Variable Recurring Payments: What VRP Means for Rent Collection
European rent collection runs on a trade-off. Direct debit is automatic: the tenant signs a mandate once and you pull the rent every month without asking. But under the SDD CORE scheme, every debit is provisional. The payer can reclaim it within eight weeks of the charge, no questions asked — and dispute it for 13 months if they claim it was unauthorized. Account-to-account (A2A) payments initiated through open banking invert the deal. Settlement is final: no chargebacks, no returns. The cost is friction, because PSD2 requires strong customer authentication (SCA) for every single payment. Automatic but revocable, or irrevocable but manual. Until now, operators had to pick one.
Variable Recurring Payments (VRP) close that gap. The tenant authenticates once, approves a set of parameters, and every subsequent rent payment executes as an irrevocable credit transfer with no further action on their side. The UK already runs VRP at scale. The EU is building its own version, on a slower and more fragmented path. This article covers the mechanics, the honest timeline, and what property operators should do while they wait.
What VRP actually is
A VRP is a consent object held at the payer's bank. Instead of authorizing one payment, the payer authorizes a payment relationship, bounded by parameters agreed up front: a maximum amount per payment, a frequency or per-period cap, a named payee, and usually an expiry date. Within those bounds, the payee's payment provider initiates each collection directly — no per-payment SCA, no tenant tapping through a banking app on the 1st of every month.
Two properties matter for rent. First, every VRP execution is a push credit transfer, so a settled payment is final; there is no equivalent of the direct-debit refund window. Second, the control model is preventive rather than corrective. Direct debit protects the payer after the fact, through refund rights. VRP protects the payer before the fact, through hard limits the bank enforces. The payer can revoke the consent at any time — that stops future payments, not past ones.
Status is uneven, and precision matters here. In the UK, sweeping VRPs — transfers between a customer's own accounts — have been live since 2022, mandated by the Open Banking Implementation Entity (OBIE) for the largest banks, and commercial VRP (third-party collections such as rent) is expanding under the JROC roadmap. In the EU, there is no native VRP under PSD2. The closest equivalents are emerging through the European Payments Council's SPAA scheme (SEPA Payment Account Access) and its dynamic recurring payments — a voluntary framework with early adoption. PSD3 and the PSR, provisionally agreed in November 2025, are expected to formalize the model, with application expected in 2027–28. In the EU, VRP is arriving. It is not live, and any pitch that says otherwise deserves scrutiny.
Why rent is the perfect VRP use case
VRP was designed for exactly the payment profile rent has.
The amount is stable but not fixed. Rent stays constant for months, then moves once a year with indexation. That breaks standing orders, which handle fixed amounts only. It is trivial for VRP: set the consent cap with headroom above the current rent and the annual adjustment fits inside the same consent.
The relationship is long. A multi-year tenancy amortizes one authentication over dozens of payments. Consent friction that would kill a one-off checkout is irrelevant when it happens once per contract.
The ticket is high. On typical urban rents, ad valorem card fees compound fast, and every card payment carries chargeback exposure for up to roughly 120 days. Direct debit is cheaper than cards but keeps the eight-week refund tail. The full cost comparison is in open banking vs cards for property.
Scenario — a worked hypothetical, not client data: a 400-unit portfolio collects €900 average rent by SDD CORE and sees a 2% return rate. That is 8 returned debits a month, 96 a year. At roughly 45 minutes of handling per incident — detection, tenant contact, re-collection, reconciliation — returns consume about 72 hours of ops time a year, before bank return fees and the treasury noise of cash that arrives and then leaves. The same volume on cards at an assumed 1.5% blended fee costs €64,800 a year on €4.32M collected. On irrevocable A2A at 0.25% per successful payment, the rail costs €10,800 — and a settled payment stays settled.
Today, capturing that finality requires per-payment authorization. VRP removes that last constraint: direct-debit convenience on credit-transfer finality.
