News and resources on cyber and physical threats to banks and fintechs worldwide.
FCA extends SCA deadline by a further six months

FCA extends SCA deadline by a further six months

The UK's Financial Conduct Authority is to delay the implementation of strong customer authentication rules by six months in an effort to minimise disruption to consumers and merchants during the ongoing Covid-19 crisis.

The move to set back the date for implementation of the rules - which demands a two-step verification process for all online purchases over EUR30 - from 14 March 2021 to 14 September 2021, comes amid mounting pressure from the European payments industry.

The FCA's ruling is likely to be followed by national authorities across Europe.

The European Payment Institutions Federation (EPIF) earlier this month wrote to the European Banking Authority - which favours a December 2020 timeline - arguing for the possibility of "at least an additional six months".

The EPIF, which counts Visa and Mastercard among its members, argued that the "exceptional circumstances" of the Coronavirus pandemic is "putting an additional strain on the limited resources for all parties involved in the payment chain", making it difficult to concentrate on migrating to the new rules.

In a statement, the FCA says: "We expect UK Finance, as coordinator for the industry, to discuss the detailed phased implementation plan and critical path with all stakeholders and agree it with the FCA as soon as possible. In the meantime, firms should continue with the necessary preparatory activities such as robust end-to-end testing.

"After 14 September 2021, any firm that fails to comply with the requirements for SCA will be subject to full FCA supervisory and enforcement action."

The decision has been welcomed by Charles Damen, SVP product strategy, Worldpay Merchant Solutions, FIS.

“We believe a delay will be a welcome relief for merchants given the current situation with COVID-19, and will give them more time to become 'SCA-ready'," he says. "The manner in which payments are processed needs to fundamentally change ahead of a revised SCA deadline. Over 70 percent of payments processed today are not compliant with SCA so there is much for merchants to do in becoming “SCA-ready” well in advance of this deadline. At a minimum, for merchants this means implementing the capability to authenticate payments using the latest version of 3D Secure - but for those looking to ensure the best customer experience and to maximise acceptance rates, this will also mean implementing support for SCA exemptions and exclusions.”

Comments: (3)

John Brawley
John Brawley - Elavon - Glasgow 30 April, 2020, 13:45Be the first to give this comment the thumbs up 0 likes

Seems a sesnibile approach to take.   


A Finextra member
A Finextra member 30 April, 2020, 14:091 like 1 like

Let's hope the Europan Banking Authority in Europe will follow the lead (and opportunity for alignment) of a September 2021 implementation date. 

Ketharaman Swaminathan
Ketharaman Swaminathan - GTM360 Marketing Solutions - Pune 01 May, 2020, 13:09Be the first to give this comment the thumbs up 0 likes

A month ago, I predicted in response to this Finextra article that regulators could use Covid-19 crisis as the fall guy to defer / cancel SCA mandates. Good to see one regulator taking the cue.