The Effect of PSR's APP Fraud Regulation Since Its Introduction
Written by Matt Cooper

The Effect of PSR's APP Fraud Regulation Since Its Introduction

The Payment Systems Regulator's (PSR) Authorised Push Payment (APP) fraud reimbursement requirement, which came into effect on 7 October 2024, represents a landmark regulatory intervention in the UK's financial services sector. This mandatory framework has fundamentally transformed how victims of APP fraud are protected and compensated, marking the world's first comprehensive mandatory reimbursement scheme for this type of fraud[1][2].

Background and Implementation

The PSR's APP fraud reimbursement requirement emerged from mounting concerns about the inconsistent treatment of fraud victims across different payment service providers. Prior to the regulation, reimbursement was governed by the voluntary Contingent Reimbursement Model (CRM) Code, which only covered around 10 major banking groups representing approximately 90% of recorded APP frauds[3]. Under this voluntary system, reimbursement rates varied significantly between institutions, with some banks reimbursing 95% of cases while others reimbursed as little as 3%[4].

The regulation applies to all payments made through the Faster Payments System and CHAPS, covering domestic UK bank transfers up to a maximum reimbursement limit of £85,000[5]. This limit was reduced from the originally proposed £415,000 following industry concerns about the disproportionate impact on smaller firms[6]. The framework requires both sending and receiving payment service providers to share reimbursement costs on a 50:50 basis, creating unprecedented incentives for fraud prevention across the entire payment ecosystem[1].

Key Statistical Outcomes

Reimbursement Performance

The regulation has delivered significant improvements in victim protection during its first six months of operation (October 2024 - March 2025):

  • 87% reimbursement rate for in-scope APP fraud claims, compared to 68% under the voluntary system in 2023[7]
  • £66 million returned to victims in the first six months[8]
  • 109,000 total claims reported, with 77,000 falling within the scope of the reimbursement policy[7]
  • 86% of claims were processed and closed within five business days[7]
  • 60 firms now actively reimbursing victims, representing a sixfold increase from the approximately 10 firms under the voluntary code[9]

Fraud Volume and Value Trends

The regulation's implementation coincided with notable changes in APP fraud patterns:

Pre-regulation trends (2022-2023):

  • Total APP fraud losses decreased by 12.4% from £389 million (2022) to £340.7 million (2023)[10]
  • Case volume increased by 12.5% from 224,603 to 252,626 cases[10]
  • Reimbursement rates improved from 61% to 67%[10]

Post-regulation context (2024):

  • Total APP fraud losses increased to £450.7 million, representing a 32.3% rise from 2023[11]
  • Case volume decreased by 26.4% to approximately 186,000 cases[11]
  • This suggests fraudsters are conducting fewer but higher-value attacks[11]

Claims Processing Efficiency

The regulation has established consistent minimum standards for claims handling:

  • 3% of claims were rejected due to consumers failing to meet the "consumer standard of caution"[7]
  • The majority of rejections related to gross negligence, which represents a high legal threshold[12]
  • Vulnerable consumers are specifically protected from both the consumer standard of caution exception and the £100 excess fee[5]

Industry Coverage and Scope

The mandatory framework has dramatically expanded the reach of APP fraud protection:

  • All payment service providers participating in Faster Payments and CHAPS are now covered, including banks, building societies, e-money institutions, and fintech companies[13]
  • Coverage extends to individuals, microenterprises, and small charities with annual income under £1 million[14]
  • The regulation excludes credit unions, municipal banks, and national savings banks[13]

Fraud Prevention Incentives

The 50:50 cost-sharing mechanism has created powerful incentives for fraud prevention:

  • Receiving firms now face financial consequences for hosting fraudulent accounts, incentivising stronger know-your-customer controls[15]
  • Sending firms maintain responsibility for transaction monitoring and customer protection[15]
  • The PSR reports increased collaboration between payment service providers in fraud prevention efforts[16]

Unintended Consequences and Adaptations

The regulation has prompted several notable behavioural changes:

Fraud Displacement

Industry analysis suggests fraudsters are adapting their tactics in response to the new rules:

  • International payments saw an 81% increase in fraud cases and 93% increase in losses to £50 million[17]
  • Remote purchase fraud increased by 22% in cases, suggesting criminals are shifting to card-based fraud[18]
  • Some experts warn that criminals may be exploiting the fact that international payments fall outside the PSR's reimbursement scope[17]

Moral Hazard Concerns

Despite initial concerns about consumer complacency, the data suggest minimal moral hazard effects:

  • Only 3% of claims were rejected for failing to meet consumer caution standards[7]
  • The PSR reports "no indication of people being significantly less cautious" in their payment behaviour[7]

Regulatory Monitoring and Compliance

The PSR has established comprehensive monitoring systems:

  • Pay.UK operates a Reimbursement Claims Management System to facilitate cost-sharing between firms[19]
  • Payment service providers must report detailed data on fraud cases, reimbursements, and prevention measures[19]
  • The PSR publishes quarterly performance data to maintain transparency[7]

Future Outlook and Challenges

Looking ahead, several key challenges and opportunities emerge:

Cross-Border Fraud

The regulation's domestic focus has created potential vulnerabilities in cross-border payments, where fraudsters may exploit regulatory gaps and jurisdictional complexities[20]. Industry experts highlight that international payments remain outside the reimbursement framework, potentially creating displacement effects[20].

