Test Cases for 3-D Secure 2.x
On This Page
- 2.1: Successful Frictionless Authentication
- 2.2: Unsuccessful Frictionless Authentication
- 2.3: Attempts Processing Frictionless Authentication
- 2.4: Unavailable Frictionless Authentication
- 2.5: Rejected Frictionless Authentication
- 2.6: Authentication Not Available on Lookup
- 2.7: Enrollment Check Error
- 2.8: Time Out
- 2.9: Bypassed Authentication
- 2.10a: Successful Step-Up Authentication
- 2.11a: Unsuccessful Step-Up Authentication
- 2.12a: Unavailable Step-Up Authentication
- 2.14: Require Method URL
Use the card number specified in the test with the card expiration date set to the month
of January and the current year plus three. For example, for 2024, use 2027. You also
need the minimum required fields for an order.
Be sure to remove spaces in card numbers when testing.
While the usage of transaction ID (XID) values have declined in importance, they are
still included in 3-D Secure 2.x test cases. Only Mastercard transactions do not return
XIDs.
While the 3-D Secure version and directory server transaction ID fields are returned for
the Check Enrollment and Validate Authentication services, this data is not included in
the 3-D Secure 2.x test cases.
IMPORTANT
Mastercard requires that the 3-D Secure version and directory
server transaction ID be included along with all pertinent data in your
authorization request.
2.1: Successful Frictionless Authentication
This test verifies that successful frictionless authentication of the cardholder by the
card issuer works correctly.
Card Numbers
Card Type | Test Card
Number | |
|---|---|---|
3-D Secure 2.1.0 | 3-D Secure 2.2.0 | |
American Express Card Type = 003 | 34000 00 0000 1007 | 34000 00 0000 2708 |
Cartes Bancaires Mastercard Card Type = 036 | 520000 00 0000 3001 | 520000 00 0000 4801 |
Cartes Bancaires Visa Card Type = 036 | 400000 00 0000 3006 | 400000 00 0000 4970 |
China UnionPay Card Type = 062 | 620001 00 0020 0000 | 810001 00 0000 0142 |
Diners Club Card Type = 005 | 601100 00 0000 1002 | — |
Discover Card Type = 004 | 601100 00 0000 1002 | — |
Elo Card Type = 054 | 650529 00 0000 1002 | — |
JCB J/Secure Card Type = 007 | 333700 00 0000 0008 | 333800 00 0000 0296 |
mada Mastercard Card Type = 060 | — | 520000 00 0000 8000 The merchant’s country must be set to SA
within the merchant profile, or the
CountryCodeOverride field must be set to
SA on the Lookup Request. The response
will include the 3-D Secure operator ID, DS reference
number, brand authentication, and the ACS reference number.
|
mada Visa Card Type = 060 | — | 400000 00 0000 8020 The merchant’s country must be set to SA
within the merchant profile, or the
CountryCodeOverride field must be set to
SA on the Lookup Request. The response
will include the 3-D Secure operator ID, DS reference
number, brand authentication, and the ACS reference number.
|
Mastercard Card Type = 002 | 520000 00 0000 1005 | 520000
00 0000 2235 |
Visa Card Type = 001 | 400000 00 0000 1000 | 400000 00 0000 2701 |
ITMX Visa Card Type = 001 | 436208 21 0000 0005 | — |
ITMX Mastercard Card Type = 002 | 557755 01 2100 0000 | — |
IMPORTANT
The Meeza card is supported in payer
authentication and can be tested in the same manner as Mastercard using the same
test card numbers. The only difference is that the card type for Meeza is
067
. Results for the Check Enrollment Service
Status
= AUTHENTICATION_SUCCESSFUL
The cardholder is enrolled in Payer Authentication.
Authenticate the cardholder before continuing with the transaction.
VERes enrolled =
Y
PARes status =
Y
CAVV = <CAVV value>
AVV = <AVV value> (Mastercard only)
XID = <XID value> (American Express only)
E-Commerce Indicator (ECI) Values
This table lists the expected ECI raw values and their respective string values.
These values indicate whether the payer was authenticated by the card network. These
values should be passed under this test condition when a transaction is submitted
for payment authorization.
Network | ECI Raw Value | ECI String Value |
|---|---|---|
American Express | 05 | aesk |
Cartes Bancaires Mastercard | 02 | spa |
Cartes Bancaires Visa | 05 | vbv |
China UnionPay | 05 | up3ds |
Diners Club | 05 | pb |
Discover | 05 | dipb |
Elo | 05 | cs |
ITMX | 05 | lss |
JCB J/Secure | 05 | js |
mada Mastercard | 02 | mada or spa |
mada Visa | 05 | mada or vbv |
Mastercard | 02 | spa |
Visa | 05 | vbv |
Results for the Validation Authentication Service
Validation does not apply to this test because no validation is needed when no
challenge is issued during the transaction.
Action
If you request Check Enrollment and Authorization services separately, add the
required payer authentication values to your authorization request. If you request
the Check Enrollment and authorization services together, the process described
above occurs automatically.
2.2: Unsuccessful Frictionless Authentication
This test verifies that cardholder authentication without a challenge by the card issuer will
fail.
