When will PSD3 and the PSR apply?

A political agreement was reached in November 2025 and the Parliament's ECON committee approved the texts in May 2026. The final plenary vote is indicatively scheduled for December 2026. Most rules apply 21 months after entry into force, so late 2028 at the earliest.

The remaining steps

• Final vote in the European Parliament plenary.
• Formal adoption by the Council.
• Publication in the Official Journal of the EU, followed by entry into force.
• An application period before most rules start to apply.

Two texts, two timelines in practice

The PSR is a regulation: once its application date arrives, it applies directly in every member state. PSD3 is a directive: each country must transpose it into national law, which can create small differences in timing and detail. Some provisions may also have their own dates, longer or shorter than the general one.

What to do before then

The period before application is the time to review authentication flows, fraud monitoring, refund processes for impersonation fraud, payee name checks and fee transparency. Licensed institutions will also need to check how the new authorization rules affect them.

Dates can move

Legislative calendars often slip. The plenary date is indicative, and the application date depends on when the texts are actually published.

What it means for payment operators

For you, the run-up to late 2028 is the window to adapt authentication policies, fraud processes and reporting for your EU merchants. Configurable rules per merchant reduce the work when the final requirements are confirmed.