Crowdfunding Platform Licence Guide for Founders
A clear crowdfunding platform licence guide on regulatory models, capital, investor protection and the structuring choices behind a compliant platform launch.
A clear crowdfunding platform licence guide on regulatory models, capital, investor protection and the structuring choices behind a compliant platform launch.
Crowdfunding has matured from a novelty into a regulated channel through which businesses raise capital and ordinary investors gain access to private markets. With that maturity has come regulation, and anyone planning to operate a platform now sits squarely within financial-services law.
A crowdfunding platform licence is the authorisation that lets you intermediate between those raising money and those providing it. What that licence looks like depends heavily on the model you run and the jurisdiction you choose, and the differences are not cosmetic. They determine your capital, your investor-protection duties and, ultimately, whether you can operate at all.
This guide walks through the main crowdfunding models, the regulatory frameworks that govern them, and the structuring decisions that founders should resolve before building.
The four models, and why the model decides the rules
Regulators do not treat "crowdfunding" as a single activity. They look at what is actually being offered, and the answer dictates the regime.
Investment-based crowdfunding, where backers receive shares or other securities, is treated as the issuance and intermediation of securities. This is the most heavily regulated model and typically requires authorisation to arrange or deal in investments.
Lending-based crowdfunding, often called peer-to-peer lending, connects borrowers with lenders. It usually falls under credit-intermediation or specific P2P rules, with obligations around loan administration, default handling and what happens if the platform itself fails.
Reward-based crowdfunding, where backers receive a product or perk rather than a financial return, is generally outside core financial regulation, though consumer-protection, advertising and payment rules still apply.
Donation-based crowdfunding is the lightest touch of all, but money-laundering and payment obligations do not disappear simply because no return is promised.
The first two carry the real regulatory weight. If your platform touches securities or lending, plan for a substantive licence rather than a registration.
It is also worth recognising that a single platform can straddle more than one model. A property platform might offer equity in one campaign and a loan in another; a business platform might mix rewards with revenue-sharing instruments that look uncomfortably like securities. Where activities overlap, the most demanding applicable regime tends to govern the whole, so map every instrument you intend to offer against the regulatory definitions before you assume the lightest framework applies. We frequently find that a feature added casually for marketing reasons quietly drags an otherwise simple platform into securities territory.
Frameworks: harmonised regions versus single-country regimes
Where you authorise matters as much as how.
Some regions offer harmonised regimes that allow a single authorisation to be used across multiple countries, which is valuable if you intend to serve a broad cross-border investor base. These regimes tend to set common standards on disclosure, investor categorisation and per-campaign limits, and they expect a properly resourced operation behind the licence.
Other jurisdictions run single-country regimes with their own thresholds, marketing rules and reporting. These can be quicker and cheaper to enter and may suit a platform focused on one home market, but passporting your activity elsewhere will require separate analysis.
A common error is assuming a licence in one country automatically permits soliciting investors in another. Cross-border promotion of investments is tightly controlled, and offering campaigns to residents of a country where you are not authorised can constitute an offence regardless of where your servers or company sit. Where you intend to accept investors from multiple countries, geo-blocking, residency verification and clear territorial scoping in your terms are practical necessities rather than optional refinements.
Capital, safeguarding and operational resilience
Regulated platforms must hold regulatory capital, and the amount typically scales with the volume of business you intermediate. Because thresholds vary by jurisdiction and change over time, we plan against the working capital a platform genuinely needs to run, not just the regulatory minimum.
Client-money safeguarding is central. Where you hold investor funds pending a campaign, or collect repayments on a loan, those monies usually must be segregated and protected. Many platforms reduce this burden by routing funds through an authorised payment institution or e-money provider rather than holding client money directly, but the obligation to control and account for the flow remains yours.
Regulators increasingly expect operational resilience and wind-down planning: a credible answer to what happens to live campaigns, outstanding loans and investor records if the platform stops trading. This is not a formality. Demonstrating an orderly wind-down is often a condition of authorisation and a recurring supervisory theme. For lending platforms in particular, supervisors want assurance that loans will continue to be administered and repayments collected for investors even if the operator fails, which usually means a back-up servicing arrangement agreed in advance rather than improvised in a crisis.
Investor protection and disclosure
The justification for crowdfunding regulation is investor protection, and the rules reflect it.
You will typically need to categorise investors, distinguishing retail from sophisticated or professional, and apply appropriate limits or warnings. Many regimes cap how much a retail investor can commit, require risk acknowledgements, and impose appropriateness or suitability checks.
Disclosure obligations govern what issuers must tell investors: a standardised information sheet, clear risk warnings and accurate descriptions of the offer. The platform usually bears responsibility for ensuring this information is present and not misleading, even though the issuer prepares it. Diligence on the businesses you list is therefore both a legal duty and a reputational necessity.
Conflicts of interest also attract scrutiny, particularly around how you select campaigns, whether you invest alongside users and how you are remunerated. Transparent, well-documented policies are expected, and regulators increasingly want to see that diligence and selection decisions are made independently of commercial incentives to list a campaign.
Structuring the business
The platform itself is usually one entity, but a sensible structure often separates the regulated operating company from the holding company that owns the intellectual property and equity. This protects core assets, simplifies future investment and keeps the regulated entity clean for supervisory purposes.
Jurisdiction selection should weigh where your investors and issuers are located, whether you need cross-border reach, the credibility of the regulator with banks and payment partners, and the substance you can realistically maintain. As with most fintech, a licence that payment providers and banks respect is worth far more than the cheapest available registration.
How HPT helps
We help founders identify the correct regulatory model for their platform, select a jurisdiction that matches their markets and growth plans, and design a corporate structure that separates regulated activity from underlying value. We coordinate the authorisation process, advise on safeguarding and wind-down arrangements, and help line up the banking and payment relationships a platform needs to function.
If you are planning a crowdfunding or P2P platform, we would be glad to discuss the most credible and durable route to launch.
The director's note.
Once a quarter. Practical commentary from active mandates — banking, structures, mobility, regulation. No marketing send.
Related articles
Dubai's Rise as a VASP Hub: What VARA Licensing Means for Crypto Businesses
Dubai established the Virtual Assets Regulatory Authority (VARA) in 2022, creating the world's first dedicated virtual-asset regulator at city level. For crypto businesses seeking regulated status, banking access and institutional credibility, VARA has become the leading licensing option globally.
MiCA Regulation: A Practical Crypto Compliance Guide
A plain-English guide to MiCA regulation: CASP authorisation, stablecoin rules, the transition timeline, and what crypto operators must actually do.
VASP Registration vs Full Licence: Which You Need
VASP registration vs a full crypto or financial licence: what each means, when each fits, and the substance and banking risks of getting it wrong.
Want this applied to your matter?
Five days from intake to a written diagnosis on how this topic affects your specific position.