Under PSD2, the relevant national authority is the domestic regulator or other competent body that oversees payment services in a country. In the fraud-suspicion exception, a payment service provider may delay immediate reimbursement for an unauthorized transaction only when it has reasonable grounds to suspect the customer committed fraud and communicates those grounds in writing to this authority.
This notification requirement matters because it makes the exception a formal, accountable process-not a general reason to postpone repayment while investigating a dispute. In practice, providers must document the grounds for suspicion and notify the appropriate national body, while handling reimbursement and any later recovery action as distinct steps. The authority’s exact identity depends on the country’s regulatory arrangements.