3D Secure Section

What is 3D Secure Authentication?

3D Secure stands for 3 Domain Secure. There are 3 parties involved in the 3D Secure process which are:

•   The Vendor
•   The Acquiring Bank
•   Visa and MasterCard

3D Secure is a culmination of Verified by Visa (VbV) and MasterCard Secure Code (MSC). It is the latest fraud prevention initiative launched by card schemes as a more secure method for authenticating the shopper at the time of the transaction. Visa and MasterCard will take responsibility for your 3D Secure Authenticated transactions, taking the liability and reducing the risk of chargebacks. (Please double check with your merchant acquirer on any occasions you believe liability should have shifted).

Benefits and Limitations of 3D Secure Authentication

BENEFITS:

•   Liability shift: The major benefit to you as the vendor is that you are likely to experience a liability shift for a fully 3D Secure authenticated transaction. Meaning if it later turns out to be fraudulent you will not be responsible. You are protected by the card issuer against such chargebacks because the bank themselves assume the liability. N.B You will need to contact your merchant bank for exact terms and conditions for a liability shift.

•   No additional charges: There are no additional charges for VbV and MSC from Sage Pay. Your acquiring bank may charge you to add this to your merchant number, but you may also find that they will lower their charges to you if you support these schemes.

•   Flexibility: You have the option of setting up a rule base on your Sage Pay account to automatically accept or reject transactions depending on the 3D Secure results.

•   Cards that are part of the scheme: VISA, VISA DELTA, MASTERCARD, MASTERCARD DEBIT, INTERNATIONAL MAESTRO, UK MAESTRO, LASER, SOLO, and VISA ELECTRON.

• Easy to set up: You control the set up in your My Sage Pay area.

LIMITATIONS:

• Chargebacks can still occur: A 3D secure validated transaction does not guarantee a liability shift, as it is down to the discretion of your merchant bank. Such circumstances include the customer denying receipt of goods or the AVS/CV2 values are returning matched responses.

• Not all cards are part of the scheme: As yet there are no similar initiatives for American Express, JCB or Diner's Club integrated with Sage Pay.

Due to the limitations listed above, it is a good idea not to rely on these schemes solely, but rather to use the results as part of your overall fraud screening process.

 

What does my Shopper see during 3D Secure Authentication?

Capturing Information

When you are registered and have integrated 3D secure into your site with Sage Pay, your shoppers will be given the option to register their cards and/or verify their transaction.

Once the shopper has entered their card details on the Sage Pay payment page they will be prompted on the confirmation page to register their card for 3D Secure (if they have yet to do so) or proceed with the transaction and enter their 3D secure password. Please be aware that the format of the 3D secure password may vary between banks.

If the shopper has yet to register for 3D Secure with their card issuing bank, they will be passed through the following three stages (the stages below are an example and may vary):

If the shopper has already registered their card, they will be redirected to the 3D Secure authentication page to enter their password. This page will differ depending on the card being used as the page is hosted by the card issuing bank:

Once they have submitted their password the transaction will continue with the authorisation process. The shopper will then proceed through the transaction process and either be directed to your success or failure page.
For further information about these schemes please click on the icons below
    

      http://www.visaeurope.com/personal/onlineshopping/verifiedbyvisa/main.jsp

     http://www.mastercard.com/us/merchant/solutions/mastercard_securecode.html

 

Why do I need 3D Secure Authentication?

3D Secure is becoming an Industry standard. It is currently mandatory for accepting Maestro cards. For International Maestro cards to be processed a fully 3D secure authentication must be returned. For UK Maestro cards (domestic), we advise you to contact your merchant bank who will inform you whether or not you need to be enrolled for 3D Secure in order to accept them.

With the above in mind Sage Pay advise all our vendors to use this service. As well as being a free service that Sage Pay provide, 3D Secure is also a value added tool. It is easy to set up and can compliment your existing fraud screening services such as AVS/CV2 and The 3rd Man to assist you in reducing the risk of fraud.