Test Cases for 3-D Secure 2.x

Use the card number specified in the test with the card expiration date set to the month of January and the current year plus three. For example, for 2025, use 2028. You also need the minimum required fields for an order.
Be sure to remove spaces in card numbers when testing.
While the usage of transaction ID (XID) values have declined in importance, they are still included in 3-D Secure 2.x test cases. Only Mastercard transactions do not return XIDs.
While the 3-D Secure version and directory server transaction ID fields are returned for the Check Enrollment and Validate Authentication services, this data is not included in the 3-D Secure 2.x test cases.
IMPORTANT
Mastercard requires that the 3-D Secure version and directory server transaction ID be included along with all pertinent data in your authorization request.

2.1: Frictionless Authentication Is Successful

This test verifies that successful frictionless authentication of the cardholder by the card issuer works correctly.

Card Numbers

Card Type
Test Card Number
3-D Secure 2.1.0
3-D Secure 2.2.0
American Express
Card Type = 003
34000
00 0000 2708
Cartes Bancaires Mastercard
Card Type = 036
520000
00 0000 3001
520000
00 0000 4801
Cartes Bancaires Visa
Card Type = 036
400000
00 0000 3006
400000
00 0000 4970
Diners Club
Card Type = 005
601100
00 0000 2117
Discover
Card Type = 004
601100
00 0000 2117
EFTPOS Mastercard
Card Type = 002
520000
00 0000 5170
EFTPOS Visa
Card Type = 001
400000
00 0000 5126
Elo
Card Type = 054
650529
00 0000 2000
ITMX Visa
Card Type = 001
463208
21 0000 0005
463208
21 0000 0004
ITMX Mastercard
Card Type = 002
557755
01 2100 0000
557755
01 2200 0009
JCB J/Secure
Card Type = 007
333800
00 0000 0296
mada Mastercard
Card Type = 060
520000
00 0000 8000
The merchant’s country must be set to
SA
within the merchant profile, or the
CountryCodeOverride
field must be set to
SA
on the Lookup Request. The response will include the 3-D Secure operator ID, DS reference number, brand authentication, and the ACS reference number.
mada Visa
Card Type = 060
400000
00 0000 8020
The merchant’s country must be set to
SA
within the merchant profile, or the
CountryCodeOverride
field must be set to
SA
on the Lookup Request. The response will include the 3-D Secure operator ID, DS reference number, brand authentication, and the ACS reference number.
Mastercard
Card Type = 002
520000
00 0000 2235
UnionPay International
Card Type = 062
620001
00 0020 0000
810001
00 0000 0142
Visa
Card Type = 001
400000
00 0000 2701
IMPORTANT
The Meeza card is supported in payer authentication and can be tested in the same manner as Mastercard using the same test card numbers. The only difference is that the card type for Meeza is
067
.

Results for the Check Enrollment Service

Status
=
AUTHENTICATION_SUCCESSFUL
The cardholder is enrolled in Payer Authentication. Authenticate the cardholder before continuing with the transaction.
VERes enrolled =
Y
PARes status =
Y
CAVV = <CAVV value>
AVV = <AVV value> (Mastercard only)
XID = <XID value> (American Express only)

E-Commerce Indicator (ECI) Values

This table lists the expected ECI raw values and their respective string values. These values indicate whether the payer was authenticated by the card network. These values should be passed under this test condition when a transaction is submitted for payment authorization.
Network
ECI Raw Value
ECI String Value
American Express
05
aesk
Cartes Bancaires Mastercard
02
spa
Cartes Bancaires Visa
05
vbv
Diners Club
05
pb
Discover
05
dipb
EFTPOS Mastercard
02
EFTPOS Visa
05
Elo
05
cs
ITMX Mastercard
02
ITMX Visa
05
lss
JCB J/Secure
05
js
mada Mastercard
02
mada or spa
mada Visa
05
mada or vbv
Mastercard
02
spa
UnionPay International
05
up3ds
Visa
05
vbv

Results for the Validation Authentication Service

Validation does not apply to this test because no validation is needed when no challenge is issued during the transaction.

Action

If you request Check Enrollment and Authorization services separately, add the required payer authentication values to your authorization request. If you request the Check Enrollment and authorization services together, the process described above occurs automatically.
Test Cases for 3-D Secure 2.x

2.2: Frictionless Authentication Is Unsuccessful

This test verifies that cardholder authentication without a challenge by the card issuer will fail.

Card Numbers

Card Type
Test Card Number
3-D Secure 2.1.0
3-D Secure 2.2.0
American Express
Card Type = 003
34000
00 0000 2096
Cartes Bancaires Mastercard
Card Type = 036
520000
00 0000 3019
520000
00 0000 4538
Cartes Bancaires Visa
Card Type = 036
400000
00 0000 3014
400000
00 0000 4574
Diners Club
Card Type = 005
601100
00 0000 2364
Discover
Card Type = 004
601100
00 0000 2364
EFTPOS Mastercard
Card Type = 002
520000
00 0000 5220
EFTPOS Visa
Card Type = 001
400000
00 0000 5019
Elo
Card Type = 054
650529
00 0000 2018
ITMX Mastercard
Card Type = 002
557755
01 2100 0010
557755
01 2200 0017
ITMX Visa
Card Type = 001
463208
21 0000 0013
463208
22 0000 0012
JCB J/Secure
Card Type = 007
333800
00 0000 0361
mada Mastercard
Card Type = 060
520000
00 0000 8010
The merchant’s country must be set to
SA
within the merchant profile, or the
CountryCodeOverride
field must be set to
SA
on the Lookup Request. The response will include the 3-D Secure operator ID, DS reference number, brand authentication, and the ACS reference number.
mada Visa
Card Type = 060
400000
00 0000 8040
The merchant’s country must be set to
SA
within the merchant profile, or the
CountryCodeOverride
field must be set to
SA
on the Lookup Request. The response will include the 3-D Secure operator ID, DS reference number, brand authentication, and the ACS reference number.
Mastercard
Card Type = 002
520000
00 0000 2276
UnionPay International
Card Type = 062
620001
00 0010 0010
810001
00 0000 0647
Visa
Card Type = 001
400000
00 0000 2925
IMPORTANT
The Meeza card is supported in payer authentication and can be tested in the same manner as Mastercard using the same test card numbers. The only difference is that the card type for Meeza is
067
.

