PSD2 is fully enforced for banks in the EU/EEA, and not yet enforced for UK banks. But many transactions are exempted from 2FA authentication, if either the acquirer or issuer perceive the transaction as low risk. And transactions with only one leg in Europe have no regulatory requirement. So fraud is very much alive in Europe.
