September 10th 2019
In Focus: Ongoing SCA Changes Around Europe
The goalpost for Strong Customer Authentication (SCA) seems to be moving constantly, with different countries taking different approaches to the mandate. Deadlines have been extended, and many merchants remain uncertain about when and how implementation will affect them. We’ve compiled a list of updates from countries across Europe to keep you updated with the latest news and developments.
Hungary
13/09/2019 – Three-year migration period with different targets until the final deadline 14/09/2020
What does this mean for merchants?
- SCA unlikely to be required for most transactions
- Merchants must be aware of testing requirements and proposed milestones for compliance
France
09/07/2019 – Three-year migration period with different targets until the final deadline 01/06/2022
What does this mean for merchants?
- SCA unlikely to be required for most transactions
- Merchants must be aware of testing requirements and proposed milestones for compliance
United Kingdom
13/08/2019 – Migration period with different targets until the final deadline 14/03/2021
What does this mean for merchants?
- SCA will not be required for transactions after the original deadline
- Merchants must remain engaged with issuers and regulators with respect to contactless payments and other elements of SCA
- Merchants must prepare for the possibility of being included in SCA testing from February 2020
Denmark
05/09/2019 – Migration period with different targets until the final deadline 14/03/2021
What does this mean for merchants?
- SCA will not be required for transactions after the original deadline
- Merchants must remain engaged with issuers and regulators with respect to contactless payments and other elements of SCA
- Merchants must prepare for the possibility of being included in SCA testing from March 2021
Slovakia
14/08/2019m – Extension to deadline for implementing SCA for e-commerce card payments, no deadline agreed yet
What does this mean for merchants?
- SCA unlikely to be required for most transactions
- Flexibility at a national level even if EBA does not announce their own approach
- Length of transition period is yet to be announced
Norway
20/08/2019 – Extension to PSPs who notify the authority, no deadline agreed yet
What does this mean for merchants?
- SCA unlikely to be required for most transactions
- Merchants need to engage with issuers and regulators to remain up-to-date on specific plans
Belgium
27/08/2019 – Extension to deadline agreed with the Belgian banks but no timeline agreed yet
What does this mean for merchants?
- SCA unlikely to be required for most transactions
Individual multinational banks may still decline transactions and request SCA - Uncertainty around deadline makes it difficult for merchants to prepare
Sweden
04/09/2019 – Individual companies must ask for a delay if not ready by original timeline
What does this mean for merchants?
- SCA may be required for most transactions
- Merchants must engage with issuers and regulators to remain up-to-date on specific plans
Latvia
13/09/2019 – Extension to deadline for implementing SCA for e-commerce card payments, will follow EBA timeline
What does this mean for merchants?
- SCA unlikely to be required for most transactions
Individual multinational banks may still decline transactions and request SCA
EBA deadline extension may be less than 18 months
Italy
13/09/2019 – Extension to deadline for implementing SCA for e-commerce card payments, will follow EBA timeline
What does this mean for merchants?
- SCA unlikely to be required for most transactions
Individual multinational banks may still decline transactions and request SCA - EBA deadline extension may be less than 18 months
Merchants must contact issuers and acquirers to confirm that they have submitted a migration plan
Croatia
13/09/2019 – Extension to deadline for implementing SCA for e-commerce card payments, will follow EBA timeline
What does this mean for merchants?
- SCA unlikely to be required for most transactions
Individual multinational banks may still decline transactions and request SCA - EBA deadline extension may be less than 18 months
Spain
11/09/2019 – Extension to deadline for implementing SCA for e-commerce card payments, will follow EBA timeline
What does this mean for merchants?
- SCA unlikely to be required for most transactions
Individual multinational banks may still decline transactions and request SCA - EBA deadline extension may be less than 18 months
Romania
21/08/2019 – Extension to deadline for implementing SCA for e-commerce card payments, will follow EBA timeline
What does this mean for merchants?
- SCA unlikely to be required for most transactions
Individual multinational banks may still decline transactions and request SCA - EBA deadline extension may be less than 18 months
Ireland
08/08/2019 – Extension to deadline for implementing SCA for e-commerce card payments, will follow EBA timeline
What does this mean for merchants?
- SCA unlikely to be required for most transactions
Individual multinational banks may still decline transactions and request SCA - EBA deadline extension may be less than 18 months
Netherlands
08/08/2019 – Extension to deadline for implementing SCA for e-commerce card payments, will follow EBA timeline
What does this mean for merchants?
