Card fraud costs European businesses €1.8 billion a year. The industry's response has been to build more layers around the card number. That is the wrong problem.

A card number, a CVV and a billing address are all the same kind of secret: something you know. Every one of them can be copied, and once copied, reused. Adding 3D Secure on top cuts online card fraud 40-60%, which is real, but it is a verification layer bolted onto a credential that still exists and can still be stolen elsewhere.

Strong Customer Authentication asks for two factors from different categories: knowledge, possession, inherence. A phone with cryptographic keys provisioned by the bank is possession. A fingerprint is inherence. Together they do not protect a secret. They prove a specific person approved a specific payment at a specific moment, and produce a signature that cannot be replayed.

That difference shows up in chargebacks. "I did not authorize this" is 60-70% of card disputes, and it works because proving authorization is genuinely hard. CVV proves nothing. Signatures are rarely checked. Device data is circumstantial. With SCA the bank has the device ID, the biometric match at 14:23:18, and a valid timestamped signature against the transaction details. The proof is cryptographic, not circumstantial, and that category of dispute effectively closes.

Fraud outcome: 95%+ reduction against standard card payments.

The stolen-phone objection deserves a straight answer. To use a stolen card you need the number, the CVV and an address, all obtainable from one breach. To use a stolen phone you need the physical device of a specific person, their device unlock, their banking app authentication, and to finish before they notice. It is not impossible. It is roughly 100x harder.

Full episode for the flow step by step, the honest limits, the €66,660 case study, and how the same authentication carries all seven initiation methods.

Full source material and the complete guide: https://go.payware.eu/p-sca-b

Produced by payware - the transaction resolution network for instant A2A payments.

AI-generated from payware's published research and documentation.