--- title: "Article 70 — Obligations of the payment service provider in relation to payment instruments" type: regulation legal_status: in_force source: "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02015L2366-20250117" source_retrieved: 2026-10-08 shortTitle: "Article 70 — Obligations of the payment service provider in relation to payment instruments" instrument_type: level1_directive authority: Commission binding: true binding_character: binding mica_level2: false legal_basis: "Directive (EU) 2015/2366" instrument: psd2 celex: "32015L2366" regulation: PSD2 regulation-full: "Directive (EU) 2015/2366" article: 70 status: in_force object_id: eu.psd2.legal_text.article.70 text_version: "Consolidated version of 17 January 2025" source_url: "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02015L2366-20250117" check_status: matched verified: true last_checked: 2026-11-09 --- *In force · Consolidated version of 17 January 2025 · Verified 9 Nov 2026 · [Official source](https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02015L2366-20250117)* 1. The payment service provider issuing a payment instrument shall: **(a)** make sure that the personalised security credentials are not accessible to parties other than the payment service user that is entitled to use the payment instrument, without prejudice to the obligations on the payment service user set out in [Article 69](69.md); **(b)** refrain from sending an unsolicited payment instrument, except where a payment instrument already given to the payment service user is to be replaced; **(c)** ensure that appropriate means are available at all times to enable the payment service user to make a notification pursuant to point (b) of [Article 69(1)](69.md) or to request unblocking of the payment instrument pursuant to [Article 68(4)](68.md); on request, the payment service provider shall provide the payment service user with the means to prove, for 18 months after notification, that the payment service user made such a notification; **(d)** provide the payment service user with an option to make a notification pursuant to point (b) of [Article 69(1)](69.md) free of charge and to charge, if at all, only replacement costs directly attributed to the payment instrument; **(e)** prevent all use of the payment instrument once notification pursuant to point (b) of [Article 69(1)](69.md) has been made. 2. The payment service provider shall bear the risk of sending a payment instrument or any personalised security credentials relating to it to the payment service user. ## Related Level 2 and Level 3 ### Guidance and Q&A - [EBA Q&A 2020_5622 — Q&A — Application of SCA to issuing a payment instrument \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2020-5622-application-of-sca-to-issuing-a-payment-instrument-and.md) *** [Title IV — Rights and obligations in relation to the provision and use of payment services](../titles/iv.md) · [← Article 69](69.md) · [Article 71 →](71.md)