Liability, fraud prevention and the battle over authorisation | ALLES LEGAL #108

🎧 The EU aims to make payments more secure – but what does this mean for liability? Tune in now to episode 108 of Alles Legal – Fintech-Recht kompakt. Tune in now!

Podcast: https://paymentandbanking.podigee.io/737-alles-legal-psd3-psr-haftung-betrugspravention-und-der-streit-um-die-autorisierung/

In this episode, Peter Frey and host Dana Wondra discuss the new liability rules under PSD3 and PSR. The focus: authorised vs unauthorised payments and new EU-wide measures for tackling fraud.

When authorised payments become a liability

The third instalment in our PSD3 series explores how the EU is tackling social engineering – and what this means for payment service providers. For the first time, liability might apply even when a payment was formally authorised, due to identity theft or psychological deception.

New duties and stricter requirements

Peter Frey explains how training, customer communication and preventive measures like the IBAN/name check are becoming central. The burden of proof is shifting, and the tension between security and user-friendliness is intensifying.

About this podcast

Alles Legal – Fintech Recht Kompakt delivers sharp, weekly insights into legal and compliance matters in the world of banking. (in German only)
This podcast is a collaboration between Payment & Banking and PayTechLaw.
Each Wednesday, we unpack the legal developments shaping the financial world – clearly, concisely, and without the legal jargon.
Since 2021, PayTechLaw authors and Annerton attorneys have brought depth and clarity to complex topics.
Whether it’s PSD3, DORA, or FiDA – we provide the legal context you need.
In 20 minutes. No detours.



By continuing, you accept our privacy policy.
You May Also Like
Finale AMLA RTS zur Kundensorgfalt
Read More

Final RTS on Customer Due Diligence under Article 28 AMLR: What Has Changed Since the Consultation

On 30 September 2026, AMLA published its final report on the regulatory technical standards (RTS) under Article 28(1) AMLR, which specify the information obliged entities must collect and verify as part of customer due diligence. Compared with the February consultation draft, the text has been reduced from 33 to 29 articles and made considerably more flexible.
Read More