EBA · 2018_4033 Final Q&A

Criteria for the application of the transaction risk analysis (TRA) exemption – Application of the TRA exemption at the level of individual brand, product or scheme

Regulation
Directive 2015/2366/EU (PSD2)
Article
97
Topic
Strong customer authentication and common and secure communication (incl. access)
Submitted by
Other
Submitted
2018-06-28
Answered
2018-10-26
Answer provided by
ESAs (EBA, ESMA, EIOPA)
Browse PSD2 Register → More Q&As on this regulation →

Question

May a PSP calculate its fraud rate at the level of individual brand, product or scheme?

Background

The RTS do not specify whether a PSP may calculate its fraud rate at the level of individual brand, product or scheme. Fraud rates may significantly vary on the basis of which brand, product or scheme is taken into account. A sensible approach would be for PSPs to calculate their fraud rates for the application of the TRA exemption at the level of individual brand, product or scheme. PSPs would then apply the TRA exemption selectively, only to low-risk brands, products or schemes. This would incentivize PSPs to promote the use of those brands, products and schemes with lower fraud levels.

Answer

No. In accordance with Article 19(1) of the Delegated Regulation (EU) 2018/389 , the fraud rate should be calculated at the level of remote electronic card-based payments or remote electronic credit transfers and not split further into other categories or subcategories for the purpose of the calculation. The calculation should be at payment service provider (legal entity) level. This does not affect the ability of a Payment Service Provider to choose to apply the TRA exemption only at the level of specific low-risk brands, products and schemes, albeit based on the fraud level at the legal entity level as per the above, to promote the use of such brands, products and schemes with a lower fraud level, as the application of an exemption is not mandatory.

Original source: European Banking Authority, Q&A ID 2018_4033

This Q&A is published by European Banking Authority and is non-binding. It does not constitute legal advice. Updated weekly from official ESA sources.

Similar Q&As

Criteria for the application of the transaction risk analysis (TRA) exemption – Relevant fraud rates

Answered 2019-10-11

Criteria for the application of the transaction risk analysis (TRA) exemption – Application of the TRA exemption by authorized PSPs other than the issuer and the acquirer

Answered 2018-10-26

Application of Transaction Risk Analysis (TRA) exemption – Real time risk analysis / monitoring

Answered 2019-06-07

Transaction risk analysis (TRA) exemption – Calculation of fraud rate – Impact of unauthorized transactions on issuers and acquirers

Answered 2020-07-24

Criteria for the application of the transaction risk analysis (TRA) exemption – Fraud rate calculation methodology for the application of the TRA exemption

Answered 2018-12-07

More Q&As on this topic

Definition of "equivalent authentication procedure" for journeys initiated from a mobile application

Answered 2026-06-12

Obstacle assessment of a mandatory client segment selection screen in a redirection journey

Answered 2026-06-12

Clarification of the scope of the term "authentication procedures" in the context of the RTS and the EBA Opinion on obstacles

Answered 2026-06-12

SCA exception for Contactless only terminals (SoftPOS) in case of emergency

Answered 2025-10-03

the use of strong and widely recognized encryption techniques

Answered 2025-10-03

📋 Track EU financial regulation continuously

Forseti monitors EU financial regulation and delivers personalised alerts anchored to verified official sources.

Start free trial → Learn more

14-day free trial. No credit card required.