Verification of payee: the warning you can ignore
An instant credit transfer settles in seconds and cannot be pulled back. That is its whole value and its whole danger, and it is why European law attached a check to the front of it: before you confirm, your provider must tell you whether the name you typed matches the name on the account behind the IBAN. The check is genuinely useful and considerably narrower than it sounds.
The legal instrument is Regulation (EU) 2024/886, which amends the earlier regulation on credit transfers and direct debits in euro to deal with instant payments. It does several things at once: it obliges providers that offer euro credit transfers to offer instant ones, it requires charges for instant transfers to be no higher than for ordinary ones, and it introduces the service usually called verification of payee.
The mechanics are simple by design. The payer enters the payee's name and IBAN. Before the transfer is authorised, the payer's provider checks with the payee's provider whether the two belong together, and reports back. On a mismatch, the payer is warned, and may then proceed anyway or stop. The regulation does not block the payment. It makes sure the payer was told.
That is the first limit, and it is the one with consequences. The warning exists to interrupt a specific and very effective crime: a fraudster who persuades somebody to send money to an account that is not the one they think they are paying. Interrupting it requires the payer to read the warning and act on it. A payer who has been talked into the transfer by somebody on the phone is precisely the payer least likely to stop, which is why the service is a reduction in a risk rather than an elimination of it.
The second limit is what matching means. Account names are held in different formats across institutions, and the comparison is not a simple string equality: abbreviations, middle names, trading names and company-form suffixes all vary legitimately. Providers have to decide what counts as a close enough match, which means the service can report a mismatch for a payment that is perfectly fine, and a reader who learns to dismiss the warning has unlearned the protection in about a fortnight. Warning fatigue is the known failure mode of every system of this shape.
The third limit is scope. The regulation is about euro credit transfers in the single euro payments area. A transfer in another currency, or outside the area, is a different matter, and so is a card payment, which has an entirely separate dispute framework. Nothing in this regulation reaches those, and a payer who believes a name check is standard everywhere will eventually make a payment where it is not.
What it actually changes for a payer
Two things, both real. It catches the honest mistake — a mistyped digit, an old IBAN for a payee who has changed bank — before the money becomes irretrievable, which is a category of loss that used to be slow and painful to resolve. And it changes the conversation after a fraud: the fact that a warning was shown, and either heeded or clicked through, is now part of the record, and that record is where liability arguments start.
The sensible operating rule for anyone paying a new counterparty follows from the irreversibility rather than from the check. Verify the account details through a channel the person who gave them to you did not choose — a number you already had, not the one in the email — and send a small amount first where the sum is large. Both are older than the regulation and neither has been made unnecessary by it.
Why the obligation on charges matters as much
The provision that gets least attention may be the most consequential. By requiring that instant transfers cost no more than ordinary ones, the regulation removes the pricing that kept instant payments a premium product, and a payment rail that is free at the point of use gets used. The name check exists because the legislator expected exactly that, and understood what happens when an irreversible instrument becomes the default.