Governance & assurance

Strong customer authentication (SCA)

Published Reviewed

Written and reviewed by Fredrik Surtell

Strong customer authentication is the PSD2 requirement that electronic payments and account access be verified with at least two independent factors from the categories knowledge, possession, and inherence — for example a device plus a biometric. In Sweden, BankID is the everyday embodiment. Payment service providers must apply SCA unless a defined exemption such as low-value or low-risk transactions applies, and liability shifts to whoever skipped it.

Läs definitionen på svenska: Stark kundautentisering (SCA)

Also known as: Two-factor authentication · Tvåfaktorsautentisering

Where this term does its work

This definition is general information, not legal advice. Always verify the current official source.