Buy now, pay later (BNPL) has become one of the most powerful tools in the e-commerce conversion toolkit. For millions of European shoppers, splitting a purchase into three or four interest-free instalments is no longer a novelty but an expected part of the checkout experience. But the regulatory ground beneath this payment model is shifting. Directive (EU) 2023/2225, commonly known as CCD2 or the Consumer Credit Directive 2, comes into force on 20 November 2026 and, for the first time, brings most buy now, pay later arrangements squarely within the scope of EU consumer credit law. If you sell online in Europe, this matters not just for your BNPL provider, but for your checkout flow, your marketing copy and your conversion rate.
📋 In this article
The original EU Consumer Credit Directive was written in 2008 — before Klarna, before Scalapay, before the concept of splitting a fashion purchase into three clicks at checkout had entered the mainstream. At that point, consumer credit meant formal bank loans, car finance, and credit cards. Small loans below €200 were routinely excluded from the rules. Non-bank lenders barely featured.
Since then, the consumer credit landscape in Europe has changed beyond recognition. BNPL payments in Europe reached $167 billion in 2024, growing 15.2% year-on-year, with the market projected to reach $269.7 billion by 2029. Roughly 68% of European consumers have used BNPL services, with 40% using them regularly. These products are no longer niche credit instruments, they are core e-commerce infrastructure, embedded directly into checkout flows across fashion, electronics, home goods, and even groceries.
The problem was that much of this credit operated outside the consumer protection framework that applied to traditional lending. Shoppers could accumulate instalment debt across multiple BNPL providers without any single lender running a proper affordability check. Fraudsters could exploit weak identity verification to take out credit in someone else's name. And consumers routinely clicked through payment agreements without understanding the terms, because clear pre-contractual disclosure was not consistently required.
CCD2 closes those gaps. Directive (EU) 2023/2225 was published in the Official Journal of the European Union on 30 October 2023 and applies across all EU member states from 20 November 2026. Member states were required to transpose it into national law by 20 November 2025, with the one-year gap designed to give industry time to update systems and processes.
Under the 2008 Directive, loans below €200, interest-free credit, and short-term deferred payment arrangements were commonly excluded from regulated scope. This is precisely how most BNPL products were structured: interest-free, short-term, and at amounts that deliberately fell under the threshold. CCD2 eliminates these carve-outs. Under the new rules, credit agreements where repayment is deferred — regardless of amount, interest rate, or term — are within scope, as long as they meet the definition of a consumer credit agreement. For practical purposes, this means the vast majority of BNPL products used by European online shoppers will be regulated from November 2026.
It is worth being precise here, because this distinction matters for your operational planning. CCD2 places obligations primarily on credit providers (the BNPL companies themselves) and credit intermediaries (parties who present or facilitate access to credit products). Most online retailers are not direct credit providers but they can be treated as credit intermediaries if they actively promote, present, or channel customers towards specific BNPL options at checkout. This is the category that catches many e-commerce merchants off guard.
If your product pages, checkout flow, or marketing emails actively present BNPL as a payment option with promotional messaging — for example, "Pay in 3 with Klarna" banners or "0% interest, split your payment" callouts — you may be acting as a credit intermediary under CCD2. This means disclosure obligations and advertising rules apply to your communications, not just to your BNPL provider's. Check this classification with your legal counsel before November 2026.
The most significant operational changes under CCD2 fall on BNPL providers, but they directly affect the merchant experience at checkout. Here is what the directive requires, and where you will feel it.
Under CCD2, a documented creditworthiness assessment is required before any covered credit agreement is entered into. For BNPL, this means providers must evaluate a consumer's ability to repay before approving a split-payment at checkout. The assessment must be proportionate to the credit amount, which gives providers some flexibility on methodology for small-value BNPL, but the key word is "documented" — there must be a record that an assessment occurred.
For retailers, the practical consequence is that checkout approval for BNPL may take fractionally longer, or that a higher proportion of customers are declined at the payment step. Both scenarios affect conversion. The extent depends heavily on how each BNPL provider implements their assessment process, and whether they can do so in a way that remains genuinely frictionless.
CCD2 requires that consumers receive standardised pre-contractual information — in the form of a European Consumer Credit Information (SECCI) document or equivalent — before they are bound by a credit agreement. This information must be provided on a "durable medium" and must be given in good time before the consumer signs. At a checkout flow level, this means the point-of-credit disclosure step becomes a formal, mandatory element of the BNPL payment journey, not an optional terms-and-conditions link buried in small print.
