How does strong authentication protection work when making payments using a payment card?

As of January 1st, 2021, retailers (online stores and other e-commerce participants) and card issuers within the European Economic Zone must use strong authentication (such as Mobiil-ID, biometrics or a code calculator) for online payments using a payment card.

Strong authentication is generally requested for payments over 30 Euro, but also for lower-value payments if five payments in a row are made.

If the client uses a payment card for regular payments (such as a monthly subscription fee), then the use of the card for this payment will use strong authentication the first time, but will not be compulsory for subsequent transactions.

Strong authentication for online payments with payment cards has been introduced to give card holders and retailers additional payment security, and to reduce the risk of a payment card being used without the cardholder’s knowledge.