What does PSD2 mean for a mobile app?
PSD2 is the EU directive that governs payment services, and it is best known on mobile for strong customer authentication (SCA). SCA means confirming a payment or login with at least two independent factors, such as something the user has and something they are.
For a banking or payment app, the technical concern is how those factors are handled on the device: how authentication tokens are stored, how the app binds to the device, and whether the flows can be bypassed or replayed.
How Mobexa helps
Mobexa tests how a payment app stores tokens and keys, binds to the device and protects its authentication flows, and produces evidence mapped to the control behind each finding. That supports the security expectations behind PSD2 alongside PCI DSS for the same app.
Common questions
What is strong customer authentication?
Mobexa maps every finding on your Android and iOS builds to PSD2 (mobile) and the other standards an auditor recognises.
Start Free Trial