Card Numbers
Card Type | Test Card
Number | |
|---|---|---|
3-D Secure 2.1.0 | 3-D Secure 2.2.0 | |
American Express Card Type = 003 | 34000 00 0000 1015 | 34000 00 0000 2096 |
Cartes Bancaires Mastercard Card Type = 036 | 520000 00 0000 3019 | 520000 00 0000 4538 |
Cartes Bancaires Visa Card Type = 036 | 400000 00 0000 3014 | 400000 00 0000 4574 |
China UnionPay Card Type = 062 | 620001 00 0010 0010 | 810001 00 0000 0647 |
Diners Club Card Type = 005 | 601100 00 0000 1010 | — |
Discover Card Type = 004 | 601100 00 0000 1010 | — |
Elo Card Type = 054 | 650529 00 0000 1010 | — |
JCB J/Secure Card Type = 007 | 333700 00 0000 0990 | 333800 00 0000 0361 |
mada Mastercard Card Type = 060 | — | 520000 00 0000 8010 The merchant’s country must be set to SA
within the merchant profile, or the
CountryCodeOverride field must be set to
SA on the Lookup Request. The response
will include the 3-D Secure operator ID, DS reference
number, brand authentication, and the ACS reference number.
|
mada Visa Card Type = 060 | — | 400000 00 0000 8040 The merchant’s country must be set to SA
within the merchant profile, or the
CountryCodeOverride field must be set to
SA on the Lookup Request. The response
will include the 3-D Secure operator ID, DS reference
number, brand authentication, and the ACS reference number.
|
Mastercard Card Type = 002 | 520000 00 0000 1013 | 520000 00 0000 2276 |
Visa Card Type = 001 | 400000 00 0000 1018 | 400000 00 0000 2925 |
IMPORTANT
The Meeza card is supported in payer
authentication and can be tested in the same manner as Mastercard using the same
test card numbers. The only difference is that the card type for Meeza is
067
. Results for the Check Enrollment Service
Status
= AUTHENTICATION_FAILED
- User failed authentication.
- Payer cannot be authenticated.
VERes enrolled =
Y
PARes status =
N
E-Commerce Indicator (ECI) Values
This table lists the expected ECI raw value, and their respective string values.
These values indicate whether the payer was authenticated by the card network. These
values should be passed under this test condition when a transaction is submitted
for payment authorization.
Network | ECI Raw Value | ECI String Value |
|---|---|---|
American Express | 07 | internet |
Cartes Bancaires Mastercard | 00 | internet |
Cartes Bancaires Visa | 07 | internet or vbv_failure |
China UnionPay | 07 | up3ds_failure |
Diners Club | 07 | internet |
Discover | 07 | internet |
Elo | 07 | internet |
ITMX | 07 | lss_failure |
JCB J/Secure | 07 | internet |
mada Mastercard | 00 | mada_failure or internet |
mada Visa | 07 | mada_failure or vbv_failure |
Mastercard | 00 | internet |
Visa | 07 | internet or vbv_failure |
Results for the Validation Authentication Service
No results are returned.
Action
Even though the merchant can still authorize a failed 3-D Secure transaction as a
non-authenticated transaction, it is not recommended to submit this transaction for
authorization. Instead, ask the customer for another form of payment.
2.3: Attempts Processing Frictionless Authentication
This test verifies how your system reacts when the cardholder is enrolled in 3-D Secure but the
card issuer does not support 3-D Secure, requiring a stand-in authentication
experience.
Card Numbers
Card Type | Test Card
Number | |
|---|---|---|
3-D Secure 2.1.0 | 3-D Secure 2.2.0 | |
American Express Card Type = 003 | 34000 00 0000 1023 | 34000 00 0000 2872 |
Cartes Bancaires Mastercard Card Type = 036 | 520000 00 0000 3027 | 520000 00 0000 4587 |
Cartes Bancaires Visa Card Type = 036 | 400000 00 0000 3022 | 400000 00 0000 4111 |
China UnionPay Card Type = 062 | 620001 00 0000 0020 | 620001 00 0000 0020 |
Diners Club Card Type = 005 | 601100 00 0000 1028 | — |
Discover Card Type = 004 | 601100 00 0000 1028 | — |
Elo Card Type = 054 | 650529 00 0000 1069 | —
|
JCB J/Secure Card Type = 007 | 333700 00 0000 7045 | 333800 00 0000 0585 |
Mastercard Card Type = 002 | 520000 00 0000 1021 | 520000 00 0000 2482 |
Visa Card Type = 001 | 400000 00 0000 1026 | 400000 00 0000 2719 |
ITMX Visa Card Type = 001 | 463208 21 0000 0070 | — |
ITMX Mastercard Card Type = 002 | 557755 01 2100 0075 | — |
IMPORTANT
The Meeza card is supported in payer
authentication and can be tested in the same manner as Mastercard using the same
test card numbers. The only difference is that the card type for Meeza is
067
. Results for the Check Enrollment Service
Status
= AUTHENTICATION_SUCCESSFUL
The cardholder is enrolled in Payer
Authentication. Authenticate the cardholder before continuing with the
transaction.
VERes enrolled =
Y
PARes status =
A
CAVV = <CAVV value>
AVV = <AVV value> (Mastercard
only)
XID = <XID value> (American Express only)
E-Commerce Indicator (ECI) Values
This table lists the expected ECI raw values and their respective string values.
These values indicate whether the payer was authenticated by the card network. These
values should be passed under this test condition when a transaction is submitted
for payment authorization.
