Strong Customer Authentication

Strong Customer Authentication (SCA) is a new set of rules that will change how you confirm your identity when making purchases online. The implementation of SCA requires merchants and Payment Service Providers (PSPs) to work together with technology suppliers, card schemes and many others to deliver SCA in a way which works well for customers.

The Financial Conduct Authority (FCA) announced and agreed to a managed rollout for SCA with UK Finance to give the payments and e-commerce industry extra time to implement SCA.

To facilitate ongoing commitment to the managed rollout and for the best customer and industry outcomes, UK Finance set up a central Programme Management Office. In the managed rollout, we propose a number of measures aimed at implementing SCA at pace, but also in a way that is structured to help coordinate as well as help answer the remaining tricky questions the industry still has. This page will be regularly updated with information for the industry, merchants and consumers.

The FCA has granted the industry additional time to implement SCA. The enforcement date is currently 14 March 2022 but the FCA expects the industry to maintain momentum in preparing for SCA with a sprint Ramp Up starting on 18 January 2022 (click here for information).

The focus of the rollout is a technology called 3DSecure which will help to facilitate the authentication of the majority of remote card-based transactions (Card Not Present transactions). However, there are other SCA compliant solutions available in the market, such as those provided by Payment Initiation Services (e.g. through Open Banking), Apple Pay or Google Pay as well as other potential solutions.

It is important to remember that some documents previously published on this site will still refer to the end of the managed rollout as March 2021, or 14 September 2021. Please note the enforcement date is now 14 March 2022.


Get in touch

If you are a Payment Service Provider (PSP), vendor or a merchant and would like to get involved in the programme, or to receive more information, please click the button below

Get in touch Click through arrow

Deadline to implement strong customer authentication (SCA)


The UK Finance SCA Programme Team want to communicate a delay to the implementation of 2nd factor to OTP from 1 June 2021 to 14 March 2022. This is applicable to all issuers irrespective of the 2nd factor to OTP to be used. In lieu of a 2nd factor to OTP, Issuers are expected to use OTP + 3DS data profiling in the period between 1 June 2021 and 14 March 2022

Find out more Click through arrow