3D Secure 2.0, often written 3DS2, is a card authentication standard that lets the issuing bank verify the cardholder during an online purchase. It replaces the older 3D Secure 1 pop-up with a smoother, data-driven process.
3DS2 passes richer information about the transaction and the shopper to the issuing bank, such as device details, billing and shipping addresses and account history. The issuer uses that data to decide whether to approve the payment without extra steps or ask the cardholder to prove their identity.
The checkout collects the card details and device data. The merchant's gateway or authentication provider sends an authentication request to the card network's directory server, which routes it to the issuer. The issuer assesses risk. In a frictionless flow, the issuer approves authentication in the background and the customer sees nothing extra. In a challenge flow, the cardholder is asked to verify, for example with a one-time code or a banking app prompt. The result is returned to the merchant and used when the payment is authorized.
Frictionless flows keep checkout fast for lower-risk transactions. Challenge flows add a verification step for higher-risk ones. Sending accurate customer data helps more payments qualify for the frictionless path.
3DS can reduce card-not-present fraud, and authenticated transactions may shift liability for certain fraud chargebacks from the merchant to the issuer, depending on card network rules and your setup. Some regions require strong customer authentication for many online payments. Confirm the rules that apply to you with your processor.
Many merchants apply it to higher-risk or higher-value orders instead of every checkout, balancing fraud protection against conversion. It works well alongside AVS and CVV checks. See our guides on AVS mismatches, card testing attacks and friendly fraud, and talk to your payment partner about risk tools for your industry.
3DS2 shares more data with the issuer and supports a frictionless path, while 3DS1 relied on a static password pop-up.
It can shift liability for some fraud disputes, but it does not stop all chargebacks, such as service or delivery disputes.
Challenges can add friction. Frictionless flows and selective use reduce the impact.
Your gateway or processor must support 3DS2, or you can use a separate authentication provider. Ask your provider.
Every merchant's processing setup is different, so the right answer depends on your industry, sales channels, average ticket size and chargeback history. CARDZ3N's payments specialists review those details with you and match your business with the right sponsor bank, gateway and risk tools, whether you sell online, in store, by invoice or on a recurring subscription.
We work with merchants across the USA, Canada, the UK and the EU, including high-risk, B2B and fast-growing businesses that traditional processors often turn away. If you would like a second opinion on your current rates, contract terms or approval options, contact our team for a free, no-obligation processing review.
CARDZ3N Inc is headquartered in Las Vegas, Nevada, and provides merchant services to businesses that traditional processors turn away. Backed by top-tier sponsor banks and processors, CARDZ3N combines institutional stability with the speed of a specialized team that understands high-risk industries. Services include high-risk account underwriting and placement, gateway solutions across the major gateway platforms, POS integrations, ACH and check processing, chargeback prevention through ChargebackZ3N, and business lending and working capital. Its AerospacePay division serves OEMs, MROs, FBOs, and repair stations with B2B and B2G payment processing. CARDZ3N serves merchants in the USA, Canada, the UK, and the EU.
Start protecting your revenue from chargebacks today — schedule your complimentary consultation with CARDZ3N’s dispute management specialists.
