--- title: "Article 69 — Obligations of the payment service user in relation to payment instruments and personalised security credentials" type: regulation legal_status: in_force source: "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02015L2366-20250117" source_retrieved: 2026-10-08 shortTitle: "Article 69 — Obligations of the payment service user in relation to payment instruments and personalised security credentials" instrument_type: level1_directive authority: Commission binding: true binding_character: binding mica_level2: false legal_basis: "Directive (EU) 2015/2366" instrument: psd2 celex: "32015L2366" regulation: PSD2 regulation-full: "Directive (EU) 2015/2366" article: 69 status: in_force object_id: eu.psd2.legal_text.article.69 text_version: "Consolidated version of 17 January 2025" source_url: "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02015L2366-20250117" check_status: matched verified: true last_checked: 2026-11-09 --- *In force · Consolidated version of 17 January 2025 · Verified 9 Nov 2026 · [Official source](https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02015L2366-20250117)* 1. The payment service user entitled to use a payment instrument shall: **(a)** use the payment instrument in accordance with the terms governing the issue and use of the payment instrument, which must be objective, non-discriminatory and proportionate; **(b)** notify the payment service provider, or the entity specified by the latter, without undue delay on becoming aware of the loss, theft, misappropriation or unauthorised use of the payment instrument. 2. For the purposes of point (a) of paragraph 1, the payment service user shall, in particular, as soon as in receipt of a payment instrument, take all reasonable steps to keep its personalised security credentials safe. *** [Title IV — Rights and obligations in relation to the provision and use of payment services](../titles/iv.md) · [← Article 68](68.md) · [Article 70 →](70.md)