EU Financial Regulatory Q&A Database

Consent for the provision of PIS and AIS

Directive 2015/2366/EU (PSD2) · Art. 66, 67 and 68

Signature performed on the screen of a digital device as a factor in a two-factor SCA

Directive 2015/2366/EU (PSD2) · Art. 98

Access by AISPs when customer not present up to 4 times in a 24 hour period

Directive 2015/2366/EU (PSD2) · Art. 98

Exemptions from Strong Customer Authentication (SCA): trusted beneficiaries

Directive 2015/2366/EU (PSD2) · Art. 98

Exemption from strong customer authentication (SCA) for payment account information in combination with accessing account information online in web browser

Directive 2015/2366/EU (PSD2) · Art. 97

Calculation of fraud rates in relation to Exemption Threshold Values (ETVs)

Directive 2015/2366/EU (PSD2) · Art. 98

Applicability of exemption from strong customer authentication (SCA) under Article 17 for card payments

Directive 2015/2366/EU (PSD2) · Art. 98

Operation and security risk assessment of a branch of a credit institution

Directive 2015/2366/EU (PSD2) · Art. 95

Interpretation of 'Active request for account information'

Directive 2015/2366/EU (PSD2) · Art. 67

Major incidents reporting

Directive 2015/2366/EU (PSD2) · Art. 96

Applicability of Strong Customer Authentication (SCA) to existing recurring payments solutions

Directive 2015/2366/EU (PSD2) · Art. 97

Criteria for the application of the transaction risk analysis (TRA) exemption – Fraud rate calculation methodology for the application of the TRA exemption

Directive 2015/2366/EU (PSD2) · Art. 97

Application of SCA when a PSU accesses payment transactions data older than on the last 90 days, without having access to sensitive payment data and for a period of 90 days after the last access using SCA

Directive 2015/2366/EU (PSD2) · Art. 97

Review of Security Measures - Auditors expertise

Directive 2015/2366/EU (PSD2) · Art. 97

Review of the security measures: Audit report

Directive 2015/2366/EU (PSD2) · Art. 97

Responsibility of national authority with regards to audit reports

Directive 2015/2366/EU (PSD2) · Art. 97

On the access to trusted beneficiaries lists (RTS Art 13) by TPPs in write mode

Directive 2015/2366/EU (PSD2) · Art. 97

Accessing payment account online in web browser shall exceed not 5 minutes without acitvity

Directive 2015/2366/EU (PSD2) · Art. 97

Persistent authentication for wearable devices

Directive 2015/2366/EU (PSD2) · Art. 97

EMV cards and EMV terminals supporting online authentication

Directive 2015/2366/EU (PSD2) · Art. 97

Criteria for the application of the transaction risk analysis (TRA) exemption – Application of the TRA exemption by authorized PSPs other than the issuer and the acquirer

Directive 2015/2366/EU (PSD2) · Art. 97

Criteria for the application of the transaction risk analysis (TRA) exemption – Application of the TRA exemption at the level of individual brand, product or scheme

Directive 2015/2366/EU (PSD2) · Art. 97

Obligatory nature of the SCA and exemption based on transaction risk analysis

Directive 2015/2366/EU (PSD2) · Art. Article 98 - RTS on SCA and CSC

Does transaction monitoring need to be real time?

Directive 2015/2366/EU (PSD2) · Art. Article 95 - Management of operational and security risks

Qualification of SMS OTP as an authentication factor

Directive 2015/2366/EU (PSD2) · Art. 97

Display of incorrect authentication factors in case of failed authentication attempts

Directive 2015/2366/EU (PSD2) · Art. 97

Application of the exemption for transactions to trusted beneficiaries to Face-to-Face transactions

Directive 2015/2366/EU (PSD2) · Art. 97

Payment account definition

Directive 2015/2366/EU (PSD2) · Art. 4

Application of Instant Payment Regulation (IPR) to Securities Providers

Directive 2015/2366/EU (PSD2) · Art. 1

Payment service user - both payer and payee

Directive 2015/2366/EU (PSD2) · Art. 4

Transactions executed via electronic mail (email)

Directive 2015/2366/EU (PSD2) · Art. 97

Exclusion of cash withdrawal services from PSD2

Directive 2015/2366/EU (PSD2) · Art. 3

Providing payment service via Internet banking (web-application)

Directive 2015/2366/EU (PSD2) · Art. 4

Provision of external payroll accounting services to an employer

Directive 2015/2366/EU (PSD2) · Art. 4

Legal requirement for ASPSPs to provide for cancellation of future dated pay-ments through its dedicated payment initiation services interface

Directive 2015/2366/EU (PSD2) · Art. 66

Application of strong customer authentication (SCA) where Account Information Service users access the Account Information Service Providers’ (AISPs) own channels and the previously retrieved payment account information compiled and stored therein

Directive 2015/2366/EU (PSD2) · Art. 97