Compliance & Security
PayPath is designed to provide a secure and transparent way for UK businesses to make card-to-bank payments while meeting UK regulatory standards.
Payments infrastructure
Payments made through PayPath are powered by FCA-authorised payment infrastructure.
All card processing, settlement, and safeguarding of client funds are carried out by a regulated UK Payment Institution in accordance with the Payment Services Regulations 2017.
PayPath does not itself process card payments or hold client funds.
FCA authorisation
PayPath is not an FCA-authorised payment institution.
Payments are processed by Ryft, an FCA-authorised Payment Institution, which is responsible for:
• card processing
• settlement and payouts
• safeguarding of client funds
• regulatory compliance
This structure allows PayPath to offer secure payments while relying on regulated payments infrastructure.
Safeguarding of client funds
All client funds are safeguarded in line with UK safeguarding requirements.
Funds are held in segregated safeguarding accounts with regulated banking partners, including tier-one institutions such as HSBC and LHV Bank.
Safeguarded funds are:
• kept separate from operational funds
• not used for lending or investment
• protected in accordance with FCA safeguarding rules
Settlement & payout timing
Card payments are subject to a T+2 business-day settlement cycle, which is standard across the UK card payments industry.
Once settlement has completed, funds are released to the recipient via UK bank transfer (Faster Payments or BACS, depending on timing and amount).
Settlement status and payout confirmation are shown in your account and confirmed by email.
Verification (KYC / KYB)
To comply with UK financial regulations and reduce fraud risk, all users must complete business verification before making payments.
This includes:
• business and director verification
• document checks (such as tenancy agreements or invoices)
• transaction monitoring
Verification is usually completed within minutes.
Fraud prevention & chargebacks
PayPath applies multiple layers of protection, including:
• identity and business verification
• document validation
• transaction monitoring
• UK-only cards and bank accounts
Chargeback liability remains with the paying business, but appropriate documentation significantly reduces risk.
Data protection & security
PayPath does not store card details.
All sensitive payment data is:
• encrypted
• processed by regulated partners
• handled in accordance with PCI-DSS and UK GDPR requirements
Eligibility & limitations
To maintain predictable pricing, reliable processing, and strong compliance standards, PayPath currently supports:
• UK-registered businesses only
• UK-issued credit cards only
• UK bank accounts only
International cards, personal payments, and overseas bank accounts are not currently supported.
Client notice – protection of funds
Further information on how client funds are protected is available in our Client Notice – Protection of Funds, which explains safeguarding arrangements in detail.
[ View Client Notice – Protection of Funds ]
Questions about compliance?
If you have questions about regulation, safeguarding, or security, please contact us.