The Banca d'Italia has reported a sharp decline in fraud targeting instant bank transfers, a promising sign that tighter verification protocols and heightened customer vigilance are beginning to pay off. For residents and businesses navigating Italy's increasingly digital financial landscape, this marks a meaningful shift in a payment method that has long been vulnerable to scams due to its speed and irreversibility.
Why This Matters
• Fraud rates down sharply: Instant transfer fraud fell 40% in the first half of 2025 compared to the second half of 2024, and 57% compared to the same period in 2024.
• Verification tools work: The Verification of Payee (VOP) system, mandatory since October 2025, now checks that the recipient's name matches the IBAN before you send money.
• Still riskier than traditional transfers: Instant transfers show a fraud rate of 0.012% per transaction, compared to 0.002% for ordinary bank transfers.
• Value-based fraud down: Only 28 euros are lost per 100,000 euros transferred in instant payments in the first half of 2025, down from 45 euros in the first half of 2024.
What the Numbers Tell Us
The latest semi-annual report from Bankitalia, covering the second half of 2025 and released on July 20, 2026, confirms that instant payment fraud remains higher than that of conventional bank transfers—but the gap is narrowing fast. The fraud rate calculated by transaction volume stood at 0.012% in the first half of 2025, a 40% improvement from the second half of 2024 and 57% lower than the first half of 2024. For ordinary transfers, the rate sits at a much lower 0.002%.
When measured by value, fraud losses now represent 28 euros for every 100,000 euros transacted via instant transfer in the first half of 2025, down from 45 euros in the first half of 2024. That's a 38% reduction year-on-year.
These figures reflect not only the maturation of fraud-detection infrastructure but also a marked shift in consumer behavior. Italians are becoming more cautious, double-checking recipient details and responding more carefully to unsolicited payment requests—a behavioral change partly driven by sustained public awareness campaigns and real-time alerts from banks.
What This Means for Residents
If you're living in Italy and use instant transfers, you may have already noticed changes in your banking experience. Since October 2025, the Verification of Payee system, rolled out across the eurozone under the EU's Instant Payments Regulation (IPR), now cross-checks the name you enter against the registered IBAN holder automatically. If there's a mismatch, your bank flags it before the money leaves your account—most likely without any additional action required on your part, as your bank has already implemented this protection.
For everyday transactions—whether splitting restaurant bills, paying rent, or settling invoices—these protections are already working in the background. The declining fraud rate translates into tangible security gains. This is especially critical for instant transfers, which settle within 10 seconds and are almost impossible to reverse. Unlike traditional transfers, which can sometimes be recalled or frozen while in transit, instant payments are final the moment they're authorized. That makes the upfront verification layer your primary—and often only—line of defense against fraud.
For businesses, particularly small and medium enterprises that rely on rapid payments for cash flow, the risk of Authorized Push Payment (APP) fraud remains real. This is where a scammer impersonates a supplier or executive and tricks an employee into authorizing a transfer. The VOP system helps, but it won't catch every scheme, especially if a fraudster has gained access to legitimate-looking company details.
How the New Rules Work
The regulatory overhaul introduced by EU Regulation 2024/886 has fundamentally reshaped the instant payment landscape. Since October 2025, every bank in Italy must offer instant transfers 24/7/365, at no extra cost compared to ordinary transfers, and with no upper limit on the amount—the old cap of 100,000 euros is gone.
The technical backbone is TARGET Instant Payment Settlement (TIPS), a real-time gross settlement system operated by the European Central Bank, which works alongside the SEPA Instant Credit Transfer (SCT Inst) standard.
The VOP system, the most visible security upgrade, works like this: when you initiate an instant transfer, your bank queries a central registry to confirm that the recipient name you've typed matches the official account holder. If it does, the transfer proceeds. If not, you receive an alert. This single step has proven effective at blocking "typo fraud," where scammers alter a single digit in an IBAN, and impersonation scams, where they pose as a known contact.
Beyond VOP, banks are deploying real-time transaction monitoring powered by artificial intelligence, which flags anomalies—sudden high-value transfers, payments to newly added beneficiaries, or transactions that deviate from your usual patterns. Sanctions screening, another mandatory check, ensures funds aren't routed to blacklisted entities.
Why Instant Transfers Remain a Target
Despite the improvements, instant transfers are still six times more likely to be fraudulent than ordinary ones, as the Bankitalia data makes clear. The reason is simple: speed. Fraudsters exploit the 10-second settlement window and the psychological pressure they create—urgent requests, fabricated emergencies, offers that "expire" in minutes.
Across Europe, fraud on instant payments has surged in recent years, significantly outpacing the growth in legitimate transaction volume. According to industry tracking, transfer-based scams have become increasingly costly, with instant payment fraud now representing a substantial share of payment fraud losses across the continent. Italy's trajectory mirrors this trend, though the latest figures suggest the country is beginning to pull ahead in mitigation.
Authorized Push Payment fraud, where the victim is tricked into sending money willingly, accounts for more than half of all instant payment losses. The scams range from fake invoices and CEO impersonation to romance fraud and investment schemes. The common thread is social engineering—manipulating emotions, trust, and urgency to bypass rational checks.
Practical Steps to Protect Yourself
Experts in cybersecurity and financial crime recommend a layered defense:
Verify obsessively. Never rely solely on an IBAN provided in an email or text message. Call the recipient using a number you've independently verified—not one included in the message—and confirm the details verbally. This is especially important for high-value or unusual payments.
Enable two-factor authentication (2FA) on all banking apps and accounts. This ensures that even if your password is compromised, a second layer—typically a code sent to your phone—blocks unauthorized access.
Watch for red flags. Be skeptical of any payment request that creates urgency, promises outsized returns, or comes from a contact whose tone or language feels off. Scammers increasingly use deepfake audio and video to impersonate executives or family members in distress.
Activate real-time alerts. Most Italian banks now offer SMS or app-based notifications for every transaction. Set these up so you can spot unauthorized activity within seconds, not days.
Treat instant transfers as irreversible. Once you authorize a payment, assume the money is gone. If in doubt, use a traditional transfer, which gives you a narrow window to intervene if something seems wrong.
Regulatory Momentum
The Instant Payments Regulation is part of a broader EU push to harmonize digital payments and shore up consumer protections. The PSD3 directive—the next iteration of the Payment Services Directive—is expected to introduce stricter liability rules for banks, enhanced transparency on fraud rates, and tougher requirements for customer authentication in the coming years.
Italian banks are already required to report instant payment availability, adoption rates, and fraud statistics to regulators on a biannual basis. The Bankitalia's report serves as both a transparency measure and a benchmark for the industry.
Crucially, the regulation does not absolve users of responsibility. If you authorize a payment to a scammer without verifying the details, banks are not automatically liable for the loss. This shared responsibility model places a premium on consumer education—a principle that Italy's financial authorities have embraced through sustained public campaigns.
The Bigger Picture
The decline in instant transfer fraud is a rare piece of good news in a digital payments environment otherwise marked by escalating threats. As of 2026, losses from consumer fraud across Europe are growing, driven by increasingly sophisticated scams involving AI-generated identities, synthetic personas, and hyper-targeted phishing.
Yet the Italian experience suggests that a combination of strong regulation, effective technology, and informed users can bend the curve. The VOP system, in particular, has proven its value—not by eliminating fraud, but by making it harder, slower, and less lucrative for criminals.
For residents, the lesson is clear: instant transfers are safer than they were a year ago, but they demand a higher standard of caution. Take the time to verify. Trust the alerts your bank sends you. And remember that in the world of instant payments, there are no second chances.
