Strong Customer Authentication – Are you Ready?

Shopping online is changing, and we’re making it more secure for you

In 2021, an additional layer of security will make shopping online with your BOI card even safer.

What's it all about?

When you are making an online purchase we may ask you to confirm it is you using the card. The easiest way to do this will be to approve the purchase using the Bank of Ireland app using Strong Customer Authentication (SCA). This will fully replace the one-time passcodes that are being sent to you by text message today.

Secure online shopping using SCA

Already use the Bank of Ireland app to view your current account or credit card? If so, you can use the app as a ‘security device’ to approve card payments using SCA when it is introduced later this year. You should ensure that you have enabled notifications for the app.

I need help to:

If you are unable to register the Bank of Ireland app on a compatible smart device you can also use a Physical Security Key (PSK).

FAQs

  • Once SCA is introduced, the approval steps using the BOI Mobile App will look like this:

    When you shop online and go to complete your purchase, you will see a screen similar to the below on the seller’s site.

     

     

    1. It is important that you do not click ‘I have approved in BOI app’ until you have completed the authentication in the Bank of Ireland Mobile app in the next steps.
       


    2. The screen will tell you that a ‘push’ notification has been sent to your primary security device. When you tap on this notification*, the Bank of Ireland Mobile app will open. Please see the next dropdown of what to do if the Push Notification does not arrive to your security device.

       





    3. Once you open the Bank of Ireland Mobile app you will need to swipe to the right to approve the transaction and enter 3 digits of your 6 digit 365 PIN. You will then be prompted to exit the Bank of Ireland Mobile app and return to the seller’s site to proceed with the transaction.
       

       
    4. You can now complete the transaction on the seller’s site by selecting ‘I have approved in BOI app’.

    *Please note that your notification may look different depending on the type of device you have.

  • What if I don’t receive the push notification?

    If you do not receive the notification, this may be because:

    • You have your notifications turned off, or;
    • You are not using your primary security device (see FAQ below on what a primary device is) when making your purchase.

    In this case, you can retrieve the transaction approval page notification yourself using the ‘pull’ method (Note: This also applies to you if you are using the browser version of our new online banking channel when logging in or making payment).

    Please see details below on how to do so:
     

    *Note: the commentary on the approval screen will differ depending on whether you are making a payment on your mobile app, or making a payment using the browser.

     

    1. You will see a screen similar to the above on the seller’s site. Do not click the ‘I have approved in BOI app’ until you have completed the authentication in the Bank of Ireland Mobile app.
       

       
    2. Open up the Bank of Ireland Mobile app on any of your registered security devices where you will see ‘Waiting for your approval’.
       




       
    3. You will tap on this, and then swipe to approve the transaction and enter 3 digits of your 6-digit 365 PIN.
       

       
    4. Once you have approved the purchase in the Bank of Ireland Mobile app, you can then go back to the seller’s site and complete the transaction there by selecting ‘I have approved in BOI app’.

  • What if I am using the PSK?

    Once SCA is introduced, the approval steps using your PSK will look like this:

     

     

    1. When you shop online and go to complete your purchase, you will see a screen similar to this on the seller’s site.
       

       
    2. Turn on your PSK by pressing the green OK button. When prompted, enter in your 4 digit PIN. The screen will show ‘Select Opt’.
    3. Press 3. The screen will show the word ‘Challenge’.
       


       

    4. Enter the code provided on the payment authorisation screen and press the green OK button. In this example the code is 911044.
       
    5. An 8 digit number will show on the screen.
       
    6. Enter this 8 digit number into the box on the seller’s site as shown above, and press ‘Confirm’.

  • What is Strong Customer Authentication?

    Strong Customer Authentication (SCA) is part of the PSD2 (the Second Payment Services Directive) regulation. It works to ensure that it is genuinely you making online purchases or banking online. It is designed to help keep your financial information safe and make online purchases and banking even more secure.

  • How will this work for me?

    Once SCA is fully introduced, the one-time passcodes that are being sent to you by text message today for some online card payments will be replaced. This means, when you shop online and go to complete a transaction, you may need to authorize the transaction using an SCA compliant method. For most customers, this will mean receiving a push notification to open the Bank of Ireland Mobile app and approve the transaction. For other customers (who will have a PSK) they will get a code from that device instead.

  • Does SCA affect me?

    Yes, if you make online payments using your credit or debit card, SCA will affect you. We are introducing this change to make banking safer for you.

  • Do I have to use SCA?

    Yes, if you make online payments using your credit or debit card, you will need to use SCA. We are introducing this change to make banking safer for you.

  • What do I need to do to get ready for SCA?

