Payment Services Directive 2

The Payment Services Directive 2 (PSD2) is a European Union regulation that was introduced in January 2018. The changes implemented as part of PSD2 will further protect you against fraud, keep you safe online when making purchases, and when using your online banking services. These changes are happening right across the European Financial Services industry.

There are two main changes taking place under the Phase 2 of PSD2 that will affect you; Strong Customer Authentication (SCA) and Open Banking.

Introducing Strong Customer Authentication for Online Card Payments

We have introduced an additional security measure, Strong Customer Authentication (SCA) for online card payments, which will make it more secure for you when you are making payments online.

We may ask you to complete authentication in one of two ways:

Authentication method one (Non app users)

• You will be asked to authenticate by entering 3 requested digits from your 6 digit Open24/Business24 Personal Access Number (PAN) and
• Confirm the One Time Passcode sent to your registered mobile number on the Visa Secure screen. Please note that One Time Passcodes will be sent to you by SMS from sender PTSB.

Authentication method two (app users)

• You will receive a push notification to your registered device and will be asked to authenticate by entering 3 digits from your 6 digit Open24/Business24 Personal Access Number (PAN). 

Please note: For our app users you may be required to complete authentication via the non app method at times.

Support and examples for authentication

For additional support and examples of what to expect when completing authentication please visit the Strong Customer Authentication section.

PSD2 Industry Readiness 

From the 29 June, some changes required under PSD2 regulation are being introduced to make online card payments more secure. All EU websites (e.g. retailers) that facilitate online card payments are required to implement another layer of security to provide additional protection for online card payments against potential fraud.

The Irish Banking industry has been working closely to phase in these requirements. As a result from the 29th of June any EU website that processes online card payments in excess of €30 must have the added security measures in place. If the measures are not in place, any transaction in excess of €30 cannot be processed and you should receive a message from the website to inform you if the transaction has not been completed. 

Please note: Any ATM, in-store card purchases, contactless payments or telephone initiated payments are not impacted by this change.

Strong Customer Authentication (SCA)

Currently when performing certain transactions such as setting up a new payment or viewing an e-statement, you are asked to enter an authentication code sent to your mobile phone via SMS text message.

As part of the Payment Services Directive 2 (PSD2) implementation we are introducing Strong Customer Authentication (SCA) to further enhance security and reduce the risk of fraud. We have added a new step to the current authentication process where you will be asked to enter 3 random digits from your 6 digit Personal Access Number (PAN) in addition to the SMS authentication code when you perform certain transactions or log on to your desktop.

This additional security step will help keep you safe online while not restricting current functionality in any way. Please see the new step highlighted in the image below.

Device Enrolment

Device enrolment is a process that will link your PTSB customer profile to your smart device (mobile or tablet) which will allow you to provide authentication where necessary.

For your security when accessing your payment account(s) online or completing certain online processes and payments, we need to verify that it is you.

This will be done by sending a push notification to your registered device. Push notifications are real time messages that pop up on your device screen advising you to authenticate certain online activity.

Third Party Providers (TPPs)

Changes being introduced under the PSD2 will offer you greater control over your data, giving you the option to securely share your online payment account information and make payments directly from your payment account by using authorised Third Party Providers (TPPs). This is known as Open Banking.

It is important to know that if you do not want to avail of these TPP services you do not have to. You are always in control. PTSB will never share your information with a TPP unless they have your authorisation.

There are three types of Third Party providers that you can avail of:

• Account Information Services Providers (AISP): An AISP gives a single view of payment accounts held in one or more Financial Institution. 
• Payment Initiation Services (PISP): A PISP makes payments on your behalf directly out of your payment bank account.
• Card Based Payment Instrument Issuer (CBPII): A CBPII can make an enquiry to PTSB to see if you have funds in your payment account. They will not be given a balance of your account but just a ‘Yes’ for funds available or an ‘No’ for funds not available.

For full definitions of the above Third Party Providers and full definition of payment account, please see our General Terms and Conditions. (Please note, payment account also referees to Credit Cards, Debit and ATM cards)

In conjunction with other Irish banks and the BPFI, the following video has been produced. The video gives an explanation of the changes arising through PSD2.

We have also provided our customer with a synopsis of the changes applicable to them. Please click here to view the synopsis document.

If you are a Third Party Provider and wish to find more information on the PTSB Sandbox and Live Environments, please visit our TPP Developer Portal  

Back to top

Changes to Products and Services

In addition to the introduction of SCA and Open Banking, we have made other service and product changes in line with PSD2 and will continue to do so over the coming months. We will inform you of these changes through our various communications channels.

Card Activation

Personal Visa Debit Cards

• You can activate your card online on Open24.ie or by making a cash withdrawal at any ATM worldwide.
• When you are activating your card online you will be asked to complete additional security steps, i.e. you will receive an SMS authentication code or a push notification to your registered device and you will need to enter 3 random digits from your 6 digit Personal Access Number (PAN)

If you need any assistance please contact Open24 on 0818 502 424 (or +353 1 212 4101)

Business Visa Debit Cards

• You must activate your Visa Business Debit cards on Business24.ie (via the activation banner).
• When you are activating your card online you will be asked to complete additional security steps, i.e. you will receive an SMS authentication code or a push notification to your registered device and you will need to enter 3 random digits from your 6 digit Personal Access Number (PAN).

If you need any help you can call Business24 on 0818 200 100 (or +353 1 212 1363)

Visa Credit Cards

• You must activate your Credit card online on Open24.ie.
• When you are activating your card online you will be asked to complete additional security steps, i.e. you will receive an SMS authentication code) or a push notification to your registered device and you will need to enter 3 random digits from your 6 digit Personal Access Number (PAN).
• If you need any help you can call Open24 on 0818 502 424 (or +353 1 212 4865)
• The principal cardholder must activate the authorised user’s card. Please note that activating the principal cardholder’s card will automatically activate the authorised user’s card.
• When you receive a replacement or renewal Credit card and use the new Credit card, all subsequent transactions on the old Credit card will be declined.

Back to top

Password Reset

We have also added an additional security step to the password reset process on Open24.ie. This means that after you receive your temporary internet password through our automated phone service and go to Open24.ie to change your password, you will be asked to enter an authentication code sent to your mobile phone via SMS text message or you will receive a push notification to your registered device and you will need to enter 3 random digits from your 6 digit Personal Access Number (PAN).

Please note that you will not be able to reset your password if you do not have a valid mobile number registered with us. To ensure the mobile number we have for you is correct, please log on to Open24.ie on a desktop or laptop and click on your personal settings.

If your mobile number in the personal setting screen needs to be updated or you are unable to log in on desktop please contact Open24 on 0818 502 424 (or +353 1 212 4101)

This change will not apply to customers registering for Open24 or Business24 in a branch via the branch kiosk.

Text Banking Service removal as of 19 September 2019

On 19 September 2019, we removed the Text Banking facility. As a result, you can no longer carry out the following via text message:

• Balance Enquiry
• Mini Statement
• 3rd Party payment
• Bill Payment
• Emergency Cash

Please note all of the above functionality is still available via Open24.ie and the Mobile Banking App.

For further information or assistance, please contact our Open24 team on 0818 502 424 (or +353 1 212 4101) or visit your local branch.

Back to top