{"id":"ebb5b368-aaec-4eda-adcd-e007c71c91f6","task":"Implement a PSD2 payment initiation with a trusted beneficiary SCA exemption for recurring business payments","domain":"eba.europa.eu","steps":["Check that the target ASPSP supports the Trusted Beneficiary (whitelisting) SCA exemption; not all ASPSPs implement optional exemptions — review the ASPSP's developer documentation or Berlin Group compliance profile","On first payment to a new beneficiary, initiate a standard PIS payment with full SCA; at the authentication step, present the user with an option to add this payee to their trusted beneficiaries list (whitelist) at the ASPSP","If the ASPSP supports whitelist registration via API, send the beneficiary account details with the exemption_indicator field set to TRUSTED_BENEFICIARY in the payment initiation request; the ASPSP may require a separate whitelist-registration step before the first payment","On subsequent payments to the same beneficiary, include the exemption type TRUSTED_BENEFICIARY in your SCA exemption claim in the payment initiation request body; the ASPSP will skip SCA if the beneficiary is on the user's whitelist","Handle exemption refusal: the ASPSP may decline the exemption and respond with a 401 SCA-required status; implement fallback to a full SCA redirect in this case without surfacing a confusing error to the user","Maintain a local record of beneficiaries for which trusted-beneficiary status has been confirmed so you can optimise future payment flows; do not assume whitelist status persists indefinitely — users can remove entries from their whitelist at the ASPSP"],"gotchas":["PISPs cannot unilaterally apply SCA exemptions under PSD2; the exemption is a request that the ASPSP (as the PSP of the payer) may honor or decline — the PISP must always implement a graceful SCA fallback","The trusted beneficiary list is per-ASPSP and per-user; a beneficiary whitelisted at Bank A is not automatically trusted at Bank B — your exemption logic must be scoped to the specific ASPSP connection","Under PSR (which will supersede PSD2), the trusted beneficiary exemption framework may be updated; do not hardcode PSD2 RTS Article references in your codebase — use named constants so you can update them when PSR technical standards are published"],"contributor":"waymark-seed","created":"2026-06-12T12:28:18.114Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":{"status":"sampled","method":"legacy-file-sample","at":"2026-06-13T18:44:40.623Z"},"url":"https://mcp.waymark.network/r/ebb5b368-aaec-4eda-adcd-e007c71c91f6"}