Want to see how sales training for financial services can help teams simplify offers without sounding pushy?
Introduction to APP Fraud Reimbursement
APP fraud reimbursement has changed what happens when someone is tricked into sending money directly to a fraudster. For years, victims of authorised push payment scams could face a difficult battle to recover their money because they had technically authorised the bank transfer themselves. The introduction of mandatory reimbursement rules has shifted that position significantly.
The rules are designed to give victims stronger protection while also making banks, building societies, payment firms and other payment service providers take greater responsibility for preventing fraud. They also create financial consequences for firms that allow fraudulent payments to leave or enter accounts without effective controls.
That does not mean every victim automatically receives every penny back. APP fraud reimbursement has defined eligibility requirements, limits, timescales and exceptions. Understanding those details matters for consumers and for financial services firms dealing with customers who have been targeted by increasingly sophisticated scams.
What Is APP Fraud Reimbursement?
APP fraud reimbursement relates to authorised push payment fraud. This happens when a victim is manipulated into authorising a payment to an account controlled by a fraudster. Unlike an unauthorised transaction, the victim has technically instructed their payment provider to send the money.
Typical examples include criminals impersonating banks, police officers, investment companies, solicitors, businesses or family members. Purchase scams, romance scams and investment scams can also involve authorised payments.
The problem is that authorisation does not necessarily mean genuine consent based on accurate information. A victim may believe they are paying a legitimate company when the recipient is actually a criminal.
Mandatory APP fraud reimbursement was introduced to provide more consistent protection for qualifying customers. It also changes the incentives within the payments industry. Sending and receiving firms have stronger reasons to identify suspicious transactions, intervene before money leaves an account and prevent fraudulent accounts being used to receive stolen funds.
When Did The New APP Fraud Reimbursement Rules Start?
The current mandatory APP fraud reimbursement framework came into force on 7 October 2024 for qualifying payments made through Faster Payments, with aligned protection applying to qualifying CHAPS payments.
The Payment Systems Regulator explains that the protections cover qualifying individuals, microenterprises and charities that become victims of APP scams.
This represented a major change from the previous system. Before October 2024, reimbursement could depend heavily on whether a particular bank had signed the voluntary Contingent Reimbursement Model Code and how that institution interpreted an individual case.
The newer system creates mandatory minimum standards across firms that fall within scope. It is intended to make outcomes more consistent and reduce situations where two victims of similar scams receive completely different treatment simply because they use different financial institutions.
For firms operating in payments, banking and related sectors, the change also makes clear communication increasingly important. Wider developments such as open banking adoption reshaping financial services are also changing how customers access and understand financial products.
How Much Can Victims Receive?
The maximum mandatory APP fraud reimbursement amount is currently £85,000 for an eligible claim covered by the relevant rules. Payment firms can choose to reimburse more than the mandatory limit, but the requirement itself does not normally force them to do so.
The £85,000 ceiling covers the overwhelming majority of claims by number. However, it remains significant for victims of high-value investment scams, property-related fraud or other cases where criminals persuade somebody to transfer more than the limit.
A payment provider may also apply an excess of up to £100 to a qualifying claim. This is optional rather than compulsory. A firm can apply a smaller excess or no excess at all.
The excess cannot be applied where the customer is considered vulnerable under the relevant requirements. That distinction matters because fraudsters frequently target people experiencing circumstances that may increase their susceptibility to manipulation.
Where losses exceed the reimbursement ceiling, consumers may have other routes available depending on the circumstances. This can include making a formal complaint and potentially referring unresolved complaints to the Financial Ombudsman Service.
How Quickly Should Victims Get Their Money Back?
One of the most important parts of APP fraud reimbursement is the expectation that eligible victims should receive a decision and reimbursement quickly.
In straightforward cases, firms should normally reimburse a qualifying claim within five business days. That is significantly different from a system where customers might spend weeks or months trying to establish whether their bank would refund them.