Technology and Innovation

The regulatory pressure has accelerated investment in fraud prevention technologies:

  • Enhanced artificial intelligence and machine learning systems for transaction monitoring[21]
  • Improved behavioural analytics to detect suspicious payment patterns[21]
  • Greater emphasis on real-time data sharing between institutions[21]

Regulatory Evolution

The PSR is scheduled for abolition in 2025, with its responsibilities transferring to the Financial Conduct Authority (FCA)[22]. This transition will likely bring APP fraud reimbursement under the broader Consumer Duty framework, potentially expanding protection requirements[22].

Conclusion

The PSR's APP fraud reimbursement requirement has achieved significant success in its first six months of operation, delivering substantial improvements in victim protection and reimbursement consistency. The 87% reimbursement rate represents a marked improvement from the 68% achieved under the voluntary system, while the sixfold increase in participating firms demonstrates the regulation's comprehensive reach[9][7].

However, the regulation has also prompted adaptive responses from fraudsters, with evidence of displacement towards international payments and other fraud types. The 81% increase in international payment fraud cases and 93% increase in losses suggests that comprehensive fraud prevention requires continued vigilance and potential expansion of regulatory frameworks[17].

The regulation's success in establishing consistent minimum standards while maintaining relatively low rejection rates (3% for consumer caution failures) demonstrates that effective consumer protection can be achieved without creating excessive moral hazard[7]. As the regulatory framework evolves under FCA oversight, the foundations established by the PSR provide a robust platform for continued enhancement of fraud victim protection in the UK's payment ecosystem.


Sekura.id is a global leader in mobile identity and network signal intelligence, partnering directly with mobile operators to deliver real-time, privacy-first solutions that protect against fraud and build digital trust. Trusted by banks, fintechs and platforms across more than 20 countries, Sekura.id enables seamless verification and authentication using just the mobile number. Its in-market APP fraud prevention product, ScamSignal, uses live mobile network data to detect signs of coercion, such as long incoming calls during a transaction, giving banks the ability to stop scams before the money leaves. It’s real-time protection that prevents loss, reduces refunds and restores confidence. Find out more at https://sekura.id/banking


1. https://www.addleshawgoddard.com/en/insights/insights-briefings/2024/financial-regulation/financial-regulation-in-the-know-payments/authorised-push-payment-fraud-update/

2. https://www.psr.org.uk/media/rhelv4op/ps25-5-app-scams-reimbursement-consolidated-policy-statement-may-2025.pdf

3. https://www.freshfields.com/en/our-thinking/briefings/2024/09/authorised-push-payment-fraud-a-new-mandatory-reimbursement-regime-for-uk-psps/

4. https://www.pwc.co.uk/industries/financial-services/understanding-regulatory-developments/psr-sets-the-final-rules-on-app-scam-reimbursements.html

5. https://www.farrer.co.uk/news-and-insights/authorised-push-payment-fraud-and-mandatory-reimbursement/

6. https://www.twobirds.com/en/insights/2024/uk/new-rules-for-reimbursement-on-authorised-push-payment-fraud-app-are-coming-into-force-in-the-uk

7. https://www.mishcon.com/news/upcoming-rules-for-authorised-push-payment-app-fraud-mandatory-reimbursement

8. https://www.wearepay.uk/app-authorised-push-payment-reimbursement-policy/

9. https://www.ukfinance.org.uk/news-and-insight/blog/new-challenges-tackling-app-fraud

10. https://www.hoganlovells.com/en/publications/uk-app-fraud-mandatory-reimbursement-regime-next-steps-for-psps-and-overview-of-key-publications

11. https://www.nationwide.co.uk/help/fraud-and-security/payment-systems-regulator-app-scams

12. https://www.psr.org.uk/news-and-updates/latest-news/news/psr-confirms-implementation-date-for-app-scam-protections-as-7-october-and-publishes-high-value-app-scams-review-and-consultation/

13. https://www.psr.org.uk/our-work/app-scams/

14. https://www.fca.org.uk/publication/correspondence/dear-ceo-letter-expectations-app-fraud-reimbursement-payment-emoney-institutions.pdf

15. https://www.psr.org.uk/information-for-consumers/app-fraud-reimbursement-protections/

16. https://www.regulationtomorrow.com/eu/fca-consults-on-guidance-changes-to-support-new-legislation-addressing-app-fraud/

17. https://www.fca.org.uk/publication/guidance-consultation/gc24-5.pdf

18. https://perspectives.bclplaw.com/emerging-themes/people-in-focus/consumers/mandatory-reimbursement-for-app-fraud/

19. https://www.psr.org.uk/publications/policy-statements/ps247-faster-payments-app-scams-reimbursement-requirement-confirming-the-maximum-level-of-reimbursement/

20. https://www.aoshearman.com/en/insights/ao-shearman-on-fintech-and-digital-assets/the-uks-authorised-push-payment-app-fraud-reimbursement-scheme

21. https://www.tlt.com/insights-and-events/insight/uk-finance-annual-fraud-report-2025/

22. https://www.thistleinitiatives.co.uk/blog/psr-publishes-app-fraud-performance-data


Matt Cooper

Head of Global Marketing | XConnect | Mobile Identity Marketing Expert

3mo

TL;DR: In six months, the UK’s mandatory APP fraud reimbursement regime has transformed outcomes for victims: 87% of in-scope claims reimbursed, £66m returned, and claim resolution in five days or less. A real win for consumer protection. But fraudsters adapt fast: case volumes are down, losses are up. APP fraud has gone premium. And now we’re seeing an 81% rise in international fraud cases, a clear sign of displacement. It’s a strong start, but if prevention doesn’t scale to match, reimbursement will simply become the cost of being reactive. Time to harden the ecosystem, not just patch the consequences.

To view or add a comment, sign in

More articles by Sekura.id

Others also viewed

Explore content categories