Skip to the text

Article 97 — Authentication

Showing 100 of 100Release 10 Nov 2026Details
Coverage
Not covered: national guidance, court decisions.
Freshness
Release 2d86bd12 published 10 Nov 2026, 17:06 CET.
Shown
Showing 100 of 100
Failures
None.
Incomplete
No.
Implemented by · Level 20

None linked in our corpus. We hold 6 PSD2 Level 2 acts; see all.

Explained by · Level 396
EBA Q&A 2018_4030Q&A — Geographical scope of application of the RTS on strong [Final Q&A]EBA Q&A 2018_4031Q&A — Applicability of SCA to ‘card payments initiated [Final Q&A]EBA Q&A 2018_4032Q&A — Criteria for the application of the transaction risk [Final Q&A]EBA Q&A 2018_4033Q&A — Criteria for the application of the transaction risk [Final Q&A]EBA Q&A 2018_4034Q&A — Criteria for the application of the transaction risk [Final Q&A]EBA Q&A 2018_4035Q&A — Criteria for the application of the transaction risk [Final Q&A]EBA Q&A 2018_4036Q&A — Application of the low-value contactless exemption [Final Q&A]EBA Q&A 2018_4038Q&A — Applicability of the low-value contactless exemption [Final Q&A]EBA Q&A 2018_4039Q&A — Qualification of SMS OTP as an authentication factor [Final Q&A]EBA Q&A 2018_4040Q&A — Currency conversion of the EUR thresholds contained [Final Q&A]EBA Q&A 2018_4041Q&A — Display of incorrect authentication factors in case [Final Q&A]EBA Q&A 2018_4047Q&A — Review of security measures [Final Q&A]EBA Q&A 2018_4048Q&A — Applicability of Strong Customer Authentication (SCA) [Final Q&A]EBA Q&A 2018_4049Q&A — Persistent authentication for wearable devices [Final Q&A]EBA Q&A 2018_4052Q&A — EMV cards and EMV terminals supporting online [Final Q&A]EBA Q&A 2018_4053Q&A — Length of authentication codes [Final Q&A]EBA Q&A 2018_4054Q&A — Confidentiality of the application cryptogram for EMV [Final Q&A]EBA Q&A 2018_4055Q&A — Confidentiality of offline PIN [Final Q&A]EBA Q&A 2018_4056Q&A — Application of the exemption for transactions to trusted [Final Q&A]EBA Q&A 2018_4057Q&A — SCA at vending machines without PIN pad [Final Q&A]EBA Q&A 2018_4058Q&A — Transactions initiated via Interactive Voice Response [Final Q&A]EBA Q&A 2018_4060Q&A — Exemption for secure corporate payment processes [Final Q&A]EBA Q&A 2018_4065Q&A — Accessing payment account online in web browser shall [Final Q&A]EBA Q&A 2018_4068Q&A — Exemption from strong customer authentication (SCA) [Final Q&A]EBA Q&A 2018_4076Q&A — On the access to trusted beneficiaries lists (RTS Art 13) [Final Q&A]EBA Q&A 2018_4077Q&A — On the use and storage of Personalised Security [Final Q&A]EBA Q&A 2018_4083Q&A — On the application of SCA when cancelling a payment [Final Q&A]EBA Q&A 2018_4108Q&A — Scope of ‘initiation of an electronic payment [Final Q&A]EBA Q&A 2018_4110Q&A — Data authentication standards [Final Q&A]EBA Q&A 2018_4131Q&A — Payee-initiated transactions with irregular period [Final Q&A]EBA Q&A 2018_4133Q&A — Applicability of SCA to wallet solutions [Final Q&A]EBA Q&A 2018_4135Q&A — SMS OTP and credit card as a two authentication factor [Final Q&A]EBA Q&A 2018_4141Q&A — Authentication code [Final Q&A]EBA Q&A 2018_4152Q&A — Review of the security measures: Audit report [Final Q&A]EBA Q&A 2018_4153Q&A — Review of Security Measures - Auditors expertise [Final Q&A]EBA Q&A 2018_4155Q&A — Responsibility of national authority [Final Q&A]EBA Q&A 2018_4177Q&A — Application of SCA when a PSU accesses payment [Final Q&A]EBA Q&A 2018_4225Q&A — Contactless payments at point of sale - Applications [Final Q&A]EBA Q&A 2018_4226Q&A — Contactless payments at point of sale - Applications [Final Q&A]EBA Q&A 2018_4315Q&A — Strong Authentication [Final Q&A]EBA Q&A 2018_4404Q&A — Subsequent instances of a recurring card payment [Final Q&A]EBA Q&A 2018_4414Q&A — Usage of SMS for dynamic linking [Final Q&A]EBA Q&A 2018_4415Q&A — Dynamic linking for batch transactions [Final Q&A]EBA Q&A 2018_4429Q&A — Application of the Low Value Transaction Limits [Final Q&A]EBA Q&A 2018_4435Q&A — Dynamic Linking for batch payments [Final Q&A]EBA Q&A 2019_4450Q&A — Potential inconsistency on the application [Rejected question]EBA Q&A 2019_4484Q&A — Strong customer authentication requirement [Final Q&A]EBA Q&A 