SEPA Instant Payments Regulation – A Practical Guide for Luxembourg PSPs
Last updated: March 2026
Luxembourg credit institutions had their first deadline on 9 January 2025. They had to be reachable for instant credit transfers in euro by that date. Their second deadline, sending instant payments, hit on 9 October 2025. For Luxembourg banks that were already live on SCT Inst voluntarily, the regulation mostly formalized existing practice and added new obligations around verification of payee, charges parity, and daily sanctions screening. For banks that had not yet offered instant payments, the 2025 deadlines were a hard forcing function.
Payment institutions and e-money institutions in the euro area are on a different track. Their deadline to both receive and send instant credit transfers is 9 April 2027. That is later, but it is not far away, and the implementation work is substantial. If your payment institution or e-money institution has SEPA credit transfer services in euro and has not started preparing for instant payments, the time to start is now.
Regulation (EU) 2024/886, the Instant Payments Regulation (IPR), published on 19 March 2024, amends the SEPA Regulation (Regulation (EU) No 260/2012). The obligations are real, the deadlines are different by entity type, and the compliance work spans payment infrastructure, fraud controls, pricing, and regulatory reporting. This article covers what each entity type must do and by when.
Related reading: PSD2 Reporting Requirements
What the Regulation Requires
The IPR inserts new articles into the SEPA Regulation. Every PSP that offers SEPA credit transfers in euro must also offer instant credit transfers in euro. That single sentence covers five distinct obligations, each with its own deadline and its own implementation challenge.
Receive Instant Credit Transfers (Article 5a)
Every PSP that offers to receive SEPA credit transfers in euro must also be reachable for SCT Inst in euro. Funds must be made available to the payee within ten seconds of receipt by the payer’s PSP, at any time of day, on any calendar day of the year.
For euro area credit institutions (including Luxembourg banks), this applied from 9 January 2025. For euro area payment institutions and e-money institutions, the deadline is 9 April 2027. For non-euro area credit institutions, the deadline is 9 January 2027.
Send Instant Credit Transfers (Article 5b)
Every PSP that offers to send SEPA credit transfers in euro must also offer to send SCT Inst in euro. The payer must be able to initiate an instant credit transfer at any time, with 24/7/365 availability and the same ten-second processing requirement.
For euro area credit institutions, this obligation applied from 9 October 2025. For euro area payment institutions and e-money institutions, the deadline is 9 April 2027. For non-euro area credit institutions, the deadline is 9 July 2027.
Charges Parity
The charges levied for sending or receiving an instant credit transfer must not exceed the charges for the corresponding non-instant SEPA credit transfer. This is a price cap tied to each institution’s own pricing, not a fixed regulatory amount. If a bank charges EUR 0.20 for a standard SEPA credit transfer, it cannot charge more than EUR 0.20 for an instant transfer on the same account.
This obligation applies from the same dates as the send and receive obligations for each entity type. For credit institutions in the euro area, charges parity was required from January and October 2025 respectively. For PIs and EMIs in the euro area, it applies from 9 April 2027. If your institution charged a premium for instant payments when they were optional, that premium must go by the applicable deadline.
Free SEPA credit transfers mean free instant credit transfers. This is the most commercially sensitive element for institutions whose revenue model included an instant payment fee. It is not a transitional rule. There is no phase-out period for the premium.
Verification of Payee (Article 5c)
Before executing a credit transfer, the payer’s PSP must check whether the payee’s IBAN matches the name provided by the payer, and inform the payer of any discrepancy. This is the confirmation of payee or IBAN-name check requirement. It applies to both instant and non-instant credit transfers, not just to instant payments. The obligation comes from the IPR, but its scope is broader.
For euro area credit institutions, the deadline was 9 October 2025. For euro area payment institutions and e-money institutions, the deadline is 9 April 2027. For non-euro area credit institutions, the deadline is 9 July 2027.
