The Payments Trap

Currency sovereignty without rail sovereignty is rhetoric.

The Sovereignty in Two Dates

The euro succeeded at one thing and not the other. It succeeded as a currency: twenty-three years on, three hundred and fifty million people use it daily, the European Central Bank sets continental monetary policy without consulting Washington, and the eurozone runs a trade surplus larger than that of Japan and the United Kingdom combined. The currency works.

What the currency does not have is rails that match it. The euro travels, almost everywhere it travels, on infrastructure built in California, Delaware, and Cupertino. The architectural symmetry that was meant to follow monetary union, a payments layer governed under European law, never arrived.[1]

The Russian shutdown of March 2022 made this visible. Within ten days of Visa and Mastercard’s withdrawal, 145 million Russians could not use their cards. The two companies process roughly 61 per cent of European card transactions; nothing in their corporate architecture distinguishes Russian terminals from Spanish, Italian, or German ones except a routing decision made in California.

A boycott of one country was a routing change. A sanction on Europe would be a routing change. The currency Russians held was theirs. The rails were not.[2]

The euro’s introduction in 2002 declared monetary sovereignty. The Russia shutdown in 2022 demonstrated that monetary sovereignty over a currency is not the same as sovereignty over the rails the currency moves on. Visa, Mastercard, Apple Pay, Google Pay: all American, all operating under American jurisdiction, all able to switch off a country’s card economy in days.

Wero, EPI, SEPA Instant, and the digital euro are what Europe has begun building to close the gap. The question is whether the building reaches scale before the dependency hardens further.

The Tap

Every weekday morning, hundreds of millions of Europeans leave their homes and pay for something before they reach their desks. A coffee in Copenhagen. A metro ticket in Munich. A baguette in Lyon. The tap is unremarkable. The phone or card touches the terminal, the screen shows a green tick, and the transaction is done. Nobody thinks about it.

The infrastructure behind that green tick operates under American jurisdiction, regardless of where the bits travel.[3]

When a European cardholder taps a Visa or Mastercard at a European terminal, the authorisation request travels from the merchant’s payment terminal to their acquiring bank, then to the card network’s processing centre for routing and authorisation, then to the cardholder’s issuing bank for approval, and back through the same chain.

The card network sits in the middle of every transaction. Both networks operate European processing centres. The data may never leave the continent. The jurisdiction never left America.

This is the dependency. Europe built the world’s best regulations on someone else’s infrastructure (Paper 6). Money is the foundation-layer template every later European digital dependency applies (Paper 10).

What that template looks like at the consumer layer is straightforward: every European card tap is an instance of it. The dependency is the reason your salary arrived this morning, and the mechanism by which it could stop arriving tomorrow.

Europe achieved monetary policy sovereignty with the euro. The ECB sets interest rates without asking the Federal Reserve. It did not achieve monetary infrastructure sovereignty. The moment a euro transaction touches the card network, it transits American-controlled rails. Between policy sovereignty and infrastructure sovereignty sits a gap.

Position 4 on the sovereignty spectrum, as defined earlier in this series at the framework layer: shared sovereignty with a foreign state. In payments, Position 4 is where Europe lives. Europe has its own currency. It does not control the infrastructure that currency moves through.

The Duopoly

Visa and Mastercard are network operators rather than payment companies in the conventional sense; they neither hold deposits nor lend money. They own the rails: the protocols, the routing infrastructure, the authorisation systems, the settlement frameworks. Card transactions flow through them. European banks issue cards carrying the Visa or Mastercard brand.

European merchants install terminals that accept those brands. The network between them is American.

Together they process approximately 61 per cent of European card transactions by volume. Visa alone claims approximately 51 per cent of European purchase volume.[4] Both are growing at double-digit rates: Visa’s European payment volume increased 11.9 per cent year-on-year in 2024; Mastercard’s grew 16.2 per cent.[5]

The trend line runs in one direction. Every year, the European payment system becomes more dependent on two American companies.

This is a market that was structured by network effects and then consolidated through acquisition, rather than one Europeans failed to compete in. Both networks expanded globally during the decades when American financial infrastructure was being exported alongside American military and diplomatic influence. The same period this series documents for technology and for the dollar system.

