<!-- headlesslaw {"release":{"id":"2d86bd12ba77a288053b34ea2517324b92d03c8039b7f5d156fa4002421384a1","published":"2026-11-10T16:06:46Z","pinned":false},"limits":{"coverage":{"history":"full","held_since":"2015-12-23","gaps":[],"covered":["PSD2 L1"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"2d86bd12ba77a288053b34ea2517324b92d03c8039b7f5d156fa4002421384a1","release_published":"2026-11-10T16:06:46Z","checked_at":"2026-11-09","checked_against":"EUR-Lex"},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/psd2/articles/97","url":"https://www.headlesslaw.com/psd2/articles/97","title":"Article 97 — Authentication","family":"l1_generated","work_id":"psd2","status":"in_force","force_status":"in_force","date_state":"current","requested_date":null,"as_of":"2026-11-11","applies_from":null,"application":null,"version_label":"Consolidated version of 23 December 2015","check":{"against":"EUR-Lex","on":"2026-11-09"},"check_result":"matched","official_url":"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02015L2366-20250117","valid_from":"2015-12-23","valid_until":null,"revision":1,"content_id":"608c88eb7178893d","change_date":null,"nearest_versions":["2015-12-23"],"first_text_date":"2015-11-25","correction_applies":false,"versions":["2015-12-23"],"version_url":"https://www.headlesslaw.com/psd2/articles/97/versions/2015-12-23","revision_url":"https://www.headlesslaw.com/psd2/articles/97/versions/2015-12-23/rev/608c88eb7178893d","versions_url":"https://www.headlesslaw.com/psd2/articles/97/versions","relations_url":"https://www.headlesslaw.com/psd2/articles/97/relations","source_line":null,"attribution":null}} -->
---
title: "Article 97 — Authentication"
type: regulation
legal_status: in_force
source: "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02015L2366-20250117"
source_retrieved: 2026-10-08
shortTitle: "Article 97 — Authentication"
instrument_type: level1_directive
authority: Commission
binding: true
binding_character: binding
mica_level2: false
legal_basis: "Directive (EU) 2015/2366"
instrument: psd2
celex: "32015L2366"
regulation: PSD2
regulation-full: "Directive (EU) 2015/2366"
article: 97
status: in_force
object_id: eu.psd2.legal_text.article.97
text_version: "Consolidated version of 17 January 2025"
source_url: "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02015L2366-20250117"
check_status: matched
verified: true
last_checked: 2026-11-09
---

*In force · Consolidated version of 17 January 2025 · Verified 9 Nov 2026 · [Official source](https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02015L2366-20250117)*

1. <a id="p-1"></a>Member States shall ensure that a payment service provider applies strong customer authentication where the payer:

    <a id="p-1-a"></a>**(a)** accesses its payment account online;

    <a id="p-1-b"></a>**(b)** initiates an electronic payment transaction;

    <a id="p-1-c"></a>**(c)** carries out any action through a remote channel which may imply a risk of payment fraud or other abuses.
2. <a id="p-2"></a>With regard to the initiation of electronic payment transactions as referred to in point (b) of paragraph 1, Member States shall ensure that, for electronic remote payment transactions, payment service providers apply strong customer authentication that includes elements which dynamically link the transaction to a specific amount and a specific payee.
3. <a id="p-3"></a>With regard to paragraph 1, Member States shall ensure that payment service providers have in place adequate security measures to protect the confidentiality and integrity of payment service users’ personalised security credentials.
4. <a id="p-4"></a>Paragraphs 2 and 3 shall also apply where payments are initiated through a payment initiation service provider. Paragraphs 1 and 3 shall also apply when the information is requested through an account information service provider.
5. <a id="p-5"></a>Member States shall ensure that the account servicing payment service provider allows the payment initiation service provider and the account information service provider to rely on the authentication procedures provided by the account servicing payment service provider to the payment service user in accordance with paragraphs 1 and 3 and, where the payment initiation service provider is involved, in accordance with paragraphs 1, 2 and 3.

