France

Licensing, Authorisation & Market Access

The defining development for France's payments licensing environment this cycle is upstream and supranational: EU Parliament and Council negotiators reached political agreement on the PSD3/PSR package on 27 November 2025. Formal Official Journal publication is expected sometime in the H1-to-Q3 2026 window, a range that has not yet been reconciled across the sources reaching this cycle, and once published will trigger an 18-to-24-month PSD3 national-transposition period followed by an 18-month PSR application delay. France's Code Monétaire et Financier, the primary domestic instrument governing payment-institution and e-money-institution authorisation, will require amendment on whatever exact timeline finally crystallises from that publication date.

Forward-looking supervisory expectation, rather than a confirmed rule at this stage, points to the ACPR and Banque de France prioritising fraud-prevention readiness, Verification of Payee infrastructure and incident-reporting capability in early PSD3-adjacent supervisory reviews. This is a probable-confidence signal drawn from secondary legal commentary rather than a published supervisory statement, and should be read as an indication of likely early-review focus areas rather than settled supervisory policy.

The practical licensing implication for market entrants and existing payment institutions and e-money institutions operating in France is a multi-year forward horizon rather than an immediate compliance deadline: no PSD3/PSR-driven authorisation change applies to French firms yet, but the transposition clock, once the OJ publication date is fixed, will define the window in which national authorisation regimes must be brought into alignment with the new EU framework. The bank-PSP versus non-bank payment-institution/e-money-institution distinction remains structurally relevant here, since PSD3's transposition will apply across both categories under the existing Code Monétaire et Financier authorisation architecture, though no differential treatment between the two categories has been identified in this cycle's evidence.

Outlook

The immediate watch item is reconciliation of the PSD3/PSR OJ-publication date, currently uncertain between H1 and Q3 2026 across trackers. Once fixed, the transposition and application-delay clocks begin running in parallel, and the ACPR/Banque de France supervisory-priority signal, currently only a probable-confidence forward expectation, should be watched for confirmation as formal supervisory guidance emerges.

Licensing, Authorisation & Market Access

PSD3 and the companion Payment Services Regulation reached political agreement between the European Parliament and Council on 27 November 2025, with formal Official Journal publication expected in H1 2026. This is the single most significant licensing and market-access development touching France this cycle, given the direct-application design of the PSR component: once entry into force occurs, the PSR applies without a domestic transposition step, while PSD3 itself carries an estimated 18-24 month transposition deadline. Within the package, Verification of Payee, presently confined to euro instant credit transfers under the amended SEPA/Instant Payments Regulation, is extended to cover all credit transfers regardless of currency or settlement speed. For payment service providers licensed in or passporting into France, this is a direct build requirement: payee-name-matching infrastructure that today only needs to cover instant euro transfers will need to be extended across the full transfer population.

The market-access implication is structural rather than incremental. Extending Verification of Payee to all credit transfers changes the baseline fraud-prevention capability expected of any PSP operating in the French and broader EU market, effectively raising the compliance floor for market entry regardless of a firm's specific licence category. Both bank-PSPs and non-bank payment institutions and e-money institutions face the same extended Verification of Payee obligation under the PSR text as currently understood, since the requirement attaches to the payment service rather than to the type of licence held.

Outlook

The timing of formal Official Journal publication, expected in H1 2026, is the key variable that will fix the transposition and direct-application clocks for PSD3 and the PSR respectively. Firms should treat the 18-24 month PSD3 transposition window and the PSR's roughly 18-month direct-application period as provisional until the entry-into-force date is confirmed.

Licensing, Authorisation & Market Access

The Council of the EU and European Parliament reached political agreement on the third Payment Services Directive (PSD3) and the Payment Services Regulation (PSR) on 27 November 2025, corroborated independently by both co-legislators' own press releases, giving this foundational development High confidence. The Council published final compromise texts on 23 April 2026, confirming the package's dual-instrument structure: PSD3 remains a directive requiring national implementation for authorisation, supervision and prudential matters, while the PSR is a directly applicable single rulebook that will apply uniformly across Member States without national transposition.

For France, the package's most consequential structural feature is its collapse of the existing regulatory distinction between payment institutions (PIs) and electronic money institutions (EMIs) into a single, merged authorisation category. France's Code monétaire et financier currently organises payment-institution authorisation under Article L.521-1 with PI and EMI treated as related but legislatively distinct categories; while the Autorité de Contrôle Prudentiel et de Résolution already supervises both populations under one unified prudential authority, the underlying legislative frameworks for the two institution types are not fully integrated at the statutory level. Existing French EMI authorisations are expected to require reauthorisation as PIs under PSD3's merged category, with a transitional grandfathering window intended to smooth the transition, though the precise terms of that window have not yet been confirmed by a primary French regulatory source; this assessment currently rests on secondary law-firm commentary rather than a directly retrieved ACPR or Direction Générale du Trésor statement, and is held at Assessed rather than High confidence.

