Compliance guide
A guide to the June 2025 changes in payment transparency.
The decision
Agreed at FATF's June 2025 Plenary, the updated Recommendation 16 marks a significant evolution in the global fight against financial crime.
The deadline
Financial institutions have until the end of 2030 to fully implement the new requirements, but the direction is already set.
The rules mandate more detailed and structured information for both originators and beneficiaries, especially for payments over €1,000. This includes new fields like originator's address, date of birth, and Legal Entity Identifiers (LEI), aligning with the richer data capacity of ISO 20022.
Responsibilities are now explicitly defined for every financial institution in the payment chain. From the ordering institution's duty to collect accurate data to the beneficiary institution's new role in monitoring, every participant has a clear obligation to ensure transparency.
A major shift is the focus on proactive controls. Ordering institutions are prohibited from processing non-compliant payments, and beneficiary institutions must actively monitor for "misdirected payments" and verify beneficiary identities, moving the industry from reactive reporting to active prevention.
Duties
The updated Recommendation 16 clarifies the specific duties of each financial institution involved in a payment.
Outcome
This shared responsibility model ensures that transparency is maintained at every step.
Ensure accuracyMust verify required originator and beneficiary information for payments > €1,000.
Collect complete dataResponsible for collecting all required data fields before the payment is sent.
Prohibit non-compliant paymentsExplicitly forbidden from executing transfers that do not meet the data requirements.
Maintain recordsMust keep all collected information in accordance with R.11.
Retain all informationMust ensure all originator and beneficiary data accompanying a transfer is retained throughout the payment chain.
Monitor for missing dataTake "reasonable measures" to identify payments lacking required information, consistent with straight-through processing.
Risk-based policiesEstablish procedures to decide whether to execute, reject, or suspend transfers with incomplete data.
Record keepingIf technical limits prevent data from being passed on, the intermediary must record all received info for at least five years.
Monitor for misdirected paymentsA key new duty. Must monitor for payments where beneficiary name and account number may not align.
Implement controlsMust use at least one mitigation measure, such as "confirmation of payee" systems, holistic monitoring, or name/account alignment checks.
Verify beneficiary identityFor cross-border payments > €1,000, must verify the beneficiary's identity if not previously done.
Risk-based policiesEstablish procedures for handling payments that lack required information or appear to be misdirected.
The rules for required payment data vary based on the payment type and amount.
Required information
Full beneficiary info required
N/A (traceability through originator info is key)
Compliance with the updated Recommendation 16 requires significant investment and strategic adjustments across the financial industry.
Meeting the enhanced FATF R.16 requirements, especially around beneficiary information, necessitates robust technological solutions. One area of innovation is payee name verification, which directly addresses the risk of "misdirected payments" and fraud.
The FATF R.16 updates emphasize the need for financial institutions to prevent transfers to unintended beneficiaries and to verify beneficiary identities. Solutions like IPID directly address this by enabling real-time validation of beneficiary account details, including the name.
Before a payment leaves, the ordering institution can confirm the beneficiary's name and account number against the beneficiary bank's records. Fewer errors, less fraud, fewer misdirected payments.
Validating details upfront cuts returned and rejected payments caused by wrong beneficiary information.
An extra layer of assurance on who the ultimate recipient is, strengthening data-accuracy compliance and helping surface suspicious activity.
R.16 asks beneficiary FIs to take reasonable measures to spot misdirected payments. IPID confirms account alignment, meeting that requirement directly.
Beneficiary banks confirm incoming payment details against their own customer records and flag discrepancies that point to fraud or diverted funds.
Automated verification reduces manual checks and post-transfer investigations, for smoother operations and faster reconciliation.
Utilising tools like IPID facilitates compliance with the FATF's push for proactive fraud prevention and improved transparency throughout the payment chain, benefiting both financial institutions and their customers.
Adopted at FATF's June 2025 Plenary, revised R.16 requires richer originator/beneficiary data (address, date of birth, LEI), defines shared responsibility across every institution in the payment chain, and shifts the industry toward proactive fraud monitoring.
Implementation guidance is expected by late 2026, and institutions are expected to be ready to implement the revised standard by the end of 2030.
Originator name, account number, physical address, date of birth (for individuals), and a connected BIC/LEI/official identifier for legal persons; beneficiary name, account number, and country/town.
Full originator and beneficiary information, including name and account number. Originator information must be made available to the beneficiary institution and authorities within 3 business days, or immediately for law enforcement requests.
The ordering FI collects and verifies data before sending and is barred from processing non-compliant payments. The intermediary FI retains and monitors data through the chain. The beneficiary FI monitors for misdirected payments and verifies beneficiary identity on qualifying transfers.
By using real-time payee name and account verification. Ordering institutions can confirm beneficiary details before sending; beneficiary institutions can confirm incoming payment details against their own records to flag discrepancies before payout.
A payment combining a direct message from ordering to beneficiary FI with a separate funding instruction routed through intermediaries.
A unique 20-character alphanumeric code, based on ISO 17442, used to identify legal entities engaging in financial transactions, now part of the enhanced data required under revised FATF R.16 for certain payments.
A payment where the beneficiary name and account number may not align. Beneficiary financial institutions now have an explicit duty to monitor for this and must implement at least one mitigation measure, such as confirmation-of-payee checks.
Financial services that accept cash, cheques, other monetary instruments or other stores of value and pay a corresponding sum in cash or other form to a beneficiary by means of a communication, message, transfer, or through a clearing network to which the MVTS provider belongs.
A direct, sequential chain of payment where the payment message travels together with the funds from the ordering FI to the beneficiary FI, potentially through intermediaries.
An identification scheme issued by a public sector body in a jurisdiction that ensures a unique reference for a person or entity.