2019_4556Q&A — Definition of payee for dynamic linking [Final Q&A]EBA Q&A 2019_4560Q&A — SCA profiles and multiple-use of devices [Final Q&A]EBA Q&A 2019_4594Q&A — Definition of an electronic remote payment transaction [Final Q&A]EBA Q&A 2019_4637Q&A — Separation of factors for strong customer authentication [Final Q&A]EBA Q&A 2019_4664Q&A — Applicability of SCA to electronically processed SEPA [Final Q&A]EBA Q&A 2019_4740Q&A — Compliance with SCA in offline mode on an aircraft [Final Q&A]EBA Q&A 2019_4788Q&A — Treatment of electronic bookings similar to Mail Order [Final Q&A]EBA Q&A 2019_4790Q&A — Keyed Mail Order or Telephone Order (MO-TO) transactions [Final Q&A]EBA Q&A 2019_4791Q&A — Processing payments for hotel reservations [Final Q&A]EBA Q&A 2019_4792Q&A — Merchant Initiated Transactions exemption for hotel [Final Q&A]EBA Q&A 2019_4794Q&A — Consumer mandate under Merchant Initiated Transactions [Final Q&A]EBA Q&A 2019_4795Q&A — Validity of SCA [Final Q&A]EBA Q&A 2019_4796Q&A — Intermediaries and Merchant-ID [Final Q&A]EBA Q&A 2019_4797Q&A — Merchant IDs and SCA [Final Q&A]EBA Q&A 2019_4800Q&A — Whitelisting [Final Q&A]EBA Q&A 2019_4827Q&A — Tokenised card details as a SCA possession element. [Final Q&A]EBA Q&A 2019_4855Q&A — Application of the strong customer authentication (SCA) [Final Q&A]EBA Q&A 2019_4875Q&A — Failed Authentication Code [Final Q&A]EBA Q&A 2019_4910Q&A — Authentication code [Final Q&A]EBA Q&A 2019_4937Q&A — SCA for contactless payments at a POS executed [Final Q&A]EBA Q&A 2019_5054Q&A — Contingency Measures under Article 33 [Final Q&A]EBA Q&A 2020_5115Q&A — Using Trusted Beneficiary Lists to Auto Reject PISP [Final Q&A]EBA Q&A 2020_5124Q&A — SCA for staff assisted electronic channel [Final Q&A]EBA Q&A 2020_5133Q&A — Dynamic linking: transactions for which the final amount [Final Q&A]EBA Q&A 2020_5135Q&A — Payment Initiation Scope and Trusted Beneficiaries [Final Q&A]EBA Q&A 2020_5184Q&A — Obstacles to the payment initiation service [Final Q&A]EBA Q&A 2020_5247Q&A — Clarification of remote payment for dynamic linking [Final Q&A]EBA Q&A 2020_5288Q&A — Mount unattended contactless device on general goods [Final Q&A]EBA Q&A 2020_5353Q&A — On the requirements for 'inherence' in strong customer [Final Q&A]EBA Q&A 2020_5366Q&A — Clarification on where the creation of the authentication [Final Q&A]EBA Q&A 2020_5516Q&A — Perform SCA by reusing an element used [Final Q&A]EBA Q&A 2020_5534Q&A — Bill-payment via postal service [Final Q&A]EBA Q&A 2020_5620Q&A — Use of behavioural data for SCA [Final Q&A]EBA Q&A 2020_5621Q&A — Use of new technology for SCA [Final Q&A]EBA Q&A 2020_5673Q&A — Legal requirements for the authentication procedure [Final Q&A]EBA Q&A 2021_6044Q&A — Re-engineering by TPP of the ASPSP’s redirect API and PSU [Final Q&A]EBA Q&A 2021_6141Q&A — Association of personalised security credentials [Final Q&A]EBA Q&A 2021_6145Q&A — SCA applicability / Application of SCA at tokenisation [Final Q&A]EBA Q&A 2021_6235Q&A — Application of the exemption under Article 10 RTS [Final Q&A]EBA Q&A 2021_6236Q&A — Payment Initiation Service - Batch payment / bulk payment [Final Q&A]EBA Q&A 2021_6256Q&A — Payee-initiated transactions with irregular period [Final Q&A]EBA Q&A 2021_6280Q&A — Application of SCA for confirmation of funds requests [Final Q&A]EBA Q&A 2021_6315Q&A — Transactions initiated via electronic mail (email) [Final Q&A]EBA Q&A 2021_6321Q&A — Authentication procedures that ASPSPs’ interfaces [Final Q&A]EBA Q&A 2022_6464Q&A — SCA for token replacement [Final Q&A]EBA Q&A 2023_6767Q&A — App to app redirection with biometrics for PIS [Final Q&A]EBA Q&A 2023_6827Q&A — Trusted Beneficiaries [Final Q&A]EBA Q&A 2023_6949Q&A — Secure corporate payment processes and protocols [Final Q&A]EBA Q&A 2024_6989Q&A — Criteria for selecting the operations to be included [Final Q&A]
Cited by3
98(1)(a)Regulatory technical standards on authentication and communication98(1)(b)Regulatory technical standards on authentication and communication98(1)(c)Regulatory technical standards on authentication and communication
Defined terms0

None linked in our corpus.

Amended by1
17 Jan 202532022L2556