This is the most operationally complex obligation. It requires inter-PSP communication: the payer’s PSP must be able to query the payee’s PSP for name verification, regardless of where the payee’s PSP is located within SEPA. The EPC has developed the SEPA Verification of Payee (VoP) scheme to provide the interoperability layer. PSPs must implement the scheme or an equivalent solution.
In my experience with payment infrastructure projects, verification of payee is where implementation effort concentrates. Connecting to the instant payment rails (TIPS or RT1) is largely an infrastructure task. The name-matching logic is where the hard decisions sit: how to handle partial matches, name variations, legal entity names versus trading names, diacritics, abbreviations, and the user experience when a mismatch is flagged.
Sanctions Screening (Article 5d)
Article 5d applies from 9 January 2025 to all PSPs in scope of the IPR, including payment institutions and e-money institutions, regardless of when their send/receive obligations kick in. This is an important distinction: sanctions screening is not tied to the entity-type phasing. Every PSP must comply from the same date as euro area credit institutions.
The obligation: PSPs must verify at least once per calendar day whether any of their payment service users are subject to EU targeted financial restrictive measures. In addition, PSPs must perform an immediate re-check after the entry into force of any new or amended restrictive measures.
The logic is to replace transaction-level sanctions screening for the instant payment flow. Real-time transaction screening would make ten-second execution impractical at scale. If you screen every customer daily, you do not need to screen each transaction individually.
The regulation is explicit that Article 5d does not replace AML/CFT obligations. Transaction monitoring under Regulation (EU) 2023/1113 (Transfer of Funds Regulation) continues to apply. Article 5d covers targeted financial sanctions only. Sectoral sanctions, country-based restrictions, and non-EU sanctions lists fall outside Article 5d but remain relevant under other regulatory obligations. Article 5d is an addition, not a substitution.
There is a practical wrinkle I have seen cause confusion. Teams implement Article 5d and then ask whether they can remove transaction-level sanctions screening for non-instant payments as well, since the customer is already screened daily. The answer is no. The daily customer screening is specifically designed to enable instant payment processing. Non-instant credit transfers may still require transaction-level screening depending on your AML risk framework and the requirements under the Transfer of Funds Regulation.
The Deadline Map by Entity Type
The phased timeline is more complex than it first appears. There are three variables: obligation type (receive, send, VoP), entity type (credit institution vs PI/EMI), and currency zone (euro vs non-euro area). The table below captures the full structure.
| Obligation | Euro area credit institutions | Euro area PIs and EMIs | Non-euro area credit institutions |
|---|---|---|---|
| Receive instant CT | 9 January 2025 (past) | 9 April 2027 | 9 January 2027 |
| Send instant CT | 9 October 2025 (past) | 9 April 2027 | 9 July 2027 |
| Verification of payee | 9 October 2025 (past) | 9 April 2027 | 9 July 2027 |
| Charges parity | Same as send/receive (past) | 9 April 2027 | Same as send/receive |
| Article 5d sanctions screening | 9 January 2025 (past) | 9 January 2025 (past) | 9 January 2025 (past) |
For Luxembourg-supervised entities, the most urgent outstanding deadline is 9 April 2027 for payment institutions and e-money institutions. Credit institutions are already past all their 2025 milestones. Non-euro area entities (including Luxembourg branches of non-euro area institutions) face the 2027 deadlines for credit institutions.
Settlement Infrastructure
Instant credit transfers settle through one of two euro area instant payment settlement systems: the EBA Clearing Company’s RT1, or the Eurosystem’s TARGET Instant Payment Settlement (TIPS). Both provide 24/7/365 settlement within seconds.
TIPS settles in central bank money, eliminating counterparty credit risk in the settlement leg. RT1 settles in commercial bank money through a prefunded guarantee fund. Both achieve the ten-second processing requirement, but the risk profile differs. Most large Luxembourg banks access TIPS through their TARGET account at the Banque centrale du Luxembourg (BCL).