There are circumstances where a payment firm can pause the normal timeframe while it investigates specific issues or obtains information needed to assess a claim. However, the overall process should generally be completed within 35 business days.
This creates an important operational challenge. Firms need enough information to identify fraudulent claims and investigate genuine uncertainty without creating unnecessary barriers for legitimate victims.
Customer-facing employees also need to explain why information is being requested and what happens next. This is particularly important as real-time payments change banking expectations and customers increasingly expect transactions and financial-service responses to happen quickly.
Are Victims Actually Getting Reimbursed?
The evidence available since the rules were introduced suggests that APP fraud reimbursement is returning a substantial proportion of eligible losses to victims.
Payment Systems Regulator data covering the first 18 months of the regime, from 7 October 2024 to 31 March 2026, showed that 88% of money lost in reimbursable APP scam cases had been returned to victims. Around £316 million was reimbursed during that period.
Approximately 438,300 claims were reported, with about 301,500 falling within the scope of the reimbursement framework. The distinction is important. A reported fraud case is not automatically an eligible reimbursement claim.
The data also showed that 82% of claims were closed within five business days and 98% within 35 business days. Those figures suggest that most qualifying cases are being resolved within the timescales intended by the policy.
That does not mean the experience is perfect for every victim. Disagreements can still arise over whether a transaction qualifies, whether the customer met the required standard of caution and whether vulnerability should affect the firm’s assessment.
What Does The Consumer Standard Of Caution Mean?
APP fraud reimbursement is designed to protect victims, but customers still have responsibilities. The rules include what is known as the consumer standard of caution.
Customers may be expected to pay attention to interventions or warnings given by their payment provider, report suspected scams promptly once they become aware of them, provide reasonable information needed to investigate the claim and cooperate with relevant reporting requirements.
However, firms cannot simply reject a claim because, with hindsight, the customer could have acted differently. The rules set a high threshold before a consumer can be refused reimbursement on the basis of gross negligence.
That distinction is important. Effective fraudsters deliberately create urgency, authority and fear. Victims may be told that their account is under attack, their money must be transferred immediately or they must keep the situation confidential.
Employees therefore need to understand both regulation and human behaviour. This becomes even more important as embedded finance changes banking faster than expected and financial services become increasingly integrated into everyday digital journeys.
Why Does Vulnerability Matter?
Vulnerability plays an important role in APP fraud reimbursement because a customer’s personal circumstances can affect both how easily they are manipulated and how reasonably they could have responded to warnings.
Vulnerability is not limited to age or disability. Bereavement, financial pressure, poor mental wellbeing, major life events, limited digital confidence and other circumstances may affect how somebody processes information or responds to pressure.
A customer considered vulnerable may receive additional protection. For example, the optional claim excess cannot be imposed where vulnerability affected the customer’s ability to protect themselves from the scam.
Firms therefore need processes capable of recognising vulnerability rather than relying on customers to use a particular phrase or formally identify themselves as vulnerable.
There is also a communication challenge. Asking about circumstances requires sensitivity. Teams must gather enough information to make a fair assessment without making victims feel that they are being blamed or interrogated.
Why Are Both Sending And Receiving Firms Responsible?
A major feature of APP fraud reimbursement is that responsibility does not rest solely with the firm whose customer sent the money.
The receiving payment provider also has an important role because criminals need accounts capable of receiving fraudulent transfers. These may include accounts opened specifically for fraud or genuine accounts being used as money mule accounts.
Under the Faster Payments reimbursement framework, the cost of eligible reimbursement is generally shared equally between the sending and receiving payment service providers.
This creates a direct financial incentive for receiving firms to improve onboarding, transaction monitoring, mule-account detection and intervention processes.
It changes the economics of fraud prevention. A provider that fails to identify suspicious incoming activity may now bear part of the financial cost when money is successfully stolen.
