Strong customer authentication in the light of regulations – selected problems

The purpose of this article is to analyze the law that regulates security measures when applying strong customer authentication (SCA). The rules introduced by PSD2 regarding identity identification when making payments through the use of SCA are to reduce the risk of fraud and increase payment security by introducing solutions that reduce the possibility of making unauthorised or fraudulent payment transactions. The significant impact of these provisions on consumers with the simultaneous complexity of the requirements makes it particularly important to undertake considerations aimed at conducting such analyzes and attempting to identify potential threats in connection with legislative interference in this area of payment services.

This article also draws attention to the phenomenon of technologization of the payment services market law, and more broadly the financial market.

Bibliografia

Antala, M., Zsolt Szabó, L. (2016). Biometric authentication based on touchscreen swipe patterns, Procedia Technology 2016, (22), 862–869. https://doi.org/10.1016/j.protcy.2016.01.061

Byrski, J. (2017). Consumer Protection under Directive 2015/2366 on Payment Services in the Internal Market — Selected Issues. Zeszyty Naukowe Uniwersytetu Ekonomicznego w Krakowie, (8), 25–42. https://doi.org/10.15678/znuek.2017.0968.0802

European Banking Authority. (2014). Final Guidelines on the security of internet payments, EBA/GL/2014/12_Rev. European Banking Authority. https://eba.europa.eu/sites/default/documents/files/documents/10180/934179/f27bf266-580a-4ad0-aaec-59ce52286af0/EBA-GL-2014-12%20%28Guidelines%20on%20the%20security%20of%20internet%20payments%29_Rev1.pdf?retry=1 (27.11.2019).

European Banking Authority. (2018). Opinion of the European Banking Authority on the implementation of the RTS on SCA and CSC, EBA-Op-2018-04, https://eba.europa.eu/documents/10180/2137845/Opinion+on+the+implementation+of+the+RTS+on+SCA+and+CSC+%28EBA-2018-Op-04%29.pdf (27.11.2019).

European Banking Authority. (2019). Opinion of the European Banking Authority on the elements of strong customer authentication under PSD2. https://eba.europa. eu/documents/10180/2622242/EBA+Opinion+on+SCA+elements+under+PSD2+.pdf (27.11.2019).

European Central Bank. (2013). Recommendations for the Security of Internet Payments. Final Version After Public Consultation. European Centraln Bank.

Fedorowicz, M., Zalcewicz, A. (2019). An Analysis of EBA Soft Law on the Payment Services Market. Przegląd Ustawodawstwa Gospodarczego, (1), 2–7.

Fiscal Conduct Authority. (2019). FCA agrees plan for a phased implementation of Strong Customer Authentication. https://www.fca.org.uk/news/press-releases/fca-agrees-plan-phased-implementation-strong-customer-authentication (27.11.2019).

Lott, D. (2018). Biometrics: Modernising customer authentication for financial services and payments. Journal of Payments Strategy & Systems, 12 (4), 371–382.

Lovisotto, G., Malik, R., Sluganovic, I., Roeschlin, M., Trueman, P., Martinovic, I. (2017). Mobile Biometrics in Financial Services: A Five Factor Framework. Oxford: Department of Computer Science. University of Oxford. http://www.cs.ox.ac.uk/files/9113/Mobile%20Biome-trics%20in%20Financial%20Services. pdf (27.11.2019).

Mendyk-Krajewska, T. (2018). Techniki uwierzytelniania biometrycznego dla realizacji usług drogą elektroniczną. Ekonomiczne Problemy Usług, (2), 117–126.

Mendyk-Krajewska, T. (2019). Biometryczne metody sprawdzania tożsamości w nowych zastosowaniach. Rocznik Kolegium Analiz Ekonomicznych, (54), 35–47. https://doi.org/10.18276/epu.2018.131/2-11

Mielnicki, T., Wołowski, F., Grajek, M., Popis, P. (red.). (2013). Identyfikacja i uwierzytelnianie w usługach elektronicznych. Warszawa: Związek Banków Polskich.

Parasuraman, P. (2000). Technology readiness index (TRI): A Multiple-Item Scale to Measure Readiness to Embrace New Technologies. Journal of Service Research, 2(4), 307–320. https://doi.org/10.1177/109467050024001

Regnard-Weinrabe, B., Finlayson-Brown, J. (2019). Adapting to a changing payments landscape [w:] J. Madir (red.), FinTech: Law and Regulation (22–48). Cheltenham: Edward Elgar Publishing. https://doi.org/10.4337/9781788979023.00014

Woszczyński, T. (red.). (2015). Biometria w bankowości — kluczowe aspekty. Warszawa: Związek Banków Polskich.