{"release":{"id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","published":"2026-11-01T16:41:30Z","pinned":false},"limits":{"coverage":{"history":"current_only","held_since":"2018-12-14","gaps":[],"covered":["EBA Q&A 2018_4239 — Q&A — Applicability of exemption from strong customer [Final Q&A] L3"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","release_published":"2026-11-01T16:41:30Z","checked_at":"2026-10-26","checked_against":"the EBA publication"},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/psd2/level-3/q-and-a/eba/eba-qa-2018-4239-applicability-of-exemption-from-strong-customer","url":"https://www.headlesslaw.com/psd2/level-3/q-and-a/eba/eba-qa-2018-4239-applicability-of-exemption-from-strong-customer","title":"EBA Q&A 2018_4239 — Q&A — Applicability of exemption from strong customer [Final Q&A]","family":"l3","work_id":"spaces/psd2/level-3/q-and-a/eba/eba-qa-2018-4239-applicability-of-exemption-from-strong-customer","status":"final q&a","force_status":null,"date_state":"current","requested_date":null,"as_of":"2026-11-01","applies_from":null,"application":null,"version_label":"EBA Q&A register, 14 December 2018","check":{"against":"the EBA publication","on":"2026-10-26"},"check_result":"matched","official_url":"https://www.eba.europa.eu/single-rule-book-qa/qna/view/publicId/2018_4239","valid_from":"0001-01-01","valid_until":null,"revision":1,"content_id":"0e867d101535091e","change_date":null,"nearest_versions":["2018-12-14"],"first_text_date":null,"correction_applies":false,"versions":["2018-12-14"],"version_url":"https://www.headlesslaw.com/psd2/level-3/q-and-a/eba/eba-qa-2018-4239-applicability-of-exemption-from-strong-customer/versions/2018-12-14","revision_url":"https://www.headlesslaw.com/psd2/level-3/q-and-a/eba/eba-qa-2018-4239-applicability-of-exemption-from-strong-customer/versions/2018-12-14/rev/0e867d101535091e","versions_url":"https://www.headlesslaw.com/psd2/level-3/q-and-a/eba/eba-qa-2018-4239-applicability-of-exemption-from-strong-customer/versions","relations_url":"https://www.headlesslaw.com/psd2/level-3/q-and-a/eba/eba-qa-2018-4239-applicability-of-exemption-from-strong-customer/relations","source_line":"Answer by the EBA, published in its Q&A tool · not legislation · published 14 Dec 2018 [Final Q&A]","attribution":{"prepared_by":"EBA","published_by":"EBA","published_in":"EBA Single Rulebook Q&A tool","document_type":"qa_answer","legal_nature":"not_legislation","addressees":"not stated in the document","dates":{"published_on":"2018-12-14","question_submitted_on":"2018-09-06","locators":{"published_on":"EBA Q&A register entry 2018_4239, field 'Final publishing date'","question_submitted_on":"EBA Q&A register entry 2018_4239, field 'Submission date'"}},"adoption":null}},"provenance":{"official_url":"https://www.eba.europa.eu/single-rule-book-qa/qna/view/publicId/2018_4239","check":{"result":"matched","checked_at":"2026-10-26","against":"the EBA publication"},"repo_path":"spaces/psd2/level-3/q-and-a/eba/eba-qa-2018-4239-applicability-of-exemption-from-strong-customer.md","body_sha256":"abf074a15960ad7a13308013bddd4def94ef84e4ac24a1b5e623a2806abcd9bb"},"units":[],"markdown":"---\ntitle: \"EBA Q&A 2018_4239 — Q&A — Applicability of exemption from strong customer [Final Q&A]\"\nshortTitle: \"EBA Q&A 2018_4239 — Q&A — Applicability of exemption from strong customer [Final Q&A]\"\nanswer_id: EBA_QA_2018_4239\nstatus: \"Final Q&A\"\ntype: qa\ninstrument_type: qa\nauthority: EBA\nbinding: false\nbinding_character: non_binding\nlegal_status: in_force\nregulation: \"PSD2\"\npsd2_level3: true\nmica_level2: false\nlegal_basis: \"Article 98(1) PSD2\"\ndate: 14 December 2018\nsource_link: https://www.eba.europa.eu/single-rule-book-qa/qna/view/publicId/2018_4239\nlifecycle: \"Final Q&A\"\ntext_version: \"EBA Q&A register, 14 December 2018\"\nsource_url: \"https://www.eba.europa.eu/single-rule-book-qa/qna/view/publicId/2018_4239\"\ncheck_status: matched\nverified: true\nlast_checked: 2026-10-26\nchecked_against: \"the EBA publication\"\nsource:\n  prepared_by: \"EBA\"\n  published_by: \"EBA\"\n  published_in: \"EBA Single Rulebook Q&A tool\"\n  evidence:\n    prepared_by: \"Answer prepared by the EBA.