Vocalink urges stronger resilience in payments systems

Vocalink, the payments infrastructure firm owned by Mastercard, said in a recent statement that national payments systems must be made more resilient to continue operating during disruptions.

The company identified software faults, cyberattacks, extreme weather and failures by third‑party suppliers as risks that can interrupt payments for households and businesses. It urged banks, infrastructure providers and regulators to plan for prolonged outages.

Vocalink recommended technical measures including greater geographic and vendor diversity for critical components, regular failover exercises that simulate real incidents, and clearer separation between front‑end services and settlement engines to limit cascading failures.

On organisational measures, the firm called for stronger incident governance, shared sector playbooks and closer cooperation between payment operators and supervisors to speed recovery and coordinate responses.

Vocalink highlighted that rising payment volumes, new participants in the market and dependence on common utility providers and cloud platforms can concentrate risk if redundancy and tested fallback options are not in place.

The company gave examples of resilience practices it says operators should adopt: maintaining active disaster recovery sites, running cross‑industry stress tests, keeping message formats and operating procedures simple and consistent so alternative providers can be brought online quickly, and communicating clearly with customers and businesses during incidents.

A Vocalink spokesperson pointed to recent industry exercises that revealed weaknesses in recovery times and called for lessons from those tests to be translated into updated requirements and standards for operators and participants. “The sector must prioritize investment and coordination so critical payment rails can be kept running when problems occur,” the spokesperson added.

Vocalink operates core payment infrastructure used by banks and other financial institutions to clear and settle payrolls, direct debits, card settlements and real‑time transfers. Regulators in several countries have increased scrutiny of operational resilience and require firms to demonstrate plans for severe but plausible disruptions and the ability to meet service needs during incidents.