Payments industry news, mapped to the tools you use
What standards bodies, regulators, card networks and the trade press published this week — with a short PayProbe take on the developments that change how you build, test or certify, and links to the decoders, calculators and guides they affect.
Updated 30 Oct 2026 · 171 headlines from 11 sources · refreshed weekly · nothing is fetched in your browser · RSS feed
PayProbe take
Developments that change something for payment engineers, and where on PayProbe to test the impact.
Kernel 8 gains approved implementations: Castles and ID TECH join Ingenico
EMVCo added two more Book C-8 (Kernel 8) implementations to its approved kernel list this summer: Castles Technology's CBM-EMVCL-K08 v1.0.0 on 9 July 2026 and ID TECH's C8 kernel, built to specification v1.1, on 6 August 2026. Ingenico's AXIUM DX8000 was the first, in October 2024, the month EMVCo opened Kernel 8 type-approval testing. The specification itself is still v1.1; the Q2 2026 bulletin SB 325 corrects it (Service Code removed, a "decryption failed" signal, the First Wire flag length). No card scheme has published a date by which terminals must support Kernel 8, so readers keep running the scheme kernels C-2 to C-7 alongside it — test both paths.
"Zombie Card": expired contactless cards revived through a relay that rewrites the expiry date
At USENIX Security (12–14 August 2026) researchers from the University of Massachusetts Amherst showed expired Visa contactless cards completing in-store purchases: a man-in-the-middle relay between card and terminal rewrites the expiry date the terminal reads, without breaking any cryptography. It needs the expired card (or sustained NFC proximity to it), an account still open under the same PAN — the normal case after a card is replaced — and an issuer that does not re-check the expiry during authorization. Of three banks tested with replaced cards, one approved the revived transactions, one declined every attempt and one ran a different kernel on which the modification failed. The fix sits on the issuer host: check the expiry date in each authorization against the card currently issued for that PAN.
Passed 23 Sep 2026
FedNow starts testing cross-border transaction support
On 23 September 2026 Federal Reserve Financial Services said the FedNow Service will begin supporting cross-border transactions — the first step beyond U.S. borders since FedNow launched in July 2023. FedNow settles only the U.S. domestic leg; the international leg still moves through correspondent banking relationships chosen by each participant. A group of early adopters is now testing enhanced ISO 20022 message formats built for that U.S. leg — flagged use cases include international payroll, corporate payments, treasury management and insurance claims — ahead of wider availability to all FedNow participants. The capability builds on the Federal Reserve Board's 8 April 2026 proposal to amend Regulation J so FedNow participants can route through intermediaries other than Reserve Banks; no date has been set for general availability, and the Regulation J change is still a proposal.
Passed 14 Sep 2026
PCI SSC publishes a standalone Key Management and Operations (KMO) standard
PCI SSC published the Key Management and Operations (KMO) Standard v1.0 on 14 September 2026 — a new document for entities that operate and manage systems using cryptographic keys for account-data security, covering the full key lifecycle from generation to destruction plus the procedures, systems and equipment around it. Its initial scope pulls together the key-management requirements currently spread across the PCI PIN and PCI P2PE standards (the same key types TR-31/TR-34 key blocks carry) into one assessable document, built for an "assess-once, use-many" model so a single KMO assessment can support multiple PCI programs that reference it. It ships as two documents: the KMO Requirements and Test Procedures, and the KMO Program Guide.
CLARITY Act stalls in the Senate; the CFTC moves on crypto market rules under existing authority
The Senate cloture vote on the CLARITY Act failed 49–50 on 15 September 2026, short of the 60 votes needed; the dispute was over ethics provisions on officials' crypto holdings, not the SEC/CFTC market-structure split. On 17 September the CFTC sent a proposed rule, "Regulation Crypto Asset Transactions and Regulation Crypto Asset Markets" (RIN 3038-AF80), to the White House for review. None of this changes payment stablecoins: the GENIUS Act and its implementation dates are unaffected.
Passed 30 Sep 2026
EMVCo opens its card-based agentic payments framework for comment
EMVCo published the draft "EMV Agentic Payments — Framework for Specifications" on 1 September and took feedback until 30 September; as of 1 October it has not announced the next draft or a publication date. The core idea is "Intent Services": a shared, interoperable layer where participants register, reference and manage consumer-authorised intent across a transaction lifecycle — complementing cryptographic schemes such as AP2 mandates and Mastercard Verifiable Intent. EMVCo also flags future Know-Your-Agent capabilities and agentic transaction indicators, which would eventually surface in authorization data.
