What Travel Merchants Need to Know About EU Payment Regulations in 2026
The European Union is rolling out its most significant payment services overhaul in nearly a decade. For travel merchants operating in or selling to the eurozone, 2026 is a critical transition year. New rules on instant payments, fraud liability, and digital identity will reshape how travel businesses process transactions, handle disputes, and manage compliance.
Here is what travel merchants need to understand about the regulatory changes taking effect this year.
PSD3 and PSR: The New Payment Services Framework
After years of negotiation, the European Parliament and Council reached provisional agreement on the Payment Services Directive 3 (PSD3) and Payment Services Regulation (PSR) in November 2025. Final texts are expected to publish in the Official Journal in the first half of 2026.
The dual-structure approach splits responsibilities. The PSR replaces most conduct and market rules from PSD2 with directly applicable EU-wide standards. The PSD3 handles licensing, prudential requirements, and supervision. For travel merchants, this means consistent rules across all EU markets rather than fragmented national implementations.
Fraud Liability Shifts to Payment Providers
The most consequential change for travel merchants concerns fraud liability. The PSR introduces mandatory reimbursement for authorized push payment (APP) scams where fraudsters impersonate payment service providers. Under the new rules:
- Consumers who fall victim to impersonation scams must report the fraud to police and notify their PSP to trigger full reimbursement
- Payment providers must verify that payee names match account identifiers (IBANs) before processing transfers
- Failure to warn customers of mismatches shifts liability to the payer’s provider
- Online platforms can face liability to PSPs if they fail to remove fraudulent content after being notified
For travel merchants, this reduces exposure to chargebacks and fraud losses in many scenarios. However, merchants must still maintain robust fraud prevention systems and respond promptly to takedown notices to avoid downstream liability.
Strong Customer Authentication Gets Accessibility Requirements
The PSR maintains mandatory strong customer authentication (SCA) for online payments and account access but adds new accessibility obligations. PSPs must offer at least one SCA method suitable for customers without smartphones, with disabilities, or with limited digital skills.
Travel merchants should verify their payment gateways support these alternative authentication methods to avoid losing bookings from customers who cannot complete smartphone-centric verification flows.
Instant Payments Regulation: The April 2026 Reporting Deadline
The Instant Payments Regulation (IPR), which entered force in April 2024, reaches a critical milestone this year. By April 2026, payment service providers must submit their first mandatory reports on instant payment availability, adoption rates, and compliance.
Key IPR requirements already in effect include:
- Euro-denominated payments must process within seconds, 24/7 including weekends and holidays
- Fees for instant payments cannot exceed traditional credit transfer rates
- IBAN-name verification is mandatory to reduce misdirected payments
For travel merchants, instant payments improve cash flow and liquidity. The standardized cross-border processing also reduces friction for international bookings. However, merchants must ensure their systems can handle real-time settlement and reconciliation processes.
Digital Euro Pilot: 2027 Testing on the Horizon
The European Central Bank is advancing toward a potential digital euro launch. In Q1 2026, the Eurosystem will invite payment service providers to express interest in participating in a digital euro pilot scheduled for 2027.
The 12-month pilot will test four use cases: online person-to-person transactions, offline P2P payments using NFC, point-of-sale payments, and e-commerce transactions. While the digital euro will not have legal tender status during testing, participating PSPs will gain early insight into integration requirements.
A final decision on issuing a digital euro will only come after legislation is adopted. The ECB has indicated 2029 as a potential issuance date if legislative timelines proceed as expected.
For travel merchants, the digital euro could eventually offer lower transaction costs and faster settlement for European bookings. Merchants should monitor pilot developments to prepare for potential integration requirements.
AML Package and DAC8: Enhanced Transparency Requirements
The EU’s Anti-Money Laundering Package, published in June 2024, establishes the new European Anti-Money Laundering Authority (AMLA) in Frankfurt. The AMLA became operational on July 1, 2025, and is now developing technical standards.
By July 10, 2026, member states must add beneficial ownership registry rules under the Sixth AML Directive. The full AML Regulation applies from July 10, 2027.
Separately, the DAC8 directive on crypto-asset reporting entered force on January 1, 2026. Crypto-asset service providers must now collect and verify detailed tax information for all clients, with automatic exchange between EU tax authorities beginning in 2027.
Travel merchants accepting cryptocurrency payments or working with crypto-asset service providers should verify their partners have implemented compliant customer data collection systems.
eIDAS 2.0: Digital Identity Wallets by November 2026
The eIDAS 2.0 regulation introduces the European Digital Identity (EUDI) Wallet, with a hard deadline of November 2026 for all EU member states to offer at least one fully operational and certified wallet to citizens and businesses.
EUDI Wallets will enable secure storage and sharing of official documents and credentials. For travel merchants, this could simplify identity verification for bookings, check-ins, and compliance checks. The standardized digital identity should reduce friction in cross-border travel transactions.
Key Takeaways
- Fraud liability is shifting toward payment service providers, reducing merchant exposure to APP scams but requiring vigilance on platform content
- SCA accessibility requirements mean travel merchants must ensure payment flows work for customers without smartphones
- Instant payments are now standard for euro transactions, with full compliance reporting required by April 2026
- Digital euro pilots begin in 2027, with potential issuance around 2029 if legislation passes
- Enhanced AML and tax transparency rules affect merchants working with crypto-assets or high-risk jurisdictions
- Digital identity wallets launch November 2026, potentially streamlining travel booking verification
Travel merchants should conduct compliance gap assessments now, engage payment providers on readiness timelines, and prepare systems for real-time processing requirements. The 2026 regulatory wave is not incremental. It is a fundamental restructuring of payment services liability, accessibility, and oversight across the European Union.
