Stripe required changes for compliance with new EU SCA Regulations

[robarov]

Got this mail, indicating some required changes to keep this plugin working in the EU in the near future:

Hi there,

In September, the European Union will be introducing rules requiring Strong Customer Authentication (SCA) for many online transactions as part of PSD2 regulation.

Our information shows that your business will be impacted by SCA and that you’ll need to make changes to your Stripe integration to become compliant. Transactions that don’t meet the new SCA requirements may be declined by your customers’ banks.

Stripe has built a new Payments API—PaymentIntents—to get European customers ready for these rule changes. PaymentIntents is designed to recognize when the new SCA rules apply and to trigger any required authentication.

You can learn more in our guide on SCA and read the docs to get started integrating this new SCA-ready payments API.

Are there any plans in achieving this?

[alexjcollins]

+1 for this. Keen to know if you have plans to update before mid-September. If not, we need to know so we can work out plans internally for our clients.

[aarmitage]

We're considering options for a simple cart and have the same question on the SCA requirements. Obviously this being a free plugin might mean new development like this is low priority, but it would be great to know whether this is something the plugin supports, either now or for the future.

[peteeveleigh]

I think at this stage it's safe to assume that this plugin won't be getting updated to the new version of Stripe Checkout which is SCA compatible.

[aarmitage]

Agreed! Always worth asking.

[peteeveleigh]

Oh absolutely! It's why I came here :) I'm currently looking at the feasibility of making a plugin that uses the new Stripe Checkout, or updating this one. But it's probably not going to happen before 14th Sept even if I can figure things out.

[aarmitage]

Did you see the implementation has been delayed? https://www.fca.org.uk/news/press-releases/fca-agrees-plan-phased-implementation-strong-customer-authentication.

Although Stripe have been pretty on the ball, from what I've seen they're not going to force through the changes now before 14 Sept. This is what I received from them...

We wanted to send you a quick update on the upcoming Strong Customer Authentication (SCA) requirements being introduced in Europe next month.

Earlier this week, the UK regulator granted an 18 month phase-in period to give banks and businesses more time to prepare for these new requirements. As a result, we don’t expect banks to fully require SCA for payments from UK cards until March 2021.

Our information shows that 99% of your yearly payments volume is from UK cardholders. We still recommend updating your payments flow as early as possible to help avoid an increase in declines from other European cards, or in case of an early enforcement by select banks.

Our new payments APIs and other SCA-ready solutions are designed to take this uncertainty into account. If you update your integration to the new solutions ahead of 14 September 2019, our APIs won’t trigger authentication unless required by the cardholder’s bank. Similarly, after 14 September 2019, we’ll take into account each country’s enforcement timeline and only apply authentication and exemptions when SCA is required.

[peteeveleigh]

The implementation has been delayed in the UK, Germany, and Poland (I think) but other EU cards will still be subject to the additional checks.

This means that if all of your customers are using UK cards you'll be OK. But you won't be able to process cards from other countries in the EU (Germany and Poland excepted). Anyone using a card that requires the checks will have their card declined.

[Coysh]

Anyone got any updates on this? I looked at using briancnoble's fork for Stripe Elements, but doesn't seem to be finished

[jalendport]

@robarov @alexjcollins @aarmitage @fantasticmachine @Coysh happy to announce I've taken over the stripe-checkout plugin and will be upgrading it to the newest version of Stripe Checkout (which afaik has full support for the SCA stuff) in the next little bit. Can't make any promises yet on the timeframe but it's near the top of my todo list for sure. If you have any questions, feel free to post them here or to DM me on Twitter or Discord...

[alexjcollins]

That's great to hear – thanks @jalendport 🎉

[aarmitage]

🎉👏

[Coysh]

@jalendport this is the best news I've heard for weeks! Will there be a dev repo we can check in on? EDIT: Found it at https://github.com/jalendport/craft-stripecheckout