FRIDA in Europe: How Fraud Data Sharing Could Affect Online Casino Payments
Europe is preparing a new approach to payment fraud prevention that could eventually influence how online casinos process deposits and withdrawals. The Fraud Information Distribution Arrangement (FRIDA), developed by the European Payments Council (EPC), is intended to help payment service providers exchange information about suspicious financial activity across the Single Euro Payments Area (SEPA). Unlike conventional fraud monitoring, which largely relies on information available to individual banks and payment companies, FRIDA aims to make relevant fraud alerts accessible across participating institutions. For gambling operators, the potential consequences include changes to bank transfer screening, payment verification, withdrawal reviews and fraud prevention procedures. However, FRIDA is still under development in November 2026, and its direct implications for online casinos depend on the final rules, the payment methods involved and how participating financial institutions use shared information.
What Is FRIDA and Why Is Europe Developing a Common Fraud Information System?
FRIDA stands for Fraud Information Distribution Arrangement, an initiative designed and maintained by the European Payments Council. Its purpose is to establish consistent rules for exchanging fraud-related information between payment service providers, including banks and other eligible financial institutions. The initiative responds to the proposed EU Payment Services Regulation (PSR), which introduces additional obligations concerning fraud monitoring and information sharing. Rather than creating a public database of suspicious customers, FRIDA establishes a controlled arrangement through which authorised financial institutions can distribute and receive relevant fraud alerts. The objective is to identify potentially fraudulent payment activity more effectively, particularly when suspicious transactions involve accounts held at different institutions or cross-border payments.
The need for stronger cooperation is supported by European payment fraud statistics. According to the joint European Banking Authority and European Central Bank report published in December 2025, the reported value of payment fraud in the European Economic Area reached €4.2 billion in 2024, compared with €3.5 billion in 2023. Although strong customer authentication has helped reduce certain types of unauthorised fraud, criminals increasingly manipulate legitimate account holders into authorising transfers themselves. Such transactions can be difficult to identify through authentication alone because the genuine customer may complete every required security step. Sharing information about suspicious accounts and established fraud patterns could provide financial institutions with additional context when assessing payments that otherwise appear legitimate.
The EPC published version 0.1 of the FRIDA rulebook on 11 September 2026 and opened a public consultation running until 10 December 2026. The current timetable anticipates publication of the formal rulebook in May 2027, followed by technical specifications in June 2027. Implementation is expected to coincide with the Payment Services Regulation, currently anticipated for the fourth quarter of 2028. These dates are provisional because the relevant legislation and technical arrangements have not been finalised. Consequently, FRIDA should not be presented as an operational fraud-screening service already affecting casino transactions throughout Europe in 2026. Its significance today lies in the preparation of common procedures that financial institutions may eventually incorporate into their existing payment controls.
How FRIDA Fraud Alerts Are Expected to Work
Under the proposed arrangement, a payment service provider that identifies suspicious activity can create a structured fraud alert containing information relevant to the suspected fraud. The current draft identifies bank account references, including International Bank Account Numbers (IBANs), and direct debit creditor identifiers among the information that can be associated with alerts. Each alert also has a unique technical identifier. These records are intended to help other participating institutions recognise connections between suspicious activities, rather than requiring every bank to investigate potentially related incidents independently. Information is distributed through the planned FRIDA Central Platform, which manages alert circulation and subsequent updates. Participating providers may receive information through automated notifications or scheduled retrieval, depending on their chosen arrangements.
A crucial distinction is that FRIDA is not intended to approve or reject individual transfers. According to the EPC’s October 2026 guidance, fraud alerts will supplement the information used by each payment provider’s existing transaction-monitoring arrangements. A bank receiving an alert can consider that information alongside its own records, customer behaviour, transaction history and relevant security indicators. The provider remains responsible for deciding whether additional verification, investigation or another appropriate response is necessary. The proposed scheme does not require every receiving institution to take action on every alert, meaning the existence of shared information does not automatically establish fraudulent conduct or require a payment to be blocked.
