Variable Recurring Payments (VRP)

VRP solves a structural problem with open banking payment initiation: the original PSD2 framework required a full customer redirect and authentication for every single payment. That works for one-off purchases but breaks subscription and recurring billing models. VRP creates a standing mandate that authorises a third party to pull payments within set limits — without the customer needing to approve each individual transaction.

How VRP Works

A VRP setup has two phases:

Consent setup: The customer authenticates once with their bank (via Strong Customer Authentication) and sets parameters: the maximum single payment amount, a total period limit, the merchant allowed to collect, and an expiry date. This consent is stored with the bank.

Payment execution: When the merchant wants to collect payment, they send a payment initiation request referencing the active consent. The bank validates the request against the consent parameters (is the amount within limits? is the merchant authorised?) and executes the payment via the real-time rail (Faster Payments in the UK). The customer receives a notification but does not need to approve.

The payment settles within seconds. No card network, no interchange, no chargeback mechanism.

Sweeping VRP vs Third-Party VRP

There are two commercially distinct VRP categories:

Sweeping VRP: Moving money between accounts you own (e.g., automatically topping up a current account from savings when balance drops below a threshold). UK banks were mandated to support sweeping VRP by January 2022. This is live and available.

Third-party VRP (commercial VRP): Allowing a merchant or service to collect payments from your account. This is the commercially significant category for subscription businesses. UK banks are rolling this out through a commercial framework negotiated by Open Banking Limited; full coverage across major UK banks is expected by late 2026 or 2027.

Why VRP Matters for Subscription Operators

VRP has structural advantages over card-on-file recurring billing:

• Near-zero MDR: VRP payments settle over Faster Payments at a fraction of card interchange. For high-volume subscription businesses, the economics are materially better.
• No card expiry failures: Cards expire; bank accounts don’t. VRP eliminates the entire category of subscription churn caused by card reissues.
• No chargeback exposure: VRP payments initiated under valid consent have no chargeback mechanism equivalent to card disputes. Merchant bears less dispute risk.
• Consent portability: Customers can revoke VRP consent through their banking app, centralising subscription management.

Current Limitations

• UK-only for now: VRP is a UK/Open Banking Implementation Entity (OBIE) initiative. EU PSD3 includes provisions for similar mechanisms but transposition timelines push practical availability to 2027+.
• Third-party VRP not universally live: As of 2025, commercial VRP requires bilateral agreements between PSPs and individual banks. Full market coverage is incomplete.
• No universal consumer protection: Unlike card payments (which have chargeback rights), VRP disputes rely on the bank’s and merchant’s own processes. Consumer protection frameworks are still being defined.

For operators with UK subscription volume above £500K/month, monitoring VRP availability and planning migration from card-on-file is commercially worthwhile.