Who This Is For / When to Use
Businesses accepting card payments through Kyrios.
Required for European card payments under Strong Customer Authentication (SCA).
Relevant when a customer’s bank requests additional verification during checkout.
What Is 3D Secure (3DS)
3D Secure (3DS) is an additional authentication step required by some card issuers during online card payments.
If triggered, the customer must verify their identity with their bank, usually via:
A one-time code sent by SMS, or
Approval through their banking app.
Common brand names customers may recognize:
Visa Secure
Mastercard Identity Check
Regulatory Context: Strong Customer Authentication (SCA)
Strong Customer Authentication (SCA) is a European regulation requiring multi-factor authentication for many card payments.
3D Secure fulfills SCA requirements by verifying:
Something the customer has (phone or banking app), and/or
Something the customer knows (PIN or one-time code).
Customer Experience: Desktop Browser
Step 1: Customer enters card details
The customer completes the standard card payment form during checkout.
Step 2: Bank risk assessment
The customer’s bank reviews the transaction in real time.
If no additional verification is required, the payment completes automatically.
If verification is required, the bank triggers 3D Secure.
NOTE: No customer action is needed at this step unless prompted.
Step 3: Customer completes 3D Secure authentication
If required, a secure authentication window appears where the customer confirms the payment using a code or bank approval.
Customer Experience: Test 3D Secure Flow (Reference)
This screen is shown only in test or demonstration environments to simulate a 3DS challenge.
NOTE: This screen is illustrative only. Live customers will see their own bank’s branded authentication screen.
Customer Experience: iOS Devices
On iOS devices, the 3D Secure challenge appears as a secure in-app or browser-based authentication screen.
The customer enters the verification code and submits approval.
Customer Experience: Android Devices
On Android devices, the authentication flow is similar, with a secure checkout screen provided by the card issuer or network.
Refund Behavior for Test Transactions
Test 3D Secure transactions are automatically refunded after 24 hours.
This does not apply to live customer payments.
Security Notes
While 3D Secure significantly reduces fraud risk, no payment system can eliminate fraud entirely.
For best results, use 3DS alongside:
Secure payment gateways
Encrypted checkout pages
Proper account access controls
FAQ
What is 3D Secure?
3D Secure is an extra authentication layer for online card payments that requires the cardholder to verify their identity before the transaction is completed.
How does 3D Secure reduce fraud?
By requiring direct verification from the cardholder, 3DS helps prevent unauthorized use of stolen card details.
Do all payment gateways support 3D Secure?
Most modern payment gateways support 3DS. You should confirm that your configured payment provider supports and enables it correctly.
Is 3D Secure mandatory for all transactions?
No. Requirements depend on region, transaction risk, and bank policies. In Europe, SCA regulations make 3DS mandatory for many card payments.
What is Strong Customer Authentication (SCA)?
SCA is a European regulation requiring multi-factor authentication for online payments. It verifies identity using something the customer knows, has, or is. 3D Secure is a compliant method.
How do I enable 3D Secure for my payments?
3DS is handled automatically through your connected payment gateway. No manual customer setup is required.
Will 3D Secure slow down checkout?
It adds one short step only when required. Most authentications take just a few seconds and significantly increase customer trust.
Does 3D Secure work with Apple Pay and Google Pay?
Yes. Apple Pay and Google Pay include built-in authentication (Face ID, Touch ID, or passcode), which usually satisfies SCA without showing a separate 3DS challenge.