Network | ECI Raw Value | ECI String Value |
|---|---|---|
American Express | 06 | aesk_attempted |
Cartes Bancaires Mastercard | 01 | spa |
Cartes Bancaires Visa | 06 | vbv_attempted |
China UnionPay | 06 | up3ds_attempted |
Diners Club | 06 | pb_attempted |
Discover | 06 | dipb_attempted |
Elo | 06 | cs_attempted |
ITMX | 06 | lss_attempted |
JCB J/Secure | 06 | js_attempted |
Mastercard | 01 | spa |
Visa | 06 | vbv_attempted |
Results for the Validation Authentication Service
No results are returned.
Action
If you request Check Enrollment and Authorization services separately, add the
required payer authentication values (CAVV and ECI) to your authorization request.
If you request the Check Enrollment and Authorization services together, the process
described above occurs automatically.
2.4: Unavailable Frictionless Authentication
This test verifies how your system behaves when authentication is unavailable at the
time of the transaction.
Card Numbers
Card Type | Test Card
Number | |
|---|---|---|
3-D Secure 2.1.0 | 3-D Secure 2.2.0 | |
American Express Card Type = 003 | 34000 00 0000 1031 | 34000 00 0000 2922 |
Cartes Bancaires Mastercard Card Type = 036 | 520000 00 0000 3035 | 520000 00 0000 4306 |
Cartes Bancaires Visa Card Type = 036 | 400000 00 0000 3030 | 400000 00 0000 4160 |
China UnionPay Card Type = 062 | 620001 00 0040 0030 | 810001 00 0000 0894 |
Diners Club Card Type = 005 | 601100 00 0000 1036 | — |
Discover Card Type = 004 | 601100 00 0000 1036 | — |
Elo Card Type = 054 | 650529 00 0000 1085 | — |
JCB J/Secure Card Type = 007 | 333700 00 0000 0735 | 333800 00 0000 0221 |
mada Mastercard Card Type = 060 | — | 520000 00 0000 8050 The merchant’s country must be set to SA
within the merchant profile, or the
CountryCodeOverride field must be set to
SA on the Lookup Request. The response
will include the 3-D Secure operator ID, DS reference
number, brand authentication, and the ACS reference number.
|
mada Visa Card Type = 060 | — | 40000 00 0000 8100 The merchant’s country must be set to SA
within the merchant profile, or the
CountryCodeOverride field must be set to
SA on the Lookup Request. The response
will include the 3-D Secure operator ID, DS reference
number, brand authentication, and the ACS reference number.
|
Mastercard Card Type = 002 | 520000 00 0000 1039 | 520000 00 0000 2268 |
Visa Card Type = 001 | 400000 00 0000 1034 | 400000 00 0000 2313 |
IMPORTANT
The Meeza card is supported in payer
authentication and can be tested in the same manner as Mastercard using the same
test card numbers. The only difference is that the card type for Meeza is
067
. Results for the Check Enrollment Service
Status
= AUTHENTICATION_SUCCESSFUL
The cardholder is enrolled in Payer Authentication.
Authenticate the cardholder before continuing with the transaction.
VERes enrolled =
Y
PARes status =
U
AVV = <No value provided>
CAAV = <No value provided>
E-Commerce Indicator (ECI) Values
This table lists the expected ECI raw values and their respective string values.
These values indicate whether the payer was authenticated by the card network. These
values should be passed under this test condition when a transaction is submitted
for payment authorization.
Network | ECI Raw Value | ECI String Value |
|---|---|---|
American Express | 07 | internet |
Cartes Bancaires Mastercard | 00 | internet |
Cartes Bancaires Visa | 07 | internet or vbv_failure |
China UnionPay | 07 | up3ds_failure |
Diners Club | 07 | internet |
Discover | 07 | internet |
Elo | 07 | internet |
ITMX | 07 | lss_failure |
JCB J/Secure | 07 | internet |
mada Mastercard | 00 | mada_failure or internet |
mada Visa | 07 | mada_failure or vbv_failure |
Mastercard | 00 | internet |
Visa | 07 | internet or vbv_failure |
Results for the Validation Authentication Service
No results are returned.
Action
Submit your authorization request. There is no liability shift.
2.5: Rejected Frictionless Authentication
This test verifies how your system reacts when cardholder authentication is rejected
without a challenge by the issuer.
Card Numbers
Card Type | Test Card
Number | |
|---|---|---|
3-D Secure 2.1.0 | 3-D Secure 2.2.0 | |
American Express Card Type = 003 | 34000 00 0000 1049 | 34000 00 0000 2062 |
Cartes Bancaires Mastercard Card Type = 036 | 520000 00 0000 3043 | 520000 00 0000 4405 |
Cartes Bancaires Visa Card Type = 036 | 400000 00 0000 3048 | 400000 00 0000 4517 |
China UnionPay Card Type = 062 | 620001 00 0030 0040 | 810001 00 0000 0415 |
Diners Club Card Type = 005 | 601100 00 0000 1044 | — |
Discover Card Type = 004 | 601100 00 0000 1044 | — |
Elo Card Type = 054 | 650529 00 0000 1143 | — |
JCB J/Secure Card Type = 007 | 333700 00 0000 0321 | 333800 00 0000 0734 |
mada Mastercard Card Type = 060 | — | 520000 00 0000 8080 The merchant’s country must be set to SA
within the merchant profile, or the
CountryCodeOverride field must be set to
SA on the Lookup Request. The response
will include the 3-D Secure operator ID, DS reference
number, brand authentication, and the ACS reference number.
|
mada Visa Card Type = 060 | — | 400000 00 0000 8130 The merchant’s country must be set to SA
within the merchant profile, or the
CountryCodeOverride field must be set to
SA on the Lookup Request. The response
will include the 3-D Secure operator ID, DS reference
number, brand authentication, and the ACS reference number.
|
Mastercard Card Type = 002 | 520000 00 0000 1047 | 520000 00 0000 2185 |
Visa Card Type = 001 | 400000 00 0000 1042 | 400000 00 0000 2537 |
Results for the Check Enrollment Service
Status
= AUTHENTICATION_FAILED
- User failed authentication.