Results for the Check Enrollment Service

Status
=
AUTHENTICATION_FAILED
  • User failed authentication.
  • Payer cannot be authenticated.
VERes enrolled =
Y
PARes status =
N

E-Commerce Indicator (ECI) Values

This table lists the expected ECI raw value, and their respective string values. These values indicate whether the payer was authenticated by the card network. These values should be passed under this test condition when a transaction is submitted for payment authorization.
Network
ECI Raw Value
ECI String Value
American Express
07
internet
Cartes Bancaires Mastercard
00
internet
Cartes Bancaires Visa
07
internet or vbv_failure
Diners Club
07
internet
Discover
07
internet
EFTPOS Mastercard
07
EFTPOS Visa
07
Elo
07
internet
ITMX Mastercard
07
ITMX Visa
07
lss_failure
JCB J/Secure
07
internet
mada Mastercard
00
mada_failure or internet
mada Visa
07
mada_failure or vbv_failure
Mastercard
00
internet
UnionPay International
07
up3ds_failure
Visa
07
internet or vbv_failure

Results for the Validation Authentication Service

No results are returned.

Action

Even though the merchant can still authorize a failed 3-D Secure transaction as a non-authenticated transaction, it is not recommended to submit this transaction for authorization. Instead, ask the customer for another form of payment.
Test Cases for 3-D Secure 2.x

2.3: Stand-In Frictionless Authentication is Attempted

This test verifies how your system reacts when the cardholder is enrolled in 3-D Secure but the card issuer does not support 3-D Secure, requiring a stand-in authentication experience.

Card Numbers

Card Type
Test Card Number
3-D Secure 2.1.0
3-D Secure 2.2.0
American Express
Card Type = 003
34000
00 0000 2872
Cartes Bancaires Mastercard
Card Type = 036
520000
00 0000 3027
520000
00 0000 4587
Cartes Bancaires Visa
Card Type = 036
400000
00 0000 3022
400000
00 0000 4111
Diners Club
Card Type = 005
601100
00 0000 2646
Discover
Card Type = 004
601100
00 0000 2646
EFTPOS Mastercard
Card Type = 002
520000
00 0000 5360
EFTPOS Visa
Card Type = 001
400000
00 0000 5027
Elo
Card Type = 054
650529
00 0000 2026
ITMX Mastercard
Card Type = 002
557755
01 2100 0075
557755
02 2100 0074
ITMX Visa
Card Type = 001
463208
21 0000 0070
463208
22 0000 0079
JCB J/Secure
Card Type = 007
333800
00 0000 0585
mada Mastercard
Card Type = 060
mada Visa
Card Type = 060
Mastercard
Card Type = 002
520000
00 0000 2482
UnionPay International
Card Type = 062
620001
00 0000 0020
620001
00 0000 0020
Visa
Card Type = 001
400000
00 0000 2719
IMPORTANT
The Meeza card is supported in payer authentication and can be tested in the same manner as Mastercard using the same test card numbers. The only difference is that the card type for Meeza is
067
.

Results for the Check Enrollment Service

Status
=
AUTHENTICATION_SUCCESSFUL
The cardholder is enrolled in Payer Authentication. Authenticate the cardholder before continuing with the transaction.
VERes enrolled =
Y
PARes status =
A
CAVV = <CAVV value>
AVV = <AVV value> (Mastercard only)
XID = <XID value> (American Express only)

E-Commerce Indicator (ECI) Values

This table lists the expected ECI raw values and their respective string values. These values indicate whether the payer was authenticated by the card network. These values should be passed under this test condition when a transaction is submitted for payment authorization.
Network
ECI Raw Value
ECI String Value
American Express
06
aesk_attempted
Cartes Bancaires Mastercard
01
spa
Cartes Bancaires Visa
06
vbv_attempted
Diners Club
06
pb_attempted
Discover
06
dipb_attempted
EFTPOS Mastercard
06
EFTPOS Visa
06
Elo
06
cs_attempted
ITMX Mastercard
06
ITMX Visa
06
lss_attempted
JCB J/Secure
06
js_attempted
Mastercard
01
spa
UnionPay International
06
up3ds_attempted
Visa
06
vbv_attempted

Results for the Validation Authentication Service

No results are returned.

Action

If you request Check Enrollment and Authorization services separately, add the required payer authentication values (CAVV and ECI) to your authorization request. If you request the Check Enrollment and Authorization services together, the process described above occurs automatically.
Test Cases for 3-D Secure 2.x

2.4: Frictionless Authentication Is Unavailable

This test verifies how your system behaves when authentication is unavailable at the time of the transaction.

Card Numbers

Card Type
Test Card Number
3-D Secure 2.1.0
3-D Secure 2.2.0
American Express
Card Type = 003
34000
00 0000 2922
Cartes Bancaires Mastercard
Card Type = 036
520000
00 0000 3035
520000
00 0000 4306
Cartes Bancaires Visa
Card Type = 036
400000
00 0000 3030
400000
00 0000 4160
Diners Club
Card Type = 005
601100
00 0000 2612
Discover
Card Type = 004
601100
00 0000 2612
EFTPOS Mastercard
Card Type = 002
520000
00 0000 5410
EFTPOS Visa
Card Type = 001
400000
00 0000 5035
Elo
Card Type = 054
650529
00 0000 2034
ITMX Mastercard
Card Type = 002
557755
01 2100 0091
557755
01 2200 0090
ITMX Visa
Card Type = 001
463208
21 0000 0096
463208
22 0000 0079
JCB J/Secure
Card Type = 007
333800
00 0000 0221
mada Mastercard
Card Type = 060
520000
00 0000 8050
The merchant’s country must be set to
SA
within the merchant profile, or the
CountryCodeOverride
field must be set to
SA
on the Lookup Request. The response will include the 3-D Secure operator ID, DS reference number, brand authentication, and the ACS reference number.
mada Visa
Card Type = 060
40000
00 0000 8100
The merchant’s country must be set to
SA
within the merchant profile, or the
CountryCodeOverride
field must be set to
SA
on the Lookup Request. The response will include the 3-D Secure operator ID, DS reference number, brand authentication, and the ACS reference number.
Mastercard
Card Type = 002
520000
00 0000 2268
UnionPay International
Card Type = 062
620001
00 0040 0030
810001
00 0000 0894
Visa
Card Type = 001
400000
00 0000 2313
IMPORTANT
The Meeza card is supported in payer authentication and can be tested in the same manner as Mastercard using the same test card numbers. The only difference is that the card type for Meeza is
067
.

