---
title: Managing SCA Compliance
slug: managing-sca-compliance
docTags: 
createdAt: 2025-01-31T12:00:19.584Z
---

## What is Strong Customer Authentication?

The Payment Services Directive (PSD2), has introduced a new regulatory requirement: **Strong Customer Authentication** (SCA). 

The aim of the SCA is to add an increased layer of security for card not present transactions, when making mobile and online payments.

To authenticate the transaction, merchants can verify the consumer's identity with the issuer. 
To be compliant with SCA, 3D Secure 2 transactions have additional **authentication** and **transaction **information within the payment flow.

This new version of 3D Secure, offers a better user experience and helps to minimise some of the friction the authentication adds to the checkout flow.

SCA requires authentication to use at least **two **of the following three aspects:



::::VerticalSplit{layout="middle"}
:::VerticalSplitItem
- Something the consumer <font color="#6a4ee1">**knows**</font>.
  - For example, password or PIN.

- Something the consumer <font color="#6a4ee1">**has**</font>.&#x20;
  - For example, phone or hardware token.

- Something the consumer <font color="#6a4ee1">**is**</font>.
  - For example, fingerprint or face recognition.
:::

:::VerticalSplitItem
::Image[]{src="https://api.archbee.com/api/optimize/O_JUvBuqRy8kfJt7vTm8V-f8zVRUkcW-VX6UVDvakWS-20250205-150628.png" size="88" width="2504" height="2364" position="flex-start" alt="sca" showCaption="false"}
:::
::::