VOGUE BOOST  ·  SIGNAL ROOM

Payments Infrastructure

1  EXECUTIVE BRIEFING

Three developments set this month’s signal, ranked by consequence for the SMB operator reading it.

1. A new rail went live. On 2 June 2026 the UK Payments Initiative (UKPI) launched commercial Variable Recurring Payments (cVRP) — the UK’s first new payment scheme since Faster Payments in 2008. Wave 1 covers financial services, utilities and telecoms, rail, charities, and government. This is not a roadmap item any more. It is a working alternative to Direct Debit and card, live today, for any operator selling into an eligible sector.
2. A cost cap cleared its legal hurdle. On 15 January 2026 the High Court dismissed a judicial review brought by Visa, Mastercard, and Revolut against the Payment Systems Regulator’s (PSR) power to cap UK–EEA cross-border interchange fees. The cap itself has not been set — a consultation on methodology is still running — but the regulator’s authority to act is now settled law. For any operator with EEA card-not-present exposure, the direction of cost travel is now clear even if the destination isn’t.
3. A year of mandatory fraud reimbursement produced its first audit. On 1 July 2026 the PSR published an independent review of the first year of mandatory Authorised Push Payment (APP) scam reimbursement. The headline numbers are strong — fraud losses down, more victims reimbursed — but the review also flagged inconsistency the regulator intends to address via a formal consultation before the end of the year.
4. The regulator writing all three rules is being wound down. HM Treasury confirmed on 21 April 2026 that the PSR will be abolished and its functions absorbed into the FCA, with the mechanism now sitting inside the Financial Services and Markets Bill 2026. None of the above changes because of it — but the compliance and dispute contact for every item in this issue is mid-transition, and that matters for anyone with an open case or a live consultation response in flight.

Read together, the pattern is straightforward: the infrastructure is diversifying (cVRP), the cost base is under regulatory pressure in one specific corridor (cross-border cards), and the consumer-protection layer is maturing but not finished (APP fraud). The three deep-dives below take each in turn.

2  INVESTIGATIVE BRIEFING — THE CARD-TO-A2A MIGRATION GETS ITS OWN RULEBOOK

For as long as this Room has tracked the sector, the card-to-A2A migration has been a slow, provider-led trend — GoCardless volumes climbing, Open Banking PIS infrastructure maturing, but no shared rulebook binding the banks, the providers, and the merchants to a common commercial model. That changed on 2 June 2026.

2 June 2026 — first new UK payment scheme since 2008.  UKPI’s commercial VRP (cVRP) scheme goes live under a single industry-owned rulebook.

Commercial Variable Recurring Payments extend the existing “sweeping” VRP model — until now largely a me-to-me tool for moving money between a customer’s own accounts — into payments to a genuine third party. A customer authorises a business once, under a standing consent set directly in their banking app, and the business can then collect variable, recurring amounts without a fresh authorisation each time. Settlement is instant via Faster Payments, and the paying bank checks funds availability before each collection executes — a meaningful difference from Direct Debit, where a failed collection is discovered after the fact.

What UKPI actually is

The UK Payments Initiative is not a product. It is the industry-owned company — backed by 31 founding organisations, including infrastructure providers such as Modulr and Plaid — that owns the cVRP rulebook, the operational standards, and, critically, a shared commercial model. Before UKPI, any fintech wanting to offer cVRP had to negotiate bilateral terms bank by bank. UKPI replaces that with a Multilateral Agreement: every participant transacts on the same terms, at a single fixed pence-per-transaction fee charged to the payment provider rather than the consumer, intended to hold for roughly five years. That fee stability is the detail worth underlining for any operator modelling the economics of a switch — the two-sided uncertainty that has held back A2A adoption on cost grounds is, for cVRP specifically, now largely removed.

Wave 1: narrow by design

Wave 1 eligibility is deliberately confined to high-trust, already-regulated recurring-payment relationships: regulated financial services (savings, ISAs, mortgages, pensions, insurance, e-money accounts), utilities and telecoms, rail tickets, registered charity donations, and central and local government bodies. If an operator’s business sits inside one of those categories — a specialist insurer, a energy reseller, a membership charity — cVRP is not a future consideration. It is a live collection method that can be tested against the existing Direct Debit or card book today.

