Cross Border Payments Regulation

Why payments between countries are regulated, which areas the rules cover, how approaches differ between jurisdictions, and what all of it means in practice for a business sending or receiving money abroad.

Quick answer

A cross border payment is one where payer and recipient sit in different countries. Such payments are regulated because they cross more than one legal system and are harder for any single authority to observe, which makes them a route for money laundering, terrorist financing and sanctions evasion. Regulation concentrates on six areas: anti-money-laundering and verification, sanctions screening, authorisation of providers, transparency of charges, reporting, and data handling. The rules vary by jurisdiction, and this article is an educational overview rather than legal advice.

A note on scope before we start. What follows describes how the regulatory landscape is generally structured and why. It is not legal, tax or regulatory advice, it does not tell you what your company must do, and it cannot substitute for advice on your specific circumstances. Businesses should consult their own legal and compliance advisors about the obligations that apply to them.

Cross Border Payments: A Definition

A cross border payment is a payment where the payer and the recipient are located in different countries, or where the payment crosses a national boundary during settlement. A company in one country paying a supplier in another is the ordinary case. So is a business receiving from a customer abroad, a platform settling with sellers in several countries, and a person sending money to family overseas.

Three characteristics make these payments different from domestic ones, and each has regulatory consequences.

More than one institution is involved. A domestic payment typically travels a single national scheme between two participants. A cross border payment often passes between institutions in different countries, sometimes through intermediaries that relay it. Each institution in the chain has its own obligations, and each is supervised by its own authority.

More than one currency is often involved. Where the payer's currency differs from the recipient's, a conversion happens somewhere in the chain. That introduces both a cost and a question about how the cost is disclosed — which regulation in several jurisdictions now addresses directly.

More than one legal system applies. The rules of the sending country, the receiving country, and sometimes intermediate jurisdictions all touch the same payment. There is no single global authority, which is why the same transaction can be viewed slightly differently at each stage of its journey.

Payments in the euro area illustrate the point neatly. A euro payment between two countries inside the single currency area crosses a border but not a currency, and European rules have specifically addressed how such payments should be treated relative to domestic ones. Payments leaving the euro area for a different currency raise a broader set of questions.

Why Cross Border Payments Are Regulated

Four objectives explain most of the rules.

Preventing money laundering and terrorist financing. Moving value across jurisdictions is one way to obscure where it came from, because no single supervisor sees the whole chain. Requirements to identify customers, understand the source of funds and monitor transactions exist to close that gap. This is the largest single driver of the compliance work a business experiences when sending money abroad.

Enforcing sanctions. Governments and international bodies restrict dealings with particular persons, entities, sectors and territories. Payment providers are required to screen against applicable lists, and because a cross border payment may touch several jurisdictions, several sets of restrictions can be relevant to a single transaction.

Protecting customers. Rules covering how client funds are held, what happens if a provider fails, how errors and unauthorised transactions are handled, and what a provider must disclose. The mechanisms differ by provider type — deposit protection at banks, safeguarding requirements at payment and e-money institutions — but the purpose is common.

Making costs transparent. Historically the cost of sending money abroad was frequently opaque, buried in an exchange rate rather than stated as a charge. A recurring regulatory theme across jurisdictions is that payers should be able to see what a payment costs before authorising it. In the European Union, for instance, rules have addressed the relationship between charges for cross-border payments in euro and charges for equivalent domestic payments, and have introduced requirements around currency conversion transparency — an example of the direction of travel rather than a summary of any company's obligations.

The Main Regulatory Areas

Anti-money-laundering, KYC and KYB

The foundation of the framework. Regulated providers are required to know who they are dealing with before providing services, and to keep that knowledge current. For individuals this is KYC — identity verification. For companies it is KYB, which goes further: confirming the entity exists, identifying who ultimately owns and controls it, and understanding what the business actually does.

