Buy Now Pay Later came under Financial Conduct Authority (FCA) regulation in the United Kingdom on July 15, 2026, four months before the European Union’s Consumer Credit Directive 2 applies and 13 months after Australia’s regime took effect — while the United States has abandoned a federal rule entirely. Four major markets now regulate the same product on four different perimeters, and the divergence is structural rather than a matter of timing.

The UK regime is three days old. Deferred Payment Credit (DPC) — the FCA’s term for the interest-free instalment products marketed as Buy Now Pay Later (BNPL) — now sits inside the consumer credit perimeter, bringing the Consumer Duty, mandatory affordability checks and Financial Ombudsman Service access to a market that grew from £0.06 billion in 2017 to more than £13 billion in 2024 (FCA). Roughly 10.9 million UK adults — 20% of consumers — used BNPL in the 12 months to May 2024.

Key Facts:

• UK DPC regulation took effect July 15, 2026, with the temporary permissions regime (TPR) registration window running May 15 to July 1, 2026 — FCA
• Firms registered under the TPR have six months from commencement to file full authorisation applications, a deadline falling in mid-January 2027 — FCA
• The UK BNPL market grew from £0.06bn (2017) to over £13bn (2024); 10.9 million adults used it in the year to May 2024 — FCA
• The EU’s Consumer Credit Directive 2 (CCD2) applies from November 20, 2026, with member-state transposition due by end-2025 — Plaid
• CCD2 removes the exemption for short-term interest-free credit under three months and captures loans below €200
• Australia’s regime took effect June 10, 2025 under the Treasury Laws Amendment (Responsible Buy Now Pay Later and Other Measures) Act 2024, with ASIC guidance in Regulatory Guide 281 published May 8, 2025 — Norton Rose Fulbright
• The US Consumer Financial Protection Bureau (CFPB) deprioritised its Regulation Z interpretive rule in May 2025 and has said it will not issue a revised BNPL rule

Methodology and sources

This analysis draws on the FCA’s published policy materials and press releases on deferred payment credit, the text and application timetable of the EU’s Consumer Credit Directive 2, ASIC’s Regulatory Guide 281 and the underlying amendments to Australia’s National Consumer Credit Protection Act 2009, and public CFPB statements on its BNPL position. The window covered is February 2026 to July 2026 for UK developments, with comparative dates as published by each regulator. Scope is limited to consumer-facing instalment credit; merchant-side and B2B deferred payment arrangements are out of scope. Where a jurisdiction’s rules are transposed at member-state level, as in the EU, national variation may exceed what the directive text implies — the Netherlands, for example, is going further by prohibiting BNPL for minors.

What actually changed in the UK on July 15

From July 15, 2026 any lender entering into a DPC agreement must either hold authorisation for the relevant consumer credit activities or operate under a temporary permission. The TPR was not an open-ended amnesty: firms had to register between May 15 and July 1, 2026, and those that did not are now outside the perimeter and cannot lawfully write new DPC business (FCA).

The substantive obligations are Consumer Duty obligations. Lenders must give clear upfront information on payment dates, amounts and the consequences of missing a payment; carry out proportionate affordability assessments before lending; and provide support, including debt-advice referrals, to customers in financial difficulty. Consumers gain access to the Financial Ombudsman Service for complaints and compensation.

“We want the Buy Now Pay Later sector to thrive,” said Sarah Pritchard, deputy chief executive of the FCA, adding that “no one should be lent to if they’re unable to repay” (FCA).

That formulation is the regime in one sentence. The FCA has not capped fees, restricted merchant integration or limited the number of concurrent agreements a consumer may hold. It has imposed an affordability gate and a redress route. The commercial question is whether proportionate affordability checks at a £60 basket are compatible with the frictionless checkout that made the product work.