A second material development within this module is the PSR's extension of verification-of-payee obligations. The regulation extends the name/IBAN verification-of-payee mechanism to all credit transfers, building on the existing Instant Payments Regulation mandate that already applies specifically to euro instant transfers, and it reallocates liability for authorised-push-payment fraud and spoofing scenarios onto payment service providers rather than leaving it with the paying customer. For French PSPs, this is a generalisation of an obligation already familiar from the instant-transfer context rather than an entirely novel compliance build, but the liability reallocation itself raises the practical stakes of implementation.

The PSD3/PSR agreement and its French implementation implications apply across both bank and non-bank payment-service-provider populations: the PSR's verification-of-payee and fraud-liability provisions bind banks and non-bank PSPs alike, whereas the PI/EMI merger specifically reshapes the non-bank licensing tier, since banks in France operate under separate credit-institution authorisation and are not directly subject to the PI/EMI merger's reauthorisation mechanics. This bifurcation matters for market-access analysis: incumbent bank-affiliated payment processors face comparatively less licensing disruption than the standalone non-bank PI/EMI population that must navigate reauthorisation.

Outlook

The PSD3/PSR package is expected to move from final compromise text to Official Journal publication around the third quarter of 2026, which will start the transition-period clock before full application; the precise Official Journal date has not been confirmed by a primary source. France's own PI/EMI licensing-framework restructuring is expected to follow through the fourth quarter of 2026 and into 2027, with CMF Article L.521-1 requiring legislative amendment to accommodate the merged PI category. The transitional grandfathering terms for existing French EMI authorisations are the single most consequential unresolved detail for market participants and are the primary item to watch in the coming cycle.

Conduct, Safeguarding & Financial Promotions

France's payment-fraud statistics are this cycle's central conduct-relevant data point. The Banque de France's Observatoire de la sécurité des moyens de paiement reported payment fraud totalling €618.4 million across 3.7 million transactions in H1 2025. Within that total, authorised-push-payment fraud rose 37% year on year and now represents 40% of total fraud value, a substantial share shift that reflects the broader European trend of fraud migrating from card-present and card-not-present channels toward push-payment social-engineering scenarios that existing conduct rules were not originally designed to address.

This Tier-1 statistical baseline is the empirical justification cited for the PSR's forthcoming conduct reforms, discussed further under Consumer Protection & APP Fraud. For conduct and safeguarding purposes specifically, the scale of the APP fraud increase signals that existing safeguarding and customer-communication practices at French PSPs are not keeping pace with the shift in fraud typology, creating a conduct-risk gap that the PSR's cascading-liability model is designed to close. The data covers H1 2025 and, as the most recent primary statistical source available this cycle, should be treated as the current baseline against which any future Banque de France reporting is compared.

Outlook

The next Banque de France Observatoire report will be the key marker for whether the 37% year-on-year APP fraud increase is a step-change or a continuing trend, and whether early PSP responses ahead of PSR implementation have begun to bend the curve.

Operational Resilience & Critical Infrastructure

Verification of Payee became mandatory for SEPA Instant credit transfers in France from 9 October 2025, under the amended SEPA Regulation and the Instant Payments Regulation (EU) 2024/886. This is a confirmed, EU-harmonised operational-resilience control directly affecting the technical infrastructure underlying instant-transfer operators, including the Wero and Paylib rails that carry a material share of French P2P and retail instant-payment volume. VoP works by verifying that the payee name supplied by the payer matches the actual account holder before a transfer completes, a structural control against the account-mismatch and impersonation vectors that underlie a large share of authorised-push-payment fraud.

The operational significance of this mandate should be read against the fraud data reported for the same period: payment fraud in France reached €618.4 million across 3.7 million transactions in H1 2025, with authorised-push-payment fraud rising 37% year-on-year and now representing 40% of total fraud value. VoP's mandatory activation for SEPA Instant transfers from October 2025 sits within, rather than fully preceding, the reporting window in which APP fraud continued climbing sharply, an infrastructure-and-outcome juxtaposition that is itself the operationally relevant signal this cycle: either VoP's protective effect has a lag before manifesting at scale across the full instant-payment volume, or a share of the fraud growth reflects typologies VoP is not designed to fully counter.

A further probable-confidence signal points to planned extension of VoP beyond SEPA Instant to classic (standard, non-Instant) SEPA rails, with French payment institutions and e-money institutions expected to need to deploy this ahead of a pre-2027 deadline. This would close a current gap in which VoP's operational-resilience benefit is currently confined to the instant-transfer channel while standard SEPA credit transfers remain outside its scope.

