On This Page
Sale with 3-D Secure
3-D Secure
3-D Secure
helps to minimize costly fraudulent transactions by adding an
extra layer of protection to the payment process. Payer Authentication uses the 3-D Secure
protocol in online transactions to verify that payment is coming from
the actual cardholder. Most transactions can be authenticated without the customer being
aware of the process, but higher-risk transactions might require an exchange of one-time
passwords (OTPs) during authentication. This authentication of the payer before the
transaction, benefits the merchant by shifting chargeback liability from the merchant to
the card issuer.The authentication and sale transactions can be bundled together or can occur
sequentially, for example, authentication followed by authorization. Two types of
bundled scenarios are possible:
- Combining Check Enrollment with Sale: When a customer is authenticated without a challenge, the transaction can be authorized in the same request or in a separate authorization request. Whether authorization occurs in the same request or a separate request, the values from the check enrollment response must be passed to the authorization request to qualify for a liability shift.
- Combining Validation with Sale: When a customer is authenticated after a challenge, the transaction can be authorized in the same request or in a separate authorization request. Whether authorization is combined with validation or occurs in a separate request, the values from the validation response must be passed to the authorization request to qualify for a liability shift to the issuing bank.
The current solution supports the
3-D Secure
2.1.0 specification. All
customer-initiated card-not-present sales transactions with check enrollment can be
authenticated with 3-D Secure
. eftpos
does not allow merchant-initiated 3-D Secure
transactions.These ECI values support
3-D Secure
transactions:ECI Value | Description |
|---|---|
oci ( 05 ) | Authentication was successful for the eftpos
card. |
oci_attempted ( 06 ) | Authentication was attempted but not successful for the eftpos card. |
oci_failure ( 07 ) | Authentication was unsuccessful for the eftpos card. |
For more information about payer authentication, see the
Payer Authentication Developer Guide
.