PSR welcomes APP scam voluntary code

The Payment Systems Regulator (PSR) has welcomed a new voluntary industry code of good practice to protect people from Authorise Push Payment (APP) scams which will take effect from 28 May.

APP scams are where a fraudster tricks an individual consumer or micro business to instruct their payment services provider - such as their bank - to send money from their account to an account controlled by that fraudster.

At the beginning of 2018, the PSR set up a dedicated steering group, made up of consumer representatives and the industry, to design and implement a code that would work for everyone.

The development and subsequent implementation of the code follows significant work by the steering group, completed within the ambitious timeframe driven by the PSR. This looked to understand the scale and technicalities of the problem, along with setting out how to prevent these types of scam from happening in the future and reimburse victims if they do nothing wrong.

The regulator said the code reflects its continued strong belief that if somebody has done everything they can reasonably do to protect themselves, they should be reimbursed – so even if blame can’t be attributed to either the consumer or the banks, consumers will be reimbursed.

In a further move, the banks have agreed to fund an initial contribution to reimburse victims in the no-blame scenario as an interim measure, until the final long-term funding arrangements are put in place from January 2020. The PSR promised to keep the progress of this under close review.

PSR managing director Hannah Nixon said: “The code is a testament to the significant work that has gone into protecting people from APP scams, it shows that by bringing together consumer and industry representatives, very positive outcomes can be achieved.

“We’re particularly pleased that the steering group has been able to navigate and agree a way to reimburse victims when neither victim nor bank has done anything wrong – this was a tough issue that rightly involved much discussion, but the banks have done the right thing for their customers in backing this measure.

The final code will be implemented on 28 May, at which point the protections and standards will be implemented by banks and other payment service providers.

    Share Story:

Recent Stories


Data trust in the AI era: Building customer confidence through responsible banking
In the second episode of FStech’s three-part video podcast series sponsored by HCLTech, Sudip Lahiri, Executive Vice President & Head of Financial Services for Europe & UKI at HCLTech examines the critical relationship between data trust, transparency, and responsible AI implementation in financial services.

Banking's GenAI evolution: Beyond the hype, building the future
In the first episode of a three-part video podcast series sponsored by HCLTech, Sudip Lahiri, Executive Vice President & Head of Financial Services for Europe & UKI at HCLTech explores how financial institutions can navigate the transformative potential of Generative AI while building lasting foundations for innovation.

Beyond compliance: Building unshakeable operational resilience in financial services
In today's rapidly evolving financial landscape, operational resilience has become a critical focus for institutions worldwide. As regulatory requirements grow more complex and cyber threats, particularly ransomware, become increasingly sophisticated, financial services providers must adapt and strengthen their defences. The intersection of compliance, technology, and security presents both challenges and opportunities.

Unleashing generative AI: A force multiplier for financial crime teams
This FStech webinar, sponsored by NICE Actimize sees industry experts examine the revolutionary impact of generative AI on financial crime operations, and provides actionable insights to enhance your compliance strategies.