ISO 20022 structured-address cutover: Fedwire moves to November 2027, Swift and the EPC defer
The 14 November 2026 "unstructured addresses rejected" milestone has fragmented by rail. Federal Reserve Financial Services rescheduled the Fedwire Funds Service release to November 2027 (announced 27 August). Swift accepted a community request to extend the CBPR+ migration and deferred all SR2026 payments changes, promising a new date by December; non-payments SR2026 items (T+1 support) go live in Q1 2027. On 9 September the EPC Payment Scheme Management Board followed suit and delayed the 15 November 2026 end-date for unstructured addresses across all five EPC scheme rulebooks; it reconvenes in October to set a new date. Keep building structured-address support — Swift reports over 60% of traffic still carried unstructured addresses in April.
Passed 20 Sep 2026
Verification of Payee rulebook v1.1, API spec 1.1.1 and API Security Framework 2.1 took effect 20 September
The EPC's March updates to the VOP scheme became effective on 20 September 2026: rulebook v1.1 (urgent change requests from the December 2025 consultation), inter-PSP API specification 1.1.1 (no empty API fields, character-set, timestamp and HTTP-header clarifications) and API Security Framework v2.1, which is now mandatory for VOP, SRTP and SPAA participants using APIs. The v2.0 change-request consultation closed on 30 June; v2.0 is scheduled for publication by the end of November 2026.
Passed 16 Sep 2026
Circle's Arc mainnet is live with Visa and Mastercard among the founding validators
Circle launched Arc mainnet on 16 September 2026. Arc is a USDC-native Layer 1 aimed at institutional settlement: USDC is the gas token, consensus is the Tendermint-derived Malachite engine with sub-500 ms deterministic finality, and execution is an EVM built on Reth, so existing Solidity tooling ports directly. The eleven founding validators include BlackRock, DTCC, Galaxy, Global Payments, ICE, Mastercard, MoneyGram, SBI, Standard Chartered, Sumitomo and Visa. For processors it is one more settlement rail to map alongside Tempo and the public chains — take chain IDs and USDC/EURC contract addresses from Arc's official contract-address reference, not third-party lists.
Key date 18 Jan 2027
Treasury proposes the GENIUS Act issuance rules; only permitted issuers may issue payment stablecoins from 18 January 2027
Treasury's notice of proposed rulemaking (Federal Register, 18 August 2026) implements Section 3 of the GENIUS Act — who may issue, offer and sell payment stablecoins in the US — with a 60-day comment period. The statutory timeline stands: from 18 January 2027 only permitted payment stablecoin issuers (or OCC-registered foreign issuers) may issue for the US market, and from 18 July 2028 digital-asset service providers may not offer non-permitted stablecoins to US persons. A separate FinCEN rule (22 June) sets customer-identification requirements for permitted issuers.
Key date 31 Oct 2026
PCI SPoC and CPoC give way to MPoC; the standalone 3DS SDK standard sunsets 31 October
Two PCI SSC consolidations land this autumn. Software-based PIN Entry on COTS (SPoC) and Contactless Payments on COTS (CPoC) are being retired in favour of Mobile Payments on COTS (MPoC), which covers both PIN entry and contactless acceptance on off-the-shelf devices. Separately, the PCI 3-D Secure SDK Security Standard has a formal sunset from 1 May to 31 October 2026 and becomes a module of the PCI Secure Software Standard. New SoftPOS and 3DS SDK evaluations should target the successor standards.
Agentic payments infrastructure consolidates: Agentic Payments Alliance and AWS AgentCore Payments GA
On 18 August stablecoin-card company Rain announced the Agentic Payments Alliance with Visa, Mastercard, Fiserv, Circle, Solana and Remitly among the founding members — a member-run coalition rather than a spec body. The same day AWS made Amazon Bedrock AgentCore Payments generally available; built with Coinbase and Stripe, it wraps wallet authentication, HTTP-402-style payment execution and spend governance so agents can pay for APIs, MCP servers and content. Together with the x402 Foundation (Linux Foundation, April) and Stripe/Tempo's Machine Payments Protocol, most agent-to-service payments now converge on the 402 handshake PayProbe's decoders already parse.
