Buy-Now-Pay-Later Fintech Riverty Secures EU CRR Banking Licence from ECB and Luxembourg Regulator After 10-Month Process
Riverty, a buy-now-pay-later (BNPL — a short-term consumer credit product allowing purchases to be paid in instalments) fintech, has finalised a 10-month regulatory process to secure an EU CRR banking licence (a banking authorisation under the EU Capital Requirements Regulation, the framework governing capital adequacy and licensing for EU credit institutions) from the European Central Bank (ECB) and Luxembourg's national financial regulator, CSSF (Commission de Surveillance du Secteur Financier). As part of this process, Riverty is setting up a new banking entity in Luxembourg. The CSSF acts as the primary national competent authority, with the ECB exercising supervisory oversight under the Single Supervisory Mechanism (SSM — the EU framework under which the ECB directly supervises significant banks and oversees national supervision of less significant institutions). A full CRR banking licence is a materially more demanding authorisation than a standard payment institution or e-money licence. It requires demonstrating adequate own funds, a qualifying management body, robust governance frameworks, and compliance with ongoing prudential requirements including capital and liquidity buffers. For a BNPL provider, obtaining full bank status opens the ability to take deposits and offer a wider range of regulated credit products across the EU single market under passporting rights. The move reflects a regulatory maturation trend among BNPL firms: as EU consumer credit rules tighten across member states, full banking authorisation offers both a more durable licence and a competitive signal of institutional credibility.
Why this matters
Securing a full EU banking licence from the ECB and CSSF is one of the most demanding regulatory processes available in EU financial services, typically requiring extensive engagement across prudential requirements, governance documentation, and recovery planning. This creates sustained demand for financial regulation lawyers advising on licence applications, capital requirements structuring, and ongoing compliance frameworks. The Luxembourg entity structure — a common choice for EU financial groups seeking passporting access — also activates corporate and fund structuring work. The 'why now' driver is the tightening of EU consumer credit regulation, which is pushing BNPL providers either toward full licensing or out of certain market segments. No external law firms are named in the source.
On the Ground
A trainee on a bank licensing matter would assist with FCA/PRA application form preparation and coordination — or here, the CSSF equivalent — compile regulatory notification drafts, and maintain a compliance gap analysis memo tracking conditions imposed at each stage of the authorisation process.
Interview prep
Soundbite
BNPL firms seeking full bank licences generate some of the most complex regulatory advisory mandates in EU financial services.
Question you might get
“What are the key differences between a payment institution licence and a full CRR banking licence under EU law, and why would a BNPL company choose to bear the cost and complexity of obtaining the latter?”
Full answer
Riverty has completed a 10-month process to obtain an EU CRR banking licence from the ECB and Luxembourg's CSSF, establishing a new banking entity in Luxembourg. The significance for banking lawyers is that a full CRR licence is vastly more demanding than the lighter-touch e-money or payment institution authorisations that most BNPL fintechs initially hold, requiring capital adequacy demonstrations, governance frameworks, and recovery planning. This reflects the broader EU regulatory trajectory: tightening consumer credit rules are forcing BNPL providers to either upgrade their licences or cede market share. The Luxembourg structure is a textbook EU passporting play, allowing Riverty to serve the single market from a single regulated entity. I'd expect more BNPL-to-bank licence conversion mandates over the next 18 months as the regulatory window narrows.
Sources
My notes
saved