Information accuracy is especially important because an incorrect suspicion can affect legitimate financial activity. The proposed FRIDA process allows sending payment providers and account-servicing institutions to update alerts when investigations produce additional evidence. The EPC also expects incorrectly issued alerts to be cleared as soon as technically possible. Access is restricted to participating payment service providers and eligible fraud information providers, rather than ordinary merchants or the general public. These safeguards matter for online gambling because an unsuccessful payment, unusual withdrawal or temporary account review should not automatically be interpreted as evidence of fraud. FRIDA must also operate within applicable data protection requirements, including the EU General Data Protection Regulation, while the final rules will determine further operational details.
How FRIDA Could Influence Online Casino Deposits and Withdrawals
The most direct potential connection between FRIDA and online casinos concerns account-to-account payments. These include bank transfers used to deposit funds into gambling accounts or withdraw winnings to verified bank accounts, provided the transactions fall within the relevant European payment schemes. The proposed arrangement covers qualifying account-to-account transactions, including those processed through EPC payment schemes, rather than every payment method available at an online casino. Card payments, digital wallet transactions and account-opening activity are outside the scope of FRIDA’s initial version, according to the EPC’s October 2026 clarification. This limitation is essential when considering its potential effects: FRIDA does not introduce a universal fraud register covering every casino deposit, payment card or electronic wallet.
Consider a situation in which a fraudulent recipient account has already been identified by one bank. If another financial institution subsequently encounters a transfer involving the same account, a relevant FRIDA alert could provide additional information for its existing fraud checks. For an online casino, this might become relevant when funds are transferred from suspicious external accounts or when withdrawal instructions involve an account associated with previously reported fraud. However, the information would be assessed by the participating payment provider, not automatically delivered to the casino. Any resulting payment delay, request for supporting documentation or transfer restriction would depend on the financial institution’s assessment, applicable law and its contractual relationship with the gambling operator.
FRIDA could also help address certain cross-border fraud patterns involving payments between European countries. Online gambling businesses often work with payment processors that handle transactions across several banking systems, while players may use accounts maintained in a different SEPA country from the casino’s payment service provider. Fraudsters can exploit differences in monitoring and information availability between institutions. A more consistent method of sharing relevant alerts may help participating providers identify suspicious account relationships earlier. Nevertheless, geographical coverage should not be confused with gambling authorisation. SEPA participation does not give an online casino permission to accept customers in every European country, and FRIDA will not replace national gambling licences, local payment restrictions or existing customer verification obligations.
Possible Changes to Payment Verification, Delays and Player Protection
For players, the most noticeable potential consequence would be additional scrutiny of certain bank transfers rather than a completely different deposit or withdrawal process. A transaction involving an account that attracts a relevant fraud alert could receive closer attention from the financial institution responsible for processing it. Depending on the circumstances, this might involve additional authentication, an investigation or a request to confirm the intended recipient. The same principle could apply to withdrawals if the receiving account raises genuine concerns. However, FRIDA does not prescribe a standard delay, introduce an additional casino verification fee or establish a new universal withdrawal limit. Any claim that the scheme will automatically slow every casino payment would therefore be misleading.
Legitimate players could potentially benefit if the improved circulation of fraud information helps identify criminal misuse of banking details before additional losses occur. For example, a customer whose account has been compromised may be exposed to further fraudulent transfers even after the first incident is reported to one institution. Sharing relevant indicators can help another institution assess related activity more quickly. At the same time, fraud prevention must remain proportionate. Large deposits, frequent gambling transactions or withdrawals following substantial winnings do not, by themselves, prove payment fraud. Providers need to distinguish suspicious conduct from legitimate financial behaviour, particularly when evaluating accounts used for lawful gambling activity.
