SEPA
40.0 What this chapter gives you#
- You will be able to explain why there is no SEPA computer and no SEPA clearing house, and say what Europe built instead.
- You will be able to distinguish scheme scope from legal scope, and explain why a euro transfer from Dublin to Zurich uses the same rulebook without the EU charge-equality rule.
- You will be able to state the SCT Inst timing budget as five, seven and nine seconds, and say what the tenth second belongs to.
- You will be able to explain why sanctions screening had to be taken out of the transaction path before instant payments could be made compulsory.
- You will be able to say who holds a SEPA mandate, why the debtor’s bank never sees the signature, and what the Unique Mandate Reference and Creditor Identifier are for.
- You will be able to compare SEPA Direct Debit Core with UK Bacs Direct Debit and explain why the British model can promise an immediate refund with a straight face.
- You will be able to say why the business-to-business scheme abolishes the refund right and what obligation it puts on the paying institution instead.
- You will be able to name the five things that must all be true at once for a Cork to Lisbon payment to be domestic in character.
- You will be able to explain why SEPA never had to migrate to ISO 20022, and what the 15 November 2026 address deadline requires of every message you send.
- You will be able to list what SEPA did not unify: cards, currencies, the front end and national variation.
Europe did something in payments that almost nobody else has managed. It took thirty-odd countries with thirty-odd national payment systems, thirty-odd account numbering conventions, thirty-odd sets of file formats and thirty-odd sets of consumer protection rules, and it made a euro payment between any two of them behave, from the customer’s side of the counter, like a payment inside one country.
It did not do this by building a single machine. There is no SEPA computer. There is no SEPA clearing house. What Europe built instead was a set of rulebooks, a legal obligation to follow them, and a shared message format, and then it let the existing infrastructure compete underneath. That distinction is the whole chapter. Understand it and the rest of SEPA falls into place. Miss it and you will spend years looking for a network that does not exist.
This chapter covers what SEPA unified and what it conspicuously did not, the four schemes that carry the traffic, the mandate model that makes European direct debits work differently from British ones, the reachability rules that make a payment from Cork to Lisbon domestic in character, and the fact that SEPA was born speaking ISO 20022 while everyone else was still translating.
The plain version#
Imagine that every country in Europe has its own postal service, and that each one uses a different shape of envelope.
In Germany the envelopes are tall and narrow. In France they are square. In Ireland the address goes on the back. Each country has its own rules about how long a letter takes, its own price for a stamp, and its own way of writing a house number. Posting a letter inside your own country is easy, because you learned the shape of your own envelope as a child. Posting a letter to the next country along is a small nightmare. You need a special form, you pay a special price, and it takes an unpredictable number of days.
Now imagine that all of those countries sat down together and agreed three things.
First, one envelope. Same size, same shape, same place for the address, everywhere.
Second, one way of writing an address, which always starts with the country. So instead of a house number that means something only to the local postman, everyone writes an address that any post office on the continent can read at a glance.
Third, and this is the one that changed people’s lives, the same price. Posting a letter from Ireland to Portugal costs what posting a letter from Cork to Dublin costs. Not a bit more. The same.
That is SEPA. It stands for the Single Euro Payments Area, and it is an agreement about the shape of the envelope.
A payment, with real numbers#
Aoife lives in Cork. She has found a second-hand guitar advertised by Nuno, who lives in Lisbon, for 480 euros.
In 1999 this would have been an adventure. She would have gone into a branch, filled in an international payment form, given the name and address of Nuno’s bank, paid a fee somewhere between fifteen and thirty euros, and waited three to five days while wondering whether Nuno would receive 480 euros or 462 euros after somebody along the way took a slice.
Today she opens her banking app and types one thing: Nuno’s account address. It looks like this.
PT50 0002 0123 1234 5678 9015 4
The first two letters are PT, for Portugal. That is the whole trick. Aoife’s bank does not need to know anything about Portuguese banking to know where this payment is going, because the address tells it. Her own account address starts IE. Her German friend’s starts DE. Everyone in the area writes their account address the same way, and it always begins with the country.
She types the amount, 480.00, and Nuno’s name. Her app checks the name against the account before she confirms, and tells her it matches. She presses send.
The money arrives in Nuno’s account in about four seconds. He gets a notification on his phone while Aoife is still looking at hers. It is a Sunday evening. No bank in either country is open.
The fee Aoife pays is whatever her bank charges her to send 480 euros to someone in Cork. If that is nothing, this is nothing. Nuno receives 480.00, not 479.20. Nobody in the middle takes a slice, because the rules say nobody may.
A regular payment, with real numbers#
The second thing SEPA agreed a shape for is the opposite arrow: the payment you let somebody else pull.
Nuno subscribes to a language app run by a company in Dublin. It costs 12.99 euros a month. Instead of him remembering to pay every month, he signs a permission slip that says the Dublin company may take 12.99 euros from his Portuguese account on the fifteenth of each month.
That slip is the important object. In Europe, the company keeps it. Nuno’s bank in Lisbon never sees his signature. What his bank sees, when the first collection turns up, is a claim from the Dublin company that says, in effect, we have a signed permission from this person, here is its reference number, here is our registered collector number, please pay.
