The European Banking Authority (EBA) announces the end of SMS authentication.



With the entry into force of the technical specifications for strong authentication of the PSD2 directive as from September 2019, the European Banking Authority (EBA) announces the end of SMS authentication.

In its notice of 21 June and 16 october 2019, the EBA has recalled the rules to be implemented for a Strong Customer Authentication (SCA) in conformity with the technical specifications and regulations. These make the use of OTP SMS, in its common meaning, non-compliant. The migration plans for SCA should be completed by 31 December 2020.

A planning for taking into account the migration constraints

Following the ACPR, the plan of Banque de France foresees a migration period of three years until the total compliancy in 2022, while aiming for the majority of transactions to be compliant by December 2020. The plan also contains an intermediary evaluation in 2021 of the remaining « OTP SMS clients », as to determine the best way to proceed with the progressive removal and to ensure the transition.

Strong authentication and e-banking, meeting the new challenges

As a specialist of e-banking solutions and thanks to its strong security expertise, MAINSYS is since many years the ideal partner for making your solutions evolve using the latest strong authentication technologies, especially those based on biometry and on mobile app interactions.

If you would like to have more information about our e-banking and secure access offer, ask for a demo of our FRONTeO e-Banking software solution that is now available.

Not ready yet ? Join our FRONTeO customers who are using our e-Banking solution. You will be able to propose a strong authentication that meets the regulators expectations and to benefit from a highly evolving Open Banking platform.

MAINSYS has been working on the specifications of the PSD2 directive for two years now and has a broad expertise widely recognized on the marketplace.


Ask a demo

Contact us