EU Financial Regulatory Q&A Database

Consent for the provision of PIS and AIS

Directive 2015/2366/EU (PSD2) · Art. 66, 67 and 68

Signature performed on the screen of a digital device as a factor in a two-factor SCA

Directive 2015/2366/EU (PSD2) · Art. 98

Access by AISPs when customer not present up to 4 times in a 24 hour period

Directive 2015/2366/EU (PSD2) · Art. 98

Exemptions from Strong Customer Authentication (SCA): trusted beneficiaries

Directive 2015/2366/EU (PSD2) · Art. 98

Exemption from strong customer authentication (SCA) for payment account information in combination with accessing account information online in web browser

Directive 2015/2366/EU (PSD2) · Art. 97

Calculation of fraud rates in relation to Exemption Threshold Values (ETVs)

Directive 2015/2366/EU (PSD2) · Art. 98

Applicability of exemption from strong customer authentication (SCA) under Article 17 for card payments

Directive 2015/2366/EU (PSD2) · Art. 98

Operation and security risk assessment of a branch of a credit institution

Directive 2015/2366/EU (PSD2) · Art. 95

Interpretation of 'Active request for account information'

Directive 2015/2366/EU (PSD2) · Art. 67

Major incidents reporting

Directive 2015/2366/EU (PSD2) · Art. 96

Applicability of Strong Customer Authentication (SCA) to existing recurring payments solutions

Directive 2015/2366/EU (PSD2) · Art. 97

Criteria for the application of the transaction risk analysis (TRA) exemption – Fraud rate calculation methodology for the application of the TRA exemption

Directive 2015/2366/EU (PSD2) · Art. 97

Application of SCA when a PSU accesses payment transactions data older than on the last 90 days, without having access to sensitive payment data and for a period of 90 days after the last access using SCA

Directive 2015/2366/EU (PSD2) · Art. 97

Review of the security measures: Audit report

Directive 2015/2366/EU (PSD2) · Art. 97

Review of Security Measures - Auditors expertise

Directive 2015/2366/EU (PSD2) · Art. 97

Responsibility of national authority with regards to audit reports

Directive 2015/2366/EU (PSD2) · Art. 97

On the access to trusted beneficiaries lists (RTS Art 13) by TPPs in write mode

Directive 2015/2366/EU (PSD2) · Art. 97

Accessing payment account online in web browser shall exceed not 5 minutes without acitvity

Directive 2015/2366/EU (PSD2) · Art. 97

Persistent authentication for wearable devices

Directive 2015/2366/EU (PSD2) · Art. 97

Criteria for the application of the transaction risk analysis (TRA) exemption – Application of the TRA exemption by authorized PSPs other than the issuer and the acquirer

Directive 2015/2366/EU (PSD2) · Art. 97

Criteria for the application of the transaction risk analysis (TRA) exemption – Application of the TRA exemption at the level of individual brand, product or scheme

Directive 2015/2366/EU (PSD2) · Art. 97

EMV cards and EMV terminals supporting online authentication

Directive 2015/2366/EU (PSD2) · Art. 97

Obligatory nature of the SCA and exemption based on transaction risk analysis

Directive 2015/2366/EU (PSD2) · Art. Article 98 - RTS on SCA and CSC

Does transaction monitoring need to be real time?

Directive 2015/2366/EU (PSD2) · Art. Article 95 - Management of operational and security risks

Qualification of SMS OTP as an authentication factor

Directive 2015/2366/EU (PSD2) · Art. 97

Display of incorrect authentication factors in case of failed authentication attempts

Directive 2015/2366/EU (PSD2) · Art. 97

Application of the exemption for transactions to trusted beneficiaries to Face-to-Face transactions

Directive 2015/2366/EU (PSD2) · Art. 97

Ban imposed by certain national authorities on the use of the term “neobank” for payment institution

Directive 2015/2366/EU (PSD2) · Art. '1'

Clarification on the use of PSU-linked tokens in payment initiation services under the RTS

Directive 2015/2366/EU (PSD2) · Art. n.a.

Introduction of additional mandatory steps or redirections in PISP payment initiation flows

Directive 2015/2366/EU (PSD2) · Art. n.a.

Requirement for ASPSPs to comply with standardized communication protocols under Article 30(3) of Commission Delegated Regulation (EU) 2018/389

Directive 2015/2366/EU (PSD2) · Art. n.a.

Supervisory obligations of NCAs under Article 32(2) of Commission Delegated Regulation (EU) 2018/389

Directive 2015/2366/EU (PSD2) · Art. n.a.

Execution of an authorized payment instruction made conditional on manual user redirection

Directive 2015/2366/EU (PSD2) · Art. Article: 98

Obstacle assessment of requiring multiple manual checkboxes for a single AIS consent

Directive 2015/2366/EU (PSD2) · Art. Article: 98

Obstacle assessment of requiring an additional SCA for PIS within an existing authenticated AIS session

Directive 2015/2366/EU (PSD2) · Art. Article: 98

Obstacle assessment of an ASPSP offering only web redirection to TPPs while a superior native app authentication method exists for its direct users

Directive 2015/2366/EU (PSD2) · Art. Article: 98

Application of general requirements of Chapter 6 of the Regulation (EU) No 575/2013 regarding the definition of own funds

Directive 2015/2366/EU (PSD2) · Art. 4,8,9

non-discrimination in implementing PSD2 for safeguarding mechanisms

Directive 2015/2366/EU (PSD2) · Art. 10

Definition of "Communication Standards" under Article 30.3

Directive 2015/2366/EU (PSD2) · Art. n.a.

Clarification needed in dedicated Interfaces supervision

Directive 2015/2366/EU (PSD2) · Art. n.a.

Third party access to account attributes

Directive 2015/2366/EU (PSD2) · Art. 66

Requirement for loan agents to register as payment service providers under EU's Second Payment Services Directive 2015/2366 ("PSD2").

Directive 2015/2366/EU (PSD2) · Art. 4

The SCA-Exemption for account access based on art. 10 of Regulation (EU) 2018/389 as amended by Regulation (EU) 2022/2360.

Directive 2015/2366/EU (PSD2) · Art. 97

Eligibility of communication by AISPs with ASPSP throughout interface used for authentication and communication with the ASPSP's payment services users in case of ASPSP’s exemption from the fall back mechanism

Directive 2015/2366/EU (PSD2) · Art. 98

requirements for professional experience of representatives and board members of EMIs

Directive 2015/2366/EU (PSD2) · Art. 1

Is Article 5 of Regulation 2021/1230 applicable on the spot currency trading?

Directive 2015/2366/EU (PSD2) · Art. n.a.

Publication of quarterly statistics, according to GL 3 of the “Guidelines on the conditions to benefit from an exemption from the contingency mechanism under Article 33(6) of Regulation (EU) 2018/389 (RTS on SCA & CSC)”

Directive 2015/2366/EU (PSD2) · Art. 33

Initial Capital

Directive 2015/2366/EU (PSD2) · Art. 7

Interpretation of the words ‘preceding year’ in Method B under Article 9(1) of the PSD2

Directive 2015/2366/EU (PSD2) · Art. 9

Online foreign exchange

Directive 2015/2366/EU (PSD2) · Art. 3