Fraud Tools

3D Secureanchor

3D Secure (3DS) is an additional security layer for online credit and debit card transactions that adds an authentication step for customers making online purchases.

Benefitsanchor

3D Secure is safer than processing cards normally, for you and your customers. By enabling 3D Secure alongside Braintree's fraud tools, you can reduce your risk of fraud and chargebacks.

3D Secure is required for merchants transacting in the EU to meet PSD2 SCA requirements.

Processinganchor

With Braintree, a 3D Secure Lookup is performed during the checkout process. If the cardholder is enrolled in 3D Secure, the issuing bank will decide whether the cardholders identity can be verified using data supplied regarding the cardholder and their device, or if an additional authentication process is necessary. If additional authentication is necessary, the Braintree SDK will display a dialog box or iframe provided by the issuing bank that will prompt the cardholder to verify their identity. Identity verification mechanisms will vary per cardholder and issuing bank, but can include SMS one-time passcode, the issuing bank's mobile app, biometric recognition methods such as fingerprint or voiceprint, or other means.

3D Secure details and statuses for each transaction can be viewed on the Transaction Detail page in the Control Panel. The 3D Secure status code indicates the outcome of 3D Secure and whether or not the authenticated transaction resulted in a liability shift.

Compatibilityanchor

3D Secure is only compatible with credit card, debit card, and Secure Remote Commerce transactions.

We currently support 3D Secure for most merchants in the US, Canada, Europe, Australia, and Asia Pacific regions. Production accounts for merchants outside the EEA are not automatically enrolled in 3D Secure.

3D Secure is only compatible with certain configurations. If you’re unsure whether or not your configuration is compatible, contact us.

Card brandsanchor

Most card brands have their own 3D Secure services. We support the following:

  • Visa Secure (formerly known as Verified by Visa)
  • MasterCard Identity Check and MasterCard SecureCode (including Maestro)
  • Discover ProtectBuy (including Diners Club)
  • American Express SafeKey
note

American Express Safekey is not enabled automatically with 3D Secure. Contact us to confirm your American Express setup and enable Safekey.

Feesanchor

Depending on your pricing model, there may be an additional per transaction fee to process 3D Secure transactions. If you’re unsure which pricing model you’re on, Contact us for fee information.

Chargebacksanchor

In certain cases, 3D Secure can shift liability for chargebacks due to fraud from you to the customer’s bank. Liability shifts for fraudulent chargebacks will be based on the transaction's status code. The following 3D Secure status codes will result in a liability shift:

  • authenticate_successful
  • authenticate_attempt_successful
important

Not all transactions processed with 3D Secure automatically shift liability and a shift in liability does not always trigger automatic representation for the chargeback. You will still need to monitor your chargebacks and complete any action required for each one.

Setupanchor

To start supporting 3D Secure, please read our 3D Secure developer docs and then contact us to enroll.

Confirm setupanchor

You can confirm that your account has been set up for 3D Secure in the Control Panel.

  1. Log into the Control Panel
  2. Click on the gear icon in the top right corner
  3. Click Business from the drop-down menu
  4. Scroll down to the Merchant Accounts section
  5. Click on the Merchant Account ID link for the account you'd like to verify
  6. If your account is enrolled in 3D Secure, the following will be true:
    • The 3D Secure field will show as Enrolled