Results for the Check Enrollment Service

Status
=
AUTHENTICATION_SUCCESSFUL
The cardholder is enrolled in Payer Authentication. Authenticate the cardholder before continuing with the transaction.
VERes enrolled =
Y
PARes status =
U
AVV = <No value provided>
CAAV = <No value provided>

E-Commerce Indicator (ECI) Values

This table lists the expected ECI raw values and their respective string values. These values indicate whether the payer was authenticated by the card network. These values should be passed under this test condition when a transaction is submitted for payment authorization.
Network
ECI Raw Value
ECI String Value
American Express
07
internet
Cartes Bancaires Mastercard
00
internet
Cartes Bancaires Visa
07
internet or vbv_failure
Diners Club
07
internet
Discover
07
internet
EFTPOS Mastercard
07
EFTPOS Visa
07
Elo
07
internet
ITMX Mastercard
00
ITMX Visa
07
lss_failure
JCB J/Secure
07
internet
mada Mastercard
00
mada_failure or internet
mada Visa
07
mada_failure or vbv_failure
Mastercard
00
internet
UnionPay International
07
up3ds_failure
Visa
07
internet or vbv_failure

Results for the Validation Authentication Service

No results are returned.

Action

Submit your authorization request. There is no liability shift.
Test Cases for 3-D Secure 2.x

2.5: Frictionless Authentication Is Rejected

This test verifies how your system reacts when cardholder authentication is rejected without a challenge by the issuer.

Card Numbers

Card Type
Test Card Number
3-D Secure 2.1.0
3-D Secure 2.2.0
American Express
Card Type = 003
34000
00 0000 2062
Cartes Bancaires Mastercard
Card Type = 036
520000
00 0000 3043
520000
00 0000 4405
Cartes Bancaires Visa
Card Type = 036
400000
00 0000 3048
400000
00 0000 4517
Diners Club
Card Type = 005
601100
00 0000 2711
Discover
Card Type = 004
601100
00 0000 2711
EFTPOS Mastercard
Card Type = 002
520000
00 0000 5550
EFTPOS Visa
Card Type = 001
400000
00 0000 5035
Elo
Card Type = 054
650529
00 0000 2083
ITMX Mastercard
Card Type = 002
557755
01 2100 0125
557755
01 2200 0108
ITMX Visa
Card Type = 001
463208
21 0000 0120
463208
22 0000 0103
JCB J/Secure
Card Type = 007
333700
00 0000 0321
333800
00 0000 0734
mada Mastercard
Card Type = 060
520000
00 0000 8080
The merchant’s country must be set to
SA
within the merchant profile, or the
CountryCodeOverride
field must be set to
SA
on the Lookup Request. The response will include the 3-D Secure operator ID, DS reference number, brand authentication, and the ACS reference number.
mada Visa
Card Type = 060
400000
00 0000 8130
The merchant’s country must be set to
SA
within the merchant profile, or the
CountryCodeOverride
field must be set to
SA
on the Lookup Request. The response will include the 3-D Secure operator ID, DS reference number, brand authentication, and the ACS reference number.
Mastercard
Card Type = 002
520000
00 0000 2185
UnionPay International
Card Type = 062
620001
00 0030 0040
810001
00 0000 0415
Visa
Card Type = 001
400000
00 0000 2537

Results for the Check Enrollment Service

Status
=
AUTHENTICATION_FAILED
  • User failed authentication.
  • Payer cannot be authenticated.
VERes enrolled =
Y
PARes status =
R
AVV = <No value provided>
CAAV = <No value provided>

E-Commerce Indicator (ECI) Values

This table lists the expected ECI raw valuse and their respective string values. These values indicate whether the payer was authenticated by the card network. These values should be passed under this test condition when a transaction is submitted for payment authorization.
Network
ECI Raw Value
ECI String Value
American Express
07
internet
Cartes Bancaires Mastercard
00
internet
Cartes Bancaires Visa
07
internet or vbv_failure
Diners Club
07
internet
Discover
07
internet
EFTPOS Mastercard
07
EFTPOS Visa
07
Elo
07
internet
ITMX Mastercard
00
ITMX Visa
07
lss_failure
JCB J/Secure
07
internet
mada Mastercard
00
mada_failure or internet
mada Visa
07
mada_failure or vbv_failure
Mastercard
00
internet
UnionPay International
07
up3ds_failure
Visa
07
internet or vbv_failure
IMPORTANT
The Meeza card is supported in payer authentication and can be tested in the same manner as Mastercard using the same test card numbers. The only difference is that the card type value for Meeza is
067
.

Results for the Validation Authentication Service

No results are returned.

Action

You are not permitted to submit this transaction for authorization. Instead, ask the customer for another form of payment.
Test Cases for 3-D Secure 2.x

2.6: Authentication Is Not Available when Checking Enrollment

This test verifies how your system reacts when a system error prevents authentication when checking enrollment.

Card Numbers

Card Type
Test Card Number
3-D Secure 2.1.0
3-D Secure 2.2.0
American Express
Card Type = 003
34000
00 0000 2468
Cartes Bancaires Mastercard
Card Type = 036
520000
00 0000 3050
520000
00 0000 4090
Cartes Bancaires Visa
Card Type = 036
400000
00 0000 3055
400000
00 0000 4285
Diners Club
Card Type = 005
601100
00 0000 2836
Discover
Card Type = 004
601100
00 0000 2836
EFTPOS Mastercard
Card Type = 002
520000
00 0000 5560
EFTPOS Visa
Card Type = 001
400000
00 0000 5050
Elo
Card Type = 054
650529
00 0000 2091
ITMX Mastercard
Card Type = 002
557755
01 2100 0141
557755
01 2200 0124
ITMX Visa
Card Type = 001
463208
21 0000 00138
463208
22 0000 0145
JCB J/Secure
Card Type = 007
333800
00 0000 0940
mada Mastercard
Card Type = 060
520000
00 0000 8090
The merchant’s country must be set to
SA
within the merchant profile, or the
CountryCodeOverride
field must be set to
SA
on the Lookup Request. The response will include the 3-D Secure operator ID, DS reference number, brand authentication, and the ACS reference number.
mada Visa
Card Type = 060
400000
00 0000 8140
The merchant’s country must be set to
SA
within the merchant profile, or the
CountryCodeOverride
field must be set to
SA
on the Lookup Request. The response will include the 3-D Secure operator ID, DS reference number, brand authentication, and the ACS reference number.
Mastercard
Card Type = 002
520000
00 0000 2409
UnionPay International
Card Type = 062
620001
00 0060 0050
810001
00 0000 0795
Visa
Card Type = 001
400000
00 0000 2990
IMPORTANT
The Meeza card is supported in payer authentication and can be tested in the same manner as Mastercard using the same test card numbers. The only difference is that the card type for Meeza is
067
.

