A close look at the improved SCA experience at Mangopay
Strong Customer Authentication (SCA) is a regulatory must-have. But for many users, it's long been a source of friction. Redirect-heavy flows, clunky password inputs, and inconsistent UX across devices often make authentication feel like a chore.
At Mangopay, we knew we could do better. So, we set out to completely rethink the SCA experience, not just to meet the regulation, but to redefine what it feels like for end users.
This is our take on SCA: simple, intuitive, and future-ready.
Rethinking the SCA journey
We designed our authentication flow to feel as native as unlocking your phone, because that’s exactly what it is.
From the moment SCA is triggered, users are guided through a clean, responsive interface that supports modern authentication standards. Instead of being bounced between screens and manually typing codes, users verify themselves with what’s already in their hands: their fingerprint, face, or device PIN.
Here's a look at the flow:
- User is prompted to authenticate with a passkey, so less passwords or codes.
- They choose how: Face ID, fingerprint, device PIN, or QR code from another device.
- Authentication completes in seconds, with clear progress indicators and fallback options when needed.
This goes beyond surface-level improvements. It’s about making it usable and trustworthy.
And for users who don’t have passkeys or WebAuth enabled? We support secure fallback methods to ensure everyone can authenticate, without compromising safety or usability.
Going beyond: SCA with a tap or a touch
Most SCA solutions stop at the basics, SMS codes, email links, maybe an OTP app. But these are quickly becoming outdated and, worse, stolen.
That’s why we went further. We embedded passkey and WebAuth support directly into the SCA flow, bringing platform-native, passwordless authentication into the heart of the user journey.
What that means in practice:
- Face ID and fingerprint unlock on mobile and desktop, with no passwords required.
- Trusted device support via QR scan or keychain, like iCloud or Android Smart Lock.
- WebAuth enrollment lets users set up biometric login for future use, making every SCA request faster and more intuitive over time.
With this, we’re giving users the experience they expect from modern apps: no friction, no typing, no doubts about security.
Why it matters
SCA doesn’t have to feel like a hurdle. Done right, it becomes invisible. A quick check that reassures users and protects their transactions, without disrupting the flow.
By building the SCA experience around these functionalities, Mangopay delivers:
- Phishing-resistant, device-native security
- Consistent experience across platforms
- Faster flows that reduce drop-off and abandonment
- A foundation that’s ready for the passwordless future
"We didn’t just build a compliant SCA experience. We built one that users actually want to use." - Maciej Pitucha, VP Data and Risk
Looking ahead
Authentication should never feel like an afterthought. At Mangopay, it’s a core part of the user experience, and we’ll continue to evolve it to meet the highest security and usability standards.
One area we’re especially excited about is enabling canonical user authentication across multiple platforms. That means if a user sells on more than one marketplace or app powered by Mangopay, they won’t need to re-authenticate from scratch. Instead, they’ll have a unified, verified identity that follows them, ensuring a consistent, trusted experience wherever they go.
This is the next step in making authentication not just secure, but seamless and interoperable.
If you're curious about what modern SCA can feel like, stay tuned. This is just the beginning.
