Test Cases for 3-D Secure 2.x

Use the card number specified in the test with the card expiration date set to the month of January and the current year plus three. For example, for 2023, use 2026. You also need the minimum required fields for an order.
Be sure to remove spaces in card numbers when testing.
While the usage of transaction ID (XID) values have declined in importance, they are still included in 3-D Secure 2.x test cases. Only Mastercard transactions do not return XID.
While the 3-D Secure version and directory server transaction ID fields are returned for the Check Enrollment and Validate Authentication services, this data is not included in the 3-D Secure 2.x test cases.
IMPORTANT
Mastercard requires that the 3-D Secure version and directory server transaction ID be included along with all pertinent data in your authorization request.

Test Case 2.1: Successful Frictionless Authentication

Successful frictionless authentication of the cardholder by the card issuer.

Card Numbers

Card Type
Test Card Number
3-D Secure 2.1.0
3-D Secure 2.2.0
American Express
Card Type = 003
34000
00 0000 1007
34000
00 0000 2708
Cartes Bancaires Mastercard
Card Type = 036
520000
00 0000 3001
520000
00 0000 4801
Cartes Bancaires Visa
Card Type = 036
400000
00 0000 3006
400000
00 0000 4970
China UnionPay
Card Type = 062
620001
00 0020 0000
Diners Club
Card Type = 005
601100
00 0000 1002
Discover
Card Type = 004
601100
00 0000 1002
Elo
Card Type = 054
650529
00 0000 1002
JCB J/Secure
Card Type = 00
333700
00 0000 0008
333800
00 0000 0296
Mada Mastercard
Card Type = 052
520000
00 0000 8000
The merchant’s country must be set to
SA
within the merchant profile, or the
CountryCodeOverride
field must be set to
SA
on the Lookup Request. The response will include the 3-D Secure operator ID, DS reference number, and the ACS reference number.
Mada Visa
Card Type = 052
400000
00 0000 8020
The merchant’s country must be set to
SA
within the merchant profile, or the
CountryCodeOverride
field must be set to
SA
on the Lookup Request. The response will include the 3-D Secure operator ID, DS reference number, and the ACS reference number.
Mastercard
Card Type = 002
520000
00 0000 1005
520000
00 0000 2235
Visa
Card Type = 001
400000
00 0000 1000
400000
00 0000 2701
IMPORTANT
The Meeza card is supported in payer authentication and can be tested in the same manner as Mastercard using the same test card numbers. The only difference is that the card type for Meeza is
067
.

Results for the Check Enrollment Service

Status
=
AUTHENTICATION_SUCCESSFUL
The cardholder is enrolled in Payer Authentication. Authenticate the cardholder before continuing with the transaction.
VERes enrolled =
Y
PARes status =
Y
CAVV =
AVV = (Mastercard only)
XID = (American Express only)

E-Commerce Indicator (ECI) Values

This table lists the expected ECI raw value and its respective string value. These values indicate whether the payer was authenticated by the card network. These values should be passed under this test condition when a transaction is submitted for payment authorization.
Network
ECI Raw Value
ECI String Value
American Express
05
aesk
Cartes Bancaires Mastercard
02
spa
Cartes Bancaires Visa
05
vbv
China UnionPay
05
up3ds
Diners Club
05
pb
Discover
05
dipb
Elo
05
cs
ITMX
05
lss
JCB J/Secure
05
js
Mastercard
02
spa
Visa
05
vbv

Results for the Validation Authentication Service

Validation does not apply to this test as no validation is needed when no challenge is issued during the transaction.

Action

If you request Check Enrollment and authorization services separately, add the required payer authentication values to your authorization request. If you request the Check Enrollment and authorization services together, the process described above occurs automatically.

Test Case 2.2: Unsuccessful Frictionless Authentication

Cardholder authentication without a challenge by the card issuer failed.

