# PSR Article 90 — Payment fraud risks and trends Textual state: amended_substantial. 61 words changed; 2 paragraphs added; 1 paragraph removed - Compared text: Council position at first reading (Council document 8543/26) — not yet law. - Compared against: Council document 8221/26 — superseded. - Classification is mechanical; method: https://paymentslaw.eu/method/ - Editorial review state: not_assessed. Editor's notes are selective, not a complete assessment. Word-level diff for each step, earlier → later edition: `{+text+}` was inserted, `[-text-]` was deleted. ## Step 1 · Commission proposal (2023) to Council compromise text (April 2026) Article 84 → 84. Textual state: amended_substantial. 208 words changed; 1 paragraph added; 1 paragraph removed - Editorial review state: not_assessed. ### Paragraph 1 1. Payment service providers shall alert their customers via all appropriate means and media when new forms of payment fraud emerge, taking into account the needs of their most vulnerable groups of customers. Payment service providers shall give their customers clear indications on how to identify fraudulent attempts and warn them as to the necessary actions and precautions to be taken to avoid falling victim of fraudulent actions targeting them. Payment service providers shall inform their customers of where they can report fraudulent actions and rapidly obtain fraud-related information. ### New paragraph 1a {+1a. Member States shall have in place adequate measures with appropriate funding to raise awareness among the public about the trends and new forms of payment fraud, the procedures to be followed in order to identify fraudulent attempts and the rights and obligations conferred by this Regulation relating to fraud. Member States shall ensure that communication measures are sufficient and well-targeted, in particular reaching out to the most vulnerable consumer groups, including younger and older persons and those with low digital skills. Member States shall inform the Commission about the measures taken. Payment service providers, providers of very large online platforms or of very large online search engines and electronic communications service providers as defined in Article 2(4), point (b), of Directive (EU) 2018/1972 shall cooperate free of charge with the Member States in the measures referred to in subparagraph 1.+} ### Paragraph 2 2. Payment service providers shall [-organize -]{+organise +}at least annually training programmes on payment fraud risks and trends for their employees {+that are active in designing, maintaining or offering payment services, +}and shall ensure that their employees are adequately trained to carry out their tasks and responsibilities in accordance with the relevant security policies and procedures to mitigate and manage payment fraud risks. ### Paragraph 3 (removed) [-3. By [ OP please insert the date= 18 months after the date of entry into force of this Regulation], the EBA shall issue guidelines in accordance with Article 16 of Regulation (EU) No 1093/2010 with regard to the programmes on payment fraud risks referred to in paragraphs 1 and 2 of this Article.-] ## Step 2 · Council compromise text (April 2026) to Council position at first reading (October 2026) Article 84 → 90. Textual state: amended_substantial. 61 words changed; 2 paragraphs added; 1 paragraph removed - Editorial review state: not_assessed. - April paragraph 1a was divided between October paragraphs 2 (Member States' awareness measures) and 3 (the duty of providers and platforms to cooperate in them). ### Paragraph 1 1. Payment service providers shall alert their customers via all appropriate means and media when new forms of payment fraud emerge, taking into account the needs of their most vulnerable groups of customers. Payment service providers shall give their customers clear [-indications -]{+guidance +}on how to identify [-fraudulent attempts -]{+attempted fraud +}and [-warn -]{+advise +}them [-as to -]{+of +}the necessary actions and precautions to be taken to avoid falling victim of fraudulent [-actions -]{+activity +}targeting them. Payment service providers shall inform their customers of where they can report fraudulent [-actions -]{+activity +}and rapidly obtain fraud-related information. ### Paragraph 1a (removed) [-1a. Member States shall have in place adequate measures with appropriate funding to raise awareness among the public about the trends and new forms of payment fraud, the procedures to be followed in order to identify fraudulent attempts and the rights and obligations conferred by this Regulation relating to fraud. Member States shall ensure that communication measures are sufficient and well-targeted, in particular reaching out to the most vulnerable consumer groups, including younger and older persons and those with low digital skills. Member States shall inform the Commission about the measures taken. Payment service providers, providers of very large online platforms or of very large online search engines and electronic communications service providers as defined in Article 2(4), point (b), of Directive (EU) 2018/1972 shall cooperate free of charge with the Member States in the measures referred to in subparagraph 1.-] ### New paragraph 2 {+2. Member States shall have in place adequate measures, with appropriate funding, to raise awareness among the public about the trends and new forms of payment fraud, the procedures to be followed in order to identify attempted fraud and the rights and obligations conferred by this Regulation relating to fraud. The communication measures shall be sufficient and well-targeted, in particular reaching out to the most vulnerable consumer groups, including younger and older persons and those with limited digital skills. Member States shall inform the Commission of the measures taken.+} ### New paragraph 3 {+3. Payment service providers, providers of very large online platforms and of very large online search engines and providers of interpersonal communications services shall cooperate free of charge with the Member States in the measures referred to in paragraph 2.+} ### Paragraph 2 → 4 [-2. -]{+4. +}Payment service providers shall organise at least annually training programmes on payment fraud risks and trends for their employees that are active in designing, maintaining or offering payment services, and shall ensure that their employees are [-adequately -]{+properly +}trained to carry out their tasks and responsibilities in accordance with the relevant security policies and procedures to mitigate and manage payment fraud risks.