UK Finance: Contactless Card Limit Flexibility — What the March 2026 FCA Rule Change Means for Banks and Consumers
Credit: The Guardian
From 19 March 2026, banks with strong fraud controls can set their own contactless limits, but terminals and scheme rules mean consumers won't see immediate changes. Here is what firms need to know.
Context:
On 19 March 2026, the FCA implemented its new flexible framework for contactless payment limits, allowing banks and payment providers with strong fraud controls to amend limits for contactless card payments. UK Finance published guidance for its members and consumers explaining the practical implications of the change.
The context is a payment landscape that has changed dramatically since the £100 limit was first set. Contactless is now the UK consumer's most popular way to pay: it accounts for 67% of all credit card and 76% of all debit card transactions. The average contactless payment is approximately £18. There are 98.7 million contactless debit cards and 58.8 million contactless credit cards currently in issue. Research from Barclays found that 95% of eligible in-store card transactions were contactless in 2024.
The FCA's move follows a December 2025 announcement and is part of the broader regulatory move toward proportionate, risk-based financial services regulation. The regulator confirmed that core consumer protections remain: firms remain liable to reimburse consumers for unauthorised fraud, and contactless fraud rates stand at just 1.3p per £100 spent, according to UK Finance's Annual Fraud Report, one of the lowest fraud rates in any payment category.
Rules and Guidelines:
Under the new framework, the existing £100 per-transaction limit and cumulative controls (no more than £300 or five consecutive taps before PIN entry is required) are no longer mandated by the FCA for firms with appropriate fraud control infrastructure. Banks and payment providers can now: (i) raise or remove the single-transaction limit; (ii) allow customers to set their own personal contactless limits; (iii) offer customers the option to turn contactless off entirely; and (iv) review cumulative limits that trigger PIN entry.
However, UK Finance's guidance notes that consumers are unlikely to see immediate changes for a specific technical reason: separate changes must be made to card acceptance terminals and the industry rules that govern them before those terminals can process contactless payments above £100. This is a card scheme and merchant infrastructure issue, not just a bank policy question. The industry is working through the necessary changes to payment scheme rules and terminal specifications.
Mobile payments (Apple Pay, Google Pay, and Samsung Pay) are unaffected by the £100 limit change; before this, they have never been subject to a fixed per-transaction limit because the phone verifies the user's identity via biometrics (Face ID, fingerprint) for every transaction, regardless of value, providing authentication equivalent to PIN entry.
Businesses Affected:
All banks and card issuers with contactless card programmes must assess whether their fraud control frameworks are sufficiently strong to take advantage of the new flexibility and document that assessment.
Payment scheme participants (Visa, Mastercard, and their members) must coordinate the terminal rule changes needed to enable above-£100 contactless transactions at the point of sale.
Acquirers and merchant payment service providers responsible for card acceptance terminal infrastructure, who need to plan terminal updates and scheme rule amendments.
Consumers who may be offered new flexibility by their banks, including personal limit-setting tools and the ability to disable contactless entirely, both of which require bank product and app development.
Next Steps:
Assess your firm's fraud control framework against the FCA's criteria for flexibility. Document the assessment. Firms that cannot demonstrate strong fraud controls should not extend limits until they can.
Engage with Visa and Mastercard on the timeline for terminal rule changes enabling above-£100 transactions. Understanding this timeline is essential for customer communications.
Design customer-facing limit management tools. The ability for consumers to set their own limits and to disable contactless represents both a compliance obligation and a product differentiator. Build these into mobile banking apps with clear consumer communications.
Review fraud monitoring systems. Higher limits may change fraud patterns, ensuring real-time detection, challenger system rules, and reimbursement claim handling are updated to reflect any limit changes you implement.
Communicate clearly to customers about what is changing and when. UK Finance's guidance emphasises that most consumers will not see immediate changes; proactive, accurate communication will prevent confusion and reduce customer service load.
Source | UK Finance | Contactless Card Information
