Card Payments

On 14 March 2022, requirements for Strong Customer Authentication (SCA) in the context of e-commerce took effect. This follows the managed programme UK Finance led on behalf of members in order to ensure an orderly migration to SCA. 

The central programme team has now stood down, having delivered on the success criteria set out by members, including but not limited to:

  • the creation of a clearly defined industry implementation plan endorsed by the FCA
  • the creation of industry-wide metrics to monitor the transition to full SCA compliance
  • having achieved industry consensus on behavioural biometrics as a second factor to one- time passwords (OTP)
  • having presented a case to the Information Commissioners Office (ICO) for the use of behavioural biometrics on the basis of substantial public interest to reduce fraud. The ICO did not object to our proposal.
  • having issued several SCA guidance documents including specific guidance to mitigate the impact on vulnerable customers while ensuring compliance. 

Following the successful implementation of SCA, members have identified Merchant Initiated Transactions as one area where they see benefit in having continued industry discussions. Until June 2022, we will continue to collect industry data to monitor the impact on merchants and consumers.

Area of expertise: