--- title: "EBA Q&A 2020_5124 — Q&A — SCA for staff assisted electronic channel [Final Q&A]" shortTitle: "EBA Q&A 2020_5124 — Q&A — SCA for staff assisted electronic channel [Final Q&A]" answer_id: EBA_QA_2020_5124 status: "Final Q&A" type: qa instrument_type: qa authority: EBA binding: false binding_character: non_binding legal_status: in_force regulation: "PSD2" psd2_level3: true mica_level2: false legal_basis: "Article 97(1) PSD2" date: 21 January 2022 source_link: https://www.eba.europa.eu/single-rule-book-qa/qna/view/publicId/2020_5124 lifecycle: "Final Q&A" text_version: "EBA Q&A register, 21 January 2022" source_url: "https://www.eba.europa.eu/single-rule-book-qa/qna/view/publicId/2020_5124" check_status: matched verified: true last_checked: 2026-10-26 checked_against: "the EBA publication" source: prepared_by: "EBA" published_by: "EBA" published_in: "EBA Single Rulebook Q&A tool" evidence: prepared_by: "Answer prepared by the EBA." locator: "EBA Q&A register entry 2020_5124, field 'Answer prepared by'" document_type: "qa_answer" legal_nature: "not_legislation" addressees: "not stated in the document" dates: published_on: "2022-01-21" question_submitted_on: "2020-02-13" locators: published_on: "EBA Q&A register entry 2020_5124, field 'Final publishing date'" question_submitted_on: "EBA Q&A register entry 2020_5124, field 'Submission date'" lifecycle_label: "Final Q&A" --- **Answer by the EBA, published in its Q&A tool · not legislation · published 21 Jan 2022 [Final Q&A]** *Final Q&A · EBA Q&A register, 21 January 2022 · Checked against the EBA publication on 26 Oct 2026 · [Official source](https://www.eba.europa.eu/single-rule-book-qa/qna/view/publicId/2020_5124)* | | | |---|---| | **Full title** | EBA Q&A 2020_5124 — Q&A — SCA for staff assisted electronic channel \[Final Q&A\] | | **Prepared by** | EBA | | **Published by** | EBA, in the EBA Single Rulebook Q&A tool | | **Reference** | EBA_QA_2020_5124 | | **Document type** | Q&A | | **Legal nature** | Not legislation | | **Addressees** | Not stated in the document | | **Dates** | Published 21 January 2022; question submitted 13 February 2020 | | **Legal basis** | Article 97(1) PSD2 | | **Related instruments** | None recorded | | **Text on this page** | Word for word — the full text of the EBA publication | **SCA for staff assisted electronic channel** ### Question Please clarify where a customer is physically present and identified in branch, the strong customer authentication (SCA) requirements if that customer completes a Standing Order instruction (Setup, Amend or Cancel) or initiates a credit transfer through a staff assisted electronic channel (i.e. tablet device)? ### Background As per article 97.1.b (PSD 2), Payment service providers (PSPs) must apply SCA where the payer initiates an electronic payment transaction. In order to assist non-digital and other vulnerable customers we provide an in-branch, staff assisted electronic channel where some payment instructions may be provided by inputting necessary details via a tablet device. As part of process, 1. Branch staff member must initially verify customer identity using photo identification. 2. Branch staff member will login to the tablet device using their own credentials and will locate the customer profile on the tablet. 3. Branch staff member will ask customer to provide or input the payment details in the tablet. 4. Post customer input, branch staff member will validate the payment details & also manually validate the customer signature before submitting the payment for processing. Is this process considered the initiation of an electronic payment by the payer? Alternatively, in circumstances where the function of SCA is to authenticate a payer, can this be considered to have taken place given that the payer is physically present and has been identified? Finally, are we considered to have performed SCA on the basis of the photo ID (something the customer has - possession) and the physical presence of the customer (something the customer is – inherence)? If SCA is considered required and not to have been satisfied, is it legitimate to deem these transactions extremely low risk and dispense with SCA on the understanding that full liability is being assumed for any issues that may subsequently arise with these payments? *** ### Answer Article 97(1)(b) of Directive 2015/2366/EU (PSD2) prescribes that payment service providers (PSPs) shall apply strong customer authentication where the payer initiates an electronic payment transaction. Recital 95 of PSD2 clarifies that ‘all payment services offered electronically should be carried out in a secure manner, adopting technologies able to guarantee the safe authentication of the user and to reduce, to the maximum extent possible, the risk of fraud. There does not seem to be a need to guarantee the same level of protection to payment transactions initiated and executed with modalities other than the use of electronic platforms or devices, such as paper-based payment transactions, mail orders or telephone orders.’ Article 4(29) of PSD2 defines authentication as a ‘procedure which allows the payment service provider to verify the identity of a payment service user or the validity of the use of a specific payment instrument, including the use of the user’s personalised security credentials’. In the case described by the submitter, the payment service user is physically present at the premises of the PSP, the authentication of the payment service user is carried out by staff of the PSP and the submission of the payment order to execute a credit transfer is carried out with the assistance of staff of the PSP. Therefore, the initiation and execution of the payment transaction referred to by the submitter is similar to a paper-based payment transaction as referred to in Recital 95 of PSD2. Accordingly, the payment transaction described by the submitter does not require the application of strong customer authentication. *** **Source:** [EBA original document](https://www.eba.europa.eu/single-rule-book-qa/qna/view/publicId/2020_5124) ## Related Level 1 articles - [Article 97 — Authentication](../../../articles/97.md)