UK Finance Industry Guidance on Strong Customer Authentication under PSD2

One of the major aims of PSD2 is to reduce fraud in electronic payments. One of the core measures to achieve this aim is the requirement in Article 97 PSD2 (regulation 100, Payment Services Regulations 2017), which mandates the application of strong customer authentication (SCA) in specified scenarios. Article 97 PSD2 has been implemented in the UK through the PSRs 2017 and regulation 100 in particular. There are some very slight differences of wording, for example, the UK PSRs 2017 refer to “user” rather than “payer”, but these do not affect the substantive aspects of the requirements, rather they make them clearer and more accurate.