European Banking Authority (EBA) rejects mobile device biometrics

The European Banking Authority (EBA) requires strong customer authentication (SCA) for electronic payments to improve security. However, on-device biometrics are no longer considered a valid method to be used as a second authentication factor, the EBA ruled on January 31, 2023.

Strong Customer Authentication (SCA): EBA Opinion allows for more time, and provides more clarity on the various SCA elements - Lexology

Strong Customer Authentication (SCA): EBA Opinion allows for more time, and provides more clarity on the various SCA elements - Lexology

Mastercard PSD2 - A Simple And Secure Online Payment Solution

Open Banking APIs - new secure services (PSD2)

Fintech Magazine's Essential Glossary of Open Banking Terms

Security vs. convenience: EBA clarifies application of Strong Customer Authentication for Digital Wallets, Alicia Hildner, Daniel Klingenbrunn

PDF) A comparative study on the application of biometric technologies for authentication in online banking

The EBA does not support device biometrics as an SCA element

Strong Customer Authentication: How SCA changed payments

Your online shopping will soon require more than just a bank card

Open Banking APIs - new secure services (PSD2)

European Banking Authority (EBA) Rejects On-Device Biometrics as a Suitable Method for Strong Customer Authentication

Strong Customer Authentication & Biometrics