P2P Regulation in Europe 2026: ECSP, MiFID II, SRO Explained

What P2P regulation is - and what it is not

Regulation of peer-to-peer lending platforms in Europe establishes legal frameworks under which operators must conduct business, hold capital, disclose risks and report to supervisory authorities. Regulation does not guarantee investment returns, eliminate borrower defaults or insure your capital against credit risk. The most common misunderstanding among retail investors is that a regulated platform equals a safe platform; in reality, regulation determines how a platform must operate and what happens if the platform itself fails, but it has no direct bearing on whether the underlying borrowers repay their loans.

Three primary regulatory regimes govern the 19 platforms scored on P2PScore: the European Crowdfunding Service Provider (ECSP) regulation under EU 2020/1503, the Markets in Financial Instruments Directive II (MiFID II) investment-firm framework, and Swiss Self-Regulatory Organisation (SRO) membership under the Anti-Money Laundering Act. A fourth category - unregulated - encompasses platforms that operate without authorisation in any of these regimes. Each regime imposes different requirements on capital adequacy, conduct of business, client-money handling and complaints; none of them protects investors from the credit risk of borrowers defaulting on loans.

ECSP regulation: what EU 2020/1503 requires and protects

The European Crowdfunding Service Provider regulation, which entered into force on 10 November 2021, created a single EU-wide authorisation for platforms offering crowdfunding services (loan-based or investment-based) up to EUR 5 million per project per 12-month period. Eight platforms on our index hold ECSP licences: InRento holds an ECSP licence from the Bank of Lithuania for buy-to-let real-estate loans, Capitalia operates under ECSP authorisation from Latvijas Banka for Baltic SME and factoring loans, and Crowdpear is authorised by the Bank of Lithuania as an ECSP for property-development loans. Profitus and InSoil are also Lithuanian ECSP platforms, while Lendermarket holds an ECSP licence from the Central Bank of Ireland and EstateGuru operates under Estonian ECSP authorisation (though in workout phase as of early 2026). PeerBerry's ECSP application in Croatia remains pending as of January 2026.

ECSP authorisation requires the platform to hold initial capital of at least EUR 25,000 (or higher if the platform also provides additional services) and to maintain professional indemnity insurance or comparable guarantee. Platforms must publish a Key Investment Information Sheet (KIIS) for each project, disclose fees transparently, assess investor knowledge and appropriateness, and implement complaints procedures. ECSP platforms benefit from a passporting right: once authorised in one member state, they may offer services across the entire European Union by notifying the host-state regulator, without needing separate licences in each jurisdiction.

What ECSP regulation does not provide: investor compensation funds. If a borrower defaults on a loan you funded through an ECSP platform, EU 2020/1503 offers no statutory reimbursement. If the platform itself becomes insolvent and client funds are misappropriated, ECSP regulation does not mandate a compensation scheme equivalent to bank deposit insurance or MiFID II investor compensation. The regulation governs the platform's conduct; it does not insure the underlying credit risk. InRento has recorded zero capital losses across 109 completed projects since 2020, but that track record reflects credit selection and collateral enforcement, not regulatory protection.

MiFID II investment firms: EUR 20,000 compensation and its limits

Four platforms on our index operate as MiFID II investment firms rather than ECSP platforms: Mintos holds a MiFID II licence from Latvijas Banka and offers up to EUR 20,000 investor compensation on eligible claims, as does Nectaro, also regulated by Latvijas Banka as a MiFID II investment firm since 2016. Twino converted from an unregulated consumer-loan platform to a MiFID II firm under Latvian supervision in 2021, and Debitum operates under MiFID II authorisation from Latvijas Banka for SME loan notes and invoice discounting. In Lithuania, Indemo structures its Spanish mortgage investments as MiFID II-compliant notes with Nasdaq CSD custody.

MiFID II imposes stricter requirements than ECSP: investment firms must hold higher regulatory capital (EUR 50,000 initial capital for reception and transmission of orders, EUR 125,000 for portfolio management, EUR 730,000 for dealing on own account), implement robust conduct-of-business and client-classification procedures, report transactions to regulators and maintain segregated client accounts. The most tangible investor benefit is access to national investor-compensation schemes: in Latvia, the Investor Protection Fund administered by Latvijas Banka covers up to EUR 20,000 per investor per firm in the event of the platform's insolvency or inability to return segregated client funds. Lithuania's investor compensation scheme offers an identical EUR 20,000 ceiling.