- Payer cannot be authenticated.
VERes enrolled =
Y
PARes status =
R
AVV = <No value provided>
CAAV = <No value provided>
E-Commerce Indicator (ECI) Values
This table lists the expected ECI raw valuse and their respective string values.
These values indicate whether the payer was authenticated by the card network. These
values should be passed under this test condition when a transaction is submitted
for payment authorization.
Network | ECI Raw Value | ECI String Value |
|---|---|---|
American Express | 07 | internet |
Cartes Bancaires Mastercard | 00 | internet |
Cartes Bancaires Visa | 07 | internet or vbv_failure |
China UnionPay | 07 | up3ds_failure |
Diners Club | 07 | internet |
Discover | 07 | internet |
Elo | 07 | internet |
ITMX | 07 | lss_failure |
JCB J/Secure | 07 | internet |
mada Mastercard | 00 | mada_failure or internet |
mada Visa | 07 | mada_failure or vbv_failure |
Mastercard | 00 | internet |
Visa | 07 | internet or vbv_failure |
IMPORTANT
The Meeza card is supported in payer
authentication and can be tested in the same manner as Mastercard using the same
test card numbers. The only difference is that the card type value for Meeza is
067
. Results for the Validation Authentication Service
No results are returned.
Action
You are not permitted to submit this transaction for authorization. Instead, ask the
customer for another form of payment.
2.6: Authentication Not Available on Lookup
This test verifies how your system reacts when a system error prevents authentication on
Lookup.
Card Numbers
Card Type | Test Card
Number | |
|---|---|---|
3-D Secure 2.1.0 | 3-D Secure 2.2.0 | |
American Express Card Type = 003 | 34000 00 0000 1056 | 34000 00 0000 2468 |
Cartes Bancaires Mastercard Card Type = 036 | 520000 00 0000 3050 | 520000 00 0000 4090 |
Cartes Bancaires Visa Card Type = 036 | 400000 00 0000 3055 | 400000 00 0000 4285 |
China UnionPay Card Type = 062 | 620001 00 0060 0050 | 810001 00 0000 0795 |
Diners Club Card Type = 005 | 601100 00 0000 1051 | — |
Discover Card Type = 004 | 601100 00 0000 1051 | — |
Elo Card Type = 054 | 650529 00 0000 1150 | — |
JCB J/Secure Card Type = 007 | 333700 00 0000 6765 | 333800 00 0000 0940 |
mada Mastercard Card Type = 060 | — | 520000 00 0000 8090 The merchant’s country must be set to SA
within the merchant profile, or the
CountryCodeOverride field must be set to
SA on the Lookup Request. The response
will include the 3-D Secure operator ID, DS reference
number, brand authentication, and the ACS reference number.
|
mada Visa Card Type = 060 | — | 400000 00 0000 8140 The merchant’s country must be set to SA
within the merchant profile, or the
CountryCodeOverride field must be set to
SA on the Lookup Request. The response
will include the 3-D Secure operator ID, DS reference
number, brand authentication, and the ACS reference number.
|
Mastercard Card Type = 002 | 520000 00 0000 1054 | 520000 00 0000 2409 |
Visa Card Type = 001 | 400000 00 0000 1059 | 400000 00 0000 2990 |
IMPORTANT
The Meeza card is supported in payer
authentication and can be tested in the same manner as Mastercard using the same
test card numbers. The only difference is that the card type for Meeza is
067
. Results for the Check Enrollment Service
Status
= AUTHENTICATION_SUCCESSFUL
The cardholder is enrolled in Payer Authentication.
Authenticate the cardholder before continuing with the
transaction.
VERes enrolled =
U
In the response, this error code and error description is returned:
directoryServerErrorCode:
101
directoryServerErrorDescription:
Invalid Formatted Message Invalid Formatted
Message
E-Commerce Indicator (ECI) Values
This table lists the ECI raw value that would need to be passed within the
authorization and its respective string value. Note that there is no raw ECI
returned for these scenarios. These values should be passed under this test
condition when a transaction is submitted for payment authorization.
Network | ECI Raw Value | ECI String Value |
|---|---|---|
American Express | 07 | internet |
Cartes Bancaires Mastercard | 00 | internet |
Cartes Bancaires Visa | 07 | internet or vbv_failure |
China UnionPay | 07 | up3ds_failure |
Diners Club | 07 | internet |
Discover | 07 | internet |
Elo | 07 | internet |
ITMX | 07 | lss_failure |
JCB J/Secure | 07 | internet |
mada Mastercard | 00 | mada_failure or internet |
mada Visa | 07 | mada_failure or vbv_failure |
Mastercard | 00 | internet |
Visa | 07 | internet or vbv_failure |
Results for the Validation Authentication Service
No results are returned.
Action
Submit your authorization request. There is no liability shift.
2.7: Enrollment Check Error
This test verifies how your system reacts when an error occurs while attempting to authenticate
the cardholder.
