Card Payment Authentication

This article explains the necessity of card payment authentication in Arbor to comply with the EU's Strong Customer Authentication (SCA) requirements, enhancing payment security and preventing fraud. It details the authentication process for users making payments through Arbor's platforms, including the use of Visa or Mastercard, and outlines potential issues that may arise during transactions, along with the methods of authentication supported by banks.

Why is Payment Authentication needed?

Card payments in Arbor are compliant with the EU's Strong Customer Authentication (SCA) requirements to make payments more secure in order to prevent fraud and protect customers. To read more about SCA, take a look at our blog post.

When you make an online payment, SCA requires you to verify that you are who you say you are. In Arbor, this means users or parents will need to complete an extra step to verify the transaction when making a payment through the Arbor MIS, Parent Portal or Parent App.

Some small payments under £30 may be exempt from Strong Customer Authentication because they are low-risk. This means that users may not need to complete the extra step of authorisation for every transaction they make.

How does Authentication work in Arbor?

When you make a payment, you'll first input the details for the payment you want to make. In the example below I am a parent topping up a meal account.

Authentication will apply whether the payment is made right away using the Pay now option, or if paying using the basket.

A pop up will appear to enter the card details into.

You must use a Visa or Mastercard. If you input the details of another type of card, this will be flagged to you and you will need to input the details of a Visa or Mastercard card.

If the expiration date has passed you will be made aware of this so you can choose another card to pay with. 

Once the details are correct, click Pay.

If you try to proceed with the payment and it is unsuccessful, you will be informed of the reason and you will need to attempt the transaction again.

There are many reasons why a payment may be unsuccessful. For example, if the security code is incorrect, you will be made aware of this so you can choose another.

For the example below, there could be multiple reasons why the payment could not be authorised. You would be able to add new card details and attempt the transaction again.

If authentication is needed for the payment, you will be prompted to authenticate the payment using the method of authentication your bank supports. This could be:

• an SMS code,
• your mobile banking app 
• another method

For example, here's what it may look like if you're using Monzo. (Please note, we are not affiliated with Monzo, this is purely an example)

Once we've been able to confirm your identity, the payment will be completed and your card will be charged. You'll see confirmation that the transaction has been successful.