Results for the Check Enrollment Service

Status
=
AUTHENTICATION_SUCCESSFUL
The cardholder is enrolled in Payer Authentication. Authenticate the cardholder before continuing with the transaction.
VERes enrolled =
U
In the response, this error code and error description is returned:
directoryServerErrorCode:
101
directoryServerErrorDescription:
Invalid Formatted Message Invalid Formatted Message

E-Commerce Indicator (ECI) Values

This table lists the ECI raw value that would need to be passed within the authorization and its respective string value. Note that there is no raw ECI returned for these scenarios. These values should be passed under this test condition when a transaction is submitted for payment authorization.
Network
ECI Raw Value
ECI String Value
American Express
07
internet
Cartes Bancaires Mastercard
00
internet
Cartes Bancaires Visa
07
internet or vbv_failure
Diners Club
07
internet
Discover
07
internet
EFTPOS Mastercard
07
EFTPOS Visa
07
Elo
07
internet
ITMX Mastercard
07
ITMX Visa
07
lss_failure
JCB J/Secure
07
internet
mada Mastercard
00
mada_failure or internet
mada Visa
07
mada_failure or vbv_failure
Mastercard
00
internet
UnionPay International
07
up3ds_failure
Visa
07
internet or vbv_failure

Results for the Validation Authentication Service

No results are returned.

Action

Submit your authorization request. There is no liability shift.
Test Cases for 3-D Secure 2.x

2.7: Error Occurs when Checking Enrollment

This test verifies how your system reacts when an error occurs while attempting to check if the cardholder is part of an authentication program.

Card Numbers

Card Type
Test Card Number
3-D Secure 2.1.0
3-D Secure 2.2.0
American Express
Card Type = 003
34000
00 0000 2732
Cartes Bancaires Mastercard
Card Type = 036
520000
00 0000 3068
520000
00 0000 4058
Cartes Bancaires Visa
Card Type = 036
400000
00 0000 3063
400000
00 0000 4194
Diners Club
Card Type = 005
601100
00 0000 2315
Discover
Card Type = 004
601100
00 0000 2315
EFTPOS Mastercard
Card Type = 002
520000
00 0000 5790
EFTPOS Visa
Card Type = 001
400000
00 0000 5068
Elo
Card Type = 054
650529
00 0000 2109
ITMX Mastercard
Card Type = 002
557755
01 2100 0174
557755
01 2200 0132
ITMX Visa
Card Type = 001
463208
21 0000 00153
463208
22 0000 0152
JCB J/Secure
Card Type = 007
333800
00 0000 0650
mada Mastercard
Card Type = 060
520000
00 0000 8110
The merchant’s country must be set to
SA
within the merchant profile, or the
CountryCodeOverride
field must be set to
SA
on the Lookup Request. The response will include the 3-D Secure operator ID, DS reference number, brand authentication, and the ACS reference number.
mada Visa
Card Type = 060
400000
00 0000 8170
The merchant’s country must be set to
SA
within the merchant profile, or the
CountryCodeOverride
field must be set to
SA
on the Lookup Request. The response will include the 3-D Secure operator ID, DS reference number, brand authentication, and the ACS reference number.
Mastercard
Card Type = 002
520000
00 0000 2037
UnionPay International
Card Type = 062
620001
00 0050 0060
810001
00 0000 0662
Visa
Card Type = 001
400000
00 0000 2446
IMPORTANT
The Meeza card is supported in payer authentication and can be tested in the same manner as Mastercard using the same test card numbers. The only difference is that the card type for Meeza is
067
.

Results for the Check Enrollment Service

Status
=
AUTHENTICATION_SUCCESSFUL
The cardholder is enrolled in Payer Authentication. Authenticate the cardholder before continuing with the transaction.
VERes enrolled =
U
In the response, this error code and error description is returned:
directoryServerErrorCode:
101
directoryServerErrorDescription:
Error Processing Message Request 1001

E-Commerce Indicator (ECI) Values

This table lists the ECI raw value that would need to be passed within the authorization and its respective string value. Note that there is no raw ECI returned for these scenarios. These values should be passed under this test condition when a transaction is submitted for payment authorization.
Network
ECI Raw Value
ECI String Value
American Express
07
internet
Cartes Bancaires Mastercard
00
internet
Cartes Bancaires Visa
07
internet or vbv_failure
Diners Club
07
internet
Discover
07
internet
EFTPOS Mastercard
07
EFTPOS Visa
07
Elo
07
internet
ITMX Mastercard
00
ITMX Visa
07
lss_failure
JCB J/Secure
07
internet
mada Mastercard
00
mada_failure or internet
mada Visa
07
mada_failure or vbv_failure
Mastercard
00
internet
UnionPay International
07
up3ds_failure
Visa
07
internet or vbv_failure

Results for the Validation Authentication Service

No results are returned.
While Mastercard would normally return the directory server transaction ID, in this test case, it is not returned.

Action

Proceed with the authorization request, and contact your support representative to resolve the issue. There is no liability shift. If you requested payer authentication and authorization together, the authorization is processed automatically.
Test Cases for 3-D Secure 2.x

2.8: Time Out

This test verifies how your system reacts when a timeout occurs while checking enrollment, causing an error on the transaction.

