with a better browsing experience; allow us to assess, monitor, and improve the website’s
performance; and enable our partners to advertise to you. You may disable the cookies by changing
the settings in your browser, and you may tell us not to share your cookie data with third parties.
With any piece of legislation, an organization has to work out how far to go beyond simple compliance with the letter of the law. Payment Services Directive 2 (PSD2) and its associated Regulatory Technical Standards (RTS) is no different. This article looks at compliance with the Strong Customer Authentication (SCA) requirements of PSD2 from the perspective of a payment service provider (PSP) and asks the question: Is it worth going beyond the bare minimum?