- SCA unlikely to be required for most transactions
Individual multinational banks may still decline transactions and request SCA - EBA deadline extension may be less than 18 months
Czechia
14/08/2019 – Extension to deadline for implementing SCA for e-commerce card payments, will follow EBA timeline
What does this mean for merchants?
- SCA unlikely to be required for most transactions
Individual multinational banks may still decline transactions and request SCA - EBA deadline extension may be less than 18 months
Estonia
14/08/2019 – Extension to deadline for implementing SCA for e-commerce card payments, will follow EBA timeline
What does this mean for merchants?
- SCA unlikely to be required for most transactions
Individual multinational banks may still decline transactions and request SCA - EBA deadline extension may be less than 18 months
Malta
14/08/2019 – Extension to deadline for implementing SCA for e-commerce card payments, will follow EBA timeline
What does this mean for merchants?
- SCA unlikely to be required for most transactions
Individual multinational banks may still decline transactions and request SCA - EBA deadline extension may be less than 18 months
Slovenia
15/08/2019 – Extension to deadline for implementing SCA for e-commerce card payments, will follow EBA timeline
What does this mean for merchants?
- SCA unlikely to be required for most transactions
Individual multinational banks may still decline transactions and request SCA - EBA deadline extension may be less than 18 months
Austria
19/08/2019 – Extension to deadline for implementing SCA for e-commerce card payments, will follow EBA timeline
What does this mean for merchants?
- SCA unlikely to be required for most transactions
Individual multinational banks may still decline transactions and request SCA - EBA deadline extension may be less than 18 months
Poland
19/08/2019 – Extension to deadline for implementing SCA for e-commerce card payments, will follow EBA timeline
What does this mean for merchants?
- SCA unlikely to be required for most transactions
Individual multinational banks may still decline transactions and request SCA - EBA deadline extension may be less than 18 months
Merchants must engage with issuers and regulators to remain up-to-date
Germany
21/08/2019 – Extension to deadline for implementing SCA for e-commerce card payments, will follow EBA timeline
What does this mean for merchants?
- SCA unlikely to be required for most transactions
Individual multinational banks may still decline transactions and request SCA - EBA deadline extension may be less than 18 months
Greece
26/08/2019 – Extension to deadline for implementing SCA for e-commerce card payments, will follow EBA timeline
What does this mean for merchants?
- SCA unlikely to be required for most transactions
Individual multinational banks may still decline transactions and request SCA - EBA deadline extension may be less than 18 months
Check that issuers and acquirers have submitted a migration plan
Portugal
29/08/2019 – Extension to deadline for implementing SCA for e-commerce card payments, will follow EBA timeline
What does this mean for merchants?
- SCA unlikely to be required for most transactions
Individual multinational banks may still decline transactions and request SCA - EBA deadline extension may be less than 18 months
Luxembourg
30/08/2019 Extension to deadline for implementing SCA for e-commerce card payments, will follow EBA timeline
What does this mean for merchants?
- SCA unlikely to be required for most transactions
Individual multinational banks may still decline transactions and request SCA - EBA deadline extension may be less than 18 months
Merchants must engage with issuers and regulators to remain up-to-date
Cyprus
02/09/2019 Extension to deadline for implementing SCA for e-commerce card payments, will follow EBA timeline
What does this mean for merchants?
- SCA unlikely to be required for most transactions
Individual multinational banks may still decline transactions and request SCA - EBA deadline extension may be less than 18 months
Finland
05/09/2019 – Extension to deadline for implementing SCA for e-commerce card payments, will follow EBA timeline
What does this mean for merchants?
- SCA unlikely to be required for most transactions
Individual multinational banks may still decline transactions and request SCA - EBA deadline extension may be less than 18 months
Bulgaria
No delay, enforcing deadline on 14th September 2019.
What does this mean for merchants?
- SCA may be required for all transactions from 14th September 2019
Merchants must have implemented 3D-Secure version 1.0 at a minimum or version 2.1
Lithuania
No delay, enforcing deadline on 14th September 2019.
What does this mean for merchants?
- SCA may be required for all transactions from 14th September 2019
Merchants must have implemented 3D-Secure version 1.0 at a minimum or version 2.1 - Hungary
13/09/2019 Three-year migration period with different targets until the final deadline 14/09/2020