Can Europe Stop Fraud at the Speed of Money?
Europe made payments instant. Its defences remain fragmented.
SIGNAL | Europe’s payment system can move money across borders in seconds. But the warnings that identify fraud still travel between banks, platforms and authorities at institutional speed. That difference is rapidly becoming a vulnerability in Europe’s financial architecture.
Europe has spent years removing friction from payments. Transfers are becoming faster, borders less visible and digital access almost immediate.
Financial crime has evolved in the opposite direction. Criminals no longer need to defeat every security layer. Increasingly, they manipulate the authorised user, exploit the separation between institutions and move the money before the wider pattern becomes visible.
The problem is no longer merely whether European banks can detect suspicious transactions. It is whether Europe can connect warning signals as quickly as its financial system connects accounts.
Four questions expose the gap.
🟦 1. What has changed about payment fraud?
The customer has become part of the attack infrastructure.
European payment security was built around a relatively clear distinction: either a transaction was authorised by the customer or it was not.
Strong Customer Authentication reinforced that model. It made stolen credentials less useful, strengthened the technical perimeter of bank accounts and helped institutions identify unusual devices or access attempts. But modern fraud increasingly circumvents this perimeter by manipulating the person inside it.
A customer may genuinely authenticate a payment while acting on a fabricated invoice, an impersonated bank employee, a false investment opportunity or an urgent request apparently coming from a colleague or family member. The bank establishes that the correct person approved the transaction. It cannot automatically establish whether that person’s understanding of the transaction was real.
That distinction is becoming more important as generative AI reduces the cost of deception. Convincing messages can be produced in multiple languages. Voices can be imitated. Corporate identities can be reconstructed. False documentation, advertisements and video can be generated at scale.
The attack is therefore shifting from access to interpretation. Fraudsters do not always need to penetrate the bank’s systems when they can manipulate the customer’s perception of reality.
The next generation of fraud does not always break authentication. It manufactures consent.
This creates an uncomfortable limit to Europe’s existing security model. Authentication can establish identity. It cannot guarantee independent judgement.
🟦 2. Why do instant payments increase the danger?
Europe has compressed the transaction time without equally compressing the response time.
Instant payments improve competition, liquidity and convenience. They also remove the interval in which suspicious transactions can still be reviewed, delayed or recalled.
Once an instant payment reaches the receiving account, the money can immediately be divided, transferred again or converted into other assets. A transaction may be technically valid and practically irreversible before its wider context is understood.
Verification of Payee strengthens the system by comparing the name entered by the payer with the account holder’s name. It can reduce errors and intercept certain forms of invoice fraud. But it cannot determine whether the account belongs to a money mule, whether the payer is being manipulated or whether several ordinary-looking transactions together form a criminal network.
That is the central tension. Europe is making each payment faster while the intelligence needed to interpret it remains dispersed across institutions. Banks can strengthen controls around an individual transaction. They cannot recover time that the infrastructure has removed.
Nor is simply delaying more payments an adequate solution. Excessive intervention would weaken the efficiency Europe is trying to create, generate false positives and place additional burdens on legitimate customers and companies.
Europe therefore faces a harder technical and institutional challenge: it must increase speed and scrutiny simultaneously.
An instant payment system cannot depend on warnings that arrive after the money.
🟦 3. Why can individual banks no longer solve the problem?
Every institution sees a transaction. Criminals operate a network.
A bank sees its own customer, accounts and transaction history. The receiving bank sees another section of the payment chain. A telecommunications provider may detect a compromised telephone number. A digital platform may possess information about the fraudulent advertisement or identity that initiated the contact. A payment technology provider may identify related behaviour across several institutions.
No single actor necessarily sees the entire operation. This is not merely a technological limitation. It is a consequence of institutional design. Data is separated by commercial boundaries, national jurisdictions, privacy requirements, reporting systems and different forms of supervision. Those boundaries may be legitimate, but criminal organisations treat them as operational space.
Europe has integrated the movement of money more quickly than the movement of intelligence about money.
According to the latest joint EBA–ECB payment fraud report, the reported value of fraudulent payments in the European Economic Area increased from €3.5 billion in 2023 to €4.2 billion in 2024. Strong authentication remains effective against several conventional forms of fraud, but it cannot remove the structural advantages enjoyed by cross-border, adaptive networks.
The European response still often concentrates on the obligations of the individual bank: more checks, more alerts, more reporting and more compliance capacity. Yet adding controls within every institution does not automatically create intelligence between institutions.
It can even produce the opposite result. Banks accumulate large volumes of alerts while lacking the external context needed to distinguish an isolated anomaly from part of a coordinated operation.
The European payment market has become a network. Its defence is still organised largely as a collection of institutions.
Europe has a single market for payments, but not yet a single intelligence layer for fraud.
🟦 4. Who should control Europe’s fraud-intelligence layer?
The technological solution creates a governance problem of its own.
Europe is beginning to recognise the need for shared intelligence.
Verification of Payee introduces preventive checking at the point of payment. The European Anti-Money Laundering Authority is intended to reduce differences between national approaches and strengthen supervision of high-risk cross-border institutions.
On 11 September 2026, the European Payments Council opened a consultation on the proposed Fraud Information Distribution Arrangement, or FRIDA. The scheme is intended to create a standardised framework and central platform through which payment service providers across SEPA can exchange fraud information securely and automatically.
That is an important architectural shift. It acknowledges that fraud cannot be understood by examining individual transactions within individual banks. But the timetable exposes the vulnerability. The European Payments Council expects to publish the formal FRIDA rulebook in May 2027, while implementation is currently expected alongside the Payment Services Regulation in the fourth quarter of 2028.
Europe’s institutional answer is emerging. Criminal adaptation is already occurring.
Private technology companies are filling part of that interval. Platforms such as Feedzai combine behavioural analysis, transaction monitoring and network intelligence across large payment environments. Their growing role reflects a real need: individual banks cannot independently reconstruct every cross-border fraud pattern in real time.
Yet this solution raises a second question. If fraud intelligence becomes indispensable to the functioning of European payments, should that intelligence remain dispersed across banks, be coordinated through shared European infrastructure or become concentrated within a small number of private technology platforms?
The choice is not between public control and private innovation. Europe needs the capability of specialised companies. But it also needs common standards, portability, auditability and meaningful institutional oversight.
Otherwise, Europe may solve the fragmentation of its fraud intelligence by creating a new strategic dependency at the centre of its financial system.
The company that connects the warnings does not merely supply software. It occupies a position inside Europe’s trust infrastructure.
Europe’s missing layer
Europe does not need to reverse the development of instant payments. Nor can it eliminate fraud by adding another compliance procedure to every institution. It needs to close the distance between the speed of the transaction and the speed of collective understanding.
That requires banks, payment providers, digital platforms, telecommunications companies and public authorities to exchange carefully governed signals without building an uncontrolled surveillance system. It also requires Europe to decide which parts of this intelligence architecture are competitive services and which have become shared financial infrastructure.
FRIDA suggests that this question has finally entered institutional view. But recognition is not yet capability, and a rulebook expected to take effect in 2028 offers limited protection against criminal models scaling now.
Europe’s payment system already operates across borders. Its fraud defences must learn to do the same.
SIGNAL
Europe made money instant. Now it must make trust move at the same speed.
Credit
Illustration: Altair Media
Caption
Europe’s payments move between institutions in seconds, while fragmented fraud warnings struggle to keep pace. The next layer of financial infrastructure must make trust travel as quickly as money.
