Skip to Main Content Increase Contrast Accessibility Help

PSD2 strong customer authentication FAQs

New regulations for online payments

Online banking security is increasing

As part of new regulations introduced in September 2019, the banking sector is introducing Strong Customer Authentication (SCA) to help fight fraud and increase the security of online payments. We’ll be applying the SCA changes to our Internet Banking service from November 2019. It’s one more thing we’re doing to help prevent fraud and keep your money safe.

These are actions you need to take to get ready for SCA:

If you use Internet Banking

The authentication process for logging in will start to change in November 2019. In addition to answering your security questions, you may need to respond to an automated phone call and enter a four-digit verification code. This additional step will only be requested once every three months.
You will also be asked to enter the security code when performing other actions on Internet Banking, like making payments to new beneficiaries or updating key payment data. It will also be triggered when you access account history over three months old.
This second factor of authentication is being introduced to ensure your Internet Banking data is secure and to reduce fraud.

Update your contact details

It’s important that your phone and email address details are up to date, to ensure we can send you security codes and you can bank online without interruptions.
You can update your details by logging into Internet Banking and sending us a secure message. You can also visit www.unity.co.uk/update-your-details
Alternatively, you can call our dedicated number, 0345 245 0020
Office hours: Monday 8.30am-5pm Tuesday 8.30am-5pm Wednesday 8.30am-5pm Thursday 9.30am-5pm Friday 8.30am-5pm

 

A guide to Strong Customer Authentication (SCA) under PSD2

Questions Answers
Why is Unity making changes to Internet Banking?

A new EU Payments Services Directive (PSD2) took effect in January 2018, bringing in new laws aimed at enhancing consumer rights and reducing online fraud.

A key element of PSD2 is the introduction of additional security authentications for online transactions, known as strong customer authentication (SCA).

When did the Strong Customer Authentication (SCA) regulations take effect?

SCA was introduced in the UK on 14th September 2019.
However, the Financial Conduct Authority (FCA) has agreed a 6-month extension for the introduction of SCA.
The plan reflects the opinion of the European Banking Authority (EBA) who stated that more time was needed for implementation.
Unity Trust Bank will complete the implementation of SCA in November 2019, well ahead of the March 2020 deadline.

Why is SCA needed? Payment fraud losses have been steadily increasing for nearly a decade.
The European Commission has intervened by placing SCA requirements on participants to reduce fraud as one of the core components of PSD2.
SCA is a new European regulatory requirement to reduce fraud and make online payments more secure.
What is SCA? PSD2 requires the use of two independent sources of validation for certain actions completed online, this means selecting a combination of two out of the three categories to validate your identity (commonly known as the ‘two-factor authentication’):

– Something you know (e.g. PIN)
– Something you have (e.g. card/phone)
– Something you are (e.g. fingerprint)

This is applicable to transactions in the European Economic Area (EEA) only, where both payer and payee are in the region.
Our Internet Banking service doesn’t currently require a second factor of authentication so we will be introducing an automated phone call to comply with the change in law and make our Internet Banking more secure.

What changes will I see on Internet Banking? After the changes are implemented in Autumn 2019, certain activity on Internet Banking will require a second factor of authentication. In practice, this means you will be asked to enter a code shown on the Internet Banking screen following receipt of an automated phone call, to confirm you are the person making the request.
The phone message will confirm the details of the payment so you can be sure you are authorising the correct information and the call is genuine.
Can I opt out? No, this is a regulatory change and you cannot opt out
When will the changes start? Unity will phase in the changes during Autumn 2019. We intend to complete the changes in early November.
How do I make payments without SCA?

All transactions that qualify for SCA will require additional authentication to submit.

We will tell you at the time of making the payment if you will be required to submit a second factor.

Typically, this will be for payments to new beneficiaries or making changes to beneficiary account details.

You will not be able to submit a payment if you do not provide the second factor when requested.

What if my phone details aren’t up to date? We have attempted to contact all of our Internet Banking customers by phone, email and post, to make sure we have your up to date contact details.

