Skip to content

Advisory for the financial sector in the age of digital transformation

We advise financial institutions, fintechs, investment funds and insurers in Spain on regulatory compliance, specialised taxation and corporate advisory in an environment of intense digital and regulatory transformation.

78.051
active companies in Spain
396.901
registered workers (SS)
50,3%
5-year survival rate
6,0%
EU business share

Source: cifex · Seguridad Social · INE DIRCE

60+
financial entities advised
40+
fintechs and neobanks supported
20+
years in financial services

Spain’s financial services sector encompasses more than 78,000 active companies and employs close to 397,000 workers registered with Social Security, positioning it as the sixth-largest sub-sector by share within the European market at 6.0% of the EU total. Its five-year survival rate of 50.3% reflects a highly competitive environment in which entities must combine robust risk management with rapid adaptation to a constantly evolving regulatory framework. Accelerated digitalisation — with the rise of fintechs, neobanks and crypto-asset providers — and continuous regulatory tightening, with rules such as MiCA, DORA and the new AMLD6 Directive, impose growing compliance burdens that make specialist advisory a strategic investment, not a cost.

At BMC we advise credit institutions, insurers, fund managers, investment service companies, fintechs and crypto-asset operators on all tax, legal and corporate aspects of their business. Our services include structuring and registering investment vehicles (FCR, SCR, SOCIMI, ELP), AML/PBC compliance (KYC, enhanced due diligence, internal policies, training), transfer pricing advisory for financial groups and tax planning for investments through financial instruments.

We accompany fintechs throughout their regulatory lifecycle: from identifying the applicable licensing framework through applying for and obtaining authorisation from Banco de España or the CNMV, to designing compliance manuals, KYC/AML procedures and managing supervisor relationships. The pressure on margins and the need to scale efficiently make tax planning from the outset — choice of legal form, shareholding structure, treatment of stock options — a decisive factor in the long-term viability of any fintech project.

We also advise on data protection in the financial sector (GDPR applied to credit scoring, customer profiling and international data transfers) and on structuring financial contracts and digital asset custody agreements. In a sector where half of all companies do not reach their fifth year of operation, having an adviser who integrates regulatory compliance, taxation and corporate strategy makes a real difference to an entity’s ability to operate securely and grow in a sustainable way.

Key services for financial entities

Tax planning for financial entities requires deep knowledge of the special corporate tax regimes applicable to investment funds, venture capital vehicles and foreign securities holding companies (ETVE). ETVEs allow repatriation of dividends from foreign subsidiaries with near-total exemption and are particularly relevant for international financial groups headquartered in Spain. Transfer pricing between group entities and the documentation of related-party transactions are high-risk areas in AEAT inspections of financial groups.

Anti-money laundering compliance is a core obligation for the financial sector. Law 10/2010 imposes exhaustive due diligence (KYC), beneficial ownership identification, AML/PBC policy maintenance, SEPBLAC representative appointment and suspicious transaction reporting on banks, insurers, funds and asset managers. Non-compliance results in multi-million-euro sanctions and severe reputational damage. We design and implement comprehensive AML compliance programmes tailored to each entity’s risk profile.

DORA compliance — applicable since January 2025 — requires financial entities to implement ICT risk management frameworks, digital operational resilience testing programmes, critical third-party ICT provider management and major incident notification procedures. We advise on the full documentation framework, critical vendor identification and preparation for TLPT (Threat-Led Penetration Testing) exercises.

Regulatory challenges for financial services in Spain

MiCA (Markets in Crypto-Assets Regulation), fully applicable since December 2024, is transforming the landscape for crypto-asset operators. MiCA requires CASPs (Crypto-Asset Service Providers) to obtain authorisation from the CNMV or Banco de España depending on the service type, implement capital, governance and transparency requirements, and comply with enhanced AML/PBC standards. Entities already registered as PSVAs benefit from a transitional window until July 2026.

International tax planning is critical for financial groups with cross-border structures. The ETVE regime, the participation exemption for dividends from foreign subsidiaries and the deduction for double taxation are key instruments for international groups with a Spanish holding or operations hub. The EU Anti-Tax Avoidance Directives (ATAD I and II) and the OECD Pillar Two global minimum tax impose new constraints that require careful modelling.

Private equity investment in Spain exceeded €8.5 billion in 2024, growing 18% year-on-year. The Spanish fintech sector counted more than 800 active companies at end-2024, with digital payments, alternative lending and insurtech as the largest segments. Banking consolidation and the acquisition of fintechs by incumbent institutions are the main transactional vectors. At BMC we advise the full spectrum of financial entities with a team specialised at the intersection of financial regulation, international taxation and corporate advisory.

Key services for financial entities

Tax planning for financial entities requires deep knowledge of the special corporate tax regimes applicable to investment funds, venture capital vehicles and foreign securities holding companies (ETVE). ETVEs allow repatriation of dividends from foreign subsidiaries with near-total exemption and are particularly relevant for international financial groups headquartered in Spain. Transfer pricing between group entities and the documentation of related-party transactions are high-risk areas in AEAT inspections of financial groups.

Anti-money laundering compliance is a core obligation for the financial sector. Law 10/2010 imposes exhaustive due diligence (KYC), beneficial ownership identification, AML/PBC policy maintenance, SEPBLAC representative appointment and suspicious transaction reporting on banks, insurers, funds and asset managers. Non-compliance results in multi-million-euro sanctions and severe reputational damage. We design and implement comprehensive AML compliance programmes tailored to each entity’s risk profile.

