Accepting payments in the UK. 6 chapters and a final quiz.

Chapter 1. Mapping the UK rails and choosing the right one.

The UK is not “Europe without the euro.” That misconception gets expensive when you discover it in production. UK accounts are identified by a six-digit sort code and an eight-digit account number, not by an IBAN. A UK IBAN exists, but it is used for international payments, not domestic ones. The currency is the pound sterling. No domestic card scheme survived, so Visa and Mastercard have the whole market. Your cost structure therefore looks nothing like it would in a market with a national scheme.

The five rails you will use, and what each one is for

Chapter 2. Faster Payments and pay-by-bank: collecting without cards.

Launched in 2008, the Faster Payments Service was the first instant credit transfer rail deployed at scale in Europe. UPI in India, Pix in Brazil and TIPS in the euro area later drew on it. For a payments manager from continental Europe, it is the most visible cultural difference. In the UK, the account-to-account transfer is a mainstream consumer payment method, not an administrative procedure. UK pay-by-bank does not invent anything new. It layers payment initiation (PIS) on top of this rail.

• Single Immediate Payment (SIP): the one-off immediate transfer, the dominant type of FPS traffic, and the one a pay-by-bank payment triggers
• Standing order: a recurring transfer of a fixed amount on a fixed schedule, set up by the payer, which gives you no control over the amount
• Forward-dated payment: a post-dated transfer, submitted in advance for execution on a set date
• Direct Corporate Access: bulk access for businesses, used to submit batches of outgoing transfers
• Variable Recurring Payment (VRP): the programmable open banking mandate, with limits the payer sets on the maximum amount, the per-period cap, and frequency

Sweeping VRP, which automatically moves money between accounts belonging to the same person, has been live since 2022. UK open banking rules made it mandatory for the nine largest banks. Extending VRP to commerce, known as commercial VRP, is as much a governance project as a technical one. After JROC was put on hold, the industry regrouped around a UK Payments Initiative of about 30 firms, under the eye of the FCA and the Payment Systems Regulator. The phase 1 use cases target utilities, financial services and the regulated sector. Do not sell it internally as a done deal. Build your recurring payments on Bacs or cards, and treat cVRP as an option to reassess later.

Chapter 3. Direct Debit: the Service User Number, the Bacs cycle, and the Guarantee.

Bacs, in operation since 1968, is the UK’s bulk payment rail. Payroll, benefits and nearly all direct debits run through it, on a three-business-day cycle so long established that no one touches it. For an originator from continental Europe, the surprise is legal, not technical. You don’t just “plug in” Direct Debit the way you would SDD. You need a Service User Number, obtained through bank sponsorship or borrowed from a provider.

Three ways to set up Direct Debit, and how to choose

• AUDDIS (Automated Direct Debit Instruction Service): electronic lodging of new mandates with the payer’s bank, replacing paper
• ADDACS (Advice of Direct Debit Amendment and Cancellation Service): the payer’s bank tells you that a mandate has been canceled, transferred or amended. Process it automatically, or you will keep collecting against a dead mandate
• ARUDD (Automated Return of Unpaid Direct Debits): returned payments, with their reason code (insufficient funds, account closed, instruction canceled, and so on)
• AWACS (Advice of Wrong Account for Automated Credits): the equivalent for outgoing credit transfers, used to correct wrong account details
• DDICA (Direct Debit Indemnity Claim Advice): the indemnity claim, the message that costs you money

Chapter 4. Cards: what Brexit did to your acceptance costs.

The UK kept the interchange caps inherited from the EU regulation in its domestic law: 0.2% on consumer debit and 0.3% on consumer credit. But it redrew their scope. The caps now apply only to transactions where the issuer, the acquirer and the point of sale are all in the UK. The provisions covering cross-border transactions with the European Economic Area were simply deleted. That drafting detail has become the biggest line item on many acquirer statements.

