Meet Alexandre Lamfalussy
PSD3 and the PSR have cleared trilogue. Coreper has the final texts. None of that tells you when the rules will apply to your business. A primer on the four-level framework that determines when EU payments regulation lands.
Tuesday 5 May 2026
Est. 1980
Vol. —
No. —
Regulatory · Latest
Meet Alexandre Lamfalussy
PSD3 and the PSR have cleared trilogue. Coreper has the final texts. None of that tells you when the rules will apply to your business. A primer on the four-level framework that determines when EU payments regulation lands.
The Trust Triangle Evolution: From 3-D Secure's Three Domains to AP2's Agent Architecture
Twenty-five years ago, the payments industry solved the trust problem of e-commerce with a three-domain architecture that became the backbone of online authentication. Now, as AI agents prepare to shop on our behalf, we're witnessing history rhyme. But this time, humans might not be in the loop.
Second-Order Thinking: What the UK's Age-Check Law Taught Us About Regulation (and Why It Matters for AI)
Politicians love declaring victory. A new law passes, the metrics move in the right direction, and success is proclaimed. But in complex systems, the first metric to move is rarely the one that matters most.
Why Generalists Win in Complex Ecosystems
Enterprises often assume breakthroughs come from the deepest experts. Yet in environments where priorities collide and silos slow progress, it’s generalists who create clarity; connecting disciplines, aligning incentives, and unlocking outcomes specialists alone can’t reach.
The Wake-up Call: AI Has Defeated Bank Voice ID. Now What?
Financial institutions relying on voice biometrics face a serious problem. AI can now clone voices from seconds of audio, turning everyday digital footprints into authentication vulnerabilities. Under PSR's evolving framework, voice alone no longer meets regulatory or security standards.