Strong Customer Authentication

Set static password

What is Strong Customer Authentication?

Starting from February 1, 2025, in accordance with the European PSD2 directive transposed into national legislation, Victoriabank is implementing Strong Customer Authentication – an additional step for card protection, fraud prevention, and ensuring secure transactions.

Strong Customer Authentication (SCA - Strong Customer Authentication) is a security standard provided in the European Directive 2366/2015 on Payment Services PSD2 (Payment Services Directive 2). The purpose of implementing strong authentication is to enhance payment security for merchants in the Republic of Moldova.

Thus, starting from February 1, 2025, the rules of Strong Authentication will apply when:

  • You make offline card payments to merchants
  • You make online payments (e-commerce)
  • You use VB24 Mobile/Web

SCA - Strong Authentication - requires using at least two of the following three methods to verify your identity when making card transactions or online payments to merchants in the Republic of Moldova:

  • Something you are(biometric)fingerprint, facial recognition
  • Something you havea mobile device or another authentication instrument
  • Something you knowpassword, PIN, phone unlocking method


What changes for you:

  • For online payments, set up your static password on the dedicated page: sca.victoriabank.md
  • For offline card payments, you will be required to enter your PIN in some cases (details below)

When will you use the static password or PIN code?

  • Payments over 500 lei (or equivalent in foreign currency)
  • Recurring payments: if the number of consecutive transactions initiated since the last strong authentication exceeds 5
  • Cumulative value payments: if the total value of transactions between two strong authentications exceeds 2000 lei (or equivalent in foreign currency)
  • Subscription payments (e.g., memberships): to confirm the first payment, strong authentication will be required, and subsequent transactions will be considered authorized

When you will not need to enter a PIN code or static password

  • payments made with a card enrolled in electronic wallets (Apple Pay, Google Pay, Xiaomi Pay, Garmin Pay). These transactions comply with SCA requirements and do not require additional authentication
  • payments made at unattended terminals (public transport tickets or parking fees)
  • transfers made through VB24 between your own accounts at Victoriabank
  • currency exchange between your own accounts at Victoriabank

Benefits of SCA 

  • More secure card payments: you will confirm payments made with a card at POS terminals by entering the PIN code from a certain amount (e.g., from 500 MDL or cumulatively from 2000 MDL) or frequency (e.g., every sixth payment).
  • More secure online payments: you will confirm online payments through the VB24 Mobile/Web application or, if you do not have access to it, in addition to the OTP code, you will confirm payments through a static password
  • Secure access to VB24 Web and VB24 Mobilefor VB24 Web, you will enter an OTP code received on your phone, and for VB24 Mobile, you will use biometrics for authentication

Recommendations

To save you from hassle, we come to your aid with some recommendations regarding transactions in the offline and online environment:

  • Enroll your cards in your electronic wallet
  • Remember your card PIN
  • If you don't remember it or want to reset it, use the ALEX chatbot on the bank's website or call Call Center – 1303
  • Set a secure static password for online payments (e-commerce)
  • If you encounter difficulties when paying at POS terminals, ask the operator/cashier to repeat the transaction by inserting the physical card into the payment terminal or pay with the card from your electronic wallet

When making online payments from 01.02.2025

  • Make sure you have the current version of the VB24 Mobile application installed and know your access password
  • Confirm all online payments via the VB24 Mobile application
  • Set a secure static password to confirm online payments, in in case you have not secured the above points

When making offline payments from 01.02.2025