Card Numbers

Card Type
Test Card Number
3-D Secure 2.1.0
3-D Secure 2.2.0
American Express
Card Type = 003
34000
00 0000 1015
34000
00 0000 2096
Cartes Bancaires Mastercard
Card Type = 036
520000
00 0000 3019
520000
00 0000 4538
Cartes Bancaires Visa
Card Type = 036
400000
00 0000 3014
400000
00 0000 4574
China UnionPay
Card Type = 062
620001
00 0010 0010
Diners Club
Card Type = 005
601100
00 0000 1010
Discover
Card Type = 004
601100
00 0000 1010
Elo
Card Type = 054
650529
00 0000 1010
JCB J/Secure
Card Type = 007
333700
00 0000 0990
333800
00 0000 0361
Mada Mastercard
Card Type = 052
520000
00 0000 8010
The merchant’s country must be set to
SA
within the merchant profile, or the
CountryCodeOverride
field must be set to
SA
on the Lookup Request. The response will include the 3-D Secure operator ID, DS reference number, and the ACS reference number.
Mada Visa
Card Type = 052
400000
00 0000 8040
The merchant’s country must be set to
SA
within the merchant profile, or the
CountryCodeOverride
field must be set to
SA
on the Lookup Request. The response will include the 3-D Secure operator ID, DS reference number, and the ACS reference number.
Mastercard
Card Type = 002
520000
00 0000 1013
520000
00 0000 2276
Visa
Card Type = 001
400000
00 0000 1018
400000
00 0000 2925
IMPORTANT
The Meeza card is supported in payer authentication and can be tested in the same manner as Mastercard using the same test card numbers. The only difference is that the card type for Meeza is
067
.

Results for the Check Enrollment Service

Status
=
AUTHENTICATION_FAILED
  • User failed authentication.
  • Payer cannot be authenticated.
VERes enrolled =
Y
PARes status =
N

E-Commerce Indicator (ECI) Values

This table lists the expected ECI raw value and its respective string value. These values indicate whether the payer was authenticated by the card network. These values should be passed under this test condition when a transaction is submitted for payment authorization.
Network
ECI Raw Value
ECI String Value
American Express
07
internet
Cartes Bancaires Mastercard
00
internet
Cartes Bancaires Visa
07
internet or vbv_failure
China UnionPay
07
up3ds_failure
Diners Club
07
internet
Discover
07
internet
Elo
07
internet
ITMX
07
lss_failure
JCB J/Secure
07
internet
Mastercard
00
internet
Visa
07
internet or vbv_failure

Results for the Validation Authentication Service

No results are returned.

Action

While the merchant can still authorize a failed 3-D Secure transaction as a non-authenticated transaction, it is not recommended to submit this transaction for authorization. Instead ask the customer for another form of payment.

Test Case 2.3: Attempts Processing Frictionless Authentication

Even though the cardholder is enrolled in 3-D Secure, the card issuer does not support 3-D Secure, requiring a stand-in authentication experience.

Card Numbers

Card Type
Test Card Number
3-D Secure 2.1.0
3-D Secure 2.2.0
American Express
Card Type = 003
34000
00 0000 1023
34000
00 0000 2872
Cartes Bancaires Mastercard
Card Type = 036
520000
00 0000 3027
520000
00 0000 4587
Cartes Bancaires Visa
Card Type = 036
400000
00 0000 3022
400000
00 0000 4111
China UnionPay
Card Type = 062
620001
00 0000 0020
Diners Club
Card Type = 005
601100
00 0000 1028
Discover
Card Type = 004
601100
00 0000 1028
Elo
Card Type = 054
650529
00 0000 1069
JCB J/Secure
Card Type = 007
333700
00 0000 7045
333800
00 0000 0585
Mastercard
Card Type = 002
520000
00 0000 1021
520000
00 0000 2482
Visa
Card Type = 001
400000
00 0000 1026
400000
00 0000 2719
IMPORTANT
The Meeza card is supported in payer authentication and can be tested in the same manner as Mastercard using the same test card numbers. The only difference is that the card type for Meeza is
067
.

Results for the Check Enrollment Service

Status
=
AUTHENTICATION_SUCCESSFUL
The cardholder is enrolled in Payer Authentication. Authenticate the cardholder before continuing with the transaction.
VERes enrolled =
Y
PARes status =
A
CAVV =
AVV = (Mastercard only)
XID = (American Express only)

E-Commerce Indicator (ECI) Values

This table lists the expected ECI raw values and their respective string values. These values indicate whether the payer was authenticated by the card network. These values should be passed under this test condition when a transaction is submitted for payment authorization.
Network
ECI Raw Value
ECI String Value
American Express
06
aesk_attempted
Cartes Bancaires Mastercard
01
spa
Cartes Bancaires Visa
06
vbv_attempted
China UnionPay
06
up3ds_attempted
Diners Club
06
pb_attempted
Discover
06
dipb_attempted
Elo
06
cs_attempted
ITMX
06
lss_attempted
JCB J/Secure
06
js_attempted
Mastercard
01
spa
Visa
06
vbv_attempted

Results for the Validation Authentication Service

No results are returned.

Action

If you request Check Enrollment and Authorization services separately, add the required payer authentication values (CAVV and ECI) to your java.io.PrintWriter@5758a08 authorization request. If you request the Check Enrollment and Authorization services together, the process described above occurs automatically.