## Related Level 2 and Level 3

### Guidance and Q&A

- [EBA Q&A 2018_4030 — Q&A — Geographical scope of application of the RTS on strong \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2018-4030-geographical-scope-of-application-of-the-rts-on-strong.md)
- [EBA Q&A 2018_4031 — Q&A — Applicability of SCA to ‘card payments initiated \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2018-4031-applicability-of-sca-to-card-payments-initiated-by-the.md)
- [EBA Q&A 2018_4032 — Q&A — Criteria for the application of the transaction risk \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2018-4032-criteria-for-the-application-of-the-transaction-risk.md)
- [EBA Q&A 2018_4033 — Q&A — Criteria for the application of the transaction risk \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2018-4033-criteria-for-the-application-of-the-transaction-risk.md)
- [EBA Q&A 2018_4034 — Q&A — Criteria for the application of the transaction risk \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2018-4034-criteria-for-the-application-of-the-transaction-risk.md)
- [EBA Q&A 2018_4035 — Q&A — Criteria for the application of the transaction risk \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2018-4035-criteria-for-the-application-of-the-transaction-risk.md)
- [EBA Q&A 2018_4036 — Q&A — Application of the low-value contactless exemption \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2018-4036-application-of-the-low-value-contactless-exemption.md)
- [EBA Q&A 2018_4038 — Q&A — Applicability of the low-value contactless exemption \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2018-4038-applicability-of-the-low-value-contactless-exemption-to.md)
- [EBA Q&A 2018_4039 — Q&A — Qualification of SMS OTP as an authentication factor \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2018-4039-qualification-of-sms-otp-as-an-authentication-factor.md)
- [EBA Q&A 2018_4040 — Q&A — Currency conversion of the EUR thresholds contained \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2018-4040-currency-conversion-of-the-eur-thresholds-contained-in-the.md)
- [EBA Q&A 2018_4041 — Q&A — Display of incorrect authentication factors in case \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2018-4041-display-of-incorrect-authentication-factors-in-case-of.md)
- [EBA Q&A 2018_4047 — Q&A — Review of security measures \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2018-4047-review-of-security-measures.md)
- [EBA Q&A 2018_4048 — Q&A — Applicability of Strong Customer Authentication (SCA) \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2018-4048-applicability-of-strong-customer-authentication-sca-to.md)
- [EBA Q&A 2018_4049 — Q&A — Persistent authentication for wearable devices \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2018-4049-persistent-authentication-for-wearable-devices.md)
- [EBA Q&A 2018_4052 — Q&A — EMV cards and EMV terminals supporting online \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2018-4052-emv-cards-and-emv-terminals-supporting-online-authentication.md)
- [EBA Q&A 2018_4053 — Q&A — Length of authentication codes \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2018-4053-length-of-authentication-codes.md)
- [EBA Q&A 2018_4054 — Q&A — Confidentiality of the application cryptogram for EMV \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2018-4054-confidentiality-of-the-application-cryptogram-for-emv.md)
- [EBA Q&A 2018_4055 — Q&A — Confidentiality of offline PIN \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2018-4055-confidentiality-of-offline-pin.md)
- [EBA Q&A 2018_4056 — Q&A — Application of the exemption for transactions to trusted \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2018-4056-application-of-the-exemption-for-transactions-to-trusted.md)
- [EBA Q&A 2018_4057 — Q&A — SCA at vending machines without PIN pad \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2018-4057-sca-at-vending-machines-without-pin-pad.md)
- [EBA Q&A 2018_4058 — Q&A — Transactions initiated via Interactive Voice Response \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2018-4058-transactions-initiated-via-interactive-voice-response-ivr.md)
- [EBA Q&A 2018_4060 — Q&A — Exemption for secure corporate payment processes \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2018-4060-exemption-for-secure-corporate-payment-processes-and.md)
- [EBA Q&A 2018_4065 — Q&A — Accessing payment account online in web browser shall \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2018-4065-accessing-payment-account-online-in-web-browser-shall.md)
- [EBA Q&A 2018_4068 — Q&A — Exemption from strong customer authentication (SCA) \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2018-4068-exemption-from-strong-customer-authentication-sca-for.md)
