<!-- headlesslaw {"release":{"id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","published":"2026-11-01T16:41:30Z","pinned":false},"limits":{"coverage":{"history":"current_only","held_since":"2018-10-26","gaps":[],"covered":["EBA Q&A 2018_4076 — Q&A — On the access to trusted beneficiaries lists (RTS Art 13) [Final Q&A] L3"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","release_published":"2026-11-01T16:41:30Z","checked_at":"2026-10-26","checked_against":"the EBA publication"},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/psd2/level-3/q-and-a/eba/eba-qa-2018-4076-on-the-access-to-trusted-beneficiaries-lists-rts-art-13-by","url":"https://www.headlesslaw.com/psd2/level-3/q-and-a/eba/eba-qa-2018-4076-on-the-access-to-trusted-beneficiaries-lists-rts-art-13-by","title":"EBA Q&A 2018_4076 — Q&A — On the access to trusted beneficiaries lists (RTS Art 13) [Final Q&A]","family":"l3","work_id":"spaces/psd2/level-3/q-and-a/eba/eba-qa-2018-4076-on-the-access-to-trusted-beneficiaries-lists-rts-art-13-by","status":"final q&a","force_status":null,"date_state":"current","requested_date":null,"as_of":"2026-11-01","applies_from":null,"application":null,"version_label":"EBA Q&A register, 26 October 2018","check":{"against":"the EBA publication","on":"2026-10-26"},"check_result":"matched","official_url":"https://www.eba.europa.eu/single-rule-book-qa/qna/view/publicId/2018_4076","valid_from":"0001-01-01","valid_until":null,"revision":1,"content_id":"0dec89509fd6e508","change_date":null,"nearest_versions":["2018-10-26"],"first_text_date":null,"correction_applies":false,"versions":["2018-10-26"],"version_url":"https://www.headlesslaw.com/psd2/level-3/q-and-a/eba/eba-qa-2018-4076-on-the-access-to-trusted-beneficiaries-lists-rts-art-13-by/versions/2018-10-26","revision_url":"https://www.headlesslaw.com/psd2/level-3/q-and-a/eba/eba-qa-2018-4076-on-the-access-to-trusted-beneficiaries-lists-rts-art-13-by/versions/2018-10-26/rev/0dec89509fd6e508","versions_url":"https://www.headlesslaw.com/psd2/level-3/q-and-a/eba/eba-qa-2018-4076-on-the-access-to-trusted-beneficiaries-lists-rts-art-13-by/versions","relations_url":"https://www.headlesslaw.com/psd2/level-3/q-and-a/eba/eba-qa-2018-4076-on-the-access-to-trusted-beneficiaries-lists-rts-art-13-by/relations","source_line":"Answer by the EBA, published in its Q&A tool · not legislation · published 26 Oct 2018 [Final Q&A]","attribution":{"prepared_by":"EBA","published_by":"EBA","published_in":"EBA Single Rulebook Q&A tool","document_type":"qa_answer","legal_nature":"not_legislation","addressees":"not stated in the document","dates":{"published_on":"2018-10-26","question_submitted_on":"2018-07-04","locators":{"published_on":"EBA Q&A register entry 2018_4076, field 'Final publishing date'","question_submitted_on":"EBA Q&A register entry 2018_4076, field 'Submission date'"}},"adoption":null}}} -->
---
title: "EBA Q&A 2018_4076 — Q&A — On the access to trusted beneficiaries lists (RTS Art 13) [Final Q&A]"
shortTitle: "EBA Q&A 2018_4076 — Q&A — On the access to trusted beneficiaries lists (RTS Art 13) [Final Q&A]"
answer_id: EBA_QA_2018_4076
status: "Final Q&A"
type: qa
instrument_type: qa
authority: EBA
binding: false
binding_character: non_binding
legal_status: in_force
regulation: "PSD2"
psd2_level3: true
mica_level2: false
legal_basis: "Article 97 PSD2"
date: 26 October 2018
source_link: https://www.eba.europa.eu/single-rule-book-qa/qna/view/publicId/2018_4076
lifecycle: "Final Q&A"
text_version: "EBA Q&A register, 26 October 2018"
source_url: "https://www.eba.europa.eu/single-rule-book-qa/qna/view/publicId/2018_4076"
check_status: matched
verified: true
last_checked: 2026-10-26
checked_against: "the EBA publication"
source:
  prepared_by: "EBA"
  published_by: "EBA"
  published_in: "EBA Single Rulebook Q&A tool"
  evidence:
    prepared_by: "Answer prepared by the EBA."
    locator: "EBA Q&A register entry 2018_4076, field 'Answer prepared by'"
document_type: "qa_answer"
legal_nature: "not_legislation"
addressees: "not stated in the document"
dates:
  published_on: "2018-10-26"
  question_submitted_on: "2018-07-04"
  locators:
    published_on: "EBA Q&A register entry 2018_4076, field 'Final publishing date'"
    question_submitted_on: "EBA Q&A register entry 2018_4076, field 'Submission date'"
lifecycle_label: "Final Q&A"
---