Test Case 2.4: Unavailable Frictionless Authentication

Authentication is unavailable at the time of transaction.

Card Numbers

Card Type
Test Card Number
3-D Secure 2.1.0
3-D Secure 2.2.0
American Express
Card Type = 003
34000
00 0000 1031
34000
00 0000 2922
Cartes Bancaires Mastercard
Card Type = 036
520000
00 0000 3035
520000
00 0000 4306
Cartes Bancaires Visa
Card Type = 036
400000
00 0000 3030
400000
00 0000 4160
China UnionPay
Card Type = 062
620001
00 0040 0030
Diners Club
Card Type = 005
601100
00 0000 1036
Discover
Card Type = 004
601100
00 0000 1036
Elo
Card Type = 054
650529
00 0000 1085
JCB J/Secure
Card Type = 007
333700
00 0000 0735
333800
00 0000 0221
Mada Mastercard
Card Type = 052
520000
00 0000 8059
The merchant’s country must be set to
SA
within the merchant profile, or the
CountryCodeOverride
field must be set to
SA
on the Lookup Request. The response will include the 3-D Secure operator ID, DS reference number, and the ACS reference number.
Mada Visa
Card Type = 052
40000
00 0000 8100
The merchant’s country must be set to
SA
within the merchant profile, or the
CountryCodeOverride
field must be set to
SA
on the Lookup Request. The response will include the 3-D Secure operator ID, DS reference number, and the ACS reference number.
Mastercard
Card Type = 002
520000
00 0000 1039
520000
00 0000 2268
Visa
Card Type = 001
400000
00 0000 1034
400000
00 0000 2313
IMPORTANT
The Meeza card is supported in payer authentication and can be tested in the same manner as Mastercard using the same test card numbers. The only difference is that the card type for Meeza is
067
.

Results for the Check Enrollment Service

Status
=
AUTHENTICATION_SUCCESSFUL
The cardholder is enrolled in Payer Authentication. Authenticate the cardholder before continuing with the transaction.
VERes enrolled =
Y
PARes status =
U
AVV = (Mastercard only)
CAAV =

E-Commerce Indicator (ECI) Values

This table lists the expected ECI raw value and its respective string value. These values indicate whether the payer was authenticated by the card network. These values should be passed under this test condition when a transaction is submitted for payment authorization.
Network
ECI Raw Value
ECI String Value
American Express
07
internet
Cartes Bancaires Mastercard
00
internet
Cartes Bancaires Visa
07
internet or vbv_failure
China UnionPay
07
up3ds_failure
Diners Club
07
internet
Discover
07
internet
Elo
07
internet
ITMX
07
lss_failure
JCB J/Secure
07
internet
Mastercard
00
internet
Visa
07
internet or vbv_failure

Results for the Validation Authentication Service

No results are returned.

Action

Submit your authorization request. No liability shift.

Test Case 2.5: Rejected Frictionless Authentication

Cardholder authentication was rejected without a challenge by the issuer.

Card Numbers

Card Type
Test Card Number
3-D Secure 2.1.0
3-D Secure 2.2.0
American Express
Card Type = 003
34000
00 0000 1049
34000
00 0000 2062
Cartes Bancaires Mastercard
Card Type = 036
520000
00 0000 3043
520000
00 0000 4405
Cartes Bancaires Visa
Card Type = 036
400000
00 0000 3048
400000
00 0000 4517
China UnionPay
Card Type = 062
620001
00 0030 0040
Diners Club
Card Type = 005
601100
00 0000 1044
Discover
Card Type = 004
601100
00 0000 1044
Elo
Card Type = 054
650529
00 0000 1143
JCB J/Secure
Card Type = 007
333700
00 0000 0321
333800
00 0000 0734
Mada Mastercard
Card Type = 052
520000
00 0000 0734
The merchant’s country must be set to
SA
within the merchant profile, or the
CountryCodeOverride
field must be set to
SA
on the Lookup Request. The response will include the 3-D Secure operator ID, DS reference number, and the ACS reference number.
Mada Visa
Card Type = 052
400000
00 0000 8130
The merchant’s country must be set to
SA
within the merchant profile, or the
CountryCodeOverride
field must be set to
SA
on the Lookup Request. The response will include the 3-D Secure operator ID, DS reference number, and the ACS reference number.
Mastercard
Card Type = 002
520000
00 0000 1047
520000
00 0000 8080
Visa
Card Type = 001
400000
00 0000 1042
400000
00 0000 2537

