Strong Customer Authentication (SCA) is a regulation by the European Banking Authority (EBA), which requires multi-factor authentication for payment gateways. SCA, as detailed in PSD2, was scheduled to go into effect from 14 September 2019, however, your local government may have extended this deadline.
Note: SCA is applicable to payment gateways throughout the European Union (EU) and European Economic Area (EEA).
Are payment gateways in Zoho Subscriptions SCA complaint?
We've worked to ensure that most of the payment gateways that you use in Zoho Subscriptions are SCA compliant. However, some payment gateways are still taking measures to become SCA compliant from their side, without which, they cannot be made SCA compliant in Zoho Subscriptions.
As soon as a payment gateway is SCA compliant, we will implement it in Zoho Subscriptions shortly. You can view the current status of SCA compliance for your integrated payment gateways and whether there's any action required from your side from the Integrations page. To do this, go to Settings > Integrations > Online Payments.
Does SCA affect anything else in Zoho Subscriptions?
Yes. Since SCA enforces multi-factor authentication for almost every transaction, the Add New Card option, which allowed you to enter your customer's credit card details and charge them automatically has been removed. As a result of this, the ability to add your customers' card details while creating a subscription has been removed as well.
As an alternative, you can use the Request Payment Method option which allows your users to fill in their card details on a hosted payment page. You can find this option by going to Customers > Select a Customer > More > Request Payment Method.
We'll ensure to keep you updated about any further news about SCA compliance in Zoho Subscriptions.
Cheers,
Varun Steven
The Zoho Subscriptions Team