---
title: New EU directive aims to reduce the risk of account misuse, says lawyer
description: Here at Holvi, security is a top priority. That’s why we welcome the new EU directive and its strong customer authentication requirement. Find out on our blog how we keep your account safe and secure!
image: https://blog.holvi.com/hubfs/Blog%20visuals/Shared%20blog%20visuals/2019%20Q3/PSD2-blog.jpg
---

[Holvi](https://www.holvi.com/)

[Subscribe](https://blog.holvi.com/new-eu-directive-aims-to-reduce-the-risk-of-account-misuse#subscribe)

[Workaround](https://blog.holvi.com)

- [Holvi spotlight](https://blog.holvi.com/topic/holvi-spotlight)
- [Internationals](https://blog.holvi.com/topic/internationals)
- [Life](https://blog.holvi.com/topic/life)
- [Work](https://blog.holvi.com/topic/work)
- [Open mic](https://blog.holvi.com/topic/open-mic)
- [Financial administration and bookkeeping](https://blog.holvi.com/topic/financial-administration-and-bookkeeping)
- [Founding a company](https://blog.holvi.com/topic/founding-a-company)
- [News about entrepreneurship](https://blog.holvi.com/topic/news-about-entrepreneurship)
- [business account](https://blog.holvi.com/topic/business-account)

[Life](https://blog.holvi.com/topic/life), [Holvi spotlight](https://blog.holvi.com/topic/holvi-spotlight)

# New EU directive aims to reduce the risk of account misuse, says lawyer

 09/10/2019, 08:47 | By [Ella-Roosa Koivupuro](https://blog.holvi.com/author/ella-roosa-koivupuro)

4 minute read

[![Share on facebook](https://blog.holvi.com/hubfs/assets/social-facebook.jpg)](http://www.facebook.com/share.php?u=https://blog.holvi.com/new-eu-directive-aims-to-reduce-the-risk-of-account-misuse&utm_medium=social&utm_source=facebook) [![Share on linkedin](https://blog.holvi.com/hubfs/assets/social-linkedin.jpg)](http://www.linkedin.com/shareArticle?mini=true&url=https://blog.holvi.com/new-eu-directive-aims-to-reduce-the-risk-of-account-misuse&utm_medium=social&utm_source=linkedin) [![Share on twitter](https://blog.holvi.com/hubfs/assets/social-twitter.jpg)](https://twitter.com/intent/tweet?original_referer=https://blog.holvi.com/new-eu-directive-aims-to-reduce-the-risk-of-account-misuse&utm_medium=social&utm_source=twitter&url=https://blog.holvi.com/new-eu-directive-aims-to-reduce-the-risk-of-account-misuse&utm_medium=social&utm_source=twitter&source=tweetbutton&text=)

![PSD2-blog](https://blog.holvi.com/hubfs/Blog%20visuals/Shared%20blog%20visuals/2019%20Q3/PSD2-blog.jpg)

The EU’s payment service directive sets new security standards. But what does this mean for Holvi users?

 

## EU directive brings more security to payment services

When it comes to your money, you want to be sure that the services you use are safe and reliable. As money is moved around primarily in digital format, we see new threats emerging that require new protective measures. These concerns are now being directly addressed by the EU.

The first payment service directive (PSD) was put into place in 2007, with PSD2 following shortly thereafter in early 2018. One part of the new directive that came into force in 2019 is the secure customer authentication requirement.

Payment service providers are now required to add an extra layer of security in customer authentication when a customer, for example, logs into their account or verifies an outgoing payment. The digital environment is constantly evolving, and legislation is in a rush to stay on schedule.

“The first payment service directive came into force in 2007, and in more than 10 years it has become outdated. The new directive updates the old regulation: it covers new payment services and aims to keep the regulation up to date with the market development”, Jenna Tirkkonen, Holvi’s Legal Counsel, explains.

 

![284A1847](https://blog.holvi.com/hs-fs/hubfs/Blog%20visuals/Shared%20blog%20visuals/2019%20Q3/284A1847.jpg?width=6428&name=284A1847.jpg)*Jenna Tirkkonen, Holvi’s Legal Counsel.*

 

## What is “strong customer authentication”?

PSD2 stipulates that payment service providers (such as Holvi) authenticate their customers strongly, and a username and password alone will no longer qualify.

“Customers have to be authenticated strongly according to PSD2 when they access their account online, initiate an electronic payment or take other actions that include the risk of misuse or fraud. For example, card payments both in-store and online are viewed as such electronic payments”, Jenna explains.

Why is it not enough to authenticate customers strongly only when they open their account for the first time?

“When a customer opens an account for the very first time, the payment institution has to ask information about the customer and store it based on anti-money laundering regulation. But when strong customer authentication is applied, the idea is to make sure that the payment initiator is the rightful owner of the account or the card. This protects the customer from potential misuse”, Jenna clarifies.

The directive sets certain criteria for strong customer authentication. It must cover at least two of the following:

- Knowledge (something that only the user knows, e.g. a password),
- Possession (something that only the user possesses, e.g. a mobile phone), and
- Inherence (something that the user is, e.g. a fingerprint).

In practice, payment service providers have to make sure that their customers use other means of authentication other than just a password. This is called two-factor authentication. If, for example, a customer’s password was hacked, the user can rest assured that the hacker cannot access their account.

 

## From October, use the Holvi app for authentication

At Holvi, we have addressed the issue of strong customer authentication with our mobile app; having the app meets the criteria of possession.

You’ll still log in with your existing username (email) and password but from October, each login and outgoing payment will need to be confirmed with either a PIN code chosen by the customer (meeting the knowledge criteria), touch ID or facial recognition (meeting the inherence criteria). The methods available to you depend on the features and functionality of your smartphone. This two step login process is also known as 2-factor authentication and adds an additional security layer, protecting your Holvi account.

