FCA agrees to phased rollout of Strong Customer Authentication rules
Decision slammed for creating unnecessary confusion among consumers

The Financial Conduct Authority has agreed to delay the implementation of the EU's upcoming Strong Customer Authentication directive after it assessed that most businesses would not be prepared for the new electronic payment rules by a 14 September 2019 deadline.
SCA, a law forming part of the EU's Second Payment Services Directive (PSD2), will require all businesses offering online payment services within the European Economic Area to enforce multifactor authentication on electronic transfers.
The changes are designed to enhance the security of payments and help reduce fraud, however, according to the FCA, the complexity of the changes is likely to create significant disruption for consumers if implemented using a hard deadline.
"The FCA has been working with the industry to put in place stronger means of ensuring that anyone seeking to make payments is not a fraudster," said Jonathan Davidson, executive director for supervision, retail and authorisations at the FCA. "While these measures will reduce fraud, we want to make sure that they won't cause material disruption to consumers themselves; so we have agreed a phased plan for their timely introduction".
Under the changes, the e-commerce industry of card issuers, payments firms, and online retailers will have 18 months to implement a second authentication factor for customer-initiated payments, which could include asking customers for a PIN number or biometric data in order to verify the transaction.
No regulatory action will be taken against companies which do not meet the PSD2 requirements on the 14 September, provided that necessary steps have been taken to be completely compliant at the end of the 18-month window.
However, while the change is designed to make it easier to implement the directive, some have criticised the delay for adding needless confusion to the industry.
Get the ITPro daily newsletter
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
"It is disappointing to see such resistance from the financial services sector towards integrating Strong Customer Authentication into its services," said Jason Tooley, chief revenue officer at Veridium. "Financial institutions and payment service providers have had nearly two years to prepare since the initial announcement, and there is no valid excuse for the delay in its enforcement apart from an unwillingness to participate."
"The impact on consumers must not be overlooked by the lengthy delay in enforcement; Strong Customer Authentication will mean consumers are more confident when buying online -- not act as a deterrent to sales as some have incorrectly suggested."
The FCA has said it will continue to monitor how banks and payment services are working towards meeting the new standards, as well as ensuring that alternative forms of multifactor authentication are made available to customers.
Dale Walker is a contributor specializing in cybersecurity, data protection, and IT regulations. He was the former managing editor at ITPro, as well as its sibling sites CloudPro and ChannelPro. He spent a number of years reporting for ITPro from numerous domestic and international events, including IBM, Red Hat, Google, and has been a regular reporter for Microsoft's various yearly showcases, including Ignite.
-
The IT industry’s shift to circular, low-carbon solutions
Maximize your hardware investment and reach your sustainability goals with HP’s Renew Solutions
-
Lenovo ThinkPad X9 14 Aura Edition review
Reviews This thin and light ultraportable will draw you in with its vibrant screen – but it isn't as powerful as some of its competitors
-
How IBM and Adobe craft personalization at scale
Whitepaper Combining the content supply chain, CX orchestration, and intelligent commerce for ideal personalization
-
Preparing for peak: How customers purchased during peak
whitepaper The online shopping trends that shaped the parcel delivery experience during the busiest time of the 2022 calendar
-
The Total Economic Impact™ of IBM iX digital commerce services
Whitepaper Delivering strategic growth with experience-led commerce solutions
-
US antitrust bill nearing law faces fierce tech opposition
News AICO seeks to limit the extent to which tech platforms can self-promote, and has drawn tens of millions of dollars in opposition from some of the largest tech firms
-
Square offers sellers buy now, pay later integration with Clearpay
News For the first time, Square customers in-person and online will be given the option to make a purchase as interest-free payments
-
Sharp expands IT services with new FundOnion partnership
News Collaboration will see the business finance platform now offer Sharp’s range of B2B solutions
-
Google adds stronger safeguards for Workspace accounts
News An automatic safety features notify users of risky account actions
-
Apple hit with class action suit for stifling rival tap-to-pay options
News The devil is in the details of Apple’s policies, states Hagens Berman’s spokesperson