Set the two clocks side by side. The circular takes effect 15 days after publication if finalized [11], so the provisional registry arrives roughly 105 days after the text appears [14], while the deadline for having every active merchant recorded and validated falls about three months after the application window is due to reopen [15]. The traceability apparatus the pause is meant to buy is still being validated when new entrants are let back in.
For those twelve months, no new Philippine payment system operator registration can be created [1], which leaves the existing ones as the only supply, and supply that cannot be manufactured is how a compliance permission starts trading as an asset. The draft as reported does not hand you the denominator: there is no count of existing operators and no numbers attached to the transaction caps [16], so anyone pricing an incumbent's registration this quarter is pricing scarcity without knowing how scarce.
My read is the narrow one, and it is about which clause binds. The freeze has an escape hatch written into it, since companies can still launch activities requiring operator registration where the central bank signs off separately [4], and files already lodged keep moving through review [3]; if those sign-offs turn out to be routine, this is a queue with a slower clerk. The direct-only onboarding requirement carries no equivalent hatch in the text [6], and it is the clause that changes unit economics rather than timing, because it converts one aggregator relationship covering many crypto merchants into one bank relationship per merchant, each with monitoring and limits keyed to that merchant's risk profile [7].
The reason given is traceability: the BSP is concerned that mobile and QR payments have grown faster than banks and regulators can follow the money, and investigators say layered arrangements between intermediaries make it hard to name the actual seller behind a payment or to freeze a suspicious flow while it is running [12]. That is a supervision problem about domestic rails, and it sits apart from the Philippine SEC's August 2025 warning to ten exchanges, OKX, Bybit, KuCoin and Kraken among them, for serving Filipino users without local authorization, alongside a stated plan to work with Google, Apple and Meta to block their marketing and apps [13]. That action went at offshore access. This draft goes at who is allowed to build domestic plumbing.
If the comment period strips the direct-only clause [11], the high-risk classification becomes paperwork and the freeze is the whole story. If the BSP grants the separate sign-offs generously [4], the freeze becomes paperwork and onboarding is the whole story. The firms carrying the cost in either version are the domestic remittance, currency-exchange and crypto merchants who had planned to reach QR rails through an intermediary [5].