Where creditworthiness decisions are made by automated systems (which is essentially every BNPL platform at scale), CCD2 introduces explainability requirements. Consumers must be informed when a decision has been made by an automated process, and providers must be able to provide a human review mechanism. This aligns with GDPR principles already familiar to most European merchants, but CCD2 makes it explicit in the credit context.
| Old position (pre-CCD2) | New position (from 20 Nov 2026) |
|---|---|
| Most BNPL products excluded from EU consumer credit regulation | Most BNPL products covered, regardless of amount or interest rate |
| No mandatory creditworthiness check for BNPL | Documented creditworthiness assessment required before every agreement |
| No standardised pre-contractual disclosure required | SECCI-format disclosure mandatory before consumer is bound |
| Advertising BNPL: no specific APR disclosure rules | All advertising must include prominent APR and representative example |
| No withdrawal right on most BNPL agreements | 14-day right of withdrawal on all covered credit agreements |
| Loans below €200 excluded | No minimum threshold — all consumer credit agreements in scope |
The checkout is where abstract regulation becomes a concrete commercial problem. Most e-commerce merchants have spent years optimising checkout flows to reduce friction, and CCD2 introduces new mandatory steps into the BNPL payment journey. Understanding exactly where the friction appears — and how to manage it — is the practical priority for online retailers between now and November 2026.
Your BNPL provider displays the split-payment option. From November 2026, the presentation itself may need to include a brief disclosure that this is a regulated credit product, depending on how your provider implements CCD2 compliance.
Before the customer commits, the SECCI-format disclosure must be presented on a durable medium. In practice this means a mandatory screen — not a collapsible banner — that the consumer must acknowledge before proceeding.
The BNPL provider runs a documented assessment before approving the agreement. For most platforms this happens in seconds via automated systems, but expect a small increase in decline rates as providers tighten their processes to meet the "documented" requirement.
The consumer must explicitly agree to the credit terms. Pre-ticked boxes or implied consent are no longer acceptable. The agreement step must be a deliberate, recorded action by the customer.
From the moment the agreement is signed, the customer has 14 days to withdraw from the credit agreement without giving a reason. Your fulfilment, dispatch and returns processes need to account for this window.
The honest answer is that CCD2 will add friction to BNPL checkouts. The question is how much. The additional disclosure steps and consent mechanisms will lengthen the BNPL payment journey by at least one or two screen interactions. Providers with well-designed UX will minimise abandonment; others may see meaningful drop-off at the new compliance steps. Smart retailers will monitor BNPL-specific conversion rates closely in the months after November 2026 and will want the order management data to diagnose whether a conversion dip is payment-related or fulfilment-related.
Customer clicks "Pay in 3," gets auto-approved in one step, no disclosure screen, no documented consent. Fast but unregulated. Works great for conversion until the rules change.
Customer clicks "Pay in 3," receives SECCI disclosure on a durable medium, actively consents, gets credit decision with documented assessment, completes purchase. More steps, but compliant, auditable, and defensible.
ShippyPro connects your orders, carriers, and fulfilment workflow so that when checkout behaviour shifts — BNPL adoption, return spikes, new payment timelines — your shipping operations adapt automatically.
This is the area where the most e-commerce merchants will be caught off guard. CCD2 does not only regulate what happens inside the checkout — it regulates how BNPL is advertised at every touchpoint: product pages, category pages, email campaigns, paid social, influencer partnerships, and any other medium where you promote BNPL as a payment method.
Under CCD2, any communication that promotes a BNPL product and includes a specific interest rate, payment amount, or comparable cost figure must also include a standardised representative example containing: the Annual Percentage Rate (APR), the total amount of credit, the total amount payable, and the amount and number of instalments. This must be presented prominently, not in footnotes or tooltip pop-ups.
Equally important: CCD2 expressly prohibits advertising that implies BNPL will improve a consumer's financial position without basis, or that minimises the costs or risks of the product. The common e-commerce pattern of featuring BNPL as a free, effortless way to get something you cannot currently afford is exactly the type of messaging that regulators will scrutinise.