Three rules protect Nuno.
The company must tell him in advance what it is going to take and when. The default is fourteen days’ notice, though he and the company can agree something different.
The collection has to arrive at his bank at least one working day before the day it is due, so that his bank has time to look at it rather than having it dumped on the doorstep at the last minute.
And if he changes his mind, he can ring his bank within eight weeks of the money leaving and ask for it back, and his bank must give it back without asking him why. If he says he never signed anything at all, he has thirteen months.
That is a SEPA Direct Debit. It works identically whether the collector is in Dublin and the payer in Lisbon, or both are in the same street in Munich.
What SEPA is not#
Two things are worth saying plainly at the dinner table, because they are the source of most confusion.
SEPA is euros only. If Aoife wanted to send Swedish kronor to Stockholm, none of this applies. The euro is the point. The area is defined by the currency, not by the European Union.
And SEPA is not a company. There is no SEPA. If you go looking for the building, there is no building. It is an agreement about the envelope, written down as a set of rulebooks, made compulsory by European law. The actual sorting offices, the machines that move the money, are separate businesses that compete with each other, and every one of them has agreed to use the same envelope.
Where the plain version stops being true#
SEPA is a rulebook, not a rail#
The envelope analogy hides the entire infrastructure layer, and the infrastructure layer is where a practitioner spends their life.
A SEPA payment does not travel over “SEPA”. It travels over a clearing and settlement mechanism, of which there are many. In the euro area alone the European Central Bank counted thirty-five retail payment systems processing around 55.7 billion transactions in the first half of 2025. The pan-European ones are STEP2-T and RT1, both operated by EBA CLEARING, and TIPS, operated by the Eurosystem. There are also large national systems, of which CORE in France is the biggest. Two of the three largest retail systems in the euro area by volume, STEP2-T and CORE, are SEPA systems. The largest, MCMS, is Mastercard’s, which tells you something about what SEPA did not cover.
Underneath all of them sits central bank money. Deferred net obligations from STEP2-T settle in T2, the Eurosystem’s real-time gross settlement service. Instant payments settle across dedicated accounts in TIPS. When you say “SEPA payment” you have named the rulebook and said nothing about which of these carried it, and the choice matters enormously for cut-offs, liquidity and failure modes.
“Domestic in character” is a legal claim, and it has edges#
Aoife’s payment to Nuno is domestic in character because European law makes it so, not because the physics changed. Three specific edges are hidden.
The charging rule is a law with a geographical limit. It applies within the European Union. But the geographical scope of the EPC schemes covers forty-one countries and territories, eleven of which are outside the European Economic Area, including the United Kingdom, Switzerland, Monaco, Andorra, San Marino and Serbia. A euro credit transfer from Dublin to Zurich uses the same rulebook and the same message, but the EU charge-equality rule and the instant payments law do not reach Switzerland. Same envelope, different legal weather.
Non-EEA legs also change the data you must send. Under the EU funds transfer rules, when either the sending or the receiving payment service provider sits in a SEPA country outside the European Economic Area, the payer’s full address must be carried in the message. Within the EEA it is optional. So a payment to a British account is not, in fact, format-identical to a payment to a Belgian one.
And the promise that nobody may refuse your account because of the country it is in is a law precisely because it kept happening, and it still does. Payroll systems, insurers, utilities and subscription platforms that only accept a national IBAN are a live enforcement problem across the area, not a solved one.
“Instant” is a defined term with a budget and a set of trapdoors#
Four seconds is what the customer sees. The scheme sees a timing budget with named deadlines, and the deadlines have consequences.
The rulebook does not say “fast”. It says that the confirmation must have reached the originating institution by a specific second, and that if it has not, the payer’s institution must put the money back. Money that “arrived instantly” may in fact have been reserved rather than debited, and may be un-reserved a few seconds later.
There are also caps that the plain version never mentions. At launch in November 2017 the scheme had a hard ceiling of 15,000 euros per transaction. That rose to 100,000 euros in 2020, and the scheme-level ceiling has since been removed, but individual institutions still set their own value limits according to their own risk appetite, and European law explicitly lets each customer set a personal per-transaction or per-day limit. “No limit” at scheme level does not mean no limit in your app.
Finally, the reason instant payments could be made compulsory at all is a legal manoeuvre most people never notice. Sanctions screening was taken out of the transaction path. Institutions now screen their own customer base against targeted financial restrictive measures at least once every calendar day, and are forbidden from screening the payer and payee again during the execution of an instant transfer. Without that change, ten-second settlement across thirty countries would not have been achievable.
Direct debit is the least unified of the unified things#
The plain version implies that a European direct debit is one thing. It is closer to two things wearing a shared uniform, sitting on top of thirty national habits.
There are two schemes, not one, and they behave very differently. The consumer scheme gives an eight-week no-questions-asked refund. The business-to-business scheme abolishes the refund entirely and instead requires the payer’s bank to check the mandate before it debits, which is a completely different risk model wearing a similar-looking message.
Adoption is wildly uneven. In the first half of 2025, direct debits were around 14 per cent of non-cash payments across the euro area, but in Germany they were around 31 per cent of all non-cash payments. A German product manager and an Italian one are describing different worlds when they say “our customers pay by direct debit”.
