Is P2P Lending Safe? The Honest 2026 Risk Guide

The question "is P2P lending safe" conflates two distinct concepts: operational safety (is the platform itself sound, regulated and unlikely to vanish with my money) and investment safety (will I get my advertised return without capital loss). European retail investors searching this phrase in 2026 typically want the second answer, but survival requires understanding both.

P2P lending and crowdlending platforms intermediate loans between retail investors and borrowers - consumers, small businesses, property developers or invoice issuers. You lend money, the borrower promises contractual interest and principal repayment over a fixed term, and the platform collects payments and distributes them to your account. Returns advertised on European platforms in 2026 range from 9 percent on diversified note portfolios at Mintos to 21-22 percent on discounted Spanish mortgage assignments at Indemo. Those yields sit far above the 3.5-4 percent offered by Eurozone savings accounts, which signals higher risk.

This guide dissects six risk categories that every P2P investor faces, illustrated with real outcomes from the 20 platforms tracked in the P2PScore index. We define what each EU licence type actually protects, present a ten-point pre-deposit checklist, and conclude with a verdict framework that separates regulatory safety from capital safety. Nothing here is personalised investment advice; capital is at risk in all P2P lending, and returns are never guaranteed.

1. Borrower default risk - the credit risk you always bear

Borrower default is the risk that the end debtor - a consumer taking a payday loan, an SME financing inventory, a property developer building apartments - fails to make scheduled interest or principal payments. This is credit risk, and it belongs entirely to the investor. No platform licence, no investor compensation scheme, no regulatory framework prevents borrowers from defaulting. The only defences are loan selection, diversification, collateral and originator buyback promises (which carry their own counterparty risk).

Annual default rates vary by asset class and originator underwriting quality. InRento, a Vilnius-based buy-to-let platform regulated as an ECSP by the Bank of Lithuania, has recorded zero capital losses across five years and 11.8 percent average returns because it finances only rental properties with senior security and conservative loan-to-value ratios below 70 percent. At the other end, unsecured consumer lenders on multi-originator marketplaces report gross default rates of 8-12 percent annually; platforms typically advertise net returns after deducting expected losses and fees, but realised outcomes depend on recovery success.

Maclear, a Zurich platform supervised by a Swiss self-regulatory organisation under anti-money-laundering law, funds SME loans, factoring and real-estate projects at 14.5-14.9 percent advertised annual return. Maclear experienced one borrower default in its track record since 2022; the platform covered that loss in full from its own balance sheet, maintaining the advertised return for investors. That outcome reflects both conservative underwriting and the platform's willingness to absorb losses, but it does not constitute a legal guarantee - future defaults could exceed Maclear's capacity or willingness to cover them.

Platforms with buyback obligations promise to repurchase loans that fall 60 or 90 days overdue, returning principal plus accrued interest to the investor. Robocash, a Zagreb-based platform listing short-term consumer loans from its own group, has honoured buyback promises consistently since 2017. However the buyback is a contractual promise from the loan originator, not a regulatory requirement or insured guarantee. If the originating company becomes insolvent, the buyback stops and investors enter recovery processes that can take years and return only a fraction of principal.

Borrower default risk cannot be eliminated. The only question is whether you are compensated adequately for bearing it, and whether the platform has structured loans with collateral, guarantees or buyback mechanisms that improve recovery rates when defaults occur.

2. Platform insolvency risk - what happens if the intermediary fails

Platform insolvency occurs when the company operating the P2P marketplace itself runs out of cash, breaches regulatory capital requirements or enters bankruptcy proceedings. This is distinct from borrower default: the loans may be performing perfectly, but the platform can no longer service accounts, process payments or maintain its technology.

ECSP and MiFID II licences mandate client-money segregation. Investor funds must be held in separate bank accounts or custody arrangements that do not form part of the platform's balance sheet. If the platform enters insolvency, those segregated assets should be returned to clients outside the bankruptcy process. However operational failures, commingling errors or fraud can still result in missing funds.

