The European Payments Council (EPC) has published the 2025 update of its Payment Threats and Fraud Trends Report, outlining the most significant payment threats and “fraud enablers” and mapping recent attacks to the broader attack-vector landscape. The update highlights significant attacks and fraud modus operandi observed by the EPC community last year, including the impact of artificial intelligence on both attackers and defenders. It also breaks down how threats affect key stages of the payment process such as onboarding, payment request, initiation, authentication, and execution, and assesses risks across payment instruments including cards, SEPA Credit Transfer (SCT), SEPA Direct Debit (SDD), SEPA Instant Credit Transfer (SCT Inst), and mobile wallets, as well as supporting schemes such as SEPA Request-to-Pay (SRTP) and Verification of Payee (VOP).