Europe · GDP rank #6
United Kingdom
GB · GBP @ 1.3449/USD
The UK runs the world's most mature open-banking regime, the longest-running instant rail in the developed world, and — since October 2024 — a mandatory reimbursement scheme for authorised push-payment fraud that sets a policy precedent no other major market has matched. The May 2026 Payments Forward Plan now sequences a PSR-into-FCA merger, a Faster Payments LIMA upgrade, and commercial VRP go-live, putting the entire stack into motion at once.
Tab 06
Fraud & security
Headline fraud totals and typology splits, the rollout of EMV chip, tokenisation, 3DS and biometrics, and the controlling data-protection and payments statutes.
Annual fraud losses
GBP · 2024
Loss rate
basis points on transaction value · 2024
CNP share of fraud
% · 2024
Fraud typology
Where losses come from
Card-not-present dominates every developed-market fraud profile — counterfeit and lost/stolen have both been mechanically suppressed by EMV and tokenisation over the last decade.
Share of card fraud
- Remote purchase (CNP)77%
- Lost and stolen14%
- Card ID theft8%
Authentication
What's deployed on cards today
EMV is the floor; tokenisation removes PAN from merchant systems; 3DS covers the CNP flow; biometric auth drives device-level wallet transactions. Adoption gaps between markets are the clearest signal of fraud-regime maturity.
EMV chip penetration
% · 2024
Tokenised transactions
% · 2024
3DS coverage · CNP
% · 2024
SCA mandatory under retained PSD2; exemptions narrowed since 2022.
Biometric mobile wallet txns
% · 2024
Consumer protection
- Framework
- Consumer Credit Act 1974 + FCA Handbook + PSR APP reimbursement rules
- Max consumer liability
- £0 for unauthorised card fraud; £100 excess applicable to APP scam claims
- Liability rules
- Section 75 of the Consumer Credit Act makes credit-card issuers jointly liable for merchant breaches on transactions £100-£30,000. Unauthorised card fraud is £0 consumer liability subject to no-negligence. APP scam losses are reimbursed 50:50 between sending and receiving PSPs under PSR rules since October 2024, capped at £85,000 per claim.
Source · FCA
Security standards
- ▌PCI DSS 4.0 (mandatory March 2025)
- ▌Strong Customer Authentication (retained PSD2 SCA, FCA-supervised)
- ▌Confirmation of Payee (mandatory across FPS participants, 2023)
- ▌Operational resilience rules (PRA SS1/21, in force)
Full reference
App Fraud
APP scam losses
GBP · 2024— First year-on-year fall since records began; PSR mandatory reimbursement cited as primary driver.
APP claim reimbursement rate
% · Q4 2025