MiFID II investment firms registered with national compensation schemes offer partial protection. Mintos holds a MiFID II licence from Latvijas Banka and participates in the Latvian Investor Compensation Scheme, which covers up to EUR 20,000 per investor if the firm becomes insolvent and cannot return client financial instruments or cash. Nectaro, also MiFID II-licensed by Latvijas Banka, offers the same EUR 20,000 coverage. Twino holds MiFID II authorisation as well, though its investor sentiment deteriorated in 2024-2025 following legacy Russia exposure and weak customer reviews.

Crucially, this compensation never covers borrower defaults. If you hold EUR 50,000 in performing loans on Mintos and the platform goes bankrupt tomorrow, you are entitled to receive your EUR 50,000 in loan assets or cash (subject to the segregation arrangements working as designed). If those loan assets later default, the compensation scheme does not pay out - you bear the credit loss. The EUR 20,000 ceiling applies only to situations where the platform's insolvency causes client assets to disappear entirely.

ECSP licences as of 2026 carry no harmonised EU-wide investor compensation. Platforms such as Capitalia (ECSP-licensed by Latvijas Banka), Crowdpear (ECSP, Bank of Lithuania), Profitus (ECSP, Bank of Lithuania) and InSoil (ECSP, Bank of Lithuania) must segregate client money and meet conduct standards, but if the platform fails and funds go missing, investors have no compensation backstop beyond national insolvency law. Some ECSP platforms have obtained additional insurance or guarantee arrangements; others rely solely on operational controls and regulatory supervision.

The safest approach is to assume that platform insolvency will freeze your portfolio for months or years while administrators sort out loan ownership and payment routing. Segregation reduces the risk of total loss, but it does not guarantee liquidity or uninterrupted cashflow. Diversifying across multiple platforms limits single-platform exposure, though it multiplies operational complexity and fee drag.

3. Originator failure risk - when the loan supplier collapses

Many European P2P platforms act as intermediaries between investors and third-party loan originators - finance companies that underwrite and service the loans. If an originator becomes insolvent, new loan flow stops, existing loans may lose servicing, and any buyback guarantees issued by that originator become worthless.

Mintos experienced a major originator crisis in 2022 when several Eastern European consumer lenders suspended operations, leaving investors holding non-performing loans without buyback coverage. Mintos itself remained solvent and operational, but investors faced write-downs on loans originated by the failed companies. The platform since tightened originator due diligence, introduced risk ratings and reduced exposure to single originators, but the episode illustrates that multi-originator marketplaces carry hidden concentration risk if a large share of the loan book comes from one or two sources.

Lendermarket, an ECSP-licensed platform based in Dublin and regulated by the Central Bank of Ireland, lists consumer loans almost exclusively from Creditstar, a pan-Baltic finance group. Lendermarket advertises 15.6-18 percent returns with a 60-day buyback guarantee. That guarantee depends entirely on Creditstar's ongoing solvency. If Creditstar were to fail, Lendermarket's loan supply and buyback mechanism would both disappear simultaneously, even though Lendermarket itself holds a valid ECSP licence and maintains segregated client funds.

Platforms with full vertical integration source loans from their own group. Robocash lists 100 percent of its consumer and leasing loans from companies within the Robocash Group. Hive5, a Zagreb-based platform, issues short-term consumer and SME loans through related entities. These structures eliminate external originator risk but replace it with single-enterprise dependency: if the parent group experiences financial distress, regulatory action or management failure, the entire platform stops functioning. Investors hold exposure not to a diversified pool of independent borrowers but to one corporate family.

Investors should ask: does the platform disclose originator financials, ownership structure and historical default rates by originator? Mintos publishes detailed originator statistics and allows filtering by risk grade. Platforms that refuse to name originators or disclose their performance create information asymmetry that benefits the platform at the investor's expense.

4. Regulatory risk - when licences disappear or rules tighten

Regulatory risk encompasses licence withdrawal, rule changes that force business-model pivots, and the inherent uncertainty of investing through platforms in jurisdictions with weak or nascent supervision. A platform can lose its licence due to compliance breaches, capital shortfalls or regulatory policy shifts, triggering forced wind-down and indefinite portfolio lockup.