| Marketing touchpoint | What needs to change | Who is responsible |
|---|---|---|
| Product page BNPL widgets | Must include APR and representative example if showing specific amounts | Merchant + BNPL provider |
| Email campaigns featuring BNPL | Representative example required wherever a payment amount is cited | Merchant |
| Paid social ads (Meta, TikTok, etc.) | APR disclosure and example required; "no cost" messaging prohibited | Merchant |
| Influencer and affiliate content | Disclosure rules apply to content produced on a merchant's behalf | Merchant (liable for content they commission) |
| Checkout page BNPL banner | If specific amounts shown, representative example required | Merchant + BNPL provider |
| Homepage "Pay in 3" generic callout (no amounts) | Generic promotion without specific figures may require less disclosure — verify with legal counsel | Merchant |
Create an inventory of every place on your site, in your email flows, and in your paid media where BNPL is mentioned or promoted. For each one, note whether it includes specific payment amounts or rates. Those that do will need updating with compliant APR disclosures before November 2026. Doing this audit now means you have time to renegotiate widget placements with your BNPL provider and brief your creative team, rather than rushing a site-wide update in the weeks before the deadline.
Under CCD2, consumers have the right to withdraw from a covered credit agreement within 14 calendar days of signing, without giving any reason and without penalty. This right already exists for distance selling under the Consumer Rights Directive but CCD2 extends it specifically to credit agreements, creating a scenario where a customer can withdraw from the BNPL agreement independently of whether they keep the goods.
In practice, the interaction between the credit withdrawal right and your fulfilment and returns process creates a potential grey area. If a customer exercises their right to withdraw from the BNPL agreement but does not return the goods, they may still owe the full amount upfront — but this is a matter between the customer and the credit provider, not the merchant. The merchant's risk is more indirect: confusion about the withdrawal right could generate customer service queries, chargebacks, and disputes if customers conflate "withdrawing from the credit agreement" with "returning the order."
The practical recommendation is to align your returns policy language and post-purchase communications to make clear the distinction between a product return (governed by your returns policy) and a credit withdrawal (governed by the BNPL provider's terms). This is especially important if you offer a generous returns window that overlaps with the 14-day credit withdrawal period.
CCD2 is an EU directive, which means it sets minimum standards but gives member states flexibility on how exactly they transpose it into national law. The application deadline of 20 November 2026 is fixed across all member states, but the specific national rules — thresholds, definitions, enforcement powers — will vary. The transposition deadline was 20 November 2025, and most EU member states did not meet it, though the application date remains unchanged.
Germany has been among the more active member states in progressing CCD2 transposition. The Federal Ministry of Justice and Consumer Protection published a draft implementation act in June 2025, followed by a ministerial draft in September 2025, with parliamentary review ongoing through the latter part of 2025. The implementation covers comprehensive amendments to the Civil Code and the German Banking Act. Under the German implementation, BNPL products are fully within scope as soon as a payment obligation arises. Given Germany's already complex compliance environment for online retailers (DSGVO, VerpackG, Impressumspflicht), merchants selling into Germany should treat CCD2 compliance as one layer in a broader German market readiness review rather than a standalone exercise.
Belgium has been preparing amendments to Book VII of its Code of Economic Law, with the implementation package covering creditworthiness data sources, pre-contractual formatting, and BNPL classification thresholds. The Belgian approach requires disclosure in the consumer's language, which has implications for multilingual Belgian-market checkout flows.
France and Italy are both in scope as major e-commerce markets, where Klarna, Scalapay, and Alma are widely used. Merchants operating across multiple EU markets should work with their BNPL providers to confirm which jurisdictional rules apply at the point of sale, particularly for cross-border orders where the consumer and the merchant are in different member states.
Many EU member states missed the November 2025 transposition deadline, and national implementing texts are still being finalised in several markets. However, the application date of 20 November 2026 is fixed and will not move. Do not wait for your specific market's final national law before beginning your compliance review. The Directive itself — Directive (EU) 2023/2225 — is sufficiently detailed to use as your planning baseline today.
With five months until the CCD2 application date, here is a practical checklist for online merchants selling in EU markets.
List every place where BNPL is mentioned, promoted, or facilitated: product pages, checkout, emails, ads, and affiliate content. This is the foundation for every other action item.
Ask specifically: how will their checkout widget change after November 2026? What new disclosure screens will appear? Will API or integration updates be required on your side? Get timelines in writing.
For any marketing material that references specific BNPL amounts or payment structures, add the required representative example and APR disclosure. Brief your design and content teams on the new format requirements.
Add clear language explaining the difference between returning a product and withdrawing from a credit agreement. Update your customer service team's scripts to handle queries on the 14-day credit withdrawal right.
If you actively promote specific BNPL products, this is worth clarifying with counsel now. Being classified as a credit intermediary brings direct obligations under CCD2, not just indirect ones via your BNPL provider.
Measure your current BNPL-specific conversion rate and average order value now, so you have a pre-CCD2 benchmark to compare against after November 2026. This data will tell you whether any post-deadline changes are compliance-driven or seasonal.
