ESMA Reports Sharp Rise in Cross-Border Investment Services Across EU/EEA

Key Takeaways

• ESMA's annual cross-border review found that retail client numbers receiving cross-border investment services rose 47% year-on-year to 15.5 million, while the number of passporting firms grew modestly.
• For compliance teams at firms providing cross-border investment services, this signals heightened regulatory attention on passporting activity and retail investor protection across Member States.

Deep Dive

ESMA's latest cross-border analysis, conducted with national competent authorities (NCAs) across 30 EU/EEA jurisdictions, confirms a continued and accelerating trend toward cross-border provision of investment services under the MiFID passporting regime. The near-doubling of retail clients served cross-border since 2023, combined with a 47% year-on-year increase, indicates that firms are increasingly relying on passporting to scale retail distribution across borders rather than establishing local entities. Compliance teams at firms domiciled in hub jurisdictions—particularly Cyprus, Luxembourg, and Germany, which together account for 46% of passporting firms—should expect increased supervisory scrutiny as these volumes grow.

While the press release does not introduce new binding requirements, it signals ESMA's and NCAs' intent to strengthen monitoring of cross-border retail investor protection, complaint handling, and conduct risk. The stability in complaint volumes despite the surge in client numbers is notable and will likely be used by regulators as a benchmark; any future deterioration in complaint ratios relative to client growth could trigger targeted supervisory action or thematic reviews. Firms should anticipate that this annual data collection exercise may evolve into a basis for more prescriptive supervisory convergence measures or enhanced passporting notification requirements.

No specific deadlines or new obligations are introduced in this release; however, firms should note that ESMA will conduct its next data collection in 2027, implying continued annual monitoring cycles. Compliance teams should proactively ensure that passporting notifications, outbound services registers, and retail client complaint-handling frameworks are accurate and audit-ready, particularly for firms based in Cyprus, Luxembourg, or Germany, or those targeting clients in France, Spain, Germany, or Italy as primary destination markets.

Recommended actions include: (1) reviewing current passporting notifications for accuracy and completeness; (2) assessing retail client onboarding and suitability processes for cross-border clients to ensure consistency with host-state conduct rules; (3) benchmarking complaint-handling metrics against the EU-wide stable trend; and (4) monitoring ESMA/NCA publications for any follow-up supervisory priorities stemming from this data. The overall risk implication is moderate—there is no immediate regulatory change, but the scale of growth increases exposure to conduct, consumer protection, and cross-border supervisory coordination risks that could materialize in future NCA inspections or ESMA convergence initiatives.

Source: European Securities and Markets Authority