how do psd3 and psr affect the ATM businesses, from the business perspective?

What if the physical payment terminal is no longer a tool for accepting cards, but a battleground for data sovereignty? Under the proposed **Payment Services Directive 3 (PSD3)** and the **Payment Services Regulation (PSR)**, the merchant acquirer—the entity that enables merchants to accept payments—faces a structural shift from being a mere transaction processor to becoming a high-stakes gatekeeper of identity and liquidity. ## The Disintermediation of Card Schemes at the POS The most significant tension introduced by the [European Commission’s 2023 legislative proposal](https://finance.ec.europa.eu/publications/payment-services-package_en) is the leveling of the playing field between traditional card schemes and **Open Banking** providers. PSR mandates more robust access to payment account data for **Payment Initiation Service Providers (PISPs)**. For the merchant acquiring business, this signals a transition away from reliance on the Visa/Mastercard duopoly. Acquirers must now build "multi-rail" capabilities where a consumer can pay at a Point of Sale (POS) via a QR code triggering an instant credit transfer, bypassing interchange fees entirely. As noted in the [European Strategy on Retail Payments](https://finance.ec.europa.eu/publications/communication-retail-payments-strategy-eu_en): > "The EU needs a strategic approach to retail payments to ensure that the payments market remains competitive and that European consumers and businesses can benefit from innovation." ## The Liability Shift and the "Spoofing" Paradox While **Strong Customer Authentication (SCA)** was the hallmark of PSD2, the PSR extends these requirements to address modern fraud, such as "spoofing" (impersonating bank officials). For merchants, the impact is a double-edged sword: 1. **Delegated Authentication**: PSR clarifies that merchants can manage their own SCA (e.g., using biometric face-scans on a smartphone) if they meet specific security standards. This reduces friction at checkout, which is the primary "conversion killer" for merchants. 2. **Acquirer Liability**: If an acquirer fails to enforce the new "Confirmation of Payee" (matching IBANs to names), they may bear the financial brunt of fraudulent transfers. This forces acquirers to evolve from "risk-takers" to "identity-verifiers." ## Software POS (SoftPOS) and Terminal Neutrality PSD3 removes the technical barriers that previously favored hardware-bound legacy terminals. By emphasizing **technological neutrality**, the regulation accelerates the adoption of **SoftPOS**—technology that allows any NFC-enabled Android or iOS device to function as a payment terminal. This creates a productive tension: hardware manufacturers must now compete with pure software players. The "merchant acquirer" is no longer a company that ships plastic boxes; it is a software-as-a-service (SaaS) provider that integrates payment logic directly into a merchant's inventory management system. ## Data Portability and the End of Merchant Lock-in Finally, the PSR enhances the rights of merchants to port their data. Traditionally, switching acquirers was a technical nightmare involving the migration of recurring payment tokens. The new framework envisions a more liquid market where merchants can switch providers with minimal downtime, effectively turning merchant acquiring into a high-volume, low-margin commodity business unless the provider offers significant value-added services like real-time analytics or integrated lending.