Buy now, pay later stops being a payments product in the European Union on November 20, 2026, and becomes regulated consumer credit. On that date Directive (EU) 2023/2225, the second Consumer Credit Directive known across the industry as CCD2, starts to apply in every member state and repeals the 2008 regime that let interest-free instalments sit outside credit law for almost two decades.
The directive was adopted on October 18, 2023 and entered into force a month later. Member states were given until November 20, 2025 to write it into national law and a further twelve months before the rules bite. That second deadline is now six weeks away.
The transposition half of that timetable failed. The European Commission opened infringement procedures on January 30, 2026 by sending letters of formal notice to 23 of the 27 member states for failing to communicate complete transposition, according to the Commission’s January infringements package. Only Denmark, Italy, Hungary and Slovakia escaped the list.
Six months later the picture had improved but not resolved. Eurofinas, the European federation of consumer credit providers, reported on July 17, 2026 that roughly one third of member states had adopted or substantially completed their national legislation, while the majority had “yet to finalise this process, or start it in earnest.” The application date did not move.
In short
- November 20, 2026 is the date CCD2 applies in every member state. It is fixed in the directive and is not tied to whether a country finished transposing on time.
- Third-party BNPL is in scope. The old carve-out for interest-free credit repayable within three months with insignificant charges is gone. If a provider such as Klarna, PayPal, Riverty or RatePay sits between the shopper and the seller, the full credit regime applies.
- A narrow seller-funded exemption survives at 50 days from delivery, cut to 14 days for certain large online sellers, and only where there is no interest, no charges beyond limited late fees, and no third party offering or buying the credit.
- Checkout design becomes a compliance surface. Pre-ticked add-ons are banned, credit cannot be the visually favoured option, and declined shoppers must be offered an alternative way to pay.
- The national patchwork is the real risk. Eurofinas counts more than 20 separate areas where CCD2 leaves member states a policy choice, and several markets including the Netherlands had not finished legislating as of late September 2026.
What actually changes on November 20
CCD2 does two things at once. It widens the perimeter of what counts as consumer credit, and it raises the conduct standard inside that perimeter. Both land on the same day.
On scope, the directive keeps only an upper limit and lifts it to EUR 100,000 from the EUR 75,000 ceiling in the 2008 text. The lower threshold of EUR 200, below which the old directive simply did not apply, is removed. A EUR 45 instalment plan on a pair of trainers is now a credit agreement.
On conduct, the obligations that previously attached only to personal loans and credit cards attach to instalment checkout. That means pre-contractual disclosure on a standardised form, a documented creditworthiness assessment, a 14-day right of withdrawal, forbearance duties when a consumer falls behind, and advertising rules with a standardised information block and a borrowing warning.
The practical consequence is that a product designed to remove friction from checkout now has friction written into law. Providers have spent 2026 rebuilding consent flows, disclosure screens and decisioning stacks against national texts that in several markets were not final.
The timing is also unhelpful. November 20, 2026 is a Friday, exactly one week before Black Friday on November 27, so the first full test of the new flows arrives in the highest-volume fortnight of the year rather than in a quiet January. Retailers who wanted a soft launch do not get one.
Why BNPL lost its exemption
The 2008 directive excluded credit that was interest-free and repayable within three months where the charges were insignificant. That sentence was the legal foundation of the European BNPL industry. CCD2 dismantles it in three steps.
The three-month carve-out is gone
The exemption no longer tolerates “insignificant charges.” A deferred payment must be free of charge, with the single exception of limited late-payment fees set under national law. Any fee charged to the consumer for using the instalment option pulls the arrangement into scope.
That matters because several BNPL products in continental Europe carry a small service or administration fee on the longer plans. Those plans are credit agreements from November 20 regardless of how they are labelled at checkout.
The 50-day and 14-day test, and who counts as large
What survives is narrower and seller-funded. Under CCD2, a deferred payment stays outside the directive only where the supplier of the goods or the provider of the services gives the consumer time to pay, free of interest and without any other charges except limited late-payment fees, there is no third party offering or purchasing the credit, and the price is paid in full within 50 days of delivery.