As of early 2026 the EU regulatory landscape for P2P lending divides into three tiers. MiFID II investment firms face the strictest rules, including capital requirements, conduct supervision and mandatory participation in investor compensation schemes where available. ECSP-licensed platforms operate under the 2020 European Crowdfunding Service Providers Regulation, which harmonises rules across member states, mandates disclosure and segregation, but provides no standardised compensation. Unregulated platforms fall outside both frameworks, relying on national consumer-protection or payment-services law with no investor-specific safeguards.

Reinvest24, an Estonian real-estate equity platform, operated without ECSP or MiFID II authorisation. The Estonian Financial Supervision Authority, German BaFin and Austrian FMA all issued public warnings about its unregulated status and business model between 2021 and 2023. In February 2024 Reinvest24 suspended investor withdrawals, citing cash-flow problems in underlying property projects. Investors remain unable to withdraw capital as of early 2026, and the platform entered wind-down. The absence of EU financial-services regulation left investors with no compensation scheme and limited legal recourse beyond Estonian insolvency law.

EstateGuru holds an ECSP licence from the Estonian regulator and had been one of Europe's largest property-lending platforms since 2013. By early 2026 approximately 60 percent of its loan portfolio had entered recovery due to borrower payment failures. The ECSP licence required operational standards and client-money segregation, but it provided no insurance against the mass wave of defaults that locked investor capital in multi-year workout processes. The platform continues to operate under regulatory supervision, but investors face indefinite waits for partial recoveries on foreclosed assets.

Regulatory tightening can also force platforms to exit markets or restructure. Stricter capital requirements, advertising bans or cross-border restrictions all reduce platform profitability and can trigger closures. Investors with locked capital in long-term loans may be unable to exit before rule changes take effect, leaving them in orphaned portfolios serviced by skeleton teams or third-party administrators.

The only defence is to favour platforms with durable, high-tier licences - MiFID II where compensation exists, ECSP where it does not - and to avoid platforms that operate in regulatory grey zones or have received public warnings from national authorities.

5. Liquidity risk - when you cannot sell or withdraw

Liquidity risk is the inability to convert your investment back into cash on demand without significant loss. Most P2P loans carry fixed terms of 6 to 60 months. If you need capital before maturity, you must either wait or sell on a secondary market (if one exists), typically at a discount.

Secondary markets charge transaction fees and depend on buyer liquidity. Mintos operates a secondary market where investors can list loans for sale; the platform reports active trading volume, but sale speed and achievable price depend on loan quality, remaining term and overall market sentiment. During stress periods - platform crises, macroeconomic shocks - secondary markets freeze as buyers disappear, forcing sellers to accept steep discounts or hold until maturity. PeerBerry, a Zagreb-based platform regulated as an ECSP (pending final approval as of early 2026), plans to launch a secondary market in 2026; until then all loans lock capital until repayment or buyback.

Auto-invest portfolios on platforms such as Mintos, Capitalia and PeerBerry continuously reinvest repayments into new loans, maintaining full deployment. Withdrawing requires disabling auto-invest, waiting for loans to mature or triggering buyback (on platforms that offer it), then requesting a bank transfer. Even with daily liquidity promises, large withdrawals can take weeks if the platform must wait for loan cashflows or secondary-market sales to generate liquidity.

Real-estate platforms carry the longest lockups. Property development loans on Crowdpear or Profitus run 12 to 36 months with bullet repayments at maturity. If a project delays or defaults, capital remains frozen until the developer refinances or the platform forecloses and sells the asset. EstateGuru investors have experienced lockups exceeding three years on loans where foreclosure and asset disposal stretched longer than anticipated.

Platforms such as Maclear and InRento offer no secondary market; all investments lock until contractual maturity or early repayment by the borrower. Maclear's SME loans typically mature in 6 to 18 months, limiting lockup duration, but investors must plan cashflow accordingly. InRento's buy-to-let loans run 12 to 60 months; early exit is not possible except through extraordinary borrower prepayment.