Why the four regimes are not converging

Jurisdiction / regulator	Effective date	Scope	Key requirement	Redress / sanction
United Kingdom — FCA	July 15, 2026	Deferred Payment Credit within consumer credit perimeter	Consumer Duty, proportionate affordability checks, authorisation or TPR	Financial Ombudsman Service access; loss of permission
European Union — CCD2	November 20, 2026	BNPL and interest-free instalments, including loans below €200	Three-month interest-free exemption removed; third-party platforms in scope	Member-state enforcement; national variation permitted
Australia — ASIC	June 10, 2025	Low-cost credit contracts under the National Credit Act	Australian Credit Licence, affordability checks, hardship assistance	Licence conditions and civil penalties under the National Credit Act
United States — CFPB / states	No federal regime	State-level only	New York oversight statute; California Financing Law licensing	State enforcement; no single federal redress route

Sources: FCA policy materials and press releases; EU Consumer Credit Directive 2 application timetable; ASIC Regulatory Guide 281 (May 8, 2025) and Treasury Laws Amendment (Responsible Buy Now Pay Later and Other Measures) Act 2024; CFPB public statements, May 2025.

Is a firm authorised in the UK compliant in the EU? No, and the gap is wider than the four-month date difference suggests. The UK has brought DPC inside an existing consumer credit regime governed by the Consumer Duty, an outcomes-based standard that requires firms to evidence good customer outcomes rather than tick disclosure boxes. CCD2 is a prescriptive directive transposed by 27 member states, each of which may go further than the floor — the Netherlands is prohibiting BNPL for minors outright. A UK-authorised lender expanding into the EU faces not one additional regime but a set of national implementations, and its Consumer Duty documentation will not map cleanly onto CCD2’s disclosure architecture. Firms that treated Brexit divergence as a UK-only problem now have it in both directions.

The US is the outlier, and deliberately so

The CFPB’s 2024 interpretive rule would have applied parts of Regulation Z, under the Truth in Lending Act, to BNPL products — effectively treating them as credit cards for dispute and disclosure purposes. In May 2025 the Bureau announced it was not an enforcement priority, redirecting supervision resources, and it has since indicated it will not issue a revised rule, taking the position that credit-card regulation is not the appropriate frame for BNPL (Checkout.com).

The consequence is not deregulation but fragmentation. New York has passed BNPL oversight legislation, and California regulates the product under the California Financing Law. A national BNPL provider in the US now faces a state-by-state licensing map rather than a single federal standard — the same structural burden that shapes money transmission, and a materially different compliance economics from the UK’s single-authorisation model.

This matters for the direction of capital. It is one reason firms with US ambitions have pursued federal banking status directly, as with Klarna’s application for a US bank charter to end its reliance on a sponsor bank. A charter resolves the patchwork problem in a way no state licence can.

Enforcement context: what the penalties look like when a regime matures

There is no UK BNPL enforcement action to cite, because the regime is three days old and the TPR expressly contemplates firms operating while their applications are assessed. The instructive comparison comes from the adjacent retail-conduct space in a jurisdiction whose regime has had time to bite.

ASIC’s A$300 million penalty in the contracts-for-difference sector, covered in our analysis of how retail rules are diverging in 2026, is the reference point for scale. It is a different product — leveraged derivatives rather than instalment credit — but the regulatory theory is the same: a retail product distributed at volume, with conduct failures priced by reference to the number of consumers affected rather than the revenue earned. BNPL’s exposure on that measure is significant, given 10.9 million UK users.

The first UK enforcement signal to watch is not a fine. It is refusals. Firms whose full authorisation applications are rejected in the window ending January 2027 will exit the market without any penalty being levied, and the count of refusals will say more about the FCA’s affordability expectations than any early enforcement notice.

What this means for lenders, merchants and compliance teams

For BNPL lenders: the binding constraint is the January 2027 authorisation deadline, not the July 2026 commencement. Firms operating on temporary permission must produce evidence of proportionate affordability assessment at the point of sale, Consumer Duty outcomes monitoring, and a financial-difficulty process with debt-advice referral. Smaller providers without existing consumer credit permissions face the highest exit risk, because the fixed cost of an authorisation application does not scale down with book size.

