You can use the search function to find a range of UK Finance material, from consultation responses to thought leadership to blogs, or to find content on a range of topics from Capital Markets & Wholesale to Payments & Innovation.
Strong Customer Authentication (SCA) is a new set of rules that will change how you confirm your identity when making purchases online. The implementation of SCA requires merchants and Payment Service Providers (PSPs) to work together with technology suppliers, card schemes and many others to deliver SCA in a way which works well for customers.
The Financial Conduct Authority (FCA) announced and agreed to a managed rollout for SCA with UK Finance to give the payments and e-commerce industry extra time to implement SCA.
To facilitate ongoing commitment to the managed rollout and for the best customer and industry outcomes, UK Finance set up a central Programme Management Office. In the managed rollout, we propose a number of measures aimed at implementing SCA at pace, but also in a way that is structured to help coordinate as well as help answer the remaining tricky questions the industry still has. This page will be regularly updated with information for the industry, merchants and consumers.
The FCA has granted the industry additional time to implement SCA. The enforcement date is currently 14 March 2022 but the FCA expects the industry to maintain momentum in preparing for SCA with a sprint Ramp Up starting on 18 January 2022 (click here for information).
The focus of the rollout is a technology called 3DSecure which will help to facilitate the authentication of the majority of remote card-based transactions (Card Not Present transactions). However, there are other SCA compliant solutions available in the market, such as those provided by Payment Initiation Services (e.g. through Open Banking), Apple Pay or Google Pay as well as other potential solutions.
It is important to remember that some documents previously published on this site will still refer to the end of the managed rollout as March 2021, or 14 September 2021. Please note the enforcement date is now 14 March 2022.
Industry SCA Implementation Roadmap (November 2021) v.1 (Sprint Ramp Up) Strong Customer Authentication - Calendar of events
SCA Operational Resilience FAQs SCA PMO Communication - Delayed 2nd Factor to OTP implementation SCA Communication on Authentication Challenges and Vulnerable Customers SCA Guidance - March 2022 Strong Customer Authentication: Considerations for what can be used as a second factor alongside One Time Passcode (OTP)
Communication - Travel and Hospitality Readiness Strong Customer Authentication: Communication on improving outcomes from 3DSecure – Data Consistency Redacted - UK Finance SCA Programme - Testing Approach and Guidance UK Finance Communication on Strong Customer Authentication e-Merchant comms v16 (with approved logos) e-Merchant Comms v14 (unbranded) PDF - e-Merchant Comms v14 (unbranded) PPT
UK Finance Communication on Strong Customer Authentication e-Merchant comms v16 (with approved logos) e-Merchant Comms v14 (unbranded) PDF - e-Merchant Comms v14 (unbranded) PPT
Contacting the UK Finance Strong Customer Authentication Programme Leadership and Working Group structure Strong Customer Authentication Business Working Group - Terms of Reference Strong Customer Authentication Programme Steering Group (PSG) - Terms of Reference Strong Customer Authentication Regulatory Working Group - Terms of Reference
Payments, Innovation & Resilience
By downloading this document, you understand and agree that any sharing, distribution or republishing of the content, without prior written authorisation from the author or content managers at UK Finance, shall be constituted as a breach of the UK Finance website terms of use.
