AFAIK the new Strong Customer Authentication will be based on 3-D Secure 2, which as far as I know is basically bundling a couple of existing verification metho

AFAIK the new Strong Customer Authentication will be based on 3-D Secure 2, which as far as I know is basically bundling a couple of existing verification method (e.g. AVS, Address Verification System) under a new scheme and fallback to 3-D Secure authentication if the trust level isn’t met. The issue is that, well, the whole scheme is designed to protect the merchant (via liability shift) and not the user, and we still have to trust the bank to “verify” us (might not be a big problem in EU, but in Asia it’s still common to have OTP code over SMS or even... a 6 digit passcode)