EBA · 2018_4241 Final Q&A

Applicability of exemption under RTS Article 11 for payee’s PSPs (acquirers)

Regulation
Directive 2015/2366/EU (PSD2)
Article
98, para. 1
Topic
Strong customer authentication and common and secure communication (incl. access)
Submitted by
Industry association
Submitted
2018-09-06
Answered
2019-10-11
Answer provided by
ESAs (EBA, ESMA, EIOPA)

Question

Can an exemption under Article 11 of the RTS on strong customer authentication and secure communication be applied by the payee's payment service provider (PSP) (the acquirer) for card-based payments?

Background

This question relates to what we think is a mistake made by EBA in its opinion EBA-Op-2018-04, in which it states that exemption under Article 11 for card-based payments is applicable for both the payer’s PSP (issuer) and the payee’s PSP (acquirer). In its opinion EBA-Op-2018-04, the EBA provides in Table 2 an overview of whether or the payer’s PSP (issuer) and the payee’s PSP (acquirer) can decide on each of the exemptions set out under Articles 10 to 18. With regard to Article 11, contactless payments at POS, the table says the exemption is applicable for both the payer’s PSP (the issuer) and the payee’s PSP (the acquirer) for a card-based payment. We think this is wrong, as only the issuer can keep track of the cumulative limits for each card, and that the decision on the use of this exemption must therefore always be by the issuer, and is never applicable for the acquirers. Although the EBA explains in a footnote to the table that the issuer always has the final say, it is still important from a liability perspective (Article 74.2 of the PSD2) to ascertain which PSP that have made use of the exemption and is therefore liable in case of fraud.

Answer

Yes, as clarified in the EBA Opinion on the implementation of the regulatory technical standards on strong customer authentication (SCA) and common and secure communication,EBA-Op-2018-04 , the exemption under Article 11 of the Commission Delegated Regulation (EU) 2018/389 for card-based payment transactions is applicable for both the payee’s payment service provider (PSP) and the payer’s PSP on the basis that Article 11 refers to PSPs and does not limit it solely to the payer’s PSP. Further, card payment transactions are typically initiated by the payer through the payee. This EBA Opinion also clarified in table 2 “Summary table on who may apply an exemption” that the payer’s PSP always makes the ultimate decision on whether or not to accept or apply an exemption.  In the event that the payer’s PSP would not accept the contactless exemption to be applied by the payee’s PSP and wishes to apply SCA, the payer’s PSP would either apply SCA to the transaction or decline the transaction if it was not technically feasible to apply SCA. Q&A 2018_4042 provides additional information on how the liability requirements under Article 74(2) of PSD2 would apply.

Original source: European Banking Authority, Q&A ID 2018_4241

This Q&A is published by European Banking Authority and is non-binding. It does not constitute legal advice. Updated weekly from official ESA sources.

Similar Q&As

More Q&As on this topic

📋 Track EU financial regulation continuously

Forseti monitors EU financial regulation and delivers personalised alerts anchored to verified official sources.

14-day free trial. No credit card required.