Whenever you try to order food or add a new credit card to your account, you might be prompted to authenticate the transaction with your bank via a pop-up screen. This protocol is part of Strong Customer Authentication, a new regulation for the European Economic Area requesting banks to authenticate digital transactions. This authentication protocol adds an extra layer of security to all your online transactions.

What is Strong Customer Authentication?

Strong Customer Authentication (SCA) is a European and UK regulatory requirement to decrease fraud and secure online payments. Although the regulatory requirements are applicable to banks that issue credit cards, Uber had to build additional authentication into our checkout flow to complete transactions once Strong Customer Authentication went into effect.

SCA demands extra authentication protocol upon digital transaction with at least one of the following authentication types:

• Something the customer knows (example: given PIN code or password)
• Something the customer has (example: text sent to phone or hardware token)
• Something the customer is (example: fingerprint or face recognition)

Banks will include some type of extra authentication (like the ones above) to most digital transactions in order to comply with SCA. The extra authentication is set up, controlled and approved by your Bank, not by Uber.

Banks will decline transactions that fail to be authenticated. If you would like to inform yourself about Strong Customer Authentication regulations and requirements, they are set out in the European Banking Authority and European Commission.

SCA—and the authentication protocol that comes with it—is subject to all transactions made with payment methods issued in the European Economic Area (EEA), and transactions made with them in and outside the EEA.

如何在交易时完成身份验证？

对于线上交易最常见的身份验证方式是在结算时完成额外的身份验证步骤。在此步骤中，持卡人需要根据银行的提示提供补充信息（例如密码、短信验证码或指纹确认），然后才能完成交易。

我每次点餐都需要验证身份吗？

这将取决于交易金额/频率以及您银行的身份验证政策。 通常，在每次添加或更新信用卡付款方式时，您都需要进行身份验证。

为什么要在交易时验证身份？

交易中的身份验证流程（如有）将降低欺诈风险或其他类型的滥用风险。每次您发起数字交易时，银行都可能会要求您验证身份，以便确认交易资格。并非所有交易都需要进行身份验证。要进一步了解何时以及为何需要额外验证身份，请联系您的银行。

如何确保验证过程的安全性？

身份验证由银行进行并提供保障。身份验证流程和验证类型（短信或指纹等）并非由优步决定，也非优步所有，因此，如果您对安全性有任何疑问，请直接联系您的银行。

我已经完成了两步验证，为什么还需要完成强身份验证？

启用两步验证后，您每次登录优步账号时均要回答两次安全问题。

强身份验证是强制性的身份验证程序，旨在提供专门针对数字交易的额外安全保障。

我每次结清款项时都需要验证身份吗？

是的，每次发起新的数字交易时，您都可能需要验证身份。

强身份验证豁免情况

根据这项规定，特定类型的低风险付款可以免除强身份验证。交易时，您的银行将评估交易的风险等级，并最终决定是批准免验证，还是必须进行身份验证。

其他数字支付方式（如 PayPal、Apple Pay 或 Google Pay 数字钱包）不受强身份验证程序的约束。