EMVCo Q2 bulletins: Kernel 2 mag-stripe mode removed, new TRMD bits, EMV 3DS 2.4 and Tokenisation 2.4 drafts
The Q2 2026 EMVCo newsletter lists the specification bulletins that matter for kernel and issuer teams: SB 317 removes the Mag-stripe Mode implementation option from Kernel 2 (Book C-2), SB 314/319 extend Terminal Risk Management Data with Deferred Authorisation and Transit Gate bits plus a payment-system byte, SB 325 corrects Book C-8 (Kernel 8), and GB 60 v3.0 details Phase 1 of the contact-chip feature sunset. Drafts of EMV 3-D Secure 2.4 and Payment Tokenisation 2.4 (PAR use-cases) are with Associates, and TTA Bulletin 293 confirms approved kernels must keep processing after the 2038 date rollover.
Headlines
Aggregated from public RSS feeds and tagged by topic. Each link opens the publisher's article.
A mobile wallet can hold several ways to pay. For most users, it holds just one. That leaves card issuers competing for a place in the wallet before the customer ever reaches a store’s payment terminal. The October 2026 PYMNTS Intelligence report, “Apple Pay…
ACI Worldwide (NASDAQ: ACIW), an original innovator in global payments technology, and Circle Internet Group (NYSE: CRCL), one of the world's leading internet financial platform companies and the issuer of USDC1 through its regulated entities, today announced…
OKX, a leading global cryptocurrency exchange and onchain technology company, today marked four years of its Proof of Reserves (PoR) program, with $36.36 billion in on-chain assets across 22 major cryptocurrencies.
Stablecoins continue to seek mainstream usage and acceptance, and this week, Ripple was at the forefront. The company spent the week securing more places for its dollar stablecoin to be held, traded and used. Agreements with Coinbase, Robinhood and BNY…
Assetize Financial Services (Jersey) Limited, part of the Assetize group, has been registered by the Jersey Financial Services Commission (JFSC) to carry on trust company business.
B2Broker Group, a global fintech solutions provider for financial institutions, has expanded the AI capabilities of its B2Trader platform with Model Context Protocol (MCP) support and a new in-terminal AI Chat.
The Federal Trade Commission’s (FTC) battle against impersonation scams has included the removal of websites that impersonated the FTC itself, the agency said in a Thursday (Oct. 29) press release. The FTC sent letters to domain registrars and other website…
Alphabet’s third-quarter results put a familiar fear back in focus: Big Tech’s artificial intelligence spending could outrun the earnings and cash needed to justify it. Google’s parent spent $51.4 billion on capital investments and reported negative free cash…
TCM Solutions Limited (TCMS), a Hong Kong-based merchant acquirer, has partnered with Tribe Payments, a global payments fintech specialising in issuer and acquirer processing, to power its acquirer processing as it expands its business across Asia-Pacific.
Becoming the first company to achieve EMVCo certification for a payment card platform that provides access to post-quantum cryptography (PQC) and crypto-agility services, Idemia can now enable banks to future proof their cards against quantum threats.
Weeks after securing the regulatory green light to step up its operations in China, Visa has inked a deal with the country's tech behemoth Tencent spanning cross-border payments and AI-powered commerce.
The Depository Trust Company (DTC), a subsidiary of The Depository Trust & Clearing Corporation (DTCC), the premier post-trade market infrastructure for the global financial services industry, today launched the DTCC Tokenization Service (DTS).
AiPrise today announced that MoneyGram, one of the world's leading global payments networks, has selected AiPrise to support compliance and fraud prevention operations across its global network.
Payment security doesn’t have to be complicated for merchants. Small, practical actions can make a meaningful difference in protecting payment data. PCI SSC provides practical resources to help merchants get started. With a strong data security foundation you…
Visa expects its roster of nearly 50 artificial intelligence partners in production to double in the coming months, as it prepares to handle purchases that consumers and businesses delegate to software. The immediate focus is establishing the authority behind…
Grace Hopper, the Yale PhD in math, computer pioneer and United States Navy rear admiral, liked to tell audiences that “it’s much easier to apologize than to get permission.” She didn’t invent the idea or the saying, but she made it famous. Silicon Valley has…
European fintech Zen.com has enabled Pay by Bank experiences through Mastercard Open Finance, now supporting merchant payment acceptance and digital wallet top ups across nine target markets, Germany, Austria, Spain, Belgium, the Netherlands, Italy, Portugal…
Backbase has introduced a tool that pairs banking teams with specialized artificial intelligence (AI) agents. The banking operating system provider’s Delivery Factory lets a bank’s delivery team work with AI agents “from the first agreed requirement to…
Robinhood’s cryptocurrency revenue fell 55% in the third quarter, but much of the discussion on its earnings call Tuesday (Oct. 27) focused on where customers’ money might go next. CEO Vlad Tenev outlined a future built around everyday banking, payments sent…
Banks have an opportunity to strengthen fraud protection by helping customers recognize when someone is persuading them to send money to a criminal. That’s a central finding of “Scams Get Personal: Why Banks Pay More to Fight Fraud,” the September 2026…
This week The Prompt Economy focuses on healthcare. It’s here that agentic AI is affecting payments, research, care protocols and the patient experience. It’s early days, but as you will see, progress is accelerating. So is identifying the pain points in…
Chargebacks911, a global leader in dispute resolution and chargeback management, has launched a first-of-its-kind AI agent purchase indemnification solution designed to protect merchants from the emerging chargeback risks associated with agentic commerce.
