Why marketplaces are subject to specific rules
A marketplace connects buyers with third-party sellers: individuals, artisans, small businesses, or brands. It collects the buyer’s payment and then passes it on to the seller, minus its commission. Routing the money through the platform’s accounts serves three distinct purposes. It protects the buyer, since the money is released only after confirmation or delivery. It gives the seller a single point of contact for payments received, credit memos, and disputes. And it lets the platform take its commission along the way, with no separate billing and no debt recovery to organize. Throughout that time, the platform temporarily holds funds that do not belong to it. Holding those funds brings its business within the scope of payment services, which require a license or an exemption.
- Holding funds: the money passes through an account the platform controls, even if only for a few hours.
- Control over the funds: the platform decides when and how much to pay out (timing, holdbacks, disputes).
- De facto financial intermediation: the buyer’s debt to the seller is discharged as soon as the buyer pays the platform. Regulators treat this as the decisive criterion.
- Insolvency risk: without protection, sellers’ funds would become part of the platform’s estate, available to its creditors.
Three routes to compliance
A platform that wants to collect for its sellers has three options, which differ in how much regulatory responsibility it is willing to take on. It can obtain its own license as a payment institution (PI) or e-money institution (EMI); it can become the agent of a licensed PSP; or it can rely entirely on a PSP for platforms that collects on its behalf. A fourth route exists, the so-called commercial agent exemption (Article 3(b) of PSD2), but its scope has become very narrow. It requires acting on behalf of only one of the two parties, the seller or the buyer, whereas a typical marketplace serves both. Under the restrictive reading imposed by PSD2 and the EBA, a platform generally cannot demonstrate this.
| Criterion | Own license | Agent status | PSP for platforms |
|---|---|---|---|
| Time to implement | 9 to 18 months | 2 to 4 months | a few weeks |
| Upfront cost | high (capital + application + compliance team) | moderate | low (integration costs) |
| Regulatory responsibility | full | borne by the principal, which is fully liable for its agent’s actions (Article 20 of PSD2) | borne by the PSP |
| Holds the funds | yes, with safeguarding | in the principal’s name | never |
| Margin on payment flows | maximum | negotiated | shared with the PSP |
| Best for | very large platforms | growing platforms | the vast majority of cases |
Safeguarding: protecting third-party funds
Safeguarding (also called ring-fencing) is the obligation for a firm to keep the funds it receives from its users separate from its own funds. It is the quid pro quo for being allowed to hold customer money. A payment institution must strictly segregate the money it receives on behalf of its users, however long it holds it. In practice, under Article L. 522-17 of the French Monetary and Financial Code for PIs and Article L. 526-32 for EMIs, marketplace sellers’ funds are deposited in a safeguarding account opened with a credit institution and kept separate from the PSP’s operating accounts.
- Segregated deposit: a dedicated safeguarding account at a bank, no later than the end of the business day after the funds are received.
- Alternative: investment in secure, liquid, low-risk assets, held in separate accounts.
- Another alternative: coverage by an insurance policy or a comparable guarantee from an insurer or a credit institution.
- Daily reconciliation: the PSP must continuously reconcile total customer balances against the safeguarded balance. Any discrepancy is a major compliance incident.
| Case | Safeguards |
|---|---|
| Failure of the PSP (PI/EMI) | ✅ Safeguarded funds returned first, outside the creditors’ estate |
| Failure of the marketplace itself | ✅ The funds sit with the PSP, not on the platform’s balance sheet |
| Failure of the bank holding the safeguarding account | ⚠️ More complex: deposit spreading and specific coverage rules apply |
| Fraud or internal misappropriation at the PSP | ⚠️ Safeguarding reduces the risk but does not eliminate it, which is why the competent regulator supervises the firm (the ACPR in France) |
| Commercial dispute between buyer and seller | ❌ Out of scope: handled by the platform’s policies and consumer protection law |
Seller KYC: onboarding under AML/CFT rules
The PSP that holds the sellers’ accounts is subject to anti-money laundering and counter-terrorist financing (AML/CFT) rules. It must identify and verify every seller before paying out any funds, a check known as seller KYC (or KYB, Know Your Business, for legal entities). How this check is run matters directly to the marketplace, for two very different reasons. A smooth sign-up process is a competitive advantage in recruiting sellers. And sloppy KYC exposes the PSP to penalties, along with the platform whose payments it processes.
- Identity: ID document of the legal representative (for an individual, the seller themselves), verified by a document check or video identification.
- Business existence: Kbis extract (the French certificate of incorporation) or equivalent, articles of association, address.
- Ultimate beneficial owners (UBOs): identifying the individuals who hold more than 25% of the capital or voting rights.
