3D Security Protocol (3DS) FAQ

WHAT IS 3DS?

3D security protocol adds an additional level of payment protection to an online transaction. In order to complete an online purchase, the cardholder is asked to provide proof of identity by entering a unique password, an SMS code or a temporary PIN.

HOW DOES 3DS WORK?

Here are the initial steps involved in the 3D Secure process:

1. Card information collection: the cardholder enters their unique credit/debit card data.
2. 3D Secure enrollment confirmation: the system checks whether or not the card is registered for 3D Secure.
3. Redirection to provider's 3D Secure page: if 3D Secure enrollment is confirmed the client is then redirected to a 3D Secure page served by the card provider.
4. Additional security authentication: on the provider's website, the client will be asked to enter their unique password or a one-time authentication code which will be emailed to their confirmed email address or sent to their confirmed phone number.
5. Redirection to merchant's website: if the cardholder authentication went successfully the cardholder is then redirected back to a merchant's website for payment confirmation.
6. Payment Confirmation: once back on the merchant's site, the customer will receive confirmation of a successful payment.

HOW DOES 3DS PROTECT ME?

3DS is a form of multi-factor authentication (MFA). MFA has been demonstrated to protect users because it is much more difficult to emulate by malicious actors. The "second factor" is usually sent to a mobile phone or other device that has been separately registered with the payment provider by you, and therefore makes simply knowing a password insufficient to authorize fraudulent transactions.