Skip to content

Strong customer authentication

SCA combines independent evidence to authenticate the payer. Successful authentication must be distinguished from payment status.

Also known asSCA
E-Commerce

What is strong customer authentication?

Strong customer authentication, or SCA, is a concept from European payment rules. It bases authentication on at least two independent factors from different categories: knowledge, possession and personal characteristics such as biometrics. Compromising one factor must not undermine the reliability of the other. Whether SCA is required for a transaction or an exemption applies needs separate assessment.

A fictional specialist bookshop plans a payment flow with confirmation in a registered banking app and a secret PIN. The plan distinguishes evidence of the registered device from knowledge of the PIN; protecting and checking both forms part of the payment service’s procedure. The shop display must then reflect the associated payment status. Successful authentication alone does not confirm that the payment has been executed.

Sources

Articles on this topic

E-Commerce with ASES

Online shops, marketplaces and B2B portals