- [EBA Q&A 2018_4076 — Q&A — On the access to trusted beneficiaries lists (RTS Art 13) \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2018-4076-on-the-access-to-trusted-beneficiaries-lists-rts-art-13-by.md)
- [EBA Q&A 2018_4077 — Q&A — On the use and storage of Personalised Security \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2018-4077-on-the-use-and-storage-of-personalised-security-credentials.md)
- [EBA Q&A 2018_4083 — Q&A — On the application of SCA when cancelling a payment \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2018-4083-on-the-application-of-sca-when-cancelling-a-payment.md)
- [EBA Q&A 2018_4108 — Q&A — Scope of ‘initiation of an electronic payment \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2018-4108-scope-of-initiation-of-an-electronic-payment-transaction.md)
- [EBA Q&A 2018_4110 — Q&A — Data authentication standards \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2018-4110-data-authentication-standards.md)
- [EBA Q&A 2018_4131 — Q&A — Payee-initiated transactions with irregular period \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2018-4131-payee-initiated-transactions-with-irregular-period-or.md)
- [EBA Q&A 2018_4133 — Q&A — Applicability of SCA to wallet solutions \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2018-4133-applicability-of-sca-to-wallet-solutions.md)
- [EBA Q&A 2018_4135 — Q&A — SMS OTP and credit card as a two authentication factor \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2018-4135-sms-otp-and-credit-card-as-a-two-authentication-factor.md)
- [EBA Q&A 2018_4141 — Q&A — Authentication code \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2018-4141-authentication-code.md)
- [EBA Q&A 2018_4152 — Q&A — Review of the security measures: Audit report \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2018-4152-review-of-the-security-measures-audit-report.md)
- [EBA Q&A 2018_4153 — Q&A — Review of Security Measures - Auditors expertise \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2018-4153-review-of-security-measures-auditors-expertise.md)
- [EBA Q&A 2018_4155 — Q&A — Responsibility of national authority \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2018-4155-responsibility-of-national-authority-with-regards-to-audit.md)
- [EBA Q&A 2018_4177 — Q&A — Application of SCA when a PSU accesses payment \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2018-4177-application-of-sca-when-a-psu-accesses-payment-transactions.md)
- [EBA Q&A 2018_4225 — Q&A — Contactless payments at point of sale - Applications \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2018-4225-contactless-payments-at-point-of-sale-applications-of-the.md)
- [EBA Q&A 2018_4226 — Q&A — Contactless payments at point of sale - Applications \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2018-4226-contactless-payments-at-point-of-sale-applications-of-the.md)
- [EBA Q&A 2018_4315 — Q&A — Strong Authentication \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2018-4315-strong-authentication.md)
- [EBA Q&A 2018_4404 — Q&A — Subsequent instances of a recurring card payment \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2018-4404-subsequent-instances-of-a-recurring-card-payment.md)
- [EBA Q&A 2018_4414 — Q&A — Usage of SMS for dynamic linking \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2018-4414-usage-of-sms-for-dynamic-linking.md)
- [EBA Q&A 2018_4415 — Q&A — Dynamic linking for batch transactions \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2018-4415-dynamic-linking-for-batch-transactions.md)
- [EBA Q&A 2018_4429 — Q&A — Application of the Low Value Transaction Limits \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2018-4429-application-of-the-low-value-transaction-limits.md)
- [EBA Q&A 2018_4435 — Q&A — Dynamic Linking for batch payments \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2018-4435-dynamic-linking-for-batch-payments.md)
- [EBA Q&A 2019_4450 — Q&A — Potential inconsistency on the application \[Rejected question\]](../level-3/q-and-a/eba/eba-qa-2019-4450-potential-inconsistency-on-the-application-of-strong.md)
- [EBA Q&A 2019_4484 — Q&A — Strong customer authentication requirement \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2019-4484-strong-customer-authentication-requirement-on-pay-by.md)
- [EBA Q&A 2019_4556 — Q&A — Definition of payee for dynamic linking \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2019-4556-definition-of-payee-for-dynamic-linking.md)
- [EBA Q&A 2019_4560 — Q&A — SCA profiles and multiple-use of devices \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2019-4560-sca-profiles-and-multiple-use-of-devices.md)