Results for the Check Enrollment Service

Status
=
AUTHENTICATION_FAILED
  • User failed authentication.
  • Payer cannot be authenticated.
VERes enrolled =
Y
PARes status =
R
AVV = (American Express only)
CAAV =

E-Commerce Indicator (ECI) Values

This table lists the expected ECI raw value and its respective string value. These values indicate whether the payer was authenticated by the card network. These values should be passed under this test condition when a transaction is submitted for payment authorization.
Network
ECI Raw Value
ECI String Value
American Express
07
internet
Cartes Bancaires Mastercard
00
internet
Cartes Bancaires Visa
07
internet or vbv_failure
China UnionPay
07
up3ds_failure
Diners Club
07
internet
Discover
07
internet
Elo
07
internet
ITMX
07
lss_failure
JCB J/Secure
07
internet
Mastercard
00
internet
Visa
07
internet or vbv_failure
IMPORTANT
The Meeza card is supported in payer authentication and can be tested in the same manner as Mastercard using the same test card numbers. The only difference is that the card type for Meeza is
067
.

Results for the Validation Authentication Service

No results are returned.

Action

You are not permitted to submit this transaction for authorization. Instead ask the customer for another form of payment.

Test Case 2.6: Authentication not Available on Lookup

A system error prevented authentication on Lookup.

Card Numbers

Card Type
Test Card Number
3-D Secure 2.1.0
3-D Secure 2.2.0
American Express
Card Type = 003
34000
00 0000 1056
34000
00 0000 2468
Cartes Bancaires Mastercard
Card Type = 036
520000
00 0000 3050
520000
00 0000 4090
Cartes Bancaires Visa
Card Type = 036
400000
00 0000 3055
400000
00 0000 4285
China UnionPay
Card Type = 062
620001
00 0060 0050
Diners Club
Card Type = 005
601100
00 0000 1051
Discover
Card Type = 004
601100
00 0000 1051
Elo
Card Type = 054
650529
00 0000 1150
JCB J/Secure
Card Type = 007
333700
00 0000 6765
333800
00 0000 0940
Mada Mastercard
Card Type = 052
520000
00 0000 8090
The merchant’s country must be set to
SA
within the merchant profile, or the
CountryCodeOverride
field must be set to
SA
on the Lookup Request. The response will include the 3-D Secure operator ID, DS reference number, and the ACS reference number.
Mada Visa
Card Type = 052
400000
00 0000 8140
The merchant’s country must be set to
SA
within the merchant profile, or the
CountryCodeOverride
field must be set to
SA
on the Lookup Request. The response will include the 3-D Secure operator ID, DS reference number, and the ACS reference number.
Mastercard
Card Type = 002
520000
00 0000 1054
520000
00 0000 2409
Visa
Card Type = 001
400000
00 0000 1059
400000
00 0000 2990
IMPORTANT
The Meeza card is supported in payer authentication and can be tested in the same manner as Mastercard using the same test card numbers. The only difference is that the card type for Meeza is
067
.

Results for the Check Enrollment Service

Status
=
AUTHENTICATION_SUCCESSFUL
The cardholder is enrolled in Payer Authentication. Authenticate the cardholder before continuing with the transaction.
VERes enrolled =
U

E-Commerce Indicator (ECI) Values

This table lists the expected ECI raw value and its respective string value. These values indicate whether the payer was authenticated by the card network. These values should be passed under this test condition when a transaction is submitted for payment authorization.
Network
ECI Raw Value
ECI String Value
American Express
07
internet
Cartes Bancaires Mastercard
00
internet
Cartes Bancaires Visa
07
internet or vbv_failure
China UnionPay
07
up3ds_failure
Diners Club
07
internet
Discover
07
internet
Elo
07
internet
ITMX
07
lss_failure
JCB J/Secure
07
internet
Mastercard
00
internet
Visa
07
internet or vbv_failure

Results for the Validation Authentication Service

No results are returned.

Action

Submit your authorization request. No liability shift.

Test Case 2.7: Enrollment Check Error

An error occurred while attempting to authenticate the cardholder.

