Crowdfunding Platform Licensing in the EU: ECSP Regulation Guide

The European Crowdfunding Service Provider (ECSP) Regulation (Regulation (EU) 2020/1503) created the first harmonised regulatory framework for crowdfunding platforms across the European Union. Effective since November 2021, with a transitional period that ended in November 2023, the regulation allows crowdfunding platforms to obtain a single licence and passport their services across all 27 EU member states. This represents a significant shift from the fragmented national regimes that previously governed the sector.

Scope of the ECSP Regulation

The regulation covers crowdfunding services that involve:

• Lending-based crowdfunding: Facilitating the granting of loans by investors to project owners
• Investment-based crowdfunding: Facilitating the subscription or purchase of transferable securities or admitted instruments for crowdfunding purposes

The regulation applies to offers up to EUR 5 million per project owner over a 12-month period. Offers exceeding this threshold fall under the Prospectus Regulation (Regulation (EU) 2017/1129) and require a full prospectus.

What Is Not Covered

• Donation-based crowdfunding: No financial return to supporters — not regulated under ECSP
• Reward-based crowdfunding (e.g., Kickstarter model): Supporters receive products or services, not financial instruments — generally not within scope
• Consumer lending: Loans to consumers (individuals borrowing for personal purposes) are excluded. ECSP covers business lending only
• Real estate crowdfunding: Covered if structured as securities or loans, but direct property ownership structures may fall outside scope depending on the member state

Capital and Prudential Requirements

ECSP-licensed platforms must maintain prudential safeguards:

• Minimum capital requirement: The higher of EUR 25,000 or one quarter of the fixed overhead requirement for the preceding year (Article 11)
• Insurance policy: As an alternative to own funds, a platform may take out a professional indemnity insurance covering at least EUR 25,000
• Business continuity: Platforms must have arrangements to ensure the continuation or orderly wind-down of services if the platform ceases operations

These capital requirements are deliberately low compared to other financial services licences (MiFID investment firms require EUR 75,000 to EUR 750,000), reflecting the EU's intention to encourage crowdfunding as an alternative finance channel for SMEs.

Application Process

Competent Authority

Applications are submitted to the National Competent Authority (NCA) of the member state where the platform is established. Key NCAs include:

• France: Autorité des Marchés Financiers (AMF)
• Germany: Bundesanstalt für Finanzdienstleistungsaufsicht (BaFin)
• Netherlands: Autoriteit Financiële Markten (AFM)
• Spain: Comisión Nacional del Mercado de Valores (CNMV)
• Italy: CONSOB
• Lithuania: Bank of Lithuania

Required Documentation

The application must include:

• Programme of activities describing the crowdfunding services offered
• Business plan with three-year financial projections
• Description of governance arrangements, internal control, and risk management
• Business continuity plan
• Proof of meeting the prudential safeguards (capital or insurance)
• Description of outsourcing arrangements
• AML/CFT policies and procedures
• Identity and suitability information for shareholders, management body, and key function holders
• Description of the complaints handling procedure

Timeline

The NCA has three months from receipt of a complete application to issue a decision (Article 12(6)). In practice, the process takes 4 to 9 months due to:

• Information requests during the review period (which reset the clock)
• Varying NCA capacity across member states
• Complexity of the applicant's business model

Investor Protection Requirements

The ECSP Regulation introduces significant investor protection measures:

Investor Classification

• Sophisticated investors: Meet at least one of the MiFID II criteria (professional client status, relevant experience, or sufficient financial resources)
• Non-sophisticated investors: All other investors, subject to enhanced protections

Knowledge Test and Loss Simulation

Before non-sophisticated investors can invest, the platform must:

1. Assess the investor's knowledge, experience, and understanding of risks
2. Provide a loss simulation showing the impact of potential defaults on the investment
3. Provide a clear warning if the investment is deemed inappropriate for the investor
4. Obtain explicit acknowledgement of understanding

Investment Limits

Non-sophisticated investors must receive a warning when their total crowdfunding investments exceed 1,000 EUR or 5% of their net worth (whichever is higher) in any 12-month period.

Key Investment Information Sheet (KIIS)

For each crowdfunding offer, the project owner must produce a KIIS containing:

• Description of the project owner and the crowdfunding project
• Main features of the crowdfunding process and conditions for capital raising
• Risk factors associated with the project, the project owner, and the securities or loans
• Fees and charges borne by the investor
• Investment returns projections (where applicable)
• Insolvency arrangements

The KIIS must not exceed six A4 pages and must be drafted in a clear, fair, and non-misleading manner.

Pre-Contractual Reflection Period

Non-sophisticated investors have a four-calendar-day reflection period during which they can revoke their investment offer without penalty.

Cross-Border Passporting

Once licensed, an ECSP can provide services across the EU through a simple notification process:

1. The platform notifies its home NCA of its intention to provide services in another member state
2. The home NCA transmits the notification to the host NCA within 10 working days
3. The platform can begin operating in the host member state immediately after the notification is transmitted

No additional licence, capital, or local substance is required in the host state. This is a significant advantage over the pre-ECSP regime, where each member state required separate licensing.

Practical Considerations

Jurisdiction Selection

Key factors for choosing where to establish:

• Regulatory capacity: France (AMF) and Netherlands (AFM) have the most developed crowdfunding regulatory expertise
• Cost: Lithuania and Latvia offer lower operational costs
• Banking access: Platforms need payment accounts to handle investor funds. Countries with strong fintech banking (Netherlands, Lithuania) have an advantage
• Language: The KIIS must be available in the language of each member state where services are offered (or an accepted language)

Payment Handling

ECSP platforms typically use one of three models for handling investor funds:

1. Own payment account: The platform holds funds in a segregated client account (requires additional PSD2 compliance)
2. Third-party payment institution: Partner with a licensed PI or EMI to handle fund flows
3. Direct transfer: Investors transfer funds directly to the project owner (no platform intermediation)

Option 2 is the most common, as it avoids the platform needing a separate payment licence.

Secondary Market

The ECSP Regulation allows platforms to operate a bulletin board for investors to advertise their interest in buying or selling crowdfunding instruments. However, this is not a regulated market — there is no obligation to provide liquidity, and the platform must clearly state that it is not operating an exchange.

Key Takeaways

• The ECSP Regulation provides a single EU licence for crowdfunding platforms with cross-border passporting to all 27 member states
• Minimum capital requirement is EUR 25,000 or equivalent insurance, making it one of the most accessible EU financial licences
• The EUR 5 million project cap limits the regulation to SME financing — larger raises require a full Prospectus
• Investor protection requirements include knowledge tests, loss simulations, and a four-day reflection period for non-sophisticated investors
• Application timelines run 4 to 9 months depending on the NCA and business model complexity
• France, Netherlands, and Lithuania are the most popular jurisdictions for ECSP licensing due to regulatory expertise and operational cost advantages