Outlook

The critical infrastructure question to track is whether VoP's extension to standard SEPA rails proceeds on the pre-2027 timeline currently indicated, and whether the fraud data for H2 2025 and into 2026 shows the lag in VoP's protective effect narrowing or whether APP fraud typologies continue to outpace the control's coverage.

Payment Corridor Dynamics

Wero has effectively displaced Paylib as the operative peer-to-peer payment rail in France this cycle. Confirmed directly from Banque de France's own explainer page, Wero has been offered since late 2024 by most French banks and enables person-to-person payments across several European countries. Its e-commerce pilot has expanded materially since spring 2026, launched with BPCE, Societe Generale and Hello bank!, aided by the February 2026 EuroPA interoperability agreement that links Wero with Bizum (Spain), Bancomat Pay (Italy), MB WAY (Portugal) and Vipps MobilePay (Norway/Nordics), a probable-confidence finding. This interoperability agreement is significant for corridor dynamics because it extends Wero's usability beyond a purely domestic French rail toward a broader pan-European instant-payment network, positioning it as a genuine cross-border alternative for retail payment flows within Europe.

BoursoBank, with 8.9 million clients, is reported to be integrating Wero by end-2026, which would extend Wero's coverage to near-total reach across the French retail banking market; AXA Banque and CCF are reported to remain non-adopters, a probable-confidence finding from a single trade-press source not yet cross-corroborated this cycle. The near-total coverage implied by BoursoBank's pending integration would leave only a small residual segment of the French banking market outside the Wero network.

Outlook

Whether BoursoBank's reported end-2026 Wero integration proceeds as expected is the key near-term development to watch, as it would extend Wero's coverage to near-total reach across the French retail banking market. The durability of AXA Banque's and CCF's non-adoption is also worth monitoring as a signal of whether full market-wide Wero coverage will ultimately be achieved.

Industry Structure & Commercial Dynamics

France's mandatory B2B e-invoicing reform reaches a structural milestone on 1 September 2026, when every B2B invoice must be receivable in Factur-X format through a registered Plateforme de Dématérialisation Partenaire. This receiving-side mandate is the first phase of a rollout whose issuing-side obligation phases in through 2027 according to company size, meaning the full commercial-invoicing population will not be captured until the later phase completes. For payment service providers and fintechs operating in the French commercial-payments space, this is a structural change to invoicing and payment-initiation plumbing rather than a payments-licensing event per se, but it creates integration obligations for any PSP whose commercial customers rely on B2B invoice-triggered payment flows.

The PDP model, requiring invoices to route through a registered intermediary platform rather than being exchanged directly between counterparties, restructures a segment of French commercial-payment data flows around a new class of regulated intermediary. This is assessed at Probable confidence, sourced from a single Tier-4 source this cycle, and the structural significance for industry participants lies less in the invoicing mandate itself than in the downstream requirement for payment systems to integrate with the PDP ecosystem to remain compatible with customers' invoicing workflows.

Outlook

The issuing-side mandate's phase-in through 2027 by company size is the next structural marker to track; confirmation of the specific size thresholds and their effective dates would sharpen the picture for mid-market and smaller commercial-payments participants.

Product Innovation & Market Development

Wero, the pan-European instant-payment wallet built by a consortium of major French and European banks including BNP Paribas, BPCE, Crédit Agricole, Société Générale and Crédit Mutuel, continues operating in P2P mode in France, Germany and Belgium, a deployment that has been running since 2024 on SCT Inst rails. This is a probable-confidence, bank-consortium-led product development representing a structural bet by incumbent French banks on building domestic instant-payment wallet infrastructure rather than ceding that space to non-bank or foreign wallet providers.

Alongside Wero's continued scaling, France's underlying open-banking infrastructure shows substantial build-out: STET-compliant open-banking APIs now cover 95% of French banks, with SCT Inst adoption growing at approximately 39.1% compound annual growth rate. This adoption metric is vendor-sourced and carries dashboard-tier rather than full standing-brief confidence, meaning it should be read as an indicative market-development data point rather than a fully corroborated regulatory or industry-body finding.

Taken together, these two threads describe a French instant-payment and open-banking product environment that is scaling on largely bank-led rails (STET-standard APIs, SCT Inst, and the Wero wallet built by the major domestic banking consortium), a pattern consistent with the broader bank-PSP-centred structure of French payments infrastructure relative to non-bank payment-institution and e-money-institution-led alternatives.

