1 min readWarningEBA reporting framework 4.2Updated 10 November 2026

Issuance of a payment order by a fraudster must equal the sum of its four parts (Y 03.01, row 0420, EBA rule v09137_m)

A warning in the payment fraud return (PSD2 fraud reporting), on template Y 03.01, card-based payment transactions reported by the issuing payment service provider.

The rule in plain words

Issuance of a payment order by a fraudster must equal these four added up:

  • Lost or stolen card
  • Card not received
  • Counterfeit card
  • Other

All the values are in the fraudulent payment transactions column (0020) of Y 03.01.

EBA checks it on three sheets, all for number of transactions: domestic, cross-border within the EEA and cross-border outside the EEA. That makes three checks. A failure names the one that failed.

How the Line4 Check report words itShow

The first of its checks, word for word as the report shows it when it fails. The others read the same, with their own column, row or sheet.

Fraudulent payment transactions: Lost or stolen card, Domestic number of transactions + Card not received, Domestic number of transactions + Counterfeit card, Domestic number of transactions + Other, Domestic number of transactions = Issuance of a payment order by a fraudster, Domestic number of transactions

What to do if your filing fails it

  1. 01Open the template below and find the cells the rule reads.
  2. 02Add up the parts in your file and compare the result with the total.
  3. 03If they differ, a part is missing, a value sits in the wrong row, or the total is out of date.
  4. 04EBA allows a small rounding difference, worked out from the decimals each value is reported with.
  5. 05It runs only when your filing indicators mark Y 03.01 as reported.
  6. 06This is a warning. It does not stop the filing on its own, but your authority may ask you to explain it.

The cells it reads

Card-based payment transactions reported by the issuing payment service provider (Y 03.01)

Rows

  • 0420Issuance of a payment order by a fraudster
  • 0430Lost or stolen card
  • 0440Card not received
  • 0450Counterfeit card
  • 0460Other

Column

  • 0020Fraudulent payment transactions

Sheets

  • 0020Domestic number of transactions
  • 0040Cross-border within the EEA number of transactions
  • 0060Cross-border outside the EEA number of transactions

A worked example

The first of its checks, with simple numbers.

Illustrative values
Lost or stolen card1,200
Card not received800
Counterfeit card450
Other300
Together2,750
What the rule then expects

Issuance of a payment order by a fraudster must then be 2,750.

2,750Passes
2,850Fails

A file that reports 2,750 passes. One that reports 2,850 fails, by 100.

The numbers are illustrative, reported to the unit, so the rounding tolerance does not change the result.

Show the rule as writtenShow

EBA's formula, as written out for the first of its checks. Cells are written as {template, row, column, sheet}.

{Y_03.01,r0430,c0020,s0020} + {Y_03.01,r0440,c0020,s0020} + {Y_03.01,r0450,c0020,s0020} + {Y_03.01,r0460,c0020,s0020} = {Y_03.01,r0420,c0020,s0020}

The next two:

{Y_03.01,r0430,c0020,s0040} + {Y_03.01,r0440,c0020,s0040} + {Y_03.01,r0450,c0020,s0040} + {Y_03.01,r0460,c0020,s0040} = {Y_03.01,r0420,c0020,s0040}{Y_03.01,r0430,c0020,s0060} + {Y_03.01,r0440,c0020,s0060} + {Y_03.01,r0450,c0020,s0060} + {Y_03.01,r0460,c0020,s0060} = {Y_03.01,r0420,c0020,s0060}

Every PSD2 fraud reporting rule, by template

Checks like this one, run at the point of submission, are the first step to real-time supervision.