The Banque de France has mandated that issuers in France do the following for transactions from EEA and UK merchants:
Customer Initiated Transactions (CITs)
Stop accepting Direct to Auth transactions even with exemptions, 3DS must be used. This will be done in stages by transaction value; for transactions over €50 from 10th February, over €30 from 10th March and all values from 10th April.
Merchant Initiated Transactions (MITs)
Grandfathering is forbidden from 10th July 2025 and MITs must rely on fully authenticated CITs.
MOTO
MOTO transactions will be subject to a velocity limit of a cumulative total of €500 per card and merchant in a 24 hour period. Issuers will decline transactions after this threshold is reached.
The full announcement from the Banque de France can be found at 20250207_OSMP_Fraud-prevention-measures-on-remote-card-payments-outside-3-D-Secure.pdf