Watch more: Need to Know With ClawSecure’s JD Salbego Warning: This story will go fairly deep into the details of agentic artificial intelligence (AI) and agentic security. And another warning: You need to go there. Here’s why. An employee doesn’t have to…
Payments company Block has introduced an artificial intelligence model trained solely using human conversation. Dessa, as the model is known, learned to hold real-time conversations just by listening, Block said in its announcement Friday (Oct. 23). “As far…
Fraud losses reported by older adults increased fivefold between 2020 and 2025, leaping from $600 million to $3 billion, the Federal Trade Commission (FTC) said Monday (Oct. 19). The FTC shared this data in a press release outlining findings from its report…
Cross-border payments firm LianLian Global’s social commerce, marketplace and eCommerce clients can now send payouts to PayPal accounts globally and Venmo accounts in the United States, the company said in a Thursday (Oct. 22) press release. The capabilities…
The U.S. Faster Payments Council (FPC), a membership organization devoted to advancing safe, easy-to-use faster payments in the United States, today announced the publication of Operational Considerations for Non-Value Messages, a new guide developed by the…
Anthropic has unveiled an app in which Claude works as a “proactive agent” on behalf of professionals and small business owners, including purchasing business supplies, the company said in a Wednesday (Oct. 21) announcement. In this app, Claude Duet, Claude…
Banks keep their core systems because replacing them is costly and disruptive. Keeping them carries its own price. Employees work across fragmented applications, repeat manual steps and rely on expensive integrations. Fifty-two percent of financial…
Cross-border payments remain slow and expensive but fintech outfits such as Wise and Remitly have substantially cut costs relative to traditional retail bank wires while stabelcoins still suffer from issues with friction, according to BIS research.
At Sibos 2026, Hashgraph’s CIO Gregg Bell discusses how to replace risky blockchain bridges to make Web3 settlements faster, safer, and fully private for global finance.
Banks have generally measured instant payments by transactions: how many customers use them, how much money moves and how quickly payments arrive. An example from Amplify Credit Union adds another measure: deposit growth. Business accounts that received at…
SoFi Technologies, Inc. (NASDAQ: SOFI), the everything app for digital financial services, today announced the launch of SoFi Earn (SOFIE), the first and only national bank-issued tokenized deposit for consumers.
Artificial intelligence is changing both sides of payments fraud. Fraudsters can use it to make impersonation attempts more convincing, while finance teams can use it to score transactions, verify documents and identify anomalies. PYMNTS Intelligence’s…
Hotel franchising company Wyndham Hotels & Resorts offers artificial intelligence (AI) tools across the guest experience and has found that they improve franchisees’ top lines, reduce operating costs and enhance the guest experience, the company said in an…
The Office of the Comptroller of the Currency (OCC) today announced a final rule to implement the Guiding and Establishing National Innovation for U.S. Stablecoins (GENIUS) Act.
Participate, the Loan Sales Ecosystem for financial institutions, today announced it has completed the world’s first loan participation or syndication principal and interest payment between financial institutions using tokenized deposits.
Watch more: Paymentology Says AI Agents Must Earn the Right to Move Money The stablecoin industry has spent possibly too much time trying to reinvent checkout. Consumers already have a nearly universal interface for turning balances into purchases. Their…
Starling has deployed an agentic "financial crime investigator" that the UK digital bank says can carry out an end-to-end investigation within 17 seconds.
Remember travel agents? Not the AI kind. The real people kind. For anyone under the age of 30, here’s how it worked. You walked into a little storefront with a poster of a Caribbean island in the window and sat across the desk from someone with a headset and…
At Sibos 2026, the Euro Banking Association shares the ways in which banks can combat agentic AI disintermediation and reduce European payment fragmentation. How agentic AI could reshape bank brands and customer loyalty.