For larger organisations, these responsibilities sit within a wider financial system that is also being transformed by developments such as asset tokenisation reshaping financial services, making strong controls and clear responsibilities increasingly important.
What Types Of Fraud Can Be Covered?
APP fraud reimbursement can apply to several types of scams where someone is manipulated into transferring money to a fraudster.
Impersonation scams are a common example. A criminal may pretend to work for a bank, police force, HMRC, an investment company or another trusted organisation. The victim is then persuaded to transfer money because they believe they are protecting it or making a legitimate payment.
Purchase scams can occur when someone transfers money for goods or services that do not exist. Romance scams may involve a fraudster building a relationship before requesting payments. Investment scams can involve supposedly legitimate opportunities promising attractive returns.
Invoice and mandate fraud can affect businesses where criminals impersonate suppliers or alter payment instructions.
What matters is not simply the label attached to the scam. Eligibility depends on factors including the payment method, where the payment was sent, the type of customer and whether the circumstances fall within the relevant reimbursement rules.
What Is Not Automatically Covered?
APP fraud reimbursement does not mean every fraud-related loss falls under the mandatory scheme.
The payment route matters. The mandatory protections principally concern qualifying domestic payments made through Faster Payments and CHAPS. Card fraud, cash withdrawals, cryptocurrency transfers, international payments and some transfers between accounts operated by the same provider may be treated differently.
Payments made before 7 October 2024 are also outside the newer mandatory framework, although previous protections or complaint routes may still be relevant.
Customers involved in the fraud themselves are not entitled to reimbursement. Firms are also permitted to investigate suspected dishonest or fraudulent claims.
Claims can become more complicated when money moves through several accounts, when the victim first transfers funds into another account in their own name or where part of the transaction occurred outside the payment systems covered by the rules.
Clear explanations are essential in these situations. Financial firms are also operating in a changing funding environment, with private credit growing faster than traditional banks and creating a broader range of providers, products and financial relationships for customers to understand.
Can Victims Challenge A Rejected Claim?
A rejected APP fraud reimbursement claim does not necessarily mark the end of the process.
A customer can ask the payment provider to explain the decision and can use the firm’s formal complaints procedure if they believe the rules have been applied incorrectly.
Where the complaint remains unresolved, eligible customers may be able to refer the matter to the Financial Ombudsman Service. The Ombudsman can consider the circumstances of the individual case rather than simply repeating the firm’s original decision.
Customers should keep records of relevant messages, emails, bank warnings, telephone calls and communications with the fraudster where possible. These can help establish how the scam developed and what information was available at the time payments were made.
Reporting the scam quickly is also important. Faster reporting may improve the chance of stopping further transfers or recovering money that remains in recipient accounts.
How Has APP Fraud Reimbursement Changed Financial Services?
The importance of APP fraud reimbursement goes beyond compensating people after scams happen. The rules are intended to change behaviour across the payments system.
Payment firms now have a stronger financial reason to prevent fraudulent transactions in the first place. That includes understanding customer behaviour, identifying unusual payments, issuing meaningful warnings and stopping suspicious transactions where appropriate.
Receiving institutions also face stronger incentives to identify accounts being used by fraudsters. This matters because APP fraud cannot happen at scale without accounts capable of receiving and moving stolen money.
There is also pressure to make fraud warnings better. A generic warning that customers routinely ignore is unlikely to have the same effect as a specific intervention that explains the risk relevant to the transaction they are attempting.
The challenge is finding the right balance. Payment providers need to intervene effectively without creating unnecessary friction for millions of legitimate transfers.
Customer conversations are part of that balance. This is becoming harder as cybersecurity in financial services gets harder and criminals use increasingly convincing digital methods to manipulate customers and target financial institutions.
Does Reimbursement Reduce The Need For Fraud Prevention?
No. APP fraud reimbursement is not intended to replace prevention. In many ways, reimbursement makes prevention more commercially important.