And the electronic mandate, the thing that ought to make all this frictionless, is still a minority. Of euro area direct debits in the first half of 2025, those with an electronic mandate accounted for 12 per cent by number. Eighty-eight per cent still rest on consent given in some other form, which in practice means paper, or a national scheme’s own e-mandate service, or a recorded telephone call.
The technical version#
What SEPA is, institutionally#
SEPA is a European Union policy objective, delivered through two instruments that are frequently confused.
The first is scheme rules. These are written and maintained by the European Payments Council, an international non-profit association under Belgian law which is explicitly not part of the EU institutional framework. The EPC publishes rulebooks, each institution adheres to them individually and appears on a published register of scheme participants, and adherence is a contractual matter between the participant and the EPC.
The second is law. Regulation (EU) No 260/2012, universally called the SEPA Regulation, establishes technical and business requirements for credit transfers and direct debits in euro. It was amended in 2024 by Regulation (EU) 2024/886, the Instant Payments Regulation, which inserted new Articles 5a to 5d dealing with instant credit transfers, charges, verification of payee, and sanctions screening.
The geographical scope of the EPC schemes is set out in EPC409-09, which reached version 8.0 on 24 December 2025 and lists forty-one countries and territories. These comprise the twenty-seven EU Member States, three EEA countries (Iceland, Liechtenstein and Norway), eleven non-EEA countries (Albania, Andorra, Moldova, Monaco, Montenegro, North Macedonia, San Marino, Serbia, Switzerland, the United Kingdom and Vatican City State) and four non-EEA territories (Guernsey, Jersey, the Isle of Man and Saint-Pierre-et-Miquelon). All figures and dates in this chapter are accurate at time of writing.
The critical structural point is that scheme scope and legal scope are not the same set. Scheme rules bind a Serbian or British participant. EU regulations do not.
SEPA Credit Transfer#
The SEPA Credit Transfer scheme, launched in January 2008, is the ordinary push payment. The governing document at time of writing is the 2025 SCT rulebook version 1.1 (EPC125-05), effective 5 October 2025.
Its core parameters:
| Parameter | SEPA Credit Transfer |
|---|---|
| Currency | Euro at all process stages, including exception handling |
| Account identifier | IBAN, mandatory |
| Maximum execution time | One banking business day following the point in time of receipt of the instruction |
| Scheme-level amount ceiling | None; settlement and value limits may exist between participants |
| Remittance information | Up to 140 characters, structured or unstructured |
| Reject | Same day, at the latest the next banking business day |
| Return | Within three banking business days after settlement date |
| Recall | Ten business days for duplicate or technical error; thirteen months for fraud |
| Recall response | Within fifteen banking business days of receipt of the recall |
Only one recall is permitted per transaction. The recall regime is worth dwelling on, because it is the structural answer to a question every treasury team asks: what happens when we send the wrong payment. The answer in SCT is that you may ask, the beneficiary institution must answer within a defined window, and it may say no. There is no unilateral clawback.
Volumes are large. The EPC puts SEPA credit transfer traffic at more than twenty-nine billion transactions a year across the area. The ECB’s own euro area figures for the first half of 2025 record 16.8 billion credit transfers worth 107.3 trillion euros, which was 22 per cent of non-cash payments by number and 92 per cent by value.
SEPA Instant Credit Transfer#
SCT Inst went live in November 2017, described by the EPC at the time as a world first for a region of this size. The governing document at time of writing is the 2025 SCT Inst rulebook version 1.1 (EPC004-16), published 5 October 2025 and stated to remain in force until 21 November 2027 at 03:30 CET.
The scheme is euro-only, operates twenty-four hours a day on every calendar day of the year subject to short and foreseeable planned maintenance, and has no scheme-level maximum amount. Value limits are applied by the originator’s institution according to its own risk appetite and risk management controls.
The timing model is the part practitioners get wrong most often. It is not one number. The 2025 rulebook replaced the original 10 / 20 / 25 second structure with a 5 / 7 / 9 second structure, measured from the time stamp applied by the originator’s institution at the time of receipt. Within seven seconds of that time stamp, the clearing mechanism serving the beneficiary’s institution must have received a positive or negative confirmation message: this is the Timeout Deadline. That confirmation must then reach the originator’s institution within a further two seconds, that is to say by the ninth second at the latest.
The tenth second belongs to the law rather than the scheme. Under Article 5a of Regulation (EU) No 260/2012 as inserted by the Instant Payments Regulation, the payee’s institution must make the amount available on the payee’s account and confirm completion within ten seconds of the time of receipt of the payment order by the payer’s institution; and where the payer’s institution has received no such confirmation within ten seconds, it must immediately restore the payer’s account to the state it would have been in had the transaction not taken place. The 2025 rulebook also moved the time stamp to millisecond precision.
Two further legal points matter. Time of receipt for an instant credit transfer is the moment the order is received by the payer’s institution, regardless of hour or calendar day, notwithstanding the ordinary cut-off provisions of PSD2. And credit value date on the payee’s account must be the same date as the date of crediting.
