3D Secure is a fraud protection layer that is available through specific payment gateways that support Visa Secure and Mastercard SecureCode. 3D Secure involves three parties: the issuer (Visa or Mastercard), the acquiring bank, and the payment system (gateway).
It allows shoppers to create and assign a password to their card that is then verified whenever a transaction is processed through a site that supports 3D Secure. This additional security layer helps prevent unauthorized transactions — protecting the merchant and shopper from exposure to fraud.
A note to EU Merchants: The Financial Conduct Authority (FCA) has pushed back the September 14, 2019, deadline for the Strong Customer Authentication (SCA) requirement of the Payment Services Directive 2.0 (PSD2) regulation by 18 months. If your business is based in and serves the European Economic Area (EEA), we recommend switching to a payment gateway that supports 3D Secure as soon as possible.
When 3D Secure is enabled on your store, shoppers will be prompted to enter their pre-registered password after entering their credit card information. If they cannot enter their password correctly, they will be asked to try again. When successful, they will be directed to the "Thanks for Your Order" page. Below is an example of the 3D Secure prompt.
Gateways That Support 3D Secure
The following gateways support 3D Secure:
- PayPal powered by Braintree
- 2Checkout (hosted)
- Adyen v2 (hosted)
- Barclaycard ((3DS2 with fallback to 3DS1))
- Elavon eCommerce Platform
- Payment Express Pay (hosted)
- Sage Pay/Protx VSP Direct
- Sage Pay/Protx VSP Form (hosted)
- Worldpay (hosted)
- CyberSource (your store must be on Optimized One-Page checkout)
- Stripe (coming soon)
- Amazon Pay (Europe only)
- PayPal Payflow Pro*
*Manual orders are not supported with 3D Secure enabled for PayPal Payflow Pro.
See Online Payment Methods to learn how to add one of these gateways to your store.
How do customers register their card for the 3D Secure program?
Shoppers can register their credit card by speaking to the bank that issued it. Some banks and gateways may automatically direct shoppers to a 3D Secure registration page when the card is first used on a store that supports 3D Secure.