Need a hand?

Low-risk or low-value transactions of £30 / €30 or less are usually exempt from Strong Customer Authentication (SCA). 'One leg out transactions' – where the merchant is in the EEA but the customer isn't – are also exempt.

At any given time, if the overall rate of fraudulent transactions is low enough to be compliant with Payment Services Directive 2 (PSD2), we may allow some higher value transactions to skip SCA.

Merchants can disable exceptions so customers' transactions are subject to SCA and pass through 3 Domain Security (3DS). Currently, we don't allow merchants to opt out of SCA or set their own risk appetite. Service provided by Revolut Bank UAB, registered with Bank of Portugal under number 3504.