5 min read · EBA reporting framework 4.2 · Updated 10 November 2026

Payment fraud: every EBA validation rule in plain words (PSD2 fraud reporting)

PSD2 fraud reporting is the data on payment fraud that payment service providers give their national authority every six months, under Article 96(6) of PSD2 and the EBA Guidelines on fraud reporting (EBA/GL/2018/05). The authority adds up its providers’ figures and sends one file to the EBA and the ECB, in the EBA’s fraud reporting templates (Y 01.01 to Y 08.01).

EBA's 4.2 package has 87 validation rules for it. Line4 Check runs 87 of them (2,399 written-out checks): 1 can block a filing and 86 are warnings.

87rules Line4 Check runs
1can block a filing
86warnings
2,399written-out checks

The rules, by template

Each rule in plain words, its code in brackets. Open one for what to do if your filing fails it. A rule that reads more than one template is listed under the first.

Credit transfers transactions (Y 01.01)14 rules, 1 blocking
Losses due to fraud for credit transfers (Y 01.02)1 rule
Direct debits transactions (Y 02.01)5 rules
Losses due to fraud for direct debits (Y 02.02)1 rule
Card-based payment transactions reported by the issuing payment service provider (Y 03.01)19 rules
Losses due to fraud for card-based payment reported by the issuing payment service provider (Y 03.02)1 rule
Card-based payments transactions reported by the acquiring payment service provider (Y 04.01)19 rules
Losses due to fraud for card-based payments reported by the acquiring payment service provider (Y 04.02)1 rule
Cash withdrawals using cards transactions reported by the card issuer’s payment service provider (Y 05.01)5 rules
Losses due to fraud for cash withdrawals using cards reported by the card issuer’s payment service provider (Y 05.02)1 rule
E-money payment transactions (Y 06.01)12 rules
Losses due to fraud for e-money payment transactions (Y 06.02)1 rule
Money remittance payment transactions (Y 07.01)1 rule
Transactions initiated by payment initiation services providers (Y 08.01)6 rules

Checks like this one, run at the point of submission, are the first step to real-time supervision. See every return on EBA validation rules in plain words.