Card Numbers

Card Type
Test Card Number
3-D Secure 2.1.0
3-D Secure 2.2.0
American Express
Card Type = 003
34000
00 0000 1064
34000
00 0000 2732
Cartes Bancaires Mastercard
Card Type = 036
520000
00 0000 3068
520000
00 0000 4058
Cartes Bancaires Visa
Card Type = 036
400000
00 0000 3063
400000
00 0000 4194
China UnionPay
Card Type = 062
620001
00 0050 0060
Diners Club
Card Type = 005
601100
00 0000 1069
Discover
Card Type = 004
601100
00 0000 1069
Elo
Card Type = 054
650529
00 0000 1176
JCB J/Secure
Card Type = 007
333700
00 0000 0016
333800
00 0000 0650
Mada Mastercard
Card Type = 052
520000
00 0000 8110
The merchant’s country must be set to
SA
within the merchant profile, or the
CountryCodeOverride
field must be set to
SA
on the Lookup Request. The response will include the 3-D Secure operator ID, DS reference number, and the ACS reference number.
Mada Visa
Card Type = 052
400000
00 0000 8170
The merchant’s country must be set to
SA
within the merchant profile, or the
CountryCodeOverride
field must be set to
SA
on the Lookup Request. The response will include the 3-D Secure operator ID, DS reference number, and the ACS reference number.
Mastercard
Card Type = 002
520000
00 0000 1062
520000
00 0000 2037
Visa
Card Type = 001
400000
00 0000 1067
400000
00 0000 2446
IMPORTANT
The Meeza card is supported in payer authentication and can be tested in the same manner as Mastercard using the same test card numbers. The only difference is that the card type for Meeza is
067
.

Results for the Check Enrollment Service

Status
=
AUTHENTICATION_SUCCESSFUL
The cardholder is enrolled in Payer Authentication. Authenticate the cardholder before continuing with the transaction.
VERes enrolled =
U

E-Commerce Indicator (ECI) Values

This table lists the expected ECI raw value and its respective string value. These values indicate whether the payer was authenticated by the card network. These values should be passed under this test condition when a transaction is submitted for payment authorization.
Network
ECI Raw Value
ECI String Value
American Express
07
internet
Cartes Bancaires Mastercard
00
internet
Cartes Bancaires Visa
07
internet or vbv_failure
China UnionPay
07
up3ds_failure
Diners Club
07
internet
Discover
07
internet
Elo
07
internet
ITMX
07
lss_failure
JCB J/Secure
07
internet
Mastercard
00
internet
Visa
07
internet or vbv_failure

Results for the Validation Authentication Service

No results are returned.
While Mastercard would normally return the directory server transaction ID, in this test case it is not returned.

Action

Proceed with the authorization request, and contact your support representative to resolve the issue. No liability shift. If you requested payer authentication and authorization together, the authorization is processed automatically.

Test Case 2.8: Time-Out

Timeout occurred while checking enrollment, causing an error on the transaction.

Card Numbers

Card Type
Test Card Number
3-D Secure 2.1.0
3-D Secure 2.2.0
American Express
Card Type = 003
34000
00 0000 1072
34000
00 0000 2047
Cartes Bancaires Mastercard
Card Type = 036
520000
00 0000 3076
520000
00 0000 4694
Cartes Bancaires Visa
Card Type = 036
400000
00 0000 3071
400000
00 0000 4277
China UnionPay
Card Type = 062
620001
00 0090 0070
Diners Club
Card Type = 005
601100
00 0000 1077
Discover
Card Type = 004
601100
00 0000 1077
Elo
Card Type = 054
650529
00 0000 1192
JCB J/Secure
Card Type = 007
333700
00 0000 0081
333800
00 0000 0577
Mada Mastercard
Card Type = 052
520000
00 0000 8130
The merchant’s country must be set to
SA
within the merchant profile, or the
CountryCodeOverride
field must be set to
SA
on the Lookup Request. The response will include the 3-D Secure operator ID, DS reference number, and the ACS reference number.
Mada Visa
Card Type = 052
400000
00 0000 8200
The merchant’s country must be set to
SA
within the merchant profile, or the
CountryCodeOverride
field must be set to
SA
on the Lookup Request. The response will include the 3-D Secure operator ID, DS reference number, and the ACS reference number.
Mastercard
Card Type = 002
520000
00 0000 1070
520000
00 0000 2326
Visa
Card Type = 001
400000
00 0000 1075
400000
00 0000 2354
IMPORTANT
The Meeza card is supported in payer authentication and can be tested in the same manner as Mastercard using the same test card numbers. The only difference is that the card type for Meeza is
067
.

