# Strong Customer Authentication must be adopted to make open banking a Success Author: Pal Sinha, Barnali Author URL: https://financedigest.com/author/pal-sinha-barnali Published: 2021-12-02 Category: BANKING Category URL: https://financedigest.com/category/banking Meta Title: How Open Banking is Revolutionising the Financial Sector Meta Description: Discover how open banking regulations differ between EU and US markets, driving innovation and competition. Learn about the impact on authentication processes URL: https://financedigest.com/strong-customer-authentication-must-be-adopted-to-make-open-banking-a-successhtml ![undefined](https://prod.superblogcdn.com/site_cuid_cm5qst7v3003gwirgwqtxn8i8/images/access-denied-sbi-300188382-1736836728113-compressed.jpg) _![Amir Nooriala, CCO, at Callsign](https://prod.superblogcdn.com/site_cuid_cm5qst7v3003gwirgwqtxn8i8/images/244-1736836728046-compressed.jpg)_ _By **Amir Nooriala,** CCO, at Callsign_ One of the core objectives of open banking is to drive innovation within the financial services sector. While banks were previously the gatekeepers of all customer account data, the regulations and mandates around open banking necessitates banks make it available to any aggregator that connects to it, giving consumers more control over their data and finances. This has led to an explosion of new [challenger banks](https://www.financedigest.com/big-banks-can-be-challengers-too.html "Big banks can be challengers too"), technologies and ecosystems that have since emerged to give consumers greater choice around who they use for their financial services. It also enables [banks to access similarly innovative](https://www.financedigest.com/knowing-your-customers-needs-is-essential-for-banking-innovation.html "KNOWING YOUR CUSTOMERS’ NEEDS IS ESSENTIAL FOR BANKING INNOVATION") services, as well as potentially more customers and channels. However, despite [rising popularity of open banking](https://www.financedigest.com/in-a-rising-market-are-banking-outsourcers-pulling-their-weight.html "In a rising market, are banking outsourcers pulling their weight?"), different regions have taken fundamentally different approaches. The European Union has chosen a more regulatory approach open banking, passing [PSD2](https://www.ukfinance.org.uk/guidance/payment-services-directive-2-and-open-banking) to level the playing field. The US, is much more culturally averse to “red tape”, and as such, no such regulation has been passed there. However, there’s a strong appetite for [open banking](https://www.financedigest.com/open-data-represents-the-biggest-challenge-to-banks-in-a-generation.html "Open data represents the biggest challenge to banks in a generation") which means its bourgeoning ecosystem is very market led. President Joe Biden recently issued an executive order to promote competition in the American [financial sector by allowing consumers to switch banks](https://www.financedigest.com/financial-crime-is-the-chink-in-the-banks-armour.html "Financial crime is the chink in the banks’ armour") more easily, and this may go a long way towards helping drive open banking too. A key difference in the regulatory versus [market driven approach has been the development](https://www.financedigest.com/concrete-placing-booms-market-notable-developments-geographical-outlook.html "Concrete Placing Booms Market: Notable Developments & Geographical Outlook") of stronger authentication processes. Because of its standards-based approach, many countries in Europe have been able to quickly build Strong Customer Authentication (SCA) regulations to secure [digital channels and deliver exceptional customer](https://www.financedigest.com/how-will-the-introduction-of-digital-banking-impact-customer-perception-and-overall-loyalty.html "HOW WILL THE INTRODUCTION OF DIGITAL BANKING IMPACT CUSTOMER PERCEPTION AND OVERALL LOYALTY?") experience in the financial services sector. European regulators, [banks and solution providers were already working](https://www.financedigest.com/boes-bailey-says-bank-reforms-worked-but-questions-about-liquidity-buffers.html "BoE’s Bailey says bank reforms worked but questions about liquidity buffers") together to formulate a clear and unified vision on SCA adoption before the Covid-19 pandemic forced consumers almost exclusively ‘online’. Most SCA [regulations achieve greater security by mandating customer](https://www.financedigest.com/bahamas-regulator-holds-ftx-assets-pending-delivery-to-customers-creditors.html "Bahamas regulator holds FTX assets pending delivery to customers, creditors") authentication procedures such as two-factor authentication. In the UK, for example, there are organisations such as the [Open banking Initiative](https://www.openbanking.org.uk/about-us/) that issue monthly highlights and run consultations to ensure that open banking – specifically as to how it relates to the retail sector – is driven by competition, innovation and transparency. SCA is not mandated in the US however, [meaning banks](https://www.financedigest.com/banking-turmoil-means-recession-fears-are-creeping-back.html "Banking turmoil means recession fears are creeping back") there aren’t held to the same stringent authentication standards as Europe. And looking across the globe, new markets which are looking to embrace open [banking need](https://www.financedigest.com/the-bank-of-me-why-banks-need-to-be-totally-customer-centric.html "The bank of me – why banks need to be totally customer centric") to first step back and examine the current open market landscape to first decide how it wants to approach it. For instance, in 2020, the Central Bank of Bahrain launched the Bahrain [Open](https://www.financedigest.com/how-will-open-banking-impact-the-customer-experience.html "How will Open Banking impact the customer experience?") Banking Framework (Bahrain OBF). It was introduced to encourage the adoption of open banking by [retail](https://www.financedigest.com/insight-into-tomorrows-retail-banking-customers.html "INSIGHT INTO TOMORROW’S RETAIL BANKING CUSTOMERS") banks, mandating the integration of application programming interfaces (APIs) by making customer data completely available to third party providers. Even though the central bank’s framework includes governance as to how to protect customer data, exposing thousands of [bank accounts](https://www.financedigest.com/are-banks-ready-for-the-new-accountability-regime-in-2016.html "ARE BANKS READY FOR THE NEW ACCOUNTABILITY REGIME IN 2016?") to third parties can be risky. Many [banks don’t have the necessary security](https://www.financedigest.com/digital-experience-and-security-the-crucial-combination-for-banks.html "Digital experience and security – the crucial combination for banks") checks in place, especially when you consider the fact that they only had six months to implement this change. It was this [risk that SCA initiatives](https://www.financedigest.com/heightened-regulatory-demands-to-drive-technology-led-risk-management-initiatives-in-2018.html "Heightened Regulatory Demands to Drive Technology-led Risk Management Initiatives in 2018") are created to help mediate. Open banking [journeys are all orchestrated through redirect flows where users are returned from a third-party website to their bank](https://www.financedigest.com/why-finance-professionals-must-bank-on-a-journey-to-the-cloud.html "Why finance professionals must bank on a journey to the cloud") login page or banking app for authentication. There, they can authorise [access to their account information](https://www.financedigest.com/kings-secure-technologies-adopts-agile-flexible-cloud-reporting-access-granular-real-time-financial-information.html "Kings Secure Technologies Adopts Agile and Flexible Cloud Reporting for Access to ‘Granular Real-time Financial Information’") or initiate a payment. However, even with multi-factor authentication, many banks rely on traditional methods such as usernames and [password or even SMS](https://www.financedigest.com/breaking-down-the-compliance-limitations-of-sms-one-time-passwords.html "Breaking down the compliance limitations of SMS One-Time Passwords") OTP. Not only do these methods add considerable friction to the customer journey, but the analogue channels they sometimes use are becoming increasingly [vulnerable to fraud](https://www.financedigest.com/why-your-business-is-vulnerable-to-supplier-fraud.html "Why Your Business is Vulnerable to Supplier Fraud"). And the [impact to user experience this can cause can be detrimental to the successful](https://www.financedigest.com/how-to-define-success-and-measure-the-impact-of-digital-transformation.html "How to define success and measure the impact of digital transformation") adoption of open banking.​ This development has highlighted further the [need for banks](https://www.financedigest.com/britains-digital-banks-need-support-amid-banking-turmoil-trade-body.html "Britain’s digital banks need support amid banking turmoil – trade body") and businesses to not only ensure authentication is scalable and secure but to move beyond username, password, and SMS OTP to avoid user frustration/cart abandonment and reputational damage.​ SCA is well on its way to being implemented. A regulatory-led, collaborative approach will be the success factor to ensure SCA supports open [banking as part of the wider digital transformation](https://www.financedigest.com/transforming-the-banking-experience-to-be-mobile-first-and-people-centric.html "Transforming the banking experience to be mobile-first and people-centric") agenda and Covid-19 mitigation. --- This blog is powered by Superblog. Visit https://superblog.ai to know more. ---