SilentID Research · Technical Analysis · 2026

PIN Pickup vs Bank Transfer Why Marketplace Pickups Need Escrow

Faster Payments is irreversible. PayPal F&F has no buyer protection. This paper analyses why the structural design of UK payment rails makes escrow the only safe payment method for C2C local collection.

18%
of fraud victims recover their money
Cifas
£85k
max APP reimbursement since Oct 2024
PSR
0s
time for Faster Payments to clear — and become irrecoverable
Pay.UK
1,800+
Santander customers blocked from suspected FB Marketplace transfers
Santander, 2025

Faster Payments bank transfer is structurally unsafe for UK marketplace pickups: once sent, it cannot be recalled, only 18% of victims recover anything (Cifas), and the October 2024 PSR APP rules require banks to prove the consumer exercised reasonable caution before paying out. PIN Pickup escrow holds funds conditionally until physical handover is confirmed — eliminating non-delivery and non-payment risk entirely.

1 — Why is bank transfer dangerous for marketplace pickups?

Bank transfer via Faster Payments has two properties that make it uniquely dangerous for C2C local collection: it clears in near-real time and it cannot be recalled by the sender’s bank once the funds reach the beneficiary account.

When you pay a stranger on Facebook Marketplace via bank transfer to “reserve” a sofa, a car or a PlayStation, you hand over full, irrevocable control of that money before you have confirmed the item exists. The seller can take the money and disappear. Your bank cannot get it back — even if they can see exactly where it went — because the Faster Payments scheme has no inbuilt recall mechanism.

The October 2024 APP reimbursement rules from the Payment Systems Regulator (PSR) changed the liability picture — banks must now reimburse eligible victims up to £85,000. But the rules are not automatic refunds. They contain a “consumer standard of caution” exception that lets banks decline claims where the victim ignored a specific warning. Santander UK blocked over 1,800 suspected Facebook Marketplace transfers in 2025 specifically because the new liability rules make every such transfer a potential bank loss.

How Faster Payments is designed — and why it cannot recall

Faster Payments was designed for speed, not reversibility. The scheme (operated by Pay.UK) settles payments in under two seconds, 24 hours a day. Once a payment clears into a beneficiary account, the scheme rules do not permit the sending PSP to debit the beneficiary account unilaterally. The only recovery route is the beneficiary bank voluntarily freezing and returning funds — which requires their co-operation and a successful fraud investigation. Given that fraudsters typically empty target accounts within minutes of receipt, by the time a victim reports the fraud, the money is frequently gone.

Faster Payments has no inbuilt recall mechanism
The UK Faster Payments scheme settles in under two seconds. Once funds clear into a beneficiary account, the sending bank cannot unilaterally reverse the payment under the scheme rules. Source: Pay.UK
£459.7 million lost to APP fraud in 2023 — purchase scams the largest subcategory
Authorised push payment fraud — where the victim authorises a transfer to a fraudster — reached £459.7 million in 2023. Purchase scams are the largest subcategory by volume, most originating on marketplace platforms. Source: UK Finance Annual Fraud Report 2024(UK Finance, 2024)

2 — What do the PSR’s October 2024 APP rules actually require?

From 7 October 2024, all UK Faster Payments and CHAPS payment service providers must reimburse eligible APP fraud victims up to £85,000, with the cost split 50:50 between the sending PSP and the receiving PSP. Purchase fraud on marketplace platforms is explicitly in scope.

The rules apply to UK-authorised payment service providers who process Faster Payments. They do not apply to PayPal (regulated in Luxembourg), international wire transfers or cash. The £85,000 per-claim cap replaced an earlier industry voluntary code that covered losses only up to £350,000 for banks that chose to participate.

The consumer-standard-of-caution exception is the critical caveat. The PSR states that reimbursement may be reduced or denied where the consumer:

  • Ignored a specific warning from their bank about the payee being high-risk.
  • Failed to take steps that a reasonable person would have taken before paying.
  • Provided false information as part of the fraud.

In practice, this means marketplace buyers who transfer money to unverified sellers after dismissing an in-app bank warning may receive reduced or zero reimbursement. The burden of proof sits partly on the consumer to demonstrate reasonable caution — which is why documented, in-app safety prompts create an important contemporaneous record.

£85,000 mandatory APP reimbursement cap (October 2024)
Maximum per-claim reimbursement under the PSR’s mandatory APP fraud rules, split 50:50 between the sending and receiving payment service providers. Applies to Faster Payments and CHAPS transactions by UK-authorised PSPs. Source: Payment Systems Regulator(PSR, 7 October 2024)
Consumer standard-of-caution exception may reduce or eliminate reimbursement
The PSR’s rules allow banks to reduce or deny reimbursement where the consumer ignored a specific bank warning or failed to exercise reasonable caution before authorising the payment. Source: Payment Systems Regulator(PSR, 2024)

3 — How does FCA regulation and Stripe safeguarding apply to PIN Pickup?

Client funds held in escrow for marketplace payments fall under the Payment Services Regulations 2017, which require safeguarding — ring-fencing customer money from the payment service provider’s own assets. SilentID uses Stripe as its regulated payment infrastructure. Stripe is FCA-authorised (FCA Firm Reference 900461) and holds safeguarded funds under the PSR 2017 framework.

Safeguarding means that if the payment service provider becomes insolvent, customer funds held in escrow are protected — they do not form part of the general estate available to creditors. This is materially different from sending a bank transfer, where funds pass immediately into the seller’s unrestricted control with no protection mechanism.