It is worth noting that CCD2 also creates a potential competitive advantage for merchants who handle the transition well. Consumers who have been burned by opaque BNPL terms in the past will have more confidence in BNPL products that comply with the new standards. Merchants who communicate proactively — explaining why their checkout has updated, what the new protections mean for the customer, and how the process works — are likely to see less friction than those who simply push the changes live without context.
Managing this kind of post-purchase communication at scale, across carriers, markets, and order types, is exactly where ShippyPro's shipping notification tools can support your team. When order and fulfilment events are automated and visible in one place, it is far easier to build the kind of consistent, well-timed post-purchase messaging that builds customer trust during periods of checkout change. You can also use ShippyPro's tracking features to make the post-purchase experience more transparent — particularly valuable when customers are navigating new BNPL withdrawal windows alongside delivery timelines.
Beyond notifications, ShippyPro's returns management can help you handle the operational complexity that the 14-day withdrawal right may introduce, keeping your returns process clear and manageable whether a customer is returning goods, exercising a credit withdrawal, or both. For merchants managing volume across multiple carriers and EU markets, having a centralised shipping and fulfilment platform means that regulatory shifts at checkout do not cascade into operational chaos in the warehouse.
Connect 190+ carriers, automate label generation, and manage all your orders from one dashboard — across every EU market.
Explore the platform →Manage returns across carriers and markets with automated return label generation. Essential for handling the 14-day BNPL withdrawal window cleanly.
Explore Easy Return →Automate post-purchase communications to keep customers informed at every step — critical for managing BNPL withdrawal period expectations.
Explore Notifications →The official text of Directive (EU) 2023/2225, published in the Official Journal of the European Union on 30 October 2023.
Read the Directive →When checkout behaviour shifts, your fulfilment needs to keep pace. See how ShippyPro's AI automation adapts your shipping rules dynamically.
Explore AI Automation →Guides, tools, and documentation to help you manage multi-carrier shipping across EU and global markets.
Browse Resources →CCD2 is the EU Consumer Credit Directive 2, formally known as Directive (EU) 2023/2225. It was published in the Official Journal of the EU on 30 October 2023 and applies across all EU member states from 20 November 2026. It replaces the original 2008 Consumer Credit Directive and significantly expands the scope of regulated consumer credit to include most buy now, pay later products, small-value credit, and interest-free deferred payment arrangements that were previously excluded.
CCD2 places the primary compliance obligations on credit providers (the BNPL companies) and credit intermediaries. However, online merchants who actively promote or facilitate access to BNPL products — through product page widgets, checkout banners, or marketing campaigns — may be classified as credit intermediaries. If that classification applies, you have direct obligations under the directive, including rules on advertising disclosures. Whether this applies to your business depends on how you present and promote BNPL, and you should seek legal advice to confirm your status.
CCD2 will add at least one or two additional steps to the BNPL payment journey — a mandatory pre-contractual disclosure screen and an explicit consent step. The extent to which this affects conversion depends on how well your BNPL provider implements these requirements. Providers with strong UX teams are designing these flows to minimise drop-off, but some increase in checkout abandonment at the BNPL step is likely in the short term. Benchmarking your current BNPL conversion rate before November 2026 will give you the data to measure the actual impact.
CCD2 gives consumers the right to withdraw from a covered credit agreement within 14 calendar days of signing, without penalty and without needing to give a reason. This is a right over the credit agreement itself, not over the goods purchased. If a customer withdraws from the BNPL agreement, they may still owe the purchase amount under different terms — that is between the customer and the credit provider. For merchants, the risk is customer confusion: shoppers may conflate the credit withdrawal right with your product returns policy. The practical fix is to update your returns policy language and post-purchase email flows to clearly distinguish between the two processes.
Under CCD2, any advertising that includes a specific interest rate, instalment amount, or cost figure for a BNPL product must also display a standardised representative example. This example must include the APR, the total credit amount, the total amount repayable, and the number and value of instalments. Generic BNPL promotion without specific financial figures may require less disclosure — but messaging that implies BNPL improves financial wellbeing without basis, or that minimises the costs or risks of the product, is expressly prohibited. Review all BNPL-related marketing copy with your legal team and your BNPL provider's compliance guidelines before the November 2026 deadline.
ShippyPro helps online retailers stay operationally ready as checkout, payment, and regulatory landscapes shift — with 190+ carrier connections, automated returns, and real-time tracking across all your EU markets.