Strong Customer Authentication (SCA) Implementation
What this control requires
Implement SCA using 2+ independent factors (knowledge/possession/inherence) for payment initiation and account access. Apply EBA RTS-approved exemptions with fraud rate monitoring. Implement dynamic linking for payment transactions. Target fraud rate below EBA reference rates.
Other PSD2 controls
EU_PSD2-CTRL-001 - Daily safeguarding reconciliationEU_PSD2-CTRL-002 - Critical ICT incident reportingEU_PSD2-CTRL-003 - GDPR breach notification workflowEU_PSD2-CTRL-004 - AML suspicious transaction monitoringEU_PSD2-CTRL-005 - Quarterly PCI vulnerability assessmentEU_PSD2-CTRL-006 - Outsourcing provider oversightEU_PSD2-CTRL-007 - DORA Register of Information maintenanceEU_PSD2-CTRL-008 - CTIF suspicious activity escalationEU_PSD2-CTRL-009 - NIS2 cyber resilience testingEU_PSD2-CTRL-010 - Instant payment availability monitoringPSD2-A10-001 - Own Funds Capital Adequacy ProgrammePSD2-A5-001 - Authorisation Conditions Ongoing Compliance