--- title: "EBA Q&A 2018_4360 — Q&A — Application of the exemption related to a trusted [Final Q&A]" shortTitle: "EBA Q&A 2018_4360 — Q&A — Application of the exemption related to a trusted [Final Q&A]" answer_id: EBA_QA_2018_4360 status: "Final Q&A" type: qa instrument_type: qa authority: EBA binding: false binding_character: non_binding legal_status: in_force regulation: "PSD2" psd2_level3: true mica_level2: false legal_basis: "Article 13(2) PSD2" date: 8 March 2019 source_link: https://www.eba.europa.eu/single-rule-book-qa/qna/view/publicId/2018_4360 lifecycle: "Final Q&A" text_version: "EBA Q&A register, 8 March 2019" source_url: "https://www.eba.europa.eu/single-rule-book-qa/qna/view/publicId/2018_4360" check_status: matched verified: true last_checked: 2026-10-26 checked_against: "the EBA publication" source: prepared_by: "EBA" published_by: "EBA" published_in: "EBA Single Rulebook Q&A tool" evidence: prepared_by: "Answer prepared by the EBA." locator: "EBA Q&A register entry 2018_4360, field 'Answer prepared by'" document_type: "qa_answer" legal_nature: "not_legislation" addressees: "not stated in the document" dates: published_on: "2019-03-08" question_submitted_on: "2018-11-07" locators: published_on: "EBA Q&A register entry 2018_4360, field 'Final publishing date'" question_submitted_on: "EBA Q&A register entry 2018_4360, field 'Submission date'" lifecycle_label: "Final Q&A" --- **Answer by the EBA, published in its Q&A tool · not legislation · published 8 Mar 2019 [Final Q&A]** *Final Q&A · EBA Q&A register, 8 March 2019 · Checked against the EBA publication on 26 Oct 2026 · [Official source](https://www.eba.europa.eu/single-rule-book-qa/qna/view/publicId/2018_4360)* | | | |---|---| | **Full title** | EBA Q&A 2018_4360 — Q&A — Application of the exemption related to a trusted \[Final Q&A\] | | **Prepared by** | EBA | | **Published by** | EBA, in the EBA Single Rulebook Q&A tool | | **Reference** | EBA_QA_2018_4360 | | **Document type** | Q&A | | **Legal nature** | Not legislation | | **Addressees** | Not stated in the document | | **Dates** | Published 8 March 2019; question submitted 7 November 2018 | | **Legal basis** | Article 13(2) PSD2 | | **Related instruments** | None recorded | | **Text on this page** | Word for word — the full text of the EBA publication | **Application of the exemption related to a trusted beneficiary** ### Question Has the exemption related to a trusted beneficiary to be applied on an account basis or rather to a list of accounts included in an online banking agreement ? Whose list has to be considered in case of a power of attorney where the initiator is not the account owner ? What happens in case of a shared account where each one holds his own trusted beneficiary lists ? ### Background Article 13(2) of the RTS on Strong Customer Authentification states that SCA can be exempted where "the payer initiates a payment transaction and the payee is included in a list of trusted beneficiaries previously created by the payer". Furthermore, Article 4(8) of the PSD2 defines the payer as "natural or legal person who holds a payment account and allows a payment order from that payment account, or, where there is no payment account, a natural or legal person who gives a payment order". The RTS clearly refers to the payer (=account owner) of the transaction. However, in some cases (power of attorney, common account), other persons than the sole account owner can initate a payment on the same account, where each one of them manages his own trusted beneficiary list (linked to his personal online banking access). It is not clear if the list of the account owner or the list of the authorized initiator of the transaction has to be considered, in order to decide wether an exemption can be allowed or not. *** ### Answer Article 13(2) of the Commission Delegated Regulation (EU) 2018/389 states that where the payee is on ‘a’ list of trusted beneficiaries previously created by the payer, strong customer authentication (SCA) may not apply. Further, Article 13(1) of the Delegated Regulation states that SCA applies where the payer creates or amends the list through the payer’s account servicing payment service provider (ASPSP). Article 13 refers to ‘a’ list and ‘the payer’. Under Article 4(8) of PSD2, ‘payer’ is defined as “a natural or legal person who holds a payment account and allows a payment order from that payment account, or, where there is no payment account, a natural or legal person who gives a payment order”. Accordingly, the list would refer to the one created by each account holder. The exemption should be applied on an account by account basis. Nevertheless, the decision whether a list of trusted beneficiaries applies to more than one account and the corresponding process of authentication, will depend upon the agreement between the ASPSP and the payment service user. Where a power of attorney (PoA) is in place, the list to be considered is that of the payer on whose behalf the PoA holder is acting. In the event of a joint account each account holder may have its own trusted beneficiary list. In this case, the list to be considered should be the list of the acting account holder at the time the payment is initiated. It is for the contract between the payment service users (PSU) and the ASPSP to determine whether it is possible or not to have a different trusted beneficiary list for each account holder or group of account holders using the account. *** **Source:** [EBA original document](https://www.eba.europa.eu/single-rule-book-qa/qna/view/publicId/2018_4360) ## Related Level 1 articles - [Article 13 — Withdrawal of authorisation](../../../articles/13.md)