What SCA means for a merchant
The FCA explains that Strong Customer Authentication is intended to improve payment security and limit fraud. It uses two or more independent elements from knowledge, possession and inherence where the rules require it.
For an online merchant, the practical implementation normally sits across the checkout, gateway, acquirer and card issuer. That is why configuration should be agreed with the payment provider rather than improvised from a generic checklist.
Where 3D Secure 2 fits
3D Secure allows transaction and device information to support cardholder authentication. Some transactions can complete without an interactive challenge; others may require the customer to verify through their issuer.
Authentication does not guarantee authorisation and is not a blanket answer to every chargeback. Keep fraud controls, customer communication and fulfilment evidence in place.
Treat exemptions carefully
Low-value
Can be subject to limits and cumulative controls applied within the payment chain.
Transaction risk analysis
Depends on risk thresholds, fraud performance and the relevant provider or issuer decision.
Recurring payments
The initial setup and later merchant-initiated transactions need the correct flags and agreement.
Trusted beneficiaries
Availability and application depend on the issuer and payment flow.
Questions for your gateway or acquirer
- Which transactions are submitted for authentication?
- Who requests an exemption and who can decline it?
- How are soft declines recovered?
- How are recurring and merchant-initiated transactions flagged?
- What authentication data is retained for disputes?
- How are challenge, abandonment and authorisation outcomes reported?
Measure the complete checkout
Track authentication rate, challenge rate, checkout completion, authorisation and fraud together. Improving one metric while losing legitimate customers or increasing disputes is not an improvement.
Want to understand what you are actually paying?
Send your latest merchant statement and Card Payment Connect will assess the charges, pricing structure and contract information available.
Get My Statement ReviewedOfficial sources
About this guide
Published by Card Payment Connect, an independent card-payment consultancy for UK businesses. Reviewed by Matthew McCarthy, who has worked in UK merchant services for over a decade. Last reviewed 11 September 2026.