\"\n    locator: \"EBA Q&A register entry 2018_4239, field 'Answer prepared by'\"\ndocument_type: \"qa_answer\"\nlegal_nature: \"not_legislation\"\naddressees: \"not stated in the document\"\ndates:\n  published_on: \"2018-12-14\"\n  question_submitted_on: \"2018-09-06\"\n  locators:\n    published_on: \"EBA Q&A register entry 2018_4239, field 'Final publishing date'\"\n    question_submitted_on: \"EBA Q&A register entry 2018_4239, field 'Submission date'\"\nlifecycle_label: \"Final Q&A\"\n---\n\n**Answer by the EBA, published in its Q&A tool · not legislation · published 14 Dec 2018 [Final Q&A]**\n\n*Final Q&A · EBA Q&A register, 14 December 2018 · Checked against the EBA publication on 26 Oct 2026 · [Official source](https://www.eba.europa.eu/single-rule-book-qa/qna/view/publicId/2018_4239)*\n\n| | |\n|---|---|\n| **Full title** | EBA Q&A 2018_4239 — Q&A — Applicability of exemption from strong customer \\[Final Q&A\\] |\n| **Prepared by** | EBA |\n| **Published by** | EBA, in the EBA Single Rulebook Q&A tool |\n| **Reference** | EBA_QA_2018_4239 |\n| **Document type** | Q&A |\n| **Legal nature** | Not legislation |\n| **Addressees** | Not stated in the document |\n| **Dates** | Published 14 December 2018; question submitted 6 September 2018 |\n| **Legal basis** | Article 98(1) PSD2 |\n| **Related instruments** | None recorded |\n| **Text on this page** | Word for word — the full text of the EBA publication |\n\n**Applicability of exemption from strong customer authentication (SCA) under Article 17 for card payments**\n\n### Question\n\nIs Article 17 of Regulation (EU) 2018/389 applicable for the payer’s Payment service provider (PSP) for card-based payments?\n\n### Background\n\nThis question relates to what we think is a mistake made by EBA in its opinion EBA-Op-2018-04, from which you could derive the conclusion that EBA thinks that exemption under Article 17 is not applicable for the payer’s PSP for card-based payments.\n\nIn its opinion, EBA-Op-2018-04 the EBA provides in Table 2 an overview of whether the payer’s PSP (issuer) and/or the payee’s PSP (acquirer) can decide on each of the exemptions set out under Articles 10 to 18.\n\nIn relation to Article 17 and the payee’s PSP’s ability to apply this exemption, the table says “No” for Credit transfers and “N/A” for Cards. Though we certainly agree that this exemption is only applicable for the Payer’s PSP, and not applicable for the Payee’s PSP, there should be no distinction in this between card-based payments versus credit transfers. I.e. this exemption is applicable for the payer’s PSP also for card-based payments, and the values for Article 17 in this table for the Payee’s PSP should be “No” for Cards as well as for “Credit Transfers”.\n\nTo compare with Article 15, for which there is also a “N/A” in the Cards column for the payee’s PSP: Article 15 explicitly refers to credit transfers, is therefore not applicable for card-based payments, and the “N/A” is therefore relevant. In Article 17 there is no mention of either credit transfers or card-based payments, and must therefore be applicable for both, i.e. the “N/A” is incorrect.\n\nThere are important solutions with dedicated processes and protocols between travel agencies, card issuers and their corporate customers that are based on the card infrastructure and card-based accounts, and should therefore be eligible to be exempted from SCA under Article 17.\n\n***\n\n### Answer\n\nThe exemption under Article 17 of the Commission Delegated Regulation (EU) 2018/389 does not specify the types of payment instrument that could be used through processes or protocols. Accordingly, these processes and protocols could use a card payment instrument.\n\nThe EBA Opinion on the implementation of the regulatory technical standards on strong customer authentication and common and secure communication, EBA-Op-2018-04, does not suggest it cannot be applied but merely that such exemption could not be used by the payee’s Payment Service Provider (PSP).\n\n***\n\n**Source:** [EBA original document](https://www.eba.europa.eu/single-rule-book-qa/qna/view/publicId/2018_4239)\n\n## Related Level 1 articles\n\n- [Article 98 — Regulatory technical standards on authentication and communication](../../../articles/98.md)\n"}