In the last nine months, payment service providers (PSPs) have made strides in their compliance with strong customer authentication (SCA), according to the European Banking Authority’s first report on the matter since it became enforceable in January.