Individuals

Back

Do you apply SCA to all card transactions?

No, there are a series of exemptions and legal exceptions that allow one not to always have to request the two authentication factors, which benefits the user’s experience without the payment ceasing to be safe. 

 

On one hand, there are various types of payment that, due to their actual nature, are excluded by the PSD2 from the requisite to request strong authentication. These are payments initiated by post or by telephone, payment of products or services when there is an agreement between the store and the holder that allows the store to charge without the holder having to perform a prior action that triggers it (for example, payment of subscriptions, supplies, etc.), and payments with anonymous prepaid cards.

 

Moreover, the SCA requisite only applies when the issuer and the acquirer are in any of the countries in the European Economic Area (EEA), so payments with cards issued outside the EEA are not subject to SCA.

 

On the other hand, a series of special situations are foreseen under which Issuers may possibly decide not to apply SCA. These situations are:

 

  • Personal payment by contactless card of amounts under € 20, up to a maximum of 5 operations or an accumulated amount of € 150.
  • Payments on Internet for an amount under € 30, up to a maximum of 5 operations, or an accumulated amount of € 100.
  • Recurring payments from the same account and to the same store.
  • Payments at unattended terminals on motorways, toll booths and parking lots.
  • Payments to receivers trusted by the holder, that the issuer is specifically instructed are such.
  • Some corporate payments.
  • Payments with low fraud risk.

 

Return to frequent questions on PSD2 for stores.

For Unicaja Banco S.A., the holder of the web page, it is important to adapt to your tastes and preferences, for which we use own and third-party cookies, that gather connection data that may be linked to your registration user name, the purpose of which is to measure traffic and user interaction with the web page, to help to improve operation of the web content, as well as the services and products offered, preparing behaviour profiles, while always protecting your privacy. You may transparently choose the configuration that suits you best, without that causing any change in your usual operations.