Strong Customer Authentication (SCA) is being progressively introduced by banks and other financial institutions to better secure bank and card payments. The requirement was introduced into the EU’s Second Payment Services Directive (PSD2) and has been incorporated into UK law. SCA is required when most telephone or online bank payments and card transactions are being made by a consumer. SCA is typically implemented by asking a consumer to validate each payment they make through a banking app, or by quoting a one-time code sent to them by SMS or email, whenever they make a payment. While there are some exemptions for very low value payments, and beneficiaries the consumer nominates as ‘trusted’, as SCA is fully implemented in early 2021, more and more e-commerce payments will require more complex additional steps by the customer if they are to go through. SCA requires the customer to use two factor authentication (2FA) of payments, providing two of something they know (like a password), something they have (like a smartphone or credit card), or something they are (like a fingerprint) for every payment they authorise. This complexity, while protecting everyone from fraud, will almost certainly increase drop out and abandonment rates for e-commerce transactions. One area where SCA works quite well however is in payments authorisation for Faster Payments and open banking payments in mobile banking apps. The much more secure operating environment of smart phones and their carefully engineered use of fingerprint and face-id means that full SCA authorisation of a payment can be achieved with minimum impact on the paying customer. In payments made with open banking payments services like Ordo, SCA is used in the simplest and most secure way for consumers. Consumers only authenticate directly with their bank via mobile banking or internet banking apps, delivering the security of SCA in a simple user experience.