PSD3 and the Payment Services Regulation: what changes for EMIs, payment institutions and their clients
The EU is replacing PSD2 and the E-Money Directive with a new directive, PSD3, and a directly applicable Payment Services Regulation. Here is what the agreed texts change, when they are expected to apply and what businesses should ask their providers now.
By Marc Conway, founder of 7 Seas Consultants | Reviewed | 9 minute read
Who this guide is for: Founders, compliance and product teams at EU payment institutions and EMIs, and businesses that rely on them for accounts, payments or e-money, including UK groups with EU-licensed entities or EU clients.
Key takeaways
PSD2 and the E-Money Directive are being replaced by PSD3 and a directly applicable Payment Services Regulation.
E-money moves into the payment services regime, and existing EMIs and payment institutions will need to be re-authorised within a transitional period.
Payee name checks extend to all credit transfers, and refunds become due in defined cases of bank-impersonation fraud.
Banks must give payment institutions access to payment accounts on a non-discriminatory basis.
Most rules are expected to apply from around late 2027 or 2028, so the time to prepare is now.
Where things stand
The European Parliament and Council reached political agreement on the package in November 2025, and the Council published the final compromise texts in April 2026. Formal adoption and publication in the Official Journal follow. Most of the new rules are expected to apply after a transition of around 18 to 21 months from entry into force, which on current timing points to late 2027 at the earliest and more likely 2028. Technical standards and guidelines from the European Banking Authority will add detail. Always check the current status before relying on a date.
The package has two parts. PSD3 is a directive that each member state transposes into national law, covering authorisation and supervision. The Payment Services Regulation applies directly across the EU and covers conduct: transparency, rights and obligations, fraud prevention, open banking and strong customer authentication.
Licensing: e-money joins the payment services regime
The separate E-Money Directive is repealed. E-money institutions become a category of payment institution under PSD3, and existing EMIs and payment institutions will need to be re-authorised within a transitional period. For most well-run firms this should be an exercise in evidence rather than reinvention, but it will take management time and regulators will use it to test governance, capital, safeguarding and wind-down planning.
Fraud: name checks and impersonation refunds
Verification of payee: payment service providers must check that the payee's name matches the account identifier for credit transfers and warn the payer of any mismatch, extending the checks already required for euro instant payments.
Bank-impersonation fraud: where a fraudster impersonates the customer's payment service provider, the provider must refund the customer in full, provided the customer reports the fraud to the police and informs the provider.
Fraud data sharing: providers may share fraud-related information with each other to prevent fraud.
Online platforms: platforms that are told about fraudulent content and fail to remove it can be liable to providers that have refunded defrauded customers.
Transparency and fees
Customers must be told about all charges before a payment is initiated, including currency conversion charges and any fixed fees for cash withdrawals at ATMs. Payment service providers must also show merchants the fees they charge. For businesses that compare providers, this should make like-for-like benchmarking easier.
Access to bank accounts and open banking
Banks must give payment institutions access to payment accounts on a non-discriminatory basis, which should reduce the sudden account closures that have long troubled the sector. Open banking interfaces face more prescriptive performance requirements, and customers will get a dashboard to see and manage the data access permissions they have granted.
What this means for UK firms
PSD3 and the PSR are EU law and do not apply in the UK, which has its own regime, including mandatory reimbursement for authorised push payment fraud and the FCA's strengthened safeguarding rules. UK groups with an EU-licensed entity, or UK businesses relying on an EU provider for euro accounts or e-money, will feel the changes through those relationships.
Questions to ask your provider now
How are you preparing for re-authorisation under PSD3, and when do you expect to apply?
Will anything change in how my funds are safeguarded?
How will verification of payee and the new fraud refund rules affect my payments and my customers?
Will your fees, statements or terms change to meet the new transparency rules?
If you are an EMI, will the change affect the e-money products I use today?
If you are choosing a provider in the meantime, these questions belong in your RFP and due diligence.
This guide is general information based on our experience and public sources, reviewed in October 2026. It is not legal, regulatory, tax or financial advice and does not constitute a legal opinion. Regulations and market practice change; you should obtain your own independent professional and legal counsel before acting on anything in it. 7 Seas Consultants Ltd holds no payment licence and is not authorised by the FCA or any other regulator.
Questions this guide answers.
Short answers to the questions we hear most.
When will PSD3 and the PSR apply?
Political agreement was reached in November 2025 and the final texts were published in April 2026. Most rules are expected to apply after a transition of around 18 to 21 months from entry into force, which on current timing points to late 2027 at the earliest and more likely 2028.
Will EMIs need a new licence under PSD3?
E-money institutions become a category of payment institution, and existing EMIs and payment institutions will need to be re-authorised within a transitional period.
Does PSD3 apply in the UK?
No. PSD3 and the PSR are EU law. The UK has its own regime, but UK groups with EU-licensed entities or EU providers will be affected through those relationships.
A buyer's guide to choosing a bank, e-money institution or payment institution for business accounts, IBANs and payouts: licence types, safeguarding, sector appetite, onboarding and the questions to ask before you sign.
How to plan and run an RFI and RFP for a processor, acquirer, issuer processor, BIN sponsor or banking partner: requirements, long lists, scoring models, supplier management, evaluation, negotiation and mobilisation.
How to check whether you are paying the market rate for card acquiring, accounts and transfers, FX and card issuing, and whether your contract terms and provider performance are in line with the market.
Free to read
Want help with this decision?
Book a free discovery call. Every client is different, so we start by listening.