PSD3 and PSR explained: how new EU payment rules change who can move your Euros
- PSD3 and the PSR give licensed non-banks a legal right to direct central bank access — no sponsor bank required.
- The unlock is an amendment to the Settlement Finality Directive, opening SEPA, TIPS and TARGET2 to payment institutions.
- Direct access can cut per-transaction clearing costs by 50-70% for high-volume platforms.
- Core PSR rules apply in early 2028; the ECB onboarding window opens in early 2027 with limited capacity.
Until now, fintechs and payment platforms have needed traditional banks to access the payments infrastructure that settles Euros. Banks could charge markups, de-risk and offboard fintechs at will because they saw every transaction moving on their rails.
Following a landmark political agreement in late 2025 and the subsequent release of the final legal texts in April 2026, the EU is moving forward with PSD3 and the Payment Services Regulation (PSR). These two pieces of legislation fundamentally reorder who can participate in European payments and on what terms. For the first time, licensed non-bank payment institutions will have a legal right to direct access to central bank payment systems, bypassing traditional sponsor banks entirely.
Many believe this shift is as significant as Open Banking was for account access. This article explains what changes, why it matters competitively and what you must do to prepare.
What is PSD3 and PSR?
PSD2 is the directive that shaped European payments over the past decade but it left structural limitations unresolved. Rules remained fragmented across 27 EU Member States and forced reliance on sponsor banks, creating bottlenecks and risk concentration. Non-bank payment institutions, like Electronic Money Institutions (EMIs) and fintechs, remained dependent on traditional banks to access the central bank payment systems that settle Euros.
In November 2025, the EU agreed on PSD3 and the Payment Services Regulation (PSR). PSD3 is a directive requiring national transposition by 2028, which means PSR is a directly applicable regulation that supersedes national law across all EU Member States.
| Sponsor bank model (PSD2) | Direct access (PSD3 / PSR) | |
|---|---|---|
| Clearing access | Routed via a sponsor bank | Direct settlement account at the NCB |
| Clearing cost | Wholesale cost plus bank markup | Wholesale cost (50-70% lower) |
| Legal basis | PSD2 — fragmented across 27 states | PSR — directly applicable EU-wide |
| Offboarding risk | De-risking with 30 days' notice | Legal right of access |
| Settlement finality | Dependent on sponsor bank | Same finality and speed as a bank |
Together, they accomplish something unprecedented: they grant licensed non-bank payment institutions the legal right to access central bank payment systems directly, bypassing traditional intermediary networks entirely. The countdown to 2028 has begun, with compliance deadlines and extended windows for existing participants fast approaching.
For fintech founders, payment architects and treasury teams, this represents a structural reordering of the payments market.
How PSD3 swaps the sponsor bank model for direct central bank access
The historic bottleneck in European payments has been centralised access. The European Central Bank (ECB) and national central banks operated a closed system in which licensed banks could hold settlement accounts and participate directly in SEPA clearing and TIPS (TARGET Instant Payment Settlement). Everyone else, including fintechs, payment platforms and EMIs, had to route through a sponsor bank, creating dependency and operational constraints.
PSD3 and PSR change this through a critical amendment to the Settlement Finality Directive (SFD). This regulatory unlock officially legalises direct clearing participation for non-banks. Licensed payment institutions will now establish direct settlement and safeguarding accounts with national central banks. The ECB's historic restrictions on EMI participation in real-time gross settlement are removed.
What does this mean operationally? A fintech or EMI no longer needs a sponsor bank to clear and settle Euro payments. They connect directly to SEPA infrastructure, TIPS and TARGET2 networks. Their payments settle with the same finality and speed as a traditional bank's payments. They hold their own settlement account at the central bank and can manage their own intraday liquidity.
The regulatory mechanism is straightforward: the SFD amendment formally recognises that non-banks can participate in real-time payment systems without jeopardising financial stability. The ECB and national central banks are obligated to provide access to licensed payment institutions on the same technical terms as banks.
Payment institutions must achieve direct access by the compliance window in 2028 but some will move faster. Those with direct access before 2028 will gain competitive positioning before the market-wide transition.
