If your company is registered in Europe, there are a few mandatory steps to complete after you register. In the Things to do block, start the Set up transaction authentication task – it’s required for secure payment operations.
Strong Customer Authentication (SCA) is a requirement of the European PSD2 (Payment Services Directive 2) regulation, designed to make payments more secure.
In Mellow, SCA adds an extra layer of authentication for the wallet and other operations.
Step-by-step instructions for setting up transaction authentication
Step 1. Starting the setup
Select the Set up transaction authentication task. A window will open describing the two stages: creating a six-digit passcode and linking a phone number for SMS confirmation. Select Set up to continue.
Step 2. Creating the passcode
Enter a six-digit numeric passcode, then enter it again to confirm. You’ll need this passcode whenever you sign in to the wallet or view transactions. Select Continue.
Step 3. Linking a phone number
Enter a mobile phone number and select Send code. An SMS with a confirmation code will be sent to that number.
Enter the code in the Authentication code field and select Confirm. SMS authentication is provided by Airwallex.
Step 4. Recovery codes
Once your phone is linked, the system will generate a set of one-time recovery codes. You’ll need them if you lose access to your phone or forget your passcode.
Save the codes! Each code can only be used once. Download or copy them and store them somewhere safe. |
Once the codes are saved, select Next. Setup is complete – you’ll see the Transaction authentication enabled confirmation.
Confirming payment recipients
Before your first payout to a new recipient, the system will ask you to confirm the recipient with an SMS code. Once confirmed, the recipient will have Trusted status for 180 days – you won’t need to confirm them again during that period.
How to mark recipients as trusted
You can do this in two ways:
From the dashboard – a task called You have N new recipients – Mark them as trusted will appear in the Things to do block.
You can also confirm recipients in the Wallet section. Open the Recipients tab, select the recipients with Not trusted status, and choose Mark as trusted.
Here’s how recipient confirmation works:
Select the recipients and choose Mark as trusted. A window will appear explaining that payments to unconfirmed recipients aren’t possible.
Select Continue. The system will open the Verify your identity screen and ask for your six-digit passcode.
Enter the passcode and select Continue. Then enter the SMS code sent to your linked number.
Once confirmed, the recipients will have Trusted status for 180 days.
When the passcode is requested
Once Strong Customer Authentication is set up, the system may ask for the passcode in these cases:
When opening the Wallet section
When viewing transactions
When marking recipients (your contractors) as trusted
The verification session stays valid for 180 days after you enter the passcode. After that, you’ll need to enter it again. If you forget your passcode, use the I forgot my passcode option and one of your recovery codes.
If you have questions or need help, write to us at [email protected].