The card networks are part of the same architecture.

Every European bank that issues a Visa or Mastercard pays network fees to an American corporation. Every European merchant that accepts a card payment pays interchange and scheme fees that flow, in part, to American shareholders. The European Central Bank sets the interest rate. Visa and Mastercard set the interchange rate. Both rates shape the cost of commerce.

Only one is set by a European institution.

The interchange fee regulation that Europe introduced in 2015 capped the fees European banks could charge merchants for card transactions.[6] It was a regulatory achievement. It reduced the per-transaction cost. It did not change who owns the network. The regulation addressed the price. It left the jurisdiction untouched.

And on top of the card network sits another American layer. Apple controls the NFC chip on every iPhone. Until the European Commission forced binding commitments in July 2024, Apple Pay was the only application that could access the iPhone’s contactless payment capability.[7]

For the majority of European smartphone users carrying iPhones, every contactless tap passed through an American payment network and an American phone operating system. Two layers of American dependency in a single gesture. The Commission’s intervention opened the NFC chip to competitors.

It did not change the fact that the chip itself, the operating system, and the device are controlled by a Cupertino company subject to US jurisdiction.

The Salary You Cannot Reroute

In the United Kingdom, over 90 per cent of salaries are paid through the Bacs Direct Credit system. Bacs also processes more than 70 per cent of household bills and 98 per cent of state benefits.[8] Pensions, Universal Credit, tax credits, child benefit: almost every payment the British state makes to its citizens flows through Bacs.

The Faster Payments system handles real-time transfers between UK bank accounts. The LINK network connects 65,000 ATMs. In 2024, these systems collectively processed nearly 12 billion transactions worth over £10 trillion.[9]

The infrastructure that operates all three (Bacs, Faster Payments, and LINK) is Vocalink.

In July 2016, Mastercard announced the acquisition of 92.4 per cent of Vocalink for approximately £700 million.[10] The UK’s Competition and Markets Authority reviewed the deal on competition grounds and approved it with remedies. The acquisition completed in May 2017.

What was not conducted, and what the public record does not show, was a national security review of selling the infrastructure that pays 90 per cent of British salaries to an American card company.[11]

Your salary arrives because an American company permits it. Your benefits are paid because an American company permits it. The infrastructure was sold. Nobody asked.

Consider what Mastercard acquired. The ability to process, observe, and potentially disrupt the mechanism by which the British state pays its citizens. The infrastructure through which the British economy settles its daily obligations. The system that, if it stopped operating for forty-eight hours, would mean that salaries, benefits, and bill payments across the United Kingdom would cease.

Vocalink is an extreme case because it is a single acquisition of an entire national payment backbone. But the structural pattern is European. European payment processing across the continent depends on American-controlled networks at the card transaction layer. The Vocalink acquisition made explicit what was already true at a different level: the infrastructure is not yours.

The decision about whether it continues operating is not yours either.

Pay.UK, the body that oversees UK retail payment systems, extended Vocalink’s contracts in 2024, securing continuity into the early 2030s.[12] The UK’s salary infrastructure will be operated by an American company for at least another decade. The decision was presented as operational continuity. It was also a decision to extend the dependency.

The Switch

On 24 February 2022, Russia invaded Ukraine. Within five days, Visa and Mastercard blocked sanctioned Russian financial institutions from their networks. By 5 and 6 March, both companies announced the full suspension of all Russian operations. Within ten days, 145 million Russians lost access to international card-based commerce.

The speed matters. The mechanism matters more.

Visa and Mastercard are private American corporations. They made corporate decisions to comply with US sanctions and, in the case of the full suspension, went beyond what the initial sanctions legally required. No European government was consulted about whether European-issued cards would continue to work for European citizens travelling in Russia.

No European regulator approved the scope of the suspension. Two American companies decided, and the infrastructure responded.

The sanctions were broadly supported. The argument here is not about their merit. The argument is about who holds the switch.

Russia had spent years building an alternative domestic payment system (Mir) precisely because it understood the vulnerability.[13] Mir processed domestic transactions while Visa and Mastercard handled international ones. When the international networks withdrew, domestic commerce continued through Mir.