If you are not able to install the app because of your phones’ operating system or your geographical location, you can also use Google’s Authenticator app for 2-factor authentication. You can read more about strong customer authentication at Holvi [here.](https://support.holvi.com/hc/en-gb/articles/360002159438-Strong-Customer-Authentication-SCA-at-Holvi-)

 

## Extra security for Holvi’s online store users

As strong customer authentication will be required when making a payment, the initiative also affects business owners selling via Holvi’s online store. But don’t worry – we’ve made sure that your online store is compliant and up to regulation. No action is required on your part!

When your customers buy from you online store, their credit card provider will ask for strong authentication, which Holvi online store enables. Good news for you: your online store meets the requirements of PSD2 and you can keep selling as usual!

 

## Smarter business banking with the Holvi app

We will release the new mobile authentication gradually and inform our customers of the exact dates via email. In the meantime, we strongly recommend installing and setting up the Holvi mobile app right away.

Get more done with the Holvi mobile app:

- Keep track of your money and view end-of-month balance estimation.
- Save receipts digitally for your bookkeeping.
- Make payments.
- Create, send and track invoices.
- Manage your card settings, block if needed and check your PIN code.

Download the app now!

[![Download\_on\_the\_App\_Store\_Badge\_US-UK\_135x40-5](https://blog.holvi.com/hs-fs/hubfs/Imported_Blog_Media/Download_on_the_App_Store_Badge_US-UK_135x40-5.png?width=135&name=Download_on_the_App_Store_Badge_US-UK_135x40-5.png)](https://apps.apple.com/fi/app/holvi-business-banking/id1006642625)    [![playstore-en-fi](https://blog.holvi.com/hs-fs/hubfs/playstore-en-fi.png?width=134&name=playstore-en-fi.png)](https://play.google.com/store/apps/details?id=com.holvi.app&hl=en)

### Simplify your work life

Holvi is your business’ new financial home. Our all-in-one account features:

- Business account
- Holvi Business Mastercard®
- Online invoicing & e-invoicing
- Bookkeeping tools

[Discover Holvi](https://www.holvi.com/features/)

 

![6\_how\_it\_works](https://blog.holvi.com/hs-fs/hubfs/New%20illustrations%20(2020)/6_how_it_works.png?width=477&name=6_how_it_works.png)

 

### Always curious? Subscribe to Workaround, for the boldly self-employed.

## Related articles

 Life

### [How to take a vacation as a freelancer – 6 steps to vacay](https://blog.holvi.com/how-to-take-a-vacation-as-a-freelancer)

 Life

### [9 signs you need a vacation from freelancing](https://blog.holvi.com/9-signs-you-need-a-vacation-from-freelancing)

×

#### Language

- [English](https://blog.holvi.com/)
- [Suomi](https://blog.holvi.com/fi)
- [Deutsch](https://blog.holvi.com/de)

#### What is Holvi

- [Business account and card](https://www.holvi.com/business-account-and-mastercard/)
- [Invoicing](https://www.holvi.com/invoicing/)
- [Bookkeeping](https://www.holvi.com/bookkeeping/)
- [Pricing](https://www.holvi.com/pricing/)
- [Testimonials](https://www.holvi.com/customers/)

#### Support

- [Holvi Status Page](https://status.holvi.com/)
- [Help Centre](https://support.holvi.com/hc/en-gb)
- [Blog](https://blog.holvi.com/)

#### Company

- [About us](https://www.holvi.com/about/)
- [Careers](https://www.holvi.com/careers/)
- [Press](https://www.holvi.com/press/)
- [Code of conduct for suppliers](https://25ekvp3qk4l34935tw15k6wq-wpengine.netdna-ssl.com/wp-content/uploads/2020/07/holvi-code-of-conduct-for-suppliers.pdf)

- [Facebook](https://www.facebook.com/HolviCom)
- [Instagram](https://www.instagram.com/holvi/)
- [Twitter](https://twitter.com/Holvi)
- [Youtube](https://www.youtube.com/user/BetterThanABank/)
- [Linkedin](https://www.linkedin.com/company/holvi/)

[![google-play](https://blog.holvi.com/hubfs/assets/googleplay_en.png)](https://app.adjust.com/f78ji6c) [![appstore](https://blog.holvi.com/hubfs/assets/appstore_en.png)](https://app.adjust.com/f78ji6c)

 Holvi Payment Services Ltd is regulated by the Financial Supervisory Authority of Finland as an Authorised Payment Institution. The current account issued by Holvi is a payment account and the funds held on the account are managed as segregated customer funds. Funds on the payment account are not covered by deposit insurance and the funds do not accrue interest.

 Mastercard is a registered trademark, and the circles design is a trademark of Mastercard International Incorporated. The Card is issued by Holvi Payment Services Oy (“Holvi”) pursuant to licence by Mastercard International Inc. Holvi is regulated by the Financial Supervisory Authority of Finland as an Authorised Payment Institution.

![](https://25ekvp3qk4l34935tw15k6wq-wpengine.netdna-ssl.com/wp-content/uploads/2020/09/mc_vrt_opt_rev_73_1x.png)

- [Terms of Service](https://support.holvi.com/hc/en-gb/articles/29831814825362-Terms-of-Service)
- [Privacy notice](https://support.holvi.com/hc/en-gb/articles/29831985498258-Privacy-Notice)
- [Acceptable Use Policy](https://support.holvi.com/hc/en-gb/articles/202256852-Acceptable-Use-Policy)
- [Site Notice](https://support.holvi.com/hc/en-gb/articles/202271182-Site-notice)