The CB, Visa and MasterCard networks have implemented the 3-D Secure v2 program in order to make the customer experience and enhance transaction security.
The major benefits of 3-D Secure v2 are:
- More fluid and integrated customer journey, especially when it comes to mobile applications;
- New authentication methods for cardholders;
- the management of exemptions andfrictionless(small amounts, trusted recipients, monitoring of fraud rates, etc.).
Its deployment has required changes throughout the electronic payment chain (websites, Technical Acceptance Service Providers, data transport networks, Merchant Bank, Lead Bank).
Authentication in modePop In.
The principle of redirection to a non-responsive authentication page, which used to be a source of payment abandonment, has been reviewed. Authentication now takes place in "Pop In" (a window that opens in the buyer's browser).
It is possible to inform the authentication server about the size of the buyer’s screen. The windowPop inadapt to the size of the browser page, thus improving the user experience, especially on mobile devices (if the issuer’s authentication server supports the screen size settings).
Frictionless: authentication without systematic interaction with the buyer
The 3-D Secure v2 protocol allows to exchange new data between the merchant and the issuer (the cardholder’s bank).
- Either to trigger strong authentication of the cardholder, i.e. to ask the buyer to enter supplementary details;
Strong authentication methods are the responsibility of the card issuer and evolve towards “biometric” solutions and/or connection to their “online bank” in order to eventually eliminate single-use codes sent by SMS (known to be not highly reliable).
- Or to finalize the payment process without interacting with the buyer. This mechanism is called “frictionless”.
The objectives are to transform most payments without cardholder authentication in order to facilitate the customer journey, reduce fraud and, consequently, your chargeback rates.
The goal of card networks is to eventually obtain 85% of payments without cardholder authentication while maintaining the liability shift.