Your phone can handle the checkout. Your hand may still reach for the same old card. Twelve years after Apple Pay arrived, mobile wallets are gaining users, but familiar payment habits still have a firm grip on the register. “Apple Pay @12: Mobile Wallets…
Banks have plenty of fraud technology, but getting all of it to work as a cohesive line of defense is becoming a problem. The PYMNTS Intelligence report “Scams Get Personal: Why Banks Pay More to Fight Fraud” found in September that 78% of financial…
Keeping pace with the evolving payment security landscape requires current knowledge and practical expertise—but finding time for training can be challenging. PCI Security Standards Council (PCI SSC) eLearning gives payment security professionals the…
Evervault today announced the launch of Browser Tokens at Money20/20, giving developers building agentic commerce products a secure way for AI agents and browser automations to make purchases, log in to accounts and complete sensitive online workflows without…
At Cloudflare Connect, Mastercard is showing how Agent Pay for Machines helps AI agents pay for digital services while keeping people and businesses in control.
Today, Northteq is introducing aurora Agent Suite, an all-new set of AI agents built directly into aurora, its Salesforce-native loan origination system for equipment finance.
Pay by Bank, the digital payment method that allows consumers to pay directly from their bank account without the use of a credit or debit card or typing a PIN, is gaining traction in Europe and the UK suggests recently published research.
Issuing a bank guarantee at a large commodity trader is still a desk job. A treasury employee checks how much room is left on a credit facility, pulls the banking details from one system, confirms the limits in another and keys the transaction into a third.…
Government services have always moved slowly. Long queues, paper forms and manual reviews define an experience most citizens dread. Tighter budgets and shrinking workforces are making that model harder to sustain. AI agents are arriving in the public sector…
Watch more: Monday Conversation With Fifth Third Bank’s Katherine Weislogel There’s a workforce problem brewing in corporate treasury departments, and it has little to do with finding the next generation of finance executives. It’s about the people who have…
EPC launches SCARLET initiative to support consistent use of EU Digital Identity Wallets in payment authentication, and secure PSPs compliance with forthcoming European Digital Identity Framework Regulation (eIDAS 2) obligations Robert Saunders Mon…
JPMorganChase is reportedly expanding its blockchain payments footprint by bringing its deposit token to Ethereum. JPM Coin will now be available to the bank’s institutional clients on the Ethereum network, JPMorgan representatives told Bloomberg News Monday…
Banks are developing tokenized deposits to give corporate customers faster access to their money. In doing so, they are making the deposits they use for funding easier to move. A research briefing from the Federal Reserve Bank of Kansas City published Friday…
Sam Altman’s iris-scanning project World is making what it calls its “first industry-specific push.” The company on Sunday (Oct. 18) announced World ID for banking and finance, designed to help businesses determine whether artificial intelligence agents are…
Welcome to the PCI Security Standards Council’s blog series, The AI Exchange: Innovators in Payment Security. This special, ongoing feature of our PCI Perspectives blog offers a resource for payment security industry stakeholders to exchange information about…
Watch more: Before AI Moves Money, It Must Earn Authority Agentic commerce has a payments problem hiding in plain sight. The financial system does not yet have a universal way to authenticate a machine’s authority to make a decision. And time is running out.…
Marqeta’s enterprise customers can now offer stablecoin-backed cards powered by Coinbase, the companies said in a Friday (Oct. 16) press release. This offering is enabled by a new collaboration that integrates Marqeta’s card issuing platform with Coinbase’s…
Glance has added real-time product data and native checkout to its personal shopping platform through a new agentic commerce integration with PayPal, Glance said in a Thursday (Oct. 15) press release. Glance, which is backed by global technology company…
Banks have an opportunity to strengthen fraud prevention by looking more closely at payments that arrive with a valid login or a customer’s approval. That’s the central implication of the third key finding in “Scams Get Personal: Why Banks Pay More to Fight…
Cross-border payments carry a working capital cost before money reaches the recipient. Payment providers frequently need funds available in advance to make payouts in other markets. For a company operating across currencies and time zones, that can mean…
A company sends half a million dollars to an overseas supplier using stablecoins. The transaction settles in seconds, the blockchain confirms delivery, and the payment provider reports success. Then the supplier says the money never arrived. The transaction…
Mastercard and stablecoin-powered financial stack BVNK have launched a platform that brings together fiat and stablecoin capabilities to make it easier to move and manage any form of money, Mastercard said in a Thursday (Oct. 15) press release emailed to…
For card issuers, artificial intelligence is moving closer to the transaction itself. Eighty-nine percent of issuers plan to adopt or expand at least one AI fraud capability, according to the PYMNTS Intelligence report “Investing Forward, Building the Edge,”…
Welcome to the PCI Security Standards Council’s blog series, The Quantum Leap: Preparing for Post Quantum Cryptography. This special, ongoing feature of our PCI Perspectives blog offers a resource for payment security industry stakeholders to share…
Despite the hype surrounding the digital assets, businesses remain cool to using the cryptocurrency, according to the results of a Cleveland Federal Reserve survey.