It is also necessary to separate payment fraud screening from the identity checks and anti-money laundering controls already applied by licensed gambling operators. Casinos may be required to verify customer identity, examine the origin of funds in appropriate circumstances, and comply with applicable anti-money laundering and responsible gambling requirements. FRIDA does not replace these responsibilities, nor does it create a new customer identification process administered by the casino. A player experiencing a delayed bank transfer should initially check its status with the relevant casino or payment provider, depending on where the transaction is pending. If incorrect financial information appears to be involved, the customer should use the bank’s established complaint and data correction procedures rather than assuming that FRIDA provides a direct consumer appeal service.
What Online Casino Operators and Payment Providers Should Prepare for
For online casino operators, preparation begins with understanding which payment methods and service providers could fall within the proposed FRIDA arrangements. Businesses using SEPA credit transfers, SEPA Instant Credit Transfers or other qualifying account-to-account payment services should establish whether their acquiring banks, payment institutions or banking partners expect to participate directly or through an eligible fraud information provider. This does not necessarily require a casino to build a direct connection to FRIDA. Under the proposed structure, participation and access are primarily intended for qualifying payment service providers and fraud information providers acting within the scheme. Gambling businesses should therefore concentrate on understanding how their existing financial partners intend to incorporate additional fraud intelligence into transaction monitoring and operational decisions.
Payment-related customer support procedures may also require attention. When a deposit has left the player’s bank account but has not been credited, the casino needs to distinguish between an ordinary processing delay, an unsuccessful transfer, an account reconciliation issue and a payment placed under investigation. Similar distinctions matter when a withdrawal has been approved internally but has not yet reached the customer’s bank account. Clear transaction references, accurate status information and established escalation channels can help resolve these situations without misleading customers. Operators should avoid describing an unexplained delay as a FRIDA intervention unless their payment provider has specifically confirmed the reason and the information can lawfully be disclosed.
Another consideration is the relationship between fraud prevention and customer privacy. Casino businesses already handle sensitive financial and identity information, and the introduction of additional fraud intelligence within the banking sector should not become a justification for unnecessary data collection. Any information exchanged between a casino and its payment provider should have an appropriate legal basis, defined purpose and suitable security controls. Operators should also review how disputes are handled when suspicious payment activity is incorrectly attributed to a legitimate customer. Effective fraud prevention depends not only on identifying threats but also on avoiding unjustified restrictions, retaining accurate records and correcting mistakes when new evidence becomes available.
FRIDA’s Implementation Timeline and Its Longer-Term Significance
As of November 2026, the immediate milestone is the EPC’s public consultation, which remains open until 10 December 2026. The EPC is simultaneously developing technical specifications, participation requirements for fraud information providers and the arrangements for operating the central alert distribution infrastructure. The next planned milestones are the publication of the final version 1.0 rulebook in May 2027 and associated technical specifications in June 2027. The proposed operational start is linked to the expected entry into force of the Payment Services Regulation in late 2028. Businesses should treat these dates as planning assumptions rather than guaranteed implementation deadlines, since both legislative developments and consultation feedback may affect the eventual requirements.
For gambling payment providers, the practical work will involve assessing compatibility with internal fraud monitoring, determining how incoming alerts should be evaluated and ensuring that incorrect information can be updated or cleared. They will also need procedures for managing access rights, safeguarding personal information and recording decisions made on the basis of external intelligence. Casino operators can support these preparations by maintaining dependable payment records, reviewing contractual responsibilities with payment partners and ensuring that staff understand the difference between a suspected fraud incident and a confirmed offence. Close cooperation may be particularly useful for businesses processing substantial volumes of cross-border bank transfers, where investigations can involve several institutions with different operational procedures.
FRIDA’s eventual importance will depend on the reliability of the information exchanged, the speed with which relevant alerts become available and the care taken when financial institutions interpret them. Better coordination could reduce opportunities for criminals to reuse suspicious accounts across different payment providers, while helping protect legitimate customers from repeat fraud. Yet shared data will not eliminate fraudulent transactions, guarantee immediate withdrawals or remove the need for individual risk assessments. For European online casinos, the most realistic expectation is a gradual improvement in the information available to banking partners, accompanied by a continuing need for accurate payment handling, proportionate security checks and transparent communication with players.