Why PSD3 direct access gives EMIs a competitive advantage
The indirect sponsor bank model carries systemic risks that few outside the industry appreciate. A sponsor bank is simultaneously an infrastructure provider and a competitor. They see every transaction, every customer and every volume trend. They can de-risk their fintech exposure and offboard with 30 days' notice, which has happened repeatedly.
The economics of this arrangement have always favoured banks, as they can charge markup fees on top of the wholesale clearing cost. Direct access breaks this model. When a fintech holds its own settlement account at the central bank, it can access SEPA clearing at wholesale cost, not retail markup. For high-volume payment platforms, direct access can reduce per-transaction clearing costs by 50-70%.
Potential reduction in per-transaction clearing costs for high-volume platforms
ECB dedicated onboarding window opens — capacity is limited
Core PSR rules become applicable and enforceable EU-wide
Beyond cost, there's the strategic advantage. Direct access means control of payment infrastructure. EMIs and fintechs can decide their settlement cadence, liquidity management and customer experience. They are no longer constrained by a sponsor bank's operational hours or competitive anxieties.
This shift also breaks traditional banks' monopoly on retail Euro clearing. Direct access to central bank payment systems was once their exclusive advantage. With PSD3/PSR, licensed non-banks now have Electronic Money Institution regulatory advantages and feature parity with banks for SEPA participation. Direct access for payment institutions erodes the traditional bank moat.
So, what happens to sponsor banks? Some will transition to service providers, charging for integrations and compliance support, while others will compete on wholesale pricing and customer experience.
For EMIs and fintechs, direct access is the competitive advantage that levels the playing field. They can now offer bank-grade settlement finality and speed without depending on a traditional bank. If you are comparing what providers actually charge today, our breakdown of Euro IBAN account fees shows where clearing markups surface on your invoice.
SEPA direct technical requirements: ISO 20022 and central bank infrastructure
Accessing central bank payment systems directly is a massive operational leap from using sponsor bank APIs. It means building direct connectivity to central bank infrastructure, managing real-time gross settlement and taking on direct liability for payment security.
The technical requirements start with connectivity. A direct connection to SEPA clearing networks, TIPS (TARGET Instant Payment Settlement), and TARGET2 must be established. As this involves connecting to critical financial infrastructure, it isn't a simple API integration. The technical protocols, security standards and operational requirements are substantially stricter than sponsor bank integrations.
Participants will also need real-time gross settlement (RTGS) capability. This system will send individual payment messages to the central bank, receive settlement confirmation within seconds and manage intraday queuing when liquidity is constrained. The ISO 20022 message formatting must be implemented, as it's the global standard for payment messaging that the ECB mandates. Payments that don't conform are rejected at the clearing layer.
Intraday liquidity management also becomes the EMI or fintech's responsibility. Direct access means managing payment queuing and cash positioning. Algorithms must be implemented to optimise payment flows throughout the day, prioritise critical payments and manage positioning across multiple accounts.
Fraud defence must also become part of the technical infrastructure, if it hasn't already, because direct access brings direct liability. The PSR mandates Verification of Payee (VoP) requirements for all credit transfers, including standard SEPA and instant SEPA payments. Our guide to SEPA Instant payments in 2026 covers how those obligations land on treasury and compliance teams.
While core PSR rules hit in early 2028, standard SEPA transfers benefit from an extended 27-month grace period that pushes enforcement to late 2028 or early 2029. Instant SEPA payments remain governed by the earlier mandates of the Instant Payments Regulation.
If you're implementing these systems, they must automatically verify that the recipient's name matches the IBAN before releasing funds. When there's a mismatch, you must display a real-time warning to the payer before authorisation, so the customer can proceed at their own liability or cancel the transfer. This process is highly effective at preventing Authorized Push Payment (APP) fraud.
Strong Customer Authentication (SCA) requirements are equally critical. You must implement multi-factor authentication for payment initiation, especially for high-value or cross-border transfers. Direct central bank access means implementing robust authentication that you control entirely.
These technical requirements are substantial. Systems must handle millions of messages per day, maintain 99.99% uptime, implement cryptographic standards that meet central bank specifications and integrate seamlessly with customer-facing systems. For most fintechs, this requires either new infrastructure or a BaaS provider that has a ready-made solution.