Average order value .......................... £60.00
Monthly volume .............................. 100,000 transactions

A. Consumer debit card issued in the UK (UK acquirer, remote)
   Capped interchange ............ 0.20%  ->  £0.120 / transaction

B. Same order, consumer debit card issued in the EEA, remote
   Uncapped interchange .......... 1.15%  ->  £0.690 / transaction

   Interchange gap .................. 0.95 percentage points
   Per transaction .................. £0.570
   Per month at 100% of the mix ..... £57,000
   At only 10% of the mix ...........  £5,700 / month

Add these, uncapped, taken from YOUR statement, never estimated:
   - scheme fees (assessment, authorization, transaction)
   - “cross-border” fees, due whenever the issuer’s country
     differs from the acquirer’s — the EEA counts since Brexit
   - any currency conversion fees if the transaction is not in GBP
   - the acquirer’s margin, the only line you can really negotiate

Chapter 5. APP fraud, mandatory reimbursement, and Confirmation of Payee.

The UK has gone further than any other major market on authorized push payment (APP) fraud, where the victim is manipulated into sending the payment themselves. Since October 7, 2024, reimbursement is no longer a goodwill gesture but a regulatory requirement. The cost is split equally between the sending provider and the receiving provider. That second half upends business models: receiving funds makes you financially liable for the quality of your onboarding.

Confirmation of Payee: checking the name before sending

Confirmation of Payee checks, before a credit transfer is executed, that the name entered by the payer matches the holder of the destination account. The Payment Systems Regulator mandated it through Specific Direction 10 in August 2019. The six largest banking groups, which handle about 90% of Faster Payments and CHAPS transactions, had to go live by March 31, 2020. Specific Direction 17, issued in February 2022, extended it to some 400 additional providers, with two deadlines: October 31, 2023, and then October 31, 2024. The UK was therefore ahead of the EU’s Verification of Payee by four years, and it has operating experience that continental Europe does not yet have.

• Match: the name entered matches the account name, and the flow continues without friction
• Close match: the account exists but the name is slightly different; the actual name is shown to the payer, who has to decide
• No match: the name does not match; the screen shows a clear warning, and a significant share of payers abandon the payment
• Unable to check: the receiving provider does not respond or does not participate, so the payer goes ahead with no safety net, and without the reassurance the check provides

Chapter 6. FCA authorization, safeguarding, and post-Brexit structuring.

One test decides everything: holding funds on behalf of others. If your platform collects payments for its sellers, holds balances, or executes payments for your customers, you are carrying out a regulated activity. It falls under the Payment Services Regulations 2017 or the Electronic Money Regulations 2011, and authorization comes from the Financial Conduct Authority. Since Brexit, passporting no longer applies. A license obtained in the EU authorizes you to do nothing in the UK.

• Funds received must be segregated from the firm’s own funds and, no later than the end of the business day after receipt, placed in a dedicated account at an authorized credit institution or the Bank of England, or invested in secure liquid assets held by an authorized custodian
• The account must be designated in a way that shows it is used for safeguarding; an ordinary operating account does not meet the requirement
• Insurance or a comparable guarantee from an authorized insurer or credit institution is the alternative method, provided the proceeds are paid into a separate account if the firm becomes insolvent
• Safeguarded funds may never be used for the institution’s own account
• Always check a partner’s status on the FCA’s Financial Services Register: a small payment institution does not necessarily safeguard funds

That tightening has a name: the Supplementary Regime in policy statement PS25/12, published in August 2025, with a nine-month implementation period. It strengthens requirements on books and records, reconciliation and reporting. It also sets up a new safeguarding audit standard in coordination with the Financial Reporting Council. Down the line, a CASS-style Post-Repeal Regime would replace the EMR and PSR requirements if those regulations are repealed under the Financial Services and Markets Act 2023. Funds and assets would then be held in trust for customers. A UK market entry plan should therefore budget not for today’s regime, but for the one that will apply in its second year of operation.