Analytical guides to payment technology
In-depth, source-based guides to European and Nordic payments. Every guide includes a list of sources, and we update the content as regulation changes.
The ISO 20022 messaging standard and the future of real-time payments in Europe
The migration to ISO 20022, rich-data message structures and how SEPA and global clearing systems use standardised data flows.
Read the guide →Biometric authentication and strong customer authentication (SCA) in digital transactions
How biometrics, the FIDO2/WebAuthn standards and dynamic linking are combined to meet the SCA requirements of PSD2 and the forthcoming Payment Services Regulation.
Read the guide →DORA and digital operational resilience in finance: what payment service providers need to know
ICT risk management, incident reporting, resilience testing and third-party risk. A practical overview of the obligations under Regulation (EU) 2022/2554 from the perspective of payment infrastructures.
Read the guide →PSD3 and open banking: how the payments package changes interfaces for businesses and consumers
PSD3 and the Payment Services Regulation (PSR) reshape open banking interfaces, consent management, strong customer authentication and fraud prevention. An analysis of the structural shifts and their effect on the API ecosystem.
Read the guide →Trustly, Brite, Zimpler and Trumo: a technology comparison
Four account-to-account payment solutions from a payment technology perspective: architecture, authentication flow, payment rails, refunds and integration design.
Read the guide →Financial data privacy in open banking
GDPR, PSD2 explicit consent, data minimisation and DORA. A practical guide to handling account data responsibly across the value chain.
Read the guide →Instant transfers: SEPA Instant and the EU Instant Payments Regulation
Ten-second payments, verification of payee and price parity. An analysis of the obligations, deadlines and technical implications of Regulation (EU) 2024/886.
Read the guide →Open banking networks in the Nordics and the Baltics
How PSD2 account information and payment initiation services work in practice, which API standards the region's banks use and why bank IDs sit at the centre of the ecosystem.
Read the guide →Upcoming guides
The following guides are in preparation. You can suggest topics using the contact form.
Verification of payee (VoP) in practice
Fraud prevention in account-to-account payments
Tokenisation and card payment security
Payment reconciliation with camt reports
How the guides are written
The guides are based primarily on primary sources: EU legislation, publications by public authorities, specifications from standard-setting bodies and companies' own publications. Where information comes from a secondary source, we say so in the text. We clearly distinguish between legal obligations, established industry practice and our own analysis.
We mention individual providers only when this is necessary for understanding payment technology. We do not accept payment for mentions, and we do not publish commercial comparisons or recommendations. If you spot an error, please let us know at support@brevixoo.com.