A security requirement under PSD2 that mandates two-factor authentication for electronic payments, combining at least two of three elements: something the customer knows (password), has (device), or is (biometric), to reduce fraud.