EU Financial Regulatory Q&A Database

Clarification on whether a particular business model type constitutes the provision of an account information service as defined by Article 4 (16) of PSD2

Directive 2015/2366/EU (PSD2) · Art. Article 4

Is the scope of the RTS on strong customer authentication (SCA) and secure communication one-leg or two-leg?

Directive 2015/2366/EU (PSD2) · Art. 2

The Implementation of the electronic communications exclusion in the voiced-based premium rate services market

Directive 2015/2366/EU (PSD2) · Art. 3

Geographical scope of application of the RTS on strong customer authentication (SCA) and secure communication requirements – ‘Two-leg’ transactions

Directive 2015/2366/EU (PSD2) · Art. 97

What is considered as a dedicated interface

Directive 2015/2366/EU (PSD2) · Art. 98

Inclusion of time taken for SCA in the performance KPI

Directive 2015/2366/EU (PSD2) · Art. 98

Contactless transactions - SCA

Directive 2015/2366/EU (PSD2) · Art. 98

Review of security measures

Directive 2015/2366/EU (PSD2) · Art. 97

SCA at vending machines without PIN pad

Directive 2015/2366/EU (PSD2) · Art. 97

Responsibility for comprehensive assessment according to Article 95(2) PSD2

Directive 2015/2366/EU (PSD2) · Art. 95

Liability for fraud when SCA exemption used

Directive 2015/2366/EU (PSD2) · Art. 74

Confidentiality of offline PIN

Directive 2015/2366/EU (PSD2) · Art. 97

Scope of the corporate SCA exemption.

Directive 2015/2366/EU (PSD2) · Art. 98

"Authorisation number" in eIDAS certificates

Directive 2015/2366/EU (PSD2) · Art. 65, 66, 67

Requirement on the use of a Qualified Certificate for Electronic Seals (QSealC) for integrity and authenticity

Directive 2015/2366/EU (PSD2) · Art. 98

Qualified certificate under eIDAS for ASPSP

Directive 2015/2366/EU (PSD2) · Art. 98

Secure corporate payment processes and protocols

Directive 2015/2366/EU (PSD2) · Art. 98

Applicability of SCA to electronically processed SEPA Direct Debits / Interpretation of EBA Q&A 2018_4359

Directive 2015/2366/EU (PSD2) · Art. 97

ASPSP providing updated payment status to PISP

Directive 2015/2366/EU (PSD2) · Art. 46

Testing eIDAS certificates before 14 September 2019

Directive 2015/2366/EU (PSD2) · Art. 98

Application of Transaction Risk Analysis (TRA) exemption – Real time risk analysis / monitoring

Directive 2015/2366/EU (PSD2) · Art. 98

Currency conversion of the EUR thresholds contained in the RTS

Directive 2015/2366/EU (PSD2) · Art. 97

Transaction Risk Analysis (TRA) exemption – Frequency of recalculation of fraud rate

Directive 2015/2366/EU (PSD2) · Art. 98

Exemption for secure corporate payment processes and protocols

Directive 2015/2366/EU (PSD2) · Art. 97

Certfication in relation to a Technical Service Provider (TSP)

Directive 2015/2366/EU (PSD2) · Art. 98

Authentication code

Directive 2015/2366/EU (PSD2) · Art. 97

Information to be provided / made available by ASPSP to payment initiation service provider (PISP)

Directive 2015/2366/EU (PSD2) · Art. 4

Wide usage portability between Member States

Directive 2015/2366/EU (PSD2) · Art. 33

Applicability of Article 34 (eIDAS certificates) prior to application date of Regulation (EU) 2018/389

Directive 2015/2366/EU (PSD2) · Art. 98

Content of eIDAS certificates if agents or outsource providers are involved

Directive 2015/2366/EU (PSD2) · Art. 14

Passporting and eIDAS certificates

Directive 2015/2366/EU (PSD2) · Art. 28

Application of the Low Value Transaction Limits

Directive 2015/2366/EU (PSD2) · Art. 97

Fraud rate calculation for TRA exemption – country dimension

Directive 2015/2366/EU (PSD2) · Art. 98

Fall back exemption

Directive 2015/2366/EU (PSD2) · Art. 98

Identification and access for testing purposes of entities that are not authorised third party providers (TPPs)

Directive 2015/2366/EU (PSD2) · Art. 98

ASPSP is denied the waiver to the fall-back by an NCA

Directive 2015/2366/EU (PSD2) · Art. 98

Application of the exemption related to a trusted beneficiary

Directive 2015/2366/EU (PSD2) · Art. 13

Subsequent instances of a recurring card payment transaction, other than the first, initial one, are transactions initiated by the payee only. This is also the case for card instalment transactions.

Directive 2015/2366/EU (PSD2) · Art. 97

Payee-initiated transactions with irregular period or variable amount

Directive 2015/2366/EU (PSD2) · Art. 97

Transactions initiated via Interactive Voice Response (IVR) solutions

Directive 2015/2366/EU (PSD2) · Art. 97

Applicability of SCA to ‘card payments initiated by the payee only’

Directive 2015/2366/EU (PSD2) · Art. 97

Does SCA apply to electronically processed SEPA Direct Debits ?

Directive 2015/2366/EU (PSD2) · Art. 4

Showing a password after it has been masked

Directive 2015/2366/EU (PSD2) · Art. 98

Contactless payments at point of sale - Applications of the conditions

Directive 2015/2366/EU (PSD2) · Art. 97

Communication plans to inform payment service providers making use of the dedicated interface

Directive 2015/2366/EU (PSD2) · Art. 98

Length of authentication codes

Directive 2015/2366/EU (PSD2) · Art. 97

Trusted Beneficiary exemption – Management of the exemption, information flows between PSPs in the payment transaction

Directive 2015/2366/EU (PSD2) · Art. 98

On the access to names and surnames through the API

Directive 2015/2366/EU (PSD2) · Art. 4

Explicit consent required by the ASPSP from the PSU to enable the PSU to use the services provided by TPPs / Consenso esplicito richiesto dall’ASPSP al PSU per consentirgli di avvalersi dei servizi prestati dai TPP

Directive 2015/2366/EU (PSD2) · Art. 64

Applicability of the low-value contactless exemption to contactless-only devices

Directive 2015/2366/EU (PSD2) · Art. 97