Strong customer authentication: a summary of the key sources regarding SCA

byNasim Jenkouk
17. September 2019
1 minute read

Wichtige Informationsquellen für SCA | PayTechLaw

The 14^th of September 2019 marked the deadline for the implementation of the new requirements regarding strong customer authentication (SCA). On 21^st August 2019, the German Federal Financial Supervisory Authority (BaFin) extended the deadline for payment services providers domiciled in Germany with respect to online credit card payments (see here for my blog entry on “strong customer authentication”). Those of you who are interested in reading again what SCA entails, can find an explanation here.

Despite this, many questions have still not been clarified. This is why we have put together a summary of what we (currently) believe to be the key sources regarding SCA in the following infographic. You can use these sources to gain a better understanding of your SCA obligations.

Key sources regarding SCA are therefore just a click away. Have fun!

Tags:
SCA

Nasim Jenkouk

Virtual IBANs under BaFin scrutiny: New AML expectations for banks and payment service providers

byJosefine Spengler
6. August 2026

Virtual IBANs have become an established component of modern payment models. With Supervisory Notice 06/2026, BaFin now clarifies its expectations for credit institutions and payment service providers regarding transparency, anti-money laundering compliance and risk management in complex virtual IBAN structures.

FFinTech

5 minute read

The PFOF ban comes into force: What the new BaFin supervisory statement means for brokers and neobrokers

byNiklas Olschewski
24. July 2026

Since 1 July 2026, the ban on Payment for Order Flow (“PFOF”) has also been in force for purely domestic business relationships in Germany. On 22 July 2026, BaFin published a supervisory statement on this matter, in which it sets out in concrete terms for the first time which business models it considers to be compliant with the rules - and which are not.

RRegulatory

6 minute read

FIU Annual Report 2025 – Key Developments at a Glance

bySebastian Glaab,Christopher Gretsch,Tianqiao Pan
23. July 2026

Germany's FIU recorded a historic number of suspicious activity reports in 2025, while the number of analytical reports declined significantly. Alongside new regulatory requirements and a stronger international focus, neobanks have emerged as a key pillar of reporting activity. This article analyses the most important developments and highlights the questions that remain unanswered in the annual report.

BBanking

EuGH schafft Klarheit: Nicht jede Weiterleitung von Geldern Dritter ist ein Zahlungsdienst im Sinne der PSD2 ECJ Clarifies the Scope of PSD2: Not Every Transfer of Third-Party Funds Constitutes a Payment Service

3 minute read

ECJ Clarifies the Scope of PSD2: Not Every Transfer of Third-Party Funds Constitutes a Payment Service

byPeter Frey
23. July 2026

The ECJ has further clarified the distinction between payment services and other business models. The judgment confirms that merely receiving and forwarding third-party funds does not automatically trigger licensing requirements under PSD2. The decision provides greater legal certainty for FinTechs, platform operators and other businesses handling payment flows, while emphasising that the specific business model remains decisive.