A specific imbalance has emerged for fraud and compliance teams at German banks. Detection now runs in real time, on most instant rails, for most institutions. While investigation still runs at the older, slower pace — the work of reconstructing what happened, and proving to a regulator that the right check ran on the right data, takes considerably longer than the payment itself did.
What PSD3 and the PSR change
The fraud obligations that will shape risk and compliance teams don’t sit in PSD3 itself — they sit in its companion regulation, the Payment Services Regulation. A few of its requirements land directly on investigation and compliance work: mandatory monitoring of inbound payments, device and behavioral signals as a baseline expectation, and Verification of Payee extended to every credit transfer (mandatory for instant transfers since October 2025). The liability framework shifts too — where a payment provider hasn’t implemented adequate fraud controls, it becomes responsible for the customer’s loss.
What ties all of this together: at an operational level, the PSR’s obligations are mostly obligations to produce evidence — that a payee verification was performed and logged, that fraud was detected in time, that a customer was warned of a mismatch. This is exactly where Vyntra’s case management already operates: fraud, AML, and sanctions alerts on one customer land in one case, with one audit trail behind them, so that evidence exists automatically rather than getting reconstructed after the fact. The PSR applies directly across the EU from entry into force, expected in 2026, with conduct obligations fully in force by late 2027 — which makes having that evidence trail in place now, rather than building it under deadline pressure, the more comfortable position to be in.
BaFin has already issued more than €80 million in fines over the past two years for the same underlying pattern: monitoring and reporting lagging behind how fast money moves. On the AML side, the EU’s new AML Regulation applies from July 2027, including a five-business-day deadline for responding to a financial intelligence unit’s request — a genuinely tight window if the answer isn’t already sitting in one place. AMLA, the authority overseeing it, is headquartered in Frankfurt, Germany.
Closing the gap between detection and proof
The strain sits downstream of detection. Most institutions can catch a suspicious transaction in real time now. What’s still being worked out, industry-wide, is everything that happens next: the investigation, and the record proving to a regulator that the right check ran, on the right data, at the right moment.
That gap shows up in a specific way. A fraud alert and an AML alert fire on the same customer, in two different systems, and an investigator spends the next hour reconciling them by hand instead of looking at one case. This is precisely what a shared case resolves — one view of the customer, not four fragments to stitch together, and a decision that comes with a reason attached, not just a score.
EBA guidance backs this up directly: firms should apply real-time monitoring where risk actually warrants it — a payment that breaks from a customer’s usual pattern, a new beneficiary paired with an unfamiliar device — and let everything else move at an ordinary, retrospective pace. Vyntra’s models are built around that same logic: behavioral and pattern-based scoring inside the payment execution window itself, so a decision — approve, hold, investigate — happens before the money leaves the account, not after.
This matters most for authorized push payment fraud, where the customer genuinely authenticated the payment and was still the one who got fooled. Identity checks succeed here; the payment is still wrong. Catching that requires looking at behavior, not just authentication — which is where rules alone reach their limit, and where behavioral models and machine learning pick up the pattern, a threshold-based rule would miss.
How real-time detection works in practice
Vyntra brings fraud, AML, and sanctions alerts on one customer into one case, scored inside the payment window, with one audit trail behind every decision. An investigator works from a complete picture instead of stitching four systems together; a compliance officer can point to exactly which check ran, on which data, at which moment — the same evidence PSR is asking every provider to be able to produce.
One thing worth being upfront about: extending this from a single institution to many, so a pattern one bank catches today could inform a decision at another, is where the whole industry is heading, ours included. That’s the direction, not a claim about where things stand today.
The question worth bringing to Frankfurt is less about whether a bank’s monitoring runs in real time — most of it probably does by now — and more about whether that bank could produce that same evidence within five business days on any single payment, rather than needing three people to spend that time reconstructing it. Behind every one of those reconstructions is a customer waiting.
Transform Finance Frankfurt - September 3, 2026
German fraud and compliance teams will be discussing explainability and the compliance challenges at Transform Finance Frankfurt this September.
