Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Just to be sure, if your business is domiciled outside of the EU (e.g. Australia), there is nothing to be done regarding SCA, right?

In other words, there's no risk with sticking to Stripe Checkout Legacy, even for European cards?

I have read some contradicting documentation.

[1] states the business AND customer must be in EU ("if all of the following apply"), [2] says "payments to European businesses or from European customers". :\

1. https://stripe.com/docs/strong-customer-authentication

2. https://stripe.com/docs/payments/payment-intents



The article linked in the previous comment says

> While SCA is not legally required for businesses outside of Europe, we expect a small minority of European banks to require SCA for all payments regardless of where a business is located

I can believe this since the debit card associated with one of my european banks will only allow online transactions with 3DSecure.


You are correct, it's a "two legs in" rule. SCA only applies if both the merchant and the customer are based in the EU.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: