By 2028, six regulatory deadlines will reshape hiring needs in fintech and payments, in France and across Europe.

Recruiters rarely get this explained. As a result, they search for profiles without understanding the constraint that created the role, and struggle to find the right people.

This article walks through the six texts, simply: what each one changes, when it applies, and the roles it creates. Some are already in force. Others are coming fast.

The principle: new rule, new controls, new jobs

Every new rule forces companies to put new controls in place: verifying customer identity, monitoring transactions, stress-testing systems, overseeing third-party providers.

And behind every control, someone has to run it, document it and answer for it to the regulator.

In finance, regulation is therefore one of the first drivers of hiring.

Understanding the text means understanding why the role exists, and therefore which profile will truly hold it.

The six deadlines to know

Three are already here (DORA, MiCA, e-invoicing). Three arrive by 2028 (AMLR, AMLA, PSD3/PSR).

1. DORA, since 17 January 2025

What it changes: Banks, insurers, payment providers and other financial players must prove they can withstand an outage or a cyberattack. They must also keep control over their IT providers.

Roles it opens: Operational resilience, IT risk, cybersecurity, third-party risk management.

2. MiCA, end of the transition in July 2026

What it changes: Since 2 July 2026, the European framework applies to all crypto players in France. To offer crypto-asset services, a European licence is now required. Those who have not obtained one must organise the wind-down of their activity.

Roles it opens: Crypto compliance officers, internal control.

3. E-invoicing, in France since 1 September 2026

What it changes: Large companies and mid-sized companies (ETIs) issue their invoices through an approved platform, and all companies must be able to receive them. It is the only French deadline on the list, but it affects every finance department and the fintechs that equip them.

Roles it opens: Finance business analysts (AMOA finance, the link between accounting and IT), finance and administration managers who lead the project, hybrid finance and data profiles.

4. AMLR, 10 July 2027

What it changes: A single European anti-money laundering regulation, directly applicable across the EU. The same rules to verify customers and monitor transactions, from Paris to Berlin.

Roles it opens: AML/CFT (LCB-FT) heads, KYC/KYB analysts, transaction monitoring.

5. AMLA, 2028

What it changes: A European anti-money laundering authority, based in Frankfurt, will select up to 40 large financial groups active in at least six EU countries at the end of 2027. It will supervise them directly from 2028.

Roles it opens: Senior compliance profiles able to engage with a European supervisor.

6. PSD3 and PSR, application around 2028

What it changes: European payment rules are being updated. The final texts have been known since April 2026 and still have to be published in the Official Journal, with application around 21 months after entry into force. Payment providers may have to refund certain frauds, such as impersonation of the provider itself, and will be liable if they have not put sufficient prevention measures in place.

Roles it opens: Fraud, payments product managers, open banking engineers, payments lawyers.

What changes

For employers

Hire before the deadline, not when the regulator comes knocking. These profiles are scarce, and everyone is looking for them at the same time.

For candidates

Keep specialising and build up expertise in these areas. Understanding the regulation behind your job is becoming a real advantage.

For recruiters

Before launching a search, ask which constraint created the role. It tells you which profile will truly hold it.

In short

These six deadlines do not land at the same time: they stack up, from 2025 to 2028, and each adds its own needs. Teams that anticipate will hire under better conditions than those that wait for the deadline.

And you: which of these six deadlines is affecting your hiring the most right now?

Hiring for one of these profiles? Write to me: this is the core of what I do at TheyScale, fintech and payments recruitment.

Sources

• ACPR: DORA enters into application on 17 January 2025

• AMF: end of the MiCA transition period

• impots.gouv.fr: e-invoicing from 1 September 2026

• KatchMe: finance profiles and e-invoicing

• EUR-Lex: AMLR, Regulation 2024/1624

• AMLA: towards direct supervision

• Council of the EU: Frankfurt to host AMLA

• Jones Day: AMLA’s direct supervision powers

• Council of the EU: agreement on PSR and PSD3, November 2025

• Dudkowiak: PSD3 and PSR, final texts and timeline