Card Numbers
Card Type | Test Card
Number | |
|---|---|---|
3-D Secure 2.1.0 | 3-D Secure 2.2.0 | |
American Express Card Type = 003 | 34000 00 0000 1064 | 34000 00 0000 2732 |
Cartes Bancaires Mastercard Card Type = 036 | 520000 00 0000 3068 | 520000 00 0000 4058 |
Cartes Bancaires Visa Card Type = 036 | 400000 00 0000 3063 | 400000 00 0000 4194 |
China UnionPay Card Type = 062 | 620001 00 0050 0060 | 810001 00 0000 0662 |
Diners Club Card Type = 005 | 601100 00 0000 1069 | — |
Discover Card Type = 004 | 601100 00 0000 1069 | — |
Elo Card Type = 054 | 650529 00 0000 1176 | — |
JCB J/Secure Card Type = 007 | 333700 00 0000 0016 | 333800 00 0000 0650 |
mada Mastercard Card Type = 060 | — | 520000 00 0000 8110 The merchant’s country must be set to SA
within the merchant profile, or the
CountryCodeOverride field must be set to
SA on the Lookup Request. The response
will include the 3-D Secure operator ID, DS reference
number, brand authentication, and the ACS reference number.
|
mada Visa Card Type = 060 | — | 400000 00 0000 8170 The merchant’s country must be set to SA
within the merchant profile, or the
CountryCodeOverride field must be set to
SA on the Lookup Request. The response
will include the 3-D Secure operator ID, DS reference
number, brand authentication, and the ACS reference number.
|
Mastercard Card Type = 002 | 520000 00 0000 1062 | 520000 00 0000 2037 |
Visa Card Type = 001 | 400000 00 0000 1067 | 400000 00 0000 2446 |
IMPORTANT
The Meeza card is supported in payer
authentication and can be tested in the same manner as Mastercard using the same
test card numbers. The only difference is that the card type for Meeza is
067
. Results for the Check Enrollment Service
Status
= AUTHENTICATION_SUCCESSFUL
The cardholder is enrolled in Payer Authentication.
Authenticate the cardholder before continuing with the transaction.
VERes enrolled =
U
In the response, this error code and error description is returned:
directoryServerErrorCode:
101
directoryServerErrorDescription:
Error Processing Message Request
1001
E-Commerce Indicator (ECI) Values
This table lists the ECI raw value that would need to be passed within the
authorization and its respective string value. Note that there is no raw ECI
returned for these scenarios. These values should be passed under this test
condition when a transaction is submitted for payment authorization.
Network | ECI Raw Value | ECI String Value |
|---|---|---|
American Express | 07 | internet |
Cartes Bancaires Mastercard | 00 | internet |
Cartes Bancaires Visa | 07 | internet or vbv_failure |
China UnionPay | 07 | up3ds_failure |
Diners Club | 07 | internet |
Discover | 07 | internet |
Elo | 07 | internet |
ITMX | 07 | lss_failure |
JCB J/Secure | 07 | internet |
mada Mastercard | 00 | mada_failure or internet |
mada Visa | 07 | mada_failure or vbv_failure |
Mastercard | 00 | internet |
Visa | 07 | internet or vbv_failure |
Results for the Validation Authentication Service
No results are returned.
While Mastercard would normally return the directory server transaction ID, in this
test case, it is not returned.
Action
Proceed with the authorization request, and contact your support representative to
resolve the issue. There is no liability shift. If you requested payer
authentication and authorization together, the authorization is processed
automatically.
2.8: Time Out
This test verifies how your system reacts when a timeout occurs while checking
enrollment, causing an error on the transaction.
Card Numbers
Card Type | Test Card
Number | |
|---|---|---|
3-D Secure 2.1.0 | 3-D Secure 2.2.0 | |
American Express Card Type = 003 | 34000 00 0000 1072 | 34000 00 0000 2047 |
Cartes Bancaires Mastercard Card Type = 036 | 520000 00 0000 3076 | 520000 00 0000 4694 |
Cartes Bancaires Visa Card Type = 036 | 400000 00 0000 3071 | 400000 00 0000 4277 |
China UnionPay Card Type = 062 | 620001 00 0090 0070 | 810001 00 0000 0928 |
Diners Club Card Type = 005 | 601100 00 0000 1077 | — |
Discover Card Type = 004 | 601100 00 0000 1077 | — |
Elo Card Type = 054 | 650529 00 0000 1192 | — |
JCB J/Secure Card Type = 007 | 333700 00 0000 0081 | 333800 00 0000 0577 |
mada Mastercard Card Type = 060 | — | 520000 00 0000 8130 The merchant’s country must be set to SA
within the merchant profile, or the
CountryCodeOverride field must be set to
SA on the Lookup Request. The response
will include the 3-D Secure operator ID, DS reference
number, brand authentication, and the ACS reference number.
|
mada Visa Card Type = 060 | — | 400000 00 0000 8200 The merchant’s country must be set to SA
within the merchant profile, or the
CountryCodeOverride field must be set to
SA on the Lookup Request. The response
will include the 3-D Secure operator ID, DS reference
number, brand authentication, and the ACS reference number.
|
Mastercard Card Type = 002 | 520000 00 0000 1070 | 520000 00 0000 2326 |
Visa Card Type = 001 | 400000 00 0000 1075 | 400000 00 0000 2354 |
IMPORTANT
The Meeza card is supported in payer
authentication and can be tested in the same manner as Mastercard using the same
test card numbers. The only difference is that the card type for Meeza is
067
. Results for the Check Enrollment Service
Status
= AUTHENTICATION_SUCCESSFUL
The cardholder is enrolled in Payer
Authentication. Authenticate the cardholder before continuing with the
transaction.
