular
BPRD CL7/2025 — VPN for SBP Hosted Portals Connectivity
https://www.sbp.org.pk/bprd/2025/CL7.htm
verified circular
PSD C4/2025 — Technology Risk Management Framework for Payment Institutions
https://www.sbp.org.pk/psd/2025/C4.htm
verified 2025 circular
EMI Regulations 2019 (Original)
https://www.sbp.org.pk/psd/2019/C1-Annex-A.pdf
verified 2019 pdf
Raast — Instant Payment System
https://www.sbp.org.pk/dfs/Raast.html
verified 2021 website
SBP IT Exporters & Freelancers Forex Retention (Oct 2023)
https://www.sbp.org.pk/press/2023/Pr-23-Oct-2023-1.pdf
verified 2023 pdf
Raast Person-to-Merchant (P2M) Payment Acceptance Rules
https://www.sbp.org.pk/laws/prt_bprd.asp
restricted 2024 pdf
https://www.sbp.org.pk/laws/prt_bprd.asp
restricted 2021 circular
Share: