流動裝置優化結帳

Strong Customer Authentication and digital wallets

The Payment Services Directive requires two independent factors of authentication for electronic transactions. A mobile commerce checkout inherently supports this by integrating digital wallets that utilise the smartphone's hardware.

The device itself serves as the possession factor, while biometric scans provide the inherence factor.

By relying on Apple Pay and Google Pay, merchants effectively delegate the authentication process to the wallet provider.

The acquirer partners and issuing banks recognise this delegated authentication, which often exempts the transaction from additional step-up challenges and satisfies regulatory requirements without compromising the user experience.

Data minimisation and form compliance

Privacy regulations require merchants to collect only the data strictly necessary for processing a transaction. A well-configured mobile payment interface adheres to this principle by restricting mandatory input fields to the essential card details, relying on tokenisation to avoid handling raw primary account numbers directly.

When buyers choose to save their payment details for future use, the gateway generates a network token rather than storing the actual card data on the device.

This approach limits the merchant's exposure to sensitive data, maintaining compliance with scheme rules while enabling faster subsequent purchases for returning smartphone shoppers.