Payment institutions and e-money institutions cannot directly participate in TARGET or TIPS because they are not covered by the Settlement Finality Directive (Directive 98/26/EC). They access the instant payment infrastructure through a sponsoring credit institution or through direct RT1 membership if eligible. This creates a dependency: if your sponsor bank is not TIPS-reachable or RT1-connected for instant payments, you inherit their limitation. Verify your settlement arrangements well before your applicable deadline.
What This Means for Luxembourg PSPs
Credit Institutions
Luxembourg credit institutions supervised by the CSSF (and the ECB for significant institutions under SSM) are through their 2025 obligations. The regulatory work now is: maintain compliance with the receive and send obligations, operate the verification of payee service, apply charges parity, and run the Article 5d daily sanctions screening. Any outages affecting instant payment availability are reportable under DORA ICT incident reporting.
The ongoing operational discipline is the challenge. Running a 24/7/365 payment service with a ten-second SLA and an Article 5d screening process that must respond immediately to new sanctions list updates is a continuous operational commitment, not a one-time compliance project.
Payment Institutions and E-Money Institutions
Luxembourg PIs and EMIs authorized under the Law of 10 November 2009 on payment services (LPS) or the Law of 20 May 2011 on electronic money have until 9 April 2027. That sounds comfortable, but the implementation timeline is not. Building instant payment capability from scratch, including infrastructure connectivity, verification of payee, 24/7/365 operations, and the Article 5d screening (already required since January 2025), typically takes 12-18 months for an institution that has not previously offered instant payments.
Article 5d sanctions screening is already in force for PIs and EMIs. If your institution has not implemented daily customer sanctions screening against EU targeted financial restrictive measures, you are out of compliance now, regardless of when your send and receive obligations apply.
Institutions Not in Scope
PSPs that do not offer SEPA credit transfers in euro at all (pure payment initiation service providers, pure account information service providers, or institutions operating exclusively in non-euro currencies) are not required to offer instant credit transfers. The obligation is triggered by offering credit transfer services in euro.
Reporting Obligations Under the IPR
Article 15(3) of the amended SEPA Regulation requires PSPs to report annually to their competent authority on two data sets: the level of charges for credit transfers, instant credit transfers, and payment accounts; and the share of payment transactions rejected due to the application of targeted financial restrictive measures, broken down by national and cross-border transactions.
The EBA developed draft ITS specifying uniform reporting templates for this obligation. The EBA’s final report recommended that NCAs collect harmonized data for the first time on 9 April 2026, and report aggregated figures to the EBA and European Commission by 9 October 2026. The EBA explicitly advised NCAs not to take enforcement action against PSPs that did not submit unharmonized reports during 2025, recognizing that collecting data before standardized templates exist produces incomparable results.
For Luxembourg PSPs, this means the CSSF will use EBA-standardized templates for the first collection in 2026. Prepare your management information systems to extract charges data (by transfer type and channel) and rejection data (by reason and direction) in the format the EBA specifies. The EBA reporting templates (Annexes I and II of the draft ITS) are publicly available for preparation.
Common Implementation Challenges
24/7/365 Operations
Standard SEPA credit transfers process during business hours on business days. Instant credit transfers process at any time, including 3 AM on a public holiday. This requires automated straight-through processing with no manual intervention in the payment flow. Exception handling (sanctions matches, VoP mismatches, technical failures) requires either automated routing to a queue with on-call review, or full 24/7 operational coverage.
DORA’s operational resilience requirements apply here. Instant payment processing is a critical function. An outage at any hour is a potential major ICT-related incident, with the associated classification and reporting obligations.
Verification of Payee Implementation
The name-matching logic is not trivial. Common scenarios: the payer enters “Jean-Pierre Dupont” but the payee’s PSP has “J.P. Dupont.” The payer enters “ABC Trading SARL” but the payee’s PSP has “ABC Trading S.a r.l.” The account belongs to a company but the payer enters the director’s name. The payer’s interface strips diacritics but the payee’s PSP uses them.
