Europe made it mandatory. Australia chose voluntary.

Five days ago European payment providers started living under a new rule. Before a payment goes through, the name on the receiving account gets checked against the account details. They didn’t get there by mood or market preference. The EU made Verification of Payee mandatory.

Australia took the other path.

CommBank and Westpac switched on Confirmation of Payee in July. ANZ has been folding name-checking into its own customer-protection layer. Westpac has pushed the control into institutional and government payments. The direction’s clear, but the model’s still voluntary. Each institution moves at its own pace.

That gives us a useful comparison. Not a morality play. Not “Europe serious, Australia soft”. A real policy comparison between mandate and coordination.

The mandatory model has an obvious appeal. Scam losses aren’t polite enough to wait for every institution’s roadmap. If the risk is systemic, the answer can be systemic too. A hard date forces procurement, technology, testing and customer communications to happen. It makes the control part of the rail, rather than a bank-by-bank feature.

But mandates have their own theatre. Readiness surveys before the EU deadline weren’t exactly serene. A strict model can produce compliance activity that looks better on paper than it feels in production. It can also land unevenly on smaller providers, the ones with fewer people, older systems and less room to absorb change.

The voluntary model strikes a different bargain. It lets the largest institutions move first and prove the pattern, gives the industry room to learn, and dodges some of the brittle behaviour that comes from doing the whole market at once. The cost is coverage. A control that works at one bank but not another creates a strange middle period where the system is only partly safer.

Australia is in that middle period now.

That’s not unusual. It’s how most financial plumbing gets built here. Industry bodies coordinate. Major institutions lead. Regulators watch closely enough that “voluntary” still has pressure inside it. If the rollout works, it becomes the sensible default before anyone needs to write a harder rule. If it stalls, the case for a mandate gets easier.

The timing is telling too, because another trust mechanism is about to open. ACMA’s SMS Sender ID Register onboarding is due to begin tomorrow. Different channel, different problem, same national habit: start with coordinated participation and see whether the industry shows up.

Worth not mashing these together, though. Confirmation of Payee checks payment recipients. Verification of Payee does the same job in Europe. The Sender ID Register is about outbound SMS brand impersonation. Caller verification is another problem again. But they rhyme, because they all ask the same basic question: when a message, payment, call or request carries a trusted name, who’s checked that the name belongs there?

That question is becoming infrastructure.

The next year will tell us a lot. If Australia’s voluntary model reaches broad coverage quickly, it’ll be a strong argument for industry-led trust controls. If it leaves gaps, the EU’s stricter path will look less heavy-handed in hindsight. Either way, the data will be better than the slogans.

Voluntary or mandatory isn’t the whole question. The question is whether the check reaches the moment where the fraud turns expensive.

We should pay attention to our own results, because someone in Brussels already is.