For certain large online suppliers with access to a large customer base, the directive restricts that window to 14 days from delivery. The drafting is aimed squarely at marketplace-scale invoice payment, where a dominant seller can fund deferral at a scale that functions like a consumer lending book.
This is where the directive hands the pen to member states, and where the divergence begins. Sweden has drawn the line at the small and medium enterprise boundary: outside the SME category, the repayment window for exempt invoice credits drops to 14 days. Germany keeps a merchant’s own Rechnungskauf exempt within limits while placing third-party financing firmly in scope.
A pan-European retailer therefore has to classify itself market by market, not once. The same invoice product can be exempt in one member state and a regulated credit agreement in the next, on identical commercial terms.
Where transposition actually stands
The gap between the legal deadline and the operational reality is the story for anyone selling across borders. The table below sets out the position reported as of late September 2026.
| Market | Status | Applies from | Notable national choice |
|---|---|---|---|
| Sweden | Act in force (Konsumentkreditlag 2026:1011, enacted June 4, 2026) | Nov 20, 2026 | 50-day and 14-day exemption; Finansinspektionen authorisation |
| Denmark | Adopted | Nov 20, 2026 | Seller’s own interest-free terms cut from 90 days to 50; Finanstilsynet approval |
| Finland | Adopted | Nov 20, 2026 | Interest-free deferrals reclassified as consumer credit |
| Germany | Passed by Bundestag and Bundesrat | Nov 20, 2026 | Merchant’s own Rechnungskauf exempt within limits; third-party financing in scope |
| Austria | Passed by Nationalrat | Nov 20, 2026 | 2010 act rewritten; EUR 200 threshold removed |
| Belgium | Act adopted by parliament July 9, 2026 | Nov 20, 2026 | Amended agreement templates due to FPS Economy by Nov 20, 2026 |
| Netherlands | Draft in Tweede Kamer committee | Not yet set | Possible age limit for BNPL; AFM licensing for most providers |
| Norway | Outside the process | Not applicable | Directive not yet incorporated into the EEA agreement |
Two patterns are worth noting. First, the Nordic markets where BNPL penetration is highest moved earliest, which is consistent with having the most supervisory experience and the most at stake. Second, the laggards are not small: the Netherlands is a top-tier European e-commerce market and still had no fixed application text in committee as of late September.
The four states absent from the January letters of formal notice are also instructive. Denmark, Italy, Hungary and Slovakia were not named, meaning they had communicated complete transposition by then. Denmark used that head start to make a substantive national choice, shortening a seller’s own interest-free terms from 90 days to 50 and routing merchant exemptions through an approval process at Finanstilsynet. Early transposition did not mean a light-touch transposition.
Belgium illustrates how tight the operational runway is. Parliament adopted the transposing act on July 9, 2026, and credit providers must submit amended agreement templates to the FPS Economy for approval by November 20, 2026. That is a four-month window to redraft, file and clear every template.
What merchants must change at checkout
CCD2 reaches past the credit provider and into the retailer’s own interface. Three changes have direct conversion consequences, which is why they are being treated as a commercial project rather than a legal one. Merchants who have already worked through the in-store pay later flow will recognise most of the mechanics, because the disclosure logic is similar.
No pre-ticked options and no favoured credit
Add-ons such as payment protection or insurance cannot be pre-ticked, and consent to credit cannot be inferred from a preselected option. Nor can a credit option be visually or structurally favoured over a non-credit option. Default-selected instalment plans, larger buttons and preferential placement for the pay-later tile all become exposure.
This is the single most expensive change for high-BNPL merchants, because default selection is a well-documented driver of instalment take-up. Removing it mechanically reduces the share of baskets that route through credit.
Where an application is declined, the consumer has to be offered an alternative payment method. In practice that means the checkout cannot dead-end on a credit refusal, and the fallback has to be presented without the shopper restarting the order.
Retailers that treat a decline as an abandoned session today will see that abandonment converted into a design requirement. The engineering is modest. The merchandising decision about which fallback to show is not.
Advertising carries a standardised block
Credit advertising must include standardised information and a borrowing warning. That applies to the on-site promotion of instalments, not only to paid media, so category pages and product detail pages that promote a pay-later price per month fall inside the rule.
