The Safety Net With a Gap: Why a Crypto-Linked Bank Transfer Needs Its Own Checks

When a bank transfer goes wrong, it is tempting to assume that the UK’s fraud reimbursement rules will step in. That assumption is understandable. Since 7 October 2024, the Payment Systems Regulator’s mandatory reimbursement regime for authorised push payment (APP) fraud has required many UK banks and building societies to reimburse eligible victims, subject to exceptions and a cap that is generally £85,000 per claim, with a £100 excess. But the regime is not a universal refund promise. For crypto-linked payments, the gap between what readers expect and what the rules actually cover can be wide.

This article is not legal advice, and it is not a prediction about any individual complaint. It is a cautious guide to the shape of the protection, written for UK readers who want to send money deliberately rather than hopefully.

What APP reimbursement actually addresses

An authorised push payment is a payment you instruct your bank to make. You authorise it; the fraudster pushes it towards an account they control. The reimbursement rules were designed for a familiar pattern: a customer is deceived into sending money by Faster Payments or CHAPS to another person’s account, and the receiving bank is part of the UK payment system.

The rules do not cover every loss. They are subject to exceptions, including gross negligence and first-party fraud, and they do not apply to every payment method or every institution. A card payment, an international transfer, or a payment outside the designated systems may sit somewhere else entirely. The customer also has duties: act promptly, contact the bank, and provide accurate information.

In plain terms, APP reimbursement is a targeted remedy for a specific kind of bank-to-bank deception. It is not a general insurance policy for anything that feels like fraud.

Where crypto enters the picture

Crypto payments take several forms, and the protection question changes with each one.

A bank transfer from a UK account to a cryptocurrency exchange is still a bank transfer. If the receiving account belongs to a legitimate exchange, the bank may see the payment as authorised to the payee the customer named. The fact that the money is later used to buy crypto, or sent to an external wallet, does not automatically turn the bank transfer into an APP scam. The loss may occur after the banking leg has completed, inside an environment where different rules apply.

An on-chain transfer is further away still. Once a crypto asset transaction is confirmed on a blockchain, there is no bank in the middle to reverse it. The APP regime is built around payment accounts and payment service providers; a transfer between crypto wallets is not an APP payment in the ordinary sense. Recovery may depend on the recipient, the exchange, law enforcement, or the courts, rather than on a reimbursement rule.

That distinction matters because crypto assets are not covered by the Financial Services Compensation Scheme. The FSCS protects certain deposits and investments when an authorised firm fails; it does not provide a refund for a crypto asset that is lost, stolen, or sent to the wrong address.

Two payments, different shapes

Consider two simplified scenarios.

In the first, a reader is persuaded by a fraudster to send £2,000 by Faster Payments to a personal account. The money moves from the reader’s bank to another UK bank account. If the reader acts quickly and the case meets the APP rules, the bank may be required to reimburse, unless an exception applies.

In the second, a reader sends £2,000 by Faster Payments to a cryptocurrency exchange, buys a token, and later transfers it to an external wallet controlled by someone who disappears. The bank transfer may have reached the exchange as intended. The later loss occurs in the crypto layer. The bank may say that it executed the customer’s instruction to a named payee; the exchange may say that it processed a withdrawal to an address the customer supplied. Neither response is a guarantee of no recovery, but neither fits neatly into the APP reimbursement model.

A third scenario sits in between: a reader is deceived into sending money to an account that is not really the exchange’s account, or to a fraudulent clone of an exchange. That may look more like a conventional APP scam, but the facts will matter. The name on the account, the payment reference, the speed of the report, and the receiving institution’s status can all affect the outcome.

A pre-send checklist that assumes no safety net

The practical lesson is not that every crypto payment is doomed. It is that the safety net should be placed before the send button, not assumed after it.

1. Name the payment precisely. Is this a bank transfer, a card payment, or an on-chain transfer? Each has a different recovery path and a different level of reversibility.
2. Verify the destination independently. Do not rely on a link in an email or message. Type the exchange’s address into a browser, use its official app, or call a number you have sourced yourself.
3. Check the payee details character by character. For a bank transfer, compare the account name, sort code, and account number with a trusted source. For crypto, check the address and the network. A correct address on the wrong network can still lose funds.
4. Treat urgency as a warning. Pressure to send immediately is a common feature of fraud. A legitimate payment should survive a short pause and a second check.
5. Start small only as a test, not as proof. A small transfer can confirm that details work, but it does not prove that the person or platform is honest.
6. Keep a record before and after. Save screenshots, payment references, wallet addresses, chat logs, and timestamps. If something goes wrong, a clear timeline helps the bank, the exchange, and the police.
7. Know the route before you need it. Identify the bank’s fraud line, the exchange’s complaint process, and Action Fraud. If a bank complaint is not resolved, the Financial Ombudsman Service may be able to consider it.
8. Do not send more money to unlock a withdrawal. A request for a “release fee”, “tax payment”, or “verification deposit” after a crypto withdrawal is a serious warning sign.
9. Ask whether you can afford to lose the amount. If the answer is no, the payment is too large for the level of certainty you have.

If a payment goes wrong

Speed still matters. Contact your bank’s fraud team immediately, then the exchange or receiving platform. Report the matter to Action Fraud and keep the reference. If the loss involves a bank transfer that may qualify under the APP rules, say so clearly and ask the bank to explain its position in writing. If the dispute concerns the bank’s handling of your complaint, ask about the Financial Ombudsman Service.

None of this guarantees a refund. That is the point. The UK’s APP regime is a meaningful protection for a defined set of bank payment frauds, but it is not a blanket cover for crypto activity. A cautious reader should treat a crypto-linked payment as one where the safety net may have a gap, and build the checks accordingly.