Lord Vaux of Harrowden (CB)

My Lords, I have a number of amendments in this group on the subject of fraud and scams. I have also added my support to the lead amendment, which was tabled by the noble Baroness, Lady Kramer, and to which she has just spoken. Most of my amendments arise, at least in part, from the abolition of the PSR and the absorption of its activities into the FCA; I will quickly run through each of them. The noble Baroness, Lady Kramer, has already explained the need for her Amendment 46, which would require the FCA to make rules to ensure that the tech or communications company on whose platform or service the fraud arises is responsible for a proportion of the cost of reimbursing the victims. Whether or not the mechanism in her amendment is the right one, the principle here is obvious. At the moment, it is the banks that must compulsorily fully refund victims of fraud. There is some sense in the banks having to reimburse victims, because almost every fraud goes through some sort of bank account to allow the fraudsters to cash out. It is clear that the mandatory reimbursement requirement has incentivised banks to do more to protect customers. However, we also know that fraud does not originate from banks’ services. According to UK Finance’s latest report, some 66% of scams arise on online services and a further 17% originate via telecoms. Let us be clear: the highest proportion of that arises on Meta platforms. Despite voluntary charters, this is not improving at all. Your Lordships’ Fraud Act 2006 and Digital Fraud Committee, of which I was a member, recognised this in its report nearly four years ago; if the Minister has not read it, I recommend it as some bedtime reading. It said: “Until all fraud-enabling industries fear significant financial, legal and reputational risk for their failure to prevent fraud, they will not act”. We were right. Nothing has changed since then to change that conclusion. If anything, matters continue to worsen as technology such as AI starts being used by criminals. It is time that the platforms were at last forced to step up and take financial responsibility for the losses that arise from their platforms, not just leaving it to the banks to pick up the full liability. I say this to the Minister: in your answer, please do not tell us that the Online Safety Act will solve this. It is too limited; it covers only directly paid-for advertising and is unlikely to make much difference. The Government’s fraud strategy recognises all this. It says that, “if industry partnership and market incentives alone remain insufficient to drive improvements, the Government will take legislative action within this Parliament”. This has been going on for years. The voluntary online fraud charter was signed three years ago. Nothing material has improved. Fraud is still around 45% of all crime, and the percentage arising on tech platforms has not fallen; if anything, it has risen. The Bill is the perfect opportunity finally to take action on this and not leave it until thousands more people have fallen victim. We know that tech companies will not take action unless they have to—they continue to prove that—which is why the Government are at last taking action in respect of child protection. This is no different. It is now time to act without further delay. My Amendment 47 would introduce a requirement for the mandatory reimbursement rules for APP fraud, which came into force in October 2024, to be reviewed after three years of operation. It is unlikely that we got everything right at the first attempt, so a review of how effective they have been in meeting their objectives of protecting consumers and incentivising the banks to improve protections—as well as, importantly, whether there have been any unintended consequences—must make sense. I have tried to set out in the amendment—I will not go through all the detail—the key matters that were discussed when the requirement was introduced in 2022-23 as the matters that ought to be reviewed. I would have also included the tech platforms, but I did not want to duplicate the amendment that we have just discussed. I completely agree with the noble Lord, Lord Holmes, who sadly is not with us at the moment, on his Amendment 58, which would add specific fraud prevention duties on payment service providers. I also have a lot of sympathy with the principle behind his Amendment 125, which would introduce a financial fraud prevention secondary objective to the FCA, although I caveat that by saying that I am not sure that adding yet more objectives to the regulators is necessarily the right way to go. My Amendment 59 is designed to ensure that the FCA continues to collate and to publish the fraud data that the PSR has been collating and publishing for the past few years. This has been extremely valuable. It has identified several PSPs that were clearly not taking their fraud prevention duties seriously and led to action being taken against them. The pressure of shining a light on some of the bigger players has clearly incentivised them to step up and improve their systems. The information identifies very clearly which PSPs are protecting their customers best and which are doing it worst, which is important information for consumers when choosing a bank or payment provider. To give just one example to show the value of this reporting, the last report by the PSR identified that, for every 1 million transactions received by Guavapay, 109,744 were APP scam payments—that is more than 10%. As a result of that information, the company has been forced to close by the FCA. In the meantime, consumers would have been able to see that this was an unsafe operator if the report had been issued in a timely manner—an issue that I will come to in a second. This reporting was started as a result of efforts by Members of the House during the passage of FSMA 2023, and it followed undertakings by the then Minister. But there are already signs that, since moving the PSR’s activities into the FCA, this has started to slip. As I said, the last report of this nature was for the period up to 7 October 2024, when the mandatory reimbursement requirement was introduced. That was not published until February 2026, some 16 months later. My amendment would add a time limit of three months for the publication of these reports. No further report has been published since, so I hope that the Minister will recognise the value of this reporting, and that he will confirm that it should continue and that this amendment—which does not create any new burdens at all but just continues the status quo—should be accepted. Amendment 64 would reverse the deletion of Clause 72 from FSMA 2023—it was the clause that introduced the requirement to introduce a mandatory reimbursement requirement. In the Explanatory Memorandum, the Government explain that this is being removed because it has already happened. But Clause 72 does not only introduce the requirement; subsection (9) also includes the ability “to vary or revoke a relevant requirement” or “to impose further relevant requirements”. So I am not sure that deleting it in full works—that is something to look at. Most importantly, can the Minister confirm that the mandatory reimbursement requirement is intended to continue, even if reviewed and amended in the future—particularly in relation to tech companies, which we have talked about—and that this Bill is not intended to change anything in that respect?