*By Gustavo H. R. Pessoa
Consider a hypothetical Cypriot food exporter paying a packaging supplier. An email announces new bank details, and the invoice looks familiar. Before the transfer is authorised, the banking app reports that the recipient’s name does not match. The exporter now has to decide whether this is an ordinary naming difference or an attempt to divert the payment. A useful warning must help with that decision.
Cyprus already has the regulatory foundation. The Central Bank of Cyprus identified 9 October 2025 as the deadline for payment service providers in scope to offer verification of the payee. The safeguard covers ordinary as well as instant euro credit transfers within the rules’ scope. The practical task now is to make it understandable to the person paying a supplier, often while also handling customers, deliveries and staff.
The check compares the intended recipient’s details with those held for the account. The European Payments Council describes results including a match, a close match, no match and a check that cannot be completed. These are useful signals about payment details. They cannot establish whether an invoice is genuine, whether goods will arrive or whether the person requesting payment is entitled to do so.
In the exporter’s case, a mismatch deserves attention, but it does not prove fraud. A supplier may use a trading name on its invoice and a different name for its bank account. Equally, a convincing email may carry false instructions. The business needs to establish why the details differ before deciding to pay. Editing the recipient’s name merely to remove the warning would leave the original question unanswered.
A workable company rule would be to verify changes of bank details through a trusted contact established before the new request arrived. That could mean calling the supplier on a number already held in the company’s records, rather than the number in the email announcing the change. The person checking should confirm both the new account details and the reason for the change, then keep a short record of that confirmation.
The process should fit the firm. A larger business can require a second person to approve a supplier-account change. An owner working alone needs a simpler rule that can survive a busy afternoon: make the independent check before changing the saved payment instructions. Treating every routine invoice as a new investigation would consume time and encourage shortcuts. Changes to established details deserve particular care.
Banks can make this easier. A warning should distinguish a naming discrepancy from a check that was unavailable, explain what was checked and offer a clear way to correct the details or leave the payment unfinished. Guidance beside the warning should explain how to verify changed instructions independently. A prominent button to continue, beside an obscure explanation, places too much of the work on the customer.
The customer can still decide to proceed. The European Payments Council expressly says that a provider must not prevent a transfer solely because of the verification result. Other fraud controls may still apply. That makes the quality of the explanation especially important: the payer needs to understand the uncertainty before authorising the transfer.
Business payment arrangements also need care. The European Commission’s implementation guidance explains that non-consumer users may opt out of verification when submitting multiple payment orders as a package. This is not a general exemption for individual business payments. Firms using bulk files should discuss the setup with their provider and decide how new or changed supplier details will be checked within their own approval process.
Neither a successful match nor a warning promises that a fraud loss will be reimbursed. Providers have specific obligations under the rules, and responsibility for a loss depends on what happened and whether those obligations were met. Businesses should be able to report a suspected diversion promptly, preserve the relevant messages and obtain an explanation of the complaint process. A warning should never be presented as settling every question of liability.
For Cyprus, the next useful evidence would concern what happens after a warning appears. Banks could examine how often legitimate details need correcting, how frequently checks are unavailable and whether customers understand the next step. Business associations could help test sample messages with small firms. Counting warnings alone would reveal little about whether they prevent mistakes or create confusion; any claim of reduced fraud would require separate evidence.
For the exporter, money sent to the wrong account can leave less cash for wages, supplies and the genuine invoice. A brief, understandable check therefore has economic value beyond the payment screen. Cyprus should judge payee verification by whether a business owner can resolve uncertainty and pay the right supplier with confidence.
*Gustavo H. R. Pessoa is an economist and professor at Fundação Getulio Vargas in São Paulo, Brazil.
