[dgellow]

The implementation causing you issues is from the bank, not from the EU regulation.

See https://en.wikipedia.org/wiki/Strong_customer_authentication for details