Results for the Check Enrollment Service

Status
=
AUTHENTICATION_SUCCESSFUL
The cardholder is enrolled in Payer Authentication. Authenticate the cardholder before continuing with the transaction.
VERes enrolled =
U

E-Commerce Indicator (ECI) Values

This table lists the expected ECI raw value and its respective string value from this transaction. These values indicate whether the payer was authenticated by the card network. These values should be passed under this test condition when a transaction is submitted for payment authorization.
Network
ECI Raw Value
ECI String Value
American Express
07
internet
Cartes Bancaires Mastercard
00
internet
Cartes Bancaires Visa
07
internet or vbv_failure
China UnionPay
07
up3ds_failure
Diners Club
07
internet
Discover
07
internet
Elo
07
internet
ITMX
07
lss_failure
JCB J/Secure
07
internet
Mastercard
00
internet
Visa
07
internet or vbv_failure

Results for the Validation Authentication Service

No results are returned.

Action

After 10-12 seconds, proceed with the authorization request. No liability shift.

Test Case 2.9: Bypassed Authentication

The challenge requested by the issuer was bypassed for this transaction.

Card Numbers

Card Type
Test Card Number
3-D Secure 2.1.0
3-D Secure 2.2.0
American Express
Card Type = 003
34000
00 0000 1080
34000
00 0000 2948
Cartes Bancaires Mastercard
Card Type = 036
520000
00 0000 3084
520000
00 0000 4991
Cartes Bancaires Visa
Card Type = 036
400000
00 0000 3089
400000
00 0000 4400
China UnionPay
Card Type = 062
620001
00 0080 0080
Diners Club
Card Type = 005
601100
00 0000 1085
Discover
Card Type = 004
601100
00 0000 1085
Elo
Card Type = 054
650529
00 0000 1226
JCB J/Secure
Card Type = 007
333700
00 0000 0537
333800
00 0000 0122
Mada Mastercard
Card Type = 052
520000
00 0000 8150
The merchant’s country must be set to
SA
within the merchant profile, or the
CountryCodeOverride
field must be set to
SA
on the Lookup Request. The response will include the 3-D Secure operator ID, DS reference number, and the ACS reference number.
Mada Visa
Card Type = 052
400000
00 0000 8260
The merchant’s country must be set to
SA
within the merchant profile, or the
CountryCodeOverride
field must be set to
SA
on the Lookup Request. The response will include the 3-D Secure operator ID, DS reference number, and the ACS reference number.
Mastercard
Card Type = 002
520000
00 0000 1088
520000
00 0000 2508
Visa
Card Type = 001
400000
00 0000 1083
400000
00 0000 2560
IMPORTANT
The Meeza card is supported in payer authentication and can be tested in the same manner as Mastercard using the same test card numbers. The only difference is that the card type for Meeza is
067
.

Results for the Check Enrollment Service

Status
=
AUTHENTICATION_SUCCESSFUL
The cardholder is enrolled in Payer Authentication. Authenticate the cardholder before continuing with the transaction.
VERes enrolled =
B
XID =

E-Commerce Indicator (ECI) Values

This table lists the expected ECI raw value and its respective string value from this transaction. These values indicate whether the payer was authenticated by the card network. These values should be passed under this test condition when a transaction is submitted for payment authorization.
Network
ECI Raw Value
ECI String Value
American Express
07
internet
Cartes Bancaires Mastercard
00
internet
Cartes Bancaires Visa
07
internet
China UnionPay
07
up3ds_failure
Diners Club
07
internet
Discover
07
internet
Elo
07
internet
ITMX
07
lss_failure
JCB J/Secure
07
internet
Mastercard
00
internet
Visa
07
internet

Results for the Validation Authentication Service

No results are returned.

Action

Submit your authorization request. No liability shift.

Test Case 2.10a: Successful Step-Up Authentication

Successful step up (or challenge) authentication transaction.

Card Numbers

Card Type
Test Card Number
3-D Secure 2.1.0
3-D Secure 2.2.0
American Express
Card Type = 003
34000
00 0000 1098
34000
00 0000 2534
Cartes Bancaires Mastercard
Card Type = 036
520000
00 0000 3092
520000
00 0000 4074
Cartes Bancaires Visa
Card Type = 036
400000
00 0000 3139
400000
00 0000 4855
China UnionPay
Card Type = 062
620001
99 9980 0019
Diners Club
Card Type = 005
601100
00 0000 1093
Discover
Card Type = 004
601100
00 0000 1093
Elo
Card Type = 054
650529
00 0000 1234
JCB J/Secure
Card Type = 007
333700
00 0020 0004
333800
00 0000 0569
Mada Mastercard
Card Type = 052
520000
00 0000 8160
The merchant’s country must be set to
SA
within the merchant profile, or the
CountryCodeOverride
field must be set to
SA
on the Lookup Request. The response will include the 3-D Secure operator ID, DS reference number, and the ACS reference number.
Mada Visa
Card Type = 052
400000
00 0000 8270
The merchant’s country must be set to
SA
within the merchant profile, or the
CountryCodeOverride
field must be set to
SA
on the Lookup Request. The response will include the 3-D Secure operator ID, DS reference number, and the ACS reference number.
Mastercard
Card Type = 002
520000
00 0000 1096
520000
00 0000 2151
Visa
Card Type = 001
400000
00 0000 1091
400000
00 0000 2503
IMPORTANT
The Meeza card is supported in payer authentication and can be tested in the same manner as Mastercard using the same test card numbers. The only difference is that the card type for Meeza is
067
.

