GDPR (Regulation 2016/679)
Administered in Italy by the Garante per la Protezione dei Dati Personali
Garante per la Protezione dei Dati Personali
Europe · GDP rank #9
IT · EUR @ 1.1595/USD
Italy is the euro area's largest cash-dependent economy and its fourth-largest card market. The national payments story is shaped by Nexi, Europe's largest PayTech, by the state-mandated PagoPA platform for public-sector collections, and by the Instant Payments Regulation that made instant credit transfers a universal right across Italian banks in January 2025 and on the send side from October 2025.
Tab 06
Headline fraud totals and typology splits, the rollout of EMV chip, tokenisation, 3DS and biometrics, and the controlling data-protection and payments statutes.
Card-not-present remains dominant; SCA under PSD2 is universal. APP fraud is the fastest-growing typology and a primary target of the incoming PSD3/PSR package. Verification of Payee under IPR (October 2025) is the first real Italian response.
Reported payment fraud · 2024
Card-not-present share
3DS adoption on CNP
Trend lines
Where a full typology breakdown is not published, the authorities typically disclose year-on-year growth in specific scam categories. Authorised push-payment (APP) scams and account-takeover fraud are the canonical “wallet era” concerns in most markets.
Controlling regulation
Administered in Italy by the Garante per la Protezione dei Dati Personali
Garante per la Protezione dei Dati Personali
Applicable since January 2025; Banca d'Italia and CONSOB are Italian supervisory authorities
European Insurance and Occupational Pensions Authority (EIOPA)
VoP mandatory 9 October 2025; full IPR in force for all Italian PSPs
European Commission
Fully applicable since December 2024; Banca d'Italia and CONSOB are joint supervisors
European Securities and Markets Authority (ESMA)