RegAlertPortugal: lending & credit regulation — 2026-09
RegulatedPortugal lending: BCP regulates credit institutions; CMVM oversees P2P; Decree-Law 133/2009 governs consumer credit
Frozen snapshot — the guide as it stood at the end of 2026-09. See the live guide for the current state.
Portugal maintains a strict banking-centric lending regime. Traditional consumer and SME lending is dominated by credit institutions supervised by Banco de Portugal (BdP) under the Capital Requirements Regulation and Decree-Law 133/2009. P2P lending is a distinct, regulated activity supervised by the CMVM. Non-bank lending is heavily restricted, with 'financial companies' requiring specific authorization. The regulatory environment is stable, with BdP focusing on prudential compliance, NPL management, and consumer protection via interest rate caps.
Which licence do you need?
| Your activity | Requirement | Capital | Timeline | Authority |
|---|---|---|---|---|
| Consumer lending | LicenceCredit Institution License[1][2][3] Subject to TAEG caps and Decree-Law 133/2009 | €1,250,000 | 6-12 months | Banco de Portugal |
| SME / commercial lending | LicenceCredit Institution License[4][5] Prudential rules apply; no specific SME license | €1,250,000 | 6-12 months | Banco de Portugal |
| Microfinance | LicenceFinancial Company Licenseverify with regulator Uncertain if specific MF license exists; likely Financial Company | €500,000 | uncertain | Banco de Portugal |
| Buy-now-pay-later | LicenceCredit Institution License[1] Treated as consumer credit under Decree-Law 133/2009 | €1,250,000 | 6-12 months | Banco de Portugal |
| P2P lending platform | LicenceCrowdfunding Service Provider License Regulated under Decree-Law 136/2015 | €125,000 | 3-6 months | CMVM |
| Credit bureau / scoring | RegistrationCentral Credit Registry Reporting[6] Mandatory reporting to Central Credit Registry | — | — | Banco de Portugal |
| Debt collection | LicenceCredit Institution License[7] Out-of-court regularization duties under Decree-Law 227/2012 | €1,250,000 | 6-12 months | Banco de Portugal |
New — what changed recently
- 2026-02-24Instruction No. 1/2026 — Mandated reporting of credit liabilities to the Central Credit Registry for all supervised entities.[6]
- 2025-03-07Instruction No. 3/2025 — Published updated maximum interest rate caps for consumer credit under Decree-Law 133/2009.[1]
- 2024-12-20Instruction No. 19/2024 — Established new standards for calculating and disclosing maximum TAEG limits for consumer credit.[8]
Market-entry checklist
- 1Secure Credit Institution LicenseObtain authorization from Banco de Portugal with €1.25m capital for traditional lending.
- 2Register with Central Credit RegistryImplement systems to report credit exposures to the Central Credit Registry as per Instruction 1/2026.
- 3Comply with TAEG CapsAdhere to quarterly maximum interest rate limits published by Banco de Portugal under Decree-Law 133/2009.
- 4Implement NPL Prevention PoliciesEstablish procedures for identifying borrowers in difficulty and out-of-court regularization per Decree-Law 227/2012.
- 5Register with CNPDEnsure GDPR compliance and register data processing activities with the National Data Protection Commission.
Sources
- Instruction (Historical) No. 3/2025 · 2025-03-07
- Instruction (Historical) No. 9/2024 · 2024-06-06
- Instruction (Historical) No. 3/2024 · 2024-03-06
- Circular Letter No. CC/2026/00000017 · 2026-05-15
- Circular Letter No. CC/2024/00000049 · 2024-11-28
- Instruction (Historical) No. 1/2026 · 2026-02-24
- Notice No. 7/2021 · 2021-01-01
- Instruction No. 19/2024 · 2024-12-20