Reporting of e-commerce card-based payment transactions falling within the scope of EBA Opinion EBA-Op-2019-06 for which no strong customer authentication was applied

In accordance with the EBA Guidelines on fraud reporting under PSD2 (EBA/GL/2018/05) as amended by the EBA Guidelines EBA/GL/2020/01 , e-commerce card based transactions initiated and executed from 1 July 2020 onwards that are subject to the supervisory flexibility allowed under the EBA Opinion  on the elements of strong customer authentication under PSD2 (EBA-Op-2019-06) and the EBA Opinion on the deadline for the migration to SCA for e-commerce card-based payment transactions (EBA-Op-2019-11), and for which strong customer authentication (SCA) is not applied for reasons other than an exemption in Articles 11 to 18 of the Commission Delegated Regulation (EU) 2018/389 , should be reported under the category “Other”, in row 3.2.1.3.10 / 3.2.2.3.8 of Data Breakdown C, row 4.2.1.3.8 / 4.2.2.3.7 of Data Breakdown D and/or, as applicable, row 6.1.2.11/ 6.2.2.8 of Data Breakdown F. By contrast, e-commerce card based transactions initiated and executed before 1 July 2020, that are subject to the above-mentioned supervisory flexibility and for which SCA is not applied for reasons other than an exemption in Articles 11 to 18 of the Delegated Regulation, should be reported only under the higher-level category “Of which authenticated via non-strong customer authentication”, and not under the breakdowns underneath relating to the different exemptions to the SCA. However, this will affect the validation rules under the relevant Data Breakdowns in Annex 2, as the total of the transactions reported under the higher-level category “Of which authenticated via non-strong customer authentication” could be higher than the total of the transactions reported under the breakdowns relating to the different exemptions to SCA.