The disruption was severe for international transactions but survivable domestically because Russia had built a fallback.

Europe has no Mir. Europe has no domestic card network that operates at continental scale independently of Visa and Mastercard. If the same decision were applied to a European country (for whatever reason, under whatever future administration, in whatever geopolitical configuration) the disruption would be total for card-based commerce. There would be no fallback network.

Europe has no Mir. Europe has no fallback. Europe has a currency. At the point of sale, it cannot spend it without American permission.

The Leverage

The argument is that the switch exists, and that the geopolitical alignment Europe depends on is no longer guaranteed.

In February 2026, a State Department cable signed by Secretary of State Marco Rubio instructed American diplomats to counter European digital sovereignty initiatives.[14] A government that actively opposes European sovereignty controls the infrastructure that processes European payments.

France, Germany, the United Kingdom, Norway, Sweden, Denmark, and Finland declined participation in the US-proposed Board of Peace initiative.[15] These are countries whose citizens pay for things every day through American-controlled payment infrastructure. The leverage does not need to be exercised or articulated.

It exists in the knowledge that a country which declines American-led initiatives also depends on American-controlled infrastructure for its daily economic functioning.

The leverage is not hypothetical. In 2025, an Italian citizen working for an international institution was sanctioned by the United States. She could not open a bank account in Italy (her own country) because Italian banks feared that serving her would trigger American secondary sanctions and cut them off from dollar clearing.

European banking infrastructure, nominally European, obeyed American jurisdiction rather than protect a European citizen. The payment dependency is the mechanism by which that obedience is enforced.

Consider the speed asymmetry. The F-35 dependency (Paper 18) would take approximately thirty years to unwind. Payment infrastructure dependency can be weaponised in forty-eight hours. Russia proved this. Military dependencies create leverage over decades. Payment dependencies create leverage overnight.

Europe is accumulating both simultaneously, but the payment dependency is the one that reaches every citizen, every day, with no buffer between the decision and the impact.

The physical infrastructure underneath those transactions compounds the vulnerability. European payment data, every card tap, every SWIFT message, every Euroclear settlement, transits submarine cables that are increasingly owned by the same American technology companies that dominate the cloud and payment processing layers above them.

On the transatlantic route, US hyperscalers now control approximately 90 per cent of cable capacity. In January 2023, a 2.7-millisecond disruption at a Nordic exchange triggered the suspension of 89 per cent of trading algorithms and a EUR 2.8 billion loss in market value, with recovery taking 47 minutes. That was a software glitch measured in milliseconds.

A multi-cable outage lasting days, the kind the Baltic Sea cuts of 2023 demonstrated is not hypothetical, represents a different order of magnitude. The cable dependency is examined in Paper 16. The sovereignty gap extends below the institutional layer into the physical cables carrying the transactions.

Financial sovereignty that transits infrastructure converging toward non-sovereign ownership is financial sovereignty whose physical foundations are not assured.

Every country that has challenged American financial infrastructure has faced consequences through that infrastructure (Paper 10). The capacity exists. The willingness has been demonstrated. The only variable is whether Europe believes its current alignment is permanent. The infrastructure does not care about the answer.

It will process the transaction, or it will not, depending on a decision made in a jurisdiction that European citizens did not elect and European regulators do not control.

The Cashless Escalation

The dependency described above assumes Europeans can opt out. Pay cash. Withdraw from the card system. Maintain a fallback.

In much of Northern Europe, that assumption is already false.

In Sweden, fewer than 5 per cent of transactions involve physical cash.[16] Over 98 per cent of the population owns a debit card. Many Swedish shops, restaurants, and public transport systems no longer accept cash at all. The Riksbank has repeatedly flagged the trend as a vulnerability.

A Swedish citizen who attempted to conduct their entire economic life without touching American payment infrastructure would find it functionally impossible. The card network is the economy.

Denmark reports that cash is used in only 11 per cent of transactions. Eighty-six per cent of in-store payments are contactless. Norway’s contactless share exceeds 87 per cent.[17] Belgium and the Netherlands report similar trajectories. The Nordics are the leading edge, but the trend is continental.

Cash usage is declining everywhere in Europe, and every percentage point of decline transfers another fraction of European commerce onto American rails.

