Payment infrastructure for ECSP platforms

For European crowdfunding platforms

Payment infrastructure for ECSP platforms

Who does what

The regulator wants to know exactly how your investors' money moves and who is accountable for each step. With UrbanPay the split of responsibilities is clear:

• •Payment initiation is provided by an entity authorized by the FCA (UK) and BaFin (Germany), passported across the EEA. Your platform needs no payments authorization of its own.
• •Investor capital never passes through UrbanPay's balance sheet: it goes straight from the investor's bank to the project's destination account, reconciled per investor and per project.
• •Your compliance scope stays on your part: investor communication, suitability, and reporting to the supervisor. Payment authorization and settlement stay with the regulated entity.

The full lifecycle, in a single integration

From investor onboarding to profit distribution, the whole flow lives in one API and one dashboard:

• •Investor onboarding: KYC from €2.50 per verification.
• •SPV or developer verification: KYB from €9.99 per company, with company registry, UBOs, sanctions, and ongoing monitoring.
• •Capital contribution: via A2A from 0.25%, irrevocable and reconciled per project.
• •Investment contract signing: eIDAS, from €1 per signature.
• •Return distribution: API-first to hundreds of investors, with a reconciliation report for your auditor. See investor distributions.

We built it for ourselves first

UrbanPay was born inside Urbanflip, a real estate club-deal platform that lived exactly this problem: raising capital, segregating it per project, and distributing profits with fragmented tools. Read the story.

ECSP compliance obligations: what the regulation actually requires

The table below maps the main obligations of Regulation (EU) 2020/1503 to their operational consequence, and to where the payments layer carries the load.

The pattern across every row: the regulation assigns the platform accountability for flows it is not allowed to execute. The resolution is architectural. The platform keeps what is genuinely its own (investor relationship, suitability, disclosure, supervisor reporting) and places payment execution, custody, and segregation with regulated infrastructure it can evidence but does not operate.

The 2027 deadline: ECSPs become AML obliged entities

Until now, most ECSPs have handled anti-money-laundering duties indirectly, leaning on their payment partners' checks. The EU AML package ends that arrangement. From July 2027, the AMLR names crowdfunding service providers as obliged entities in their own right: the platform itself must perform customer due diligence, identify beneficial owners of corporate investors, monitor transactions, and report suspicious operations to the financial intelligence unit.

For a real estate platform, the arithmetic is concrete. A 2,000,000 euro raise at an average 5,000 euro retail ticket means 400 investors to verify per project, each with an auditable file covering identity, screening, and source of funds. At 30 minutes of manual review per investor, that is 200 hours per raise. Automated KYC and KYB verification integrated with the payment flow reduces it to a per-verification fee and near-zero team hours, with the evidence trail generated as a by-product rather than reconstructed for inspections.

Platforms that build this muscle in 2026 convert a regulatory deadline into a commercial argument: institutional co-investors and project owners increasingly ask about fund segregation and investor verification before they commit.

Build, buy, or partner: how ECSPs solve the payments layer

There are three ways to satisfy Article 10, and they are not equivalent.

Become a payment institution yourself. Full control, and a second licence to win and maintain: separate own-funds requirements, safeguarding audits, and a supervisory relationship with the Banco de España on top of the CNMV. Realistic only for platforms with bank-scale volume ambitions.

Bolt a generic PSP onto the platform. Card-centric processors work for e-commerce, but the economics and mechanics fit crowdfunding poorly: card fees of around 1.2% on 5,000 euro tickets take 60 euros per contribution out of investor net returns, chargebacks reintroduce reversibility exactly where you need finality, and per-project segregation is not their model.

Use crowdfunding-native payment infrastructure. A middleware layer purpose-built for regulated fundraising: A2A payment initiation (account-to-account bank transfers initiated via open banking APIs) from 0.25% per transaction, tiered down with volume, executed through PSD2-authorised providers; segregated escrow accounts per project with conditional release; investor KYC in the same flow; and mass disbursements for returning capital and yield to hundreds of investors in one batch. On the same 2,000,000 euro raise, A2A at 0.25% costs roughly 5,000 euros against 24,000 euros on cards, and reconciliation per investor happens automatically instead of consuming days per closing.

UrbanPay provides that third path for real estate ECSPs, alongside the broader crowdfunding solution for platforms operating outside the ECSP perimeter. Volume pricing is published on the pricing page.

Frequently asked questions

Do I need a payment institution licence to operate an ECSP platform?

No. Regulation (EU) 2020/1503 anticipates exactly this separation: payment services and fund custody are provided by a third party authorised as a payment institution, e-money institution, or credit institution. Your platform runs its ECSP licence; the payments layer is executed through regulated payment partners.

What is the difference between an ECSP and a PFP?

PFP (plataforma de financiación participativa) was the Spanish national category under the 2015 law. The ECSP regulation replaced national regimes across the EU; Spanish PFPs migrated to ECSP authorisation under the Ley Crea y Crece, supervised by the CNMV, and gained EU-wide passporting in the process.

How are investor funds protected before a round closes?

Contributions sit in a segregated account per project, held by a regulated custodian, separate from platform funds at all times. Funds release to the project owner only when the target is reached and predefined conditions are evidenced. If the round does not close, contributions return automatically to each investor's source account.

What happens during the four-day reflection period?

Non-sophisticated investors can withdraw their offer within four calendar days. Because contributions are held in the segregated account rather than transferred to the project owner, a withdrawal is a documented reversal, not a clawback.

Does the 5 million euro limit apply per project or per platform?

Per project owner, calculated over a rolling 12-month period across all offers by that owner in the EU. The platform itself has no aggregate ceiling.

What changes for ECSPs with the EU AML package?

From July 2027, crowdfunding service providers are obliged entities under Regulation (EU) 2024/1624: the platform itself must run customer due diligence, beneficial-owner verification, and transaction monitoring, with its own reporting duties. Payment and verification data need to live in one auditable trail per investor.

Which payment methods can investors use to contribute?

A2A bank payments initiated via open banking (from 0.25% per transaction, tiered down with volume, instant and irrevocable), conventional bank transfers, and cards where the platform chooses to accept the higher cost. All methods settle into the same segregated project account, reconciled per investor.