Implementation of Mandatory "Säker start" for BankID Transactions

Overview

As of May 1, 2024, "Säker start" will become mandatory for all electronic services using BankID. This update aligns with new regulations aimed at increasing security and preventing telephone fraud. Ping Payments has updated all BankID flows to comply with these requirements.

Detailed Changes

1. Mandatory Säker start Implementation
   Following the new mandate effective from May 1, 2024, all BankID authentication processes within our services now initiate with "Säker start." This ensures that the individual who starts the BankID session is the same one using the e-service, significantly reducing the risk of telephone fraud.
2. Updated Authentication Flows
   • Autostart for In-device Use:
     When both the e-service and BankID are used on the same device, the BankID session now automatically starts, streamlining the user experience and enhancing security.
   • Dynamic QR Code for Cross-device Use:
     For scenarios where the e-service and BankID are used on different devices, a dynamic QR code must now be scanned. This replaces the static QR code system, providing a higher security level and complying with the new requirements.
3. Enhanced User Experience:
   The implementation of "Säker start" provides a smoother and more consistent user experience. Users will notice easier activation and use of BankID, and their personal details, particularly personal identification numbers, are less exposed.
4. Future Updates:
   Financial ID-Technology, company behind BankId, is developing a solution for telephony services where autostart or QR codes are impractical. We anticipate introducing this feature within the next year, further enhancing security across different service modalities.

More information:
https://www.bankid.com/tekniska-uppdateringar/saker-start-blir-tvingande-fran-1-maj-2024

Updated services at Ping Payments:

• KYC-flows
• Agreement signing
• PIS payments through Neonomics and Open Payments
• Invoice Payments through Fortus Invoice
• Autogiro Signup
• Internal tools