EBA · 2019_4800 Final Q&A

Whitelisting

Regulation
Directive 2015/2366/EU (PSD2)
Article
97
Topic
Strong customer authentication and common and secure communication (incl. access)
Submitted by
Industry association
Submitted
2019-06-19
Answered
2020-09-25
Answer provided by
ESAs (EBA, ESMA, EIOPA)
Browse PSD2 Register → More Q&As on this regulation →

Question

Will a clearing house for distribution be enabled to facilitate the on-going maintenance of the whitelisting process?

Background

Intermediaries (Online Travel Agencies (OTAs), Brands, and Global distribution Systems (GDS)) are able to document their brands and group structures for whitelisting. The process of whitelisting each brand, location, or merchant places an undue burden on consumers to have all the information necessary to accurately complete the whitelisting process.

Answer

Article 13(1) of the Commission Delegated Regulation (EU) 2018/389 sets out that a payer can create or amend a list of trusted beneficiaries only through its account servicing payment service provider (ASPSP). Therefore, the creation or amendment of a trusted beneficiary list through an intermediary does not meet the requirements in Article 13(1) of the Commission Delegated Regulation. However, this does not preclude ASPSPs from outsourcing the management of the trusted beneficiaries list to a third party, subject to compliance with the general requirements on outsourcing and the EBA Guidelines on Outsourcing arrangements (EBA/GL/2019/02) .

Original source: European Banking Authority, Q&A ID 2019_4800

This Q&A is published by European Banking Authority and is non-binding. It does not constitute legal advice. Updated weekly from official ESA sources.

Similar Q&As

Trusted Beneficiary exemption – Management of the exemption, information flows between PSPs in the payment transaction

Answered 2019-01-25

On the access to trusted beneficiaries lists (RTS Art 13) by TPPs in write mode

Answered 2018-10-26

Using Trusted Beneficiary Lists to Auto Reject PISP Transactions

Answered 2021-01-15

Application of the exemption related to a trusted beneficiary

Answered 2019-03-08

Payment Initiation Scope and Trusted Beneficiaries

Answered 2021-01-15

More Q&As on this topic

Definition of "equivalent authentication procedure" for journeys initiated from a mobile application

Answered 2026-06-12

Obstacle assessment of a mandatory client segment selection screen in a redirection journey

Answered 2026-06-12

Clarification of the scope of the term "authentication procedures" in the context of the RTS and the EBA Opinion on obstacles

Answered 2026-06-12

SCA exception for Contactless only terminals (SoftPOS) in case of emergency

Answered 2025-10-03

the use of strong and widely recognized encryption techniques

Answered 2025-10-03

📋 Track EU financial regulation continuously

Forseti monitors EU financial regulation and delivers personalised alerts anchored to verified official sources.

Start free trial → Learn more

14-day free trial. No credit card required.