Returning money after a scam helps the victim, but preventing the payment is usually better for everyone involved. The customer avoids distress and disruption. The payment provider avoids reimbursement costs. Criminals receive less money and fraudulent accounts become less valuable.
Firms therefore need prevention throughout the customer journey. That begins with account opening and identity checks and continues through transaction monitoring, customer warnings, staff intervention and rapid action after suspicious activity is reported.
Fraudsters also adapt quickly. They test warnings, change scripts and move victims between communication channels. Static fraud controls can therefore become less effective over time.
The strongest response combines technology with skilled people. Automated detection may identify unusual behaviour, but employees still need to know how to question a transaction without simply telling customers that the bank thinks they are wrong.
What Should Financial Services Firms Learn From The Changes?
The biggest lesson from APP fraud reimbursement is that fraud prevention is no longer just a specialist function sitting behind the customer experience.
Front-line employees, fraud teams, complaints handlers, compliance teams and payment operations all influence the outcome. A warning that is technically accurate but poorly explained may fail. A legitimate victim who feels blamed may lose trust in the provider even if reimbursement eventually follows.
Firms therefore need consistency between their policies and the conversations customers actually experience.
Employees should understand what APP fraud is, what the reimbursement rules cover, when additional investigation may be required and how vulnerability affects the assessment. They should also know when a conversation needs escalation.
Clear communication matters particularly when large amounts of money are involved. Customers need enough information to make informed decisions without being overwhelmed with legal or technical terminology.
APP fraud reimbursement therefore requires financial services firms to combine effective fraud controls with clear customer communication, consistent processes and staff who understand both the rules and the human impact of financial scams.
FAQ About APP Fraud Reimbursement
What is APP fraud reimbursement?
APP fraud reimbursement is the process of returning money to qualifying customers who have been tricked into authorising a payment to a fraudster. APP stands for authorised push payment fraud, where the victim personally approves the transfer because they have been deceived about who they are paying or why the payment is required. Mandatory APP fraud reimbursement protections introduced on 7 October 2024 strengthened protection for qualifying Faster Payments and CHAPS transactions in the UK.
How much can I claim under APP fraud reimbursement?
The mandatory APP fraud reimbursement limit is generally £85,000 for an eligible claim covered by the scheme. Individual banks and payment providers can choose to reimburse more than £85,000, but the mandatory rules do not normally require them to do so. A provider may also apply an excess of up to £100, although this cannot be applied in qualifying cases where vulnerability affected the customer’s ability to protect themselves from the APP fraud.
How long does APP fraud reimbursement take?
A straightforward qualifying APP fraud reimbursement claim should normally be reimbursed within five business days. A payment provider can take longer when it genuinely needs additional information or further investigation, but APP fraud reimbursement cases should generally be completed within 35 business days. Customers should report APP fraud as quickly as possible because early reporting may also improve the chance of recovering money before it is moved from the recipient account.
Does APP fraud reimbursement cover every bank transfer scam?
No. APP fraud reimbursement does not automatically cover every bank transfer scam or every type of fraud. Eligibility depends on factors including when the payment was made, which payment system was used, the type of customer making the claim and the circumstances surrounding the scam. Qualifying Faster Payments and CHAPS transactions can fall within mandatory APP fraud reimbursement, while card fraud, international payments, cryptocurrency transfers and other payment methods may fall under different protections.
Can a bank refuse APP fraud reimbursement?
Yes, an APP fraud reimbursement claim can be refused, but a bank or payment provider cannot reject it simply because the customer personally authorised the transfer. The provider must apply the APP fraud reimbursement rules correctly. A claim may fall outside the scheme because of the payment type, timing or customer category, because the claimant was involved in the fraud, or because the strict requirements relating to the consumer standard of caution have not been met.
Does APP fraud reimbursement cover investment scams?