The Instant Payments Regulation timetable#
The regulation converts SCT Inst from a commercial option into an obligation, on a staggered timetable.
| Obligation | Euro area PSPs | Non-euro area PSPs |
|---|---|---|
| Receive instant credit transfers | 9 January 2025 | 9 January 2027 |
| Send instant credit transfers | 9 October 2025 | 9 July 2027 |
| Charge parity with non-instant transfers (Article 5b) | 9 January 2025 | 9 January 2027 |
| Verification of payee (Article 5c) | 9 October 2025 | 9 July 2027 |
| Daily sanctions screening (Article 5d) | 9 January 2025 | 9 January 2025 |
Payment and electronic money institutions have their own dates, 9 April 2027 in the euro area and 9 July 2027 outside it, reflecting their later admission to settlement systems. Non-euro area institutions have a further deadline of 9 June 2028 relating to sending outside business hours in national currency.
The substantive obligations are worth stating precisely, because they are what a compliance officer will be measured against.
Article 5a(1) requires that any institution offering its customers a service of sending and receiving credit transfers must offer sending and receiving of instant credit transfers to all of its customers, and must ensure that all payment accounts reachable for credit transfers are also reachable for instant credit transfers twenty-four hours a day on any calendar day.
Article 5a(6) requires institutions, on request, to let a customer set a maximum amount per day or per transaction for instant credit transfers, modifiable at any time before an order is placed.
Article 5b(1) provides that charges for sending and receiving instant credit transfers shall not be higher than charges for other credit transfers of corresponding type, and Article 5b(2) requires that the verification service be provided free of charge.
Article 5d(1) requires institutions offering instant credit transfers to verify whether any of their customers are persons or entities subject to targeted financial restrictive measures, immediately after any new or amended measures enter into force and at least once every calendar day. Article 5d(2) then forbids them from screening payer and payee again during execution of an instant credit transfer.
There is one derogation of note. An institution in a Member State whose currency is not the euro may, with prior permission from its competent authority based on an assessment of its access to euro liquidity, decline to send instant euro transfers above a per-transaction limit from accounts denominated in the national currency, during hours when it neither sends nor receives non-instant euro credit transfers. That limit is set by the competent authority and may not be lower than 25,000 euros. Permissions run for one year and may be extended.
Uptake is now material rather than marginal. In the first half of 2025, instant credit transfers accounted for 23 per cent of the number and 7 per cent of the value of credit transfer transactions processed by euro area retail payment systems.
Verification of Payee#
The EPC’s Verification Of Payee scheme (EPC218-23) is the scheme-level answer to Article 5c. Version 1.0 was published in October 2024; version 1.1 was issued on 16 March 2026 with an effective date of 20 September 2026.
VOP is not an ISO 20022 message flow in the way the payment schemes are. It uses application programming interface technology making use of ISO 20022 resource elements, exchanged through Routing and Verification Mechanisms of each participant’s choosing, with participants registered in the EPC Directory Service.
There are four possible outcomes: match; no match; close match, in which case the name associated with the account is shown to the payer; and verification check not possible. The rulebook sets a maximum execution time of five seconds for the requesting institution to obtain the VOP response, and states a preference for one second or less.
Two things about scope catch people out. VOP applies to all credit transfers under Article 5c, not only instant ones. And it must be performed immediately after the payer provides the payee’s details and before the payer is offered the possibility of authorising the transfer, regardless of the initiation channel.
SEPA Direct Debit Core#
SDD Core launched in November 2009. The governing document at time of writing is the 2025 SDD Core rulebook version 1.1 (EPC016-06), effective 5 October 2025.
The defining architectural choice is the creditor-driven mandate flow. The debtor signs a mandate, on paper or electronically, in favour of the creditor. The creditor stores it. The debtor’s institution does not receive the signed instrument. Each mandate is uniquely identified by the combination of the Unique Mandate Reference (attribute AT-M001) chosen by the creditor and the Creditor Identifier (attribute AT-E005) issued to the creditor under national arrangements. That pair, and not any document held at the paying institution, is what makes a collection traceable.
The operational parameters:
| Parameter | SDD Core |
|---|---|
| Currency | Euro at inter-PSP level |
| Pre-notification to debtor | At least 14 calendar days before due date, unless another timeline is agreed between debtor and creditor |
| Presentation | Debtor’s PSP must receive the collection at the latest one inter-PSP business day before due date (D-1) |
| Returns | Within five inter-PSP business days following settlement date |
| Refusal | Debtor may instruct its PSP before settlement; handled as a rejection |
| Refund, authorised collection | Eight weeks from the debit date, on a no-questions-asked basis |
| Refund, unauthorised collection | Claim to be presented within thirteen months of the debit date |
| Mandate dormancy | If no collection is presented for 36 months, the creditor must cancel the mandate |
A point of law that is easy to skip: offering SDD Core is not optional. Under the reachability provisions, an institution reachable for national direct debits in euro must be reachable for consumer direct debits under a Union-wide scheme, which in practice means SDD Core.
SEPA Direct Debit B2B#
The business-to-business scheme launched alongside Core in November 2009 and is optional for institutions. The governing document at time of writing is the 2025 SDD B2B rulebook version 1.0 (EPC222-07), issued 28 November 2024 and effective 5 October 2025.
