There is a particular kind of investment opportunity that only regulatory change can create: the moment when the rules of an industry are systematically rewritten, when legacy compliance architectures are rendered structurally inadequate, and when the barriers to entry that protected incumbents for decades are dissolved by legislative pen rather than competitive pressure. PSD3 is that moment for European fintech.
The Payment Services Directive 3, together with the Payments Services Regulation that accompanies it, represents the most significant reshaping of European financial services regulation since the introduction of PSD2 in 2018. But calling it an "update" to PSD2 undersells the ambition. PSD3 is a structural reset. It extends open banking principles to open finance. It introduces Strong Customer Authentication improvements that will fundamentally alter the UX of payment flows. And it creates a new regulatory category for financial data access that will, over the next three to five years, produce an entirely new class of infrastructure companies.
What Changes Under PSD3
The headlines are well-known: PSD3 expands the scope of open data access beyond payment accounts to include savings, investments, pensions, and insurance. It mandates standardised, high-quality APIs with performance and availability guarantees that AISP and PISP operators can actually rely on commercially. And it introduces a certification and permission framework for data access that goes significantly beyond the scoped consent model of its predecessor.
But the second-order effects are more interesting than the headline provisions. First, the quality mandates for bank APIs effectively obsolete the current generation of screen-scraping and fallback-aggregation infrastructure. This will force a capital expenditure cycle among Europe's 4,000+ payment account providers, and will create procurement opportunities for API management and monitoring vendors.
"PSD3 mandates that by 2027, every payment account provider in the EEA must maintain a production-grade, monitored API with documented SLAs and a published testing environment. This is a multi-billion euro infrastructure spend cycle — and most of it will flow to fintech vendors."
Second, the extension of open data principles to non-payment financial products will unlock credit and wealth use cases that were impossible under the PSD2 framework. A credit decisioning engine that can access a user's full financial picture — savings balances, investment portfolio values, insurance premium data, pension projections — can underwrite with a degree of precision that makes incumbent credit scoring methodologies look crude. The resulting improvement in credit access for thin-file consumers and SMEs is not merely a commercial opportunity; it is a genuine public welfare outcome.
Investment Implications
We have been tracking the PSD3 legislative timeline for four years, and we have structured our portfolio construction accordingly. The implications for seed-stage investment fall into three distinct categories.
1. API Infrastructure and Monitoring
The quality mandate creates immediate demand for a new category of infrastructure tooling: bank API monitoring, SLA measurement, fallback orchestration, and developer experience platforms for the AISP and PISP community. This is not glamorous technology, but it is sticky, critical, and commercially extremely attractive. We are actively evaluating opportunities in this space.
2. Open Finance Aggregation
The extension of open data beyond payments accounts will require a new generation of aggregation technology — platforms that can ingest, normalise, and present data from pension providers, insurance companies, investment platforms, and mortgage servicers alongside traditional bank accounts. The technical complexity here is substantially higher than PSD2 aggregation, which means the competitive moat for well-executed solutions will be correspondingly deeper.
3. Credit Infrastructure for Alternative Data
The most significant commercial opportunity created by PSD3 is in credit. Access to full financial data pictures — not just payment history, but savings behaviour, investment risk tolerance, insurance coverage, and pension adequacy — creates the conditions for a new generation of credit products that did not previously exist. We have already made one investment in this space (Nexara, Paris) and are actively looking for companies building the enabling infrastructure.
Timeline and Market Positioning
The PSD3 transposition deadline for member states is December 2025, with the PSR applying directly from the same date. The practical impact on the market, however, will be phased: API quality mandates take full effect by mid-2026, and the open finance data categories are being rolled out in tranches through 2027. This creates a clear window for infrastructure companies to build, certify, and establish commercial relationships before the full market opens.
Founders building in this space now have an 18-month window to establish category leadership before the regulatory catalysts fully materialise. That is a rare alignment of timing: enough regulatory certainty to build a roadmap, but enough runway before full market opening to establish commercial relationships before the flood of better-funded competitors arrive at Series A.
Our Position
Estes Capital has been investing in PSD3-adjacent infrastructure since our first close in 2019. Our thesis has not changed: the structural complexity of European financial regulation creates durable competitive moats for companies that understand it deeply enough to build to it rather than around it. PSD3 is not a headwind to navigate; it is a tailwind to ride. The founders who understand this, and who have the regulatory literacy to translate legislative text into product architecture, are the ones we want to back.
If you are building infrastructure in the PSD3 stack, we want to hear from you. Get in touch.