PSR obligations register
Each row is an obligation of the PSR, the Payment Services Regulation, or of PSD3. It is cited in the provisional numbering of the April 2026 compromise and checked against the page of the Council document given as its source. The STET column says what version 1.6.3 of the specification covers.
73 obligations · Last checked on October 4, 2026 · The data is published under a CC BY-SA 4.0 licence.
What the STET statuses mean
- Covered
- The specification covers the obligation.
- Partial
- The specification covers part of it.
- Missing
- Nothing in the specification covers it.
- To review
- The specification has a mechanism whose meaning the PSR changes, and the flow needs reviewing.
- Out of spec
- The obligation is not something an API specification can carry.
Dedicated interface(18)
- CoveredOB-IF-001PSR 35(1)T + 21 months
At least one dedicated interface per ASPSP
ASPSP
- Out of specOB-IF-002PSR 35(2)T + 21 months
Interface live within three months of authorisation
ASPSP
- CoveredOB-IF-003PSR 35(3)T + 21 months
Recognised communication standards
ASPSP
- Out of specOB-IF-004PSR 35(3)T + 21 months
Free technical documentation and public summary
ASPSP
- Out of specOB-IF-005PSR 35(4)T + 21 months
Two months' notice before any change
ASPSP
- Out of specOB-IF-006PSR 35(5)T + 21 months
Quarterly statistics published
ASPSP
- Out of specOB-IF-007PSR 35(6)T + 21 months
Testing facility with support
ASPSP
- CoveredOB-IF-008PSR 35(7)T + 21 months
Error messages that explain the cause
ASPSP
- CoveredOB-IF-009PSR 36(2)(b)T + 21 months
Authentication started by the TPP, protected session
ASPSP
- Out of specOB-IF-010PSR 37(1)T + 21 months
Parity with the customer interface
ASPSP
- Out of specOB-IF-011PSR 38(1)T + 21 months
Unavailability presumed after five failed requests
ASPSP
- Out of specOB-IF-012PSR 38(2)T + 21 months
Maintenance announced a month ahead, from 00:00 to 06:00
ASPSP
- Out of specOB-IF-013PSR 38(2a)T + 21 months
TPPs kept informed during an outage
ASPSP
- Out of specOB-IF-014PSR 39(1)T + 21 months
Derogation from the dedicated interface
ASPSP · National authority
- Out of specOB-IF-015PSR 45(1)T + 21 months
TPP access through the dedicated interface only
AISP · PISP
- Out of specOB-IF-016PSR 45(2)T + 21 months
TPP duties on the customer interface
AISP · PISP
- CoveredOB-IF-017PSR 36(2)(a)T + 21 months
TPP identification towards the ASPSP
ASPSP · AISP · PISP
- Out of specOB-IF-018PSR 40(c)T + 21 months
TPP requests treated like the customer's own
ASPSP
Account information(7)
- CoveredOB-AIS-001PSR 33(2)T + 21 months
All payment accounts accessible online
ASPSP
- CoveredOB-AIS-002PSR 36(3)T + 21 months
Minimum data for the AISP
ASPSP
- PartialOB-AIS-003PSR 37(2)T + 21 months
Data parity with the customer interface
ASPSP
- To reviewOB-AIS-004PSR 41(2)T + 21 months
AIS access with or without the user
ASPSP
- Out of specOB-AIS-005PSR 41(2a)T + 21 months
User told about background access
AISP
- Out of specOB-AIS-006PSR 36(5a)T + 21 months
Holder name and identifier are not sensitive
ASPSP · AISP · PISP
- CoveredOB-AIS-007PSR 47(1)(d)T + 21 months
The AISP accesses designated accounts only
AISP
Payment initiation(14)
- CoveredOB-PIS-001PSR 36(4)(a)T + 21 months
Standing order, set-up and revocation
ASPSP
- CoveredOB-PIS-002PSR 36(4)(b)T + 21 months
Single payment
ASPSP
- CoveredOB-PIS-003PSR 36(4)(c)T + 21 months
Future-dated payment, initiation and revocation
ASPSP
- CoveredOB-PIS-004PSR 36(4)(d)T + 21 months
Payments to multiple beneficiaries
ASPSP
- CoveredOB-PIS-005PSR 36(4)(e)T + 21 months
Payee outside the payer's beneficiary list
ASPSP
- PartialOB-PIS-006PSR 37(3)T + 21 months
Execution information and status until the end
ASPSP
- MissingOB-PIS-007PSR 36(4)(g)T + 21 months
Account holder name check before initiation
ASPSP
- PartialOB-PIS-008PSR 36(4)(ha)T + 21 months
The PISP chooses the authentication procedure