APP fraud reimbursement can cover qualifying investment scams where a victim is deceived into sending money to a fraudulent investment or criminal-controlled account. The fact that the customer intended to make an investment does not automatically remove APP fraud reimbursement protection. The payment still needs to meet the scheme requirements, including the relevant payment route, customer eligibility and circumstances of the fraud.
Are romance scams included in APP fraud reimbursement?
Romance scams can qualify for APP fraud reimbursement where a fraudster builds a false relationship and manipulates the victim into making qualifying payments. A victim may willingly press the payment button but still have been deceived into making the transfer. APP fraud reimbursement recognises that authorising a payment does not necessarily mean the customer understood the true identity or intentions of the person receiving the money.
Does APP fraud reimbursement apply to businesses?
Mandatory APP fraud reimbursement can apply to qualifying microenterprises as well as individual consumers and qualifying charities. Larger businesses do not automatically receive the same protection under the mandatory APP fraud reimbursement framework. Businesses should therefore check their account terms, payment arrangements and eligibility rather than assuming that every commercial bank transfer is protected by the same reimbursement rules.
What happens if an APP fraud reimbursement claim is rejected?
If an APP fraud reimbursement claim is rejected, the customer can ask the bank or payment provider to explain its decision and use the firm’s formal complaints procedure. If the dispute remains unresolved, an eligible customer may be able to refer the complaint to the Financial Ombudsman Service. Keeping evidence such as bank warnings, emails, messages, telephone records and communications with the fraudster can help when challenging an APP fraud reimbursement decision.
Why is the receiving bank involved in APP fraud reimbursement?
The receiving bank or payment provider is involved because it controls the account into which the fraudulently obtained money is transferred. Under the Faster Payments APP fraud reimbursement framework, the cost of qualifying reimbursement is generally shared between the sending and receiving payment service providers. This gives both sides a financial incentive to detect suspicious transactions, identify mule accounts and stop APP fraud before customers lose money.
Does APP fraud reimbursement mean customers no longer need to be careful?
No. APP fraud reimbursement gives qualifying victims stronger protection, but customers still have responsibilities. They may be expected to respond appropriately to relevant warnings, report APP fraud promptly, provide reasonable information for an investigation and cooperate with legitimate requests from their payment provider. However, the rules recognise that fraudsters use sophisticated manipulation, and APP fraud reimbursement cannot normally be refused simply because a victim made an understandable mistake.
Has APP fraud reimbursement helped victims?
Available Payment Systems Regulator data indicates that APP fraud reimbursement has returned a substantial proportion of qualifying losses to victims. During the first 18 months of the mandatory regime, covering 7 October 2024 to 31 March 2026, 88% of money lost in reimbursable APP scam cases was returned to victims, representing around £316 million. The figures suggest that mandatory APP fraud reimbursement is providing significant financial protection for many eligible UK fraud victims.
Our sales training for financial services focuses on the moments that can make the difference between an enquiry becoming a client or going elsewhere. That includes prospective clients comparing advisers, questioning fees, struggling to understand their options, saying they need to think about it or going quiet after an initial meeting. Our financial services sales training helps advisers uncover priorities, build trust, make complex information easier to understand and explain the value of their recommendations and ongoing service. The result is a more confident and consistent approach to client conversations, from the first enquiry through to a decision and a lasting relationship.
More Financial Services sales training insights
Buy Now Pay Later Regulation: What Has Changed?
Variable Recurring Payments: Will They Replace Direct Debits?
Open Finance UK: What Happens Beyond Open Banking?
Payment Firm Safeguarding: Is Customer Money Safer?
Motor Finance Redress: Who Could Receive Compensation?
Ready to elevate your financial services sales techniques?
Whether you’re looking to enhance your financial sales skills or aiming to sharpen your sales strategy in business-to-business selling, let’s work together to take your sales pitch to the next level
If you are comparing options, it helps to review a focused financial services sales training that shows how clearer value leads to faster client decisions.