- Payout account: an IBAN in the seller’s name (name/IBAN match, reinforced by Verification of Payee, or VoP, mandatory since October 2025).
- Screening: sanctions and asset-freeze lists, politically exposed persons (PEPs), high-risk countries.
- Ongoing monitoring: watching for unusual flows (amounts inconsistent with the business, triangulation fraud patterns, self-purchasing).
Since 2023, these financial obligations have been joined by a tax obligation: the DAC7 directive requires platforms to collect their sellers’ income data and report it to the tax authorities (see the last section). KYC and DAC7 overlap heavily, since both require the seller’s identity, address, and bank details. A well-designed architecture therefore collects the data once (identity, SIREN/tax ID, address, IBAN) for both regimes, in a single step when the seller signs up.
Splits, commissions, and payouts
A payment split allocates a single payment among several recipients: the sellers (one cart can include several), the platform (its commission), and sometimes third parties (carrier, insurer, franchisor). Technically, the PSP credits payment accounts (often called wallets or balances) opened in each seller’s name. It then executes payouts to their bank accounts at the chosen frequency: instant, daily, weekly, or on delivery under an escrow model.
{
"amount": { "currency": "EUR", "value": 12000 },
"reference": "ORD-2026-84512",
"splits": [
{
"account": "seller_8f3a21",
"amount": { "value": 7200 },
"description": "Seller A - sneakers"
},
{
"account": "seller_c94d07",
"amount": { "value": 3300 },
"description": "Seller B - accessories"
},
{
"account": "platform_fees",
"amount": { "value": 1500 },
"description": "Marketplace commission 12.5%"
}
],
"capture": "on_delivery",
"payout_schedule": "T+2_after_capture"
}- Multi-seller cart: a single debit on the buyer’s side, N credits on the sellers’ side. The split must be accurate to the cent, including refunds.
- Partial refund: claw back the seller’s share and recalculate the commission; some contracts let the platform keep its commission.
- Escrow / delayed capture: funds are released only on delivery or when the cooling-off period expires, standard practice in C2C (clothing, ticketing).
- Variable commission: by category, by seller, by promotional campaign. The split engine must be rules-driven, not hard-coded.
- Negative seller balance: a refund issued after payout creates a receivable from the seller, to be recovered from future sales.
Providers, DAC7, and trends
| Company | License type | Positioning | Example clients |
|---|---|---|---|
| Mangopay | EMI licensed in Luxembourg (CSSF) | The long-standing specialist in marketplaces and white-label wallets, with a strong presence in European C2C | Vinted, Chrono24, Wallapop |
| Lemonway | PI licensed by the ACPR | B2B marketplaces, crowdfunding, and regulated platforms; several hundred client platforms | French crowdfunding platforms |
| Stripe Connect | EMI licensed in Ireland | The most integrated offering for SaaS platforms and the on-demand economy, with highly automated seller onboarding | SaaS platforms, gig economy |
| Adyen for Platforms | Banking license (DNB, Netherlands) | Large international platforms, integrated acquiring, omnichannel | major retail and mobility platforms |
| PayPal Commerce Platform | Banking license (Luxembourg) | The reach of PayPal’s buyer network, eBay heritage | mid-market marketplaces |
DAC7 in practice. Every platform (marketplaces for goods, services, property rentals, or vehicle rentals) must report its sellers’ income to the tax authorities each year, by January 31. The report includes each seller’s identity, tax ID, address, and IBAN. A two-part threshold excludes occasional sellers of goods: fewer than 30 sales and €2,000 or less in the year. The data is then exchanged automatically among EU tax authorities. The marketplace must block any seller who refuses to provide tax information, which ties tax compliance to the sign-up flow described above.
Elsewhere in the world. The same mechanism, elsewhere.
Protecting funds collected on behalf of third-party sellers
In the UK, safeguarding is governed by regulation 23 of the Payment Services Regulations 2017 and regulation 20 of the Electronic Money Regulations 2011, supplemented by chapter CASS 15 of the FCA Handbook. The firm can either segregate the funds in a separate account or cover them with an insurance policy or a comparable guarantee from an insurer or a credit institution. The obligation starts as soon as the firm is entitled to receive the funds, often when they are credited to an account in its name.
https://www.fca.org.uk/firms/emi-payment-institutions-safeguarding-requirements
In the US, there is no federal license: collecting on behalf of third parties requires a money transmitter license, issued state by state, following the Conference of State Bank Supervisors’ Money Transmission Modernization Act. Section 10.03 requires licensees to hold, at all times, “permissible investments” with a market value, calculated under US GAAP, of no less than their total outstanding money transmission obligations. In an insolvency, those assets are deemed held in trust for the benefit of the holders of those obligations and are shielded from other creditors.
