#
Supreme Court judgment 571/2025 shifts APP-fraud burden of proof to banks; CNMV Banco Sabadell sanction; CNMC antitrust file adds competition-law dimension.
Outlook
The burden-of-proof reversal in judgment 571/2025 sits alongside the CNMV's Sabadell sanction and the CNMC's mortgage-pricing probe, together signalling a courts-and-regulators pincer on Spanish bank conduct that should push PSPs toward more conservative fraud-liability provisioning ahead of further case law.
Legal & Litigation
The EU Council's issuance of compromise texts for PSD3/PSR on 17 April 2026 is this cycle's defining structural development for Spain's payments legal landscape. Formal adoption is expected imminently, at which point a 21-month national transposition clock begins running toward an eventual in-force date projected around 2028. The reform's most consequential structural feature for Spain is the elimination of the standalone EMI regime: PSD3/PSR merges e-money institutions into a Payment Institution sub-category, requiring existing EMIs to undergo re-authorisation under the new framework rather than continuing indefinitely under legacy EMD licensing.
Alongside the licensing-structure merger, the reform introduces expanded APP-fraud reimbursement liability for payment service providers and mandatory IBAN/name-check obligations, under which a PSP must verify that the payee name matches the IBAN before completing a transfer. These consumer-facing fraud-prevention measures apply across the merged Payment Institution category and represent a materially higher compliance bar than the current regime, particularly for entities that have operated under the lighter-touch EMI framework.
This is currently probable-confidence, standing-brief material: the compromise texts have been issued but formal adoption, and the specific mechanics of Spain's national transposition, remain ahead. The 21-month clock is a maximum transposition window rather than a guarantee of early implementation, and Spain's specific transposition approach — including any grandfathering provisions for existing EMIs — has not yet been determined or evidenced this cycle.
Outlook
The key legal-development watch item for coming cycles is formal EU-level adoption of PSD3/PSR, which will fix the exact start date of Spain's 21-month transposition clock. Once transposition legislation is drafted domestically, the treatment of existing EMIs — whether through grandfathering or a hard re-authorisation deadline — will be the most consequential detail for incumbent payment institutions operating in Spain under the current EMD-derived framework.
1 earlier distinct update(s)
Legal & Litigation
Spain's Tribunal Supremo issued a confirmed, directly relevant APP-fraud liability ruling this cycle in the form of sentencia 571/2025, decided 9 April 2025, which ordered a bank to refund a customer more than €56,000 lost to a phishing and SIM-swap fraud scheme. The court's reasoning turned on the bank's failure to react to evident fraud signals, establishing a judicial standard for provider liability in authorised push payment fraud cases ahead of any formal statutory obligation to that effect.
This ruling is significant not only in isolation but because it anticipates the PSR's own explicit APP-fraud liability extension, which is expected to become statutory law once PSD3/PSR is transposed, likely in the mid-to-late 2027 window given the current transposition timeline. In the interim period between now and formal transposition, sentencia 571/2025 functions as the operative Spanish judicial standard on this question, meaning payment service providers face live litigation exposure on evident-fraud-signal failures even before the statutory obligation is codified.
The convergence of judicial precedent and incoming statutory obligation on the same substantive standard, failure to react to evident fraud signals versus PSR's codified liability extension, suggests a low-uncertainty trajectory: the statutory codification is likely to formalise rather than depart from the standard the courts are already applying.
Outlook
Further Tribunal Supremo or lower-court rulings applying a similar evident-fraud-signal liability standard would be a significant intermediate development to track ahead of PSD3/PSR's formal transposition. Legal and litigation risk for Spanish payment service providers on APP-fraud liability should be treated as already live under the current judicial standard, not merely a future statutory concern.
Sources and findings (4)
- T3https://euroweeklynews.com/2026/03/08/bank-scam-in-spain-supreme-court-says-banks-may-have-to-give-your-money-back/retrieved
- T1https://www.derecho.com/boe/resolucion-de-5-de-mayo-de-2026-del-banco-de-espana-por-la-que-se-publican-las-sanciones-impuestas-por-infracciones-graves-a-money-exchange-sa-y-a-los-miembros-de-su-consejo-de-administracion-890347retrieved
- T1https://www.boe.es/diario_boe/txt.php?id=BOE-A-2026-4960retrieved
- T3https://roams.es/actualidad/finanzas/guerra-hipotecas-fijas-cnmc-expediente-seis-grandes-bancos/retrieved