**Answer by the EBA, published in its Q&A tool · not legislation · published 26 Oct 2018 [Final Q&A]**

*Final Q&A · EBA Q&A register, 26 October 2018 · Checked against the EBA publication on 26 Oct 2026 · [Official source](https://www.eba.europa.eu/single-rule-book-qa/qna/view/publicId/2018_4076)*

| | |
|---|---|
| **Full title** | EBA Q&A 2018_4076 — Q&A — On the access to trusted beneficiaries lists (RTS Art 13) \[Final Q&A\] |
| **Prepared by** | EBA |
| **Published by** | EBA, in the EBA Single Rulebook Q&A tool |
| **Reference** | EBA_QA_2018_4076 |
| **Document type** | Q&A |
| **Legal nature** | Not legislation |
| **Addressees** | Not stated in the document |
| **Dates** | Published 26 October 2018; question submitted 4 July 2018 |
| **Legal basis** | Article 97 PSD2 |
| **Related instruments** | None recorded |
| **Text on this page** | Word for word — the full text of the EBA publication |

**On the access to trusted beneficiaries lists (RTS Art 13) by TPPs in write mode**

### Question

Do the TPPs have the right to access trusted beneficiaries lists in write mode?

### Background

Article 13(1) ("1.Payment service providers shall apply strong customer authentication where a payer creates or amends a list of trusted beneficiaries through the payer's account servicing payment service provider.") of the RTS on strong customer authentication and secure communication seems to allow for the creation/amendment of the trusted list managed by ASPSP through TPPs. If this interpretation is correct, we also have differentiated views depending on the type of TPP.

This question is relevant for our national API provider to know if a feature needs to be implemented.

***

### Answer

Article 13(1) of the Commission Delegated Regulation (EU) 2018/389, sets out that a payer can create or amend a list of trusted beneficiaries through its account servicing payment service provider. Therefore, the creation or amendment of such a list through the services of a PISP or an AISP is not possible. A list that is accessible to a PISP or to an AISP in write mode does not fulfill the requirements of the exemption under Article 13(2) of the Delegated Regulation.

In addition, and as stated in the EBA Opinion on the implementation of the regulatory technical standards on strong customer authentication (SCA) and common and secure communication, EBA-Op-2018-04, June 2018, the payment service provider (PSP) applying SCA is the PSP that issues the personalised security credentials, namely the ASPSP. Consequently, it is also the same provider that decides whether or not to apply an exemption, such as the beneficiary list exemption, and not the AISP or PISP.

***

**Source:** [EBA original document](https://www.eba.europa.eu/single-rule-book-qa/qna/view/publicId/2018_4076)

## Related Level 1 articles

- [Article 97 — Authentication](../../../articles/97.md)