SCA stands for "Strong Customer Authentication" and is mandatory for all online payments since mid-September 2019. With the so-called 2-factor authentication two factors must not come from the same category (examples for the categories: Knowledge PIN, Owned Smartphone "Device Binding", Inheritance Biometric), but must be composed of different areas.