EU’s Strong Customer Authentication comes into force

But concerns still remain that the financial industry's ecosystem and infrastructure aren’t fully ready for SCA

Financial institutions must, from 14 March, abide by the Financial Conduct Authority (FCA) deadline for implementing Strong Customer Authentication (SCA) procedures for online banking.

The Second Payment Services Directive (PSD2) effort by the European Union (EU) to standardise security procedures, which came into force on 14 September last year, is approaching the end of the six-month delay enforced by the FCA. 

Advertisement - Article continues below

For e-commerce transactions, the changes will in effect come into force from March 2021, which means an 18-month implementation window.

Banks and other financial entities in the UK, by Saturday, will be expected to fully comply with the regulations, which involves implementing additional verification checks for online banking customers, such as multifactor authentication (MFA).

The changes mean that customers will no longer be able to checkout online using just credit or debit card details, with an additional form of verifiable ID also required. It’s been heralded as an important step to improve security around financial transactions, but businesses may fear the customer experience disruption that an additional check may lead to.

“Ever-rising fraud levels are linked to the consumer preference of mobile e-commerce, forcing regulation to keep pace with innovation,” said CEO of Veridium James Stickland. 

“Businesses have had an extended period of six months, in addition to the two years since the initial announcement, and there is no legitimate reason not to be compliant. A failure to integrate Strong Customer Authentication demonstrates a disregard for consumer protection - it should have been prioritised long ago and viewed as a business differentiator.”

Advertisement - Article continues below
Advertisement - Article continues below

Although there will be benefits in terms of security, detractors of the regulation worry about the effect it can have on consumer behaviour, and serve as a barrier to business. Stickland suggests these assumptions are false, however, because consumers will value the sense of confidence that their financial information and payments are safe when making transactions.

“While the primary purpose of this regulation has been to check large-scale online fraud, many have raised concerns that SCA will lead to poor customer experience,” said Venkatesh Varadarajan, a partner in financial services at Infosys Consulting.

“There will be a significant increase in online transactions that will need a ‘step-up’ in authentication. Many retailers don’t have fond memories of the technology around 3D Secure that led to poor customer experience and high shopping basket abandonment rates.”

Among the wider concerns are that the ecosystem and infrastructure aren’t fully ready for SCA, mainly due to past concerns, as well as the lack of knowledge about options available to financial institutions.

Advertisement - Article continues below

 “In terms of solutions, there are newer technologies available, like 3D Secure 2, which addresses some of the concerns,” Varadarajan continued. “Retailers and payments firms must explore their options to strike the right balance between managing fraud risks and minimising disruption for customers.

“Some good practices already exist. Both Apple Pay and Google Pay already use two-factor authentication, using a password, fingerprint, or face-scanning technology - as well as card details - to authenticate a customer making a purchase.  

“The final critical piece is communicating the benefits of this new approach to consumers, highlighting how it enhances security and reduces fraud. With these levers and a planned approach, the ecosystem can ensure readiness for the regulation within the March 2021 timeframe.”

Featured Resources

Preparing for long-term remote working after COVID-19

Learn how to safely and securely enable your remote workforce

Download now

Cloud vs on-premise storage: What’s right for you?

Key considerations driving document storage decisions for businesses

Download now

Staying ahead of the game in the world of data

Create successful marketing campaigns by understanding your customers better

Download now

Transforming productivity

Solutions that facilitate work at full speed

Download now

Most Popular

Google Android

Over two dozen Android apps found stealing user data

7 Jul 2020

How to find RAM speed, size and type

24 Jun 2020

The road to recovery

30 Jun 2020