Wave 2 is the one most operators are actually waiting for

E-commerce, buy-now-pay-later, unsecured loan repayments, travel supplier payments, and general commercial trade — the categories covering most SMB operators reading this Room — sit outside Wave 1 and are expected to gain eligibility in Wave 2, anticipated in the second half of 2026. The FCA has been explicit that it expects UKPI’s launch to act as a catalyst for further scheme competition rather than a monopoly outcome, and has flagged a long-term regulatory framework consultation by the end of 2026, subject to legislation granting it new open banking rule-making powers.

The operator read here is not “wait for Wave 2 and then move.” It is: volume is not yet leaving card for cVRP in most SMB categories, because most SMB categories are not yet eligible to receive it — but the rulebook, the pricing model, and the settlement mechanics are now proven in production, in Wave 1, at scale. The two-quarter lead time to have vendor conversations with an Open Banking PIS provider — GoCardless, TrueLayer, Token.io, Yapily, or a BaaS layer such as Modulr — is the actionable window between now and Wave 2 eligibility opening.

Why cVRP is not just “A2A with a new name”

Operators who have already looked at Open Banking PIS through GoCardless or a similar provider may reasonably ask what cVRP actually adds. The answer is the standing consent. A single-payment Open Banking PIS collection — the kind already in use for one-off invoice settlement — still requires the payer to actively confirm each transaction in their banking app. cVRP moves the authorisation upstream: the customer consents once, inside their own banking app rather than a third-party flow, and the business then collects variable amounts against that standing consent without repeating the authorisation step. That is the structural feature Direct Debit has always had and card has never had — and cVRP is the first scheme to deliver it on an account-to-account rail with pre-payment funds checking built in.

The reconciliation problem this actually solves

Direct Debit’s core weakness for a growing SMB is timing: a collection can be submitted, reported as processed, and then bounce two or three working days later, well after the invoice has been marked paid and the goods or service delivered. Card avoids that specific failure mode but carries a materially higher per-transaction cost at scale, plus chargeback exposure. cVRP’s funds-availability check before each collection executes removes the delayed-failure problem that makes Direct Debit unsuitable for time-sensitive collections, while settling instantly via Faster Payments rather than on card-scheme timelines. For a subscription or membership business specifically, that combination — standing consent plus pre-checked, same-day settlement — is a genuinely new point on the cost-versus-certainty curve, not an incremental variant of tools already in use.

Pundit angle: “Open Banking is finally taking off.”

Operator angle: “If your collections sit inside energy, telecoms, insurance, pensions, charitable giving, or rail, cVRP is a live line item to test against your existing Direct Debit failure rate this quarter — not a 2027 roadmap conversation.”

3  INVESTIGATIVE BRIEFING — THE CROSS-BORDER CARD CAP: CONFIRMED IN PRINCIPLE, STILL UNDETERMINED IN PRACTICE

The headline is a court case. The story is a cost base that has been quietly elevated for five years and is now, for the first time, under a regulator with a confirmed legal mandate to bring it down.

£150m–£200m a year.  The PSR’s own estimate of the additional cost UK-EEA interchange increases have placed on UK businesses since 2021 — before this year’s ruling.

UK domestic card interchange has been fixed since 2015: 0.2% of transaction value for consumer debit, 0.3% for consumer credit, under the statutory Interchange Fee Regulation. That figure is not the live story — it is settled, capped, and not moving. The live story is cross-border. When the UK left the EU’s interchange cap regime, Visa and Mastercard raised UK-to-EEA card-not-present interchange from that 0.2%/0.3% baseline to 1.15% for debit and 1.5% for credit — a rise the PSR’s December 2024 market review found had increased more than fivefold since Brexit and was, in the regulator’s own words, likely too high.

What the High Court actually decided

On 15 January 2026, in Mastercard v PSR [2026] EWHC 64 (Admin), the High Court rejected a joint challenge from Mastercard, Visa, and Revolut, who had argued the PSR lacked the statutory power to impose a price cap at all. Mr Justice Cavanagh held that the PSR’s general direction power under section 54 of the Financial Services (Banking Reform) Act 2013 is broad enough to support price regulation within a payment system, that commercial impact on the scheme operators is not itself grounds to invalidate a direction, and — notably for any operator watching how assertively the regulator can act going forward — that the PSR does not have to demonstrate actual harm before acting preventively.

