Malta Payment Services Directive

The Payment Services Directive aims to ensure your security when making payments within the European Union.

The Payment Services Directive was initially introduced in 2009 to create a single market for payments within the European Union. The European Commission built on the original Directive and issued the Revised Payment Services Directive (PSD2), which came into effect on 13 January 2018.

PSD2 regulates all payment services throughout the European Union. It is designed to make payments safer, give further protection to consumers, and encourage innovation and competition.

Regulating Third-Party Providers for Payment Service Directive

PSD2 regulates new players on the market, which are known as Third Party Providers (TPPs). They are, in turn, broken down into two types: Account Information Service Providers (AISPs) and Payment Initiation Service Providers (PISPs).

On the one hand, AISPs, with the client’s consent, provide an aggregation of all the payment accounts held at different banks by the said client. PISPs, on the other hand, can make a payment on behalf of a consenting client to a bank from the client’s payment account.

Payments, Security, and Fraud

PSD2 demands increased customer authentication to beef up security and mitigated card payment fraud. As a result, banks are no longer allowed to issue local debit cards limited to magnetic strip technology.

This has led to a nationwide upgrade of card technology to EMV – more commonly known as Chip & Pin. These changes have also led to the ushering in of contactless cards, also known as Pay Wave or Tap and Go, allowing for much faster low-value transactions.

If a card is stolen and fraudulent transactions are made, the client is only liable to pay a maximum of EUR50. In addition, PSD2 prohibits the charging of extra fees on card transactions.

Sharing of charges

PSD2 also changes the process of bank transfer charges. If the bank accounts of the person making the payment and the person receiving the payment are within the European Economic Area, bank charges will be shared between both parties, irrespective of the payment currency.


PSD2 also directs banks to provide monthly and annual statements to clients free of charge in electronic or paper format. Consumers have the right to complain of their bank if they feel that any PSD2 provisions have been breached.

Banks are obliged to address any complaint within 15 or 35 days if the information is needed from third parties.