DNB expectations for payment service providers regarding strong customer authentication

Q&A

Read aloud

Question:

What does DNB expect from payment service providers (PSPs) with respect to the application of strong customer authentication (SCA) effective from 14 September 2019?

Published: 26 November 2019

Answer:

On 21 June and 16 October 2019 the European Banking Authority (EBA) published its opinions on the elements of SCA under PSD2 and the deadline for completing the migration to SCA .

The EBA acknowledged the challenges for several European market actors that arise from the changes that are required, and therefore allowed the national competent authorities to extend the SCA migration deadline for specific actors to 31 December 2020. The statutory RTS application date remains unchanged, however, at 14 September 2019.

DNB works together with the EBA to promote a smooth and uniform migration to SCA for online card payments, and therefore adopts the EBA’s opinion. DNB will report to the EBA on the progress of migration based on aggregated reports.

In line with the EBA’s opinion, PSPs wishing to make use of the extended SCA migration deadline for online payment transactions must draft and implement migration plans in 2019. DNB recommends that market actors work together to ensure an orderly phased migration to SCA, and to complete the process by 31 December 2020.

The Dutch Payments Association has taken the initiative to draft general migration plan templates that meet DNB’s requirements and coordinate the monitoring of the migration plans. PSPs that use these plans do not need to submit additional information to DNB. Supervised institutions not participating in this initiative and wishing to make use of the extended SCA migration deadline may submit their migration plans to DNB through their account supervisor before 1 December 2019.

Please contact the Dutch Payment Association for more information about the migration plan initiative at sca-migration@Betaalvereniging.nl .

Discover related articles

Q&A

Payment services

Banks

Electronic money institutions

Payment institutions

Share:

Share on LinkedIn

Share on X

Share on Facebook

Share via Email

Interesting articles

Fine for CCV Group B.V. for lack of SIRA

21 July 2026

Enforcement measures

De Nederlandsche Bank (DNB) discloses its decision of 9 July 2020 to impose an administrative fine on CCV Group B.V. (CCV). DNB also discloses its decisions on CCV’s objection of 13 April 2022 and CCV’s subsequent appeal and higher appeal.

Read more Fine for CCV Group B.V. for lack of SIRA

Enforcement measures

21 July 2026

Prudential rules do not hinder bank financing for EU priorities

17 July 2026

News item supervision

Europe faces historic investment challenges, in which banks will play an important financing role. Prudential requirements strengthen banks’ resilience, without posing a major obstacle to their financing. Unlocking more private finance requires better risk-sharing and deeper financial integration.

Read more Prudential rules do not hinder bank financing for EU priorities

News item supervision

17 July 2026

DNB Inhouse Day for the Dutch banking sector: financial crime supervision

16 July 2026

News item supervision

Following last year’s successful event, De Nederlandsche Bank (DNB) will again host an Inhouse Day for AML/CFT professionals in the Dutch banking sector. The event is designed to encourage dialogue and provide further insight into DNB’s AML/CFT supervision.

Read more DNB Inhouse Day for the Dutch banking sector: financial crime supervision

News item supervision

16 July 2026

Administrative fine imposed on CCV for inadequate customer due diligence

13 July 2026

Enforcement measures

De Nederlandsche Bank (DNB) imposed an administrative fine of €2.65 million on payment institution CCV Netherlands B.V. (CCV). We have imposed the fine because CCV failed to adequately and continuously monitor transactions.

Read more Administrative fine imposed on CCV for inadequate customer due diligence

Enforcement measures

13 July 2026

Necessary cookies

To ensure the proper operation of the website, De Nederlandsche Bank (DNB) uses functional cookies and analytics cookies, and has taken measures to ensure that these cookies have little or no impact on the privacy of website users.

Optional cookies

Some pages include embedded content from external websites. These websites may use proprietary (tracking) cookies. This allows third parties to track visitor statistics, show personalised content and display targeted ads, for example.

You can make your choice about allowing these optional cookies both when you first visit the website and when you navigate to a page with embedded content.