The cashless transition is presented as progress: faster transactions, lower handling costs, better records, less crime. The benefits are real. The transition has a sovereignty cost that nobody is accounting for. Every transaction that moves from cash to card moves from infrastructure that no foreign jurisdiction controls to infrastructure that an American jurisdiction does control.

The efficiency gain is real. The sovereignty loss is unpriced.

A Swedish citizen tapping their phone at a Stockholm coffee shop is conducting a transaction that travels through Apple or Google’s NFC gateway, through Visa or Mastercard’s authorisation network, through a processing chain that terminates in American corporate infrastructure. The Riksbank sets monetary policy.

Two American companies determine whether that monetary policy reaches the point of sale. If those companies withdrew from Sweden tomorrow, the Swedish economy would experience a payment system crisis within hours. Because there is no cash fallback sufficient to sustain a modern economy that has systematically eliminated cash.

The more cashless a society becomes, the more total the dependency. The Nordics have built the most efficient payment systems in Europe. They have also built the most dependent ones.

What Europe Built

Honesty requires acknowledging what Europe controls.

SEPA (the Single Euro Payments Area) is genuine European infrastructure.[18] Direct debits, credit transfers, and instant payments between 36 European countries flow through a system designed, governed, and operated under European authority.

When your employer pays your salary by bank transfer, when your rent is collected by direct debit, when you send money to a friend through an instant payment, that transaction travels on European rails. SEPA processes billions of transactions annually without American intermediation. It works. It is a European success story that receives insufficient credit.

Domestic card networks also exist. Germany has Girocard (the most widely used card for in-store payments, with lower merchant fees than international networks), Italy has Bancomat, France has Cartes Bancaires. These are domestically controlled systems that process substantial transaction volumes.

At the acquiring and processing layer, European companies retain significant presence: Adyen in the Netherlands and Worldline in France are major payment processors operating from European headquarters on European infrastructure.[19]

SEPA is the floor Europe stands on. The domestic card networks and European acquirers are load-bearing walls. They are real.

What sits above them is the problem.

Girocard is losing ground.[20] German banks increasingly issue Visa or Mastercard debit cards alongside or instead of Girocard. Neobanks (N26, Revolut) do not offer Girocard at all. The domestic network that processes the most affordable in-store payments in Germany is being displaced by the international networks that charge higher fees and operate under American jurisdiction.

The trajectory is clear: European domestic networks are shrinking while American networks grow.

The regulatory architecture compounds the problem. PSD2 opened European bank accounts to third-party providers via APIs. This was an innovation in consumer access.[21] The open banking ecosystem it created was exploited faster by American fintechs than by European alternatives. Stripe, Plaid, and Square built on European regulatory infrastructure to capture European market share.

Europe designed the open banking framework. American fintechs built on it faster. The regulatory innovation was European. The commercial capture was American. The pattern is identical to every domain this series has documented.

Online commerce has no domestic card network layer. E-commerce transactions in Europe overwhelmingly flow through Visa, Mastercard, or American payment processors. The physical point-of-sale infrastructure retains some European presence. The digital point of sale is almost entirely American.

And SWIFT, the interbank messaging system that underpins European wholesale payments, operates from Belgian headquarters under a jurisdiction that has proven susceptible to American pressure (Paper 10). The infrastructure Europe built sits in the basement. The infrastructure America controls occupies every other floor.

DORA requires European financial institutions to assess concentration risk in their critical ICT third-party dependencies and to demonstrate exit capability from critical providers. Visa and Mastercard are critical third-party providers for the European payments system. There is no European-scale alternative to exit to. DORA created the obligation. The architecture makes it impossible to meet.

This is the structural non-compliance the series has been documenting from its opening, applied to the infrastructure 450 million Europeans use every day. The regulation acknowledges the dependency. It does not resolve it. Compliant on paper is not compliant in practice.

The most serious current attempt to break the duopoly at the consumer layer is Wero, the European Payments Initiative, which has reached 50 million registered users with e-commerce payments operational and point-of-sale NFC payments planned for 2026.[22] The next section examines Wero, SEPA Instant, the digital euro, and the mandate mechanism that would drive adoption.