Retailers running a “from EUR 12 per month” price treatment on listing pages should assume it needs the standardised block or needs to come off the template. The cost comparison with card and wallet acceptance is worth rerunning at the same time, because the economics that justified promoting instalments may not survive the new presentation constraints. Our breakdown of BNPL merchant fees against card and wallet costs sets out the baseline.
What the new disclosure pack requires
CCD2 does not only add documents. It rewrites the format of the documents, on the assumption that the consumer is reading them on a phone at the point of purchase rather than at a bank desk.
The Standard European Consumer Credit Information form, the pre-contractual disclosure that has existed since 2008, is condensed to a single page and designed for readability on a mobile device, so that consumers can see all the essential information at a glance. The directive also provides for a shorter overview document to sit alongside it.
The redesign is a response to a specific failure. The 2008 form grew into a multi-page document that was technically compliant and functionally unread, which is a poor fit for a credit decision taken in seconds inside a checkout sheet.
For merchants the consequence is layout, not legal text. The form has to be surfaced before the agreement is concluded, inside a flow that may be a modal or an embedded iframe controlled by the provider, and it has to survive on a narrow viewport without the shopper scrolling past it.
Several member states require the paperwork itself to be approved. Belgium is the clearest case: credit providers must submit amended credit agreement templates to the FPS Economy for approval by November 20, 2026, and the act applies to agreements where the credit application is made on or after that date.
That is a sequencing problem rather than a drafting one. A template cannot be finalised until the national text is final, and in markets that legislated late there is limited calendar between the two.
Where a consumer falls into arrears, CCD2 imposes forbearance duties before enforcement. Providers have to offer reasonable accommodation rather than moving straight to default charges and collections, and the directive frames the whole creditworthiness regime around preventing over-indebtedness.
For BNPL this is a structural change. Late-payment fees have been a meaningful revenue line for some providers, and the exempt seller-funded deferral itself is defined by reference to limited late-payment charges set under national law. Both the fee level and the escalation path now have statutory limits around them.
Credit register reporting is a further national variable. Whether, when and at what threshold a short instalment plan is reported to a national credit bureau is left to member states, which means the same purchase can leave a credit footprint in one market and none in another. For shoppers who use instalments habitually, that difference compounds.
What providers must do
For the providers themselves the directive is a licensing and decisioning event, and the two parts run on different clocks.
Authorisation and supervision
Both creditors and credit intermediaries face an admission process and registration with a competent authority. Member states may exempt smaller firms acting in an ancillary capacity where credit is provided free of interest with only limited charges, which is the route most retailers themselves will take.
Sweden shows how the timing works in practice. Larger providers, broadly those above roughly 250 employees and either EUR 50 million of turnover or EUR 43 million of balance sheet, come under direct Finansinspektionen supervision. Existing providers have until November 20, 2027 to submit licence applications, but any new entrant launching after November 20, 2026 must be authorised before offering credit. Reported penalties run up to SEK 10 million (about USD 1.0 million at about SEK 10.0 per USD on October 8, 2026) or 10% of annual turnover.
That split timetable is important and widely misread. Conduct rules apply from November 20, 2026. Licensing for incumbents can lag by a year in markets that used the transitional option. A provider can be fully in scope for disclosure and creditworthiness duties while its authorisation file is still open.
Creditworthiness assessment and automated decisions
CCD2 requires a thorough assessment of the consumer’s creditworthiness before the agreement is concluded, framed around preventing irresponsible lending and over-indebtedness. For a product that competes on approving a basket in under a second, that is a material constraint.
Two limits bite hardest. Data retrieved from social networks may not be used in the assessment. And where the decision involves automated processing, the consumer gains a right to human intervention, to an explanation of the assessment, and to request a review.
Building a human-review path into a fully automated, sub-second approval flow is the heaviest engineering lift in the directive. It also creates an operational cost that scales with volume rather than with revenue, which is a different unit economic than most BNPL books were underwritten on. The downstream handling of problems changes too, and the existing rules on BNPL refunds and disputes now sit alongside statutory forbearance duties.