This is a decision about power, not price. The PSR still has to determine what the cap should actually be. A separate consultation, MR22/2.8, is working through the methodology for setting an appropriate level for UK-EEA card-not-present interchange specifically; the comment window on that methodology closed in November 2025 and a determination is still pending as this issue goes to press.

A second, separate track: private damages

Running alongside the regulatory cap is a distinct piece of litigation: the Competition Appeal Tribunal’s ruling in [2026] CAT 11 settled the pass-on burden and quantum questions in the merchants’ private interchange damages claims against the schemes, with a further trial still to resolve an outstanding EU treaty exemption defence. Operators should not conflate the two — a future PSR cap changes the going-forward rate; the CAT litigation is about compensation for past overcharging, and is not a mechanism through which an individual SMB can expect a direct payout without joining or being represented in the relevant claim.

Interchange is only part of the bill

Interchange is the fee the acquirer pays the cardholder’s issuing bank, and it is what the PSR’s power to cap actually targets. It is not the whole cost. Visa and Mastercard also charge scheme fees — running roughly 0.05% to 0.20% on UK domestic volume, varying by transaction type and acquirer agreement — which sit on top of interchange and are not covered by the same cap. The acquirer’s own margin is a third, entirely commercial layer again. A cross-border interchange cap, whenever it lands, will compress one component of a three-part cost stack, not the whole stack — worth knowing before assuming a future cap resolves the full cost gap between domestic and EEA card acceptance.

Why most operators can’t currently see the number that matters

Blended pricing — a single flat rate an acquirer quotes across all card types — is the reason many SMBs don’t know their actual cross-border exposure. On a blended rate, higher-cost commercial and cross-border transactions are averaged in with cheaper domestic consumer-debit volume, and the acquirer captures the spread between what it actually pays in interchange and what it charges the merchant. Interchange-plus (IC+) pricing exposes the interchange line item separately, so a merchant can see precisely what proportion of its card book is paying the elevated 1.15%/1.5% EEA rate versus the capped 0.2%/0.3% domestic rate. This is the cost-recomposition pattern this Room watches for: the headline rate on a merchant statement often doesn’t change even as the underlying cost mix shifts — until someone asks to see it broken out.

The operator read

Any business taking payment from EEA-issued cards online, or paying an EEA supplier by commercial card, is very likely paying more in interchange than a domestic-rate quote implies — and, on a blended pricing model, that excess is averaged in rather than shown as a separate line. The direction of travel is now downward, but the timing is not fixed, and a determination on the cap’s level will now proceed under a regulator mid-transition to the FCA rather than the PSR that ran the original market review. The immediate, no-regrets action is pricing transparency, not waiting for the cap.

4  INVESTIGATIVE BRIEFING — MANDATORY FRAUD REIMBURSEMENT, ONE YEAR IN: WHAT THE NUMBERS ACTUALLY SHOW

Faster Payments’ mandatory Authorised Push Payment (APP) scam reimbursement requirement — in force since 7 October 2024 — reached its first full year with an independent verdict rather than a regulator’s own assessment. On 1 July 2026, the PSR published a third-party review, conducted by Frontier Economics, of what the regime has actually delivered.

Losses down an estimated £73m a year. Roughly 35,000 fewer scams.  Frontier Economics’ independent assessment of the first year of mandatory reimbursement, published via the PSR on 1 July 2026.

The mechanism itself is a genuine departure from the voluntary code it replaced: payment service providers sending or receiving via Faster Payments must reimburse eligible APP scam victims, with liability split 50/50 between the sending and receiving PSP, and the burden falls on the PSP — not the customer — to prove gross negligence if it wants to decline a claim. Frontier’s review found the reimbursement rate across all APP claims has risen from 54% to 65%, and for claims that fall within the policy’s scope specifically, PSPs are now reimbursing 97% of them. Fraud losses sent via Faster Payments fell by around 21% following the requirement’s introduction — the clearest evidence yet that shifting liability onto PSPs has changed how seriously they invest in prevention, not just in reimbursement.

