Europe made it mandatory. Australia chose voluntary.

Five days ago, European payment providers started living under a different rule. Before a payment goes through, the name on the receiving account has to be checked against the account details. They did not get there by mood or market preference. The EU made Verification of Payee mandatory.

Australia took the other path.

CommBank and Westpac switched on Confirmation of Payee in July. ANZ has been folding name-checking into its own customer-protection layer. Westpac has extended the control into institutional and government payments. The direction is clear, but the model is still voluntary. Each institution moves through its own cadence.

That gives us a useful comparison. Not a morality play. Not “Europe serious, Australia soft”. A real policy comparison between mandate and coordination.

The mandatory model has an obvious appeal. Scam losses are not polite enough to wait for every institution’s roadmap. If the risk is systemic, the answer can be systemic too. A hard date forces procurement, technology, testing and customer communications to happen. It makes the control part of the rail, rather than a bank-by-bank feature.

But mandates have their own theatre. Readiness surveys before the EU deadline were not exactly serene. A strict model can produce compliance activity that looks better on paper than it feels in production. It can also land unevenly across smaller providers that have fewer people, older systems and less room to absorb change.

The voluntary model has a different bargain. It lets the largest institutions move first and prove the pattern. It gives the industry room to learn. It can avoid some of the brittle behaviour that comes from doing the whole market at once. The cost is coverage. A control that works at one bank but not another creates a strange middle period where the system is only partly safer.

Australia is in that middle period now.

That is not unusual. It is how most financial plumbing gets built here. Industry bodies coordinate. Major institutions lead. Regulators watch closely enough that “voluntary” still has pressure inside it. If the rollout works, it becomes the sensible default before anyone needs to write a harder rule. If it stalls, the case for a mandate gets easier.

The timing is also telling because another trust mechanism is about to open. ACMA’s SMS Sender ID Register onboarding is due to begin tomorrow. Different channel, different problem, same national habit: start with coordinated participation and see whether the industry shows up.

It is important not to mash these things together. Confirmation of Payee checks payment recipients. Verification of Payee does the same job in Europe. The Sender ID Register is about outbound SMS brand impersonation. Caller verification is another problem again. But they rhyme because they all ask the same basic question: when a message, payment, call, or request carries a trusted name, who has checked that the name belongs there?

That question is becoming infrastructure.

The next year will tell us a lot. If Australia’s voluntary model reaches broad coverage quickly, it will be a strong argument for industry-led trust controls. If it leaves gaps, the EU’s stricter path will look less heavy-handed in hindsight. Either way, the data will be better than the slogans.

Voluntary or mandatory is not the whole question. The question is whether the check reaches the moment where the fraud turns expensive.

We should pay attention to our own results, because someone in Brussels already is.