The SBP Regulatory Sandbox is now one of the most important doors open to Pakistani fintech startups. It lets companies test new digital financial products with real users, under real market conditions, without needing a full licence from day one. With the first cohort of firms already in live testing in 2026, and a second cohort expected, now is the time for founders to understand exactly how this works, who qualifies, and what happens after the test ends.
What Is the SBP Regulatory Sandbox?
A regulatory sandbox is simply a safe space where businesses can try out new ideas under the eye of the regulator. The SBP Regulatory Sandbox is a controlled live-testing environment for innovative financial products, services, business models, or technology. Firms get some degree of regulatory flexibility during the test, but they also have to follow a clear plan and protect customers throughout.
The State Bank of Pakistan issued the Guidelines for the Regulatory Sandbox under Section 3 of the Payment Systems and Electronic Fund Transfers Act, 2007, with the objective of helping new and existing entities, including startups, to test their financial solutions under a controlled regulatory environment.
As SBP itself put it, the sandbox will encourage innovation in digital financial services and help existing and new market participants build a robust digital payments ecosystem in Pakistan.
Why This Matters for Pakistani Startups
Pakistan has a huge unbanked population, a young workforce, and growing smartphone use. But until recently, any fintech idea ran into a hard wall: you needed a licence before you could test, and getting a licence required proof your product worked. The sandbox breaks this deadlock.
A regulatory sandbox is a controlled testing environment that allows businesses to experiment with innovative financial products and services under a regulator’s supervision, providing temporary regulatory relief to encourage innovation while minimising risks to consumers and the financial system.
Experts predict that the sandbox will accelerate financial inclusion by fostering low-cost, technology-driven services targeting youth, freelancers, and small enterprises. These are exactly the groups Pakistan’s digital economy needs to reach.
Countries like the UK, Singapore, Australia, and the UAE already run similar programmes. SBP’s initiative positions Pakistan among countries such as Singapore and the UAE that employ regulatory sandboxes to drive digital finance responsibly.
The SBP Regulatory Sandbox Structure and First Cohort
The SBP Regulatory Sandbox follows a cohort-based structure focused on specific innovation-driven themes. Each cohort has its own set of priority areas that SBP picks after talking to industry players.
The Regulatory Sandbox was launched with the issuance of guidelines in May 2025, followed by the announcement of the first cohort in August 2025. Applications were invited under three themes: open banking, remote onboarding of merchants, and technology-enabled solutions for inward remittances.
The response from the market was strong. In January 2026, the State Bank of Pakistan shortlisted six applicants to pilot innovative digital financial products under its Regulatory Sandbox initiative. The shortlisted companies include Neem Exponential Financial Services, Digi Khata, and Swich Retail under the open banking category; the Bank of Punjab for remote onboarding of merchants; and Barq Fintech along with a joint application from Taptap Send UK Limited and United Bank Limited under the technology-enabled inward remittances theme.
The shortlisted participants will test their proposed solutions within a controlled live environment for up to six months, subject to conditions specified at the time of approval. This is a real, live environment with actual customers, not just a lab test.
Who Can Apply to the SBP Regulatory Sandbox?
Eligible participants include banks, exchange companies, PSOs, PSPs, EMIs, and third-party payment service providers. Startups that are not yet licensed can also apply, as long as their product is genuinely new.
One point most coverage misses: foreign startups are not locked out. Entities incorporated outside Pakistan can apply for sandbox testing by partnering with an SBP-licensed entity. This means an international fintech that wants to enter the Pakistani market can team up with a local bank or payment firm and apply jointly. The Taptap Send and United Bank Limited partnership is a real example of this from the first cohort.
However, not every product qualifies. Applications will be rejected if the product or solution is already deployed in the market at commercial scale, if the applicant is facing bankruptcy or insolvency, or if the product is prohibited by Pakistani law. The applicant must also show that the proposition is currently not regulated or that the regulations are unclear, which is what makes it a genuine candidate for sandbox testing rather than a standard licence application.
How the Application Process Works
The process has four stages: application, evaluation, testing, and exit.
- Application: SBP announces each cohort on its website and social media. Applicants submit a detailed proposal showing their innovation, the consumer benefit, and why current rules do not cover it.
- Evaluation: The initial evaluation is conducted by the Innovation Hub, which assesses documents for completeness, correctness, and suitability. Based on this review, the Sandbox Committee reviews and assesses the application to reach a decision. The Sandbox Committee consists of senior management of SBP and is headed by the Deputy Governor.
- Testing: Each participant is allowed a limited user base and transaction cap, after which SBP evaluates results to determine broader market readiness. Participants must maintain clear disclosure, data-security standards, and complaint-handling mechanisms.
- Exit: At the end of testing, if the product works and KPIs are met, the rollout of the product or service will be subject to a No Objection Letter (NOL), and a change in existing regulation or issuance of new regulations. This NOL is the bridge from sandbox testing to a full, proper licence. If you do not meet your KPIs, you can still re-apply in a future cohort once you fix the problems.
Lessons drawn from the first cohort will feed into updates of Pakistan’s payment system rules and cybersecurity protocols. So even the firms that do not graduate directly benefit the broader ecosystem.
What Happens After the Test Period
This is the piece most fintech founders want to know, and most articles skip over it. Once the six-month testing window ends, SBP looks at whether your KPIs were achieved and whether risks were managed. If yes, the path to full commercial launch opens through the NOL process. As successful models graduate to full licensing, they are expected to diversify the domestic payments ecosystem and increase competition among incumbent players.
The sandbox is also expected to support greater financial inclusion, improve cross-border remittance channels, and encourage responsible data sharing through open banking frameworks. For a startup that graduates, this means entering a market that SBP is actively trying to grow, not obstruct.
The Second Cohort and What to Do Now
The first cohort’s six-month testing window runs through mid-2026. SBP has signalled it plans to keep the sandbox running with future cohorts. With the launch of the first cohort, the central bank signalled that it intends to continue engaging with industry stakeholders and expand the sandbox programme in future phases.
If you are a Pakistani fintech founder or a startup team thinking about payments, open banking, digital lending, or remittance tech, the window for the next cohort application is your next milestone. Keep checking the SBP official website for cohort announcements. Prepare your proposal now: document your innovation clearly, show the regulatory gap your product fills, and have a realistic testing plan with measurable KPIs.
Frequently Asked Questions
What is the SBP Regulatory Sandbox in simple terms?
It is a programme run by the State Bank of Pakistan that lets fintech companies and banks test new digital financial products with real customers under relaxed rules. The regulator watches closely to make sure consumers are protected, and the test runs for up to six months before a decision is made on full launch.
Can a startup with no SBP licence apply to the SBP Regulatory Sandbox?
Yes. The sandbox is specifically designed for entities that have an innovative product that does not fit existing rules. However, your product must be genuinely new and must not already be available in the market at commercial scale. You also need a clear plan for how you will protect customers during the test.
Can a foreign fintech company join the SBP Regulatory Sandbox?
Entities incorporated outside Pakistan can apply for sandbox testing by partnering with an SBP-licensed entity. The local partner, such as a bank or PSP, takes responsibility for regulatory compliance during the test period. The first cohort already included a UK-based firm working with a Pakistani bank.
What are the focus areas for future SBP Regulatory Sandbox cohorts?
SBP picks themes after market consultations. The first cohort covered open banking, technology-enabled inward remittances, and remote onboarding of merchants. Future cohorts will likely expand into other areas of digital finance, such as digital lending, Islamic fintech, or AI-driven credit scoring. Watch the SBP website for official announcements.
