In this essay
Payment cancellation is usually treated as a back-office exception. A customer calls, a bank chases a correspondent, operations waits for a response, and the product team sees the case only after the complaint has become painful.
That model does not survive the next phase of ISO 20022 migration. Swift is moving cancellation and exceptions-and-investigations work into a more structured Case Management model, including Stop and Recall for payment cancellations. The product question is no longer only whether a message can be sent. It is whether the institution can prove who owns the recall, what status was returned, what evidence reached the customer, and what remains unresolved.
The milestone is about operating evidence
Swift says the end of CBPR+ coexistence for payment instructions shifted attention to the next priorities: payment cancellations and exceptions and investigations. Its Case Management programme includes Case Orchestrator for investigations and Stop and Recall for cancellations, with a migration path across 2026 and 2027.
That matters because cancellation is not a single event. It is a chain of decisions:
- the initiating party asks to stop or recall funds;
- the payment holder receives and validates the request;
- the responding party accepts, rejects or asks for more information;
- operations translates the response into customer language;
- finance and compliance preserve the evidence.
If those states sit in email threads and spreadsheets, the migration has not happened even if the message schema is technically ready.
ISO 20022 does not remove ambiguity by itself
The CPMI's updated harmonised ISO 20022 requirements make the broader point clearly: inconsistent implementation can limit the benefits of structured data. That warning applies directly to recall work.
A cancellation request can fail for several different reasons. The payment may already be credited. The beneficiary bank may need more evidence. The receiving institution may reject the recall. A correspondent may support one format now and another later. The customer hears one sentence: "Can you get my money back?"
The product has to separate those states. "Recall requested" is not the same as "funds secured." "Response received" is not the same as "customer made whole." A useful operating model preserves that distinction from the first customer touch to the final ledger entry.
What product teams should own
The work is shared across operations, technology, compliance, correspondent banking and customer support. Product still needs to own the visible state machine.
1. A canonical recall case
Every cancellation should have one case record. It should link the original payment, UETR where available, request reason, initiating user, payment holder, current status, response code, customer promise and next owner.
That case record should not be a note pasted into a support ticket. It should be the object that all teams reference when they explain the case.
2. Response-code handling
Structured messages are valuable only if the receiving system maps responses into operational actions. A rejection, request for more information, accepted cancellation and completed return all need different customer language and internal ownership.
The dangerous state is "awaiting bank response" with no ageing rule. It feels honest, but it gives nobody a decision. Add ageing limits, escalation paths and evidence requirements for each response state.
3. Customer-status language
Payment teams often understand the internal difference between recall requested, recall accepted and funds returned. Customers usually do not.
Write the status language before go-live. A customer should not be told that a payment was "cancelled" when the network has only received a request. If the money cannot be recovered, the explanation should show the decision path without exposing internal jargon.
4. Bilateral fallback control
During migration, some exceptions will still depend on older flows, bilateral arrangements or manual follow-up. That is not automatically a failure. It becomes a failure when the fallback path is invisible.
Keep a field for the route used, the format used, the evidence received, and the reason a structured path was not enough. This lets the team see whether the fallback is shrinking or quietly becoming the real process.
The launch gate I would use
Before treating Stop and Recall readiness as complete, ask for evidence on seven points:
- Can the team reconstruct the original payment and recall journey from one case ID?
- Is the UETR or equivalent tracking reference captured where it exists?
- Are response codes mapped to owner, SLA, customer language and next action?
- Can operations distinguish a request sent, request accepted, funds returned and unrecoverable case?
- Are manual or bilateral follow-ups tagged rather than hidden in notes?
- Does reconciliation know when a returned payment is expected and how it will match?
- Can support explain the status without overstating recovery?
If the answer is no, the institution may have message readiness but not recall readiness.
The product lesson
Cancellation is a trust moment. It is when the customer discovers whether a cross-border payment product can explain itself under stress.
ISO 20022 and Swift Case Management give the industry better rails for that explanation. The hard work is turning those rails into a live workflow: case ownership, response-code handling, ageing, customer language, reconciliation and audit evidence.
The schema is the easy part to demo. The recall queue is where the migration becomes real.
FAQ
Is Stop and Recall the same as a guaranteed refund? No. It supports the cancellation workflow. The result still depends on the payment state, receiving institution response, applicable rules and whether funds can actually be returned.
Does this replace operations ownership? No. It should make operations ownership clearer. A structured case model gives each team a shared state and evidence trail.
What should product teams measure? Track recall request volume, response ageing, accepted versus rejected recalls, customer-status corrections, returned-payment reconciliation breaks and cases still handled through manual fallback.
Closing thought and further reading
The next cancellation milestone is not just camt messages. It is ownership of recall evidence, response codes, customer status and unresolved exceptions.
Building through similar complexity?
Discuss the operating decisions behind the essay, or explore where my experience can help.