Liquidity risk compounds during platform wind-downs. When a platform suspends operations, loan servicing often continues under a third-party administrator, but investors lose access to dashboards, cannot trade on secondary markets, and must wait passively for borrowers to repay or recovery processes to conclude. Reinvest24's suspension left investors with no withdrawal path and no timeline for capital return.

6. Concentration risk - when all your eggs sit in one basket

Concentration risk arises when too much capital sits in one platform, one originator, one borrower, one country or one asset class. A single adverse event - originator insolvency, regulatory crackdown, macroeconomic shock in one jurisdiction - can wipe out a concentrated portfolio.

Platform concentration is the easiest to measure and mitigate. Investors who place 100 percent of their P2P capital on one platform face total loss if that platform fails, regardless of loan performance. Spreading EUR 10,000 across five platforms at EUR 2,000 each limits single-platform exposure, though it quintuples operational overhead (five KYC processes, five tax documents, five monthly cashflow reconciliations).

Originator concentration hides inside platform portfolios. An investor on Lendermarket may hold 200 individual consumer loans, believing that diversifies credit risk, but if all 200 loans originate from Creditstar, the portfolio carries single-enterprise exposure. The same applies to Robocash (100 percent internal group origination) and Nectaro (where related-party loans from the platform's own group dominated the portfolio in prior years, though Nectaro has since expanded third-party originator share).

Geographic concentration exposes investors to country-specific shocks. Platforms concentrated in the Baltics (Latvia, Lithuania, Estonia) carry exposure to regional economic cycles, currency moves (most loans are denominated in euros, but local wage growth and employment drive repayment capacity), and geopolitical events such as the 2022 Ukraine war, which disrupted cross-border payment corridors and raised default rates on Eastern European consumer loans. Platforms with pan-European or Western European focus - such as Mintos after its post-2022 pivot toward Eurozone originators, or Maclear with its Swiss and Western European SME loans - reduce single-country tail risk.

Asset-class concentration magnifies sector shocks. Real-estate platforms such as EstateGuru, Reinvest24, Crowdpear and Profitus all locked up simultaneously during the 2022-2024 European property downturn, as rising interest rates crushed developer margins and froze refinancing markets. Investors who held 100 percent real-estate P2P portfolios saw their entire capital base become illiquid within months. A mixed portfolio of consumer loans, SME financing, property and factoring spreads exposure across uncorrelated asset classes, reducing the probability that one macro shock freezes everything at once.

The optimal concentration depends on portfolio size and risk tolerance. A EUR 5,000 portfolio might justify placing EUR 2,500 on one top-tier platform (Maclear or InRento) and EUR 2,500 on a second. A EUR 50,000 portfolio should spread across at least five platforms, multiple originators, and at least two asset classes. Concentration beyond 30 percent in any single entity - platform, originator or borrower - creates uncompensated single-point-of-failure risk.

What ECSP and MiFID II licences actually protect (and what they do not)

EU regulation of P2P lending divides into two frameworks: the European Crowdfunding Service Providers Regulation (ECSP), which took effect in November 2021, and the Markets in Financial Instruments Directive II (MiFID II), which has governed investment firms since 2018. Both impose conduct rules, disclosure obligations and client-money segregation. Neither insures against borrower defaults.

ECSP licences allow platforms to passport services across all 27 EU member states under a single authorisation from one national regulator. The licence requires platforms to publish key investment information documents for each project, segregate client funds in third-party accounts, maintain minimum capital, and submit to ongoing supervision. As of early 2026 the ECSP register maintained by the European Securities and Markets Authority lists over 60 authorised providers. Notable P2P platforms with ECSP licences include Capitalia (Latvijas Banka), InRento (Bank of Lithuania), PeerBerry (pending final approval), Crowdpear (Bank of Lithuania), Profitus (Bank of Lithuania), InSoil (Bank of Lithuania) and Lendermarket (Central Bank of Ireland).

