What Inherence elements are compliant with Strong Customer Authentication (SCA) requirements?

The following summarises the European Banking Authority (<a href="/glossarycollection/european-banking-authority" style="color:#48277C;" target="_blank" title="European Banking Authority">EBA</a>) view on what does and does not constitute an inherence element under the Regulatory Technical Standards (<a href="/glossarycollection/regulatory-technical-standards" style="color:#48277C;" target="_blank" title="Regulatory Technical Standards">RTS</a>) on Strong Customer Authentication* (<a href="/glossarycollection/strong-customer-authentication" style="color:#48277C;" target="_blank" title="Strong Customer Authentication">SCA</a>): 

Fingerprint Scanning; 

Voice Recognition; 

Vein Recognition; 

Hand & Face Geometry; Retina & Iris Scanning; 

Keystroke Dynamics; 

Heart rate or other body movement pattern identifying that the Payment Service User (<a href="/glossarycollection/payment-service-user" style="color:#48277C;" target="_blank" title="Payment Service User">PSU</a>) is verified (e.g. for wearable devices); 

The angle at which the device is held. 

The following do not constitute inherence elements: 

information transmitted using a communication protocol, such as EMV® 3-D Secure; 

and, 

Memorised Swiping Paths. 

*Compliance with SCA requirements is dependent on the specific approach used in the implementation of the elements.