A cross-border investigation by the European Investigative Collaborations (EIC) network and 21 media outlets alleges that French payments giant Worldline knowingly processed billions in illicit transactions for porn, gambling, and outright scams. The revelations—codename “Dirty Payments”—triggered a one-day share-price collapse of more than 40 %, erased ≈ €5 bn in market value, and opened the door to multi-jurisdictional enforcement.
KEY POINTS
- 41 % intraday plunge: WLN stock hit an all-time low (€3.42) after the exposé, trading halted repeatedly on Euronext Paris (Source: reuters.com)
- Payone at the centre: German joint venture allegedly acted as a “back door” acquirer for high-risk porn-and-gambling merchants lacking AML/KYC (Source: marketscreener.com)
- Fraud concealment playbook: Internal dashboards flagged “chargeback storms” yet executives overrode risk teams to preserve fee revenue (Source: in.investing.com)
- Regulators already circling: Dutch central bank opened a 2022 probe into Worldline NL for weak oversight; French ACPR now “reviewing disclosures” (Source: reuters.com)
- €130 m revenue hit (2024): Company quietly exited some high-brand-risk clients last year, signalling prior knowledge of the problem (Source: reuters.com)
- Decline of a fintech star: WLN market cap is down > 90 % since 2021 amid serial governance shocks (Source: financemagnates.com)
SHORT NARRATIVE
On 25 June 2025 the EIC consortium dropped the Dirty Payments dossier, alleging that Worldline and subsidiaries such as Payone shielded fraudulent merchants by mis-categorising transactions and suppressing chargeback alerts. Journalists claim leaked e-mails show senior managers instructing risk staff to “avoid escalations” and continue processing for porn, gambling, and subscription-trap websites generating up to €500 m annually in gross volume. Investors reacted brutally: Worldline lost over two-fifths of its value in a single session, its worst day on record.
Read our Worldline reports here.
EXTENDED ANALYSIS
Legal & Sanctions Exposure
- PSD2 & AMLD Breaches: Know-your-merchant failures and wilful chargeback suppression violate the EU’s PSD2 Article 110 fraud-monitoring standards and AMLD5 customer-due-diligence rules. Potential fines: up to 10 % of annual turnover per EU member state.
- Continuous Re-selling of Risk: Assigning “low-brand-risk” MCCs (e.g., 5816) to adult-content merchants may constitute scheme fraud under Visa Core Rules and Mastercard BRAM, exposing acquirer banks to network termination.
- Cross-border Liability: With Payone operating in Germany and The Netherlands, enforcement could span BaFin, DNB, and the French ACPR, each empowered to demand capital add-ons or licence restrictions.
Operational Red Flags Observed
| Indicator | Why It Matters |
|---|---|
| MCC mismatches (e.g., 5734 electronics vs. porn site URL) | Classic laundering of high-risk volumes |
| Chargeback ratios > 1 % sustained for 6+ months | Exceeds Visa threshold—evidence of tolerated fraud |
| Dormant shell MID hopping across Worldline gateways | Suggests deliberate evasion of scheme monitoring |
Governance Weaknesses
- Decentralised risk function allowed local subsidiaries to report “net fraud” after internal offsets, masking true figures.
- Board-level KPI bonuses tied to processed volume without claw-backs for fraud losses.
ACTIONABLE INSIGHT
Compliance teams should immediately:
- Screen for Worldline BINs (including Payone) in existing payment flows.
- Re-audit MCC mappings for merchants on Worldline acquiring rails, focusing on adult content, gambling, and aggressive subscription models.
- Escalate SAR/STR filings where persistent chargebacks coincide with Worldline processing to pre-empt regulator questions on “wilful blindness.”
📣 CALL FOR INFORMATION
FinTelegram invites whistle-blowers, auditors, and former Worldline staff to provide:
- Additional internal e-mails or risk reports evidencing C-suite override.
- Merchant ID lists that were re-categorised post-2023 “cleanup.”
- Data on chargeback reimbursements quietly funded by Worldline reserves.