Card Numbers

Card Type
Test Card Number
3-D Secure 2.1.0
3-D Secure 2.2.0
American Express
Card Type = 003
34000
00 0000 2047
Cartes Bancaires Mastercard
Card Type = 036
520000
00 0000 3076
520000
00 0000 4694
Cartes Bancaires Visa
Card Type = 036
400000
00 0000 3071
400000
00 0000 4277
Diners Club
Card Type = 005
601100
00 0000 2869
Discover
Card Type = 004
601100
00 0000 2869
EFTPOS Mastercard
Card Type = 002
520000
00 0000 5840
EFTPOS Visa
Card Type = 001
400000
00 0000 5076
Elo
Card Type = 054
650529
00 0000 2125
ITMX Mastercard
Card Type = 002
557755
01 2100 0182
557755
01 2200 0140
ITMX Visa
Card Type = 001
463208
21 0000 00187
463208
22 0000 0178
JCB J/Secure
Card Type = 007
333800
00 0000 0577
mada Mastercard
Card Type = 060
520000
00 0000 8130
The merchant’s country must be set to
SA
within the merchant profile, or the
CountryCodeOverride
field must be set to
SA
on the Lookup Request. The response will include the 3-D Secure operator ID, DS reference number, brand authentication, and the ACS reference number.
mada Visa
Card Type = 060
400000
00 0000 8200
The merchant’s country must be set to
SA
within the merchant profile, or the
CountryCodeOverride
field must be set to
SA
on the Lookup Request. The response will include the 3-D Secure operator ID, DS reference number, brand authentication, and the ACS reference number.
Mastercard
Card Type = 002
520000
00 0000 2326
UnionPay International
Card Type = 062
620001
00 0090 0070
810001
00 0000 0928
Visa
Card Type = 001
400000
00 0000 2354
IMPORTANT
The Meeza card is supported in payer authentication and can be tested in the same manner as Mastercard using the same test card numbers. The only difference is that the card type for Meeza is
067
.

Results for the Check Enrollment Service

Status
=
AUTHENTICATION_SUCCESSFUL
The cardholder is enrolled in Payer Authentication. Authenticate the cardholder before continuing with the transaction.
VERes enrolled =
U
In the response, this error code and error description is returned:
directoryServerErrorCode:
402
directoryServerErrorDescription:
Transaction Timed Out

E-Commerce Indicator (ECI) Values

This table lists the ECI raw value that would need to be passed within the authorization and its respective string value. Note that there is no raw ECI returned for these scenarios. These values should be passed under this test condition when a transaction is submitted for payment authorization.
Network
ECI Raw Value
ECI String Value
American Express
07
internet
Cartes Bancaires Mastercard
00
internet
Cartes Bancaires Visa
07
internet or vbv_failure
Diners Club
07
internet
Discover
07
internet
EFTPOS Mastercard
07
EFTPOS Visa
07
Elo
07
internet
ITMX Mastercard
00
ITMX Visa
07
lss_failure
JCB J/Secure
07
internet
mada Mastercard
00
mada_failure or internet
mada Visa
07
mada_failure or vbv_failure
Mastercard
00
internet
UnionPay International
07
up3ds_failure
Visa
07
internet or vbv_failure

Results for the Validation Authentication Service

No results are returned.

Action

After 10-12 seconds, proceed with the authorization request. There is no liability shift.
Test Cases for 3-D Secure 2.x

2.9: Step-Up Authentication Is Successful

This test verifies how your system reacts to a successful step-up (or challenge) authentication transaction.

Card Numbers

Card Type
Test Card Number
3-D Secure 2.1.0
3-D Secure 2.2.0
American Express
Card Type = 003
34000
00 0000 2534
Cartes Bancaires Mastercard
Card Type = 036
520000
00 0000 3092
520000
00 0000 4074
Cartes Bancaires Visa
Card Type = 036
400000
00 0000 3139
400000
00 0000 4855
Diners Club
Card Type = 005
601100
00 0000 2265
Discover
Card Type = 004
601100
00 0000 2265
EFTPOS Mastercard
Card Type = 002
520000
00 0000 5311
EFTPOS Visa
Card Type = 001
400000
00 0000 5290
Elo
Card Type = 054
650529
00 0000 2190
ITMX Mastercard
Card Type = 002
557755
01 2100 0026
557755
01 2200 0025
ITMX Visa
Card Type = 001
463208
21 0000 0021
463208
22 0000 0020
JCB J/Secure
Card Type = 007
333800
00 0000 0569
mada Mastercard
Card Type = 060
520000
00 0000 8160
The merchant’s country must be set to
SA
within the merchant profile, or the
CountryCodeOverride
field must be set to
SA
on the Lookup Request. The response will include the 3-D Secure operator ID, DS reference number, brand authentication, and the ACS reference number.
mada Visa
Card Type = 060
400000
00 0000 8270
The merchant’s country must be set to
SA
within the merchant profile, or the
CountryCodeOverride
field must be set to
SA
on the Lookup Request. The response will include the 3-D Secure operator ID, DS reference number, brand authentication, and the ACS reference number.
Mastercard
Card Type = 002
520000
00 0000 2151
UnionPay International
Card Type = 062
620001
99 9980 0019
810001
00 0000 0688
Visa
Card Type = 001
400000
00 0000 2503
IMPORTANT
The Meeza card is supported in payer authentication and can be tested in the same manner as Mastercard using the same test card numbers. The only difference is that the card type for Meeza is
067
.

Results for the Check Enrollment Service

Status
=
PENDING_AUTHENTICATION
The cardholder is enrolled in payer authentication. Authenticate before proceeding with authorization.
VERes enrolled =
Y
PARes status =
C
XID = <XID value>

E-Commerce Indicator (ECI) Values

This table lists the expected ECI raw values and their respective string values from this transaction. These values indicate whether the payer was authenticated by the card network. These values should be passed under this test condition when a transaction is submitted for payment authorization.
Network
ECI Raw Value
ECI String Value
American Express
07
aesk
Cartes Bancaires Mastercard
00
spa
Cartes Bancaires Visa
07
vbv
Diners Club
07
pb
Discover
07
dipb
EFTPOS Mastercard
07
EFTPOS Visa
07
Elo
07
cs
ITMX Mastercard
07
ITMX Visa
07
lss
JCB J/Secure
07
js
mada Mastercard
00
spa or mada
mada Visa
07
vbv or mada
Mastercard
00
spa
UnionPay International
07
up3ds
Visa
07
vbv

Results for the Validation Authentication Service

Status
=
AUTHENTICATION_SUCCESSFUL
Authentication is validated.
PARes status =
Y
XID = <XID value>
CAVV = <CAVV value>

