Buybox becomes a licensed Payment Institution

The first gift card specialist to secure your transactions and bring greater transparency to the financial flows behind your gift card programs.

Carte bancaire blanche posée sur un téléphone portable bleu avec un sceau marqué ACPR, entouré d'un cercle lumineux rose.
WHY

Why did Buybox become a Payment Institution?

As regulations evolve, Buybox has taken the lead by becoming a licensed Payment Institution for its aggregation activity, Buybox Network. This status enables us to secure and structure fund transfers between distributors and merchants.

Authorised by the Autorité de Contrôle Prudentiel et de Résolution (ACPR), the French supervisory authority backed by the Banque de France, this licence guarantees a compliant and secure payment service. It reflects Buybox’s core values of transparency and security, creating a trusted ecosystem where every stakeholder benefits.

Deux cartes de paiement avec un sceau violet marqué ACPR au centre.
Gift card distribution models:

Why Buybox’s model changes the game

Buybox Network
A regulated model for collecting funds on behalf of third parties, requiring a licence.

Buybox manages the sale and collects funds on behalf of the brand, without becoming the owner of the gift cards, within a structured framework.

What it brings:
  • The brand keeps control over its commercial rules and distribution strategy.

  • Financial flows are separated and organised through dedicated accounts.

  • Transactions and usage are tracked with greater transparency.

  • An infrastructure designed for governance and performance management.

Is a licence required?

Yes. This is a regulatory requirement: Buybox collects and structures flows on behalf of third parties. The licence allows this activity to operate within a supervised framework, with safeguarded funds, controls and governance.

Buy / Resell
A model that does not require a licence, provided the buy/resell conditions are strictly met

The intermediary purchases gift cards from the brand and resells them to a distributor. The distributor then becomes the owner of the cards and resells them under its own commercial terms.

What it brings:
  • A simple and widely used model, but one that offers limited transparency.

  • Commercial autonomy for the reseller.

  • Fast market deployment.

Is a licence required?

In principle, no, provided the strict buy/resell conditions are met. This means the reseller must be free to set the commission paid to the distributor, and ownership of the gift cards must be transferred first from the brand to the reseller, then from the reseller to the distributor.
However, a licence may become relevant if the model involves prepayment, fund holding or complex financial flows, as these can create compliance challenges.

Commercial agent
A payment services model that does not require a licence, provided the exemption conditions are met

The agent sells on behalf of the brand.

What it brings:
  • A direct relationship between the brand and the distributor.

  • A financially straightforward model.

  • Greater contractual flexibility.

Is a licence required?

No, provided the model meets the following two exemption criteria:

  • The agent must act exclusively on behalf of either the brand or the distributor not both.

  • The agent must have genuine authority to negotiate or enter into contracts on behalf of the brand or the distributor.

Our 4 pillars for an effective gift card program

Enhanced protection of your funds

Your funds are safeguarded in a secure account opened with an authorised credit institution, and remain protected in the event of a Buybox default.

Sceau violet avec inscription ISO 27001 entouré d'un petit cadenas et d'un diamant, symbolisant la sécurité de l'information.

ISO 27001-certified information security

Our infrastructure is certified against international standards, ensuring a high level of protection against cyber threats.

Advanced risk management framework

With three levels of internal control and regular ACPR-supervised audits, you benefit from a robust framework designed to ensure continuous protection and full compliance.

Transaction monitoring

Through proactive detection of suspicious activity and reporting to TRACFIN where required, we help you fight fraud and money laundering effectively.

WHY

A strong legal framework to secure your gift card programs

By becoming a licensed Payment Institution, Buybox operates under the strict requirements of the French Monetary and Financial Code, ensuring full compliance with ACPR expectations.

This robust legal framework helps secure fund transfers, strengthen protection against fraud and money laundering, and provide maximum transparency over our operating practices.

Sceau violet avec les lettres CMF au centre, entouré d'un ruban et d'un bouclier avec une coche.

FAQ

Why choose a provider with a Payment Institution licence?

Working with a licensed Payment Institution like Buybox brings strong advantages in terms of fund protection, compliance and risk management. It reinforces the credibility of your gift card program and helps protect your brand from financial and legal exposure.

What is a safeguarded account, and why is it beneficial?

A safeguarded account is a dedicated account where your funds are secured and protected in the event of a Buybox default. In practical terms, these funds are ring-fenced and cannot be seized, providing maximum protection for your brand and greater peace of mind in the management of your gift card program.

What are the benefits of ISO 27001 certification?

ISO 27001 certification demonstrates that our information security management system meets leading international standards. It helps protect your data and transactions against cyber threats, reduce risk and ensure the secure continuity of your services.

How does this affect the management of my gift card program?

This evolution strengthens the security and compliance of your program without disrupting your day-to-day operations. You continue to benefit from Buybox’s dedicated support, with additional security, control and governance measures designed to protect your interests.

What is the ACPR, and what is its role?

The Autorité de Contrôle Prudentiel et de Résolution, or ACPR, is the French supervisory authority backed by the Banque de France. It supervises financial institutions and ensures that Buybox meets its regulatory obligations, protects client funds and provides a compliant, reliable payment service.

How does Buybox protect my customers’ personal data?

Buybox has implemented advanced security measures, aligned with ISO 27001 standards, to protect your customers’ personal data. Our infrastructure is continuously monitored, and we apply strict security standards to ensure the confidentiality, integrity and protection of information.

What happens in the event of a security incident or suspected fraud?

In the event of a security threat or suspicious activity, Buybox applies dedicated monitoring, escalation and reporting procedures in line with ACPR and TRACFIN requirements. We act quickly to help protect your funds and your customers, while keeping you informed of the measures taken.

How does Buybox monitor changes in regulation?

Our legal and compliance teams continuously monitor changes in financial regulation. This allows us to anticipate regulatory developments, maintain compliance over time and protect your interests.

Is Buybox becoming a bank?

No. Buybox is not becoming a bank and does not hold a banking licence. Buybox is authorised as a Payment Institution, which is a distinct regulatory status with a specific scope. In practice, this means Buybox is authorised to provide payment services and organise certain financial flows within a regulated and supervised framework, specifically for the Buybox Network solution.

Ready to elevate your gift card strategy
and delight your customers?