Reference

New Zealand — Payments Detail

Part of the Payments Domain skill · loaded on demand from SKILL.md

Part of the payments-domain skill. Specific caps, thresholds, and dates here are point-in-time — verify against the primary source (Commerce Commission, RBNZ, MBIE, Payments NZ, FMA, DIA) before stating as current.


Bodies and who does what

  • Commerce Commission (ComCom) — regulates designated retail payment networks under the Retail Payment System Act 2022: interchange pricing standards, surcharging standards, transparency, and access. Visa and Mastercard are the initially designated networks.
  • RBNZ — Reserve Bank of New Zealand — oversees the payment and settlement system and operates the settlement infrastructure (ESAS).
  • MBIE — Ministry of Business, Innovation & Employment — administers the Customer and Product Data Act and open-banking designation/accreditation.
  • Payments NZ — industry body that governs the core rails and sets the API standards used for open banking.
  • FMA (Financial Markets Authority) and DIA (Department of Internal Affairs) — AML/CFT supervisors alongside RBNZ (sector-split).
  • Office of the Privacy Commissioner — privacy breaches involving personal information under the data regime.

Rails

EFTPOS. New Zealand's long-standing domestic debit network — historically free to merchants and cardholders, which shaped low surcharging norms and a different competitive dynamic from Australia. Includes online EFTPOS (bank-to-bank for e-commerce).

Cards. Visa and Mastercard for credit and contactless/scheme debit.

Core clearing and settlement. Account-to-account payments run through Payments NZ's bulk electronic rails (direct credits/debits, bill payment) and settle across ESAS at the RBNZ. Settlement Before Interchange (SBI) is the interbank settlement arrangement. New Zealand does not have a consumer-facing real-time push platform equivalent to Australia's NPP; faster/real-time ambitions are being pursued through Payments NZ's next-generation work and the open-banking payment-initiation APIs rather than a separate national instant rail.

Interchange and surcharging

Under the Retail Payment System Act 2022, ComCom set an initial pricing standard capping interchange on Visa/Mastercard from November 2022 (first-ever NZ caps), then reduced them further:

  • NZ-issued cards: lower caps from 1 December 2025 — notably in-person consumer credit dropping from around 0.80% to 0.30%.
  • Foreign-issued cards: capped for the first time from 1 May 2026.
  • Domestic personal debit: caps held (in the order of 0.00% in-person contacted, ~0.20% in-person contactless, ~0.60% online) to preserve room for smaller issuers and alternative networks.

ComCom can also issue merchant surcharging standards to keep surcharges cost-reflective. A legislative ban on card-payment surcharging (Visa/Mastercard) was progressing through Parliament in 2025–26, targeted to take effect around mid-2026 — confirm whether it has actually commenced before advising, as surcharging was still permitted (cost-reflective) during the transition.

Verify all figures and dates against comcom.govt.nz.

Open banking — Customer and Product Data Act 2025

NZ moved from an industry-led approach to a regulated Consumer Data Right under the Customer and Product Data Act 2025 (Royal Assent March 2025), modelled on Australia's CDR but designed to learn from its low uptake.

  • Open-banking standards in force from 1 December 2025, incorporating Payments NZ's API specification (v2.3.x), covering data sharing and payment initiation.
  • ANZ, ASB, BNZ, Westpac designated as data holders and live from 1 December 2025; Kiwibank phasing in (payments from 1 June 2026, customer data from 1 December 2026). Other deposit-takers may opt in.
  • Banks cannot charge for the designated data transfers. MBIE oversees designation and accreditation; the Privacy Commissioner handles personal-information breaches.

AML/CFT

Governed by the AML/CFT Act 2009, with supervision split across RBNZ, FMA, and DIA depending on the type of reporting entity. Obligations cover customer due diligence (KYC/KYB), ongoing monitoring, and suspicious-activity reporting. There is no single dedicated PSP licence as in the AU reform; payment providers are caught via AML registration and FMA conduct/financial-services obligations.