SCA: enforcement delayed
The FCA has taken the decision to delay the enforcement of strong customer authentication (SCA), set in the Payment Services Regulations 2017 (PSRs), by a further 18 months.
Strong Customer Authentication, are intended to enhance the security of payments and limit fraud during this authentication process. SCA affects the way banks or other payment services providers check that the person requesting access to their account or trying to make a payment is the person permitted to make a payment and validate specific payment instructions.
SCA applies when a payer:
- initiates an electronic payment transaction
- accesses their payment account online
- carries out any action remotely that may imply a risk of payment fraud
The new deadline for enforcement of SCA is now 14 March 2021. Any firm that fails to comply with the requirements for SCA, after this date, will be subject to full FCA supervisory and enforcement action as appropriate.
The FCA indicated that all parties involved in card-not-present transactions, both FCA regulated and unregulated, should continue to work together over the next 18 months to ensure the smooth and timely implementation of SCA by 14 March 2021.
SCA and PSD2: same deadline but a 6-month transition period
Account servicing payment service providers are required to have a PSD2-compliant way to provide TPPs with access to account data and payment functionality by 14 September 2019. This is either by a dedicated interface based on application programming interface standards or a modified customer interface. This remains the case.
However, to avoid disruption to consumers and TPPs the FCA has agreed an adjustment period of six months. Therefore, in certain circumstances, firms have until 14 March 2020 to implement SCA for online banking.
After 14 March 2020, failure to comply with the requirements for SCA and identification will be subject to full FCA supervisory and enforcement action as appropriate.
This is likely to mean that some, but not all, customers may not be asked for strong customer authentication when accessing their account online until 14 March 2020. Firms are expected to communicate with customers about any relevant changes to their online banking, including timings of such changes.
Latest News from
UKRN publishes a report into Infrastructure Data Sharing13/09/2019 16:05:00
UKRN publishes a report into Infrastructure Data Sharing, with a series of short and long-term recommendations for key decision-makers.
techUK members survey: How prepared are members for a no deal Brexit?13/09/2019 15:05:00
techUK has surveyed its members to gather their views on a no deal exit on October 31 2019, how prepared our members are for no deal on this date and what steps they would like to see the Government take to support them through a no deal outcome.
techUK and Digital Policing Portfolio enter into strategic partnership13/09/2019 14:05:00
techUK is proud to announce the strategic partnership with the Digital Policing Portfolio.
DCMS Publish Call for Views on EU Cybersecurity Act13/09/2019 08:05:00
Call for Views published on the UK's proposed approach to cyber security certification following the UK’s departure from the EU
Who’s leading on tech policy in the new European Commission?10/09/2019 14:05:00
Member States put forward their nominees for the new European Commissioners last week. President-elect Ursula von der Leyen has now allocated titles and portfolios...
Report for EC: Using millimeter bands for the Unions 5G ecosystem04/09/2019 16:05:00
This is study on using millimetre waves bands for the deployment of the 5G ecosystem in the Union.
Building the Smarter State campaign week 2019 | #techUKSmarterState02/09/2019 16:25:00
This Campaign Week (2- 6 September) will unpack what the smarter state will look like and the technologies that will help make the vision a reality.
Who are the new nominees for the European Commission?30/08/2019 09:20:00
Sabina Ciofu, Head of EU and Trade Policy, takes look at the new nominees for the European Commission.