DORA compliance — applicable since January 2025 — requires financial entities to implement ICT risk management frameworks, digital operational resilience testing programmes, critical third-party ICT provider management and major incident notification procedures. We advise on the full documentation framework, critical vendor identification and preparation for TLPT (Threat-Led Penetration Testing) exercises.

Regulatory challenges for financial services in Spain

MiCA (Markets in Crypto-Assets Regulation), fully applicable since December 2024, is transforming the landscape for crypto-asset operators. MiCA requires CASPs (Crypto-Asset Service Providers) to obtain authorisation from the CNMV or Banco de España depending on the service type, implement capital, governance and transparency requirements, and comply with enhanced AML/PBC standards. Entities already registered as PSVAs benefit from a transitional window until July 2026.

International tax planning is critical for financial groups with cross-border structures. The ETVE regime, the participation exemption for dividends from foreign subsidiaries and the deduction for double taxation are key instruments for international groups with a Spanish holding or operations hub. The EU Anti-Tax Avoidance Directives (ATAD I and II) and the OECD Pillar Two global minimum tax impose new constraints that require careful modelling.

Private equity investment in Spain exceeded €8.5 billion in 2024, growing 18% year-on-year. The Spanish fintech sector counted more than 800 active companies at end-2024, with digital payments, alternative lending and insurtech as the largest segments. Banking consolidation and the acquisition of fintechs by incumbent institutions are the main transactional vectors. At BMC we advise the full spectrum of financial entities with a team specialised at the intersection of financial regulation, international taxation and corporate advisory.

Glossary

Key Sector Terms

DORA (Digital Operational Resilience Act)

DORA (Regulation EU 2022/2554) is the EU's regulatory framework requiring financial sector entities to manage and mitigate ICT risk, ensure operational resilience against digital disruptions, and impose contractual standards on their technology providers. It became directly applicable across all EU member states, including Spain, from 17 January 2025.

NIS2 Directive

The Network and Information Security Directive 2 (NIS2 — Directive 2022/2555/EU) is the EU's updated cybersecurity framework, replacing the original NIS Directive of 2016. It significantly expands the scope of mandatory cybersecurity obligations to cover more sectors and entity types across all member states, with Spain in the process of transposing it into national law.

Accelerated Depreciation in Spain (Amortización Fiscal Acelerada)

Accelerated depreciation (amortización fiscal acelerada) in Spain allows companies to deduct a higher proportion of an asset's cost in the early years of its useful life for Corporate Tax purposes, reducing taxable income sooner than straight-line accounting depreciation would permit. Spain offers both statutory accelerated tables and specific regimes for SMEs, newly hired personnel, and R&D assets.

EU AI Act

The EU Artificial Intelligence Act (Regulation EU 2024/1689) is the world's first comprehensive legal framework for artificial intelligence. It classifies AI systems by risk level, imposes obligations on developers, deployers, and importers, and establishes penalties of up to €35 million or 7% of global turnover for the most serious violations. It entered into force in August 2024 with phased compliance deadlines through 2027.

Arbitration and Mediation in Spain

Spain has a well-developed framework for alternative dispute resolution (ADR). Arbitration is governed by Ley 60/2003 de Arbitraje (based on the UNCITRAL Model Law) and provides a binding, private process with enforceable awards. Mediation in civil and commercial matters is regulated by Ley 5/2012. Spain is a signatory to the New York Convention (1958), enabling international enforcement of Spanish arbitral awards in 170+ countries.

Balance Sheet in Spain

The balance sheet (balance de situación) is a statutory financial statement that presents a company's assets, liabilities, and shareholders' equity at a specific point in time. In Spain, it is a mandatory component of the annual accounts (cuentas anuales) prepared under the Plan General Contable (Spanish GAAP) and filed at the Commercial Registry.

FAQ

Frequently asked questions

Depending on the activity, a Spanish fintech may need a payment institution or e-money institution licence (supervised by Banco de Espana), an investment services firm licence (CNMV), a lender registration (CIRBE) or registration as a crypto-asset service provider (PSVA with Banco de Espana under MiCA). We advise on identifying the applicable regulatory framework and managing the licensing process.
MiCA (Markets in Crypto-Assets Regulation), fully applicable since December 2024, regulates the issuance of and provision of services over crypto-assets in the EU. Companies already registered as PSVAs in Spain benefit from a transitional period until July 2026. MiCA requires authorisation as a CASP (Crypto-Asset Service Provider), with requirements on capital, governance, custody and disclosure.
Entities subject to Law 10/2010 on money laundering prevention — banks, insurers, financial advisers, fund managers — must implement customer due diligence (KYC) procedures, identify ultimate beneficial owners, maintain AML policies, appoint a SEPBLAC representative and report suspicious transactions. Non-compliance carries very significant penalties.
Spain's venture capital regulation (Law 22/2014) allows the structuring of Venture Capital Funds (FCR), Venture Capital Companies (SCR) and Management Companies (SGEIC) under CNMV supervision. These vehicles enjoy a favourable tax regime (99% income exemption in Corporate Tax for FCR/SCR). We advise on the incorporation, regulation and tax management of these vehicles.
The Digital Operational Resilience Act (DORA), applicable since January 2025, requires Spanish financial entities to implement ICT risk management frameworks, conduct digital operational resilience testing, manage third-party ICT provider risks and report significant incidents. Non-compliance may result in penalties of 1% of average daily global turnover.

Request a personalized consultation

Our experts are ready to analyze your situation and provide tailored solutions.

Call Contact