{"id":5089,"date":"2021-06-24T07:26:00","date_gmt":"2021-06-24T07:26:00","guid":{"rendered":"https:\/\/www.mindstask.com\/en\/?p=5089"},"modified":"2023-03-16T14:55:55","modified_gmt":"2023-03-16T14:55:55","slug":"why-strong-customer-authentication-sca-is-a-must-in-the-european-economic-area-eea","status":"publish","type":"post","link":"https:\/\/www.mindstask.com\/en\/why-strong-customer-authentication-sca-is-a-must-in-the-european-economic-area-eea\/","title":{"rendered":"Why Strong Customer Authentication (SCA) Is A Must In The European Economic Area (EEA)?"},"content":{"rendered":"
<\/div>

The adoption of digital business and digital technologies has been rapidly increasing over the past few years. Unfortunately, this rapid implementation of digital services has hugely increased enterprises\u2019 exposure to phishing and other attacks\u2014 especially in payment tractions. That\u2019s where, secure user authentication is critical. Strong Customer Authentication (SCA) is a step in that direction in the European Economic Area (EEA).<\/p>\n

What is Strong Customer Authentication?<\/h3>\n

According to UK Finance, Strong Customer Authentication (SCA) is a new set of rules that will change how consumers and business customers confirm their identity when making purchases online to help further protect them from fraud. Following its implementation, consumers shopping, or banking online will often need to undertake an extra step to confirm their identity. For example, the card issuer or provider (for example a bank) may use one of a number of ways to verify a purchase or login, such as a passcode via text message, a phone call to the consumer\u2019s landline, the use of a card reader or the use of a smartphone app. Under the new rules all parties are required to make the necessary changes to enable consumers to authenticate their actions in a manner compliant with the underlying regulation.<\/p>\n

\u00a0<\/p>\n

Why SCA Was Introduced?<\/h3>\n

SCA rule was introduced to digital payments in order to provide further protection to customers.<\/p>\n

UK Finance<\/a><\/span>\u00a0has explained it in its communication\u2026<\/p>\n

Under the Payment Service Directive 2 (PSD2), Strong Customer Authentication (SCA) is required where a payment service user (customer) initiates an electronic payment transaction.<\/p>\n

However, in the UK the Financial Conduct Authority (FCA) provided a longer lead-time for enforcement, due to the complexity of implementing SCA.<\/p>\n

The aim was to ensure all parties moved towards full compliance in an orderly manner thus avoiding negative impacts for both consumers and merchants.<\/p>\n

The new enforcement date is 14 March 2021 in the UK and 31 December 2020 across the rest of the EU. As a result, UK card issuers will be required to decline all non-SCA-compliant transactions after 14 March 2021.<\/p>\n

All merchants, acquirers, gateways, and issuing banks or payment service providers must be ready to support SCA from this date, to avoid consumers experiencing declined e-commerce transactions. The FCA has confirmed that there will be no further extensions to this deadline. In order to avoid a loss of business, we encourage all parties to read this communication and to take action.<\/p>\n

Who does this apply to?<\/h3>\n

As mentioned earlier, it applies to merchants, acquirers, gateways, and issuing banks or payment service providers. You must update your SCA integration if you fall in the following categories:<\/p>\n