I’m sure I read somewhere (maybe on this thread) that this was being considered.
3 Likes
Leads to wondering why I can’t opt-out of at least this contactless re-auth. I get push notifications to my phone after every transaction after all, so I’d know quickly if someone else was using my card and it therefore wasn’t in my possession. Could I not tick a box to say “I accept responsibility for contactless fraud, absolve the bank of refunding me and would like contactless re-auth turned off”?
I guess because it’s not catered for in the regulations 
1 Like
Here I was thinking we paid regulators to think things through …
2 Likes
They probably did think these things through. About 5 years ago (I’m guessing).
2 Likes
No apologies necessary, just a different viewpoint!
Hope you stick around and add your thoughts 
Relevant?
1 Like
My understanding from reading this thread or the previous SCA one is that the above isn’t the case. A properly configured terminal should be able to request the user enter their card and PIN (with appropriate messaging) after the tap as part of the same transaction. However, I think some terminals have not been properly updated with this smoother and more sensible flow. @erincandescent might be able to shed some light, but I’m pretty sure that a decline and new transaction is not the only option, or even the preferred one.
1 Like
I’ve written a longer answer to this elsewhere (maybe someone else can dig it up). But in short the regulations primary aim is to reduce fraud across the entire financial industry.
Ultimately customers end up paying for fraud, even if not directly. Bank fraud losses are paid for in fees and lower interest rates.
While the idea of a “I’m a responsible human who knows what they’re doing” checkbox sounds nice. The reality is people people would tick that box, and still demand that they’re repaid when they get defrauded. Most people don’t have enough knowledge to provide truly informed consent, and it would just become a mechanism for banks to shirk their responsibilities.
9 Likes
It is relevant, but it wasn’t that post that’s in my (failing) memory. Someone from Monzo specifically said that an in app reminder (along the lines of ‘you’ve £70 to go before your next Chip and PIN) was being considered. Unless I’m imagining it
1 Like
This thread has amazed me and made me realise how many people still actually use the physical card! I literally only use the physical card at an ATM. 95% of places I visit will accept Apple Pay and allow me to go over the standard £30 contactless auth so it’s a no brainer. 
6 Likes
The expected behaviour of terminals - and what has been my (fortunate, I guess) experience is:
- You tap your card
- “Authorizing” happens as normal
- We respond saying “User is over their limit, please perform strong authentication”
- The terminal prompts something along the lines of “Please insert your card PIN required”
- You insert your card, enter your PIN, and it authorizes as normal
All of this purely at the terminal/pin-pad - no interaction with the POS system should be required at all
Unfortunately a number of terminals or POS systems appear to be misconfigured and treat the “Please perform strong authentication” response as a hard decline. Even more unfortunately a small number of them seem to get “stuck” until you abort the transaction and retry
When it does work properly (as has been my experience at e.g. Tesco’s card only self service terminals) the experience is pretty fluid (except that a bunch of places have programmed their terminals with somewhat jargony phrases like “Please insert card SCA REQUIRED”)
4 Likes
My understanding was this wouldn’t comply with SCA? 
As it has to be initiated by the payment.
I may be wrong through.
1 Like
Yeah it’s been discussed before and explained
1 Like
Yeah it doesn’t follow the rules but I like the fuck you attitude to SCA. 
Seems like a sensible way to reset the limit, almost makes it pointless having the limit in the first place…
I think Monzo is too 
to have the balls to do this. Especially with going above and beyond when it’s not always best to do that (cough £100 v £135 limit)
3 Likes
I’ve just seen Revolut’s implementation. Seems to be the better one so far.
When you’re approaching your limit (or whenever if you’re that way inclined) - in the app you can reset the limits by authenticating and start from £0. This seems a much better implementation.
2 Likes
It does, but it also seems to not exactly fully in line with the Q&As associated with the new laws. So far so Revolut!
Hope, as said above, that 
will keep a watch on others and see if they are over-interpreting the law (in practice rather than in words based on wider application)
1 Like
Did notice this yesterday which is maybe related to your point:
2 Likes
This is only currently set as an experiment in the app, but certainly would be useful.
1 Like