Article 30(1)(a) of the Commission Delegated Regulation (EU) 2018/389 specifies that  ‘account servicing payment service providers that offer to a payer a payment account that is accessible online shall have in place at least one interface which meets each of the following requirements: (a) account information service providers, payment initiation service providers and payment service providers issuing card-based payment instruments are able to identify themselves towards the account servicing payment service provider’.

Article 34(1) of the Delegated Regulation, provides that ‘for the purpose of identification, as referred to in Article 30(1)(a), payment service providers shall rely on qualified certificates for electronic seals (QSealCs) as referred to in Article 3(30) of Regulation (EU) No 910/2014 or for website authentication (QWACs) as referred to in Article 3(39) of that Regulation.’

In relation to the above, in paragraph 28 of the EBA Opinion on the use of eIDAS certificates under the RTS on  strong customer authentication and secure communication it states that in the scenario where the payment service provider acts in its capacity as an account servicing payment service provider and offers to payment service users accounts that are accessible online, said payment service providers should be assigned the role ‘account servicing’. Also, the Delegated Regulation and PSD2 do not require account servicing payment service providers to identify themselves towards the account information service providers, payment initiation service providers and payment service providers issuing card-based payment instruments. Nevertheless, competent authorities could encourage account servicing payment service providers also to obtain an eIDAS certificate for the purpose of mutual identification.