What actually changed from the voluntary code

The Contingent Reimbursement Model Code the mandatory rules replaced was voluntary, unevenly signed up to, and left the reimbursement decision largely to the receiving or sending firm’s own judgement of the customer’s conduct. The October 2024 rules inverted the default: reimbursement is now the legal baseline for eligible claims, the sending and receiving PSP split the cost 50/50 regardless of which of them made the error, and the PSP carries the burden of proving the customer acted with gross negligence — a deliberately high bar — if it wants to withhold payment. That single change in where the burden of proof sits is, per Frontier’s review, the main driver behind the reported 21% fall in Faster Payments fraud losses: PSPs now have a direct financial incentive to stop a suspicious payment before it leaves the account, not just to process a claim well after the fact.

Where it still falls short

The improvement is not evenly distributed. Frontier’s review — and the PSR’s own commentary on it — was explicit that outcomes for individual victims remain inconsistent, because some losses fall outside the policy’s scope or run into its limits and exceptions, and because implementation quality still varies by which bank or PSP a customer happens to use. The PSR has said plainly that it wants a step-change from technology platforms and telecoms providers specifically, on the view that fraud increasingly originates on their surfaces even when the loss is ultimately realised through a bank payment.

Pundit angle: “UK banks now offer the world’s strongest fraud reimbursement protection.”

Operator angle: “97% of in-scope claims are being reimbursed, but scope and its exceptions are where the remaining risk sits — know your bank’s specific eligibility criteria before a payment goes out, not after.”

What happens next

The PSR has set out a roadmap: stakeholder engagement through summer 2026, followed by a formal consultation — expected before the end of the year, and other coverage of the roadmap points to December 2026 specifically — aimed at improving consistency in how the policy is applied. New comparative data on which platforms fraudsters are actually using to reach victims is also expected before year-end. Separately, the Bank of England has signalled its own intention to bring a comparable reimbursement model to CHAPS, which sits outside Faster Payments and outside this requirement as currently scoped.

The operator read

Two distinct audiences exist inside this Room’s subscriber base, and the implication differs by which one an operator falls into. As a business banking customer sending or receiving Faster Payments in the ordinary course of trade, the reimbursement protection is now real and, for in-scope claims, close to total — which changes the calculus on how much time to spend chasing a loss internally versus escalating a claim. As a platform, marketplace, or any business that itself sits in a receiving-PSP-adjacent role — collecting payments on behalf of others, or operating payment rails to end customers — the 50/50 shared liability is a direct and growing cost line, not an abstract regulatory topic, and the December consultation is worth a calendar entry now.

5  OPERATOR IMPLICATIONS

Five actions, ordered by urgency, drawn from the three deep-dives above.

1. If you collect recurring payments in a Wave 1 sector — regulated financial services, utilities, telecoms, rail, charities, government — test cVRP now. The rulebook, the pricing model, and the settlement mechanics are live and proven in production. This is no longer a pilot decision; it is a vendor conversation with your existing Open Banking PIS or BaaS provider. Ask specifically about the fixed pence-per-transaction MLA rate and how it compares, per collection, to your current Direct Debit failure and re-presentment costs — that comparison, not a headline percentage, is the number worth building a business case on.
2. If you take card payment from EEA-issued cards, or pay EEA suppliers by commercial card, ask your acquirer for interchange-plus (IC+) pricing this month. You are very likely paying elevated cross-border interchange today, whether or not you can see it on your statement. A future cap changes the going-forward rate; visibility into your current exposure is available immediately and costs nothing to obtain.
3. If you sit outside Wave 1 but expect to collect recurring or subscription-style payments in e-commerce or general trade, start vendor conversations for cVRP readiness now. Wave 2 eligibility is expected in the second half of 2026. The lead time to integrate is measured in quarters, not weeks — the operators ready when eligibility opens will be the ones who started before it did. In the meantime, continue developing your existing sweeping VRP and single-payment Open Banking capabilities; that infrastructure carries forward directly once Wave 2 opens rather than requiring a separate build.
4. Review your bank or PSP relationship for APP fraud reimbursement eligibility criteria before assuming a loss is unrecoverable. The gross-negligence bar for a PSP to decline a claim is high, and in-scope claims are now being reimbursed at 97%. If you operate a platform or marketplace that receives payments on behalf of others, map your exposure under the 50/50 liability split specifically — this is a cost line, not a compliance footnote.
5. Note the regulator handover, without acting on it yet. Your PSR contact point for any open consultation response, complaint, or dispute is transitioning to the FCA over the life of this Room. Nothing operational changes today, but track which body holds the pen as the Financial Services and Markets Bill 2026 progresses — it will determine where to send the next submission.

