Strong Customer Authentication (SCA) is required after a consumer or cardholder based in the European Economic Area (EEA) is attempting to make a purchase or online payment on a merchant platform also based in EEA.