Three differences define it.
The debtor may not be a consumer. Participation is limited to debtors authorised under national law to opt out of the refund right.
There is no refund right for an authorised transaction. The debtor cannot ask its institution for the money back.
Because the refund right is gone, the risk control moves upstream. Before debiting the account, the debtor’s institution must check that the mandate-related data received in the collection matches mandate-related data received from, or confirmed by, the debtor. This obligation is the reason B2B onboarding is slow: somebody at the paying bank has to be told about the mandate before the first collection, not after it.
Presentation is the same D-1 as Core. Returns are permitted up to three inter-PSP business days after settlement date, a shorter window than Core’s five, and the mandate dormancy rule at 36 months is the same.
The mandate model compared with UK Direct Debit#
For a British reader, and for anyone building a product that has to do both, this is the comparison that matters. The two systems reach similar outcomes by opposite routes.
The clearest way to see the difference is to ask a single question: after the mandate is signed, who has a copy of it?
In the United Kingdom, under AUDDIS, the signed Direct Debit Instruction is retained by the service user, but the instruction itself is lodged electronically with the paying institution through Bacs. Bacs guidance is explicit that the one major change AUDDIS made was that the signed DDI is retained by the service user and not by the paying institution, while the details still travel to the paying institution. The paying bank therefore holds a record of the instruction, can validate collections against it, and can bounce a collection for which no instruction exists.
In SEPA Core, no equivalent lodgement takes place. The mandate data reaches the debtor’s institution with the first collection, and the debtor’s institution has nothing to check it against unless it has built its own mandate store. The B2B scheme exists precisely to plug that gap for corporate payers.
| SEPA Direct Debit Core | UK Bacs Direct Debit | |
|---|---|---|
| Who holds the signed mandate | Creditor | Service user |
| Does the payer’s bank hold the instruction | No, receives mandate data with the first collection | Yes, lodged via AUDDIS |
| Mandate identifiers | Unique Mandate Reference plus Creditor Identifier | Service User Number plus payer reference |
| Advance notice, default | 14 calendar days before due date, unless otherwise agreed | Minimum 10 working days plus postal time, in the absence of any other agreement |
| Collection cycle | Collection received by debtor’s PSP at latest D-1 | Three working day cycle: submission, processing, entry |
| Settlement | Deferred net at the clearing mechanism | Deferred net through Bacs |
| Refund, authorised | 8 weeks, no questions asked | Direct Debit Guarantee: immediate refund by the paying institution, then indemnity claim against the service user |
| Refund, unauthorised | Claim within 13 months | Direct Debit Guarantee, with the service user liable on indemnity |
| Producing the mandate on request | Creditor must be able to produce it | Copy required within seven working days of request |
| Dormancy | Creditor must cancel after 36 months without a collection | Paying institutions hold DDI details for a minimum of 24 months from receipt or last payment |
| Currency and geography | Euro, 41 SEPA countries and territories | Sterling, United Kingdom |
Three practical consequences follow.
The British model puts the arbiter at the payer’s bank, which is why the Direct Debit Guarantee can promise an immediate refund with a straight face: the paying institution refunds first and recovers from the service user afterwards through the indemnity process. The SEPA model puts the arbiter at the creditor, and compensates by giving the payer a broad, time-boxed, no-questions-asked right that the paying institution honours from the settlement chain.
The British model is therefore harder to join and easier to police. Service users are sponsored by a payment service provider, hold a Service User Number, and are vetted. Note also that from 1 July 2027 it will no longer be possible to apply for a non-AUDDIS Service User Number, which completes the migration to electronic lodgement.
And the notice periods are not equivalent even though they look similar. Ten working days plus postal time in the United Kingdom is a longer real period than fourteen calendar days in SEPA, and the UK figure is a default that can be varied only with the sponsor’s agreement, while the SEPA figure can be varied by agreement between creditor and debtor directly.
Reachability obligations#
Reachability is the provision that turns a scheme into an area. Without it, SEPA would be a format standard that some banks supported for some corridors.
Article 3 of Regulation (EU) No 260/2012 states the principle in two directions. A payee’s payment service provider that is reachable for a national credit transfer under a payment scheme must be reachable for credit transfers initiated through a scheme at Union level. A payer’s payment service provider that is reachable for a national direct debit must be reachable for direct debits initiated through a scheme at Union level.
The effect is that reachability cannot be sold as a premium corridor. If an institution accepts euro credit transfers from across the street, it must accept them from across the continent.
The Instant Payments Regulation extends this to time as well as geography. Article 5a(1) requires that all payment accounts reachable for credit transfers must also be reachable for instant credit transfers twenty-four hours a day on any calendar day.
Underneath the legal obligation sits an interoperability problem, because reachability is only real if the clearing mechanisms interconnect. This is why RT1 is designed to reach all institutions adhering to the SCT Inst scheme, whether directly, through other clearing mechanisms connected to RT1, or through Eurosystem reachability measures, and why participants can use a single interface for transactions settling in RT1, in TIPS, or across the two. Reachability in law required reachability in plumbing, and the plumbing had to be built.
