DNB provides update on additional time for strong customer authentication
On 8 August, following similar announcements by other national supervisors, De Nederlandsche Bank (DNB) announced its intention to allow limited additional time beyond 14 September 2019 for market participants that had been unable to prepare for the introduction of strong customer authentication (Strong Customer Authentication, or SCA) for credit card transactions in time.

How much additional time will be allowed has not yet been determined; more information will follow later this year. DNB says that, together with the European Banking Authority (EBA), it aims to achieve a uniform migration to SCA for credit card transactions.
The background to DNB’s announcement is that, on 21 June 2019, the EBA published an opinion on the application of SCA . The opinion also addresses possible transitional issues caused by insufficiently timely preparation among various market participants, such as card schemes and merchants. These transitional issues could be harmful to both credit card holders and credit card merchants. The EBA opinion therefore allows competent supervisory authorities to grant market participants limited additional time to introduce SCA. The statutory implementation date for the Regulatory Technical Standards on SCA remains unchanged at 14 September 2019.
A condition for any extension is that the market participant concerned must draw up a sound plan with clear timelines. Relevant parties in the credit card ecosystem—including card schemes, card issuers and acquirers, credit card processors, the Dutch Consumers’ Association and Thuiswinkel.org—have asked the Dutch Payments Association to work with them to draw up the Dutch SCA Migration Plan and coordinate its implementation, subject to DNB’s approval.
Questions can be sent to sca-migration@betaalvereniging.nl.
Related articles
-
Digital Resilience and AI
-
News
-
Digital identity
-
-
Workshop on agentic payments and the EUDI Wallet
-
News
-
Digital identity
-
-
Payment orders with unstructured address data will be rejected starting November 14 or 15, 2026
-
News
-
European legislation
-
-
René Steenbeke nominated by EPC to the EPSG Cryptography Task Force
-
Association news
-
Standards in payment transactions
-
-
Stakeholder Forum looks (far) ahead
-
News
-
European legislation
-
-
Payments newsletter: Betaaljournaal 37
-
Payments newsletter
-