ASPSP
- MissingOB-PIS-009PSR 36(4)(hc)T + 21 months
Account, holders and currencies visible before initiation
ASPSP
- PartialOB-PIS-010PSR 36(5)(a)T + 21 months
Yes or no answer on funds
ASPSP
- PartialOB-PIS-011PSR 36(5)(b)T + 21 months
Confirmation that the payment will be executed
ASPSP
- PartialOB-PIS-012PSR 65(1)T + 21 months
Refusal over suspected fraud, reasons to the PISP
ASPSP
- To reviewOB-PIS-013PSR 57T + 27 months
Payee verification, PISP liability
PISP · ASPSP
- Out of specOB-PIS-014PSR 46(1)(fa)T + 21 months
The PISP may refuse to initiate
PISP
Consent dashboard(9)
- Out of specOB-DB-001PSR 43(1)T + 21 months
Consent dashboard at the ASPSP
ASPSP
- PartialOB-DB-002PSR 43(2)(a)T + 21 months
What the dashboard shows
ASPSP
- Out of specOB-DB-003PSR 43(2)(b)T + 21 months
Withdrawal at any time, free of charge
ASPSP
- MissingOB-DB-004PSR 43(2)(c)T + 21 months
Re-establishment possible for 48 hours
ASPSP
- Out of specOB-DB-005PSR 43(2)(d)T + 21 months
Two-year history
ASPSP
- Out of specOB-DB-006PSR 43(2b)T + 21 months
After withdrawal, the TPP stops and deletes
AISP · PISP
- PartialOB-DB-007PSR 43(3b)T + 21 months
The TPP sends each consent to the ASPSP
AISP · PISP · ASPSP
- PartialOB-DB-008PSR 43(4)T + 21 months
The ASPSP tells the TPP about every change
ASPSP
- Out of specOB-DB-009PSR 43(3)T + 21 months
Neutral dashboard, no deceptive design
ASPSP
Prohibited obstacles(13)
- CoveredOB-OBS-001PSR 44(1)(a)T + 21 months
Blocking the use of the bank's credentials
ASPSP
- CoveredOB-OBS-002PSR 44(1)(b)T + 21 months
Making the user type the account identifier at the bank
ASPSP
- To reviewOB-OBS-003PSR 44(1)(c)T + 21 months
Checking the consent given to the TPP
ASPSP
- To reviewOB-OBS-004PSR 44(1)(d)T + 21 months
Requiring additional registrations
ASPSP
- To reviewOB-OBS-005PSR 44(1)(e)T + 21 months
Requiring contact details to be pre-registered
ASPSP
- CoveredOB-OBS-006PSR 44(1)(f)T + 21 months
Limiting payments to the payer's beneficiary list
ASPSP
- CoveredOB-OBS-007PSR 44(1)(g)T + 21 months
Limiting to domestic account identifiers
ASPSP
- To reviewOB-OBS-008PSR 44(1)(h)T + 21 months
More SCA than in the direct channel
ASPSP
- CoveredOB-OBS-009PSR 44(1)(i)T + 21 months
Not supporting every authentication procedure
ASPSP
- Out of specOB-OBS-010PSR 44(1)(j)T + 21 months
Adding steps to the journey
ASPSP
- To reviewOB-OBS-011PSR 44(1)(k)T + 21 months
Forcing a redirect to the bank's website
ASPSP
- CoveredOB-OBS-012PSR 44(1)(l)T + 21 months
Two SCAs in a payment-initiation-only journey
ASPSP
- Out of specOB-OBS-013PSR 34T + 21 months
No contract required for the baseline
ASPSP · AISP · PISP
Strong customer authentication(5)
- CoveredOB-SCA-001PSR 86(2)T + 21 months
TPPs rely on the ASPSP's authentication
ASPSP
- To reviewOB-SCA-002PSR 86(3)T + 21 months
ASPSP SCA on the AISP's first access only
ASPSP
- To reviewOB-SCA-003PSR 86(4)T + 21 months
AISP SCA every 180 days
AISP
- Out of specOB-SCA-004PSR 85aFrom entry into force
Recurring credit transfers without SCA each time
ASPSP
- Out of specOB-SCA-005PSR 89(1)(e)From entry into force
RTS on open communication standards
EBA
Authorities and sanctions(7)
- Out of specOB-ENF-001PSR 48(1)T + 21 months
The authority has obstacles removed
National authority
- Out of specOB-ENF-002PSR 48(6)T + 21 months
Dedicated staff and ASPSP-TPP meetings
National authority
- Out of specOB-ENF-003PSR 48(7)T + 21 months
TPP access data reported to the authority
ASPSP · AISP · PISP · National authority · EBA
- Out of specOB-ENF-004PSR 42(1)T + 21 months
Denying a TPP access over fraud
ASPSP · National authority
- Out of specOB-ENF-005PSR 97T + 21 months
Maximum fine of at least 10% of turnover
National authority
- Out of specOB-ENF-006PSR 98T + 21 months
Daily penalty payments for up to six months
National authority
- Out of specOB-ENF-007PSD3 18(7)T + 21 months
Machine-readable central list of AISPs and PISPs
EBA