PSD2 remains the in-force EU payment-services framework. The European Commission adopted, on 28 June 2023, two proposals to update the EU payments framework: (a) COM(2023) 366 - the proposed Payment Services Directive 3 (PSD3); (b) COM(2023) 367 - the proposed Payment Services Regulation (PSR). The proposals split the current PSD2 regime into a Directive (covering authorisation + supervision of payment institutions) and a directly-applicable Regulation (covering substantive rules including SCA + Open Banking + transparency + fraud liability). Notable proposed changes: harmonised IBAN + name check; tighter SCA + accessibility provisions; enhanced fraud-liability + IBAN-name-mismatch refund regime; improved Open Banking interface performance + dashboards for PSU consent management; merging the E-Money Directive 2 (EMD2) into PSD3. As of 2026-05-28 the PSD3 + PSR are in EU trilogues. Until adoption + transposition (typically 18 months post-adoption) PSD2 (Directive (EU) 2015/2366) + Commission Delegated Regulation (EU) 2018/389 remain the applicable framework.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.