The EU Consumer Credit Directive 2 (CCD2): what it means for BNPL and other consumer credit providers
Taking out a micro-loan, buying a sofa on instalments, or signing up for a “Buy now, Pay later” (BNPL) plan has never been easier for consumers. But with the updated EU Consumer Credit Directive (CCD2), companies in the EU that allow their customers to spread payments over time face a stricter set of rules designed for fairer, safer, and more transparent credit in a digital-first world. Businesses offering credit today have until November 2026 to adapt their processes and stay compliant.
Why CCD2 was needed: closing the gaps in the original directive
The original Consumer Credit Directive (CCD) came into force in 2008. At that time:
- Credit was mostly offered by banks and financial institutions.
- Loans typically meant formal contracts like car loans, credit cards, or overdrafts.
- Smaller loans (below €200) were often outside the rules.
Fast-forward to today:
- BNPL, e-commerce instalments, and micro-credit (below €200) have become mainstream.
- They are embedded directly into retail and online shopping journeys.
- Many non-banks (retailers, fintechs, telecoms, mobility companies) now offer credit-like products.
- Credit securitisation, financing and trading are normal segments of financial markets.
This explosive growth in digital credit introduced risks that were not covered by the old rules.
BNPL providers let shoppers split payments into 3-4 instalments without strict creditworthiness checks or ID proofing. Millions of Europeans used these services for clothes, tickets, and even groceries. Consumers accumulated “hidden” debts across multiple BNPL providers without lenders checking affordability or credit worthiness. Fraudsters exploited weak ID checks to take out credit in someone else’s name, leaving the victims to sort out the mess with lenders. Customers claimed they never understood or agreed to the terms and costs associated with digital credit because clear consent was not well captured.
CCD2 closes those gaps. CCD2 is about creating trust in digital credit- in whatever form it comes.
–"By harmonising consumer credit standards across Europe, CCD2 - combined with AMLR - transforms compliance from a constraint into a strategic enabler of trusted, scalable cross-border growth for BNPL providers."
When does it come into effect?
- CCD2 entered into force in November 2023.
- Member States had until November 2025 to implement it into national law. Several countries have already implemented it.
- Companies will need to comply from November 2026.
That means: businesses offering credit today have less than a year to adapt their processes and stay compliant.
-
CCD2 explicitly brings BNPL and interest-free instalments into scope, including loans below €200.
-
Traditional lenders like retail banks, credit card issuers and consumer finance companies were already covered by CCD, but CCD2 introduces stricter requirements and expanded scope.
-
Including digital-only banks and online lenders
-
Electronics stores, furniture retailers and online shops offering instalment plans directly, partnering with BNPL providers or offering deferred payment options are also in scope.
-
These often have embedded credit and instalment options integrated directly into checkout.
-
Car leasing companies and consumer electronics companies that offer leasing agreements are in scope.
-
Telcos offering smartphones on instalment plans.
How Signicat helps you comply
At Signicat, we make compliance smooth by offering the full solution you’ll need under CCD2:
- Identity proofing as a foundation: Before assessing creditworthiness, your business needs to know who the applicant really is. Signicat provides robust identity verification via local eIDs such as MitID and BankID, ID document checks and EU Digital Identity Wallets (EUDI Wallets) ensuring the credit application is tied to a real, verified person. With Signicat’s broad portfolio, you can tailor the optimal mix of verification methods to each market and customer segment, delivering the best user experience while keeping operational costs low.
- Creditworthiness checks: Automate creditworthiness and affordability checks with access to credit databases and open banking data along with 200 other independent risk and identity data sources. It is seamless, happens in the background and requires no effort from the end consumer.
- Electronic signatures for contracts: Provide Advanced and Qualified Electronic Signatures based on eIDs or ID documents that are legally valid across all of Europe. For multiple credit agreements with a consumer, reusable signatures bring down costs while reducing friction.
- Audit Trails: Store logs and evidence of every step of the process to allow competent authorities to verify that your business has complied with the Directive’s obligations.
- Pan-European coverage: .One integration gives you access to identity and signing solutions in all EU markets
Signicat also offers out-of-the box CCD2 ready flows that are built keeping compliance, user experience and EU expansion in mind.
These methods are future-proof and help meet the requirements of the upcoming Anti-Money Laundering Regulation (AMLR).
With a history of serving the most regulated sectors around the world, Signicat can help you stay ahead of CCD2 while keeping your customer journeys smooth and business profitable.
The time to act is now
The new Consumer Credit Directive means that any company offering consumer credit, no matter how small the amount or whether it’s interest-free, now needs to comply with stricter rules.
Companies that move now will not only stay compliant before the November deadline but also gain a competitive edge by offering secure, seamless, and trusted credit experiences.