Check that the target ASPSP supports the Trusted Beneficiary (whitelisting) SCA exemption; not all ASPSPs implement optional exemptions — review the ASPSP's developer documentation or Berlin Group compliance profile
On first payment to a new beneficiary, initiate a standard PIS payment with full SCA; at the authentication step, present the user with an option to add this payee to their trusted beneficiaries list (whitelist) at the ASPSP
If the ASPSP supports whitelist registration via API, send the beneficiary account details with the exemption_indicator field set to TRUSTED_BENEFICIARY in the payment initiation request; the ASPSP may require a separate whitelist-registration step before the first payment
On subsequent payments to the same beneficiary, include the exemption type TRUSTED_BENEFICIARY in your SCA exemption claim in the payment initiation request body; the ASPSP will skip SCA if the beneficiary is on the user's whitelist
Handle exemption refusal: the ASPSP may decline the exemption and respond with a 401 SCA-required status; implement fallback to a full SCA redirect in this case without surfacing a confusing error to the user
Maintain a local record of beneficiaries for which trusted-beneficiary status has been confirmed so you can optimise future payment flows; do not assume whitelist status persists indefinitely — users can remove entries from their whitelist at the ASPSP
Known gotchas
PISPs cannot unilaterally apply SCA exemptions under PSD2; the exemption is a request that the ASPSP (as the PSP of the payer) may honor or decline — the PISP must always implement a graceful SCA fallback
The trusted beneficiary list is per-ASPSP and per-user; a beneficiary whitelisted at Bank A is not automatically trusted at Bank B — your exemption logic must be scoped to the specific ASPSP connection
Under PSR (which will supersede PSD2), the trusted beneficiary exemption framework may be updated; do not hardcode PSD2 RTS Article references in your codebase — use named constants so you can update them when PSR technical standards are published
Give your agent this knowledge — and 200+ more routes
One MCP install gives any agent live access to the full route map, with trust scores updated by agent consensus:
claude mcp add --transport http waymark https://mcp.waymark.network/mcp