Strong Customer Authentication (SCA) in Person
SCA is the regulation-driven requirement to verify cardholders with two independent factors. In shops and restaurants it mostly shows up as chip-and-PIN, biometric wallet flows, or stepped-up contactless — not as clunky 3DS pop-ups (those dominate e-commerce).
Next step: Ensure terminals are on supported software — old kernels cause mystery declines. Contact us if one issuer disproportionately fails.
What counts as SCA in-store
Chip-and-PIN combines possession of the card with knowledge of the PIN. Contactless taps often rely on transaction limits and velocity counters; when those trip, the terminal requests insertion or PIN. Phone wallets may satisfy SCA inside the device with biometrics — the customer still authenticates, just not on your PIN pad.
Staff scripts that reduce friction
Never imply the merchant “rejected” the card when the issuer requested step-up. Use neutral language and offer a second lane if PIN entry blocks the queue — queue-busting hardware helps.
Unattended and high-risk MCCs
Petrol pumps, vending and some kiosks have different SCA carve-outs and liability rules. If you operate blended unattended and attended lanes, separate reporting so you can prove which rules applied — useful for chargebacks.
Link to contactless behaviour
Train teams alongside contactless and wallets: many “SCA problems” are simply customers needing to insert the card after five taps in a day.
Related guides
Ready to compare? Start the card machine quote path on our homepage or message the team.