Strong customer authentication for e-wallet deposits

What is Strong Customer Authentication (SCA)?

Strong Customer Authentication (SCA) is a requirement for an additional authentication step for online payments in:

• The EU
• Iceland
• Liechtenstein
• Norway

It falls under the European Union's Revised Directive on Payment Services (PSD2).

 

How does Strong Customer Authentication affect e-wallet payments?

E-wallet payments require an additional security check known as two-factor authentication.

 

How are e-wallet payments authenticated?

You may be asked to provide information from at least two of the following three categories:

Knowledge

Something you know, such as a password or PIN.

 

Ownership

Something you possess, such as a mobile phone or another device that receives a one-time passcode.

 

Biometrics

Something you have naturally, such as a fingerprint.

 

How does PayPal authenticate payments?

PayPal may ask you to complete one of the following additional security checks when you log in or make a payment:

Trusted device

If PayPal recognizes your device as trusted, you may only need to enter your email address or username and password.

 

Mobile phone

PayPal may send a one-time passcode by SMS to the mobile phone number registered to your account.

 

Landline phone

PayPal may call your registered landline and ask you to enter the one-time passcode displayed on your device.

Follow the on-screen instructions to complete authentication.

 

How do I update my phone number on PayPal?

1. Log in to your PayPal account.
2. Select the 'Settings' icon next to 'Log Out'.
3. Select 'Your Profile'.
4. Select 'Update' next to 'Phone'.

 

Where can I find more information?

Go to the PayPal website for more information on PayPal and PSD2 security features.

 

How does Skrill authenticate payments?

When you log in or complete a transaction, Skrill may ask you to either:

• Enter a six-digit verification code sent by SMS to your mobile phone.
• Verify your primary email address.

Can I skip future Skrill authentication checks?

Yes, if you have previously completed SCA and selected either of these options:

• 'Skip authentication when doing this transaction in future'.
• 'Trust this device'.

 

What happens if I enter an incorrect Skrill verification code?

If you enter an incorrect verification code four times:

• Your payment will be declined, and:
• Your Skrill account will be locked.

If you have entered an incorrect code fewer than three times, you can go back and select another payment method, such as a card.

 

Where can I find more information?

For more information, go to the Skrill support page on Strong Customer Authentication.

 

How does Neteller authenticate payments?

When you make a payment using Neteller, you confirm the transaction when you:

1. Log into your Neteller account
2. Enter your PIN.
3. Use fingerprint recognition.

 

Can I skip future Neteller authentication checks?

Yes, you can skip future checks if you have previously completed SCA and selected either:

• 'Skip authentication when doing this transaction in future'.
• 'Trust this device'.

 

What happens if I enter an incorrect Neteller verification code?

If you enter an incorrect verification code four times, your:

• Payment will be declined, and:
• Neteller account will be locked.

If you have entered an incorrect code fewer than three times, you can:

1. Go back
2. Select another payment method, such as a card.

 

Where can I find more information?

For more information about Neteller’s Strong Customer Authentication, visit the Neteller support page on SCA.

 

How does MuchBetter authenticate payments?

When you make a payment, you confirm the transaction by logging in to your MuchBetter account on your mobile phone using one of the following methods:

• Enter your PIN.

• Use fingerprint recognition.

 

How does the MuchBetter dynamic CVV work?

MuchBetter cards do not have a CVV code printed on the back.

This is because MuchBetter uses a dynamic CVV system that frequently changes your card's CVV code.

Generating the CVV code provides two-factor authentication before you submit the transaction.

 

Where can I find more information?

For more information, visit the MuchBetter support page on security features.

 

How does Payz authenticate account access?

Whenever you access your account, Payz requires you to enter:

• Your password
• A verification code

Depending on your verification settings, you can receive the code:

• Using Google Authenticator.
• Directly to your phone.

 

Will I keep needing to enter a verification code every time I access my Payz account?

No, adding a device to your trusted list means you will not need to enter a verification code every time you access your account from that device.

You can manage your two-step verification settings in your Payz account, including your trusted devices.

 

Where can I find more information?

For more information, visit the Payz page on security features.