PSR compliance timeline and central bank onboarding: the 2027 and 2028 deadlines
PSD3 and PSR compliance follows a specific, dual-wave timeline.
The PSR is directly applicable across all EU Member States. The Regulation becomes applicable and enforceable 21 months after it enters into force. This pushes the actual compliance deadline into early 2028, with grandfathering windows for existing EMIs and payment institutions extending to mid-to-late 2028.
The EU agrees on PSD3 and the Payment Services Regulation.
The published texts confirm direct central bank access for licensed non-banks via the Settlement Finality Directive amendment.
A dedicated window for payment institutions to onboard to central bank infrastructure. Capacity is limited.
Applicable and enforceable 21 months after entry into force, across all EU Member States.
Windows for existing EMIs and payment institutions close; PSD3 national transposition due.
Standard SEPA transfers benefit from an extended 27-month grace period. Instant SEPA remains governed by the earlier Instant Payments Regulation mandates.
For payment institutions, this creates a critical decision point in 2026–2027. You must achieve direct central bank access by the compliance window or remain dependent on sponsor banks. The ECB has committed to open a dedicated onboarding window in early 2027 but capacity is limited. Assessing your readiness now gives you time to prepare.
What does PSD3 and PSR readiness look like?
Audit your current architecture to document exactly which payment flows depend on your sponsor bank and identify which can migrate to direct access.
The PSR imposes strict requirements on how payment institutions must segregate customer funds. You must assess your current arrangements and decide whether they need restructuring to comply with direct central bank account requirements.
Engage with your national central bank (NCB) early to understand their specific technical requirements, onboarding timelines and operational procedures. Early engagement prevents surprises when your technical preparation is underway.
You can build direct central bank connectivity in-house if you have engineering capacity and compliance expertise. Alternatively, you can partner with a BaaS provider that has already achieved direct access.
Direct central bank access requires extensive testing in a sandboxed environment before you go live. You'll need dedicated compliance staff to manage the regulatory relationship with your national central bank.
Your PSD3 and PSR action plan: preparing for 2027 and 2028
Institutions that gain direct central bank access first will have operational advantages that include lower clearing costs, faster settlement and a differentiated customer experience.
The shift from PSD2 to PSD3/PSR fundamentally reorders who can participate in the payments market and on what terms, so every market participant should take action now.
Audit sponsor bank dependencies and initiate your direct access roadmap. Engage with your national central bank and evaluate infrastructure options.
Ask them directly about their direct central bank access plan and timeline.
Assess competitive implications sooner rather than later, as non-banks with direct access are no longer dependent on you for payment infrastructure.
FAQs about PSD3 and the PSR
What is the difference between PSD3 and the PSR?
PSD3 is a directive requiring national transposition by 2028, so each Member State writes it into its own law. The PSR is a directly applicable regulation that supersedes national law across all EU Member States without transposition, which removes the fragmentation that existed under PSD2.
Does PSD3 mean EMIs no longer need a sponsor bank?
Yes. Through an amendment to the Settlement Finality Directive, licensed payment institutions can establish direct settlement and safeguarding accounts with national central banks and connect directly to SEPA, TIPS and TARGET2. A sponsor bank is no longer required to clear and settle Euro payments.
When do PSD3 and PSR compliance deadlines hit?
The PSR becomes applicable 21 months after entering into force, pushing the compliance deadline into early 2028, with grandfathering windows for existing EMIs and payment institutions extending to mid-to-late 2028. The ECB has committed to open a dedicated onboarding window in early 2027, with limited capacity.
What is Verification of Payee under the PSR?
The PSR mandates Verification of Payee for all credit transfers, including standard and instant SEPA payments. Systems must automatically verify that the recipient's name matches the IBAN before releasing funds and display a real-time warning to the payer on a mismatch, which is highly effective at preventing Authorised Push Payment fraud.
How much can direct central bank access reduce clearing costs?
When a fintech holds its own settlement account at the central bank it accesses SEPA clearing at wholesale cost rather than retail markup. For high-volume payment platforms, direct access can reduce per-transaction clearing costs by 50-70%.
Ready to get started? Open a business account for a euro-native account built on licensed EMI infrastructure — native SEPA Instant and 24/7/365 settlement, with no sponsor bank in the middle.