E-Commerce Indicator (ECI) Values

This table lists the expected ECI raw values and their respective string values from validating this transaction. These values indicate whether the payer was authenticated by the card network. These values should be passed under this test condition when a transaction is submitted for payment authorization.
Network
ECI Raw Value
ECI String Value
American Express
05
aesk
Cartes Bancaires Mastercard
02
spa
Cartes Bancaires Visa
05
vbv
Diners Club
05
pb
Discover
05
dipb
EFTPOS Mastercard
05
EFTPOS Visa
05
Elo
05
cs
ITMX Mastercard
02
ITMX Visa
05
lss
JCB J/Secure
05
js
mada Mastercard
02
spa or mada
mada Visa
05
vbv or mada
Mastercard
02
spa
UnionPay International
05
up3ds
Visa
05
vbv

Action

If you request Validate Authentication and authorization services separately, add the required payer authentication values to your authorization request. If you request the Validate Authentication and authorization services together, the process described above occurs automatically. The merchant should include the CAVV and ECI values in the authorization message.
Test Cases for 3-D Secure 2.x

2.10: Step-Up Authentication Is Unsuccessful

This test verifies that the step-up (challenge) authentication transaction fails whenever the cardholder challenge fails.

Card Numbers

Card Type
Test Card Number
3-D Secure 2.1.0
3-D Secure 2.2.0
American Express
Card Type = 003
34000
00 0000 2237
Cartes Bancaires Mastercard
Card Type = 036
520000
00 0000 3100
520000
00 0000 4124
Cartes Bancaires Visa
Card Type = 036
400000
00 0000 3097
400000
00 0000 4293
Diners Club
Card Type = 005
601100
00 0000 2695
Discover
Card Type = 004
601100
00 0000 2695
EFTPOS Mastercard
Card Type = 002
520000
00 0000 5329
EFTPOS Visa
Card Type = 001
400000
00 0000 5217
Elo
Card Type = 054
650529
00 0000 2208
ITMX Mastercard
Card Type = 002
557755
01 2100 0034
557755
01 2200 0033
ITMX Visa
Card Type = 001
463208
21 0000 00039
463208
22 0000 0038
JCB J/Secure
Card Type = 007
333800
00 0000 0874
mada Mastercard
Card Type = 060
520000
00 0000 8170
The merchant’s country must be set to
SA
within the merchant profile, or the
CountryCodeOverride
field must be set to
SA
on the Lookup Request. The response will include the 3-D Secure operator ID, DS reference number, brand authentication, and the ACS reference number.
mada Visa
Card Type = 060
400000
00 0000 8280
The merchant’s country must be set to
SA
within the merchant profile, or the
CountryCodeOverride
field must be set to
SA
on the Lookup Request. The response will include the 3-D Secure operator ID, DS reference number, brand authentication, and the ACS reference number.
Mastercard
Card Type = 002
520000
00 0000 2490
UnionPay International
Card Type = 062
620001
99 9970 0029
810001
00 0000 0803
Visa
Card Type = 001
400000
00 0000 2370
IMPORTANT
The Meeza card is supported in payer authentication and can be tested in the same manner as Mastercard using the same test card numbers. The only difference is that the card type for Meeza is
067
.

Results for the Check Enrollment Service

=
PENDING_AUTHENTICATION
The cardholder is enrolled in payer authentication. Please authenticate before proceeding with authorization.
VERes enrolled =
Y
PARes status =
C
PAReq = <PAReq value>
ACS URL = <URL value>

E-Commerce Indicator (ECI) Values

This table lists the expected ECI raw valuea and their respective string values from this transaction. These values indicate whether the payer was authenticated by the card network. These values should be passed under this test condition when a transaction is submitted for payment authorization.
Network
ECI Raw Value
ECI String Value
American Express
07
internet
Cartes Bancaires Mastercard
00
internet
Cartes Bancaires Visa
07
internet or vbv_failure
Diners Club
07
internet
Discover
07
internet
EFTPOS Mastercard
07
EFTPOS Visa
07
Elo
07
internet
ITMX Mastercard
07
ITMX Visa
07
lss_failure
JCB J/Secure
07
internet
mada Mastercard
00
mada_failure or internet
mada Visa
07
mada_failure or vbv_failure
Mastercard
00
internet
UnionPay International
07
up3ds_failure
Visa
07
internet or vbv_failure

Results for the Validation Authentication Service

=
AUTHENTICATION_FAILED
  • User failed authentication.
  • Payer cannot be authenticated.
PARes status =
N
XID = <XID value> (American Express only)

E-Commerce Indicator (ECI) Values

This table lists the expected ECI raw valuea and their respective string values from this transaction. These values indicate whether the payer was validated by the card network. These values should be passed under this test condition when a transaction is submitted for payment authorization.
Network
ECI Raw Value
ECI String Value
American Express
07
internet
Cartes Bancaires Mastercard
00
internet
Cartes Bancaires Visa
07
internet or vbv_failure
Diners Club
07
internet
Discover
07
internet
EFTPOS Mastercard
07
EFTPOS Visa
07
Elo
07
internet
ITMX Mastercard
07
ITMX Visa
07
lss_failure
JCB J/Secure
07
internet
mada Mastercard
00
mada_failure or internet
mada Visa
07
mada_failure or vbv_failure
Mastercard
00
internet
UnionPay International
07
up3ds_failure
Visa
07
internet or vbv_failure

Action

You are not permitted to submit this transaction for authorization. Instead, ask the customer for another form of payment.
Test Cases for 3-D Secure 2.x

2.11: Step-Up Authentication Is Unavailable

This test verifies that the correct response is returned when step-up authentication is unavailable.

