Strong Customer Authentication

Strong Customer Authentication (SCA) is a new set of rules that will change how you confirm your identity when making purchases online. The implementation of SCA requires merchants and Payment Service Providers (PSPs) to work together with technology suppliers, card schemes and many others to deliver SCA in a way which works well for customers.

The Financial Conduct Authority (FCA) announced and agreed to a managed rollout for SCA with UK Finance to give the payments and e-commerce industry extra time to implement SCA.

To facilitate ongoing commitment to the managed rollout and for the best customer and industry outcomes, UK Finance set up a central Programme Management Office. In the managed rollout, we propose a number of measures aimed at implementing SCA at pace, but also in a way that is structured to help coordinate as well as help answer the remaining tricky questions the industry still has. This page will be regularly updated with information for the industry, merchants and consumers.

In light of the impact of Covid-19 on key stakeholders, and to minimise the impact on both consumers and e-merchants, the FCA has updated their Strong Customer Authentication page to give an additional six months to implement strong customer authentication (SCA) for e-commerce, to a revised date of 14 September 2021. This can be found here.

The FCA statement clearly expects momentum to be maintained but recognises that additional time may be needed due to the impacts of Covid-19.

The UK Finance SCA Programme Team have developed a revised implementation roadmap which can be found here.

The focus of the rollout is a technology called 3DSecure which will help to facilitate the authentication of the majority of card-based transactions. However, there are other SCA compliant solutions available in the market, such as those provided by Payment Initiation Services (e.g. through Open Banking), Apple Pay or Google Pay as well as other potential solutions.

It is important to remember that some documents previously published on this site will still refer to the end of the managed rollout as March 2021, please note this is now 14 September 2021.


If you are a consumer with questions, please check here for more information

UK Finance Communication on Strong Customer Authentication
Strong Customer Authentication: Communications for Consumers

Get in touch

If you are a Payment Service Provider (PSP), vendor or a merchant and would like to get involved in the programme, or to receive more information, please click the button below

Get in touch Click through arrow

Deadline to implement strong customer authentication (SCA)


The UK Finance SCA Programme Team want to communicate a delay to the implementation of 2nd factor to OTP from 1 June 2021 to 14 September 2021. This is applicable to all issuers irrespective of the 2nd factor to OTP to be used. We are currently seeking an opinion from the Information Commissioner’s Office on the use of Substantial Public Interest under GDPR in the context of Behavioural Biometrics for OTP. We will communicate this opinion as soon as it is received. In lieu of a 2nd factor to OTP, Issuers are expected to use OTP + 3DS data profiling in the period between 1 June 2021 and 14 September 2021

Find out more Click through arrow