PSR welcomes APP scam voluntary code

The Payment Systems Regulator (PSR) has welcomed a new voluntary industry code of good practice to protect people from Authorise Push Payment (APP) scams which will take effect from 28 May.

APP scams are where a fraudster tricks an individual consumer or micro business to instruct their payment services provider - such as their bank - to send money from their account to an account controlled by that fraudster.

At the beginning of 2018, the PSR set up a dedicated steering group, made up of consumer representatives and the industry, to design and implement a code that would work for everyone.

The development and subsequent implementation of the code follows significant work by the steering group, completed within the ambitious timeframe driven by the PSR. This looked to understand the scale and technicalities of the problem, along with setting out how to prevent these types of scam from happening in the future and reimburse victims if they do nothing wrong.

The regulator said the code reflects its continued strong belief that if somebody has done everything they can reasonably do to protect themselves, they should be reimbursed – so even if blame can’t be attributed to either the consumer or the banks, consumers will be reimbursed.

In a further move, the banks have agreed to fund an initial contribution to reimburse victims in the no-blame scenario as an interim measure, until the final long-term funding arrangements are put in place from January 2020. The PSR promised to keep the progress of this under close review.

PSR managing director Hannah Nixon said: “The code is a testament to the significant work that has gone into protecting people from APP scams, it shows that by bringing together consumer and industry representatives, very positive outcomes can be achieved.

“We’re particularly pleased that the steering group has been able to navigate and agree a way to reimburse victims when neither victim nor bank has done anything wrong – this was a tough issue that rightly involved much discussion, but the banks have done the right thing for their customers in backing this measure.

The final code will be implemented on 28 May, at which point the protections and standards will be implemented by banks and other payment service providers.

    Share Story:

Recent Stories


Safeguarding economies: DNFBPs' role in AML and CTF compliance explained
Join FStech editor Jonathan Easton, NICE Actimize's Adam McLaughlin and Graham Mackenzie of the Law Society of Scotland as they look at the role Designated Non-Financial Businesses and Professions (DNFBPs) play in the financial sector, and the challenges they face in complying with anti-money laundering and counter-terrorist financing regulations.

Ransomware and beyond: Enhancing cyber threat awareness in the financial sector
Join FStech editor Jonathan Easton and Proofpoint cybersecurity strategist Matt Cooke as they discuss the findings of the State of the Phish 2023 report, diving into key topics such as awareness of cyber threats, the sophisticated techniques being used by criminals to target the financial sector, and how financial institutions can take a proactive approach to educating both their employees and their customers.

Click here to read the 2023 State of the Phish report from Proofpoint.

Cracking down on fraud
In this webinar a panel of expert speakers explored the ways in which high-volume PSPs and FinTechs are preventing fraud while providing a seamless customer experience.

Future of Planning, Budgeting, Forecasting, and Reporting
Sage Intacct is excited to present FSN The Modern Finance Forum’s “Future of Planning, Budgeting, Forecasting, and Reporting Global Survey 2022” results. With participation from 450 companies around the globe, the survey results highlight how organisations are developing their core financial processes by 2030.