If you have not responded to our requests, please help us ensure we have the correct phone number and email address details for you by: ·

• Logging into online banking and sending a secure message
• Calling our dedicated number 0345 245 0020

Office hours: Monday 8.30am-5pm Tuesday 8.30am-5pm Wednesday 8.30am-5pm Thursday 9.30am-5pm Friday 8.30am-5pm

• Updating your details online at www.unity.co.uk/update-your-details

.

How do I register phone number(s) for SCA? If you haven’t done so already, you will be given the opportunity to register one or more phone numbers once SCA is live.

Simply follow the on-screen instructions when logging into Internet Banking.

It is important that you complete this process when prompted, otherwise you will not be able to access your account.

What if my colleague submits the payment and I’m the authoriser, will I have to use SCA too? No, we will only ask the colleague submitting the payment to undertake two-factor authentication.
How will I perform SCA if I have accessibility needs? We’re committed to making the information and resources that we provide online, accessible to all users.
If you have any specific requirements that we need to be made aware of, please email us at [email protected] or call us on 0345 140 1000.
What actions will be affected? There are additional actions within Internet Banking that will require SCA, these include:

– accessing transactions and statements over 3 months old;
– logging in every 3 months; and
– making changes to your beneficiaries payment details, e.g. changing the destination account number or sort code.

You will be automatically advised if your activity requires secondary authentication and the instructions required to follow the authorisation process.

We will also provide online tutorials to help guide you through the process once it’s rolled out.

Is there another way I can provide SCA? Currently, we are only providing SCA by a phone call.
Does it affect my user privileges? No, this will not change any of your existing access levels and permissions as an Internet Banking user.
Should I do anything differently when using Internet Banking? No. The system will automatically escalate any activity that will require a second factor of authentication to complete.

Just follow the instructions on screen and ensure you have your registered phone with you if you want to make urgent transactions.

What if I change my contact details? You should update the contact details we hold for you by
Calling our dedicated number 0345 245 0020
Office hours: Monday 8.30am-5pm Tuesday 8.30am-5pm Wednesday 8.30am-5pm Thursday 9.30am-5pm Friday 8.30am-5pm

• Updating your details online at www.unity.co.uk/update-your-details
We can store several numbers that you can choose to use online.

Can I store more than one phone number? Yes, you can give us all your contact numbers so when you are asked to perform SCA you will be able to choose the phone number for us to contact you on at the point of submitting your instruction.
How do I know it’s secure? We are committed to continuously improving the security of our online banking. This is another measure that will help prevent fraud and keep your banking secure online.
We will never ask you for the following:
– Your PIN
– Your credit cards, chequebooks or cash
– Your Internet Banking password
– to transfer funds to another account for “safekeeping”
Who will be contacted? Only the individual submitting the payment will be called and they will be contacted on the number(s) they have registered with the bank.

They will be informed at the point of making the payment that additional security is required before the payment can be made, therefore they will need to have access to their phone before starting their online banking activities.

Can we use our office phone number? Everyone using online banking will need access to the phone number they have registered with the bank. It’s important not to use group or shared numbers as you must be able to answer the call while making the payment for it to be submitted. It will be possible to register several numbers with us, and then you can select the number to call from a list provided.
Your organisation’s authorisation process will not be affected by these changes, and only the user submitting the payment will be required to provide additional authentication.
If you usually require two people to make payments online this will not change, only the submitter may be asked for additional verification.

 

Useful Links


Switching made simple

By switching your bank account to Unity you’ll be helping to create a better society.  You’ll also benefit from 24/7 access to your account using our Internet Banking service.

Our free account switcher service makes the process as easy as possible:

  • We’ll close your existing account for you.
  • We contact your existing bank for a list of your Direct Debit and Standing Order payments for the account you’re switching from.
  • You select the accounts you want us to move to us.

Switch to us

How we make a difference

We are a bank established to serve the needs of our customers and enrich society as a whole.  We work with organisations that aim to have a positive impact on society through economic, community or social change.

Our people support charities and communities through our ‘Unity in the Community’ (UitC) programme.  The Unity team is actively involved in volunteering and fundraising events  organised throughout the year.  Good causes are nominated by our people to receive donations.

To find out more about how we make a difference – view our Social Impact 2018


Case studies