What’s cooking in the fintech pot?

The impact of PSR and PSD3 on e-commerce payments: enhanced security, transparency and innovation

In the payments field, where market dynamics constantly shift and are fueled by consumers’ evolving demands and technological advancements, regulations play a crucial role. Exposed to many promises that new technologies and payment solutions will revolutionize businesses, markets, and how end-users shop online, regulatory frameworks serve as a bedrock for ensuring fair competition and safeguarding businesses and consumers interests. 

 

In this regard, the EU’s proposal for a new payment regulation emerges as a cornerstone. Focussing on evolving the existing Payment Services Directive, PSD2, and harmonizing regulations across the EU, it aims to reduce discrepancies between member states and create a more cohesive payment ecosystem, making the EU’s payment landscape more secure and competitive. Overall, next to supporting industries and economies through regulating the payment services industry, many of its anticipated outcomes are designed to positively impact the daily lives and financial well-being of EU citizens.

 

 

Note: The finalized version of the new regulation (PSR) and directive (PSD3) is not yet available, and it could take effect around 2026. As a Regulation, the PSR will be directly applicable within 18 months of its publication without the need for transposition by Member States at the national level. This is meant to ensure full harmonization and swifter enforcement in the EU. 

How does PSR and PSD3 impact eCommerce payments?

Herewith, we present the highlights of the proposed PSR (Payment Service Regulation) and an updated PSD3 (Payment Services Directive 3) for online credit and debit card payments, its benefits, and what needs to be considered to adapt quickly to the dynamism of market updates.

Enhanced security, transparency, and innovation.

Transparency is one of PSR/PSD3’s focus areas. The regulation introduces more rigorous requirements for information disclosure, ensuring that consumers have access to clear and comprehensive details about payment services.

PSR is expected to introduce evolved payment authentication requirements to mitigate risks and bolster security during online payments. As an evolution of PSD2, the new regulation relies on advanced authentication methods to ensure that only authorized users can access and execute payment transactions. This has proven to significantly reduce fraud and enhance consumer trust in digital payments.

The solutions of Netcetera offer a variety of options for authenticating transactions securely, convenient and with low friction.

Data Sharing

The proposal is for the acquirers to share more data, including behavioural and environmental data, which may be considered valid inherence factors for authenticating cardholders.

This change could further improve the authentication flow by making it more frictionless. Sharing this data type would not require the user’s consent under GDPR.

PSR/PSD3 aims to improve the cardholder experience and enable the development of innovative fraud prevention solutions.

Inclusive Authentication

Inclusion is also one of the central themes aimed at ensuring that digital payment services are inclusive for all consumers. PSR mandates that payment service providers implement features easily usable by individuals with various levels of physical and cognitive abilities. This includes the incorporation of inclusive authentication processes manageable for end-users with impairments.

Netcetera already offers its clients different authenticating methods, including methods that do not require a smartphone.

New regulations encourage the adoption of user-centric design principles, ensuring intuitive and accessible digital payment services for a broader audience and promoting initiatives to improve digital literacy among consumers.

Already today, Netcetera’s customer-facing solutions comply with international accessibility standards, and it constantly innovates to be more inclusive for all user groups, such as the elderly, digitally non-savvy users, and people with disabilities. Netcetera’s commitment to accessibility ensures inclusivity and meets WCAG standards.

(Why is now the time to address accessibility in payments and banking?)

SCA factors in the same category

The EU is proposing that Strong Customer Authentication (SCA) factors can belong to the same category (i.e., knowledge, possession, and inherence). This opens new possibilities for authenticating cardholders. For example, cardholders can be authenticated by using two inherence factors: face- and voice recognition.

Netcetera’s solutions are designed flexibly to support new, convenient ways of authenticating users. Together with the enhanced data sharing requirements, this change is expected to support solutions for authorising transactions.

Liability for technical providers

The proposal for the new regulation states that technical service providers and operators of payment card networks may be liable for any direct financial damage if they fail to deliver the service as contractually agreed upon.

In that regard, Netcetera proudly states that it already provides a reliable and stable service and guarantees customers a 99.9% availability for business-critical services.

Benefits to look for as card issuer, bank or merchant.

In summary, PSR/PSD3 provides a framework that benefits issuers and merchants by fostering innovation, enhancing security, reducing costly resources, and improving the overall customer experience. By adapting to these new regulations, issuers and merchants can:

  • Comply with legal requirements.
  • Gain a competitive edge in the evolving digital payment ecosystem.
  • Reduce the risk of fraud, thereby protecting themselves from financial losses and reputational damage.
  • Build greater customer trust, which is essential in retaining customers.
  • Enhancing risk assessment capabilities could lead to fewer false declines, increasing transaction volumes, and higher approval rates.
  • Provide more seamless and trustworthy shopping experiences to consumers.
  • Offer tailored payment solutions and targeted marketing strategies.

Netcetera constantly updates compliance modules to adapt to evolving regulatory requirements and industry standards. By offering solutions that address these benefits, Netcetera has positioned itself as a valuable partner for banks, card issuers and merchants navigating the evolving landscape of regulatory frameworks and 3-D Secure implementation.

What’s next?

At Netcetera, we closely watch regulatory developments like PSR and PSD3, understanding the opportunities and challenges they present. As leaders in secure digital payment services, we are committed to staying ahead of evolving regulations and actively shaping the future of the payments industry.

We invite our partners to collaborate as we navigate these changes together. By working hand-in-hand, we can innovate, ensure that we meet new regulatory standards, and continue to set the benchmark for excellence in the industry.

To be considered...

Compliance with the new regulations will require significant investment in technology and resources. Financial institutions must upgrade their systems to meet the enhanced security and transparency requirements, which could be costly and time-consuming. It should ensure their readiness to address security breaches successfully, thereby minimizing potential damage to consumers and businesses.

Furthermore, the increased competition facilitated by PSR/PSD3 may threaten traditional banks and financial institutions. To remain competitive, these must innovate and adapt to the rapidly changing landscape.

Enablement of Biometric Authentication, such as fingerprint recognition and facial scans, to provide a higher level of security compared to traditional passwords, ensure that only the right owners can authorize transactions. Digital Identity Verification offers secure and efficient identity verification processes, reducing identity theft risk and improving user trust.

More stories

On this topic