What is Strong Customer Authentication? SCA and 3-D Secure explained
By SendPay Business · · 2 min read
- 1Add your photo ID
- 2Add proof of address
- 3Checked and verified
Strong Customer Authentication, or SCA, is a rule in the UK and Europe that makes people prove it's really them before many online payments and account logins. It came from the EU's second Payment Services Directive (PSD2) and has cut card fraud online.
The two-of-three rule
SCA needs two separate checks from different groups:
- Something you know, like a password or PIN.
- Something you have, like your phone or card.
- Something you are, like a fingerprint or face scan.
How it works for card payments
Online card payments usually meet SCA through 3-D Secure, the step where the customer's bank asks them to approve the payment in their banking app or with a code. Branded as Visa Secure or Mastercard Identity Check, it's run by the card issuer, not the shop.
Try it
Name your platform and watch it come to life
Type a name, tap a colour and pick what it does. The phone changes as you go.
Colour
What it does
Design and preview your whole platform free, then launch when you are ready.
When it isn't needed
There are exemptions, such as some low-value payments, repeat payments to a business the customer has trusted, and subscriptions after the first payment. Whether one applies is decided by the customer's bank, so businesses should always be ready for the check.
What it means for money apps
Any app that holds customer money or issues cards has to build SCA into its logins, payments and card spending. Choosing a platform and partners that handle it for you saves months of work.
How it works
Your own money app- 1Name it and pick your colours
- 2Choose what it does
- 3Launch when you are ready
Why sign up
Create your free SendPay account
It's all about creating your own financial platform with ease. Start with a free account today.
- 🪪A free business accountOpen it in about a minute with your business name, email, password and mobile. No card and no documents to start.
- 💳Get paid from day oneTake card payments, and share your own payment link and invoices so customers pay in a click.
- 🌐A free business websiteFree to build, free to publish and free to keep, with unlimited visits.
- 🚀Your own financial platformDesign and preview your whole platform free, then launch when you are ready.
SendPay Business is a technology company, not a bank. Accounts, cards and payments are powered by licensed partners.
Questions people ask
What is my card approval rate?
Work out your authorisation rate and what declines cost you.
Authorisation rate calculator →Why do apps check my identity when I sign up?
That's KYC, a separate rule from SCA. The guide explains it.
What is KYC and AML? →What is a chargeback?
When a cardholder's bank reverses a payment. SCA helps prevent fraud-related ones.
What is a chargeback? →What is open banking?
A secure way for apps to connect to bank accounts, also covered by PSD2.
What is open banking? →Read next
Spotted a mistake or something out of date? and we'll fix it. How our guides are made
This guide is general information, not legal or financial advice. SendPay Business is a technology company, not a bank, and does not take deposits; regulated services on the platforms are provided by licensed partners. Other companies named in this guide are reference points only and are not affiliated with SendPay Business.