What Is 3-D Secure?
3-D Secure (3DS) is an additional authentication layer for online card transactions where the cardholder's issuing bank may verify the customer's identity. Modern EMV 3-D Secure uses risk-based authentication with frictionless and challenge flows. It doesn't eliminate fraud or guarantee approval or liability shift.
Direct Answer
3-D Secure (3DS) is an additional authentication layer for online card transactions where the cardholder's issuing bank may verify the customer's identity. Modern EMV 3-D Secure uses risk-based authentication with frictionless and challenge flows. It doesn't eliminate fraud or guarantee approval or liability shift.
Direct Answer
3-D Secure (3DS) is an additional authentication layer for online card transactions that allows the cardholder's issuing bank to verify the customer's identity during checkout. Modern EMV 3-D Secure uses risk-based authentication, with many transactions passing frictionlessly while higher-risk transactions may use a challenge flow. 3-D Secure can reduce fraud but does not eliminate it, does not guarantee approval, and does not always shift liability.
How It Works
When 3-D Secure is enabled, the gateway routes the transaction to the issuer for authentication before authorization. The issuer assesses risk and either approves the transaction in the background (frictionless flow) or asks the customer to verify their identity, such as with a one-time code or biometric prompt (challenge flow). The authentication result travels with the transaction to the authorization step.
Key Points
- 3-D Secure adds an issuer-side authentication step for ecommerce transactions.
- Modern EMV 3DS is risk-based and often frictionless; higher-risk transactions may require a challenge.
- Outcomes depend on the network, issuer, transaction type, region, and merchant/acquirer configuration.
- 3-D Secure can reduce fraud but does not eliminate it, does not guarantee approval, and does not always shift liability.
What Merchants Should Know
Enabling 3-D Secure can reduce fraud and, depending on network rules, the authentication result, transaction type, issuer, and your acquirer configuration, may shift some dispute liability to the issuer — but this is not guaranteed in every case. Balance fraud reduction against checkout friction; modern risk-based flows minimize impact on legitimate customers. Confirm how your gateway supports 3-D Secure and which networks and programs apply.
