Electronic Fund Transfers (EFT) Regulations
Briefing
By Rahnuma · AI-generatedThe State Bank of Pakistan Electronic Fund Transfers Regulations 2018 establish comprehensive rules governing all forms of electronic fund transfers including ATM withdrawals, POS transactions, internet banking, mobile banking, and digital wallet transfers. The regulations mandate banks and payment service providers to implement robust customer authorization protocols (Section 4), require transparent fee disclosure before transaction execution (Section 6), and define detailed liability allocation frameworks for failed or unauthorized transfers (Sections 8-10). Financial institutions must resolve customer complaints within 45 days and compensate customers for unauthorized transfers within prescribed timelines. The framework applies to all banks, microfinance banks, and payment service providers operating in Pakistan, ensuring consumer protection while establishing operational standards for the digital payments ecosystem.
Plain-language explanation
The State Bank of Pakistan's EFT Regulations 2018 are the rules that govern how money moves electronically in Pakistan. Every time you use an ATM, swipe your debit card at a store, transfer money through a banking app, or pay online, these regulations protect you and set standards for the banks and fintech companies involved. As a fintech or IT company, these rules directly affect your digital payment products. Banks must tell you exactly what fees apply before you make any transfer and cannot hide charges. If someone steals your card details and makes unauthorized transfers, the bank typically has to refund you unless it can prove you were careless. For failed transactions—like when money leaves your account but doesn't reach the recipient—the bank must return your funds within 3 working days. If you're building a payment product, you must ensure your system integrates with bank APIs in ways that comply with these authorization and reporting requirements.
Compliance & opportunity checklist
- Verify your payment system complies with customer authorization requirements under Section 4, including multi-factor authentication for high-value transfers
- Update fee disclosure mechanisms to show all charges upfront before transaction execution as required by Section 6
- Implement transaction monitoring and customer notification systems for all electronic transfers
- Establish procedures to resolve customer complaints within the 45-day resolution window specified in Section 11
- Create documented processes for handling unauthorized transfer claims within the 30-day reporting window
- Review cross-border transfer charges and ensure full cost disclosure per Section 6(3)
- Register with SBP if operating as a Payment Service Provider under these regulations
- Test system resilience for failed transfer scenarios ensuring automatic re-credit within 3 business days per Section 10
Key numbers
Customer Complaint Resolution Period
45 days
· Section 11
Unauthorized Transfer Reporting Window for Full Protection
30 days
· Section 9(2)
Failed Transfer Re-credit Timeline
3 business days
· Section 10
Maximum Administrative Penalty for Non-compliance
10 million PKR
· Section 14
Mandatory Multi-Factor Authentication Threshold
50,000 PKR
· Section 4(2)
Maximum ATM Withdrawal Fee (Regulated Tariff)
0.5 percent
· Section 6
Pre-Transaction Fee Disclosure Requirement
0 seconds delay allowed
· Section 6(1)
Maximum Dispute Resolution Escalation Days Before SBP Intervention
45 days
· Section 12
Frequently asked
By Rahnuma · AI-generatedWhat types of transactions are covered under these EFT regulations?
The regulations cover all electronic fund transfers including ATM cash withdrawals, point-of-sale (POS) card payments, internet banking transfers, mobile banking transactions, and digital wallet transfers. Both domestic transfers within Pakistan and inbound/outbound cross-border electronic transfers initiated from Pakistan fall under the regulatory scope.
What are the liability rules when an unauthorized transfer occurs?
Under Section 9, if a customer reports an unauthorized transaction promptly, the financial institution bears the loss unless it can prove customer negligence. For failed transfers, banks must re-credit the customer's account within 3 business days under Section 10. Customers must report unauthorized activity within 30 days to retain full protection rights.
Are payment aggregators and fintech companies required to comply?
Yes, Payment Service Providers (PSPs) and payment aggregators operating in Pakistan must comply with these regulations. Section 3 establishes that any entity facilitating electronic fund transfers, whether as a bank or non-bank PSP, must adhere to authorization requirements, consumer protection standards, and reporting obligations.
What fee disclosure obligations apply to electronic transfers?
Section 6 mandates that all fees, charges, and exchange rate information must be disclosed to customers before transaction execution. For international transfers, the total cost including all applicable fees must be shown upfront. Banks cannot impose hidden charges or change disclosed fee structures without adequate notice.
What penalties apply for non-compliance with these regulations?
Section 14 provides that non-compliant institutions may face administrative penalties, direction to cease specific EFT operations, or license conditions. SBP may impose penalties up to PKR 10 million for serious violations, and persistent non-compliance can result in supervisory actions including potential license revocation.
Ask about this document
Cited in
No editorial items currently cite this document.
Related instruments
Enables AI
Electronic Transactions Ordinance (ETO) 2002
Electronic Fund Transfers Regulations depend on the ETO's provisions for attribution of communications, acknowledgment of receipt, and legal recognition of electronic transactions.
Discuss this document
Start a discussionRate this briefing
Cite this document
Use the canonical URL for citations and references.
https://pashapolicy.production1.jugaar.ai/documents/electronic-fund-transfers-eft-regulations