VERes enrolled =
U
In the
response, this error code and error description is
returned:
directoryServerErrorCode:
402
directoryServerErrorDescription:
Transaction
Timed Out
E-Commerce Indicator (ECI) Values
This table lists the ECI raw value that would need to be passed within the
authorization and its respective string value. Note that there is no raw ECI
returned for these scenarios. These values should be passed under this test
condition when a transaction is submitted for payment authorization.
Network | ECI Raw Value | ECI String Value |
|---|---|---|
American Express | 07 | internet |
Cartes Bancaires Mastercard | 00 | internet |
Cartes Bancaires Visa | 07 | internet or vbv_failure |
China UnionPay | 07 | up3ds_failure |
Diners Club | 07 | internet |
Discover | 07 | internet |
Elo | 07 | internet |
ITMX | 07 | lss_failure |
JCB J/Secure | 07 | internet |
mada Mastercard | 00 | mada_failure or internet |
mada Visa | 07 | mada_failure or vbv_failure |
Mastercard | 00 | internet |
Visa | 07 | internet or vbv_failure |
Results for the Validation Authentication Service
No results are returned.
Action
After 10-12 seconds, proceed with the authorization request. There is no liability
shift.
2.9: Bypassed Authentication
This test verifies how your system reacts when the challenge requested by the issuer
is bypassed for the transaction.
Card Numbers
Card Type | Test Card
Number | |
|---|---|---|
3-D Secure 2.1.0 | 3-D Secure 2.2.0 | |
American Express Card Type = 003 | 34000 00 0000 1080 | 34000 00 0000 2948 |
Cartes Bancaires Mastercard Card Type = 036 | 520000 00 0000 3084 | 520000 00 0000 4991 |
Cartes Bancaires Visa Card Type = 036 | 400000 00 0000 3089 | 400000 00 0000 4400 |
China UnionPay Card Type = 062 | 620001 00 0080 0080 | 810001 00 0000 0688 |
Diners Club Card Type = 005 | 601100 00 0000 1085 | — |
Discover Card Type = 004 | 601100 00 0000 1085 | — |
Elo Card Type = 054 | 650529 00 0000 1226 | — |
JCB J/Secure Card Type = 007 | 333700 00 0000 0537 | 333800 00 0000 0122 |
mada Mastercard Card Type = 060 | — | 520000 00 0000 8150 The merchant’s country must be set to SA
within the merchant profile, or the
CountryCodeOverride field must be set to
SA on the Lookup Request. The response
will include the 3-D Secure operator ID, DS reference
number, brand authentication, and the ACS reference number.
|
mada Visa Card Type = 060 | — | 400000 00 0000 8260 The merchant’s country must be set to SA
within the merchant profile, or the
CountryCodeOverride field must be set to
SA on the Lookup Request. The response
will include the 3-D Secure operator ID, DS reference
number, brand authentication, and the ACS reference number.
|
Mastercard Card Type = 002 | 520000 00 0000 1088 | 520000 00 0000 2508 |
Visa Card Type = 001 | 400000 00 0000 1083 | 400000 00 0000 2560 |
IMPORTANT
The Meeza card is supported in payer
authentication and can be tested in the same manner as Mastercard using the same
test card numbers. The only difference is that the card type for Meeza is
067
. Results for the Check Enrollment Service
Status
= AUTHENTICATION_SUCCESSFUL
The cardholder is enrolled in Payer Authentication.
Authenticate the cardholder before continuing with the transaction.
VERes enrolled =
B
XID = <XID value>
E-Commerce Indicator (ECI) Values
This table lists the ECI raw value that would need to be passed within the
authorization and its respective string value. Note that there is no raw ECI
returned for these scenarios. These values should be passed under this test
condition when a transaction is submitted for payment authorization.
Network | ECI Raw Value | ECI String Value |
|---|---|---|
American Express | 07 | internet |
Cartes Bancaires Mastercard | 00 | internet |
Cartes Bancaires Visa | 07 | internet |
China UnionPay | 07 | up3ds_failure |
Diners Club | 07 | internet |
Discover | 07 | internet |
Elo | 07 | internet |
ITMX | 07 | lss_failure |
JCB J/Secure | 07 | internet |
mada Mastercard | 00 | internet or mada_failure |
mada Visa | 07 | internet or mada_failure |
Mastercard | 00 | internet |
Visa | 07 | internet |
Results for the Validation Authentication Service
No results are returned.
Action
Submit your authorization request. There is no liability shift.
2.10a: Successful Step-Up Authentication
This test verifies how your system reacts to a successful step-up (or challenge)
authentication transaction.
Card Numbers
Card Type | Test Card
Number | |
|---|---|---|
3-D Secure 2.1.0 | 3-D Secure 2.2.0 | |
American Express Card Type = 003 | 34000 00 0000 1098 | 34000 00 0000 2534 |
Cartes Bancaires Mastercard Card Type = 036 | 520000 00 0000 3092 | 520000 00 0000 4074 |
Cartes Bancaires Visa Card Type = 036 | 400000 00 0000 3139 | 400000 00 0000 4855 |
China UnionPay Card Type = 062 | 620001 99 9980 0019 | 810001 00 0000 0803 |
Diners Club Card Type = 005 | 601100 00 0000 1093 | — |
Discover Card Type = 004 | 601100 00 0000 1093 | — |
Elo Card Type = 054 | 650529 00 0000 1234 | — |
JCB J/Secure Card Type = 007 | 333700 00 0020 0004 | 333800 00 0000 0569 |
mada Mastercard Card Type = 060 | — | 520000 00 0000 8160 The merchant’s country must be set to SA
within the merchant profile, or the
CountryCodeOverride field must be set to
SA on the Lookup Request. The response
will include the 3-D Secure operator ID, DS reference
number, brand authentication, and the ACS reference number.
