About Strong Customer Authentication

When you request a ride, you might be asked to authenticate the transaction with your bank via a pop-up screen. This is part of Strong Customer Authentication, a regulation for the European Economic Area that adds an extra layer of security to online transactions, in and outside of Uber.

What is strong customer authentication?

Strong Customer Authentication (SCA) is a European regulatory requirement that is meant to decrease fraud and help secure online payments. While the regulation applies to banks that issue credit cards, Uber has implemented additional authentication to comply.

SCA requires an extra layer of authentication for digital transactions, using at least one of the following:

• Something you know (e.g., PIN code or password)
• Something you have (e.g., SMS code or hardware token)
• Something you are (e.g., fingerprint or facial recognition)

Your bank controls and approves these authentication methods, not Uber.

How does this affect my transactions?

Since September 2019, banks have been required to decline transactions that fail authentication. You can find more details about Strong Customer Authentication regulations and requirements in the European Banking Authority and European Commission.

SCA applies to all transactions made with payment methods issued in the European Economic Area (EEA), whether used inside and outside the region.

How do I authenticate a transaction?

When making a digital purchase, your bank may prompt you for additional authentication, such as:

• Entering a password
• Providing an SMS code
• Confirming via fingerprint

Do I need to authenticate every time I request a trip?

It depends on your bank’s policies, transaction frequency, and amount.

Why is authentication required?

Authenticating your transactions helps reduce fraud and other types of abuse. Your bank determines when authentication is needed. For details, reach out to your bank directly.

Is this secure?

Your bank handles the authentication process—Uber doesn’t control or decide how authentication is handled. If you have any questions regarding security, contact your bank directly.

How is this different from Uber’s 2-step verification?

• Uber’s 2-step verification is an optional security feature for logging into your Uber account. upon log in.
• Strong Customer authentication is a mandatory authentication requirement that helps secure digital transactions.

Do I need to authenticate when paying my outstanding balance?

Yes, any new digital transaction may require authentication.

Are there any exemptions to SCA?

Some low-risk payments may be exempt, your bank decides whether authentication is required for each transaction.

Note: Digital wallets such as PayPal, Apple Pay, and Google Pay aren’t subject to SCA requirements.