- [EBA Q&A 2019_4594 — Q&A — Definition of an electronic remote payment transaction \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2019-4594-definition-of-an-electronic-remote-payment-transaction.md)
- [EBA Q&A 2019_4637 — Q&A — Separation of factors for strong customer authentication \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2019-4637-separation-of-factors-for-strong-customer-authentication.md)
- [EBA Q&A 2019_4664 — Q&A — Applicability of SCA to electronically processed SEPA \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2019-4664-applicability-of-sca-to-electronically-processed-sepa.md)
- [EBA Q&A 2019_4740 — Q&A — Compliance with SCA in offline mode on an aircraft \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2019-4740-compliance-with-sca-in-offline-mode-on-an-aircraft-without.md)
- [EBA Q&A 2019_4788 — Q&A — Treatment of electronic bookings similar to Mail Order \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2019-4788-treatment-of-electronic-bookings-similar-to-mail-order-and.md)
- [EBA Q&A 2019_4790 — Q&A — Keyed Mail Order or Telephone Order (MO-TO) transactions \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2019-4790-keyed-mail-order-or-telephone-order-mo-to-transactions.md)
- [EBA Q&A 2019_4791 — Q&A — Processing payments for hotel reservations \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2019-4791-processing-payments-for-hotel-reservations.md)
- [EBA Q&A 2019_4792 — Q&A — Merchant Initiated Transactions exemption for hotel \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2019-4792-merchant-initiated-transactions-exemption-for-hotel.md)
- [EBA Q&A 2019_4794 — Q&A — Consumer mandate under Merchant Initiated Transactions \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2019-4794-consumer-mandate-under-merchant-initiated-transactions.md)
- [EBA Q&A 2019_4795 — Q&A — Validity of SCA \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2019-4795-validity-of-sca.md)
- [EBA Q&A 2019_4796 — Q&A — Intermediaries and Merchant-ID \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2019-4796-intermediaries-and-merchant-id.md)
- [EBA Q&A 2019_4797 — Q&A — Merchant IDs and SCA \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2019-4797-merchant-ids-and-sca.md)
- [EBA Q&A 2019_4800 — Q&A — Whitelisting \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2019-4800-whitelisting.md)
- [EBA Q&A 2019_4827 — Q&A — Tokenised card details as a SCA possession element. \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2019-4827-tokenised-card-details-as-a-sca-possession-element.md)
- [EBA Q&A 2019_4855 — Q&A — Application of the strong customer authentication (SCA) \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2019-4855-application-of-the-strong-customer-authentication-sca-in.md)
- [EBA Q&A 2019_4875 — Q&A — Failed Authentication Code \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2019-4875-failed-authentication-code.md)
- [EBA Q&A 2019_4910 — Q&A — Authentication code \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2019-4910-authentication-code.md)
- [EBA Q&A 2019_4937 — Q&A — SCA for contactless payments at a POS executed \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2019-4937-sca-for-contactless-payments-at-a-pos-executed-via-a-mobile.md)
- [EBA Q&A 2019_5054 — Q&A — Contingency Measures under Article 33 \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2019-5054-contingency-measures-under-article-33.md)
- [EBA Q&A 2020_5115 — Q&A — Using Trusted Beneficiary Lists to Auto Reject PISP \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2020-5115-using-trusted-beneficiary-lists-to-auto-reject-pisp.md)
- [EBA Q&A 2020_5124 — Q&A — SCA for staff assisted electronic channel \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2020-5124-sca-for-staff-assisted-electronic-channel.md)
- [EBA Q&A 2020_5133 — Q&A — Dynamic linking: transactions for which the final amount \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2020-5133-dynamic-linking-transactions-for-which-the-final-amount-is.md)
- [EBA Q&A 2020_5135 — Q&A — Payment Initiation Scope and Trusted Beneficiaries \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2020-5135-payment-initiation-scope-and-trusted-beneficiaries.md)
- [EBA Q&A 2020_5184 — Q&A — Obstacles to the payment initiation service \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2020-5184-obstacles-to-the-payment-initiation-service.md)
- [EBA Q&A 2020_5247 — Q&A — Clarification of remote payment for dynamic linking \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2020-5247-clarification-of-remote-payment-for-dynamic-linking.md)
