Whenever you try to order food or add a new credit card to your account, you might be prompted to authenticate the transaction with your bank via a pop-up screen. This protocol is part of Strong Customer Authentication, a new regulation for the European Economic Area requesting banks to authenticate digital transactions. This authentication protocol adds an extra layer of security to all your online transactions.

What is Strong Customer Authentication?

Strong Customer Authentication (SCA) is a European and UK regulatory requirement to decrease fraud and secure online payments. Although the regulatory requirements are applicable to banks that issue credit cards, Uber had to build additional authentication into our checkout flow to complete transactions once Strong Customer Authentication went into effect.

SCA demands extra authentication protocol upon digital transaction with at least one of the following authentication types:

• Something the customer knows (example: given PIN code or password)
• Something the customer has (example: text sent to phone or hardware token)
• Something the customer is (example: fingerprint or face recognition)

Banks will include some type of extra authentication (like the ones above) to most digital transactions in order to comply with SCA. The extra authentication is set up, controlled and approved by your Bank, not by Uber.

Banks will decline transactions that fail to be authenticated. If you would like to inform yourself about Strong Customer Authentication regulations and requirements, they are set out in the European Banking Authority and European Commission.

SCA—and the authentication protocol that comes with it—is subject to all transactions made with payment methods issued in the European Economic Area (EEA), and transactions made with them in and outside the EEA.

如何進行交易驗證？

驗證線上交易最常見的方式，是在結帳時完成額外的驗證步驟。在此步驟中，持卡人需要根據銀行的提示提供額外資訊 (例如：密碼、簡訊驗證碼或指紋確認)，才能完成交易。

每次訂購商品都需要進行驗證嗎？

這取決於交易的金額與頻率，以及您往來銀行的驗證政策。 一般來說，每次新增或更新信用卡付款方式時，您都需要進行驗證。

為什麼我需要進行交易驗證？

交易驗證 (如適用) 將降低詐騙或其他類型的濫用風險。銀行可能會要求您驗證每筆數位交易，以確認交易資格。並非所有交易都需要進行驗證。如欲進一步瞭解需要額外驗證的時機與原因，請聯絡您的銀行。

如何確保驗證過程的安全性？

您的銀行會負責驗證並確保程序安全。驗證流程和類型 (簡訊、指紋等) 並非由 Uber 決定或提供，因此，如果您對安全性有任何疑問，請直接聯絡您的銀行。

我的 Uber 帳戶已經設定了雙步驟驗證，為什麼還需要嚴格顧客驗證機制？

啟用雙步驟驗證後，您每次登入 Uber 帳戶時，都會收到兩項安全挑戰。

嚴格顧客驗證機制是強制性的驗證程序，旨在為數位交易提供多一層安全保護。

每次結清逾期未付款都需要進行驗證嗎？

是的，您可能需要就每筆新的交易進行驗證。

嚴格顧客驗證機制的豁免情況

根據這項規定，特定類型的低風險付款可免於經過嚴格顧客驗證。交易時，您的銀行將評估交易的風險等級，並決定該筆交易是否需要進行驗證。

其他數位支付方式 (如 PayPal、Apple Pay 或 Google Pay 電子錢包) 不適用嚴格顧客驗證機制。