VRP vs direct debit vs standing orders vs per-payment A2A
| VRP | SEPA direct debit (CORE) | Standing order | Per-payment A2A (PIS) | |
|---|---|---|---|---|
| Authorization model | One bank-held consent with cap, frequency and payee | Mandate held by the creditor, who pulls funds | Payer sets a repeating instruction at their own bank | Payer authorizes each payment with SCA |
| Revocability once settled | None — push credit transfer | Refundable for 8 weeks, no questions asked; 13 months if unauthorized | None once executed | None — push credit transfer |
| Payer action per cycle | None | None | None | Authenticate every payment |
| Amount flexibility | Variable within the agreed cap | Creditor sets each collection amount | Fixed amount only | Any amount, approved per payment |
| Availability today (mid-2026) | UK: live (sweeping; commercial expanding). EU: arriving via SPAA; PSD3/PSR expected 2027–28 | Live across SEPA | Live at virtually every bank | Live across Europe under PSD2 |
One nuance on revocation: VRP consents and standing orders can be cancelled for the future at any time. What neither allows is clawing back a payment that has already settled. That is the structural difference from CORE direct debit.
The regulatory timeline
- 2018 — PSD2 applies. Payment initiation (PIS), account information (AIS) and SCA become law. A2A rent collection becomes possible; per-payment authentication becomes its tax.
- 2022 — sweeping VRPs go live in the UK, mandated by the OBIE for the largest banks. First proof at scale that parameterized consent works. Commercial VRP is now expanding under the JROC roadmap.
- 2023 — the EPC's SPAA scheme enters into force. Its dynamic recurring payments are the EU's closest VRP equivalent. The scheme is voluntary, so coverage depends on bank-by-bank adoption and commercial terms.
- January and October 2025 — the SEPA Instant Regulation bites. Euro-area PSPs must receive instant credit transfers from January 2025 and send them from October 2025: ten seconds or less, 24/7/365, at no premium over standard transfers. This is the settlement layer EU VRP will ride on.
- November 2025 — provisional agreement on PSD3/PSR, the package expected to formalize dynamic recurring payments and introduce Verification of Payee. Publication is expected in 2026; application in 2027–28. Our sector read: PSD3 and open banking for real estate.
What to watch: the pricing and dispute rules that emerge from the UK's commercial VRP rollout, which EU banks actually ship SPAA APIs and on what terms, and the final PSR application dates.
What property operators should do now
The operators who benefit first from VRP will be the ones already collecting rent over open banking rails when it arrives. The consent base, the tenant habit and the reconciliation logic all carry over; VRP only removes the per-payment authentication step. Waiting until 2027 on cards or direct debit means paying their costs for two more years and then starting the same migration anyway.
The practical sequence: collect new contracts by A2A today, using payment links for monthly requests and standing orders where rents are fixed; automate reconciliation now, with a contract, property and tenant reference on every payment, because that logic does not change under VRP; and keep direct debit where it performs, judged by cohort return rates rather than habit. The mechanics are covered in our open banking guide for real estate.
UrbanPay runs this today: A2A payment initiation from 0.25% per successful payment (volume-tiered), SEPA Instant settlement in seconds, standing-order support and automatic reconciliation against contract, property and tenant references, across 19 European markets. Rails are regulated via partner entities supervised by the FCA and BaFin, and client funds never touch UrbanPay's balance sheet. Rates are on the pricing page. When the EU switches VRP on, it will run on the same rails and the same consent relationships.
FAQ
Is VRP available in the EU today?
No. PSD2 has no native VRP, so every open banking payment needs its own SCA. The EU equivalent — dynamic recurring payments under the EPC's SPAA scheme — exists as a voluntary framework with early adoption, and PSD3/PSR is expected to formalize the model, applying in 2027–28. Today's EU options are per-payment A2A, standing orders and direct debit.
Can a tenant reverse a VRP payment like a direct debit?
No. VRP executions are credit transfers: once settled, they are final. There is no equivalent of SDD CORE's eight-week no-questions refund right. A tenant can revoke the consent and stop future collections — ordinary arrears risk still exists — but rent that has already settled does not come back off your account.
What happens when indexation pushes rent above the consent cap?
A payment above the cap will not execute; the consent needs re-authorization. The practical design is to set the cap with headroom above the current rent — enough to absorb the annual adjustment — and to align consent renewal with contract renewal so both happen in the same signature flow.
Talk through your collection stack before VRP lands: book a 30-minute call.