Most guides to peer-to-peer lending open with the promise of easy double-digit returns. Far fewer point out that the platform itself — not merely the loans listed on it — is where the real risk usually hides. Before a single euro goes anywhere, it is worth understanding what separates a well-run platform from one that is a bad quarter away from trouble.

That distinction has become sharper in recent years. The European Crowdfunding Service Providers Regulation (ECSPR), which became fully applicable across the EU in November 2021, gave the sector something it had never had before: a single EU-wide licence, supervised at the European level, with the European Securities and Markets Authority maintaining a public register of authorised providers. Before that, a platform operating in five countries needed five separate national authorisations — and five different definitions of "adequate investor protection." That was hardly reassuring for anyone trying to compare options across borders.

The contrast was thrown into relief in 2019 and 2020, when the UK property-lending platform Lendy collapsed into administration and several Baltic-based platforms, including Grupeer and Envestio, suspended investor repayments. Those episodes played out under the old patchwork of national regimes, and the absence of standardised, comparable disclosure was a recurring complaint among investors trying to work out what they actually held.

Start with the licence, not the interest rate

It is tempting to sort platforms by advertised yield and stop there. That approach is backwards. The first question worth asking is whether a platform is actually authorised under ECSPR — or operating under an older national regime, or in some regulatory grey zone entirely.

Comparing platforms across the wider European market adds one wrinkle: since Brexit, ECSPR applies within the EU and the EEA, while UK-based platforms answer to the Financial Conduct Authority, which tightened its own regime in 2019 by restricting the marketing of P2P accounts to retail investors who pass an appropriateness assessment. The intent is similar; the details are not. Which regulator a platform answers to is therefore part of the due-diligence picture, not a footnote.

An ECSPR authorisation is not just a formality. Licensed platforms are required to:

• Disclose annual default rates on their lending-based products, covering at least the three preceding years
• Publish an outcome statement within four months of each financial year's end
• Give non-professional investors a mandatory four-day reflection period before they can invest freely
• Provide a detailed key investment information sheet, including a clear warning about potential losses

None of this eliminates credit risk — a licence says nothing about whether the underlying borrowers will repay. Nor does authorisation come with a safety net behind it: crowdfunding investments are not bank deposits, so the EU's deposit guarantee scheme — which protects up to €100,000 per depositor per bank — does not apply, and ECSPR created no compensation fund for platform failures or loan losses. What a licence delivers is enforceable transparency, not protection against loss. For anyone comparing a shortlist of options, resources that track p2p lending platforms in Europe by regulatory status are a reasonable starting point before digging into the specifics of any single site.

Buyback guarantees: useful, but not a safety net

Many platforms offer a buyback guarantee — a promise that if a loan goes delinquent past a certain point, commonly 30 to 60 days, the loan originator repurchases it from investors. It is a popular selling point, and for good reason: it smooths out the experience of holding individual loans that default.

But a buyback guarantee is only as strong as the entity backing it. If the loan originator itself runs into financial trouble — which has happened to a number of originators across the sector over the years — the guarantee becomes a promise nobody can keep. Investors who went through the 2020 suspensions saw this play out in practice: where originators stopped transferring money to platforms, the buyback obligations on paper did not translate into recovered capital. It is a mitigation tool, not an insurance policy. Treating it as risk-free is one of the more common mistakes new investors make.

A few things are worth checking before relying on a platform's buyback terms:

• Whether the guarantee is backed by the platform itself or by individual third-party loan originators
• How long originators have been operating and whether they publish their own financials
• Whether the platform discloses what happens if an originator defaults on its buyback obligation

Diversification still does the heavy lifting

Regulation and buyback terms address platform-level and originator-level risk. They do not address the risk of putting too much capital behind too few loans, too few originators, or a concentration in one country's economy.

Spreading capital across multiple loan originators, geographies and loan types remains one of the more effective — and least glamorous — ways to manage exposure. It will not protect against a platform collapsing outright, but it does reduce the damage from any single originator's problems rippling through a portfolio.

Reading the signs a platform is worth skipping

A handful of patterns tend to show up before a platform runs into serious trouble:

• Opacity around default rates. Licensed platforms are required to disclose this data. If it is buried, outdated or missing entirely, that is worth noting.
• Yields well above the rest of the market with no clear explanation. Consistently outsized returns usually mean higher underlying risk, not a better deal.
• Withdrawal delays that keep getting longer. Liquidity problems on the secondary market are often an early warning sign of deeper issues.
• Vague or shifting ownership structure. Platforms that are hard to trace back to a specific licensed legal entity warrant extra scrutiny.

None of these indicators guarantees a problem on its own. Together, they are worth taking seriously.

Final thoughts

P2P lending in Europe has moved from a patchwork of loosely regulated national markets to something closer to a standardised, supervised asset class — but "regulated" does not mean "risk-free." The platforms worth considering are the ones that make it easy to check their licensing status, publish their default data without being asked, and treat buyback guarantees as one layer of protection rather than the whole strategy. Diversification does the rest. The rulebook itself is not frozen, either: ECSPR obliges the European Commission to review how the framework is working in practice, and ESMA continues to issue guidance on authorisation and disclosure, so the standards investors can demand are still evolving. None of it removes risk entirely, but it turns an opaque bet into a more informed one.