Results for the Check Enrollment Service

Status
=
PENDING_AUTHENTICATION
The cardholder is enrolled in payer authentication. Please authenticate before proceeding with authorization.
VERes enrolled =
Y
PARes status =
C
XID =

Results for the Validation Authentication Service

Status
=
AUTHENTICATION_SUCCESSFUL
Authentication is validated.
PARes status =
Y
XID =
CAVV =

E-Commerce Indicator (ECI) Values

This table lists the expected ECI raw value and its respective string value from this transaction. These values indicate whether the payer was authenticated by the card network. These values should be passed under this test condition when a transaction is submitted for payment authorization.
Network
ECI Raw Value
ECI String Value
American Express
05
aesk
Cartes Bancaires Mastercard
02
spa
Cartes Bancaires Visa
05
vbv
China UnionPay
05
up3ds
Diners Club
05
pb
Discover
05
dipb
Elo
05
cs
ITMX
05
lss
JCB J/Secure
05
js
Mastercard
02
spa
Visa
05
vbv

Action

If you request Validate Authentication and authorization services separately, add the required payer authentication values to your authorization request. If you request the Validate Authentication and authorization services together, the process described above occurs automatically. Merchant should include the CAVV and ECI vlues in the authorization message.

Test Case 2.11a: Unsuccessful Step-Up Authentication

Step up (challenge) authentication transaction where the cardholder challenge failed.

Card Numbers

Card Type
Test Card Number
3-D Secure 2.1.0
3-D Secure 2.2.0
American Express
Card Type = 003
34000
00 0000 1106
34000
00 0000 2237
Cartes Bancaires Mastercard
Card Type = 036
520000
00 0000 3100
520000
00 0000 4041
Cartes Bancaires Visa
Card Type = 036
400000
00 0000 3097
400000
00 0000 4293
China UnionPay
Card Type = 062
620001
99 9970 0029
Diners Club
Card Type = 005
601100
00 0000 1101
Discover
Card Type = 004
601100
00 0000 1101
Elo
Card Type = 054
650529
00 0000 1275
JCB J/Secure
Card Type = 007
333700
00 0020 0087
333800
00 0000 0874
Mada Mastercard
Card Type = 052
520000
00 0000 8170
The merchant’s country must be set to
SA
within the merchant profile, or the
CountryCodeOverride
field must be set to
SA
on the Lookup Request. The response will include the 3-D Secure operator ID, DS reference number, and the ACS reference number.
Mada Visa
Card Type = 052
400000
00 0000 8280
The merchant’s country must be set to
SA
within the merchant profile, or the
CountryCodeOverride
field must be set to
SA
on the Lookup Request. The response will include the 3-D Secure operator ID, DS reference number, and the ACS reference number.
Mastercard
Card Type = 002
520000
00 0000 1104
520000
00 0000 2490
Visa
Card Type = 001
400000
00 0000 1109
400000
00 0000 2370
IMPORTANT
The Meeza card is supported in payer authentication and can be tested in the same manner as Mastercard using the same test card numbers. The only difference is that the card type for Meeza is
067
.

Results for the Check Enrollment Service

=
PENDING_AUTHENTICATION
The cardholder is enrolled in payer authentication. Please authenticate before proceeding with authorization.
VERes enrolled =
Y
PARes status =
C
PAReq =
ACS URL =

Results for the Validation Authentication Service

=
AUTHENTICATION_FAILED
  • User failed authentication.
  • Payer cannot be authenticated.
PARes status =
N
XID = (American Express only)

E-Commerce Indicator (ECI) Values

This table lists the expected ECI raw value and its respective string value from this transaction. These values indicate whether the payer was authenticated by the card network. These values should be passed under this test condition when a transaction is submitted for payment authorization.
Network
ECI Raw Value
ECI String Value
American Express
07
internet
Cartes Bancaires Mastercard
00
internet
Cartes Bancaires Visa
07
internet or vbv_failure
China UnionPay
07
up3ds_failure
Diners Club
07
internet
Discover
07
internet
Elo
07
internet
ITMX
07
lss_failure
JCB J/Secure
07
internet
Mastercard
00
internet
Visa
07
internet or vbv_failure

Action

You are not permitted to submit this transaction for authorization. Instead ask the customer for another form of payment.

