EBA
European Banking Authority

PSD2 agents and distributors — the Article 14 register, the two-month clock and where liability sits
Using agents under PSD2 Article 19: what must be notified, the two months the home authority has to respond, why an agent…

Small payment institutions — the Article 32 exemption, and why it cannot be passported
The PSD2 Article 32 small payment institution regime: the EUR 3 million monthly-average ceiling, the one line that disapplies the passporting articles,…

SCA exemptions under the PSD2 RTS — thresholds, fraud rates and how the TRA exemption is lost
SCA exemptions explained: the EUR 50/150 contactless and EUR 30/100 low-value counters, the EUR 500/250/100 transaction-risk-analysis thresholds and their reference fraud rates,…

AMLA’s draft rules for cross-border suspicious-transaction reports
AMLA's draft RTS on cross-border suspicious-transaction reports: how FIUs identify affected member states, cross-border reports vs disseminations, and the 6 October 2026…

Major ICT incident reporting for payment firms — from PSD2 to DORA
Major ICT incident reporting for payment firms moved from PSD2 Article 96 to DORA Article 19 on 17 January 2025: the classification…