2.10: Step-Up Authentication Is Unsuccessful

This test verifies that the step-up (challenge) authentication transaction fails whenever the cardholder challenge fails.

Card Numbers

Card Type
Test Card Number
3-D Secure 2.1.0
3-D Secure 2.2.0
American Express
Card Type = 003
34000
00 0000 2237
Cartes Bancaires Mastercard
Card Type = 036
520000
00 0000 3100
520000
00 0000 4124
Cartes Bancaires Visa
Card Type = 036
400000
00 0000 3097
400000
00 0000 4293
Diners Club
Card Type = 005
601100
00 0000 2695
Discover
Card Type = 004
601100
00 0000 2695
EFTPOS Mastercard
Card Type = 002
520000
00 0000 5329
EFTPOS Visa
Card Type = 001
400000
00 0000 5217
Elo
Card Type = 054
650529
00 0000 2208
ITMX Mastercard
Card Type = 002
557755
01 2100 0034
557755
01 2200 0033
ITMX Visa
Card Type = 001
463208
21 0000 00039
463208
22 0000 0038
JCB J/Secure
Card Type = 007
333800
00 0000 0874
mada Mastercard
Card Type = 060
520000
00 0000 8170
The merchant’s country must be set to
SA
within the merchant profile, or the
CountryCodeOverride
field must be set to
SA
on the Lookup Request. The response will include the 3-D Secure operator ID, DS reference number, brand authentication, and the ACS reference number.
mada Visa
Card Type = 060
400000
00 0000 8280
The merchant’s country must be set to
SA
within the merchant profile, or the
CountryCodeOverride
field must be set to
SA
on the Lookup Request. The response will include the 3-D Secure operator ID, DS reference number, brand authentication, and the ACS reference number.
Mastercard
Card Type = 002
520000
00 0000 2490
UnionPay International
Card Type = 062
620001
99 9970 0029
810001
00 0000 0803
Visa
Card Type = 001
400000
00 0000 2370
IMPORTANT
The Meeza card is supported in payer authentication and can be tested in the same manner as Mastercard using the same test card numbers. The only difference is that the card type for Meeza is
067
.

Results for the Check Enrollment Service

=
PENDING_AUTHENTICATION
The cardholder is enrolled in payer authentication. Please authenticate before proceeding with authorization.
VERes enrolled =
Y
PARes status =
C
PAReq = <PAReq value>
ACS URL = <URL value>

E-Commerce Indicator (ECI) Values

This table lists the expected ECI raw valuea and their respective string values from this transaction. These values indicate whether the payer was authenticated by the card network. These values should be passed under this test condition when a transaction is submitted for payment authorization.
Network
ECI Raw Value
ECI String Value
American Express
07
internet
Cartes Bancaires Mastercard
00
internet
Cartes Bancaires Visa
07
internet or vbv_failure
Diners Club
07
internet
Discover
07
internet
EFTPOS Mastercard
07
EFTPOS Visa
07
Elo
07
internet
ITMX Mastercard
07
ITMX Visa
07
lss_failure
JCB J/Secure
07
internet
mada Mastercard
00
mada_failure or internet
mada Visa
07
mada_failure or vbv_failure
Mastercard
00
internet
UnionPay International
07
up3ds_failure
Visa
07
internet or vbv_failure

Results for the Validation Authentication Service

=
AUTHENTICATION_FAILED
  • User failed authentication.
  • Payer cannot be authenticated.
PARes status =
N
XID = <XID value> (American Express only)

E-Commerce Indicator (ECI) Values

This table lists the expected ECI raw valuea and their respective string values from this transaction. These values indicate whether the payer was validated by the card network. These values should be passed under this test condition when a transaction is submitted for payment authorization.
Network
ECI Raw Value
ECI String Value
American Express
07
internet
Cartes Bancaires Mastercard
00
internet
Cartes Bancaires Visa
07
internet or vbv_failure
Diners Club
07
internet
Discover
07
internet
EFTPOS Mastercard
07
EFTPOS Visa
07
Elo
07
internet
ITMX Mastercard
07
ITMX Visa
07
lss_failure
JCB J/Secure
07
internet
mada Mastercard
00
mada_failure or internet
mada Visa
07
mada_failure or vbv_failure
Mastercard
00
internet
UnionPay International
07
up3ds_failure
Visa
07
internet or vbv_failure

Action

You are not permitted to submit this transaction for authorization. Instead, ask the customer for another form of payment.