- Are you processing payments for cards issued in Europe?
- Are you processing payments through a European acquirer?
If you answered No to the questions above, you are not in scope of PSD2 SCA.
If you answered Yes to one of the above questions, you are not in scope of PSD2.
If you answered Yes to both questions and your transaction types are not included in the PSD2 out-of-scope transactions list, then your transactions are in scope of PSD2 SCA.
PSD2 mandate applies to:
- Countries within the EEA: Austria, Belgium, Bulgaria, Croatia, Republic of Cyprus, Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Liechtenstein, Lithuania, Luxembourg, Malta, Monaco, Netherlands, Norway, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden, and the UK.
- All transactions where both the issuing and acquiring banks are located within the countries listed above.
If a transaction is in scope you would need to make sure an SCA can be applied on such transaction.
Next, check if you are PSD2 SCA-compliant. If you already have a 3D Secure implementation, this means that you are already PSD2 SCA-compliant. (Click here to check if you're currently using 3D secure.)
Please visit our PSD2 guide to get more information.