Bacs cookie policy

We use cookies on our website to provide you with the best possible online experience. By continuing to use this site, you give consent for cookies to be used. Please read our cookie policy for more information and details on how to change your preferences. Cookie Policy.

New name check safeguard for payments revealed

18.10.2018

 

•    Rules and standards for ‘Confirmation of Payee’ service released to the market

•    New service can help combat Authorised Push Payment fraud

•    Research report sets out how users have influenced the design of the service.

The workings of a new ‘Confirmation of Payee’ service which can reduce the risk of payments being sent to the wrong account have been revealed today (Thursday 18 October 2018), by Pay.UK (formerly the New Payment System Operator), the UK’s leading retail payment authority.

Currently, the account name is not checked when sending an electronic payment - and fraudsters have become increasingly sophisticated in using this to trick people into sending money to the wrong account.

Confirmation of Payee can help prevent many fraudulent payments from being made in the first place, by introducing another hurdle for fraudsters and giving effective warnings to customers about the risks of sending to an account where the name did not match.

The preventative Confirmation of Payee safeguard is one of a package of measures being introduced across the industry, which also includes more help for customers if they fall victim to Authorised Push Payment (APP) fraud. Under a new ‘Contingent Reimbursement Model’ (1) industry code also being introduced in 2019, it is anticipated that any customer who has taken due care and received a positive name match through Confirmation of Payee will get greater protection from financial loss.

How Confirmation of Payee will work

When setting up a new payment, or amending an existing one, banks will be able to check the name on the account of the person or organisation you are paying. There are three possible outcomes:


Yes

If you used the correct account name, you will receive confirmation that the details match, and can proceed with the payment.


No, please check

If you used a similar name to the account holder, you will be provided with the actual name of the account holder to check. You can update the details and try again, or contact the intended recipient to check the details.


No, the name is wrong

If you have entered the wrong name for the account holder you will be told the details do not match and advised to contact the person or organisation you are trying to pay.

The matching decision is made by the intended recipient’s bank, as they have the best knowledge about the name of the person or business that is being checked. No matter what the outcome of the name check, the decision on whether to proceed with a payment will always rest with the sending customer - with the risks made clear if they choose to go ahead after receiving a non-match. 

Banks, building societies, and other payment providers will be able to roll out Confirmation of Payee during 2019 as a way for their customers to check the name of who they are paying. This will reduce the risk of errors and certain types of fraud, such as ‘malicious redirection’ invoice scams where, by posing as a legitimate business known to customer, payers are convinced to redirect a payment to an account controlled by the fraudster.

There will still be some types of ‘malicious payee’ fraud that Confirmation of Payee cannot address – for example, so called ‘purchase scams’ where someone is tricked into paying in advance for goods that do not exist.

Paul Horlock, Chief Executive of Pay.UK, said:

“Sending a payment with an incorrect sort code or account number is like addressing a letter with the wrong post code. Even if you have used the correct name it won’t reach the intended destination – and fraudsters have become increasingly sophisticated in using this to trick people into sending money to the wrong account.

“Confirmation of Payee will let you check you have the correct name for the person or business you’re paying, giving better protection against certain types of fraud, and helping to stop accidental mistakes too.”

As the organisation that runs the UK’s retail payment schemes, Pay.UK is responsible for setting the rules and standards that define how providers can implement the Confirmation of Payee service. These rules and standards will sit alongside guidelines that offer insights into how to meet users’ needs, in terms of language and customer experience.

The specifications and guidelines for Confirmation of Payee were refined and tested during recent stakeholder and consumer research carried out by an independent research agency on behalf of Pay.UK. The research report, Confirmation of Payee: Understanding consumer and stakeholder perspectives, found the service proposition was generally well received, with emphasis placed on the need for instant verification of results, consistency in messaging and functionality, clarity about liability and extra considerations for vulnerable groups. 

Further engagement regarding the guidelines will be undertaken with potential participants during the rest of 2018 to support their implementation plans. The Payment Systems Regulator recently announced it will consult (2) on requiring Payment Service Providers (PSPs) to implement Confirmation of Payee in the first half of 2019.

For further information, please contact press@wearepay.uk or 020 3217 8309.
 

 

Notes to editors:

An infographic showing how Confirmation of Payee service will work is available on request.
The research report, Confirmation of Payee: Understanding consumer and stakeholder perspectives is available immediately on request, strictly embargoed until 0001 Thursday 18 October 2018. It will be published on the Pay.UK website on Thursday 18 October 2018.

1) A draft voluntary code for the Contingent Reimbursement Model has been published by the Authorised Push Payments Scams Steering Group, a body established by the Payment Systems Regulator (PSR) to lead the development of an industry code for the reimbursement of victims. The draft code is open for consultation until 15 November 2018, with the voluntary code expected to be implemented in early 2019.

2) The PSR has announced its intention to consult on a General Direction requiring banks and Payment Service Providers that are participants in the Faster Payments System to be able to respond to Confirmation of Payee requests by April 2019, and be able to send requests by July 2019: https://www.psr.org.uk/psr-publications/news-announcements/PSR-welcomes-industry-code-to-protect-against-app-scams.

According to figures published by UK Finance [https://www.ukfinance.org.uk/wp-content/uploads/2018/09/2018-half-year-fraud-update-FINAL.pdf], 50,966 fraudulent payments were made in relation to Authorised Push Payment (APP) fraud in the first half of 2018, resulting in a total case value of £145.4m (of which, £30.9m was returned to affected customers).

In the same period (H1 2018), 963 million Faster Payments were sent – approximately one out of every 20,000 (0.005%) were affected by APP fraud.​