ECSP does not mandate investor compensation. If an ECSP platform becomes insolvent and client funds go missing despite segregation requirements, investors rely on national insolvency law and any voluntary insurance the platform may have arranged. Some ECSP platforms have obtained project-level insurance or partnered with guarantee providers, but these are commercial arrangements, not regulatory requirements.

MiFID II investment firms operate under stricter rules. They must meet higher capital thresholds, implement transaction reporting, conduct suitability or appropriateness assessments for clients, and - where available - participate in national investor compensation schemes. Mintos, Nectaro, Twino, Indemo and Debitum all hold MiFID II licences. Mintos and Nectaro are registered with the Latvian Investor Compensation Scheme, which covers up to EUR 20,000 per investor if the firm fails and cannot return client financial instruments or cash. Indemo structures its investments as securities held at Nasdaq CSD (Central Securities Depository), adding custodial segregation beyond standard client-money accounts. Debitum holds MiFID II authorisation but investor sentiment deteriorated following ownership questions and frequent CEO changes flagged in an independent 2026 investigation.

The EUR 20,000 compensation ceiling applies only to platform insolvency or misconduct that causes client assets to disappear. If you hold EUR 30,000 in loans on Mintos and Mintos goes bankrupt tomorrow, segregation should return all EUR 30,000 to you. If segregation fails and only EUR 15,000 can be recovered, the compensation scheme tops you up to EUR 20,000 total, leaving a EUR 10,000 loss. If all EUR 30,000 in loans is returned but the borrowers then default and you lose EUR 30,000 to credit losses, the compensation scheme pays nothing - you bear the full credit risk.

Unregulated platforms fall outside both frameworks. They may operate under payment-services licences, anti-money-laundering supervision or general company law, but they face no investor-protection rules, no mandatory segregation and no compensation scheme. Robocash (unregulated in Croatia), Hive5 (unregulated in Croatia), Scramble (unregulated in Estonia) and the now-suspended Reinvest24 (unregulated in Estonia) all carried higher platform risk due to the absence of MiFID II or ECSP oversight. Some unregulated platforms have long track records and transparent operations; others operated in grey zones that regulators later flagged. The distinction matters most in stress scenarios, when segregation rules and supervisory intervention determine whether investors recover capital or join bankruptcy creditor queues.

The pre-deposit checklist - ten checks before you fund an account

Every new platform warrants due diligence before the first deposit. The following ten checks separate transparent, durable platforms from risky or opaque operators.

1. Verify the licence in the official public register. ECSP licences appear in the ESMA register at registers.esma.europa.eu. MiFID II investment firms are listed in each national regulator's public register (Latvijas Banka for Latvia, Bank of Lithuania for Lithuania, Central Bank of Ireland for Ireland). A platform claiming regulation without a verifiable register entry should be treated as unregulated.
2. Check for regulator warnings. Search the platform name on the websites of the Estonian Financial Supervision Authority, BaFin (Germany), FMA (Austria), AFM (Netherlands) and your home-country regulator. Public warnings signal that the platform operates outside approved frameworks or has breached rules.
3. Read the investor compensation disclosure. MiFID II platforms must state whether they participate in a compensation scheme and the coverage limit. ECSP platforms should disclose any voluntary insurance or guarantee arrangements. Absence of any protection statement means you bear full platform insolvency risk.
4. Identify loan originators and their ownership. Does the platform list loans from independent third parties or from its own group? Are originator names disclosed? Can you see originator financial statements or default histories? Opacity here signals undisclosed conflicts or weak due diligence.
5. Review historical default and recovery data. Platforms such as Mintos, Maclear and InRento publish detailed performance statistics, including cumulative defaults and recovery rates. Platforms that refuse to disclose default history or claim zero losses on risky asset classes (unsecured consumer lending, property development) are either very young, very conservative, or misrepresenting risk.
6. Understand the buyback mechanism. If the platform advertises a buyback guarantee, who issues it? The platform itself, the originator, a third-party guarantor? What is that entity's capitalisation and credit rating? Buyback is a promise, not insurance; it fails when the promisor fails.
7. Test the secondary market. If the platform offers secondary trading, attempt a small test sale before committing large capital. Check the posted discount and time to sale. A liquid secondary market with tight spreads indicates healthy investor sentiment; wide discounts or no bids signal trouble.
8. Calculate the all-in cost. Add platform fees, withdrawal fees, FX conversion spreads (if investing from a non-euro account) and tax drag. A 14 percent advertised return with 1 percent platform fee, 0.5 percent withdrawal fee and 26 percent income tax in your jurisdiction nets 9.6 percent after costs. Compare that to the risk-free rate (Eurozone government bonds at ~3 percent in 2026) to assess whether the risk premium compensates adequately.
9. Check ownership and management stability. Frequent CEO changes, undisclosed related-party transactions or complex offshore ownership structures raise red flags. Platforms with transparent, stable management and public founders (Maclear's founders are named on the site; InRento's team includes former institutional real-estate professionals) inspire more confidence than those hiding behind nominee directors.
10. Read independent reviews and forum sentiment. Scan Trustpilot, Reddit's r/europeaninvestors, and P2P lending forums for recent investor complaints. A spike in withdrawal delays, unanswered support tickets or undisclosed fee increases signals operational or liquidity stress. No platform is universally loved, but consistent patterns of negative feedback warrant caution.