The PIN Pickup flow works as follows: the buyer pays into a Stripe-held safeguarded escrow account before arriving to collect the item. The seller is shown a transaction record confirming the funds are held. At the point of physical handover, the buyer enters a unique PIN in the SilentID app, which triggers an instant release to the seller. Neither party is exposed to the three core risks of bank-transfer marketplace payment: non-delivery (buyer risk), non-payment (seller risk), and identity fraud (both parties).

Stripe’s FCA authorisation and e-money framework

Stripe Payments Europe Limited is authorised as an electronic money institution by the FCA (FRN 900461). Under the Electronic Money Regulations 2011 and the Payment Services Regulations 2017, Stripe is required to safeguard relevant funds — meaning customer money held in escrow is ring-fenced in a dedicated account with an approved credit institution, separate from Stripe’s own operating funds. This structure means PIN Pickup escrow funds are protected at the infrastructure level, not solely dependent on SilentID’s own financial health.

4 — Side-by-side: PIN Pickup vs bank transfer vs PayPal

The comparison below covers the five dimensions that matter most for UK marketplace local-collection payments: reversibility, buyer protection, seller protection, regulatory coverage, and fraud exposure.

CriterionFaster Payments (bank transfer)PayPal F&FPIN Pickup (SilentID escrow)
Reversible after payment?No — irrevocable at clearanceNoN/A — funds held in escrow until confirmed handover
Buyer protectionVia PSR APP rules (conditional)None (explicitly excluded)Full escrow — funds only release at confirmed collection
Seller protectionPayment received before item handed overChargeback risk via PayPalGuaranteed payment — funds confirmed in escrow before seller releases item
UK regulatory frameworkFaster Payments scheme / PSR APP rulesLuxembourg-regulated (FCA-passported)Payment Services Regulations 2017, FCA-authorised Stripe (FRN 900461)
Recovery if scammed18% of victims recover fully (Cifas)Near zero via F&FNot applicable — no fraud exposure in escrow model
Identity verificationNone inherentEmail-linked, no biometricBiometric-backed SilentID identity on both parties
Bank blocking riskHigh — Santander and TSB actively blockModerateNone — funds move within regulatory framework

5 — How bank-side blocking is reshaping marketplace payment behaviour

Santander UK’s decision to block over 1,800 suspected Facebook Marketplace transfers in 2025 represents a structural market intervention: UK banks are now actively making bank transfer harder to use for marketplace transactions, pushing buyers and sellers towards alternative payment methods.

This is not a temporary anomaly. The PSR’s new 50:50 liability split creates permanent financial incentives for UK sending banks to intervene before suspected fraud payments clear. TSB has been even more direct — publishing precise loss figures to pressure Meta into mandating seller identity verification. The direction of travel is clear: bank transfer for marketplace pickups will face increasing friction in 2026 and beyond.

For buyers and sellers, this means three scenarios: bank transfer goes through (for now); bank transfer gets blocked mid-transaction (creating a failed pickup); or they use an alternative method from the outset. Escrow removes the blocking risk entirely because the payment moves within a regulated framework that banks recognise as safe.

1,800+ Santander customers blocked from Facebook Marketplace transfers in 2025
Santander’s payment-screening system flagged and blocked Faster Payments to suspected Facebook Marketplace recipients, protecting over 1,800 customers from probable fraud in 2025. Source: Santander UK(Santander UK, 2025)
£160,000 stolen on Facebook Marketplace every day in the UK
TSB’s published loss figure — which drives its own blocking decisions and public pressure campaign against Meta — equivalent to approximately £58 million per year on a single consumer platform. Source: TSB(TSB, 2025)

6 — Why escrow is the structurally correct answer

The analysis above points to a single conclusion: bank transfer for C2C marketplace pickup is a design mismatch. The payment method was built for trusted counterparties — bill payments, salary transfers, peer-to-peer between known contacts — not for stranger-to-stranger transactions where delivery and payment cannot be simultaneous.

Escrow is the established commercial solution for this problem. In high-value C2C transactions (domain names, vehicles, business sales), escrow has been the default for decades. PIN Pickup applies the same logic to everyday marketplace transactions — a £50 games console collection, a £300 bicycle pickup, a £1,200 second-hand iPhone — making conditional-on-delivery payment accessible to any UK marketplace user via their smartphone.

Learn more at silentid.co.uk/safe-payment.

£0
lost to non-delivery fraud when PIN Pickup escrow is used
Source: SilentID
£85k
max PSR APP reimbursement — conditional on reasonable caution
Source: PSR, Oct 2024
18%
of bank-transfer victims recover their money
Source: Cifas
1,800+
Santander customers blocked from FB Marketplace transfers in 2025
Source: Santander UK

Research papers

Guides

Frequently asked questions

PIN Pickup is an escrow-based payment flow built into the SilentID app. The buyer pays into a held escrow account before the collection; the seller receives a unique PIN. When the buyer collects the item and enters the PIN in the app, the funds release to the seller instantly. Neither party is exposed to non-delivery or non-payment risk. A Faster Payments bank transfer, by contrast, releases funds instantly and irrevocably with no conditional-delivery mechanism.
Available now

Pay safely at every pickup — PIN Pickup is free

Escrow payment that releases on collection. No bank transfer risk. No non-delivery. Verified identity on both sides. iOS & Android.

100% passwordless. UK-based. GDPR-native.

·

Reviewed by the SilentID editorial team. We update each guide quarterly with new UK fraud data.