Annex 2 – Data reporting requirements for payment service providers

Item transactions Payment transactions Fraudulent payment

1 Credit transfers X X 1.1 Of which initiated by payment initiation service providers X X

1.2 Of which initiated non-electronically X X 1.3 Of which Initiated electronically X X 1.3.1 Of which initiated via remote payment channel X X

Item transactions Payment Fraudulent transactions payment

2 Direct debits X X 2.1 Of which consent given via an electronic mandate X X

of which fraudulent direct debits by fraud type:

2.1.1.1 Unauthorised payment transactions X 2.1.1.2 Manipulation of the payer by the fraudster to consent to a direct debit X 2.2 Of which consent given in another form than an electronic mandate X X

of which fraudulent direct debits by fraud type: 2.2.1.1 Unauthorised payment transactions X 2.2.1.2 Manipulation of the payer by the fraudster to consent to a direct debit X

Losses due to fraud per liability bearer: Total losses The reporting payment service provider X The payment service user (payee) X Others X

Validation 2.1 + 2.2 = 2

2.1.1.1 + 2.1.1.2 = fraudulent payment transaction figure of 2.1

2.2.1.1 + 2.2.1.2 = fraudulent payment transaction figure of 2.2

32

3 Card payments (except cards with an e-money function only) X X 3.1 Of which initiated non-electronically X X

3.2 Of which initiated electronically X X 3.2.1 Of which initiated via remote payment channel X X

3.2.1.2.1 Issuance of a payment order by a fraudster X 3.2.1.2.1.1 Lost or stolen card X 3.2.1.2.1.2 Card not received X 3.2.1.2.1.3 Counterfeit card X 3.2.1.2.1.4 Card details theft X 3.2.1.2.1.5 Other X 3.2.1.2.2 Modification of a payment order by the fraudster X 3.2.1.2.3 Manipulation of the payer to make a card payment X 3.2.1.3 Of which Authenticated via non-strong customer authentication X X

3.2.1.3.1 Issuance of a payment order by a fraudster X 3.2.1.3.1.1 Lost or stolen card X 3.2.1.3.1.2 Card not received X 3.2.1.3.1.3 Counterfeit card X 3.2.1.3.1.4 Card details theft X

3.2.1.3.1.5 Other X 3.2.1.3.2 Modification of a payment order by the fraudster X 3.2.1.3.3 Manipulation of the payer to make a card payment X

3.2.1.3.4 Low value (Art.16 RTS) X X 3.2.1.3.5 Trusted beneficiary (Art.13 RTS) X X 3.2.1.3.6 Recurring transaction (Art.14 RTS) X X 3.2.1.3.7 Use of secure corporate payment processes or protocols (Art. 17 RTS) X X 3.2.1.3.8 Transaction risk analysis (Art.18 RTS) X X ►A1 3.2.1.3.9 Merchant initiated transactions⁴ X X ►A1 3.2.1.3.10 Other X X 3.2.2 Of which initiated via non-remote payment channel X X

3.2.2.2.1 Issuance of a payment order by a fraudster X 3.2.2.2.1.1 Lost or stolen card X 3.2.2.2.1.2 Card not received X 3.2.2.2.1.3 Counterfeit card X 3.2.2.2.1.4 Other X 3.2.2.2.2 Modification of a payment order by the fraudster X 3.2.2.2.3 Manipulation of the payer to make a card payment X 3.2.2.3 Of which authenticated via non-strong customer authentication X X

3.2.2.3.1 Issuance of a payment order by a fraudster X 3.2.2.3.1.1 Lost or stolen card X 3.2.2.3.1.2 Card not received X

4 ►A1 i.e, card-based payment transactions that meet the conditions specified by the European Commission in Q&A 2018_4131 and Q&A 2018_4031 and which are, as a result, considered as payee initiated and not subject to the requirement in Article 97 PSD2 to apply SCA

3.2.2.3.1.3 Counterfeit card X 3.2.2.3.1.4 Other X 3.2.2.3.2 Modification of a payment order by the fraudster X 3.2.2.3.3 Manipulation of the payer to make a card payment X

3.2.2.3.4 Trusted beneficiary (Art.13 RTS) X X 3.2.2.3.5 Recurring transaction (Art.14 RTS) X X 3.2.2.3.6 Contactless low value (Art.11 RTS) X X 3.2.2.3.7 Unattended terminal for transport or parking fares (Art.12 RTS) X X

Item transactions Payment transactions Fraudulent payment

4 Card payments acquired (except cards with an e-money function only) X X 4.1 Of which initiated non-electronically X X

4.2 Of which initiated electronically X X 4.2.1 Of which acquired via a Remote channel X X of which broken down by card function: 4.2.1.1.1 Payments with cards with a debit function X X 4.2.1.1.2 Payments with cards with a credit or delayed debit function X X 4.2.1.2 Of which authenticated via strong customer authentication X X

4.2.1.2.1 Issuance of a payment order by a fraudster X 4.2.1.2.1.1 Lost or stolen card X 4.2.1.2.1.2 Card not received X 4.2.1.2.1.3 Counterfeit card X 4.2.1.2.1.4 Card details theft X 4.2.1.2.1.5 Other X 4.2.1.2.2 Modification of a payment order by the fraudster X 4.2.1.2.3 Manipulation of the payer to make a card payment X 4.2.1.3 Of which authenticated via non-strong customer authentication X X

4.2.1.3.1 Issuance of a payment order by a fraudster X 4.2.1.3.1.1 Lost or stolen card X 4.2.1.3.1.2 Card not received X 4.2.1.3.1.3 Counterfeit card X 4.2.1.3.1.4 Card details theft X

▼ A1

Item transactions Payment transactions Fraudulent payment

Item Payment transactions Fraudulent transactions payment

6 E-money payment transactions X X

Item transactions Payment Fraudulent transactions payment

Item Payment transactions Fraudulent transactions payment

8 Payment transactions initiated by payment initiation service providers X X 8.1 Of which initiated via remote payment channel X X 8.1.1 Of which authenticated via strong customer authentication X X

8.1.2 Of which authenticated via non-strong customer authentication X X 8.2 Of which initiated via non-remote payment channel X X 8.2.1 Of which authenticated via strong customer authentication X X

8.2.2 Of which authenticated via non-strong customer authentication X X

of which broken down by payment instrument 8.3.1 Credit transfers X X

8.3.2 Other X X