What Is 3D Secure? A Complete Guide to Payment Authentication

3D Secure (3DS) is a payment authentication protocol that adds an identity verification step between a cardholder and their issuing bank during an online transaction. When 3DS is active, the card network’s directory server confirms that the person making a purchase is the legitimate cardholder, before the payment is authorized. For merchants, this authentication delivers a critical benefit: liability for fraudulent chargebacks shifts from the merchant to the card issuer.

3DS1 vs. 3DS2: What Changed

Frictionless vs. Challenge Flows

3DS2 uses risk-based authentication. When the issuer’s risk scoring determines the transaction is low-risk, it approves the authentication without showing any challenge to the customer, a frictionless flow. Only high-risk transactions, unusual patterns, or transactions above certain thresholds trigger a visible challenge (OTP, biometric, bank app confirmation). In practice, approximately 95% of 3DS2 transactions complete without visible friction.

The Liability Shift: Why This Matters to Merchants

When a transaction is authenticated via 3DS and later disputed as fraudulent, the chargeback liability shifts to the card issuer, not the merchant. This is the mechanism that drives the dramatic chargeback reduction 3DS delivers. ConvesioPay Q1 2026 data shows a 5.1x improvement in chargeback rates for 3DS-authenticated transactions, consistent with the industry benchmark of 3DS reducing chargebacks by up to 81%.

ConvesioPay’s 3DS Implementation

ConvesioPay enables 3DS2 authentication through Adyen’s global 3DS infrastructure, supporting frictionless flows on web and mobile. The system automatically requests frictionless authentication and handles challenge flows natively. Merchants on ConvesioPay benefit from 3DS protection at 2.9% + $0.30 per transaction with no additional authentication fees.