Outlook

The product-development question to watch is whether Wero expands beyond P2P mode into merchant-facing use cases in France, and whether the 39.1% CAGR SCT Inst adoption trajectory, if it holds, continues to reinforce bank-led rails as the dominant instant-payment product infrastructure relative to non-bank alternatives.

Consumer Protection & APP Fraud

The Banque de France's Observatoire de la sécurité des moyens de paiement reported, at confirmed confidence, that payment fraud in France reached €618.4 million across 3.7 million transactions in H1 2025. Within that total, authorised-push-payment fraud rose 37% year-on-year and now represents 40% of total fraud value, making APP fraud the single largest and fastest-growing fraud category tracked in this reporting period. This is a confirmed, primary-source finding from France's own payment-security observatory and represents the most consequential consumer-protection signal in this cycle's evidence for France.

This fraud trajectory sits directly alongside the mandatory activation of Verification of Payee for SEPA Instant credit transfers from 9 October 2025, a control specifically designed to reduce account-mismatch-driven APP fraud by verifying payee identity before transfer completion. The consumer-protection significance of the juxtaposition is that APP fraud continued rising sharply across a reporting window that included VoP's mandatory activation, suggesting either that VoP's protective benefit had not yet fully materialised across transaction volume during the H1 2025 window, or that a meaningful share of APP fraud growth reflects social-engineering and authorisation-manipulation typologies that a payee-verification control alone does not directly counter.

No further consumer-redress mechanism, complaint-handling statistic, or liability-allocation rule specific to APP fraud victims in France was identified in this cycle's evidence. The finding here is limited to the fraud-volume and typology-growth data itself.

Outlook

The consumer-protection question to track into subsequent cycles is whether H2 2025 and 2026 fraud data, once reported by the Observatoire, shows APP fraud growth decelerating as VoP's protective effect matures, or whether fraud typologies continue outpacing the control. The planned extension of VoP to standard SEPA rails ahead of a pre-2027 deadline is directly relevant to this trajectory and should be watched as a consumer-protection-relevant infrastructure development.

Consumer Protection & APP Fraud

The Payment Services Regulation introduces a cascading-liability mechanism that involves the whole payments value chain in fraud prevention, moving beyond a model that places the primary reimbursement burden on the sending PSP alone. Payment service providers will be required to offer spending limits and blocking measures to customers, giving consumers direct tools to constrain their own exposure, while the PSR's reimbursement requirement is extended to cover employee-impersonation fraud specifically, a scenario not consistently captured under the current authorised-push-payment reimbursement frameworks. This is assessed at Probable confidence pending final legislative text following the 27 November 2025 political agreement.

The policy justification for this reform is directly empirical: Banque de France's Observatoire reported a 37% year-on-year rise in authorised-push-payment fraud, now 40% of total fraud value, out of €618.4 million in total payment fraud across 3.7 million transactions in H1 2025. Read together, the French fraud data and the PSR's cascading-liability design indicate that France functions as a bellwether case demonstrating the reform's necessity, rather than a jurisdiction where the reform is a lesser priority.

Outlook

The key marker to watch is the final PSR legislative text confirming the precise scope of the cascading-liability mechanism and the employee-impersonation reimbursement extension, expected alongside formal Official Journal publication in H1 2026.

Commercial Intelligence & Fintech

Société Générale is reported to be close to divesting Treezor, its banking-as-a-service subsidiary, to the fintech Shares. Treezor has issued eight million cards and processed over €130 billion in transaction volume; the deal's value has not been publicly disclosed. The post-sale status of Treezor's electronic-money-institution licence remains unclarified pending completion of the transaction, an open item for any counterparty relying on Treezor's current authorisation. This is a distinct, discrete commercial event, a specific announced deal, rather than a structural market-wide M&A trend, and is sourced from secondary-tier French fintech recap coverage rather than a primary transaction announcement.

French fintech funding overall entered what secondary-tier market intelligence characterises as a flight to quality phase in the first half of 2026: the sector raised approximately €1.25 billion despite a falling deal count of sixteen M&A transactions, down from twenty-three in H1 2025 and thirty-two in H1 2024, with RegTech specifically securing €90 million of that total. The combination of resilient funding value against a shrinking transaction count is consistent with capital concentrating on fewer, larger, more established players rather than spreading across a broader base of early-stage entrants, a pattern plausibly related to the compliance costs that PSD3 implementation is expected to impose on the wider payment-institution population in the coming cycles.

Outlook

Watch for confirmation of the Société Générale/Treezor transaction's completion and disclosed or undisclosed terms, and for clarification of Treezor's post-sale EMI licensing status. Continued tracking of French fintech deal count and funding value through the second half of 2026 will indicate whether the flight-to-quality pattern observed in H1 persists as PSD3 implementation costs become clearer to market participants.