Published and sources checked: 2026-09-24. Scope: euro-area credit transfers and instant credit transfers in euro in the European Union, as amended by Regulation (EU) 2024/886 of 13 March 2024 (Official Journal L series 2024/886, 19 March 2024), together with the European Payments Council (EPC) Verification Of Payee (VOP) scheme rulebook version 1.0, which the EPC reports entered into force on 5 October 2025. This is public-document research for teams that present a bank-transfer payment step, not legal advice and not a statement about any particular provider's implementation. Deadlines differ for euro-area and non-euro-area payment service providers (PSPs), so confirm which category your provider falls in.
The check sits before the authorisation, not after it
Article 5c of Regulation (EU) 2024/886 requires the payer's PSP to offer a verification service, and it fixes where that service appears in the flow: the payer's PSP "shall perform the service ensuring verification immediately after the payer provides relevant information about the payee and before the payer is offered the possibility of authorising that credit transfer."[1] The same paragraph applies the obligation "regardless of the payment initiation channel used by the payer to place a payment order for the credit transfer",[1] which reaches payments started through an initiation service or an embedded flow rather than inside the bank's own screen.
For a checkout, that ordering is the whole design constraint: a payee name and account identifier are collected, a match result is produced and shown, and only then can the payer authorise. Any interface that presents "pay" as the immediate next step after the customer types an IBAN is describing a flow the regulation does not permit in scope.
What the payer is told, and why your copy cannot invent it
When the details do not match, the payer's PSP must "notify the payer thereof and inform the payer that authorising the credit transfer might lead to transferring the funds to a payment account not held by the payee indicated by the payer", and where the name and identifier "almost match", it "shall indicate to the payer the name of the payee associated with the payment account identifier".[1]
The result vocabulary is published in two places and they are worded differently. The European Central Bank (ECB) summarises the service as informing "payers of any discrepancies between the payment account identifier given and the name of the intended payee", with payers receiving a result "(i.e. "match", "close match", "no match" or "other") before initiating the payment".[2] The EPC scheme page describes the responding PSP answering with a VOP response "(e.g., match, no match, close match with the name of the payee, match/verification check not possible)" and then "immediately passes on the response to the payer".[3]
Two lists, two sources. The editorial rule that follows: display the wording your PSP actually returns, keep the code and the text it mapped to in your logs, and do not collapse "no match" into your own generic error string. The difference between a near match and a clear mismatch is the decision the payer is being asked to make.
It is PSP-to-PSP messaging, not a component you build
The EPC describes the exchange: the payer's PSP (the Requesting PSP) sends "a request to verify the IBAN and the name of the payee as given by the payer (the Requester), and potentially in addition, an unambiguous identification code (e.g., Value-Added Tax (VAT) number, an Legal Entity Identifier (LEI), social security code)", the Responding PSP "instantly verify whether the received data match with the concerned data registered for that payee", and the result goes back to the payer.[3] The same page is explicit that the scheme "provides PSPs with a messaging functionality", is "not a payment means or a payment instrument", and cannot be relied on to identify a person.[3]
Scope of the first rulebook is narrow on purpose: it "limits itself to verifications of a payee related to a SEPA Credit Transfer (SCT) or a SEPA Instant Credit Transfer (SCT Inst)", and the process "is designed to happen as quickly as possible and in any case to take no more than five seconds".[4] That five-second figure is the scheme's description of the verification exchange, not a promise about your checkout's total latency.
Nobody pays for the check itself
Article 5b(1) of the Regulation constrains charges for instant credit transfers: they "shall not be higher than the charges levied by that PSP in respect of sending and receiving other credit transfers of corresponding type", and Article 5b(2) states that "The services referred to in Article 5c shall be provided to all PSUs free of charge."[1] The ECB summary says the same in one line: the verification service "shall be offered free of charge to the payer".[2]
So a fee line labelled "payee verification" on a customer invoice has no basis in these rules. What you charge for the transfer itself is a separate pricing question that this article does not answer.
Deadlines you can quote, and where they apply
The ECB's implementation table gives the dates as: receiving instant payments, euro-area Member States, 9 January 2025, non-euro-area Member States, 9 January 2027; sending instant payments, euro-area, 9 October 2025, non-euro-area, 9 July 2027; equality of charges, euro-area, 9 January 2025, non-euro-area, 9 January 2027; verification of payee, euro-area Member States, 9 October 2025, non-euro-area Member States, 9 July 2027.[2] The Regulation's own text for Article 5c reads: "PSPs located in a Member State whose currency is the euro shall comply with this Article by 9 October 2025", with "9 July 2027" for PSPs in Member States whose currency is not the euro.[1]
On the scheme side, the EPC press release of 6 October 2025 states that "as of yesterday, 5 October 2025, the European Payments Council's (EPC) Verification Of Payee (VOP) scheme rulebook has officially entered into force", that the IPR obligation "will become effective on 9 October 2025 for Eurozone PSPs", and that participation "is expected to exceed 3,000 PSPs by July 2027, when the IPR obligations will be extended to non-Euro Area PSPs".[5] At the time of writing, the euro-area deadline has passed and the non-euro-area deadline has not; your provider's status is the fact that matters, not the table.
What this changes in your payment flow
The points below are editorial recommendations derived from the sources above, not obligations quoted from the Regulation:
- Add an explicit state between "transfer details entered" and "payer authorised", and make sure your success, abandonment and timeout handlers can all be reached from it. A payer who reads "no match" and stops is behaving correctly.
- Store the result code your PSP returned alongside the transfer, and keep your UI text and your stored code in the same record, so a dispute can be reconstructed later.
- Do not re-derive a match yourself. The exchange is between PSPs; your application passes names and identifiers through and displays the outcome.[3]
- Do not present the result as identity proof. The scheme explicitly does not identify a person, so a "match" is a statement about a name against an account record, nothing more.[3]
- Separate the verification step from your own fraud checks. Regulation and scheme texts describe the name check; your acceptance rules remain yours.
What this does not settle
It does not tell you whether your provider has implemented the service, or how it words its results; ask it. It does not cover national rules, non-euro currencies, or payment instruments outside the SCT and SCT Inst scope of rulebook version 1.0. The scheme evolves: the EPC's calendar lists the publication of version 1.1 of the VOP scheme rulebook on 16 March 2026 and its effective date as 20 September 2026, alongside a public consultation on version 2.0.[3] Re-check which version applies before you rely on any detail here.
Sources and limits
Checked 2026-09-24. The Regulation is quoted from the Official Journal text; the ECB and EPC pages do not carry a stated publication date for the pages retrieved, except the EPC press release dated 6 October 2025. Retrieval is not publication. Local transposition, provider implementation and any card-scheme rules are outside this scope; no legal or regulatory assurance is offered.
- [1] Regulation (EU) 2024/886 amending Regulations (EU) No 260/2012 and (EU) 2021/1230 and Directives 98/26/EC and (EU) 2015/2366 as regards instant credit transfers in euro — Published: Official Journal 19 March 2024, act dated 13 March 2024; checked: 2026-09-24.
- [2] Instant Payments Regulation | European Central Bank — Published: not stated on the page; checked: 2026-09-24.
- [3] Verification Of Payee | European Payments Council — Published: not stated on the page; checked: 2026-09-24.
- [4] Publication of the first Verification Of Payee scheme rulebook — Published: not stated in the retrieved text; checked: 2026-09-24.
- [5] EPC press release: The Verification Of Payee scheme rulebook now into force — Published: 6 October 2025; checked: 2026-09-24.