--- title: "EBA Q&A 2019_4788 — Q&A — Treatment of electronic bookings similar to Mail Order [Final Q&A]" shortTitle: "EBA Q&A 2019_4788 — Q&A — Treatment of electronic bookings similar to Mail Order [Final Q&A]" answer_id: EBA_QA_2019_4788 status: "Final Q&A" type: qa instrument_type: qa authority: EBA binding: false binding_character: non_binding legal_status: in_force regulation: "PSD2" psd2_level3: true mica_level2: false legal_basis: "Article 97 PSD2" date: 12 March 2021 source_link: https://www.eba.europa.eu/single-rule-book-qa/qna/view/publicId/2019_4788 lifecycle: "Final Q&A" text_version: "EBA Q&A register, 12 March 2021" source_url: "https://www.eba.europa.eu/single-rule-book-qa/qna/view/publicId/2019_4788" check_status: matched verified: true last_checked: 2026-10-26 checked_against: "the EBA publication" source: prepared_by: "European Commission" published_by: "EBA" published_in: "EBA Single Rulebook Q&A tool" evidence: prepared_by: "Answer prepared by the European Commission because it is a matter of interpretation of Union law." locator: "EBA Q&A register entry 2019_4788, field 'Answer prepared by'" document_type: "qa_answer" legal_nature: "not_legislation" addressees: "not stated in the document" dates: published_on: "2021-03-12" question_submitted_on: "2019-06-19" locators: published_on: "EBA Q&A register entry 2019_4788, field 'Final publishing date'" question_submitted_on: "EBA Q&A register entry 2019_4788, field 'Submission date'" lifecycle_label: "Final Q&A" --- **Answer prepared by the European Commission, published in the EBA Q&A tool · not legislation · published 12 Mar 2021 [Final Q&A]** *Final Q&A · EBA Q&A register, 12 March 2021 · Checked against the EBA publication on 26 Oct 2026 · [Official source](https://www.eba.europa.eu/single-rule-book-qa/qna/view/publicId/2019_4788)* | | | |---|---| | **Full title** | EBA Q&A 2019_4788 — Q&A — Treatment of electronic bookings similar to Mail Order \[Final Q&A\] | | **Prepared by** | European Commission | | **Published by** | EBA, in the EBA Single Rulebook Q&A tool | | **Reference** | EBA_QA_2019_4788 | | **Document type** | Q&A | | **Legal nature** | Not legislation | | **Addressees** | Not stated in the document | | **Dates** | Published 12 March 2021; question submitted 19 June 2019 | | **Legal basis** | Article 97 PSD2 | | **Related instruments** | None recorded | | **Text on this page** | Word for word — the full text of the EBA publication | **Treatment of electronic bookings similar to Mail Order and Telephone Orders (MO-TO) transactions** ### Question Would hotel use-cases, which include reservations taken by third parties (such as online travel agents or brand/hotel group) for the merchant and subsequent transactions (such as post-booking processing of prepaid rates or deposits, processing of cancellation/no-show fees, processing of post-checkout charges) fall under the scope of Mail Order and Telephone Orders (MO-TO) transactions and are they therefore excluded from the strong customer authentication (SCA) requirements? ### Background In the hotel sector, payment information collected during the process of reserving accommodation does not result in a transaction at the time of the reservation, with credit card details utilised only as a guarantee for future payment. If payment details are collected at time of booking, but no payment is processed at that time or by that booking entity, no e-commerce has occurred. *** ### Answer Pursuant to Article 97 (1)(b) Directive 2015/2366/EU (PSD2), Member States shall ensure that a payment service provider applies strong customer authentication (SCA) when the payer initiates an electronic payment transaction. As stated in Q&A 2018\_4031, card-based payment transactions are considered as payment transactions initiated by the payer through the payee and thus fall under Article 97(1)(b) PSD2. Recital 95 of PSD2 clarifies that “There does not seem to be a need to guarantee the same level of protection to payment transactions initiated and executed with modalities other than the use of electronic platforms or devices, such as paper-based payment transactions, mail orders or telephone orders.” Accordingly, remote non-electronic payment transactions that are initiated and executed via a mail order or telephone order can be considered out of scope of the SCA requirement. Therefore, as card-based payment transactions qualify as electronic payment transactions, card-based transactions initiated by the payer through the payee cannot be considered out of scope of the SCA requirement. Disclaimer: The answers clarify provisions already contained in the applicable legislation. They do not extend in any way the rights and obligations deriving from such legislation nor do they introduce any additional requirements for the concerned operators and competent authorities. The answers are merely intended to assist natural or legal persons, including competent authorities and Union institutions and bodies in clarifying the application or implementation of the relevant legal provisions. Only the Court of Justice of the European Union is competent to authoritatively interpret Union law. The views expressed in the internal Commission Decision cannot prejudge the position that the European Commission might take before the Union and national courts. *** **Source:** [EBA original document](https://www.eba.europa.eu/single-rule-book-qa/qna/view/publicId/2019_4788) ## Related Level 1 articles - [Article 97 — Authentication](../../../articles/97.md)