{"id":6876,"date":"2025-07-16T07:58:19","date_gmt":"2025-07-16T07:58:19","guid":{"rendered":"https:\/\/buvei.com\/blog\/?p=6876"},"modified":"2025-07-16T08:10:58","modified_gmt":"2025-07-16T08:10:58","slug":"sca-strong-customer-authentication","status":"publish","type":"post","link":"https:\/\/buvei.com\/blog\/sca-strong-customer-authentication\/","title":{"rendered":"What Is SCA? Strong Customer Authentication Explained"},"content":{"rendered":"
\n
In today\u2019s digital economy, security is no longer optional. For businesses operating in or with the EU, Strong Customer Authentication (SCA)<\/strong> is not just a best practice \u2014 it\u2019s a legal requirement.<\/div>\n
Introduced under the EU Revised Payment Services Directive (PSD2<\/a>)<\/strong>, SCA aims to make electronic payments safer, protect consumers, and reduce online fraud. But what exactly does it mean, and how should your business adapt?<\/div>\n

\u00a0 \"\"<\/h3>\n

What Is SCA?<\/h3>\n
SCA (Strong Customer Authentication) is a regulatory standard that requires payment providers to verify customer identity using at least two of the following three factors<\/strong>:<\/div>\n
    \n
  1. \n
  2. \n
    Something the customer has<\/strong> \u2013 like a phone or smart card<\/div>\n<\/li>\n
  3. \n
    Something the customer is<\/strong> \u2013 like a fingerprint or facial ID<\/div>\n<\/li>\n<\/ol>\n
    This is essentially the framework for two-factor authentication (2FA<\/a>)<\/strong>, but mandated at the regulatory level for payments.<\/div>\n

    \"\"<\/a><\/h3>\n

    When Does SCA Apply?<\/h3>\n
    SCA is enforced across the European Economic Area (EEA)<\/strong> and applies to most:<\/div>\n