This is why opening a business account involves the document pack it does — registration documents, ownership structure, identification of beneficial owners, a description of business activity, and information about the source of funds. It also explains why verification does not end at onboarding: obligations are ongoing, and providers are expected to keep records current and monitor activity against what they were told to expect. A business whose activity changes substantially should expect questions, and that is the system working rather than failing.

Sanctions screening

Providers screen parties and payments against applicable sanctions lists, which are maintained by various authorities and change frequently. Because a cross border payment may involve several jurisdictions, more than one list can be relevant. Screening is automated in the first instance and reviewed by people where a potential match arises — which is one reason an individual payment can be held while a review takes place. Neither the outcome nor the duration of such a review can be promised in advance by any provider.

Authorisation and licensing of providers

Who may move money is itself regulated, and the regimes differ. Banks operate under banking authorisation with capital and prudential requirements and, typically, access to deposit protection schemes. Electronic money institutions and payment institutions operate under separate frameworks that generally permit holding client funds and executing payments without deposit-taking or lending, with safeguarding obligations instead of deposit insurance. Money services businesses are registered or licensed under regimes that vary considerably between countries — in Canada, for example, money services businesses register with FINTRAC.

The practical implication for a business choosing a provider: ask which authorisation the provider holds, in which jurisdiction, and verify it against the relevant public register. A provider claiming to be "fully licensed globally" is describing something that does not exist, because authorisation is granted jurisdiction by jurisdiction.

Transparency of charges and currency conversion

Rules in a number of jurisdictions address what a payer must be told before authorising a payment: the charges, and where conversion is involved, how the rate relates to a reference rate. The regulatory concern is that a cost expressed only as an exchange rate is difficult to compare, which weakens competition.

Scope is worth understanding here, because transparency rules are usually written by payment instrument rather than by provider. A framework may cover credit transfers, direct debits and card-based transactions differently, and a rule that applies to a card payment at the point of sale may not apply in the same form to a credit transfer between businesses. European rules on cross-border payments in euro, for instance, address both the charges applied to a euro transfer and the disclosure of currency conversion costs, with provisions that extend to card-based transactions where conversion happens at an ATM or at the point of sale. The direction of travel across jurisdictions is consistent — the payer should see the cost before authorising — but the detail differs by instrument, so the scope of any given rule is worth checking rather than assuming.

For a business sending credit transfers abroad, the practical consequence is narrow but useful: expect the cost of a payment, including any conversion, to be disclosed before you confirm it, and treat a provider that cannot show that breakdown as a provider you cannot properly compare.

Reporting and record-keeping

Providers report certain transactions and suspicions to the relevant authorities and retain records for prescribed periods. Reporting obligations are generally the provider's rather than the customer's, though businesses have their own record-keeping duties under tax and company law. The customer-facing consequence is that payment documentation matters: invoices, contracts and clear payment references support the picture a provider is required to maintain.

Data handling

Payments carry personal and commercial data across borders, so data protection regimes apply alongside financial regulation. Rules govern what information must accompany a transfer, how long it is kept and where it may be processed. For businesses this mainly surfaces as a requirement that beneficiary information be complete and accurate — incomplete information is a common reason payments are queried or returned.

Regulatory Areas at a Glance

Regulatory areaWhat it governsHow a business experiences it
AML / CTF, KYC and KYBKnowing who the customer is and where funds come fromDocument-based onboarding; periodic refresh; questions when activity changes
Sanctions screeningRestrictions on dealings with listed persons, entities and territoriesPayments and counterparties screened; occasional holds pending review
Authorisation of providersWho may hold client funds and move paymentsChoice of provider; verifying authorisation on the relevant register
Transparency of chargesDisclosure of fees and conversion costs before authorisationCost visible before confirming; ability to compare providers
Reporting and record-keepingWhat providers report and retain, and for how longRequests for supporting documentation; importance of clear references
Data handlingInformation accompanying transfers and how it is processedRequirement for complete, accurate beneficiary details

Rules vary by jurisdiction and change over time. Treat this table as a map of the territory rather than a statement of any specific obligation.

