3-D Secure

A card-scheme security protocol that adds an authentication step between the customer, their bank, and the merchant during an online card payment.

Definition

3-D Secure is a messaging protocol run by the card schemes (branded as Visa Secure, Mastercard Identity Check, and similar) that lets an issuing bank authenticate the cardholder during an online purchase. The three domains are the issuer, the acquirer, and the interoperability network that connects them. The newer EMV 3DS (3DS2) passes rich device and transaction data so the issuer can approve low-risk payments silently or, when needed, challenge the customer with a one-time code or biometric. Beyond blocking unauthorised use, a successful 3DS authentication typically shifts liability for fraud-related chargebacks from the merchant to the issuer, which is why merchants weigh it against the added checkout friction.

Worked example

During a card deposit the issuer sends a push notification asking the customer to approve the payment in their banking app; once approved, the transaction completes and fraud liability moves to the issuer.

Why it matters

For learners, 3-D Secure is the visible layer of online card security and the mechanism behind bank approval prompts. For professionals, it is a key lever on fraud liability, decline rates, and SCA compliance.

Related

Note: Liability shift and challenge behaviour depend on scheme rules, 3DS version, and issuer configuration.