Strong Customer Authentication

Strong Customer Authentication (SCA) is a new set of rules that will change how you confirm your identity when making purchases online. The implementation of SCA requires merchants and Payment Service Providers (PSPs) to work together with technology suppliers, card schemes and many others to deliver SCA in a way which works well for customers.

The Financial Conduct Authority (FCA) announced and agreed to a managed rollout for SCA with UK Finance to give the payments and e-commerce industry extra time to implement SCA.

To facilitate ongoing commitment to the managed rollout and for the best customer and industry outcomes, UK Finance set up a central Programme Management Office. In the managed rollout, we propose a number of measures aimed at implementing SCA at pace, but also in a way that is structured to help coordinate as well as help answer the remaining tricky questions the industry still has. This page will be regularly updated with information for the industry, merchants and consumers.

The FCA has granted the industry additional time to implement SCA. The enforcement date is currently 14 March 2022 but the FCA expects the industry to maintain momentum in preparing for SCA with a sprint Ramp Up starting on 18 January 2022 (click here for information).

The focus of the rollout is a technology called 3DSecure which will help to facilitate the authentication of the majority of remote card-based transactions (Card Not Present transactions). However, there are other SCA compliant solutions available in the market, such as those provided by Payment Initiation Services (e.g. through Open Banking), Apple Pay or Google Pay as well as other potential solutions.

It is important to remember that some documents previously published on this site will still refer to the end of the managed rollout as March 2021, or 14 September 2021. Please note the enforcement date is now 14 March 2022.

INFORMATION FOR STAKEHOLDERS