Requirements for identifying and verifying customers and businesses, establishing beneficial ownership, assessing risk and applying enhanced or ongoing due diligence.

Requirements protecting payment users through transparent conduct, error resolution, complaint handling, refund rights, ombudsman access and fair outcomes.

Authoritative designation lists and guidance for screening customers, counterparties, owners and payments against sanctions restrictions.

Requirements for risk-based AML/CFT programmes, payment transparency, transaction monitoring, investigations and suspicious-activity reporting.

Requirements for resilient payment operations, ICT risk management, incident response, business continuity, outsourcing and supervisory reporting.

Requirements governing payment and personal data collection, storage, localisation, transfer, retention and information-security safeguards.

Core legal frameworks defining which payment activities are regulated, who must be licensed or registered and how providers are supervised.

Rules governing interchange, card acceptance, routing choice, merchant fees and the transparency or fairness of payment pricing.

Requirements for authentication, confirmation of payee, scam prevention, liability allocation and reimbursement when payment fraud occurs.