Why a euro payment from Ireland to Portugal is domestic in character#
Five separate things have to be true at once for the Cork to Lisbon payment to feel like a Cork to Dublin payment, and SEPA supplies all five.
The identifier is the same. IBAN is mandatory in both cases. There is no separate international addressing scheme to learn, and the SEPA Regulation removed the requirement for customers to supply a BIC.
The message is the same. The same ISO 20022 messages, in the same versions, with the same mandatory fields, carry a domestic and a cross-border euro transfer.
The rulebook is the same. Execution time, return windows, recall procedure, remittance capacity and exception handling do not change at the border.
The reachability obligation removes the question of whether the far end can be paid at all, and Article 9 of the SEPA Regulation removes the question of whether the far end will accept the account: a payer must not be required to specify the Member State in which a payee’s account is located, and a payee must not be required to specify the Member State of a payer’s account, provided the account is reachable. This is the provision that makes refusing a foreign IBAN unlawful.
And the price is the same. Regulation (EC) No 924/2009, as amended by Regulation (EU) 2019/518, requires that charges for a cross-border payment in euro be the same as those for a corresponding national payment of the same value in the same currency. The Instant Payments Regulation then adds the second parity rule inside the instant product: instant may not cost more than non-instant of corresponding type.
Domestic in character is therefore a precise claim about identifiers, formats, rules, access and price. It is not a claim about routing, and it does not survive being carried outside the European Union, where the pricing and instant-payment obligations no longer apply even though the scheme rules still do.
ISO 20022 as SEPA’s native format#
Most payment systems in the world are migrating to ISO 20022. SEPA never had to, because it started there.
The first SEPA Credit Transfer rulebook in 2008 specified ISO 20022 XML, at a point when the standard was barely four years old and almost nothing else used it. Two years before the euro area migration deadline, the SEPA Regulation made it law: the Annex to Regulation (EU) No 260/2012 requires that the message format be the ISO 20022 XML standard, that the account identifier be the IBAN, that at least 140 characters of remittance information be carried, and that processing be fully automated and electronic without manual intervention.
This has three consequences that a practitioner feels every day.
There is no legacy format to translate from. Elsewhere, ISO 20022 adoption is a truncation problem: fields that existed in a fixed-width or tag-based legacy format have to be squeezed into or expanded out of the new one, and data is lost at the seams. SEPA has no such seam. The customer-to-bank message, the interbank message and the reporting message were designed as one family.
The versions are pinned. Scheme messages are not “ISO 20022” in the abstract, they are named versions specified in the implementation guidelines. At time of writing the SEPA schemes use the 2019 message versions.
| Scheme | Message | Purpose |
|---|---|---|
| SCT and SCT Inst | pacs.008.001.08 | FI to FI customer credit transfer, the payment itself |
| SCT and SCT Inst | pacs.002.001.10 | FI to FI payment status report, positive and negative confirmation |
| SCT and SCT Inst | pacs.004.001.09 | Payment return, and positive response to a recall |
| SCT and SCT Inst | camt.056.001.08 | FI to FI payment cancellation request, used for recall |
| SCT and SCT Inst | camt.029.001.09 | Resolution of investigation, negative response to a recall |
| SCT Inst | pacs.028.001.03 | FI to FI payment status request |
| SDD Core and B2B | pacs.003.001.08 | FI to FI customer direct debit, the collection |
| SDD Core and B2B | pacs.002.001.10 | FI to FI payment status report, used for rejects |
| SDD Core and B2B | pacs.004.001.09 | Payment return, covering returns and refunds |
| SDD Core and B2B | pacs.007.001.09 | Payment reversal, creditor-initiated |
And the format still moves, which is the answer to anyone who thinks a native standard means a frozen one. The current migration is addresses. Until 5 October 2025 only unstructured and structured address formats were permitted. From 5 October 2025 to 15 November 2026 all three formats are allowed, including a hybrid combining structured elements with address lines. From 15 November 2026 only structured and hybrid addresses will be allowed. The 2025 SCT Inst rulebook version 1.1 exists in large part to move that date from 22 November 2026 to 15 November 2026.
Address rules interact with the geography in a way already flagged. Where either institution is located in a SEPA country outside the European Economic Area, the payer’s full address must be provided in the message under the EU funds transfer rules. Within the EEA it is optional. Screening requirements in practice only need the structured town and country elements, which is part of the argument for the structured migration.
The infrastructure underneath#
Three systems carry most of the pan-European traffic.
STEP2-T is EBA CLEARING’s pan-European automated clearing house for retail payments in euro, and one of the three largest retail payment systems in the euro area. It settles by continuous gross settlement: payments settle at any time the settlement windows are open, transaction by transaction, in immediately available central bank funds held on a TARGET Technical Account, with queuing and optimisation where liquidity is short.
RT1 is EBA CLEARING’s instant service, live since 2017, providing real-time gross settlement of instant payments in central bank funds and reaching all institutions adhering to the SCT Inst scheme, directly or through connected mechanisms.
TIPS is the Eurosystem’s TARGET Instant Payment Settlement service. It settles in central bank money on a 24/7/365 basis, processes transactions in under 100 milliseconds, and provides final and irrevocable settlement. It is compliant with the SCT Inst scheme. It currently handles euro, Swedish krona and Danish krone. It operates on cost recovery with no entry fee and a fixed charge of 0.2 euro cent per transaction, split equally between the sending and receiving participants.
