The code sent by SMS will remain in place until 2022

A real headache for online retailers, the entry into force of the "strong authentication" obligation (SCA) has been postponed until 2022. France, as well as Italy, Spain, Germany and the UK have given banks an additional three years to comply with the DSP2 directive, reports The echoes.

A welcome reprieve for banking players, while the implementation of this directive was initially planned for September 14, 2019. The new payment standard SCA aims to enhance the security of transactions with the implementation of a two-way authentication. factors for all payments over 30 euros.

A three-year reprieve

It consists in verifying that you are at the origin of the payment, using at least two of the following factors: information that you are the only one to know (password, code), the use of a device that belongs to you (smartphone, smart card) and a biometric feature (fingerprint, facial or voice recognition …).

In France, the method currently used is the "3D Secure" system, which consists of sending a single-use code by SMS to secure the payment. A proven method: in 2018, the rate of fraud of authenticated transactions was lower than that of uncertified payments (0.07% against 0.21%), according to the figures of the Observatory of means of payment ( OSMP).

By 2022, players in the banking sector will have to offer new technologies to ensure the required level of security and further secure online payments.