<!-- Markdown twin of https://payments.gi/jurisdictions/spain/w7/. Same text as the HTML page; the HTML page is canonical. -->
title: Spain — Legal & Litigation | World Payments Monitor
canonical: https://payments.gi/jurisdictions/spain/w7/
publisher: Asymmetric Intelligence

### W7 Legal & Litigation Confirmed confirmed 2026-07-04

Supreme Court judgment 571/2025 shifts APP-fraud burden of proof to banks; CNMV Banco Sabadell sanction; CNMC antitrust file adds competition-law dimension.

Horizon · 2028-Q1 (± a year) PSD3/PSR national transposition for Spain_Adopted · Tier 3 source_

Standing sub-brief · as of 8 July 2026 117 words · last cycle 2026-09-21

#### Legal & Litigation

Supreme Court judgment 571/2025 requires banks to prove serious customer negligence or fraud before denying refunds for unauthorised transactions, reversing the prior practice of requiring customers to prove victimhood, in a SIM-swapping case against Ibercaja. The CNMV published a sanction against Banco de Sabadell, SA for a very serious infringement under Article 293.1.a) of Ley 6/2023 on Securities Markets and Investment Services, following a Council resolution dated 24 June 2025, finalised February 2026.

#### Outlook

The burden-of-proof reversal in judgment 571/2025 sits alongside the CNMV's Sabadell sanction and the CNMC's mortgage-pricing probe, together signalling a courts-and-regulators pincer on Spanish bank conduct that should push PSPs toward more conservative fraud-liability provisioning ahead of further case law.

Periodic update · new data 2026-09-28

#### Legal & Litigation

The EU Council's issuance of compromise texts for PSD3/PSR on 17 April 2026 is this cycle's defining structural development for Spain's payments legal landscape. Formal adoption is expected imminently, at which point a 21-month national transposition clock begins running toward an eventual in-force date projected around 2028. The reform's most consequential structural feature for Spain is the elimination of the standalone EMI regime: PSD3/PSR merges e-money institutions into a Payment Institution sub-category, requiring existing EMIs to undergo re-authorisation under the new framework rather than continuing indefinitely under legacy EMD licensing.

Alongside the licensing-structure merger, the reform introduces expanded APP-fraud reimbursement liability for payment service providers and mandatory IBAN/name-check obligations, under which a PSP must verify that the payee name matches the IBAN before completing a transfer. These consumer-facing fraud-prevention measures apply across the merged Payment Institution category and represent a materially higher compliance bar than the current regime, particularly for entities that have operated under the lighter-touch EMI framework.

This is currently probable-confidence, standing-brief material: the compromise texts have been issued but formal adoption, and the specific mechanics of Spain's national transposition, remain ahead. The 21-month clock is a maximum transposition window rather than a guarantee of early implementation, and Spain's specific transposition approach — including any grandfathering provisions for existing EMIs — has not yet been determined or evidenced this cycle.

#### Outlook

The key legal-development watch item for coming cycles is formal EU-level adoption of PSD3/PSR, which will fix the exact start date of Spain's 21-month transposition clock. Once transposition legislation is drafted domestically, the treatment of existing EMIs — whether through grandfathering or a hard re-authorisation deadline — will be the most consequential detail for incumbent payment institutions operating in Spain under the current EMD-derived framework.

**1 earlier distinct update(s)**

Periodic update · new data 2026-09-14

#### Legal & Litigation

Spain's Tribunal Supremo issued a confirmed, directly relevant APP-fraud liability ruling this cycle in the form of sentencia 571/2025, decided 9 April 2025, which ordered a bank to refund a customer more than €56,000 lost to a phishing and SIM-swap fraud scheme. The court's reasoning turned on the bank's failure to react to evident fraud signals, establishing a judicial standard for provider liability in authorised push payment fraud cases ahead of any formal statutory obligation to that effect.

This ruling is significant not only in isolation but because it anticipates the PSR's own explicit APP-fraud liability extension, which is expected to become statutory law once PSD3/PSR is transposed, likely in the mid-to-late 2027 window given the current transposition timeline. In the interim period between now and formal transposition, sentencia 571/2025 functions as the operative Spanish judicial standard on this question, meaning payment service providers face live litigation exposure on evident-fraud-signal failures even before the statutory obligation is codified.

The convergence of judicial precedent and incoming statutory obligation on the same substantive standard, failure to react to evident fraud signals versus PSR's codified liability extension, suggests a low-uncertainty trajectory: the statutory codification is likely to formalise rather than depart from the standard the courts are already applying.

#### Outlook

Further Tribunal Supremo or lower-court rulings applying a similar evident-fraud-signal liability standard would be a significant intermediate development to track ahead of PSD3/PSR's formal transposition. Legal and litigation risk for Spanish payment service providers on APP-fraud liability should be treated as already live under the current judicial standard, not merely a future statutory concern.

**Sources and findings (4)**

1. T3 [https://euroweeklynews.com/2026/03/08/bank-scam-in-spain-supreme-court-says-banks-may-have-to-give-your-money-back/](https://euroweeklynews.com/2026/03/08/bank-scam-in-spain-supreme-court-says-banks-may-have-to-give-your-money-back/) retrieved 2026-07-04
2. T1 [https://www.derecho.com/boe/resolucion-de-5-de-mayo-de-2026-del-banco-de-espana-por-la-que-se-publican-las-sanciones-impuestas-por-infracciones-graves-a-money-exchange-sa-y-a-los-miembros-de-su-consejo-de-administracion-890347](https://www.derecho.com/boe/resolucion-de-5-de-mayo-de-2026-del-banco-de-espana-por-la-que-se-publican-las-sanciones-impuestas-por-infracciones-graves-a-money-exchange-sa-y-a-los-miembros-de-su-consejo-de-administracion-890347) retrieved 2026-07-04
3. T1 [https://www.boe.es/diario_boe/txt.php?id=BOE-A-2026-4960](https://www.boe.es/diario_boe/txt.php?id=BOE-A-2026-4960) retrieved 2026-07-04
4. T3 [https://roams.es/actualidad/finanzas/guerra-hipotecas-fijas-cnmc-expediente-seis-grandes-bancos/](https://roams.es/actualidad/finanzas/guerra-hipotecas-fijas-cnmc-expediente-seis-grandes-bancos/) retrieved 2026-07-04