None of the five actions above requires a rebuild of existing payment infrastructure. Each is a conversation, a pricing request, or a scoping exercise — the kind of work that fits inside a single planning cycle rather than a quarter of engineering time. That is deliberate: this issue’s three deep-dives all describe regulatory and scheme-level change still mid-flight, and the correct operator posture at this stage is readiness and cost visibility, not a wholesale migration off any existing rail. Card is not going away in Q4 2026. The businesses best placed for 2027 are the ones who used this quarter to know their numbers, not the ones who moved fastest.

6  WATCH LIST — THROUGH Q4 2026

▸  UKPI cVRP Wave 2 — eligibility for e-commerce, BNPL, unsecured loan repayments, travel, and general commercial trade expected in the second half of 2026 — no confirmed date yet. This is the single biggest forward item for operators outside Wave 1’s regulated sectors, and the trigger for this Room’s next early-notice alert.

▸  PSR consultation MR22/2.8 — outcome on the methodology and level for the UK-EEA cross-border interchange cap — the direction is settled after January’s High Court ruling, but the number and timing are not. Expect the determination to land under joint PSR/FCA signature given the transition underway.

▸  Financial Services and Markets Bill 2026 — parliamentary progress; commencement will mark the formal date PSR functions transfer to the FCA. Track this specifically if you have an open consultation response or dispute with the PSR — the receiving body may change mid-process.

▸  PSR APP fraud consistency consultation — formal consultation on reimbursement consistency expected before the end of 2026, following the Frontier Economics review. Likely to address the scope and exceptions gaps flagged in this issue’s deep-dive.

▸  FCA long-term Open Banking framework — consultation expected by the end of 2026, contingent on legislation granting the FCA new open banking rule-making powers. This is the framework that will eventually govern cVRP beyond its current industry-led, Wave-based rollout.

▸  Bank of England CHAPS reimbursement model — a comparable APP reimbursement framework for CHAPS, sitting outside Faster Payments, has been signalled but not yet formalised.

▸  PSR fraud-platform data release — new comparative data on which platforms and channels fraudsters are using to reach victims is expected before year-end — the first release of its kind at this level of detail.

▸  UKPI participant growth — the founding 31-firm cohort behind UKPI is expected to widen as Wave 1 embeds; new entrants signal how quickly the scheme’s liquidity and bank coverage are maturing ahead of Wave 2.

This Room will flag any of the above the day it lands, ahead of the next scheduled issue, where the development is time-sensitive enough to warrant it.

7  RESOURCE APPENDIX

• FCA. “Open banking takes next step forward with launch of UK Payments Initiative scheme,” 2 June 2026 — fca.org.uk
• PSR. “High Court backs PSR’s powers to cap cross-border card fees,” 15 January 2026, and “Commercial variable recurring payments — update on delivery” — psr.org.uk
• PSR / Frontier Economics. independent review of the first year of mandatory APP scam reimbursement, published 1 July 2026, covered via Finextra and Global Regulation Tomorrow
• Modulr. “Commercial VRP Wave 1: a guide for eligible businesses” — modulrfinance.com
• HM Treasury. “A Streamlined Approach to Payment Systems Regulation” — consultation response, 21 April 2026 — gov.uk
• Bratby Law. “PSR annual plan 2026/27” and “Financial Services and Markets Bill 2026” — bratby.law
• High Court of Justice. Mastercard v PSR [2026] EWHC 64 (Admin), 15 January 2026 — judgment on the PSR’s power to cap cross-border interchange fees
• Plaid. “cVRP: a new standard for recurring payments in the UK” — plaid.com, for a provider-side view of Wave 1 sector eligibility

Next issue: September 2026. Room subscribers receive early notice of Wave 2 cVRP eligibility and the PSR cap determination the day either lands, ahead of the next scheduled issue.