Above them sits T2, the Eurosystem’s real-time gross settlement service for euro payments in central bank money, which since March 2023 has replaced the former TARGET2 within the consolidated TARGET Services platform, and alongside it EURO1, EBA CLEARING’s multilateral net large-value system whose final balances settle end of day in T2. In the first half of 2025, euro area large-value systems settled 74.0 million payments worth 235.1 trillion euros.
What SEPA did not unify#
The honest summary of SEPA’s scope is that it unified two instruments completely, one instrument partially, and left everything else alone.
It did not unify cards. The SEPA Cards Framework did not produce a pan-European card scheme, and the largest retail payment system in the euro area by volume is Mastercard’s clearing system. Card payments were 57 per cent of euro area non-cash payments by number in the first half of 2025, and none of that traffic is governed by a SEPA scheme.
It did not unify currencies. Everything in this chapter is euro-denominated at the interbank level. Non-euro EU members participate as scheme countries and their institutions can hold euro accounts, but a domestic payment in Polish złoty or Swedish krona is outside SEPA entirely.
It did not unify the front end. Request-to-pay, e-invoicing, mobile initiation, wallets and account-to-account overlays sit above the schemes, not inside them. The EPC publishes a SEPA Request-To-Pay rulebook, published in November 2020, which is a messaging layer for asking, not a payment scheme. Commercial overlay services build on SCT Inst rather than replacing it.
It did not eliminate national variation. Additional Optional Services remain, national mandate services differ, and adoption patterns diverge so sharply that the same scheme supports 31 per cent of non-cash payments in one country and a rounding error in another.
And it did not, by itself, make anything instant. That took twelve more years, a second scheme, and finally a regulation with dates in it.
Timeline#
| Date | Milestone |
|---|---|
| January 2008 | SEPA Credit Transfer scheme launched |
| November 2009 | SEPA Direct Debit Core and B2B schemes launched |
| February 2012 | Regulation (EU) No 260/2012, the SEPA Regulation, adopted |
| 1 August 2014 | End of migration for euro area countries |
| 31 October 2016 | End of migration for non-euro area countries |
| November 2017 | SCT Inst launched, initial ceiling 15,000 euros |
| 2020 | SCT Inst ceiling raised to 100,000 euros |
| November 2020 | SEPA Request-To-Pay rulebook published |
| November 2018 | TIPS launched by the Eurosystem |
| March 2023 | One-Leg Out Instant Credit Transfer rulebook published; T2 replaces TARGET2 |
| 13 March 2024 | Regulation (EU) 2024/886, the Instant Payments Regulation, adopted |
| October 2024 | First Verification Of Payee scheme rulebook published |
| 9 January 2025 | Euro area PSPs must receive instant credit transfers; charge parity; daily sanctions screening |
| 5 October 2025 | 2025 rulebooks enter force for SCT, SCT Inst, SDD Core and SDD B2B |
| 9 October 2025 | Euro area PSPs must send instant credit transfers and offer verification of payee |
| 15 November 2026 | Only structured and hybrid address formats permitted |
| 9 January 2027 onwards | Staggered obligations for non-euro area PSPs and for payment and e-money institutions |
What to check before you build#
If you are integrating, five questions decide most of your design.
Which scheme, and therefore which timing model: D+1 for SCT, seconds for SCT Inst, D-1 presentation for both direct debit schemes.
Which clearing mechanism your institution uses, because that determines your real cut-offs, your file formats at the edges, and your liquidity behaviour, none of which the rulebook tells you.
Whether any leg touches a SEPA country outside the European Economic Area, which changes your address data obligations and removes your customer’s EU pricing and instant-payment protections.
Whether your direct debit population contains consumers, which decides Core versus B2B and therefore whether you are exposed to an eight-week no-questions-asked refund or to a mandate-checking obligation at the paying institution.
And whether your address data is structured. That deadline is 15 November 2026 and it applies to every message you send.
40.98 Common wrong ideas#
Wrong: SEPA is a payment system that carries the money. Right: SEPA is a set of rulebooks made compulsory by law, and the traffic runs over competing clearing and settlement mechanisms such as STEP2-T, RT1, TIPS and national systems like CORE.
Wrong: SEPA covers the European Union. Right: The area is defined by the currency rather than the Union, and the EPC schemes cover forty-one countries and territories, eleven of them outside the EEA, including the United Kingdom and Switzerland.
Wrong: A euro payment anywhere in SEPA costs what a domestic one costs. Right: The charge-equality rule is EU law with a geographical limit, and it does not reach Switzerland or the United Kingdom even though the scheme rules do.
Wrong: A SEPA message is format-identical wherever it is sent. Right: Where either institution sits in a SEPA country outside the European Economic Area, the EU funds transfer rules require the payer’s full address, which is optional within the EEA.
Wrong: SCT Inst has no value limit now that the scheme ceiling has gone. Right: Institutions still apply their own limits according to their risk appetite, and Article 5a(6) requires them to let a customer set a personal per-transaction or per-day maximum.