Global Cross Border Payments Statistics: Where the Numbers Come From

Cross border payment statistics circulate widely and are frequently misquoted, so it is worth being precise about which institutions actually publish what — and worth resisting the temptation to repeat a figure without checking it.

The Bank for International Settlements, particularly through its Committee on Payments and Market Infrastructures, publishes analysis of payment system infrastructure, correspondent banking relationships and the structural characteristics of cross border payments. It is the standard reference for how the plumbing has changed over time.

The World Bank maintains data on the cost of sending money across borders, most prominently through its Remittance Prices Worldwide database, which tracks the cost of sending money along specific corridors. Its remittance data is the usual source for figures on personal transfers between countries.

The Financial Stability Board monitors progress against the international roadmap for enhancing cross border payments, which set out targets across cost, speed, transparency and access. Its progress reports are where any credible claim about improvement against those targets should originate.

National authorities and central banks publish payment statistics for their own jurisdictions, which is often where the most granular data lives.

Three cautions apply when using any of this. Figures for personal remittances and figures for business or wholesale flows measure different things and are routinely conflated. Cost measures differ in what they include — some capture the conversion margin, some do not — so two "average cost" figures may not be comparable. And headline totals for market size vary enormously depending on definitions, so a number without a stated definition and date is not usable.

[verify sources before publishing] Specific figures have deliberately not been stated here. Any number added to this section should be taken directly from the publishing institution, quoted with its definition and reference period, and dated — rather than inherited from secondary coverage.

How Approaches Differ by Jurisdiction

At the level of approach rather than detail, four broad patterns are worth understanding. What follows is descriptive; anyone needing to know how a regime applies to their business should take advice on it.

European Union. A harmonised framework across member states, built on directives and regulations implemented nationally. Payment institutions and electronic money institutions are distinct authorised categories, and rules address both the mechanics of payments and their transparency — including the treatment of charges for cross-border payments in euro relative to equivalent domestic payments, and disclosure requirements around currency conversion for both credit transfers and card-based transactions. The single euro payment area gives euro payments across participating countries a common set of schemes, which is why receiving euro through a euro business account can behave much like a domestic payment for the payer: a euro sent from one participating country to another travels the same scheme as a euro sent within one. That harmonisation of the euro payment landscape is the clearest example anywhere of regulation reshaping how a currency moves across borders, and it is why euro flows are often the simplest part of an international business's payment picture.

United Kingdom. A framework historically aligned with European rules and evolving separately since, with its own authorisation categories for payment and electronic money institutions and its own supervisory arrangements.

United States. A layered structure in which money transmission is regulated substantially at state level, with federal requirements applying in parallel — notably anti-money-laundering obligations and sanctions administration. A provider serving the whole country typically holds many separate authorisations rather than one, which is a structural difference from single-authorisation regimes.

Asia-Pacific. No single approach; regimes differ markedly between jurisdictions in how payment providers are licensed, how strictly cross border flows are supervised, and how data is treated. Several jurisdictions in the region have also invested heavily in domestic instant payment infrastructure and in linking it across borders.

Canada, relevant to this site's own position, regulates money services businesses through a registration regime administered by FINTRAC, alongside a separate framework for banks and a developing regime for payment service providers.

The common thread is that international bodies set standards while implementation stays national. A business operating across several jurisdictions should expect the differences to be real, and should not assume that a provider authorised in one place is thereby authorised everywhere.

What This Means for a Business

Reduced to practice, the regulatory landscape produces five expectations for any company sending or receiving money internationally.

Expect verification, and prepare for it. KYB is not a formality to be minimised. Accurate registration documents, a clear ownership chart up to the individuals at the top, and a description of business activity that matches your contracts and website will do more to make onboarding smooth than any other preparation. This is equally true wherever you open international business accounts.