The critical limitation: investor compensation never covers borrower defaults. If you invest EUR 10,000 in loan notes on Mintos and the underlying borrowers default, leaving you with a 60% recovery rate and a EUR 4,000 loss, the Latvian Investor Protection Fund does not reimburse that loss. Compensation applies only if Mintos becomes insolvent and cannot return the segregated cash or notes you hold in custody. The EUR 20,000 ceiling is per investor per firm; if you hold accounts at both Mintos and Nectaro and both firms fail, you may claim up to EUR 20,000 from each. MiFID II's real value lies in operational conduct standards and the backstop for platform-insolvency scenarios, not in credit-risk mitigation.

Swiss SRO membership: AML supervision without investor compensation

Maclear, headquartered in Zurich, operates under Swiss Self-Regulatory Organisation membership via PolyReg, an SRO recognised by the Swiss Financial Market Supervisory Authority (FINMA). SRO membership is mandatory in Switzerland for financial intermediaries subject to the Anti-Money Laundering Act (AMLA); it imposes obligations for client due diligence, transaction monitoring, suspicious-activity reporting and record-keeping, but it is not a securities licence, banking licence or investment-firm authorisation.

Maclear's SRO status means it must comply with Swiss AML standards and is supervised by PolyReg for those purposes. FINMA oversees the SROs themselves but does not directly supervise individual SRO members unless they fall under additional licensing categories (banks, insurance, collective investment schemes). Maclear does not hold client money; loan contracts on the platform are direct agreements between the investor (lender) and the borrower, with Maclear acting as intermediary and servicer. This structure means there is no segregated client-money pool for FINMA or an SRO to safeguard in the event of Maclear's insolvency.

Switzerland does not operate a statutory investor-compensation scheme equivalent to the EUR 20,000 MiFID II funds in Latvia and Lithuania. Swiss banks benefit from depositor protection up to CHF 100,000 under esisuisse, but that scheme does not extend to crowdlending platforms, SRO members or non-bank financial intermediaries. If Maclear were to become insolvent, investors would be unsecured creditors in bankruptcy proceedings for any fees or servicing obligations owed by the platform, but the underlying loan contracts would remain direct obligations of the borrowers. In practice, Maclear covered its single recorded default in full in May 2024, demonstrating operational resilience rather than regulatory guarantee.

The absence of investor compensation does not mean Swiss regulation is weaker than ECSP in all respects: Swiss AML standards are among the strictest globally, and PolyReg membership requires annual compliance audits and ongoing monitoring. However, for the purposes of investor protection against platform failure, SRO status offers less formal recourse than MiFID II, and zero recourse compared to bank deposit insurance. Regulation weighs 25% in our scoring methodology; Maclear's score of 9.3 reflects top-tier performance on the other five dimensions (defaults, originator structure, track record, net yield, UX) despite the regulatory gap.

Unregulated platforms: operating without EU or Swiss authorisation

Five platforms on our index operate without ECSP, MiFID II or Swiss SRO status: Robocash, based in Zagreb, has operated since 2017 as an unregulated consumer-loan platform with consistent buyback but zero formal licence; Hive5, also Croatian, structures short-term consumer and SME loans without regulatory oversight; Scramble in Tallinn offers DTC-brand working-capital advances under a claims-assignment model without Estonian or EU authorisation; Loanch, Hungarian-based, channels investments to Southeast Asian consumer loans without EU or local financial-services licensing; and Reinvest24 operated Estonian real-estate equity SPVs unregulated until withdrawals were suspended in February 2024 following multiple Estonian and Finnish regulator alerts.

Operating without authorisation is not illegal per se in all jurisdictions - some structures fall below regulatory thresholds, others exploit gaps in national laws - but it means the platform faces no conduct requirements, no capital adequacy rules, no mandatory complaints procedures and no investor compensation whatsoever. If an unregulated platform becomes insolvent, investors have no formal recourse beyond civil litigation and insolvency proceedings. Robocash's 8-year track record of honouring every buyback claim demonstrates that unregulated status does not automatically imply unreliability, but it does mean investors bear 100% of both credit risk and platform risk with zero statutory backstop.

Regulatory status accounts for 25% of our overall score; unregulated platforms receive zero points on that dimension, which is why Robocash scores 7.4 overall despite strong performance on defaults and track record. Our guide to spotting risky P2P platforms explains the additional due diligence required when investing through unregulated operators.