Conference of State Bank Supervisors, Money Transmission Modernization Act, section 10.03 — https://www.csbs.org/sites/default/files/2023-02/CSBS%20Money%20Transmission%20Modernization%20Act.pdf
In Brazil, protection comes not from a safeguarding account but from the statute itself. Article 12 of Lei nº 12.865/2013 provides that funds held in a conta de pagamento (payment account) “constituem patrimônio separado” (form assets separate) from those of the instituição de pagamento (payment institution). They do not answer for any of its obligations, cannot be seized or attached for its debts, are not part of its assets in bankruptcy or liquidation, and cannot be pledged as collateral.
Lei nº 12.865, de 9 de outubro de 2013, art. 12 — https://www.planalto.gov.br/ccivil_03/_ato2011-2014/2013/lei/l12865.htm
In Singapore, the Payment Services Act 2019 requires licensees to treat the money they receive as belonging to the customer, deposit it in a trust account with a safeguarding institution, and never commingle it with their own funds. The obligation kicks in when a firm becomes a major payment institution, above the thresholds in section 6(5) of the Act: S$3 million in monthly transactions for one type of service, S$6 million for two or more, or S$5 million in daily e-money float.
Monetary Authority of Singapore, Guidelines on Licensing for Payment Service Providers (PS-G01) — https://www.mas.gov.sg/regulation/payments/licensing-for-payment-service-providers
Platforms’ reporting obligations on their sellers’ income
In the UK, the same OECD model rules are implemented by the Platform Operators (Due Diligence and Reporting Requirements) Regulations 2023: reports go to HMRC by January 31 following the calendar year. The small-seller exemption (fewer than 30 sales and €2,000, or about £1,700, or less) applies only to sales of goods, not to services, transportation rental, or property rental.
https://www.gov.uk/guidance/reporting-rules-for-digital-platforms
In the US, reporting covers gross payments rather than income, on Form 1099-K. The One Big Beautiful Bill Act of 2025 retroactively restored the previous threshold: a platform reports to the IRS only if payments to a single payee exceed $20,000 AND more than 200 transactions. Payment card transactions, however, are still reported with no threshold at all.
Internal Revenue Service — https://www.irs.gov/newsroom/irs-issues-faqs-on-form-1099-k-threshold-under-the-one-big-beautiful-bill-dollar-limit-reverts-to-20000
In Australia, the Sharing Economy Reporting Regime requires electronic distribution platforms to report to the ATO twice a year (by January 31 for July–December transactions and by July 31 for January–June), with no de minimis threshold for small sellers. The regime took effect on July 1, 2023, for taxi and ride-hailing services and short-term accommodation, and was extended on July 1, 2024, to other services (asset rental, meal delivery, digital goods). It covers services, not sales of goods.
Australian Taxation Office — https://www.ato.gov.au/businesses-and-organisations/preparing-lodging-and-paying/third-party-reporting/sharing-economy-reporting-regime
Minimum capital required of an intermediary that collects on behalf of third parties
In Singapore, MAS requires base capital of S$100,000 for a standard payment institution and S$250,000 for a major payment institution. On top of that, a security must be posted before operations start (a cash deposit with MAS or a bank guarantee): S$100,000 if average monthly volume does not exceed S$6 million for one payment service, and S$200,000 in all other cases.
Monetary Authority of Singapore, Guidelines on Licensing for Payment Service Providers (PS-G01), tables 3 and 4 — https://www.mas.gov.sg/regulation/payments/licensing-for-payment-service-providers
In India, the Reserve Bank of India looks at net worth rather than capital: a payment aggregator must show ₹15 crore (₹150 million) in net worth when it applies for authorization, then maintain ₹25 crore at all times from the end of its third financial year. It must hold collected funds in an escrow account at a scheduled commercial bank and settle with merchants at T+1.
Reserve Bank of India, Guidelines on Regulation of Payment Aggregators and Payment Gateways — https://www.rbi.org.in/Scripts/NotificationUser.aspx?Id=11822
In the US, the CSBS model sets a minimum tangible net worth equal to the greater of $100,000 or 3% of total assets up to $100 million, 2% of assets between $100 million and $1 billion, and 0.5% above that. Licensees must also post a surety bond equal to the greater of $100,000 or 100% of the average daily outstanding money transmitted in the state, capped at $500,000.
Conference of State Bank Supervisors, Money Transmission Modernization Act, sections 10.01 and 10.02 — https://www.csbs.org/sites/default/files/2023-02/CSBS%20Money%20Transmission%20Modernization%20Act.pdf