Card Numbers

Card Type
Test Card Number
3-D Secure 2.1.0
3-D Secure 2.2.0
American Express
Card Type = 003
34000
00 0000 1114
34000
00 0000 2484
Cartes Bancaires Mastercard
Card Type = 036
520000
00 0000 3118
520000
00 0000 4124
Cartes Bancaires Visa
Card Type = 036
400000
00 0000 3105
400000
00 0000 4640
Diners Club
Card Type = 005
601100
00 0000 1119
Discover
Card Type = 004
601100
00 0000 1119
EFTPOS Mastercard
Card Type = 002
520000
00 0000 5337
EFTPOS Visa
Card Type = 001
400000
00 0000 5225
Elo
Card Type = 054
650529
00 0000 1283
ITMX Mastercard
Card Type = 002
557755
01 2100 0042
557755
01 2200 0041
ITMX Visa
Card Type = 001
463208
21 0000 00047
463208
22 0000 0046
JCB J/Secure
Card Type = 007
333700
00 0020 0079
333800
00 0000 0981
mada Mastercard
Card Type = 060
520000
00 0000 8190
The merchant’s country must be set to
SA
within the merchant profile, or the
CountryCodeOverride
field must be set to
SA
on the Lookup Request. The response will include the 3-D Secure operator ID, DS reference number, brand authentication, and the ACS reference number.
mada Visa
Card Type = 060
400000
00 0000 8310
The merchant’s country must be set to
SA
within the merchant profile, or the
CountryCodeOverride
field must be set to
SA
on the Lookup Request. The response will include the 3-D Secure operator ID, DS reference number, brand authentication, and the ACS reference number.
Mastercard
Card Type = 002
520000
00 0000 1112
520000
00 0000 2664
UnionPay International
Card Type = 062
620001
99 9960 0039
810001
00 0000 0159
Visa
Card Type = 001
400000
00 0000 1117
400000
00 0000 2420
IMPORTANT
The Meeza card is supported in payer authentication and can be tested in the same manner as Mastercard using the same test card numbers. The only difference is that the card type for Meeza is
067
.

Results for the Check Enrollment Service

Status
=
PENDING_AUTHENTICATION
The cardholder is enrolled in payer authentication. Authenticate before proceeding with authorization.
VERes enrolled =
Y
PARes Status =
C

E-Commerce Indicator (ECI) Values

This table lists the expected ECI raw values and their respective string values from this transaction. These values indicate whether the payer was authenticated by the card network. These values should be passed under this test condition when a transaction is submitted for payment authorization.
Network
ECI Raw Value
ECI String Value
American Express
07
internet
Cartes Bancaires Mastercard
00
internet
Cartes Bancaires Visa
07
internet or vbv_failure
Diners Club
07
internet
Discover
07
internet
EFTPOS Mastercard
07
EFTPOS Visa
07
Elo
07
internet
ITMX Mastercard
07
ITMX Visa
07
lss_failure
JCB J/Secure
07
internet
mada Mastercard
00
mada_failure or internet
mada Visa
07
mada_failure or vbv_failure
Mastercard
00
internet
UnionPay International
07
up3ds_failure
Visa
07
internet or vbv_failure

Results for the Validation Authentication Service

Status
=
AUTHENTICATION_SUCCESSFUL
Authentication is validated.
PARes status =
U
XID = <XID value>

E-Commerce Indicator (ECI) Values

This table lists the expected ECI raw values and their respective string values from this transaction. These values indicate whether the payer was authenticated by the card network. These values should be passed under this test condition when a transaction is submitted for payment authorization.
Network
ECI Raw Value
ECI String Value
American Express
07
internet
Cartes Bancaires Mastercard
00
internet
Cartes Bancaires Visa
07
internet or vbv_failure
Diners Club
07
internet
Discover
07
internet
EFTPOS Mastercard
07
EFTPOS Visa
07
Elo
07
internet
ITMX Mastercard
07
ITMX Visa
07
lss_failure
JCB J/Secure
07
internet
mada Mastercard
00
mada_failure or internet
mada Visa
07
mada_failure or vbv_failure
Mastercard
00
internet
UnionPay International
07
up3ds_failure
Visa
07
internet or vbv_failure

Action

The merchant can retry authentication or process without the liability shift.
Test Cases for 3-D Secure 2.x

2.12: Error During Authentication

This test checks how your system reacts when a system error occurs while processing the authentication request.

Card Numbers

Card Type
Test Card Number
3-D Secure 2.1.0
3-D Secure 2.2.0
American Express
Card Type = 003
34000
00 0000 2351
Cartes Bancaires Mastercard
Card Type = 036
520000
00 0000 3126
520000
00 0000 4611
Cartes Bancaires Visa
Card Type = 036
400000
00 0000 3113
400000
00 0000 4913
Diners Club
Card Type = 005
601100
00 0000 2570
Discover
Card Type = 004
601100
00 0000 2570
EFTPOS Mastercard
Card Type = 002
520000
00 0000 5352
EFTPOS Visa
Card Type = 001
400000
00 0000 5241
Elo
Card Type = 054
650529
00 0000 2265
ITMX Mastercard
Card Type = 002
557755
01 2100 0067
557755
01 2200 0066
ITMX Visa
Card Type = 001
463208
21 0000 00062
463208
22 0000 0061
JCB J/Secure
Card Type = 007
333800
00 0000 0676
mada Mastercard
Card Type = 060
520000
00 0000 8200
The merchant’s country must be set to
SA
within the merchant profile, or the
CountryCodeOverride
field must be set to
SA
on the Lookup Request. The response will include the 3-D Secure operator ID, DS reference number, brand authentication, and the ACS reference number.
mada Visa
Card Type = 060
400000
00 0000 8340
The merchant’s country must be set to
SA
within the merchant profile, or the
CountryCodeOverride
field must be set to
SA
on the Lookup Request. The response will include the 3-D Secure operator ID, DS reference number, brand authentication, and the ACS reference number.
Mastercard
Card Type = 002
520000
00 0000 2656
UnionPay International
Card Type = 062
620001
99 9940 0059
810001
00 0000 0159
Visa
Card Type = 001
400000
00 0000 2644
IMPORTANT
The Meeza card is supported in payer authentication and can be tested in the same manner as Mastercard using the same test card numbers. The only difference is that the card type for Meeza is
067
.