For merchants: checkout integration is now a regulated distribution channel. Merchants offering third-party BNPL are not themselves lenders, but the affordability gate sits inside the customer journey they control, and conversion-rate impact is the operational cost of the regime. The direct-to-consumer carve-out in CCD2 — where retailers offering their own instalment terms retain a limited exemption that third-party platforms do not — creates a genuine structural incentive in the EU to bring the product in-house, and merchants running loyalty-linked instalment products, as in JetBlue’s ClarityPay launch, will need to determine which side of that line they sit on.

For compliance teams: build the jurisdictional matrix now rather than at each commencement date. The four regimes differ on perimeter, on whether the standard is outcomes-based or prescriptive, and on redress. A single global BNPL policy will fail in at least one of them.

The forward view

Three things are unresolved. First, the UK refusal rate through the TPR window to January 2027, which will determine how much consolidation the regime forces. Second, EU national implementations of CCD2 ahead of November 20, 2026 — the Dutch minors prohibition suggests the directive floor will not be the ceiling, and firms should expect a wider spread of national requirements than the text implies. Third, whether the CFPB’s position survives a change in administration or a state-federal preemption challenge; the current settlement is a policy stance rather than a repeal, and stances reverse.

The broader pattern is familiar from other financial-services perimeters. The UK is legislating an outcomes standard and diverging deliberately from the EU model, exactly as it has in digital assets — our analysis of the FCA’s refusal to copy MiCA traces the same instinct. For firms, the cost of that divergence is not the rules themselves but the requirement to run parallel evidence frameworks proving different things to different regulators about the same product.

FAQ

When did UK BNPL regulation take effect?
July 15, 2026. From that date any firm entering into a Deferred Payment Credit agreement must hold the relevant consumer credit authorisation or operate under a temporary permission.

What is the temporary permissions regime deadline?
Registration ran from May 15 to July 1, 2026. Firms on the TPR have six months from commencement to submit a full authorisation application, placing the deadline in mid-January 2027.

What protections do UK BNPL customers now have?
Clear upfront information on payment dates, amounts and missed-payment consequences; proportionate affordability checks before lending; support and debt-advice referral in financial difficulty; and access to the Financial Ombudsman Service for complaints and compensation.

How does the EU approach differ?
CCD2 applies from November 20, 2026 and is prescriptive rather than outcomes-based. It removes the exemption for interest-free credit under three months, captures loans below €200, and keeps only a limited carve-out for retailers offering their own instalment terms — not third-party platforms. Member states may go further, as the Netherlands is doing by prohibiting BNPL for minors.

Is BNPL regulated in the United States?
Not federally. The CFPB deprioritised its Regulation Z interpretive rule in May 2025 and has said it will not issue a revised BNPL rule. Oversight sits with states, including New York’s BNPL statute and California’s licensing under the California Financing Law.

What is the position in Australia?
BNPL has been regulated since June 10, 2025 as a low-cost credit contract under the National Consumer Credit Protection Act 2009, as amended by the Treasury Laws Amendment (Responsible Buy Now Pay Later and Other Measures) Act 2024. Providers require an Australian Credit Licence and must conduct affordability assessments and offer hardship assistance, with ASIC guidance set out in Regulatory Guide 281.

Which firms are most at risk under the UK regime?
Smaller providers without existing consumer credit permissions. The fixed cost of an authorisation application does not scale with book size, so the compliance burden falls hardest on firms least able to absorb it — the most likely source of consolidation before January 2027.

This article is informational analysis only and does not constitute legal, regulatory, tax, or investment advice. Regulatory frameworks change frequently and interpretation depends on facts and circumstances; primary documents and official regulator guidance always supersede summaries. Firms should consult qualified legal counsel and their relevant supervisory authority before taking any action based on the analysis above.