/security

News and resources on cyber and physical threats to banks and fintechs worldwide.

New Strong Customer Authentication rules could cost Europe EUR57bn - Stripe

Source: Stripe

Today, payments infrastructure company Stripe released a new study conducted by 451 Research forecasting that Europe stands to lose €57 billion in economic activity in the first 12 months after SCA takes effect.

The findings are based on surveys conducted with 500 qualified payment professionals at online businesses and 1000 consumers in the UK, France, Germany, the Netherlands and Spain.

European businesses are unprepared for SCA and small businesses will bear the brunt of it

With just over three months to go before SCA is enforced, preparedness remains remarkably low: 40% of businesses aware of SCA say they feel prepared to address its requirements. Most businesses are now racing against the clock to become compliant, with 44% expecting to be ready only on the exact day SCA takes effect (September 14).

SCA will disproportionately impact small businesses: three in five businesses with under 100 employees are either unfamiliar with SCA, don’t plan on being compliant before September, or are unsure when they will be ready. Contrast this with larger merchants of more than 5,000 employees where only 1 in 25 payment professionals are unaware.

Jordan McKee, analyst at 451 Research said: “SCA is unequivocally the single most disruptive event to impact European digital commerce, and many businesses—especially smaller ones—have yet to fully grasp its extensive impact. Our study indicates low levels of preparedness and, most troublingly, a lack of appreciation for how SCA will transform how European consumers will buy online.”

Businesses underestimate the complexity of SCA compliance tools: exemptions and 3D Secure 2

Many businesses are preparing to minimize the transactions for which SCA will be required. This can be achieved through a set of exemptions, which allow, for example, recurring payments or small purchases (under €30) to be approved without extra layers of friction.

However, businesses are dramatically underestimating the complexity and resource burden of managing and optimizing these exemptions; 50% of respondents plan to handle management of exemptions completely in-house. The challenge is that exemptions are complex to administer, especially for smaller businesses, and require visibility on how card networks and banks will apply exemptions across Europe. For instance, purchases under €30 are exempt from SCA, but SCA will be requested by the customer’s bank once five transactions below €30 have been made or the total value of those transactions reaches €100.

The most recent version of 3D Secure, which to date has been known by consumers under names such as Verified by Visa and Mastercard Secure Code, is emerging as a popular SCA-compliant way to accept payments online. However, one in four online businesses are not yet familiar with it. Further, for those that are familiar, 24% believe they will only implement it after the September deadline.

“SCA will make or break internet businesses. The urgency to get ready for it cannot be overstated,” commented Guillaume Princen, Head of Continental Europe at Stripe. “We’re building infrastructure to insulate internet businesses from this kind of regulatory complexity. Our ambition is to accelerate online commerce and empower innovators to easily experiment with new internet business models.”

SCA will exacerbate low consumer tolerance for bad checkouts, causing a rise in cart abandonment

Just 47% of European consumers feel today’s online checkout process is ‘very easy’ and the most attractive customers for online businesses often abandon purchases when encountering a poor checkout experience. For example, 74% of Gen Z shoppers have abandoned an online purchase in the past six months due to a bad checkout experience. Over half (52%) of online shoppers who abandon a purchase end up completing the transaction with a competing merchant.

Against this backdrop of low consumer tolerance for poor checkout design, SCA is likely to make matters worse. 73% of shoppers are unaware of new authentication requirements coming to the online checkout experience in September. SCA increases the likelihood that shoppers will abandon shopping carts in September when they encounter unexpected obstacles to everyday online purchases, such as paying for taxis, ordering food delivery, and subscribing to TV and music services.

Many consumers prefer SMS passcodes over Apple Pay despite convenience and security benefits

When asked what they believe to be the best authentication experience, 54% of consumers said one-time passcodes, while 26% said fingerprint recognition (like Touch ID on Apple devices). Despite this apparent low preference for fingerprint recognition, 43% still believe that it is “most secure”. This indicates a need to help consumers get more comfortable with mobile wallets like Apple Pay and Google Pay as a secure and easy way to check out online.

Major customer milestones for Stripe’s international expansion

Today, Stripe also announced that it is powering payments for WeWork, Rappi, Github, AJ Bell, Turo and FX Pro. Facilitating money movement for these complex, global businesses in Europe, Latin America and North America marks a major milestone in Stripe’s international expansion.

Guillaume Princen, Head of Continental Europe at Stripe, commented: “We’re building a goal payments and treasury network to power economic connectivity between every combination of currencies, countries, payment methods, and regional bank networks in the world. By stitching together and virtualizing the world’s financial rails, we're allowing companies to accelerate their business growth by moving money further and faster.” 

Comments: (1)

A Finextra member
A Finextra member 05 June, 2019, 08:05Be the first to give this comment the thumbs up 0 likes

Some interesting statistics. Like all new regulations coming in, there is always concern around the impact on and readiness of businesses. GDPR is a good example,and over a year on and there hasn't been any major fallout.

Looking at countries where SCA has effectively already been in place for years (Northern Europe), we see smoother checkout experiences than elsewhere in Europe, with smart and secure technology enabling it. 

I don't doubt there'll be headaches and pain, but I do doubt the level described, and I see short term pain for long term gain.