The European Response

Europe has built genuine payment infrastructure. SEPA remains the operational floor: direct debits, credit transfers, and instant payments across 36 countries flow through European rails. Wero, the European Payments Initiative, reached 50 million registered users in Germany, France, Belgium, and the Netherlands by February 2026.

In February 2026, EPI announced a memorandum of understanding with the EuroPA Alliance (Bancomat, Bizum, MB WAY, and Vipps MobilePay) to create interoperable European payment infrastructure linking thirteen countries across 130 million users, approximately 72 per cent of the EU and Norway population.

The 130 million users exist across distinct national systems and the interoperability to connect them remains under development. Wero has live e-commerce payments in Germany as of November 2025, with France and Belgium following in 2026, and point-of-sale NFC payments scheduled for 2026 in Germany and Belgium and Netherlands migration from iDEAL planned for 2027.

This is the architecture becoming a unified European payment rail.

The sovereign payment solutions currently operating demonstrate what works. iDEAL in the Netherlands captures 70 per cent of Dutch e-commerce with 1.3 billion annual transactions. Swish in Sweden has achieved 85 per cent market penetration with 8 million users. Vipps MobilePay across the Nordic region processes 1.3 billion transactions annually.

These systems work because they operate under European control, respond to European regulation, and cannot be weaponised by decisions made in Washington. They are imperfect. Network effects favour incumbents. Merchant adoption for cross-border commerce remains fragmented. But they exist, they scale, and they function without asking an American jurisdiction for permission.

The gaps are structural. Wero achieves user scale but lacks universal merchant acceptance. A transaction initiated through Wero still depends on SEPA settlement, and SEPA Instant, despite existing on paper, remains unevenly deployed across European banking infrastructure.

Merchant acceptance parity with Visa and Mastercard (the ability to process payment seamlessly across European borders at physical and digital points of sale) does not yet exist. The fragmentation is by design and by history. Each country built payment systems for its own citizens, not for continental integration. What matters is not the signature on a memorandum.

It is whether a merchant in Copenhagen can process a payment from a consumer in Rome, on European rails, in real time, without exposure to American sanctions or American corporate decisions.

The digital euro is the architectural keystone. The ECB’s central bank digital currency, scheduled for 2028 to 2029, is the most ambitious sovereign payment initiative Europe has attempted since the currency itself. The constraint is simple: a digital euro built on American cloud is a policy failure disguised as a technical achievement.

It must be built on Position 1 or Position 2 infrastructure: European-controlled cloud, European-controlled settlement systems, European-controlled cryptography. The digital euro is examined in Paper 14. The euro gave Europe control over monetary policy without control over the pipes. The digital euro must not repeat that pattern.

Wero plus SEPA Instant plus digital euro is infrastructure. Infrastructure without adoption is academic. The transition happens at one point: when government places the order.

If European governments mandated that salaries, benefits, and procurement payments transit SEPA Instant and Wero by a specified date (government endorsement of European infrastructure) the transition becomes possible. The United States used this mechanism with Palantir, with the cloud, with every critical infrastructure layer.

The Federal Reserve did not build the dollar payment system for market reasons. It built it because the American government needed it to function. Europe has the same tool. It has not deployed it in payments.

The frame is the choice between the infrastructure that holds the tap and the infrastructure held by someone else.

A2A account-to-account payments are growing at 30 per cent annually in Europe and are forecast to exceed 850 billion euros in transaction value by 2026. The growth is real. The infrastructure behind it is European. Consumer behaviour has not shifted yet. Card payments remain the default. Visa and Mastercard have brand recognition that fifty-year-old bank infrastructure does not.

The transition from cards to A2A rails requires behaviour change at scale, and Europe has not yet deployed the mechanism to force that change.

There will be active opposition. The Rubio cable shows that American diplomatic pressure against European digital sovereignty is active and accelerating. American fintech companies built on European regulatory frameworks will not voluntarily migrate to Wero. European payment processors have no incentive to abandon the profitable acquiring business built on Visa and Mastercard volume.

The American companies embedded in European banking infrastructure have every incentive to maintain the status quo. Resistance is not inevitability. It is cost. The question is whether Europe believes the cost of dependence exceeds the cost of transition.

