My bookmarksSign up free

Commission Delegated Regulation (EU) 2018/389 Article 7

Commission Delegated Regulation (EU) 2018/389 Article 7

Requirements of the elements categorised as possession

Article 7

1.   Payment service providers shall adopt measures to mitigate the risk that the elements of strong customer authentication categorised as possession are used by unauthorised parties. 2.   The use by the payer of those elements shall be subject to measures designed to prevent replication of the elements.

Read the full instrument → · Read this in context: CHAPTER II — SECURITY MEASURES FOR THE APPLICATION OF STRONG CUSTOMER AUTHENTICATION →

Other provisions in CHAPTER II — SECURITY MEASURES FOR THE APPLICATION OF STRONG CUSTOMER AUTHENTICATION

Compiled from an official source version. Later amendments or repeals may not be reflected; the official text prevails. · Read the official text ↗ · Data as of 2026-07-04

CitationArticle 7 of Commission Delegated Regulation (EU) 2018/389 (LawPlayer, data as of 2026-07-04)

© European Union, https://eur-lex.europa.eu, 1998-2026. Reuse authorised under Commission Decision 2011/833/EU, provided the source is acknowledged.

What to look at next

Commission Delegated Regulation (EU) 2018/389, full textChapter navigation and full text, so you can read this section in contextEuropean Union legislationEU Legal Acts by type and yearGrouped by instrument type and year of enactment, so you can find others of the same kindBrowse by type and yearCHAPTER II — SECURITY MEASURES FOR THE APPLICATION OF STRONG CUSTOMER AUTHENTICATION — read this in contextThe surrounding text of the act in order, so you can see what comes before and afterChapters and sections