Test Case 2.12a: Unavailable Step-Up Authentication

Step up authentication is unavailable.

Card Numbers

Card Type
Test Card Number
3-D Secure 2.1.0
3-D Secure 2.2.0
American Express
Card Type = 003
34000
00 0000 1114
34000
00 0000 2484
Cartes Bancaires Mastercard
Card Type = 036
520000
00 0000 3118
520000
00 0000 4124
Cartes Bancaires Visa
Card Type = 036
400000
00 0000 3105
400000
00 0000 4640
China UnionPay
Card Type = 062
620001
99 9960 0039
Diners Club
Card Type = 005
601100
00 0000 1119
Discover
Card Type = 004
601100
00 0000 1119
Elo
Card Type = 054
650529
00 0000 1283
JCB J/Secure
Card Type = 007
333700
00 0020 0079
333800
00 0000 0981
Mada Mastercard
Card Type = 052
520000
00 0000 8190
The merchant’s country must be set to
SA
within the merchant profile, or the
CountryCodeOverride
field must be set to
SA
on the Lookup Request. The response will include the 3-D Secure operator ID, DS reference number, and the ACS reference number.
Mada Visa
Card Type = 052
400000
00 0000 8310
The merchant’s country must be set to
SA
within the merchant profile, or the
CountryCodeOverride
field must be set to
SA
on the Lookup Request. The response will include the 3-D Secure operator ID, DS reference number, and the ACS reference number.
Mastercard
Card Type = 002
520000
00 0000 1112
520000
00 0000 2664
Visa
Card Type = 001
400000
00 0000 1117
400000
00 0000 2420
IMPORTANT
The Meeza card is supported in payer authentication and can be tested in the same manner as Mastercard using the same test card numbers. The only difference is that the card type for Meeza is
067
.

Results for the Check Enrollment Service

Status
=
PENDING_AUTHENTICATION
The cardholder is enrolled in payer authentication. Authenticate before proceeding with authorization.
VERes enrolled =
Y
PARes Status =
C

Results for the Validation Authentication Service

Status
=
AUTHENTICATION_SUCCESSFUL
Authentication is validated.
PARes status =
U
XID =

E-Commerce Indicator (ECI) Values

This table lists the expected ECI raw value and its respective string value from this transaction. These values indicate whether the payer was authenticated by the card network. These values should be passed under this test condition when a transaction is submitted for payment authorization.
Network
ECI Raw Value
ECI String Value
American Express
07
internet
Cartes Bancaires Mastercard
00
internet
Cartes Bancaires Visa
07
internet or vbv_failure
China UnionPay
07
up3ds_failure
Diners Club
07
internet
Discover
07
internet
Elo
07
internet
ITMX
07
lss_failure
JCB J/Secure
07
internet
Mastercard
00
internet
Visa
07
internet or vbv_failure

Action

Merchant can retry authentication or process without the liability shift.

Test Case 2.14: Require Method URL

Ensures that the merchant has allowed sufficient time (10 seconds) for the issuer to complete their device data collection.

Card Numbers

The Method URL test runs before the authentication request to check how well your system implements device data collection. The enrollment check of the card account should not start until after the device data collection response is received. This test helps to ensure that there is enough time to collect the device data and to transmit it. This test attempts to collect the nine-digit BIN of the card number and checks that the delay between the DDC request and the response is at least seven seconds long. Test failure occurs when fewer than nine digits of the BIN are collected or the delay between the DDC request and response is too short in duration.
Do not run this test when your system does not collect device data. When device data is not collected, an older version of the EMV 3-D Secure protocol is automatically used, and the transaction is automatically assessed as a higher risk.
Card Type
Test Card Number
Visa
Card Type = 001
400010
00 0000 0000

Results for the Check Enrollment Service

VERes enrolled =
Y
PARes status =
Y
CAVV =
ECI value =
07

ECI/Collection Indicator Values

The following table lists the expected ECI or Collection Indicator values for each network.
Network
E-Commerce Indicator (ECI)
Visa
07

Action

If your device data collection method implements correctly and EMV 3-D Secure Method processing occurs, the test transaction produces a Frictionless Success result. A failure is indicated when PARes status =
C
. With the failure, a warning message opens to explain the cause of the test failure.