Be able to evidence the source of funds. Providers are required to understand where the money flowing through an account comes from. Contracts, invoices and financial statements are the ordinary evidence, and having them organised in advance turns a potential delay into a short exchange.

Expect individual payments to be reviewed sometimes. Screening applies to payments continuously, not only at onboarding. A payment held for review is a normal event rather than an accusation. What matters is whether your provider tells you it is happening — visibility of payment status is the practical mitigation, which is one reason it belongs in any provider comparison.

Keep beneficiary data accurate. Incomplete or mismatched beneficiary details are among the most common causes of payments being queried, delayed or returned. Where many payers are involved on the incoming side, structured payment details such as virtual IBAN accounts also make attribution cleaner, which supports your own record-keeping.

Verify your provider's authorisation. Ask which authorisation is held, in which jurisdiction, and check it against the public register. This is a five-minute exercise that tells you more about a provider than any marketing page.

What none of this replaces is advice. The obligations that apply to a specific company depend on its jurisdiction, sector, structure and activity, and businesses should consult their own legal and compliance advisors rather than relying on general material — including this article.

Where Fenryx Fits

Fenryx is operated by Globally United Tech Corporation, a money services business registered with FINTRAC in Canada. That is the regulatory statement we make, and we make no claims beyond it — no assertion of authorisation in jurisdictions where we hold none, and no suggestion that a single registration amounts to global licensing.

Operationally, the approach is what we describe as compliance-aware processing: verification and screening are stages inside the payment flow rather than a gate bolted on before it. Accounts open through KYB review of the company and its owners; screening applies to accounts and payments on an ongoing basis rather than only at onboarding; and where a payment is under review, the platform shows the stage it is sitting in rather than leaving it silent. What we will not do is promise an outcome or a duration for any individual check, because neither is ours to promise. The full operational chain is set out under cross-border payment processing.

Nothing on this page is legal, tax or regulatory advice, and we do not advise businesses on their own compliance obligations. For that, your advisors are the right people to ask.

Recommended Next Step

If the practical side is what you need next:

Frequently Asked Questions

What is cross border payments regulation?

The body of rules governing how money moves between countries and who may move it. It spans anti-money-laundering and counter-terrorist-financing obligations, customer and business verification, sanctions screening, authorisation regimes for payment providers, transparency requirements around charges, reporting duties and data handling rules. The specific rules and the authorities enforcing them vary by jurisdiction.

What is the definition of a cross border payment?

A payment where the payer and the recipient are in different countries, or where the payment otherwise crosses a national boundary in the course of settlement. It usually involves more than one institution, and often more than one currency and more than one regulatory regime, which is why it attracts more oversight than a domestic transfer. The operational chain is described in our guide to cross-border payment processing.

Why are cross border payments regulated so heavily?

Because payments crossing borders can be used to move the proceeds of crime, finance terrorism or evade sanctions, and because the parties are harder for any single authority to see. Regulation also aims at consumer and business protection and at transparency of charges, so that the cost of sending money is visible rather than hidden.

Do the rules differ between countries?

Yes, substantially. Jurisdictions differ in how they authorise payment providers, how they supervise them, what they require in customer and business verification, and how they treat data. International standard-setting bodies encourage convergence, but implementation remains national. Businesses operating across several jurisdictions should expect differences and take advice on the ones that affect them.

How should businesses manage compliance risk in cross border payments?

Common practices include maintaining accurate corporate and ownership records, being able to evidence the source of funds, knowing your counterparties, keeping payment documentation such as invoices and contracts, expecting individual payments to be reviewed, and choosing providers whose authorisation you have verified. What is appropriate for a specific business depends on its circumstances, and companies should consult their own legal and compliance advisors.

Questions about how this applies to your flows?

We can explain how verification and screening work on our platform. For how the rules apply to your company specifically, your own legal and compliance advisors are the right people to ask.

Talk to Fenryx