Business Overview

The 3DS Challenge flow occurs when a Cardholder’s transaction cannot be authenticated through a Frictionless Flow or when the ACS determines that the transaction is deemed high-risk. The Cardholder may also be required to do this when the Cardholder agreed to their payment details being used for subsequent purchases like recurring payments.

For the Challenge flow, the Cardholder must provide additional information directly to the ACS in order for the transaction to take place. This may include entering a one-time code sent to their mobile device or validating the transaction using their mobile banking application (Out-of-Band Authentication).

The 3DS Challenge flow significantly reduces fraud by requiring this extra layer of authentication, which in turn increases consumer confidence in online shopping. Cardholders are more likely to complete a purchase when they feel confident in the security measures in place.

The challenge process provides valuable information on transaction patterns, as well as Cardholder and ACS behaviour, helping 3DS Requestors to improve their fraud prevention strategies, and balance security and user experience based on their specific risk profiles.

In some regions, regulations require Strong Customer Authentication (SCA) for online payments. Implementing 3DS and supporting the challenge process helps businesses to comply with these regulations.

Overall, the challenge process in 3DS enhances the security of online transactions while providing benefits to Cardholders, 3DS Requestors and banks (ACSs).

Benefits per actor

3DS Requestor
  • helps to significantly reduce the risk of fraudulent transactions
  • implementing 3DS helps 3DS Requestors to comply with regulations requiring SCA for online transactions
ACS
  • helps to significantly reduce the risk of fraudulent transactions
  • various authentication methods available to accommodate bank preferences and market requirements
Cardholder
  • may view online transactions as safer due to the challenge providing an extra layer of security
  • similar user experience across all 3DS Requestors