EU Financial Regulatory Q&A Database

Consent for the provision of PIS and AIS

Directive 2015/2366/EU (PSD2) · Art. 66, 67 and 68

Signature performed on the screen of a digital device as a factor in a two-factor SCA

Directive 2015/2366/EU (PSD2) · Art. 98

Access by AISPs when customer not present up to 4 times in a 24 hour period

Directive 2015/2366/EU (PSD2) · Art. 98

Exemptions from Strong Customer Authentication (SCA): trusted beneficiaries

Directive 2015/2366/EU (PSD2) · Art. 98

Exemption from strong customer authentication (SCA) for payment account information in combination with accessing account information online in web browser

Directive 2015/2366/EU (PSD2) · Art. 97

Calculation of fraud rates in relation to Exemption Threshold Values (ETVs)

Directive 2015/2366/EU (PSD2) · Art. 98

Applicability of exemption from strong customer authentication (SCA) under Article 17 for card payments

Directive 2015/2366/EU (PSD2) · Art. 98

Operation and security risk assessment of a branch of a credit institution

Directive 2015/2366/EU (PSD2) · Art. 95

Interpretation of 'Active request for account information'

Directive 2015/2366/EU (PSD2) · Art. 67

Major incidents reporting

Directive 2015/2366/EU (PSD2) · Art. 96

Applicability of Strong Customer Authentication (SCA) to existing recurring payments solutions

Directive 2015/2366/EU (PSD2) · Art. 97

Criteria for the application of the transaction risk analysis (TRA) exemption – Fraud rate calculation methodology for the application of the TRA exemption

Directive 2015/2366/EU (PSD2) · Art. 97

Application of SCA when a PSU accesses payment transactions data older than on the last 90 days, without having access to sensitive payment data and for a period of 90 days after the last access using SCA

Directive 2015/2366/EU (PSD2) · Art. 97

Responsibility of national authority with regards to audit reports

Directive 2015/2366/EU (PSD2) · Art. 97

Review of Security Measures - Auditors expertise

Directive 2015/2366/EU (PSD2) · Art. 97

Review of the security measures: Audit report

Directive 2015/2366/EU (PSD2) · Art. 97

On the access to trusted beneficiaries lists (RTS Art 13) by TPPs in write mode

Directive 2015/2366/EU (PSD2) · Art. 97

Accessing payment account online in web browser shall exceed not 5 minutes without acitvity

Directive 2015/2366/EU (PSD2) · Art. 97

EMV cards and EMV terminals supporting online authentication

Directive 2015/2366/EU (PSD2) · Art. 97

Criteria for the application of the transaction risk analysis (TRA) exemption – Application of the TRA exemption at the level of individual brand, product or scheme

Directive 2015/2366/EU (PSD2) · Art. 97

Criteria for the application of the transaction risk analysis (TRA) exemption – Application of the TRA exemption by authorized PSPs other than the issuer and the acquirer

Directive 2015/2366/EU (PSD2) · Art. 97

Persistent authentication for wearable devices

Directive 2015/2366/EU (PSD2) · Art. 97

Obligatory nature of the SCA and exemption based on transaction risk analysis

Directive 2015/2366/EU (PSD2) · Art. Article 98 - RTS on SCA and CSC

Does transaction monitoring need to be real time?

Directive 2015/2366/EU (PSD2) · Art. Article 95 - Management of operational and security risks

Display of incorrect authentication factors in case of failed authentication attempts

Directive 2015/2366/EU (PSD2) · Art. 97

Qualification of SMS OTP as an authentication factor

Directive 2015/2366/EU (PSD2) · Art. 97

Application of the exemption for transactions to trusted beneficiaries to Face-to-Face transactions

Directive 2015/2366/EU (PSD2) · Art. 97

Ban imposed by certain national authorities on the use of the term “neobank” for payment institution

Directive 2015/2366/EU (PSD2) · Art. '1'

Clarification on the use of PSU-linked tokens in payment initiation services under the RTS

Directive 2015/2366/EU (PSD2) · Art. n.a.

Introduction of additional mandatory steps or redirections in PISP payment initiation flows

Directive 2015/2366/EU (PSD2) · Art. n.a.

Requirement for ASPSPs to comply with standardized communication protocols under Article 30(3) of Commission Delegated Regulation (EU) 2018/389

Directive 2015/2366/EU (PSD2) · Art. n.a.

Supervisory obligations of NCAs under Article 32(2) of Commission Delegated Regulation (EU) 2018/389

Directive 2015/2366/EU (PSD2) · Art. n.a.

Obstacle assessment of requiring an additional SCA for PIS within an existing authenticated AIS session

Directive 2015/2366/EU (PSD2) · Art. Article: 98

Obstacle assessment of requiring multiple manual checkboxes for a single AIS consent

Directive 2015/2366/EU (PSD2) · Art. Article: 98

Obstacle assessment of an ASPSP offering only web redirection to TPPs while a superior native app authentication method exists for its direct users

Directive 2015/2366/EU (PSD2) · Art. Article: 98

Execution of an authorized payment instruction made conditional on manual user redirection

Directive 2015/2366/EU (PSD2) · Art. Article: 98

Payment account definition

Directive 2015/2366/EU (PSD2) · Art. 4

Application of general requirements of Chapter 6 of the Regulation (EU) No 575/2013 regarding the definition of own funds

Directive 2015/2366/EU (PSD2) · Art. 4,8,9

Application of Instant Payment Regulation (IPR) to Securities Providers

Directive 2015/2366/EU (PSD2) · Art. 1

non-discrimination in implementing PSD2 for safeguarding mechanisms

Directive 2015/2366/EU (PSD2) · Art. 10

Payment service user - both payer and payee

Directive 2015/2366/EU (PSD2) · Art. 4

Transactions executed via electronic mail (email)

Directive 2015/2366/EU (PSD2) · Art. 97

Exclusion of cash withdrawal services from PSD2

Directive 2015/2366/EU (PSD2) · Art. 3

Definition of "Communication Standards" under Article 30.3

Directive 2015/2366/EU (PSD2) · Art. n.a.

Providing payment service via Internet banking (web-application)

Directive 2015/2366/EU (PSD2) · Art. 4

Clarification needed in dedicated Interfaces supervision

Directive 2015/2366/EU (PSD2) · Art. n.a.

Provision of external payroll accounting services to an employer

Directive 2015/2366/EU (PSD2) · Art. 4

Legal requirement for ASPSPs to provide for cancellation of future dated pay-ments through its dedicated payment initiation services interface

Directive 2015/2366/EU (PSD2) · Art. 66

Third party access to account attributes

Directive 2015/2366/EU (PSD2) · Art. 66

Requirement for loan agents to register as payment service providers under EU's Second Payment Services Directive 2015/2366 ("PSD2").

Directive 2015/2366/EU (PSD2) · Art. 4