Three immediate steps follow. First, completion of the EuroPA interoperability integration on the timeline stated: 2026 for peer-to-peer cross-border payments, 2027 for e-commerce and point-of-sale. The MOU is signed. The infrastructure is real. Execution is the variable.

Second, European governments must establish SEPA Instant and Wero as the settlement infrastructure for all public sector payments. This is creation of demand. Third, removal of technical and regulatory barriers to rapid expansion, with the digital euro built on Position 1 or Position 2 infrastructure only.

The honest assessment is that Europe has built the solutions. What Europe has not built is the will to deploy them. Wero exists. It works. It scales. Fifty million people use it. The question is whether European governments will create demand for it before another decade passes and cashlessness deepens further. The Nordics have already eliminated the cash fallback.

Every percentage point of commerce that moves from cash to card, without a corresponding European alternative, makes the Position 4 dependency harder to reverse. The infrastructure exists. The clock exists. The only missing variable is European choice.

What Follows

The continuum from gold to cloud is documented in Paper 10. What follows is what that continuum means when it reaches your pocket. The dependency is not a policy abstraction. It is the infrastructure that pays your salary, processes your grocery purchase, settles your electricity bill, and enables your economy to function.

Europe achieved monetary policy sovereignty. It did not achieve monetary infrastructure sovereignty. It has built infrastructure (SEPA, domestic card networks, European acquirers) but the layer that faces the consumer, the layer where the tap happens, is American. The direction of travel is toward more dependency. Cash is disappearing. Domestic networks are shrinking.

American networks are growing. Every year the Position 4 condition deepens.

The vulnerability is demonstrated. Russia proved that the switch exists and that it can be thrown in days. The United Kingdom proved that national payment infrastructure can be sold to an American company without triggering a national security review. The Nordics are proving that a cashless society is a society with no fallback when the American infrastructure is withdrawn.

And the digital euro, the stablecoin ecosystem, and the newest settlement infrastructure are all reproducing the same jurisdictional dependency in new technical forms.

The urgency is established. Every day that European payments run on American rails is a day of continued dependency. Every cashless transaction that replaces a cash transaction extends the dependency further. Every domestic network that loses ground to Visa or Mastercard makes the dependency harder to reverse. The trap does not require conspiracy.

It requires only that Europeans keep doing what they have always done: tapping their cards, collecting their salaries, paying their bills, on infrastructure they do not own and cannot control.

The trap does not feel like a trap. It feels like tapping your card.

[1] On 1 January 2002, euro banknotes and coins entered circulation in twelve eurozone member states. The changeover was the largest monetary transition in history, with over 7.8 billion banknotes printed and distributed. Source: ECB, The Euro: Our Money (historical series).

[2] CNBC, ‘Visa and Mastercard block Russian financial institutions from their networks after sanctions,’ 1 March 2022. Visa Inc., ‘Visa Suspends All Russia Operations,’ 5 March 2022. Mastercard Inc., ‘Mastercard Statement on Suspension of Russian Operations,’ 5 March 2022. Within ten days of the first US sanctions, 145 million Russians lost access to international card-based commerce.

[3] Visa and Mastercard operate European processing centres (VisaNet Europe, Mastercard European hubs) that handle authorisation routing within Europe. The physical data path may not cross the Atlantic for every transaction. The jurisdictional point is independent of processing location: both companies are US-incorporated, subject to US law, and their European operations exist at the discretion of American parent entities that can be compelled by US courts under the CLOUD Act (18 U.S.C. §2713).

[4] ECB, Eurosystem oversight report on the payment card market, various years. Visa and Mastercard combined share of European card transactions consistently exceeds 80 per cent across the eurozone, with Visa alone claiming approximately 51 per cent of European purchase volume as of 2025.

[5] Visa Inc., Q3 2024 Earnings Report: European payment volume increased 11.9 per cent year-on-year. Mastercard Inc., Q3 2024 Earnings Report: European payment volume increased 16.2 per cent year-on-year.

[6] Regulation (EU) 2015/751 of the European Parliament and of the Council of 29 April 2015 on interchange fees for card-based payment transactions. The regulation capped interchange fees at 0.2 per cent for debit cards and 0.3 per cent for credit cards.