Fraud teams have spent years weighing whether artificial intelligence (AI) can improve on manual controls. For companies that have deployed the technology, the results are becoming strikingly apparent. Seventy-seven percent of firms using AI-powered fraud…
Every year on 14 October, World Standards Day recognizes the people and organizations working together to develop standards that make our world safer, more connected, and more resilient. For the PCI Security Standards Council, this year’s celebration carries…
Watch more: Building a Trusted Foundation for Agentic AI Companies have spent the past several years making it possible for employees to safely use artificial intelligence to retrieve information, summarize documents and generate recommendations. Agentic AI…
Watch more: What’s Next In Payments | Paymentology | Tim Joslyn Payments infrastructure has become an expert at answering questions centered on human behavior. Is this really the cardholder? Is this account authorized? Is the transaction fraudulent?…
We are pleased to welcome the newest organizations that have joined as Associate Participating Organizations of the PCI Security Standards Council (PCI SSC). These organizations play a crucial role in supporting the evolution of the PCI security standards and…
Message from the Chair of the EMVCo Board of Managers With momentum for agentic commerce growing across the globe, EMVCo has been working with Associates, Subscribers and industry partners to help promote secure, interoperable and The post EMVCo Newsletter…
Message from the Chair of the EMVCo Board of Managers With momentum for agentic commerce growing across the globe, EMVCo has been working with Associates, Subscribers and industry partners to help promote secure, interoperable and The post EMVCo Newsletter…
“There's no clear legal rule for who bears the loss when an AI tool exceeds its mandate,” writes one financial services consultant. “That's a problem for issuers as they contemplate making credentials available to AI tools.”
Overview: EPC scheme participants status Version Oct 2026 Robert Saunders Fri, 09/10/2026 - 16:05 Other Adherence This document provides a high-level overview of participation in the SEPA payment schemes, showing how financial institutions across European…
Welcome to our podcast series, Coffee with the Council . I'm Alicia Malone, Director of Communications and Public Relations for the PCI Security Standards Council. Recently, the Council published its newest standard, the Key Management and Operations, or KMO…
Welcome to the PCI Security Standards Council’s blog series, The AI Exchange: Innovators in Payment Security. This special, ongoing feature of our PCI Perspectives blog offers a resource for payment security industry stakeholders to exchange information about…
Clarification paper on SEPA Credit Transfer and SEPA Instant Credit Transfer rulebooks Version v4.1 Suzana Savu Wed, 30/09/2026 - 08:20 Guidance documents Credit transfer Instant credit transfer In September 2026, the European Payments Council (EPC) published…
Clarification paper on SEPA Direct Debit Core and SEPA Direct Debit Business-to-Business rulebooks Version 5.1 Azra Dindo Wed, 30/09/2026 - 08:45 Guidance documents Direct debit SDD mandate In September 2026, the EPC published the version 5.1 of the dedicated…
EPC guidance document - Provision of Addresses under the EPC Payment Schemes Version 2.2 Azra Dindo Wed, 30/09/2026 - 08:38 Guidance documents Credit transfer Direct debit One-Leg Out Instant credit transfer One-Leg Out Instant Credit Transfer (OCT Inst) In…
Guidance on reason codes for One-Leg Out Instant Credit Transfer R-transactions Version 2.1 Azra Dindo Wed, 30/09/2026 - 08:14 Guidance documents One-Leg Out One-Leg Out Instant Credit Transfer (OCT Inst) The European Payments Council (EPC) released version…
Guidance on reason codes for SEPA Credit Transfer R-transactions Version 6.1 Azra Dindo Wed, 30/09/2026 - 10:10 Guidance documents Credit transfer The European Payments Council (EPC) released version 6.1 of the document ‘Guidance on Reason Codes for SCT…
Guidance on reason codes for SEPA Direct Debit R-transactions Version 8.1 Azra Dindo Wed, 30/09/2026 - 10:54 Guidance documents Direct debit The EPC released version 8.1 of the document ‘Guidance on Reason Codes for SDD R-transactions’ in September 2026. This…
Guidance on reason codes for SEPA Instant Credit Transfer R-transactions Version 7.1 Azra Dindo Wed, 30/09/2026 - 08:48 Guidance documents Instant credit transfer The European Payments Council (EPC) released the version 7.1 of the document ‘Guidance on Reason…
Guidelines for the appearance of mandates in the SEPA Direct Debit schemes Version v11.1 Anonymous (not verified) Wed, 30/09/2026 - 08:52 Guidance documents Direct debit SDD mandate This document contains EPC guidance on the visual presentation of mandates…
Open USD (OUSD), a stablecoin built for global money movement, is now available across Stripe. Businesses can use OUSD to manage funds, make payments, and offer new financial services.