    We are asking customers:

    • Do we have the right mobile number for you? Please ensure we have the correct mobile number for you. If you are a credit card customer, please call the credit cards team on 0818 251 251 (+353 56 775 7747 from overseas) or by calling the number on the back of your credit card. If you are a debit card customer, please call the debit cards team on 0818 365 365.
    • Have you downloaded the app? You can do this by going to the App Store/Play Store and searching ‘Bank of Ireland Mobile Banking’

    For further and more in depth information on how you can get ready for SCA, please select the specific drop down that relates to you.

  • Can I opt out of this service?

    If you want to use your card to shop online, you cannot opt out of this service. You will need to use the Bank of Ireland Mobile app or, if unable to do so, a Physical Security Key (PSK) to authorize transactions. Under Payment Services Regulations we have to ensure SCA is performed for certain online transactions.

  • I live abroad, do I still have to do this?

    Yes, to ensure you can continue to use your cards for transactions in the EU or access your accounts online, you will need to be set up for SCA.

  • I am new to 365 online, what does SCA mean for me?

    SCA means that there is added security when you go to shop online. For more information on 365 online specifically, please see here for details.

  • I am now registered for 365 online, what will happen to my statement type?

    Please note that when you get set up for our 365 online service you will automatically be switched to eStatements (electronic versions of your statements), which you can access when you are logged into the 365 online service, as opposed to paper statements sent by post. However, you still have the choice to change back to paper statements, if you wish. To make the switch back to paper statements please follow the below steps:

    • Log in to the Bank of Ireland Mobile app or online
    • Tap ‘Services’ from the main menu
    • Scroll down to ‘Manage Accounts’ and tap ‘Manage statements’
    • Tap ‘Turn paper statements On/Off’
    • Select ‘On’ for the relevant account

  • I am now registered for 365 online, how do I pay my credit card bill going forward?

    Please note there will be no change to how you pay your bill going forward. To pay your credit card bill please see the below options:

    Paying online

    To pay online, log in to 365 online or the Bank of Ireland App. You can then add a payee (bill). All payments take 24 hours (excluding non-working days) to reach your credit card account.

    To make a payment to a euro credit card from another bank or non-euro account, you may enter the details below:

    • BIC: BOFIIE2D
    • IBAN: IE46BOFI90153899943016
    • Reference: you must add the FULL 16 digit card number which appears on the front of your card.
    • Payment times from other banks may vary due to transfer cut-off times. Please refer to sending bank for this information.

    Payment by direct debit

    You can take the worry out of paying your bill by setting up a direct debit for one of the following:

    • the monthly minimum of amount, 2.5%
    • a fixed percentage of the outstanding balance/the entire outstanding amount

    To choose either of these options please complete and return the direct debit mandate form to the address on the form.

    Paying by cash or cheque in any of our branches

    You can pay by cash or cheque in any of our branches using a Lodgment ATM. Cash payments made in our branches will be added to your credit card account on the same day.

    Please allow enough time for your credit card to receive your payment by the due date on your statement.

  • I use a non-Bank of Ireland debit card to pay for my Bank of Ireland credit card bill. Will I be able to do that with 365 online?

    This option is not available on 365 online, however there are a number of other ways to pay your credit card bill:

    • By direct debit
    • Payment from another bank
    • Paying at a Bank of Ireland branch

    See ‘I am now registered for 365 online, how do I pay my credit card bill going forward?’ FAQ above for more information on how to pay your credit card bill.

  • What is a primary device?

    A primary device is the very first, active security device (smartphone/tablet) you would have registered on which you downloaded the Bank of Ireland Mobile app and completed the set up process. Your registered security device(s) provide additional security, using Strong Customer Authentication, when you access and manage your online banking. Your primary/registered device is required whenever additional security is needed for online card purchases.

    It is important to note that:

    1. If you have a smart device and a Physical Security Key (PSK), your smart device will always be your primary device, regardless of what was registered first.

    See more on security devices here

Personal Debit Card

Personal Credit Card

Business Debit Card

Business Credit Card


Transactions over €150

With the introduction of PSD2 Strong Customer Authentication on 1st Jan 2021, online retailers must use a fraud prevention tool called 3D Secure for all online debit / credit card payments. This fraud prevention tool provides additional security for online payments.

From May 2021, online payments over €150 must be processed with 3D Secure by the retailer, otherwise it will not be possible to complete their online credit/debit card payments.

If you have attempted an online payment over €150 that was unsuccessful, please check with the retailer if they have used 3D Secure as this may be the reason the payment could not be completed. This online payment cannot be processed until the retailer uses 3D Secure.

If the retailer has used 3D Secure for the payment and it was still unsuccessful, please contact our cards team on 0818200370

For further information on industry changes please see www.mypsd2.ie


SCA Brochure – A guide to Strong Customer Authentication (SCA)


*This page will be updated regularly, please check back soon for further updates.