“Licence arbitrage” describes a business choosing a regulatory home or structure partly because rules, supervision or costs differ between jurisdictions. Within the EU, that phrase can obscure an important distinction: some sectors have harmonised cross-border rights, while others remain subject to national authorisation. An intermediary cannot create market access that the underlying licence and law do not permit.
Consultants, agents, platform providers and local representatives can support legitimate expansion. The investigative question is whether they clarify responsibilities or help present a licence, branch or partnership as broader than it really is.
Identify the regulated activity first
Before examining the intermediary, define the product, customer, country and activity. Payment services, investment services, consumer credit, gambling, pharmaceuticals and general business services do not share one EU licensing system. The European Commission’s overview of the single market for services explains the principles of establishment and cross-border provision, while sector-specific rules and national requirements still matter.
Describe what the business actually does rather than relying on marketing terms such as “fintech,” “platform” or “introducer.” Receiving client money, executing transactions, onboarding customers or setting prices can affect the regulatory perimeter even when a contract labels the party an agent.
Map every entity and role
Create a chain showing the licence holder, branches, tied agents, distributors, outsourced providers, payment processors, domain operators and customer-contracting entity. Record the legal basis for each role and the countries in which it is used.
Trider’s guide to corporate groups designed around intermediaries explains how contractual and operational links can differ from the visible ownership chart. That distinction is essential when a branded service relies on several legal entities.
Verify the licence and its territorial scope
Check the home regulator’s register, the exact authorised services, status, trading names and any cross-border notifications. For payment and electronic-money institutions, the European Banking Authority maintains a central PSD2 register containing authorisation and passporting information supplied by national authorities. The EBA cautions that inclusion or omission does not itself alter legal status, so the home regulator remains a key source.
A licence belonging to a group affiliate does not automatically authorise every sister company, domain or intermediary. Trider’s article on payment licences used as proxies for market access shows how to test which entity actually contracts, safeguards funds and delivers the regulated service.
Examine the intermediary agreement
Obtain contracts, scopes of work, delegation schedules, fee arrangements and oversight records. Identify who approves customers, performs due diligence, handles complaints, controls funds, monitors transactions and reports incidents. A compliant outsourcing or agency arrangement should preserve the licence holder’s accountability where the law requires it.
Warning signs include the intermediary serving markets absent from the licence record, onboarding customers without effective oversight, using the licence holder’s name only in small print, or retaining functions that the contract assigns elsewhere. Disproportionate revenue sharing can also justify questions about which party is truly operating the service.
Distinguish legitimate choice from evasion
Choosing a jurisdiction with experienced regulators, suitable infrastructure or efficient processes can be lawful. Lower fees or simpler administration do not prove evasion. Concern rises when the licensed entity lacks substance, the real operations sit in another country, host-state restrictions are ignored, or the structure changes repeatedly after supervisory action.
Malta Media has discussed these cross-border tensions in its report on Malta licence arbitrage and regulatory coordination. That analysis is useful context, but any conclusion about a particular operator should rest on the relevant registers, legislation and contracts.
Check marketing and customer journeys
Follow the customer path from advertisement to registration, payment and complaint. Record which company is named at each stage and whether disclosures change by language, device or country. Archived terms and regulator warnings can establish what customers were told at the relevant time.
Trider’s guide to investigating false licensing claims provides a structured approach for comparing promotional statements with official scope. The same principle applies beyond gambling: a logo or registration number is not a substitute for verifying the authorised entity and activity.
Assess supervision in practice
Review audit rights, compliance reporting, training, monitoring, incident escalation and termination powers. A licence holder that cannot identify its intermediaries, retrieve customer records or stop non-compliant activity may not exercise meaningful control. Conversely, detailed oversight records can support a legitimate operating model even where functions are outsourced.
Reach a precise conclusion
The final assessment should state the licensed entity, permitted activity, territory, intermediary role, contractual allocation and observed customer journey. Separate confirmed breaches from unresolved perimeter questions and obtain specialist legal advice where the rules are complex.
Intermediaries are not inherently vehicles for arbitrage. Their significance lies in whether the arrangement preserves regulatory accountability and accurately presents the scope of authorisation. A source-linked entity map makes that question testable.