From October 9, 2025, every Eurozone PSP must run an IBAN-name match check on credit transfers under the EU Instant Payments Regulation. Non-Eurozone EU PSPs must comply by July 9, 2027.
What the IPR requires
The Instant Payments Regulation (IPR) — adopted March 13, 2024 — makes instant euro payments a mandatory standard for all EU payment service providers. Since January 9, 2025, all Eurozone PSPs must be able to receive instant euro credit transfers; from October 2025 they must also be able to send them. Settlement must complete within 10 seconds, 24/7.
Verification of Payee in detail
From October 9, 2025, Eurozone PSPs must offer payers a Verification of Payee (VoP) service prior to authorizing a credit transfer. VoP is an IBAN-name consistency check returning one of four traffic-light results — match, close match, no match, or other — within 5 seconds. The obligation applies to all SEPA credit transfers (instant and standard), not only instant ones. Non-Eurozone EU PSPs have until July 9, 2027 to comply.
Why VoP matters for fraud
Authorized push payment (APP) fraud — where customers are tricked into sending funds to fraudster-controlled accounts — has been one of the fastest-growing fraud vectors in Europe. VoP creates a structured, real-time consent moment: if a 'no match' or 'close match' is returned and the payer proceeds anyway, liability shifts. Fraudsters lose the easy exploit of slightly altered beneficiary names matched to wrong IBANs.
Implementation challenges
Real-world names rarely match cleanly. PSPs need fuzzy matching that distinguishes meaningful mismatches from nicknames, abbreviations, language variants, and corporate trade names. Legacy customer data quality is a frequent culprit behind false 'no match' results. The 5-second response budget is tight when checks fan out across the EU SEPA network. And the EPC VoP Scheme Rulebook standardizes core verification while leaving room for PSPs to layer 'Additional Optional Services' — enhanced fraud scoring, pre-validation APIs, consumer-level alerts.
What banks and PSPs should do next
PSPs already live with VoP should be measuring close-match rates, payer-override patterns, and the fraud-prevention lift VoP has delivered in practice. Non-Eurozone EU PSPs need clear July 2027 plans — including IBAN-name data hygiene and integration with existing fraud-scoring stacks. The strategic opportunity is to use VoP signals as a feature inside a broader real-time fraud platform, rather than treating it as a standalone compliance checkbox.
Cómo ayuda UMCA
UMCA's Monitorización de Transacciones con IA integrates VoP signals with behavioral analytics and rule-based detection — turning regulatory checks into fraud-prevention firepower.
