> For the complete documentation index, see [llms.txt](https://www.headlesslaw.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://www.headlesslaw.com/psd2/articles/69.md).

# Article 69 — Obligations of the payment service user in relation to payment instruments and personalised security credentials

*In force · Consolidated version of 17 January 2025 · Checked against EUR-Lex on 8 Oct 2026 ·* [*Official source*](https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02015L2366-20250117)

1. The payment service user entitled to use a payment instrument shall:

   **(a)** use the payment instrument in accordance with the terms governing the issue and use of the payment instrument, which must be objective, non-discriminatory and proportionate;

   **(b)** notify the payment service provider, or the entity specified by the latter, without undue delay on becoming aware of the loss, theft, misappropriation or unauthorised use of the payment instrument.
2. For the purposes of point (a) of paragraph 1, the payment service user shall, in particular, as soon as in receipt of a payment instrument, take all reasonable steps to keep its personalised security credentials safe.

***

[Title IV — Rights and obligations in relation to the provision and use of payment services](/psd2/titles/iv.md) · [← Article 68](/psd2/articles/68.md) · [Article 70 →](/psd2/articles/70.md)