What Is 3D Secure?
3D Secure (EMV 3DS) is the global authentication standard for online card payments. PAAY helps you authenticate customers, shift fraud liability, and lift authorization rates — without adding friction to the checkout experience.
3D Secure, in Plain English
3D Secure (often written 3DS, and in its current version EMV 3DS or 3DS2) is a global payment security standard for card-not-present transactions. Think of it like the chip on your physical credit card, but for online payments. It lets cardholders authenticate themselves during checkout, using risk-based analysis to approve the majority of transactions frictionlessly — with no pop-ups or redirects.
Known by branded names such as Visa Secure, Mastercard Identity Check, Amex SafeKey, and Discover ProtectBuy, EMV 3-D Secure protects merchants with liability shift while meeting global compliance mandates like PSD2.
Why It’s Called 3D Secure: The Three Domains
The “3-D” in 3D Secure stands for three domains — the three parties that exchange data in real time to verify a payment. Authentication only happens when all three connect.
Issuer Domain
The cardholder's bank. It scores the transaction's risk and decides whether to approve it silently or challenge the shopper for a second factor.
Acquirer Domain
The merchant and its bank or payment service provider. This is where the authentication request starts — PAAY operates here on the merchant's behalf.
Interoperability Domain
The card network's infrastructure (Visa, Mastercard, Amex directory servers) that routes messages between the issuer and the acquirer.
Authentication in Under 3 Seconds
PAAY collects 150+ data points during checkout and sends them to the card issuer for real-time risk assessment. The issuer decides whether to approve frictionlessly or request a cardholder challenge, all behind the scenes.
Customer Enters Payment Details
PAAY Collects 150+ Data Points
Issuer Performs Risk Assessment
Frictionless or Challenge Decision
Liability Shifted to Issuer
Transaction Complete
Average time: under 3 seconds
3D Secure 1 vs. EMV 3DS (3DS2)
“3D Secure” has been through two generations. The original protocol was clunky and hurt conversion; the modern version, EMV 3DS, was rebuilt for mobile and risk-based authentication. Visa and Mastercard ended support for the legacy protocol in October 2022, so every new integration today is EMV 3DS.
3D Secure 1
Verified by Visa & Mastercard SecureCode — the early-2000s original.
- Static-password prompt on nearly every transaction
- High checkout friction and cart abandonment
- Built for desktop browsers, poor mobile experience
- No risk-based data sharing
- Deprecated by the card networks in October 2022
EMV 3DS (3DS2)
Visa Secure, Mastercard Identity Check — rolled out from 2018 onward.
- 150+ data points enable risk-based authentication
- Up to 85% of transactions clear frictionlessly
- Mobile-first, in-app, and biometric challenge flows
- Satisfies PSD2 Strong Customer Authentication
- Required for VAMP and modern fraud-liability shift
Want the practical difference between a silent approval and a step-up prompt? Read: frictionless vs. challenge authentication.
PSD2 & Strong Customer Authentication
The Payment Services Directive 2 (PSD2) mandates Strong Customer Authentication (SCA) for e-commerce transactions in the European Economic Area. EMV 3DS is the only acceptable solution to perform SCA.
Something They Are
Biometric verification: fingerprint or facial recognition
Something They Have
A trusted device: mobile phone or hardware token
Something They Know
A password, PIN, or secret known only to the consumer
SCA requires two or more of these factors. PAAY's JS SDK automatically enforces SCA when both the acquiring bank and cardholder are in mandated regions. No extra configuration needed.
Authenticate, Protect, and Approve More
On authenticated transactions, fraud chargebacks become the issuer's responsibility
Industry-leading authentication success rate across all card networks
Transactions approved without any cardholder interaction
PAAY Puts EMV 3DS to Work for You
Merchants
Start protecting your online sales today. Reduce chargebacks, increase authorization rates, and deliver a frictionless checkout experience to your customers.
View SolutionsPayment Service Providers
Stay competitive and grow your business with PAAY. Offer your merchants best-in-class 3DS authentication and unlock new revenue opportunities through our partner program.
Partner With UsFull EMV 3DS, 3RI, and Visa Data Only — one integration.
Liability shift, recurring authentication, and authorization lift all run on the EMV 3DS rails PAAY already operates. Size the chargeback ROI or the Visa Data Only upside in seconds.
Ready to Protect Your Transactions?
Start a risk-free trial and see PAAY in action. Most merchants go live in hours or days, not weeks.
Frequently asked questions about 3D Secure
3D Secure (3DS) is a global authentication protocol that verifies a shopper's identity during an online card payment. It lets the merchant, the card issuer, and the cardholder exchange data in real time so the issuer can confirm the transaction is legitimate before it's approved. The current version is EMV 3DS (also called 3DS2), which authenticates most transactions silently in the background — no popup, no redirect.
Still have questions?
Contact our team