The $500 Million Security Gap: Bank of Ireland UK’s Critical Failure

The Institutional Failure of "Confirmation of Payee" On February 20, 2026, Bank of Ireland UK (BOIUK) issued a formal apology for its failure to implement "Confirmation of Payee" (CoP) send requests. While seemingly a back-office technicality, this delay represents a critical vulnerability in the UK’s banking infrastructure. CoP is designed to cross-reference account names with account numbers to prevent Authorised Push Payment (APP) fraud—a category of crime that saw UK consumers lose £459.7 million in the most recent annual reporting cycle. The $500 Million Security Gap The "So What?" of the BOIUK delay is simple: friction saves money. The UK Payment Systems Regulator (PSR) originally mandated CoP for Group 1 banks by 2020, yet mid-tier institutions continue to struggle with the rollout. For BOIUK customers, the lack of a CoP feature means they are significantly more exposed to "malicious redirection" scams. According to UK Finance data, 77% of APP fraud cases originate on social med