Belgium: Banks to Implement Transfer Limits to Combat Fraud
Belgian authorities are moving to bolster consumer protection against online fraud, specifically targeting the increasingly common tactic of invoice fraud and account takeover. Federal Consumer Protection Minister Rob Beenders is proposing new measures that would require banks to implement both warnings and delays for increased transaction limits, aiming to disrupt the schemes used by criminals to drain victims’ accounts.
The core of the proposed regulation centers on addressing a vulnerability in the current banking system. Currently, when a customer increases their daily transfer limit – often at the urging of a fraudster posing as a legitimate entity – banks do not automatically flag this change as potentially risky. Fraudsters frequently manipulate victims into raising these limits to facilitate larger, unauthorized transfers. The new rules would mandate that banks display an automatic warning when a customer increases their transfer limit. More significantly, a mandatory four-hour waiting period would be imposed before any transfer exceeding the previously authorized limit could be executed. This delay is intended to provide customers with a crucial window to recognize and cancel fraudulent transactions.
The impetus for these changes stems from a surge in phishing scams, where criminals use deceptive communications – often mimicking legitimate businesses like utility companies – to trick individuals into divulging financial information or authorizing fraudulent transfers. These scams often involve fake invoices with altered bank account details. The existing system allows fraudsters to exploit the lack of verification between the account name and the account number, a loophole that will be closed starting .
From that date, Belgian banks will be legally obligated to verify that the recipient’s name matches the provided account number for every transfer. This system, already in place in countries like the Netherlands, France, and the UK, has proven effective in reducing fraud. In the Netherlands, the implementation of a similar name-check system resulted in an 81%
reduction in bank account-related fraud, according to Minister Beenders. However, authorities acknowledge that the system isn’t foolproof, as customers retain the option to override the warnings.
The implementation of the name-check system requires significant technological investment from banks. They must develop algorithms capable of accurately matching account holder identities with their corresponding account numbers, while also accounting for potential spelling variations to avoid disrupting legitimate transactions. The Minister has indicated that banks will be expected to build in tolerance for close matches
to minimize false positives.
Beyond the name-check system, the proposed delay on increased transfer limits represents a further layer of protection. This measure directly addresses the tactic of coercing victims into raising their limits immediately before a fraudulent transfer is initiated. The four-hour cooling-off period is designed to disrupt this process, giving individuals time to realize they are being scammed and to contact their bank to halt the transaction.
These regulatory changes are being driven, in part, by new European rules designed to reduce fraud across the continent. Belgium is an early adopter of real-time payment infrastructure, operating under the SEPA Instant Credit Transfer (SCT Inst) scheme and the TARGET Instant Payment Settlement (TIPS) service. These systems allow for near-instantaneous transfers, but also create opportunities for fraud if adequate safeguards are not in place. Typical settlement times in Belgium are 10 seconds or less
, highlighting the speed at which fraudulent transactions can occur.
The European Instant Payments Regulation mandates that Belgian banks offer instant transfers without imposing additional charges compared to standard transactions, increasing the accessibility and convenience of these services. However, this increased accessibility also necessitates enhanced security measures. The technical foundation for these real-time payments is the ISO 20022 messaging standard, which facilitates communication between financial institutions.
While the new regulations represent a significant step forward in protecting consumers, they also raise questions about the potential impact on legitimate transactions. The four-hour delay, in particular, could inconvenience individuals who need to make urgent payments. Banks will need to carefully balance security concerns with the need to provide efficient and reliable services. The effectiveness of the system will depend on consumer awareness, and vigilance. Individuals must remain cautious of phishing attempts and promptly report any suspicious activity to their bank.
The changes come as Belgium continues to develop its real-time payment infrastructure. The country’s system is built on a pan-European framework, positioning it as a leader in the region. However, the increasing sophistication of online fraud requires ongoing investment in security measures and a proactive approach to protecting consumers. The combination of the name-check system and the delay on increased transfer limits represents a comprehensive response to the evolving threat landscape.