EBA · 2018_4056 Final Q&A

Application of the exemption for transactions to trusted beneficiaries to Face-to-Face transactions

Regulation
Directive 2015/2366/EU (PSD2)
Article
97
Topic
Strong customer authentication and common and secure communication (incl. access)
Submitted by
Other
Submitted
2018-06-28
Answered
2018-09-21
Answer provided by
ESAs (EBA, ESMA, EIOPA)
Browse PSD2 Register → More Q&As on this regulation →

Question

May the exemption for transactions to trusted beneficiaries (‘white-listing’) set out in Article 13 of Regulation (EU) 2018/389 (RTS on strong customer authentication and secure communication) apply to face-to-face transactions?

Background

PSPs are allowed not to apply SCA where the payer initiates a payment transaction and the payee is included in a list of trusted beneficiaries previously created by the payer (Article 13 of Regulation (EU) 2018/389 (RTS on strong customer authentication and secure communication), the so-called ‘white-list’ exemption). Regulation (EU) 2018/389 does not limit white-listing to remote transactions. The RTS only states that SCA can be by-passed when ' the payer initiates a payment transaction ’ to trusted beneficiaries. This would include both remote and face-to-face transactions. Whenever the RTS limits the application of an exemption to remote transactions, they do it so expressly. The exemption for low-value remote transactions (Article 16 RTS) and the Transaction Risk Analysis (TRA) exemption, for example, are expressly limited to ‘remote’ transactions.

Answer

Article 13 of the Commission Delegated Regulation (EU) 2018/389 does not limit the application of the exemption to remote transactions only (by contrast for instance with the transaction risk analysis exemption under Article 18 of the Delegated Regulation). Accordingly, the exemption could apply to non-remote transactions provided this is technically feasible to do so.

Original source: European Banking Authority, Q&A ID 2018_4056

This Q&A is published by European Banking Authority and is non-binding. It does not constitute legal advice. Updated weekly from official ESA sources.

Similar Q&As

Exemption for secure corporate payment processes and protocols

Answered 2019-06-07

Trusted Beneficiaries

Answered 2021-04-09

Criteria for the application of the transaction risk analysis (TRA) exemption – Application of the TRA exemption by authorized PSPs other than the issuer and the acquirer

Answered 2018-10-26

Applicability of exemption under RTS Article 16 for payee’s PSPs (acquirers)

Answered 2019-10-11

On the access to trusted beneficiaries lists (RTS Art 13) by TPPs in write mode

Answered 2018-10-26

More Q&As on this topic

Definition of "equivalent authentication procedure" for journeys initiated from a mobile application

Answered 2026-06-12

Obstacle assessment of a mandatory client segment selection screen in a redirection journey

Answered 2026-06-12

Clarification of the scope of the term "authentication procedures" in the context of the RTS and the EBA Opinion on obstacles

Answered 2026-06-12

SCA exception for Contactless only terminals (SoftPOS) in case of emergency

Answered 2025-10-03

the use of strong and widely recognized encryption techniques

Answered 2025-10-03

📋 Track EU financial regulation continuously

Forseti monitors EU financial regulation and delivers personalised alerts anchored to verified official sources.

Start free trial → Learn more

14-day free trial. No credit card required.