Fraudulent IBAN sharing

France, through the Labaronne Law (2025-1058) dated November 6^th, 2025, is very active on the topic of payment fraud, with the implementation of a national database operated by the Banque de France.

In Art. L. 521-6-1.-I. of the French Monetary and Financial Code, it is mentioned that “in order to improve the prevention, investigation, and detection of payment fraud, a national database records information enabling the identification of payment accounts and deposit accounts that payment service providers as defined in Article L. 521-1 of the French Monetary and Financial Code, established or operating in France – except for AISPs and PISPs – suspect to be potentially fraudulent, notably based on analyses carried out within the framework of their internal anti-fraud systems”.

This database, the FNC-RF, (Fichier National des Comptes signalés pour Risque de Fraude, standing for national file of accounts reported for fraud risk), leverages MISP (Malware Information Sharing Platform), initially built to prevent cyberthreats and more specifically to enable the exchange of key indicators.

Paving the way for the upcoming Payment Service Regulation (PSR)

With PSR currently in the final trilogue phase, the regulation might be adopted in the months to come. The regulation will harmonize payment rules and obligations across the EU and will also aim to strengthen consumer protection and fight payment fraud.

The forthcoming Payment Services Regulation (PSR) will strengthen such rules and obligations. As stated in Article 83a (latest version), “PSPs shall participate in information sharing arrangements with other PSPs and shall exchange data to the extent necessary to comply with their obligation to prevent and detect potentially fraudulent payment transactions, where the PSP has objectively justified reasons to suspect fraudulent behavior by a PSU. The information sharing arrangements shall specify the details of participation and the details of operational elements, including the use of dedicated IT platforms. […]”

Moreover, the EPC (European Payments Council) launched, earlier this year, a request for information to identify organizations interested in providing, operating and supporting a Central Platform for its Fraud Information Distribution Arrangement (FRIDA) Scheme. As explained by the EPC, “FRIDA is designed to enable PSPs – and potentially other stakeholders – to exchange fraud information under common rules, standards and practices across Single Euro Payments Area (SEPA) and EPC schemes”.

The LUXHUB team is monitoring the latest progress, and will make sure that all upcoming provisions related to fraud can be rapidly implemented within its Fraud Intelligence Gateway.