By Rob Moulton and Anna Lewis-Martinez

On 30 April 2020, the FCA released a statement announcing a six-month extension to the deadline for firms’ implementation of strong customer authentication (SCA) for e-commerce under the Payment Services Regulations 2017 (PSRs 2017). The FCA states that the extension is due to the COVID-19 pandemic and is set to minimise potential disruption to consumers and merchants.

The new deadline for implementation is 14 September 2021. This replaces the original 14 March 2021 deadline.

The new code aims to avoid customers being penalised for fraudsters’ actions.

By Andrea Monks and Nell Perks

Estimates indicate that fraudsters stole £1.2 billion from UK bank accounts in 2018 — a 16% increase on the previous year. UK Finance has described fraud as a “major threat to the UK”, and has confirmed that the finance industry is committed to tackling the issue. However, developments in banking that have led to quick and easy payment methods, combined with increasingly sophisticated cyber scams, mean that fraudsters continue to flourish.

There has been a particularly significant increase in authorised push payment (APP) fraud, in which a customer is tricked into making a payment to another account that is controlled by a criminal. Historically, victims of this sort of fraud have struggled to retrieve their money — only 23% of losses were returned last year.

Regulatory guidance on cryptoassets and digital currency companies may lead to a legitimisation of crypto-businesses as an investable asset class.

By Stuart Davis, Sam Maxson, David Walker, Tom Evans, and Catherine Campbell

Recent and upcoming regulatory guidance on cryptoassets and the regulation of companies engaged in digital currency, such as issuers, crypto-exchanges, crypto-custodians, crypto-brokers, and other service providers, could help facilitate private equity investment in this space. While there has been some institutional investment in crypto-businesses — such as Goldman Sachs’ investment in Circle (owners of the Poloniex crypto-currency exchange) and Tiger Global’s investment in Coinbase — this has been a relatively nascent market with most money coming in the form of early-stage and venture investing.

GDPR and PSD2 are two legal initialisms that have both generated a great deal of press coverage in recent months, but they are seldom considered together.

By Christian F. McDermott, Calum Docherty and Brett Carr

There were around 122 billion non-cash payments in the European Union (EU) in 2016, with card payments accounting for 49% of all transactionsi and the trend is continuing: UK Finance recently reported that UK debit card payments overtook the number of cash transactions for the first time in the final quarter of 2017. As Europeans increasingly swap cash for cards and live their lives online, businesses have tremendous opportunities to take advantage of the vast amount of personal data generated by the increased use of payment services.

By Andrew Moyle and Stuart Davis

The Project Stella report, a European Central Bank (ECB) and Bank of Japan (BOJ) joint venture, details the applicability of distributed ledger technology for financial market infrastructure. During a one-month research project, the central banks tested whether distributed ledger technology (DLT) could sustain the liquidity saving mechanisms — a system introduced in 2013 to ensure the liquidity of banking institutions — in their current real-time gross settlement systems (RTGS).

Published in September 2017, the report concluded that DLT solutions have the potential to increase the resilience and reliability of financial transactions and are scalable to meet the needs of large value payment systems, but they have not yet reached the level of maturity needed to replace the RTGS that the ECB and BOJ currently use. The findings on the scalability of DLT are important, because regulators such as ESMA and FCA have previously questioned whether DLT could be scalable enough to meet the needs of the financial market infrastructure.

By Andrew Moyle, Wenchi Hu, Simon Hawkins and Stuart Davis

Initial Coin Offerings (ICOs) involve issuers offering virtual coins or tokens that are created and disseminated using distributed ledger or blockchain technology. The capital raised from the offer will fund the development of a digital platform, software, or any other project. Holders of virtual coins or tokens may have additional rights over and above those of a cryptocurrency, such as rights to access the platform, use the software, or otherwise participate in the project. In some cases, holders may also have rights to a return on their investment, or rights to participate in a share of the returns provided by the project or by the company backing the project. Post-issuance, holders may resell virtual coins or tokens in a secondary market on virtual currency exchanges or other platforms. ICOs are typically announced on cryptocurrency forums and websites through a white paper describing the project and key terms of the ICO, subscription details, timeline, etc.