What is strong client authentication?
Strong Customer Authentication (SCA) is a new European regulatory requirement that seeks to reduce fraud and increase security in electronic payments.
Although this mandatory requirement applies to banks issuing credit cards, Uber has to build an additional authentication method within our process to complete transactions, from order to payment. This protocol is in force since September 14, 2019.
Banks include some type of additional authentication (for example a PIN, password or fingerprint) for most electronic transactions and thus comply with the SCA. This additional authentication process is set up, controlled and approved by the bank, not by Uber.
Starting September 14, banks will reject transactions that do not complete the authentication process. If you want to know more about the regulations and requirements of Strong Customer Authentication, go to the following links:
SCA protocols apply to all payment methods issued by banks belonging to the European Economic Area. The SCA does not depend on the territory where the transaction or payment is made, but on whether the payment method used in said transaction is issued by the European Economic Area or not.
How do I authenticate a transaction?
Currently, the most common way to authenticate an electronic transaction involves an extra step before finalizing a request, where the cardholder will be asked - by their bank - to provide additional information to complete their transaction (for example: a code sent via text message or fingerprint confirmation).
Do I need to authenticate every time I request a ride?
That will depend on the amount of the transaction, the frequency and the authentication policy that your bank handles.
Why do I have to authenticate my transaction?
By authenticating your transactions it will be possible to reduce the risk of fraud. Every time you initiate an electronic transaction, your bank will ask you to authenticate in order to confirm that it is legitimate. Please note that not all transactions will need to be authenticated, to know more about when and why the authentication process is requested, you need to contact your bank directly.
How do I know this process is safe?
Authentication will be fully supported and ensured by banks. The process and type of authentication (whether via text message or fingerprint) do not depend on Uber, so if you have questions regarding security, please contact your bank directly.
I am currently doing a second verification with my Uber account, why do I need to authenticate with the SCA?
Uber's second verification is an optional feature, which increases the security of your Uber account the moment you log in. You will be asked for a unique authentication code in addition to your Uber account password.
Strong Customer Authentication is not an optional process. Specifically, the authentication protocol is intended to add an extra degree of security to your electronic transactions.
Do I need to go through the authentication process every time I make a transaction?
Yes, when a new electronic transaction starts, you will be asked to carry out the authentication process.
Are there exceptions in Strong Customer Authentication?
Under this new regulation, payments considered with a low level of risk could be exempted from Strong Customer Authentication.
Your bank will assess the level of risk once a transaction starts and decide if authentication is necessary.
Note: Other electronic payment methods such as PayPal, Apple Pay or Google Pay will not be regulated by the Strong Customer Authentication protocols.