Wrong: Money that arrived instantly has definitely arrived. Right: It may have been reserved rather than debited, and where no confirmation reaches the payer’s institution within ten seconds it must restore the payer’s account to the state it would have been in.
Wrong: A European direct debit is one thing. Right: There are two schemes with opposite risk models: Core with an eight-week no-questions-asked refund, and B2B with no refund right for an authorised collection and a mandate check at the paying institution before it debits.
Wrong: The debtor’s bank holds the mandate and can validate collections against it, as in the United Kingdom. Right: In SEPA the creditor holds it, the mandate data reaches the debtor’s institution with the first collection, and that institution has nothing to check against unless it has built its own mandate store.
Wrong: European direct debits now run on electronic mandates. Right: In the first half of 2025 only 12 per cent of euro area direct debits by number carried an electronic mandate, with the rest resting on paper, national e-mandate services or recorded calls.
Wrong: Verification of Payee applies to instant credit transfers. Right: Article 5c applies it to all credit transfers, and it must be performed immediately after the payee’s details are entered and before the payer is offered the possibility of authorising.
40.99 Chapter summary in 20 lines#
- SEPA made a euro payment between any two of thirty-odd countries behave, from the customer’s side of the counter, like a payment inside one country.
- It did this without building a machine, because what Europe built was a set of rulebooks, a legal obligation to follow them and a shared message format.
- The rules are written by the European Payments Council, a Belgian non-profit explicitly outside the EU institutional framework, and adherence is contractual.
- The law is Regulation (EU) No 260/2012, amended in 2024 by the Instant Payments Regulation, which inserted Articles 5a to 5d.
- Scheme scope and legal scope are different sets, since the schemes cover forty-one countries and territories, eleven outside the EEA, where EU regulations do not bind.
- SEPA Credit Transfer, launched in January 2008, executes by the following banking business day, uses IBAN, carries 140 characters of remittance information, and permits a request to recall but no unilateral clawback.
- SEPA Instant Credit Transfer went live in November 2017 and now runs a five, seven and nine second scheme budget inside a ten-second legal obligation.
- If no confirmation reaches the payer’s institution within ten seconds, that institution must immediately restore the payer’s account as though the transaction had never happened.
- The scheme-level ceiling, once 15,000 euros and then 100,000, has been removed, but institutional limits and customer-set limits remain.
- Instant payments could only be made compulsory because sanctions screening was moved out of the transaction path into a daily check by each institution against its own customer base.
- Verification of Payee under Article 5c applies to all credit transfers, returns four possible outcomes, and must run before the payer is offered the chance to authorise.
- SEPA Direct Debit Core, launched in November 2009, is creditor-driven, with the creditor holding the signed mandate and identifying it by Unique Mandate Reference plus Creditor Identifier.
- Core gives the debtor fourteen days’ default pre-notification, D-1 presentation, an eight-week no-questions-asked refund, and thirteen months for an unauthorised collection.
- The B2B scheme abolishes the refund right for authorised collections and moves the control upstream, requiring the debtor’s institution to check mandate data before it debits.
- The British scheme reaches similar outcomes by the opposite route, because AUDDIS lodges the instruction with the paying bank, which is why the Direct Debit Guarantee can refund immediately and recover afterwards by indemnity.
- Reachability under Article 3 is what turns a scheme into an area, since an institution reachable for a national euro credit transfer or direct debit must be reachable for the Union-wide scheme, now twenty-four hours a day.
- Five things make Cork to Lisbon domestic in character: the same identifier, the same message, the same rulebook, the reachability and non-discrimination obligations, and the same price.
- SEPA was born speaking ISO 20022, so there is no legacy seam to translate across, but the versions are pinned and the format still moves, with only structured and hybrid addresses permitted from 15 November 2026.
- SEPA did not unify cards, currencies, the front end or national habit, and card payments were 57 per cent of euro area non-cash payments by number in the first half of 2025 with none of it governed by a SEPA scheme.
- Before you build, decide which scheme and timing model, which clearing mechanism, whether any leg leaves the European Economic Area, whether your debtors are consumers, and whether your address data is structured.
Sources: European Payments Council rulebooks and guidance, namely EPC125-05 2025 SCT rulebook v1.1, EPC004-16 2025 SCT Inst rulebook v1.1, EPC016-06 2025 SDD Core rulebook v1.1, EPC222-07 2025 SDD B2B rulebook v1.0, EPC218-23 Verification Of Payee rulebook v1.1, EPC114-06 and EPC122-16 implementation guidelines, EPC409-09 List of SEPA Scheme Countries v8.0, EPC153-22 v2.1 guidance on the provision of addresses, and the EPC SEPA timeline; Regulation (EU) No 260/2012 and Regulation (EU) 2024/886 as published in the Official Journal; Regulation (EC) No 924/2009 as amended by Regulation (EU) 2019/518; European Central Bank, TARGET Instant Payment Settlement service pages and “Payments statistics: first half of 2025” (29 January 2026); EBA CLEARING STEP2-T settlement and RT1 SCT Inst service pages; Bacs, AUDDIS and Direct Debit scheme FAQs and the Service User’s Guide and Rules to the Direct Debit Scheme.