Regulatory status of all 19 platforms: complete mapping

The table below maps every platform on the P2PScore index to its regulatory regime as of January 2026. MiFID II firms are marked with their national investor-compensation ceiling; ECSP platforms are noted with the issuing regulator; Swiss SRO and unregulated platforms are identified clearly.

Can a platform lose its licence?

Yes. Regulators have the power to suspend or revoke ECSP or MiFID II authorisations if a platform breaches capital requirements, fails conduct-of-business obligations, mishandles client money or becomes insolvent. The European Securities and Markets Authority (ESMA) maintains a public register of withdrawn ECSP authorisations; Latvijas Banka and the Bank of Lithuania publish enforcement actions and licence revocations on their websites. No major European P2P platform has had an ECSP or MiFID II licence formally revoked as of January 2026, but several have faced supervisory warnings.

EstateGuru's ECSP licence remains valid during its workout phase, but the Estonian Financial Supervision and Resolution Authority (EFSA) could intervene if the platform's financial condition deteriorates further or if client-money handling breaches occur. Reinvest24, which operated unregulated, faced formal warnings from both EFSA and the Finnish Financial Supervisory Authority before suspending withdrawals; the absence of a licence meant regulators had no direct enforcement mechanism beyond public alerts. MiFID II firms must submit quarterly financial reports to their national competent authority; failure to maintain minimum capital levels triggers automatic licence suspension.

Passporting: can platforms operate across borders?

ECSP platforms benefit from a passporting right under EU 2020/1503: once authorised in one member state, they may offer crowdfunding services in any other EU member state by notifying the host-state regulator, without obtaining a separate licence. InRento, authorised in Lithuania, accepts investors from Germany, France, Spain and 24 other EU countries under this passport. MiFID II investment firms enjoy similar passporting rights within the European Economic Area for investment services.

Swiss platforms like Maclear do not have EU passporting rights. They operate under Swiss domestic law and accept EU investors on a cross-border basis; EU residents investing in a Swiss platform are not protected by EU investor-compensation schemes or MiFID II conduct rules. The platform must still comply with relevant Swiss regulations and, where it markets actively in an EU state, may need to comply with local marketing and consumer-protection laws, but it does not require host-state authorisation. This is why Maclear can serve investors in Germany, Austria and other EU jurisdictions without holding an ECSP or MiFID II licence.

How to verify a platform's regulatory status

Before investing, verify the platform's claimed licence against official regulator registers. Do not rely solely on badges or claims on the platform's own website. Use these authoritative sources:

• ECSP platforms (EU-wide): European Securities and Markets Authority (ESMA) register at esma.europa.eu under "Registers and Data" - "ECSP Register". Search by platform legal name.
• Latvian MiFID II firms: Latvijas Banka (Bank of Latvia) publishes a register of licensed investment firms at bank.lv/en/supervision under "Supervised Entities" - "Investment Brokerage Firms and Investment Management Companies". Mintos appears as "Mintos Marketplace IBS", Nectaro as "Aventus Group IBS", Twino as "Twino IBS", Debitum as "Debitum Network IBS".
• Lithuanian ECSP and investment firms: Bank of Lithuania register at lb.lt/en/sfi-financial-market-participants. InRento is listed under "Crowdfunding Platform Operators", Crowdpear and Profitus likewise. Indemo appears under investment firms due to its MiFID custody model.
• Irish ECSP platforms: Central Bank of Ireland publishes a register of authorised crowdfunding service providers at centralbank.ie under "Regulation" - "Registers". Lendermarket appears as "LM Finance DAC".
• Estonian ECSP platforms: Estonian Financial Supervision and Resolution Authority (EFSA) at fi.ee/en under "Supervised Entities". EstateGuru is listed; its authorisation remains valid as of January 2026.
• Swiss SRO members: FINMA publishes a list of recognised SROs at finma.ch under "Supervision" - "Self-Regulatory Organisations". PolyReg is accredited; individual SRO members are not publicly listed by FINMA, but platforms typically provide proof of SRO membership on request.

If a platform claims regulation but does not appear in the relevant official register, treat that claim as false until proven otherwise. Unregulated platforms should be labelled clearly as such; if they imply regulatory oversight without holding a licence, that is a red flag for operational transparency.

What to read next