Strong Customer Authentication (SCA) is a European requirement that makes online card payments more secure. It applies to all EU-based companies that charge credit cards issued in the EU. Companies outside the EU, and cards issued outside the EU, aren't affected.
SCA uses two or more of these elements:
| Element | Examples |
|---|---|
| Something only the user knows | Password, code, personal identification number |
| Something only the user owns | Token, smart card, mobile phone |
| Something the user is | Biometrics, such as a fingerprint |
Bookings from OTAs
A credit card number collected without SCA is no longer reliable: the cardholder's bank will likely reject the transaction. Many OTAs, including Booking.com and Expedia, can collect the guest's payment at the time of booking (channel collect) with SCA. The OTA then pays you by bank transfer or virtual credit card, so you don't deal with SCA or declined transactions. Beds24 can process the virtual cards automatically on the day the funds become available at Stripe and deposit them directly to your account.
If you need security or prepayment but don't want the OTA to collect the payment, accept bookings from the OTA without card or deposit, and send the guest a payment request from Beds24, manually or with Auto Actions.
Direct bookings
You can collect a credit card payment with SCA when the guest books. For additional payments from EU guests, send a payment request so the guest can complete the payment.
Payment gateways
- Stripe: the Beds24 integration is fully compliant and meets the SCA requirements.
- PayPal and Realex: the gateway handles the required functionality.
Payment requests
Payment requests sent to the guest after booking are an alternative to collecting credit card details. See How to setup Payments.
More about SCA on the Beds24 blog: Secure PSD2-compliant payment collection.