October 8, 2026
Author: Joao Lages
Secondary trading under ECSPR is often described too casually. An ECSPR bulletin board can help existing investors signal that they want to sell and prospective buyers signal that they want to buy. It is not, however, a miniature exchange. The distinction matters because a product feature that moves from advertising interest to systematically bringing together orders may cross into the MiFID II trading-venue perimeter.
For crowdfunding service providers, issuers and platform operators, the practical question is therefore not whether secondary transfers are desirable. It is which functions can sit inside the bulletin board, which controls must surround them, and where a separately authorised investment firm or trading venue becomes necessary. The answer depends on the instrument, the workflow and the role taken by each regulated entity, not on whether the asset is represented on a blockchain.
This article explains the current European framework as of October 2026. It distinguishes the binding text of Regulation (EU) 2020/1503, commonly called ECSPR, from ESMA guidance and from implementation choices that remain subject to national law and supervisory interpretation. It is general information, not legal, investment or regulatory advice.
An ECSPR bulletin board may display client interest in buying or selling eligible loans and instruments originally offered on that provider's crowdfunding platform. It may support information exchange and a compliant bilateral transfer process. It must not use the provider's rules, protocols or procedures to match multiple third-party interests in a way that results in a contract.
That boundary comes directly from Article 25 of Regulation (EU) 2020/1503. The bulletin board is an advertising and contact mechanism. It is not authorised by ECSPR to execute orders on a multilateral basis. A provider that wants to operate a trading venue for transferable securities needs the relevant separate authorisation and must satisfy the associated MiFID II requirements.
Article 25 permits a crowdfunding service provider to operate a bulletin board for loans, transferable securities and admitted instruments for crowdfunding purposes. The scope is narrow in two important ways. First, the interests must concern instruments originally offered on that provider's crowdfunding platform. Second, the users advertising those interests must be the provider's clients.
ECSPR therefore does not create a general market for any security an investor wants to post. Nor does it grant a free-standing brokerage permission for secondary transactions. The provision supports continuity for investments made through the platform while preserving a clear boundary around execution and multilateral matching.
A well-designed bulletin board can usually perform the following functions, subject to the provider's authorisation, national law and the characteristics of the instrument:
The last point requires care. A provider may operate the administrative rails around a permitted transfer without turning the bulletin board into an order book. The workflow should show that the clients, not the platform's matching logic, decide whether and on what terms to contract.
The red line is an internal matching system that executes client orders on a multilateral basis. Features that create material risk include:
Removing a button labelled “execute” is not enough if the underlying protocol still determines counterparties or contractual outcomes. Supervisors look at substance: who enters trading interests, how they interact, which rules govern the interaction, and where the contract is formed.
The most reliable implementation starts by separating sources according to their legal weight. ECSPR is directly applicable EU law. Article 25 establishes the bulletin-board permission and its conditions. MiFID II, as transposed in each Member State, defines the investment-service and trading-venue perimeter for financial instruments. National company, securities, contract and property law may determine how ownership is legally transferred and recorded.
ESMA's questions and answers are not a replacement for legislation. They are, however, important supervisory-convergence guidance and indicate how national competent authorities are likely to approach the rule. In its 3 April 2025 ECSPR bulletin-board Q&A, ESMA restated that the provider cannot use its protocols or internal procedures to bring together interests in a way that results in a contract. ESMA also clarified the treatment of the key investment information sheet after an offer has closed.
ESMA's trading-venue opinion likewise guides perimeter analysis. Firms should assess the actual system against the MiFID II definitions of a multilateral system, MTF and trading venue. The analysis is functional. A technology provider can operate a multilateral system even if it avoids familiar exchange terminology.
A bulletin board is not merely a listings page. Article 25 attaches specific information duties to the service. These duties should be designed into the interface, data model and approval process rather than added as a legal notice after development.
A client advertising a sale must make the relevant key investment information sheet, or KIIS, available. The practical problem is that a KIIS is maintained during the original offer, but a sale advertisement may appear months or years later. Information in the document may no longer describe the issuer's current position.
ESMA addressed that gap in April 2025. When a sale is advertised after the crowdfunding offer has closed, the provider should ensure that the seller indicates the month and year in which the KIIS was provided to that seller. This date does not transform an old KIIS into current disclosure. It helps the prospective buyer understand its age and assess whether additional issuer information is needed.
For loans, the provider must give intending buyers information about the performance of loans facilitated by the provider. Non-sophisticated investors advertising an interest to buy must also receive the information referenced in Article 19(2) and the risk warning referenced in Article 21(4). A sensible journey records when those materials were shown, which version applied and whether the client acknowledged them.
A provider may suggest a reference price, but Article 25 requires it to be non-binding. The provider must substantiate the price and disclose the key elements of the methodology in line with Article 19(6). A reference price should therefore be visibly distinguished from an executable quote, a valuation guarantee or an assurance of liquidity.