Template to Propose a Change to the EPC Payment Scheme Rulebooks Version v1.1 Suzana Savu Wed, 30/09/2026 - 08:15 Other Credit transfer Direct debit Governance One-Leg Out Instant credit transfer Public consultation The template for submitting a change…
The regulations aim to make these digital assets “foster payments improvements that benefit households and businesses,” Federal Reserve Gov. Michael Barr said.
The PCI Security Standards Council (PCI SSC) has published the first major revision to the PCI Secure Software Lifecycle (Secure SLC) Standard and its supporting Program documents. The PCI Secure SLC Standard is one of two standards that are part of the PCI…
Federal Reserve Board requests public comment on two proposals related to establishing a regulatory framework for Board-supervised payment stablecoin issuers under the GENIUS Act
Americans are vulnerable to identification and payment frauds because the U.S. has been slow to adopt digital identification, two Congress members said.
We analyzed billions of transactions on Stripe from January 2022 to March 2026 to understand how card fraud patterns differ by region and country, what's driving those differences, and how businesses can respond.
Don’t miss out - the 2026 PCI SSC Europe Community Meeting is approaching, and the Asia-Pacific Community Meeting is right around the corner! Take advantage of unparalleled networking opportunities, agendas filled with must-know content to bring back to your…
Welcome to the PCI Security Standards Council’s blog series, The AI Exchange: Innovators in Payment Security. This special, ongoing feature of our PCI Perspectives blog offers a resource for payment security industry stakeholders to exchange information about…
Last year, Stripe data shows fraud attempts against travel and leisure businesses hit a four-year high. We analyzed payment activity from more than 200,000 active travel and leisure businesses on Stripe to understand where fraud is rising, how effectively…
The PCI Security Standards Council (PCI SSC) has published a new information supplement addressing the security of artificial intelligence (AI) systems. This document covers both security aspects of using AI in payment environments and considerations when…
We analyzed attempted fraud rates and customer abuse patterns on Stripe over the past year and found that AI companies faced 4.3x more fraud attempts than startups overall in Q3 2025.
The PCI Security Standards Council (PCI SSC) has published a new standard designed for entities involved in the use of cryptographic keys. The Payment Card Industry (PCI) Key Management and Operations (KMO)™ Standard v1.0 defines security requirements, test…
Welcome to the PCI Security Standards Council’s blog series, The AI Exchange: Innovators in Payment Security. This special, ongoing feature of our PCI Perspectives blog offers a resource for payment security industry stakeholders to exchange information about…
Welcome to our podcast series, Coffee with the Council . I'm Bryli Muse, Marketing and Communications Analyst for the PCI Security Standards Council. In today's episode, I'm excited to celebrate the 20th Anniversary of the Council.
EPC delays address format migration timeline Robert Saunders Thu, 10/09/2026 - 06:30 Related Article November 2026 end-date of the unstructured address format for EPC payment scheme transactions The European Payments Council (EPC) has decided to delay the…
Welcome to the PCI Security Standards Council’s blog series, The Quantum Leap: Preparing for Post Quantum Cryptography. This special, ongoing feature of our PCI Perspectives blog offers a resource for payment security industry stakeholders to share…
While the digital currencies have gained some acceptance, there is a growing interest by financial institutions in tokenized deposits as an alternative.