Each scenario produces a “no exact match.” The regulation requires informing the payer of the discrepancy. How you handle partial matches, what similarity threshold you apply, and how you present the discrepancy in your user interface are implementation decisions with fraud prevention and user experience implications. The EPC’s VoP scheme provides the interoperability framework. Implementation choices within that framework are yours.
Sanctions Screening Transition
Shifting from transaction-level screening to daily customer-level screening under Article 5d requires a batch process running at least once daily across your entire customer base, plus an event-triggered re-screening on new designations. The event trigger is the harder part. EU sanctions list updates can occur at any time without advance notice. Your system needs to detect list updates and initiate a full customer re-screening automatically.
This is in addition to, not instead of, existing AML/CFT compliance. Article 5d covers targeted financial sanctions only. Your broader AML obligations under the Transfer of Funds Regulation and Luxembourg AML law are unaffected.
Charges Parity in Practice
The “no higher than corresponding non-instant” rule creates pricing complexity where institutions offer multiple service tiers. The regulation refers to “the corresponding non-instant credit transfer” as the benchmark. The correspondence is by characteristics: same channel, same account type, same currency. A standard online SEPA transfer sets the ceiling for an online-initiated instant transfer. A paper-initiated SEPA transfer sets the ceiling for a paper-initiated instant transfer.
If your institution does not charge for standard SEPA credit transfers on retail current accounts (common in Luxembourg), you cannot charge for instant credit transfers on those accounts. The instant payment premium disappears. For institutions that generated revenue from this premium, the pricing adjustment is a commercial consequence of the regulation, not an implementation choice.
Frequently Asked Questions
Are payment institutions required to offer instant payments?
Yes, if they offer SEPA credit transfers in euro. The obligation applies to payment institutions and e-money institutions, not only to credit institutions. The difference is timing: euro area PIs and EMIs have until 9 April 2027, while euro area credit institutions were required to comply from January and October 2025. The obligations themselves (receive, send, VoP, charges parity) are the same. Article 5d sanctions screening has applied to all PSPs, including PIs and EMIs, since 9 January 2025.
What happens if we cannot process a payment within ten seconds?
The regulation requires funds to be made available to the payee at the latest by the end of the tenth second. If a payment cannot be processed within that window due to a sanctions match, a VoP issue, or a technical failure, the payment order is rejected. Consistent failures to meet the ten-second SLA will attract supervisory attention. The CSSF can assess whether your operational setup genuinely supports the regulatory requirement.
Does the regulation apply to payments above EUR 100,000?
The SCT Inst scheme has a maximum transaction amount. The EPC has been raising this limit over time. Check the current SCT Inst rulebook for the applicable cap. The regulation itself does not set a different maximum. PSPs may apply their own lower limits for risk management, but they cannot set limits below what the scheme and regulation require.
How does verification of payee work for cross-border payments?
The VoP obligation applies to all SEPA credit transfers, including cross-border ones. The payer’s PSP must query the payee’s PSP regardless of Member State. This requires cross-border interoperability, which the EPC’s VoP scheme provides. A Luxembourg bank initiating a payment to a German beneficiary must be able to query the German bank’s VoP service. Both sides need to support the scheme.
Do we need to report rejections caused by sanctions screening?
Yes. Article 15(3)(b) of the amended SEPA Regulation requires annual reporting to the NCA on the share of rejections due to targeted financial restrictive measures, separately for national and cross-border transactions. This uses the EBA’s standardized templates, first collected by NCAs in April 2026.
What if our settlement agent does not support instant payments by our deadline?
This is a critical gap. Payment institutions and e-money institutions depend on their sponsoring credit institution for instant payment settlement. If your sponsor is not connected to TIPS or RT1 for instant payments by the time your April 2027 deadline arrives, you cannot comply. Engage your settlement agent now. Consider alternatives if they cannot commit to the timeline. The regulatory deadline does not shift because your agent is not ready.
