Payment Regulation Tracker 2026: EU PSD3 and PSR Move Closer to Adoption, With Payee Name Checks and Fraud Liability Changes

The EU’s long-awaited payments overhaul is now much closer to the finish line. For PSPs, acquirers, and platforms that sit anywhere near payment initiation, the important part is not the legal housekeeping — it’s the new fraud framework, the verification layer on transfers, and the fact that some online platforms can be pulled into liability if they ignore known fraud.

1. PSD3 and the Payment Services Regulation (PSR) are the EU’s replacement for PSD2. The package combines a new directive, PSD3, with a directly applicable regulation, PSR. The stated target is payment fraud, but the practical effect is broader: it changes how transfers are verified, how certain impersonation scams are handled, and where liability can sit when fraud is known and not acted on.
2. A payee name check, called Verification of Payee, is part of the package. The check is designed to reduce both impersonation fraud and mistaken transfers caused by typos in payment details. For high-risk payment flows, that means another layer between the customer and the money movement, which is exactly the sort of thing that can affect conversion, exception handling, and support volume.
3. Some online platforms may be held responsible if they fail to act on known fraud after notification. That is the part operators will care about most. The source does not frame this as a narrow bank-only obligation; it explicitly extends into platform behavior when fraud has already been flagged and still is not addressed.
4. What happened in 2026: the legislative text is now substantially advanced. The European Parliament and the Council reached a provisional agreement on 27 November 2025. On 23 April 2026, the Council published the final compromise texts, and those were approved in early May. Formal adoption and publication in the Official Journal are expected by December 2026.
5. The timing is staggered, which matters for implementation planning. The rules enter into force 20 days after publication. The PSR then applies 21 months later. The payee name check applies 27 months after entry into force. Member States also have 21 months to turn PSD3 into national law. Existing payment institutions may keep operating under the old rules for up to 27 months.

For PSPs and merchants operating in Europe, the practical message is simple: this is not a cosmetic rewrite. The package creates a new default around transfer verification and pushes fraud handling closer to the center of the regulatory framework, with a transition period long enough to plan — and short enough to ignore at your own risk.