01 September 2026 – EMVCo – the technical body that creates and manages EMV® Specifications and programmes – has released a draft framework to help promote secure, interoperable and scalable card-based agentic payments. The framework The post EMVCo Requests…
In the first of a dedicated EMV® Insights series, Clinton Allen, Chair of the EMVCo Agentic Payments Task Force, explains how EMVCo is supporting the development of card-based agentic payment solutions and the approach it The post How EMVCo is Working to…
In the first of a dedicated EMV® Insights series, Clinton Allen, Chair of the EMVCo Agentic Payments Task Force, explains how EMVCo is supporting the development of card-based agentic payment solutions and the approach it The post How EMVCo is Working to…
November 2026 end-date of the unstructured address format for EPC payment scheme transactions Robert Saunders Fri, 28/08/2026 - 10:27 The European Payments Council (EPC) notes that on 27 August 2026, Swift announced in a press release its decision to extend…
Platforms like DoorDash, Meta, and Deel already enable stablecoin payouts for global workers. We surveyed 2,300 workers in 20 countries to see what's driving stablecoin demand, where the opportunity is highest, and how other platforms can adapt.
The upcoming PCI SSC Asia-Pacific Community Meeting in Kuala Lumpur, Malaysia, 11-12 November, features a dynamic agenda packed with expert speakers , thought-provoking keynotes, valuable networking opportunities, and the latest insights on payment security…
Welcome to the PCI Security Standards Council’s blog series, The AI Exchange: Innovators in Payment Security. This special, ongoing feature of our PCI Perspectives blog offers a resource for payment security industry stakeholders to exchange information about…
This episode of Coffee with the Council is brought to you by our podcast sponsor, Clone Systems . Welcome to our podcast series, Coffee with the Council . I'm Alicia Malone, Director of Communications and Public Relations for the PCI Security Standards…
Registration is now open for the PCI Security Standards Council's 2026 Community Meetings ! Join payments industry professionals from around the world for inspiring keynotes, valuable networking opportunities, expert-led sessions, hands-on workshops, an…
Welcome to our podcast series, Coffee with the Council . I'm Alicia Malone, Director of Communications and Public Relations for the PCI Security Standards Council. Today, I'm excited to bring you a preview of our 2026 Asia-Pacific Community Meeting keynote…
The upcoming PCI SSC Europe Community Meeting in Edinburgh, Scotland, 20 - 22 October has a full agenda packed with exciting speakers , engaging keynotes, networking opportunities, updates on industry trends, and insights and strategies on best practices.
Welcome to the PCI Security Standards Council’s blog series, The AI Exchange: Innovators in Payment Security. This special, ongoing feature of our PCI Perspectives blog offers a resource for payment security industry stakeholders to exchange information about…
The PCI Security Standards Council (PCI SSC) has published a document which maps the PCI Data Security Standard (PCI DSS) v4.0.1 to the National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF) 2.0. With both organizations sharing…
To understand what can influence win rates, we analyzed evidence packets from one million disputes over a 16-week period. Here’s what the data shows and what it means for how you mitigate disputes.
Join us in Vancouver, BC, Canada, September 15-17 for the 2026 PCI SSC North America Community Meeting ! The entire payment card industry is invited to come together as a community for important Council updates, insights on industry trends, strategies on best…
EDS API Specifications Version 1.4 Ruta Murnikaite Fri, 17/07/2026 - 10:25 Other EPC Directory Service (EDS) Verification Of Payee (VOP) SEPA Request-to-Pay (SRTP) The EPC Directory Service (EDS) is accessible by scheme participants and their technical…
The PCI Security Standards Council (PCI SSC) is pleased to welcome its newest team member, Ed O’Neill, Head of Business Operations and Risk Management. In this new role, Ed will be responsible for business operations, enterprise risk management, governance…
Message from the Chair of the EMVCo Board of Managers Another busy quarter saw the EMVCo community come together for both our Technical Meeting in Singapore and the annual EMV® User Meeting in Salt Lake The post EMVCo Newsletter: Q2 2026 appeared first on…
Welcome to the PCI Security Standards Council’s blog series, The AI Exchange: Innovators in Payment Security. This special, ongoing feature of our PCI Perspectives blog offers a resource for payment security industry stakeholders to exchange information about…
PCI Security Standards Council Community Meetings bring together a global community dedicated to securing payment ecosystems. In addition to the main agenda, attendees have the opportunity to deepen their experience through interactive workshops designed to…
Welcome to the PCI Security Standards Council’s blog series, The AI Exchange: Innovators in Payment Security. This special, ongoing feature of our PCI Perspectives blog offers a resource for payment security industry stakeholders to exchange information about…