Mastercard and QNB Group announced from Damascus on August 28, 2026 that they had processed Syria’s first international card payment in more than 15 years, with QNB Syria acquiring a point-of-sale (POS) transaction on an internationally issued Mastercard card at an eligible approved local merchant.
The story almost everywhere is that Washington’s terrorism delisting unlocked this. The public record says otherwise, and the distinction matters to anyone underwriting the market. The State Department’s rescission of Syria’s State Sponsor of Terrorism designation, signed by Secretary of State Marco Rubio, took effect on August 24, 2026 — four days before the announcement. By its own terms it satisfies the Foreign Assistance Act, the Arms Export Control Act and the Export Administration Act. It says nothing about acquiring a card payment.
The licence came a year before the rails
The authority that actually permits this business arrived twelve months earlier. OFAC removed the Syrian Sanctions Regulations, 31 CFR part 542, from the Code of Federal Regulations effective August 26, 2025, following termination of the national emergency underpinning them. In sequence: the licence preceded the infrastructure, the infrastructure preceded the transaction, and the delisting that made headlines landed last, not first.
Read the release closely and it is narrower than the coverage suggests. Mastercard and QNB say the payment was processed following a technical reconnection of Syria’s payments ecosystem to Mastercard’s global network. They do not say funds settled to the merchant, and they describe the result as demonstrating “the readiness of the infrastructure” and “an important first step” towards broader acceptance. Nor does the release name the merchant, the transaction value, the issuing bank or the country the card was issued in.
There is a further wrinkle in the company’s own photo captions: the cardholder was H.E. Mohammed Safwat Raslan, Governor of the Central Bank of Syria. The first operational payment was, in form, a ceremony conducted by the regulator.
Visa is silent, OFAC is not
Visa has published nothing on Syria in its press release newsroom, which is its own form of reporting: the second network is not yet claiming a milestone here. The Central Bank of Syria, by contrast, is an explicit partner.
Neither is the US quiet. On August 31, 2026 — a week after the delisting took effect — OFAC published a notice of sanctions actions listing individuals located in Syria under counterterrorism authorities. Country-level relief is not person-level relief. And the surviving programme was renamed, not retired: OFAC rebadged 31 CFR part 569 as the Promoting Accountability for Assad and Regional Stabilization Sanctions Regulations effective September 25, 2025.
The Caesar Syria Civilian Protection Act is suspended rather than repealed. The determination signed on November 6, 2025 suspends the Act’s sanctions for 180 days and expressly excludes transactions for or on behalf of the governments of Russia or Iran, or involving Russian-origin or Iranian-origin goods, technology, software, funds, financing or services. That is a live screening obligation sitting inside a renewable waiver, and it is the sort of rule that has to be encoded into acquirer onboarding rather than assumed away — the same discipline behind the move to bring KYC and monitoring in-house.
What the executives said
“By connecting merchants to international payment capabilities, we are enabling businesses to offer customers greater choice and convenience while supporting the transition towards a more modern and secure digital payments ecosystem,” said Yousef Mahmoud Al-Neama, Group Chief Business Officer at QNB Group.
Adam Jones, Division President, West Arabia at Mastercard, was careful to bound it: the transaction “marks an important first step towards expanding access to global payment capabilities and broader international card acceptance across the market.”
The pattern here is familiar from correspondent banking. A network reconnects centrally, but every acquirer, issuer and merchant downstream still carries its own screening and its own risk appetite — which is why de-risking outlasts the legal change that supposedly ended it. It is the acceptance-side mirror of the work banks are doing to rebuild settlement plumbing on shared infrastructure, and it is why merchant-side distribution deals such as turning a wallet into a default payment method at checkout matter more than the first transaction ever does.
Expect acceptance to scale well before domestic issuance does. Acquiring can be routed through a foreign parent’s balance sheet and correspondent relationships, as it was here; issuing inside Syria requires domestic settlement, BIN sponsorship and reliable dollar clearing, none of which a rescission notice confers. Watch three things: whether acceptance widens past the “eligible approved” merchant list, whether Visa follows, and whether the Caesar suspension is renewed on schedule. On the last one, the licence is still the constraint — not the list Syria just came off, and not the card rails themselves, which have been ready for some time.
Rick Steves
Rick Steves has seen business and economics through many lenses. He joined the financial services industry in 2009, and has been a financial journalist since 2011. He holds a degree in Business Administration and has experience producing real-time news, from both buy-side and sell-side, as well as for retail traders, brokers and service providers. Steves' work has appeared in a variety of online publications including FX Street, NewsBTC, FinanceFeeds, and The Industry Spread. Rick has great interest in the dynamics of the trading industry. The never-ending clash between technology, economics, regulation, and more importantly, the people.