How the EU regime compares with the UK
The UK moved on BNPL separately and earlier, through the Financial Conduct Authority rather than through an EU directive. The comparison matters for any retailer selling into both, because the two regimes are converging on similar outcomes by different routes.
| Dimension | EU (CCD2) | UK (FCA regime) |
|---|---|---|
| Legal instrument | Directive (EU) 2023/2225, transposed into 27 national laws | Domestic regulation under the FCA perimeter |
| Uniformity | More than 20 areas of national discretion | Single national rulebook |
| Scope trigger | Third-party credit, or seller credit beyond 50 days (14 for large online sellers) | Regulated agreements brought inside the FCA perimeter |
| Upper scope limit | EUR 100,000 | Set by domestic rules, not an EU ceiling |
| Affordability | Mandatory creditworthiness assessment, no social-network data | Affordability checks under FCA conduct rules |
| Withdrawal right | 14 days, harmonised | Cancellation rights under domestic rules |
| Supervisor | National competent authority per market | FCA |
The structural difference is uniformity, not stringency. A UK provider implements one rulebook. An EU provider implements a common floor plus 27 variations, and the variations sit in exactly the places that touch the checkout: the length of the seller exemption, who counts as large, what the credit register requires, and whether an age limit applies. The British experience is instructive on volumes, and our earlier analysis of the FCA bringing BNPL into regulation covers how quickly checkout behaviour responded.
What this does to conversion and basket size
The commercial question is simple to state and hard to answer: how much instalment volume does the EU lose on November 20?
The base is large. Industry research put the European BNPL market on track to grow about 19.5% in 2026 to roughly USD 217.7 billion, with Germany alone at about USD 83.46 billion. Penetration is concentrated: Sweden reportedly runs above 23% to 24% of e-commerce transactions through BNPL, and Klarna is estimated to have around 100 million users globally. Those are vendor and research-house estimates rather than audited figures, and should be read as orders of magnitude.
Three mechanisms pull volume down. Removing default selection reduces take-up directly. Mandatory creditworthiness assessment introduces declines where there were none. Disclosure screens add steps to a flow whose entire value proposition was the absence of steps.
There is a cost line that is easy to miss. The merchant, not only the provider, absorbs engineering and legal spend to rebuild checkout, re-template advertising on listing pages, and classify itself against each national definition of a large online seller. For a retailer selling into eight or ten member states, that is a per-market exercise with no single answer, and it competes for the same engineering calendar as peak-season readiness.
One mechanism pulls the other way. Regulatory clarity is what large retailers and banks have said they were waiting for, and a licensed, supervised BNPL category is easier for a risk committee to approve than an unregulated one. That argues for consolidation toward the providers that can carry the compliance cost, a dynamic we flagged when looking at European BNPL consolidation and its regulatory deadlines.
The honest answer is that nobody has a clean estimate, because no market has run a post-CCD2 peak season. The first real data point is Black Friday week itself, which opens seven days after the rules apply.
Why a six-week runway on an incomplete patchwork is the actual risk
Eurofinas set out three concerns in July, and all three have aged into the current position.
The first is time. Lenders face what the federation called insufficient legal certainty and limited time to implement significant operational changes. Changes to creditworthiness assessment and customer journeys are not configuration work.
The second is uncertainty in specific markets, where lenders “must act without knowing the final rules.” A provider operating in the Netherlands has had to build to a draft, with a possible age limit still live in committee.
The third is divergence. More than 20 areas of national policy choice means a provider cannot ship one European implementation. It ships a core plus per-market branches, and each branch needs its own testing and its own legal sign-off.
The divergence problem is sharper than a compliance checklist suggests, because the discretionary areas are not peripheral. They include the length of the seller-funded exemption, the definition of a large online seller, credit register reporting thresholds, and whether a minimum age applies to instalment credit. Each of those changes the product that a shopper sees, which means the divergence surfaces in the interface rather than staying in the back office.
There is also a quieter asymmetry. The directive’s application date is not contingent on transposition. A consumer in a late market acquires directive-derived rights on November 20 even where the national implementing text is incomplete, which creates a window where the obligation is clearer than the rulebook.
What to watch between now and November 20
Four markers will show whether the date lands cleanly or messily.
