The RTS makes strong customer authentication (“SCA”) the basis for accessing a customer’s payment account, as well as for making payments online. This means that to prove their identity, users will have to provide at least two separate elements out of these three:
- something they know (a password or PIN code);
- something they own (a card, a mobile phone); and
- something they are (biometrics, e.g. fingerprint or iris scan).