[7] European Commission, Antitrust: Commission accepts commitments by Apple opening access to ‘tap and go’ technology on iPhones, 11 July 2024 (IP/24/3706). Apple committed to allowing third-party wallet and payment providers access to iOS NFC functionality via APIs, free of charge, for ten years.

[8] VocaLink processes over 90 per cent of UK salaries via Bacs Direct Credit, more than 70 per cent of household bills, and 98 per cent of state benefits including Universal Credit, pensions, and child benefit. Source: VocaLink written evidence to UK Parliament (TDE 42).

[9] Pay.UK reported that in 2024, nearly 12 billion transactions worth over £10 trillion were processed through the Faster Payments System, Bacs Payment System, and Image Clearing System, all operated by Vocalink infrastructure.

[10] Mastercard Inc., Investor News, 21 July 2016: MasterCard Announces Acquisition of VocaLink. The acquisition of 92.4 per cent of VocaLink Holdings Limited completed in May 2017 for approximately £700 million ($920 million). Regulatory approval was granted by the UK Competition and Markets Authority.

[11] The UK Competition and Markets Authority reviewed the Mastercard-VocaLink acquisition under merger control provisions and approved it with behavioural remedies. The public record does not indicate a parallel review under the Enterprise Act 2002 national security provisions.

[12] Pay.UK and Vocalink, contract extension announcement, 2024. Multi-year extensions to three contracts for central infrastructure services, securing continuity into the early 2030s for Faster Payments, Bacs, and Image Clearing System.

[13] Russia’s Mir payment system, operated by the National Payment Card System (NSPK), was established in 2015 following the 2014 Crimea-related sanctions. By 2022, Mir processed the majority of domestic card transactions in Russia, providing domestic payment continuity when international networks withdrew.

[14] Internal State Department cable dated 18 February 2026, signed by US Secretary of State Marco Rubio, reported by Reuters on 25 February 2026. The cable instructed US embassies in EU capitals to lobby against European digital sovereignty initiatives.

[15] France, Germany, the United Kingdom, Norway, Sweden, Denmark, and Finland were among the countries that declined participation in the US-proposed Board of Peace initiative in early 2026. The initiative was framed as a conflict-resolution mechanism but was widely perceived as requiring alignment with US foreign policy priorities.

[16] Sveriges Riksbank, Payments Report 2025. Cash accounted for fewer than 5 per cent of transactions in Sweden. Over 98 per cent of the population owns a debit card. The Riksbank has repeatedly flagged the decline of cash as a vulnerability to Sweden’s payment system resilience.

[17] Danmarks Nationalbank, Payments Statistics 2024. Cash was used in only 11 per cent of transactions. 86 per cent of in-store payments were contactless. Norway’s contactless payment share exceeded 87 per cent (Norges Bank). Belgium and the Netherlands report similar trajectories.

[18] SEPA covers 36 countries and processes direct debits, credit transfers, and instant payments under the governance of the European Payments Council. SEPA Instant Credit Transfer (SCT Inst) enables real-time euro transfers across the eurozone.

[19] Adyen N.V. (Netherlands) and Worldline S.A. (France) are significant European payment acquirers and processors. Adyen processes payments for major European merchants across its Amsterdam-based platform. Worldline, formed from the merger of Atos Worldline and Ingenico’s terminals business, operates substantial European processing infrastructure.

[20] Deutsche Bundesbank, Payment behaviour in Germany 2024. Girocard remains the most widely used card for in-store payments, with lower merchant fees than international networks. However, German banks increasingly issue Visa or Mastercard debit cards alongside or instead of Girocard. Neobanks such as N26 and Revolut do not offer Girocard.

[21] Directive (EU) 2015/2366 (PSD2) required European banks to open account data and payment initiation to licensed third-party providers via APIs. The directive created the regulatory architecture for open banking across Europe.

[22] European Payments Initiative (EPI), press release, February 2026. Wero has surpassed 50 million registered users across Germany, France, Belgium, and the Netherlands. E-commerce payments launched in 2025. Point-of-sale NFC payments planned for 2026.