EU gives payments industry 18 months to implement strong customer authentication

Payment Services Directive (PSD2): Regulatory Technical Standards (RTS) enabling consumers to benefit from safer and more innovative electronic payments — European Commission — “The RTS makes strong customer authentication (SCA) the basis for accessing one’s payment account, as well as for making payments online. This means that to prove their identity users will have to provide at least two separate elements out of these three: something they know (a password or PIN code); something they own (a card, a mobile phone); and something they are (biometrics, eg fingerprint or iris scan)… The use of SCA will become mandatory 18 months after the entry into force of the RTS, ie once the RTS is published in the Official Journal of the EU, scheduled for September 2019.”