For an illiquid security, a modelled value can be materially different from the price at which two clients agree to transfer. The interface should explain the data date, assumptions, limitations and potential conflicts. A stale or unexplained number can mislead even if it carries the word “indicative.”
The safest architecture separates advertising, bilateral decision-making, compliance checks and legal transfer. One practical flow is:
This sequence is not a universal legal template. The execution point, payment route and ownership record vary by instrument and jurisdiction. The useful design principle is separation: a bulletin board can originate contact without itself becoming the system that brings multiple interests together and creates contracts.
MiFID II defines an MTF as a multilateral system operated by an investment firm or market operator that brings together multiple third-party buying and selling interests in financial instruments, under non-discretionary rules, in a way that results in a contract. An organised trading facility has a related definition for specified non-equity instruments. The terminology matters less than the mechanics.
In its 2 February 2023 opinion on the trading-venue perimeter, ESMA emphasised how systems enable third-party interests to interact. A platform should seek specialist advice before introducing ranking algorithms, automated negotiation, executable prices, binding acceptance, smart-contract execution or other logic that systematically determines a transaction.
The risk also cannot be solved by sending the final click to another website if the first system performed the substantive matching. Regulators can look across the full arrangement. Product, legal and compliance teams should map each step, the entity responsible for it and the authorisation relied upon.
A token can make ownership controls, investor whitelisting and register updates more efficient. It does not convert a bulletin board into an authorised market. If a token represents a transferable security or admitted instrument, the legal classification and the activity performed remain decisive.
Smart contracts deserve particular scrutiny. Code that automatically pairs eligible wallets, applies a pricing rule and swaps cash for securities may amount to more than administration. Even when clients pre-authorise the logic, the system may still be bringing together third-party interests. The provider should test the coded workflow against both Article 25 and the broader trading-venue perimeter before launch.
For broader context, Lympid's guide to tokenized securities secondary trading in Europe explains how transfer restrictions, venue permissions and settlement design interact beyond ECSPR.
There is no single stack for every secondary-transfer model. A practical shortlist should reflect whether the goal is an ECSPR bulletin board, controlled bilateral transfers or venue-based trading:
The right choice is driven by activity, not branding. Lympid's white-label investment platform can provide the investor experience and operating infrastructure around a carefully allocated regulatory model. Its Tokenization-as-a-Service overview also explains how technical transfers sit within legal structuring, onboarding and lifecycle operations.
A policy that repeats Article 25 is not enough. The provider needs evidence that the system behaves as described. Governance should cover product design, change approval, monitoring, incident management and periodic legal-perimeter review.
Where the provider offers safekeeping services under Article 10(1), clients advertising interest must notify it of ownership changes so it can conduct ownership verification and recordkeeping. Even without that specific configuration, the authoritative ownership record must remain aligned with the contractual and technical transfer.
An investor posts an interest to sell 100 units at an indicative price. The page displays the relevant KIIS and its provision date. A prospective buyer requests contact. The parties negotiate bilaterally, after which separate eligibility and transfer checks occur. The platform does not rank executable orders or create the contract. This is the model Article 25 is designed to accommodate.
The platform accepts limit prices from many users, ranks them and sends each seller the highest compatible bid. A client must still confirm the trade, but the system has organised multiple interests under predefined rules. This needs careful perimeter analysis. Calling the output an introduction does not determine its legal character.
Buy and sell orders interact continuously, matching occurs under price-time priority and a smart contract settles the result. That is not an ECSPR bulletin board merely because the securities were first offered through crowdfunding. It points toward a separately authorised trading-venue and investment-services model.
A bulletin board may improve visibility for investors who want to transfer an interest. It does not guarantee liquidity, continuous pricing, execution speed or a buyer. Marketing should avoid phrases such as “always tradable,” “instant exit” or “exchange liquidity” unless the underlying regulated arrangement genuinely supports those claims.
Issuers should also plan for asymmetric information. The original KIIS can be outdated, financial performance may have changed and private instruments may trade infrequently. Supplementary issuer updates, conflict controls and clear warnings can improve decision quality, but they must not imply that the provider guarantees valuation or creditworthiness.
Secondary trading under ECSPR is possible, but the permitted bulletin board is deliberately narrower than a market. It can advertise client interest, support required disclosures and help a compliant bilateral transfer proceed. It cannot, on the strength of ECSPR alone, bring together multiple third-party interests under internal rules in a way that results in contracts.
The strongest implementations make that distinction visible in their technology and governance. They separate advertising from execution, treat disclosures as product requirements, keep ownership records aligned and escalate any matching or pricing logic for regulatory review. For tokenized instruments, programmable controls can improve operations, but they do not change the legal perimeter.
If you are considering launching a tokenised investment product, speak with Lympid.
Book a call with us today and get a free assessment.