|
mada Visa Card Type = 060 | — | 400000 00 0000 8270 The merchant’s country must be set to SA
within the merchant profile, or the
CountryCodeOverride field must be set to
SA on the Lookup Request. The response
will include the 3-D Secure operator ID, DS reference
number, brand authentication, and the ACS reference number.
|
Mastercard Card Type = 002 | 520000 00 0000 1096 | 520000 00 0000 2151 |
Visa Card Type = 001 | 400000 00 0000 1091 | 400000 00 0000 2503 |
ITMX Visa Card Type = 001 | 557755 01 2100 0026 | — |
ITMX Mastercard Card Type = 002 | 463208 21 0000 0021 | — |
IMPORTANT
The Meeza card is supported in payer
authentication and can be tested in the same manner as Mastercard using the same
test card numbers. The only difference is that the card type for Meeza is
067
. Results for the Check Enrollment Service
Status
= PENDING_AUTHENTICATION
The cardholder is enrolled in payer authentication. Authenticate before
proceeding with authorization.
VERes enrolled =
Y
PARes status =
C
XID = <XID value>
Results for the Validation Authentication Service
Status
= AUTHENTICATION_SUCCESSFUL
Authentication is validated.
PARes status =
Y
XID = <XID
value>
CAVV = <CAVV
value>
E-Commerce Indicator (ECI) Values
This table lists the expected ECI raw values and their respective string values from
this transaction. These values indicate whether the payer was authenticated by the
card network. These values should be passed under this test condition when a
transaction is submitted for payment authorization.
Network | ECI Raw Value | ECI String Value |
|---|---|---|
American Express | 05 | aesk |
Cartes Bancaires Mastercard | 02 | spa |
Cartes Bancaires Visa | 05 | vbv |
China UnionPay | 05 | up3ds |
Diners Club | 05 | pb |
Discover | 05 | dipb |
Elo | 05 | cs |
ITMX | 05 | lss |
JCB J/Secure | 05 | js |
mada Mastercard | 02 | spa or mada |
mada Visa | 05 | vbv or mada |
Mastercard | 02 | spa |
Visa | 05 | vbv |
Action
If you request Validate Authentication and authorization services separately, add the
required payer authentication values to your authorization request. If you request
the Validate Authentication and authorization services together, the process
described above occurs automatically. The merchant should include the CAVV and ECI
values in the authorization message.
2.11a: Unsuccessful Step-Up Authentication
This test verifies that the step-up (challenge) authentication transaction fails
whenever the cardholder challenge fails.
Card Numbers
Card Type | Test Card
Number | |
|---|---|---|
3-D Secure 2.1.0 | 3-D Secure 2.2.0 | |
American Express Card Type = 003 | 34000 00 0000 1106 | 34000 00 0000 2237 |
Cartes Bancaires Mastercard Card Type = 036 | 520000 00 0000 3100 | 520000 00 0000 4041 |
Cartes Bancaires Visa Card Type = 036 | 400000 00 0000 3097 | 400000 00 0000 4293 |
China UnionPay Card Type = 062 | 620001 99 9970 0029 | — |
Diners Club Card Type = 005 | 601100 00 0000 1101 | — |
Discover Card Type = 004 | 601100 00 0000 1101 | — |
Elo Card Type = 054 | 650529 00 0000 1275 | — |
JCB J/Secure Card Type = 007 | 333700 00 0020 0087 | 333800 00 0000 0874 |
mada Mastercard Card Type = 060 | — | 520000 00 0000 8170 The merchant’s country must be set to SA
within the merchant profile, or the
CountryCodeOverride field must be set to
SA on the Lookup Request. The response
will include the 3-D Secure operator ID, DS reference
number, brand authentication, and the ACS reference number.
|
mada Visa Card Type = 060 | — | 400000 00 0000 8280 The merchant’s country must be set to SA
within the merchant profile, or the
CountryCodeOverride field must be set to
SA on the Lookup Request. The response
will include the 3-D Secure operator ID, DS reference
number, brand authentication, and the ACS reference number.
|
Mastercard Card Type = 002 | 520000 00 0000 1104 | 520000 00 0000 2490 |
Visa Card Type = 001 | 400000 00 0000 1109 | 400000 00 0000 2370 |
IMPORTANT
The Meeza card is supported in payer
authentication and can be tested in the same manner as Mastercard using the same
test card numbers. The only difference is that the card type for Meeza is
067
. Results for the Check Enrollment Service
=
PENDING_AUTHENTICATION
The cardholder is enrolled in payer
authentication. Please authenticate before proceeding with
authorization.VERes enrolled =
Y
PARes status =
C
PAReq = <PAReq value>
ACS URL =
<URL value>
Results for the Validation Authentication Service
=
AUTHENTICATION_FAILED
- User failed authentication.
- Payer cannot be authenticated.
PARes status =
N
XID = <XID value> (American Express only)
E-Commerce Indicator (ECI) Values
This table lists the expected ECI raw valuea and their respective string values from
this transaction. These values indicate whether the payer was authenticated by the
card network. These values should be passed under this test condition when a
transaction is submitted for payment authorization.