These ten checks take 30 to 60 minutes per platform. Skipping them to chase a 2-percentage-point yield difference is false economy. Regulatory status, originator transparency and historical performance are the variables that determine whether you retrieve your capital when stress hits.

The verdict framework - safe-as-in-regulated vs safe-as-in-guaranteed

The question "is P2P lending safe" demands a two-part answer. Safe as in operationally regulated, client-money segregated, and supervised by a competent EU authority? Yes, for the subset of platforms holding ECSP or MiFID II licences. Safe as in guaranteed to return advertised yields with zero capital loss? No, never.

P2P lending is a credit instrument. You lend money to borrowers who may default. The platform intermediates the transaction, but it does not remove credit risk. Even the safest, best-regulated platform cannot prevent a Spanish mortgage borrower from losing their job, a Baltic SME from going bankrupt, or a Croatian consumer lender from entering insolvency. Your returns depend on borrower performance, not platform promises.

Regulation reduces platform risk - the risk that the intermediary itself fails, steals funds or operates a Ponzi scheme. ECSP and MiFID II licences mandate segregation, disclosure and ongoing supervision. MiFID II firms offer up to EUR 20,000 investor compensation if the platform fails. That is meaningful protection against operational failure, but it is not deposit insurance. Borrower defaults still cause capital losses, and those losses are never compensated by any EU scheme.

The safest P2P strategy for risk-averse investors combines three elements: exclusive use of ECSP or MiFID II platforms, portfolio diversification across at least five platforms and multiple asset classes, and position sizing that limits P2P exposure to no more than 10-20 percent of total investable assets. That approach treats P2P as a high-yield, illiquid, credit-sensitive satellite allocation, not a core portfolio holding.

Aggressive investors willing to accept higher risk in exchange for higher potential returns may allocate 30-50 percent of capital to P2P, concentrate in top-scoring platforms such as Maclear (9.3/10 score, 14.5-14.9 percent return, Swiss-regulated, zero realised losses to date) or InRento (8.7/10 score, ~11.8 percent return, ECSP-licensed, zero losses in five years), and accept illiquidity in exchange for yield pickup over bonds or dividend stocks. Even then, treating P2P as "safe" in the absolute sense - safe as a savings account or government bond - is a category error that leads to overconcentration and painful surprises when defaults occur.

The honest answer: European P2P lending on well-regulated platforms is safer than it was in 2015, when most platforms operated in legal grey zones with no segregation or disclosure rules. It is far riskier than insured bank deposits, government bonds or diversified equity ETFs. It sits in the middle-risk zone alongside high-yield corporate bonds, emerging-market debt and leveraged real-estate funds. Investors who accept that risk, size positions accordingly, and diversify across platforms and asset classes can earn durable 9-15 percent net returns. Investors who treat P2P as risk-free passive income will eventually learn the difference between advertised yield and realised return, usually at the worst possible time.

What to read next