The SEPA Mandate formalises the customer’s consent to direct debit. It notably includes:
The RUM is essential: it uniquely identifies the mandate between a specific creditor and debtor. It is included on every direct debit order, allowing the customer’s bank to link the debit to the signed mandate. The ICS identifies the creditor within the banking system; it is obtained from their bank and follows a standardised format (country prefix + key + national identifier).
Without a valid mandate, a direct debit is irregular: the customer can obtain a refund and contest it.
There are two direct debit schemes, hence two types of mandate:
| Criterion | SEPA Core | SEPA B2B (business-to-business) |
|---|---|---|
| Debtor | Individual or business | Business only |
| Disputing an authorised debit | Possible within 8 weeks | No (no refund) |
| Disputing an unauthorised debit | Up to 13 months | 13 months |
| Mandate validation by debtor’s bank | Not required | Required (bank records the mandate) |
| Submission deadline | Flexible | Shorter |
The B2B scheme is more secure for the creditor: the business debtor waives the right to refund for an authorised debit, and their bank records the mandate before any collection. In return, it is reserved for business-to-business transactions and requires the debtor to take action with their bank.
The Core scheme is easier to set up but exposes the creditor to disputes within 8 weeks, hence the importance of keeping the signed mandate.
For an SME, the SEPA mandate is key to reliable recurring collections: subscriptions, instalment plans, monthly fees. But collecting paper mandates is cumbersome: signatures to obtain, RUM to generate, IBAN to enter without errors, mandate to archive.
Best practice is to digitise the mandate: the customer provides their IBAN and signs online, the RUM is generated automatically, and the mandate is stored and linked to future debits. This reduces input errors and bank rejections while retaining proof of consent.
Orizen follows this approach with its payment links: the customer authorises the debit online, the mandate and its RUM are retained, and subsequent instalments are collected without further action—useful for turning one-off invoicing into controlled recurring revenue.
Discover the Orizen answer: Orizen payment link, modular and built for French SMEs.
Essai gratuit 14 jours What the Orizen payment link module costsA recurring direct debit mandate remains valid as long as it is used. However, a mandate that has not been used for any debit for 36 consecutive months expires: a new one must then be established. The debtor can also revoke their mandate at any time by notifying their creditor and bank.
The SEPA Core scheme is open to everyone, including individuals, and allows the debtor to request a refund for an authorised debit within 8 weeks. The SEPA B2B scheme is reserved for businesses: the debtor waives this refund right, and their bank must record the mandate before any debit, making it more secure for the creditor.
A debit made without a valid mandate is an unauthorised debit. The customer can obtain a full refund and dispute it for up to 13 months after the debit date. This is why the creditor must always hold and retain a signed mandate, along with its RUM, and be able to present it to the bank in case of dispute.