- Dutch progress. Whether the Tweede Kamer moves the bill out of committee, and whether the BNPL age limit survives, decides the treatment of a major e-commerce market.
- Commission escalation. Letters of formal notice went out in January. The next step is a reasoned opinion, and the Commission’s monthly infringement packages are the place it would appear.
- Provider terms updates. Klarna and its peers have been reissuing consumer credit agreements ahead of the date, including for recurring and subscription charges. The pace of those notices is a readable proxy for readiness.
- Checkout changes at large retailers. Whether pay-later tiles lose default selection on major European storefronts in the first half of November is the clearest observable signal, and the most direct read on conversion impact.
What will not be visible for some time is the credit performance question. CCD2 is built on the premise that unassessed short-term instalment credit contributed to over-indebtedness, and mandatory affordability checks are the remedy. Testing that premise requires arrears data from cohorts originated after November 20, which realistically means late 2027 before anyone can say whether the regime reduced consumer harm or simply redistributed volume toward the largest licensed providers.
The underlying point is that CCD2 is not a BNPL rule that happens to touch retail. It is a retail checkout rule that happens to be written as credit law, and the compliance burden lands on the merchant interface as much as on the lender’s balance sheet.
Frequently asked questions
Does CCD2 apply even if my country has not transposed it?
The application date of November 20, 2026 is set in the directive and does not shift because a member state missed the November 20, 2025 transposition deadline. In practice, consumers in late markets can rely on directive-derived rights while the national implementing text is still incomplete, and the Commission has opened infringement procedures against the states that did not communicate complete transposition.
Is my own invoice payment option still exempt?
Possibly, but the test is narrow. The deferral must be granted by you as the seller, be free of interest and of any charge other than limited late-payment fees under national law, involve no third party offering or purchasing the credit, and be paid in full within 50 days of delivery. For certain large online sellers that window is cut to 14 days, and national law decides who counts as large.
What happened to the EUR 200 lower threshold?
It is removed. Under the 2008 directive, credit below EUR 200 fell outside the rules entirely. CCD2 keeps only an upper limit, raised to EUR 100,000 from EUR 75,000, so small instalment plans on low-value baskets are now in scope.
Can I still show pay later as the default payment method?
No. Consent to credit cannot be inferred from a preselected option, add-ons such as payment protection cannot be pre-ticked, and a credit option cannot be visually or structurally favoured over a non-credit option. Default-selected instalment plans and preferential placement for the pay-later tile both need to come out of the checkout before November 20.
Do BNPL providers need a licence from November 20, 2026?
Conduct rules apply from that date, but licensing timetables vary. Sweden, for example, gives existing providers until November 20, 2027 to submit applications to Finansinspektionen, while any new entrant launching after November 20, 2026 must be authorised first. The practical result is that a provider can be fully bound by disclosure and creditworthiness duties while its authorisation file is still open.
What changes about credit decisioning?
A thorough creditworthiness assessment becomes mandatory before the agreement is concluded. Data retrieved from social networks cannot be used. Where the decision involves automated processing, the consumer has a right to human intervention, to an explanation of the assessment, and to request a review, which means a fully automated approval flow needs a human-review path behind it.
How much BNPL volume will the rules remove?
There is no reliable estimate yet, because no market has traded a peak season under CCD2. Removing default selection, introducing declines through mandatory affordability checks, and adding disclosure steps all push take-up down, while regulatory clarity may pull larger retailers and banks in. The first usable evidence will come from Black Friday week, which opens seven days after the rules apply on November 20.
Does CCD2 cover subscriptions and recurring charges?
Where credit is used for recurring or subscription charges, the arrangement needs a credit agreement that meets the new requirements. Providers have been reissuing consumer terms directly to shoppers ahead of the date to cover exactly this case, so merchants running subscription billing through a pay-later provider should confirm which entity is reissuing the agreement.
How does this compare with the UK regime?
The outcomes are converging but the structure differs. The UK applies a single national rulebook through the FCA. The EU applies a common floor plus national discretion in more than 20 separate areas, and those areas sit precisely where the checkout is built: the length of the seller exemption, the definition of a large online seller, credit register reporting, and whether an age limit applies.