Although Visa, Mastercard, SWIFT, and other payment infrastructure providers have not announced firm migration deadlines, governments are beginning to establish them. The U.S. federal government’s goal of transitioning critical cryptographic systems by around 2030 is widely viewed as an important benchmark that could influence planning across the broader financial services ecosystem, including payment networks, PSPs, and infrastructure vendors.
The shift is based on rapid tech advancements. In fact, more rapid than earlier envisioned. Basically, quantum computing is advancing faster than expected, and needs far fewer quantum bits (qubits) than previously thought to break today’s widely used encryption. In May 2025, Google Quantum AI researcher Craig Gidney published a paper cutting the estimated qubit count needed to factor a 2048-bit RSA key from roughly 20 million to under one million. This twentyfold reduction from his own 2019 estimate can be achieved through improved approximate modular arithmetic and error-correction techniques. The paper estimates that a fault-tolerant quantum computer with under a million noisy qubits could factor a 2048-bit RSA key in under a week.
For companies like Visa and Mastercard, this matters because payment systems rely on that encryption to protect transactions, making fintech experts urge that it increasingly important to prepare for quantum-safe security before practical quantum computers become available.
Google followed up in March 2026 with an internal deadline of its own. The company said quantum computers pose a significant threat to current cryptographic standards, particularly encryption and digital signatures. Encryption is already at risk today from store-now-decrypt-later attacks. Incredibly fast quantum computing will only aggravate the threat. An yet, they will surely appear sooner rather than later, since next to threats, quantum computers also promise to become a catalyst for significant innovations in financial markets and other industries.
Thus, digital signatures need to move to post-quantum algorithms before a cryptographically relevant quantum computer exists. Google set 2029 as its own migration target across its infrastructure, a compressed timeline relative to earlier industry assumptions of the mid-2030s.
For PSPs and acquirers, the preparations begin well before any mandatory network cutover. Organizations should inventory cryptographic assets, engage with HSM and key-management vendors about their NIST-aligned post-quantum roadmaps, and build crypto agility into new systems so algorithms can be replaced without major architectural changes once payment networks and infrastructure providers finalize migration requirements.
Post-Quantum Cryptography Readiness Across Payment Networks
- Visa
- Public position: Preparing payment infrastructure for future PQC adoption.
- Current focus: Cryptographic agility and standards development.
- Public migration deadline: None announced.
- Mastercard
- Public position: Supporting industry efforts toward quantum-safe payments.
- Current focus: Research, standards, and cryptographic modernization.
- Public migration deadline: None announced.
- SWIFT
- Public position: Integrating post-quantum cryptography into its long-term security roadmap.
- Current focus: Customer guidance, testing, and future SwiftNet capabilities.
- Public migration deadline: No mandatory customer deadline announced.
- FedNow (Federal Reserve)
- Public position: No FedNow-specific PQC migration schedule has been published.
- Current focus: Monitoring federal cryptographic guidance and evolving security standards.
- Public migration deadline: None announced.