Does the IPR affect our DORA obligations?
Yes, indirectly. Instant payment processing is a critical function under DORA. 24/7/365 availability means any outage triggers potential major ICT incident classification and reporting. Third-party providers supporting your instant payment infrastructure (settlement agents, cloud providers, scheme processors) must appear in your DORA Register of Information.
Related Articles
- PSD2 Reporting Requirements – The authorization framework for payment institutions and e-money institutions. IPR obligations apply to PSD2-authorized PSPs.
- AML Reporting in Luxembourg – Article 5d sanctions screening sits alongside, not instead of, the full AML framework. Both apply to Luxembourg PSPs.
- AMLR – What Changes for Luxembourg Firms – The incoming EU AML Regulation will further shape sanctions and customer screening obligations that overlap with Article 5d.
- DORA ICT Incident Reporting – Instant payment outages are ICT incidents. Know your classification and reporting obligations before a live incident occurs.
- DORA Register of Information – Third-party ICT providers supporting your instant payment infrastructure must be mapped in the register.
- MiCAR Reporting Obligations – E-money token transfers interact with the instant payments framework. CASPs and EMI-token issuers should track both.
- CESOP Reporting Explained – Cross-border payment data reporting to CESOP applies to both standard and instant credit transfers above the thresholds.
Key Takeaways
- Every PSP offering SEPA credit transfers in euro must offer instant credit transfers. Credit institutions in the euro area (including Luxembourg) had their deadlines in January and October 2025. Payment institutions and e-money institutions in the euro area have until 9 April 2027.
- Non-euro area credit institutions must receive instant payments by 9 January 2027 and send them by 9 July 2027.
- Article 5d daily sanctions screening has applied to all PSPs, including payment institutions and e-money institutions, since 9 January 2025. This is already in force regardless of when your send/receive deadlines fall.
- Verification of payee applies to all SEPA credit transfers (instant and non-instant) and is the most operationally complex obligation. Euro area credit institutions were required to comply from 9 October 2025. PIs and EMIs from 9 April 2027.
- Instant credit transfer charges must not exceed corresponding non-instant charges. Free standard transfers mean free instant transfers. No premium is permitted after the applicable deadline.
- Settlement for PIs and EMIs goes through a sponsoring credit institution (for TIPS) or via RT1. If your sponsor is not instant-payment-ready, you have a gap. Resolve this well before April 2027.
- Annual reporting to the NCA on charges and sanctions-related rejection rates uses EBA-standardized templates. First harmonized collection: April 2026 (NCAs report to EBA and Commission by October 2026).
- Instant payment infrastructure is a critical function under DORA. Any outage triggers ICT incident reporting obligations and must appear in your Register of Information.
Sources and References
- Regulation (EU) 2024/886 – Instant Payments Regulation, amending Regulations (EU) No 260/2012 and (EU) 2021/1230 https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R0886
- Regulation (EU) No 260/2012 – SEPA Regulation (as amended), establishing technical and business requirements for credit transfers and direct debits in euro https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32012R0260
- EBA Final Report on draft ITS on uniform reporting under the SEPA Regulation – Templates, instructions and methodology for charges and rejection rate reporting
- Regulation (EU) 2023/1113 – Transfer of Funds Regulation (recast) https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32023R1113
- Regulation (EU) 2022/2554 – DORA, Digital Operational Resilience Act https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32022R2554
- European Payments Council – SCT Inst Scheme Rulebook and SEPA Verification of Payee scheme https://www.europeanpaymentscouncil.eu/
Disclaimer: The information on RegReportingDesk.com is for educational and informational purposes only. It does not constitute legal, regulatory, tax, or compliance advice. Always consult your compliance officer, legal counsel, or the relevant supervisory authority for guidance specific to your institution.