Strong Customer Authentication (SCA) enforcement date

Last updated: 19 October 2020

Strong Customer Authentication (SCA) requirements officially went into effect on 14 September 2019.

Gradual enforcement of SCA requirements has already begun, as some banks have started to decline a portion of payments that aren’t SCA-ready. Full enforcement has not yet begun due to a temporary delay announced by the European Banking Authority on 21 June 2019. On 16 October 2019, the European Banking Authority announced that the new SCA requirements should be fully enforced by 31 December 2020.

As of 25 June 2020, the majority of European regulators have agreed to this new timeline, with one exception:

Although the full enforcement deadline for SCA is 31 December, 2020, some banks have already begun to enforce SCA by declining a portion of payments that are not SCA-ready (see table below). Please note that SCA plans are subject to change — follow this page for updates.

Enforcement start date Affected merchant countries Payments that require Strong Customer Authentication*
28 April, 2020 All of EEA + United Kingdom + Switzerland Payments for French American Express cardholders
(gradual ramping of enforcement until 31 Dec.)
25 August, 2020 All of EEA + United Kingdom + Switzerland Payments for Belgian cardholders
(gradual ramping of enforcement until 31 Dec.)
1 October, 2020 All of EEA + United Kingdom + Switzerland Payments for Dutch cardholders
(gradual ramping of enforcement until 31 Dec.)

Payments for French cardholders
(gradual ramping of enforcement until 31 Mar.)
1 January, 2021 All of EEA + United Kingdom + Switzerland All SCA-eligible payments in the EEA
(Doesn't include FR, UK & Swiss cardholder payments)
1 April, 2021 All of EEA + United Kingdom + Switzerland All SCA-eligible payments for French cardholders
1 June, 2021 All of EEA + United Kingdom + Switzerland Payments for UK & Swiss cardholders
(gradual ramping of enforcement until 15 Sep.)
15 September, 2021 All of EEA + United Kingdom + Switzerland All SCA-eligible payments for UK & Swiss cardholders

*Where possible, Stripe will request SCA exemptions.

How this impacts your business

Given the uncertainty around the enforcement timeline and ramp, we recommend preparing your payment flows to be SCA ready as soon as possible. This will help prevent an increase in declines as enforcement of these requirements ramps across European banks.

Our new payments APIs and other SCA-ready solutions are designed to take this uncertainty into account. If you are using our SCA-ready solutions, we will only apply authentication and exemptions when they are required by the cardholder's bank—adjusting to each country’s enforcement timeline to minimise friction.

We are closely tracking any change in banks’ behaviour as well as the ongoing regulatory discussions, and we will continue to update this page with the latest information.