Stats › Active, passive and flows › Authentication rules
A European contactless payment escapes authentication below fifty euro and a remote one below thirty, which is the reverse of how it is usually reported
| Exemption | Individual limit | Cumulative limit | Transaction counter | Article |
|---|---|---|---|---|
| Contactless at a point of sale | 50 euro | 150 euro | five consecutive | Art 11 |
| Low value remote payment | 30 euro | 100 euro | five consecutive | Art 16 |
| Unattended transport fare and parking terminals | no euro amount at all | none | none | Art 12 |
| Transaction risk analysis, remote card payments | 500 euro at a reference fraud rate of 0.01% | Art 18 and Annex | ||
| The same, next band | 250 euro at 0.06% | |||
| The same, lowest band | 100 euro at 0.13% | |||
| Transaction risk analysis, remote credit transfers | 500 euro at 0.005%, 250 at 0.01%, 100 at 0.015% | Art 18 and Annex | ||
| Account access re-authentication | 90 days, both as look back and as renewal interval | Art 10 | ||
| The same, through an account information provider | 180 days from 25 July 2023 | Art 10a, inserted by Delegated Regulation (EU) 2022/2360 |
Commission Delegated Regulation (EU) 2018/389, read twice with verbatim fragment confirmation. The authentication requirement applies from 14 September 2019, with two paragraphs applying from 14 March 2019.
Both exemptions carry cumulative counters and a five transaction limit. Card fraud rates on transactions without strong authentication are twice as high inside the economic area and four times as high by volume outside it.
Members only
The rest of this page is for members
Below this point there are 7 sections, 1 table and 6 named sources, roughly 850 words of it. Every figure carries the source it came from and the date the data is from.
You can keep browsing every statistic in the library for free. The intro and the summary are always open.