One of the first questions I hear from fintech companies considering Poland is:
How long does it take to get a KNF licence?
The answer is more nuanced than a single number. For a Polish KIP application, KNF states that it issues a decision within three months from receiving the application or its completion. Importantly, this period is calculated from the point at which KNF has received a complete application; the period needed to provide missing documents or information extends the overall process. This means that the statutory decision period is not the same thing as the total time required to take a fintech from an initial project to a licence. In practice, the quality and readiness of the application matter.
Here are ten issues that can create delays.
1. The business model is not clearly defined
The first potential problem appears before the application is even drafted. If it is not clear what the company actually intends to do, it becomes difficult to determine:
- which regulated services it provides;
- which entity should apply;
- which permissions are required;
- which activities are outsourced; and
- what the operational model should look like.
For a KIP application, the applicant must specify the payment services it intends to provide. A vague business model therefore creates problems throughout the application. The regulatory analysis should come first.
2. The application describes several different versions of the business
This is particularly common in fast-growing technology companies. The founders describe the product one way. The business plan describes it another way. The compliance policies assume a third model. The financial projections are based on something else. Individually, each document may look reasonable. Together, they create questions. A regulator needs to understand the same business from different angles.
The application should therefore be reviewed for consistency before submission.
3. The application is technically complete but substantively weak
There is an important difference between:
“We have attached the required documents.”
and:
“The documents demonstrate that our proposed business can operate safely and in compliance with the applicable rules.”
KNF’s process includes both a formal completeness review and substantive analysis. If the application requires changes or additional information, KNF may request amendments or supplements during the proceedings. This is why a checklist approach is not enough. The question is not only whether the document exists but it is whether the document actually answers the regulatory question.
4. Governance responsibilities are unclear
A fintech may have an impressive management team but still have an unclear governance structure. Who is responsible for:
- compliance?
- AML?
- risk?
- IT security?
- outsourcing?
- operational resilience?
- customer complaints?
- incident management?
KNF’s requirements for KIP applicants include an organisational structure and decision-making procedures covering the business, as well as risk management and internal control arrangements. If responsibilities are unclear, additional questions may follow.
5. The management team’s experience does not clearly match the business
KNF requires information allowing it to assess whether management has the education and professional experience necessary to manage the payment services business. This is particularly relevant where:
- the founders come primarily from technology;
- the business is entering financial services for the first time;
- the proposed management team is changing;
- key functions are outsourced; or
- the Polish entity is newly established.
The issue is not necessarily that founders need to become financial-regulatory specialists. It is that the overall governance model needs to demonstrate that the regulated business will be properly managed.
6. The AML framework is generic
Another frequent weakness is an AML framework that looks like a template rather than a description of the actual business.
The relevant questions include:
- Who are the customers?
- What products do they use?
- What jurisdictions are involved?
- What transactions are expected?
- What are the main financial crime risks?
- How does customer due diligence work?
- How are transactions monitored?
- Who investigates alerts?
- How are suspicious activities escalated?
KNF’s application requirements expressly include AML organisational arrangements and procedures. The AML framework therefore needs to make sense in the context of the product.
7. The financial model does not support the operating model
A three-year financial plan is part of the KIP application. But the issue is not simply whether a spreadsheet has been prepared. The financial model should make sense alongside the rest of the application. For example:
- Does the projected customer base match the staffing model?
- Are compliance costs realistic?
- Are technology and outsourcing costs included?
- Does the company have sufficient resources to support the planned growth?
- Does the revenue model correspond to the proposed services?
If the financial plan tells a different story from the business plan, questions are likely to follow.
8. Outsourcing is not properly reflected in the application
Many fintechs rely heavily on external providers. But the application should explain:
- what is outsourced;
- why it is outsourced;
- who performs the activity;
- how the provider is monitored;
- what happens if the provider fails; and
- how the fintech maintains control over the relevant activity.
KNF’s requirements include internal controls covering, among other things, agents and entities entrusted with certain operational activities, as well as business continuity arrangements. Outsourcing therefore needs to be part of the regulatory architecture, not simply a procurement issue, and it should comply with DORA.
9. The applicant keeps changing the business during the process
Fintech products evolve quickly and it happens constantly. It can be problematic during a licensing process if significant changes affect:
- the regulated services;
- customer journey;
- money flows;
- management;
- outsourcing;
- IT systems;
- financial projections; or
- the applicant’s operating model.
KNF also states that applicants must promptly notify it of changes affecting the currency or relevance of information and documents submitted with the application. For this reason, the licensing project should have a process for identifying and assessing material product changes.
10. The application is submitted too early
This may be the biggest practical problem. There can be pressure to file quickly because:
- investors expect a launch date;
- the product is ready;
- the board wants regulatory certainty;
- commercial negotiations are already underway.
But filing before the business model and supporting documentation are mature can simply move the work into the regulatory process.
How long does a KNF licence actually take?
For a KIP application, KNF currently states a three-month decision period calculated from receipt of a complete application or from completion of an incomplete application. The period required to supplement documentation or information extends the process.
That distinction is important.
A project may therefore involve several stages:
Business model and regulatory analysis
↓
Application preparation
↓
Internal review
↓
Submission
↓
Formal completeness review
↓
Substantive assessment
↓
Questions / amendments / supplements, if required
↓
KNF decision
The three-month period should therefore not be treated as a promise that the entire licensing project will be completed within three months of the first legal discussion.
How can you reduce avoidable delays?
Before submitting, I would recommend a structured pre-filing review covering at least:
Regulatory perimeter
Is the proposed licence actually the right regulatory route?
Business model
Does the application clearly describe what the company does?
Governance
Are responsibilities clearly allocated?
Management
Does the management team collectively have the necessary experience?
AML
Does the AML framework reflect the actual customer and transaction risks?
Risk management
Does the framework correspond to the real operational model?
Financial model
Do the financial assumptions support the proposed business?
Outsourcing
Are outsourced activities identified and appropriately governed?
Operational model
Can the company explain how the service works in practice?
Consistency
Do all documents describe the same business?
A KNF application should be prepared backwards from the regulator’s questions
The goal is not to produce the largest possible application.
The goal is to produce an application that makes it easy for the regulator to understand:
what the business does,
how it will operate,
who is responsible,
what risks exist,
how those risks are controlled,
and
why the proposed structure is capable of operating safely and in compliance with applicable requirements.
That is a very different exercise from simply completing a licence application form.
Preparing for a KNF licence application?
I advise fintech companies and international businesses on Polish financial regulation, regulatory strategy and KNF licensing.
If you are preparing a KIP application or considering whether Poland is the right licensing jurisdiction for your fintech business, I can help identify regulatory issues before they become problems during the application process.
If you are planning a KNF licence application, tell me what your business does, what regulatory permissions you currently hold and your expected timeline for entering the Polish market.