Network | ECI Raw Value | ECI String Value |
|---|---|---|
American Express | 07 | internet |
Cartes Bancaires Mastercard | 00 | internet |
Cartes Bancaires Visa | 07 | internet or vbv_failure |
China UnionPay | 07 | up3ds_failure |
Diners Club | 07 | internet |
Discover | 07 | internet |
Elo | 07 | internet |
ITMX | 07 | lss_failure |
JCB J/Secure | 07 | internet |
mada Mastercard | 00 | mada_failure or internet |
mada Visa | 07 | mada_failure or vbv_failure |
mastercard | 00 | internet |
Visa | 07 | internet or vbv_failure |
Action
You are not permitted to submit this transaction for authorization. Instead, ask the
customer for another form of payment.
2.12a: Unavailable Step-Up Authentication
This test verifies that the correct response is returned when step-up authentication
is unavailable.
Card Numbers
Card Type | Test Card
Number | |
|---|---|---|
3-D Secure 2.1.0 | 3-D Secure 2.2.0 | |
American Express Card Type = 003 | 34000 00 0000 1114 | 34000 00 0000 2484 |
Cartes Bancaires Mastercard Card Type = 036 | 520000 00 0000 3118 | 520000 00 0000 4124 |
Cartes Bancaires Visa Card Type = 036 | 400000 00 0000 3105 | 400000 00 0000 4640 |
China UnionPay Card Type = 062 | 620001 99 9960 0039 | 810001 00 0000 0159 |
Diners Club Card Type = 005 | 601100 00 0000 1119 | — |
Discover Card Type = 004 | 601100 00 0000 1119 | — |
Elo Card Type = 054 | 650529 00 0000 1283 | — |
JCB J/Secure Card Type = 007 | 333700 00 0020 0079 | 333800 00 0000 0981 |
mada Mastercard Card Type = 060 | — | 520000 00 0000 8190 The merchant’s country must be set to SA
within the merchant profile, or the
CountryCodeOverride field must be set to
SA on the Lookup Request. The response
will include the 3-D Secure operator ID, DS reference
number, brand authentication, and the ACS reference number.
|
mada Visa Card Type = 060 | — | 400000 00 0000 8310 The merchant’s country must be set to SA
within the merchant profile, or the
CountryCodeOverride field must be set to
SA on the Lookup Request. The response
will include the 3-D Secure operator ID, DS reference
number, brand authentication, and the ACS reference number.
|
Mastercard Card Type = 002 | 520000 00 0000 1112 | 520000 00 0000 2664 |
Visa Card Type = 001 | 400000 00 0000 1117 | 400000 00 0000 2420 |
IMPORTANT
The Meeza card is supported in payer
authentication and can be tested in the same manner as Mastercard using the same
test card numbers. The only difference is that the card type for Meeza is
067
. Results for the Check Enrollment Service
Status
= PENDING_AUTHENTICATION
The cardholder is enrolled in payer authentication. Authenticate before
proceeding with authorization.
VERes enrolled =
Y
PARes Status =
C
Results for the Validation Authentication Service
Status
=AUTHENTICATION_SUCCESSFUL
Authentication is validated.
PARes status =
U
XID = <XID value>
E-Commerce Indicator (ECI) Values
This table lists the expected ECI raw values and their respective string values from
this transaction. These values indicate whether the payer was authenticated by the
card network. These values should be passed under this test condition when a
transaction is submitted for payment authorization.
Network | ECI Raw Value | ECI String Value |
|---|---|---|
American Express | 07 | internet |
Cartes Bancaires Mastercard | 00 | internet |
Cartes Bancaires Visa | 07 | internet or vbv_failure |
China UnionPay | 07 | up3ds_failure |
Diners Club | 07 | internet |
Discover | 07 | internet |
Elo | 07 | internet |
ITMX | 07 | lss_failure |
JCB J/Secure | 07 | internet |
mada Mastercard | 00 | mada_failure or internet |
mada Visa | 07 | mada_failure or vbv_failure |
Mastercard | 00 | internet |
Visa | 07 | internet or vbv_failure |
Action
The merchant can retry authentication or process without the liability shift.
2.14: Require Method URL
This test ensures that the merchant is allowing sufficient time (10 seconds) for the
issuer to complete device data collection.
Card Numbers
The Method URL test runs before the authentication request to check how well your system
implements device data collection. The enrollment check of the card account should
not start until after the device data collection response is received. This test
helps to ensure that there is enough time to collect the device data and to transmit
it. This test attempts to collect the nine-digit BIN of the card number and checks
that the delay between the DDC request and the response is at least seven seconds
long. Test failure occurs when fewer than nine digits of the BIN are collected or
the delay between the DDC request and response is too short in duration.
Do not run this test when your system does not collect device data. When device data
is not collected, an older version of the EMV 3-D Secure protocol is automatically
used, and the transaction is automatically assessed as a higher risk.
Card Type | Test Card Number |
|---|---|
Visa Card Type = 001 | 400010 00 0000 0000 |
Results for the Check Enrollment Service
VERes enrolled =
Y
PARes status =
Y
CAVV = <CAVV value>
ECI value =
07
ECI/Collection Indicator Values
The following table lists the expected ECI or Collection Indicator values for each network.
Network | E-Commerce Indicator (ECI) |
|---|---|
Visa | 07 |
Action
If your device data collection method implements correctly and EMV 3-D Secure Method
processing occurs, the test transaction produces a Frictionless Success result. A
failure is indicated when PARes status =
C
. With the failure, a
warning message opens to explain the cause of the test failure.