- [EBA Q&A 2020_5288 — Q&A — Mount unattended contactless device on general goods \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2020-5288-mount-unattended-contactless-device-on-general-goods.md)
- [EBA Q&A 2020_5353 — Q&A — On the requirements for 'inherence' in strong customer \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2020-5353-on-the-requirements-for-inherence-in-strong-customer.md)
- [EBA Q&A 2020_5366 — Q&A — Clarification on where the creation of the authentication \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2020-5366-clarification-on-where-the-creation-of-the-authentication.md)
- [EBA Q&A 2020_5516 — Q&A — Perform SCA by reusing an element used \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2020-5516-perform-sca-by-reusing-an-element-used-in-an-authentication.md)
- [EBA Q&A 2020_5534 — Q&A — Bill-payment via postal service \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2020-5534-bill-payment-via-postal-service.md)
- [EBA Q&A 2020_5620 — Q&A — Use of behavioural data for SCA \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2020-5620-use-of-behavioural-data-for-sca.md)
- [EBA Q&A 2020_5621 — Q&A — Use of new technology for SCA \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2020-5621-use-of-new-technology-for-sca.md)
- [EBA Q&A 2020_5673 — Q&A — Legal requirements for the authentication procedure \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2020-5673-legal-requirements-for-the-authentication-procedure-when.md)
- [EBA Q&A 2021_6044 — Q&A — Re-engineering by TPP of the ASPSP’s redirect API and PSU \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2021-6044-re-engineering-by-tpp-of-the-aspsp-s-redirect-api-and-psu.md)
- [EBA Q&A 2021_6141 — Q&A — Association of personalised security credentials \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2021-6141-association-of-personalised-security-credentials-to-the.md)
- [EBA Q&A 2021_6145 — Q&A — SCA applicability / Application of SCA at tokenisation \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2021-6145-sca-applicability-application-of-sca-at-tokenisation-stage.md)
- [EBA Q&A 2021_6235 — Q&A — Application of the exemption under Article 10 RTS \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2021-6235-application-of-the-exemption-under-article-10-rts-and-ebics.md)
- [EBA Q&A 2021_6236 — Q&A — Payment Initiation Service - Batch payment / bulk payment \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2021-6236-payment-initiation-service-batch-payment-bulk-payment.md)
- [EBA Q&A 2021_6256 — Q&A — Payee-initiated transactions with irregular period \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2021-6256-payee-initiated-transactions-with-irregular-period-or.md)
- [EBA Q&A 2021_6280 — Q&A — Application of SCA for confirmation of funds requests \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2021-6280-application-of-sca-for-confirmation-of-funds-requests-made.md)
- [EBA Q&A 2021_6315 — Q&A — Transactions initiated via electronic mail (email) \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2021-6315-transactions-initiated-via-electronic-mail-email.md)
- [EBA Q&A 2021_6321 — Q&A — Authentication procedures that ASPSPs’ interfaces \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2021-6321-authentication-procedures-that-aspsps-interfaces-are.md)
- [EBA Q&A 2022_6464 — Q&A — SCA for token replacement \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2022-6464-sca-for-token-replacement.md)
- [EBA Q&A 2023_6767 — Q&A — App to app redirection with biometrics for PIS \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2023-6767-app-to-app-redirection-with-biometrics-for-pis.md)
- [EBA Q&A 2023_6827 — Q&A — Trusted Beneficiaries \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2023-6827-trusted-beneficiaries.md)
- [EBA Q&A 2023_6949 — Q&A — Secure corporate payment processes and protocols \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2023-6949-secure-corporate-payment-processes-and-protocols-and.md)
- [EBA Q&A 2024_6989 — Q&A — Criteria for selecting the operations to be included \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2024-6989-criteria-for-selecting-the-operations-to-be-included-in-the.md)
- [EBA Q&A 2025_7376 — Q&A — the use of strong and widely recognized encryption \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2025-7376-the-use-of-strong-and-widely-recognized-encryption.md)
- [EBA Q&A 2025_7482 — Q&A — SCA exception for Contactless only terminals (SoftPOS) \[Final Q&A\]](../level-3/q-and-a/eba/eba-qa-2025-7482-sca-exception-for-contactless-only-terminals-softpos-in.md)

***

[Title IV — Rights and obligations in relation to the provision and use of payment services](../titles/iv.md) · [← Article 96](96.md) · [Article 98 →](98.md)
