Riverty begins operating as a licensed Luxembourg bank in July 2026, and the more revealing detail is not the licence itself but the direction of travel it confirms: buy now, pay later (BNPL) firms on both sides of the Atlantic are converging on bank charters at almost exactly the same moment, for opposite structural reasons. Riverty, wholly owned by German media conglomerate Bertelsmann, secured an EU Capital Requirements Regulation (CRR) banking licence from the European Central Bank and Luxembourg’s Commission de Surveillance du Secteur Financier (CSSF) after a 10-month process (Bertelsmann).
The upgrade moves Riverty from a Payment Services Directive 2 (PSD2) payment institution to a licensed credit institution, letting it extend embedded payment, credit and liquidity services to European merchants from its own balance sheet rather than renting someone else’s. The unit already serves more than 1,800 merchants and approximately 25 million customers, processing over 235 million transactions annually across Europe (FinTech Futures).
Balance-sheet control is the point. A PSD2 payment institution intermediating credit depends on funding partners who price the risk and take a cut; a CRR credit institution funds from deposits and its own capital. For a BNPL business, where margin sits in the spread between funding cost and merchant fee, removing that layer is structural rather than incremental.
The transatlantic parallel is the part competing coverage has mostly missed. Klarna filed for a US bank charter earlier this month explicitly to end its reliance on WebBank, the sponsor bank that has issued its US products — a move this publication covered when Klarna moved to cut out its sponsor-bank dependency. Riverty’s Luxembourg licence solves the identical problem from the European side, where the constraint was PSD2’s limits rather than a sponsor bank. Two firms, two regimes, one conclusion: at scale, renting a balance sheet stops making sense.
Bertelsmann framed the speed of approval as the headline achievement. “Receiving regulatory approval for Riverty’s banking license in under a year is a major milestone,” said Carsten Coesfeld, member of the Bertelsmann Executive Board responsible for Riverty, adding that “the license is of great strategic importance for Riverty” (PR Newswire). Ten months is fast for a CRR authorisation, and it says something about Luxembourg’s positioning as much as about Riverty’s application quality.
Oliver Kuhaupt, Riverty’s Chief Risk Officer, has been designated chief executive of the bank — a telling appointment. “With the banking license, we’re taking direct responsibility for risk, compliance and execution,” Kuhaupt said. Firms that install a commercial leader are chasing growth; firms that install the risk officer are signalling to supervisors that they understand a credit institution’s obligations. Andreas Barth, chief executive of Riverty, described the wider ambition more plainly: “Riverty is building the European gateway for merchants.” (IBS Intelligence)
The competitive response has been quiet, which is itself informative. Neither Klarna nor Adyen — the Dutch payments group that already holds a full European banking licence and is the closest structural analogue — has publicly addressed the licence. Adyen’s model, combining acquiring with a bank licence, is effectively Riverty’s destination. That an established licensed player sees no need to respond suggests it does not yet regard a 1,800-merchant BNPL specialist as a threat to its enterprise base.
Regulators have been the more active party. The European Central Bank and CSSF granted the licence during a period in which BNPL supervision has tightened sharply across jurisdictions — the United Kingdom brought BNPL providers under Financial Conduct Authority authorisation with mandatory affordability checks from July 15, 2026, as covered in our analysis of how four jurisdictions have split on BNPL scope. A BNPL firm that becomes a bank does not escape that scrutiny; it accepts a heavier version of it, including capital, liquidity and resolution requirements that a payment institution never faced.
That trade is the strategic bet. Riverty exchanges a light regulatory burden for balance-sheet economics and deposit-taking rights, in a market where remaining a payment institution as BNPL rules tighten increasingly means the compliance cost without the funding benefit. Firms set to be regulated like credit providers regardless may as well collect the advantages of being one.
What happens next depends on funding. A CRR licence permits deposit-taking, but building a European deposit base from scratch is slow and expensive, and Riverty has not signalled an aggressive retail push. The likelier near-term path is wholesale funding and merchant liquidity products, where the licence unlocks capacity without requiring a consumer-facing bank brand. If that works, expect at least one more large European BNPL or embedded-finance provider to file for a CRR licence within 12 months: the Luxembourg route is demonstrably passable in under a year, and the regulatory burden arrives whether firms hold a licence or not. The pattern rhymes with consolidation elsewhere in European payments, visible in Mastercard’s exploration of a Vocalink majority sale.