Online payment: dual authentication is now required

Online merchants and banks have 4 weeks from May 15, 2021 to deploy this device. After this period, banks will be able to decline any non-compliant transactions.

Only small transactions (less than €30) or very regular payments (subscriptions, transactions to a trusted beneficiary) may not be concerned if the merchant has requested them.

Strong authentication involves validating two of the following:

• information that only you know (secret code, password);
• the use of a device you own (telephone, computer, case provided by the bank);
• a personal characteristic (fingerprint, facial recognition).

For example, when you make an online purchase, after completing your banking information, you will receive a notification on your mobile phone that prompts you to authenticate in your bank's banking app. You can then authenticate yourself either by typing a code (such as your access code to your online bank accounts) or by placing your finger on the built-in biometric sensor on the phone.