Results for the Check Enrollment Service

=
PENDING_AUTHENTICATION
The cardholder is enrolled in payer authentication. Please authenticate before proceeding with authorization.
VERes enrolled =
Y
PARes status =
C
PAReq = <PAReq value>

E-Commerce Indicator (ECI) Values

This table lists the expected ECI raw valuea and their respective string values from this transaction. These values indicate whether the payer was authenticated by the card network. These values should be passed under this test condition when a transaction is submitted for cardholder authentication.
Network
ECI Raw Value
ECI String Value
American Express
07
internet
Cartes Bancaires Mastercard
00
internet
Cartes Bancaires Visa
07
internet or vbv_failure
Diners Club
07
internet
Discover
07
internet
EFTPOS Mastercard
00
EFTPOS Visa
07
Elo
07
internet
ITMX Mastercard
ITMX Visa
07
lss_failure
JCB J/Secure
07
internet
mada Mastercard
00
mada_failure or internet
mada Visa
07
mada_failure or vbv_failure
Mastercard
00
internet
UnionPay International
07
up3ds_failure
Visa
07
internet or vbv_failure

Results for the Validation Authentication Service

=
AUTHENTICATION_FAILED
  • User failed authentication.
  • Payer cannot be authenticated.
PARes status =
U
XID = <XID value> (American Express only)

E-Commerce Indicator (ECI) Values

This table lists the expected ECI raw valuea and their respective string values from this transaction. These values indicate whether the payer was validated by the card network. These values should be passed under this test condition when a transaction is submitted for payment authorization.
Network
ECI Raw Value
ECI String Value
American Express
07
internet
Cartes Bancaires Mastercard
00
internet
Cartes Bancaires Visa
07
internet or vbv_failure
Diners Club
07
internet
Discover
07
internet
EFTPOS Mastercard
07
EFTPOS Visa
07
Elo
07
internet
ITMX Mastercard
07
ITMX Visa
07
lss_failure
JCB J/Secure
07
internet
mada Mastercard
00
mada_failure or internet
mada Visa
07
mada_failure or vbv_failure
Mastercard
00
internet
UnionPay International
07
up3ds_failure
Visa
07
internet or vbv_failure

Action

You can retain liability and submit this transaction for authorization as an unauthenticated transaction or you can ask the customer for another form of payment.
Test Cases for 3-D Secure 2.x

2.13: Authentication Is Bypassed

This test verifies how your system reacts when the challenge requested by the issuer is bypassed for the transaction.

Card Numbers

Card Type
Test Card Number
3-D Secure 2.1.0
3-D Secure 2.2.0
American Express
Card Type = 003
34000
00 0000 2534
Cartes Bancaires Mastercard
Card Type = 036
520000
00 0000 3092
520000
00 0000 4074
Cartes Bancaires Visa
Card Type = 036
400000
00 0000 3139
400000
00 0000 4855
Diners Club
Card Type = 005
601100
00 0000 2265
Discover
Card Type = 004
601100
00 0000 2265
EFTPOS Mastercard
Card Type = 002
520000
00 0000 5311
EFTPOS Visa
Card Type = 001
400000
00 0000 5290
Elo
Card Type = 054
650529
00 0000 2190
ITMX Mastercard
Card Type = 002
557755
01 2100 0026
557755
01 2200 0025
ITMX Visa
Card Type = 001
463208
21 0000 00021
463208
22 0000 0020
JCB J/Secure
Card Type = 007
333800
00 0000 0569
mada Mastercard
Card Type = 060
520000
00 0000 8160
The merchant’s country must be set to
SA
within the merchant profile, or the
CountryCodeOverride
field must be set to
SA
on the Lookup Request. The response will include the 3-D Secure operator ID, DS reference number, brand authentication, and the ACS reference number.
mada Visa
Card Type = 060
400000
00 0000 8270
The merchant’s country must be set to
SA
within the merchant profile, or the
CountryCodeOverride
field must be set to
SA
on the Lookup Request. The response will include the 3-D Secure operator ID, DS reference number, brand authentication, and the ACS reference number.
Mastercard
Card Type = 002
520000
00 0000 2151
UnionPay International
Card Type = 062
620001
00 0080 0080
810001
00 0000 0688
Visa
Card Type = 001
400000
00 0000 2503
IMPORTANT
The Meeza card is supported in payer authentication and can be tested in the same manner as Mastercard using the same test card numbers. The only difference is that the card type for Meeza is
067
.

Results for the Check Enrollment Service

Status
=
AUTHENTICATION_SUCCESSFUL
The cardholder is enrolled in Payer Authentication. Authenticate the cardholder before continuing with the transaction.
VERes enrolled =
B
XID = <XID value>

E-Commerce Indicator (ECI) Values

This table lists the ECI raw value that would need to be passed within the authorization and its respective string value. Note that there is no raw ECI returned for these scenarios. These values should be passed under this test condition when a transaction is submitted for payment authorization.
Network
ECI Raw Value
ECI String Value
American Express
07
internet
Cartes Bancaires Mastercard
00
internet
Cartes Bancaires Visa
07
internet
Diners Club
07
internet
Discover
07
internet
EFTPOS Mastercard
00
EFTPOS Visa
07
Elo
07
internet
ITMX Mastercard
00
ITMX Visa
07
lss_failure
JCB J/Secure
07
internet
mada Mastercard
00
internet or mada_failure
mada Visa
07
internet or mada_failure
Mastercard
00
internet
UnionPay International
07
up3ds_failure
Visa
07
internet

Results for the Validation Authentication Service

No results are returned.

Action

Submit your authorization request. There is no liability shift.
Test Cases for 3-D Secure 2.x

2.14: Require Method URL

This test ensures that the merchant is allowing sufficient time (10 seconds) for the issuer to complete device data collection.

Card Numbers

The Method URL test runs before the authentication request to check how well your system implements device data collection. The enrollment check of the card account should not start until after the device data collection response is received. This test helps to ensure that there is enough time to collect the device data and to transmit it. This test attempts to collect the nine-digit BIN of the card number and checks that the delay between the DDC request and the response is at least seven seconds long. Test failure occurs when fewer than nine digits of the BIN are collected or the delay between the DDC request and response is too short in duration.
Do not run this test when your system does not collect device data. When device data is not collected, an older version of the EMV 3-D Secure protocol is automatically used, and the transaction is automatically assessed as a higher risk.
Card Type
Test Card Number
Visa
Card Type = 001
400010
00 0000 0000

Results for the Check Enrollment Service

VERes enrolled =
Y
PARes status =
Y
CAVV = <CAVV value>
ECI value =
07

ECI/Collection Indicator Values

The following table lists the expected ECI or Collection Indicator values for each network.
Network
E-Commerce Indicator (ECI)
Visa
07

Action

If your device data collection method implements correctly and EMV 3-D Secure Method processing occurs, the test transaction produces a Frictionless Success result. A failure is indicated when PARes status =
C
. With the failure, a warning message opens to explain the cause of the test failure.
Test Cases for 3-D Secure 2.x