Securious is now a 3DS Assessor Company

 

Digital transformation, the global pandemic and the increasing popularity of online selling has seen the traditional face to face payment environment move to eCommerce platforms.

One result is a rapid growth of card-not-present payment transactions. Whilst great for convenience and merchant scalability, this has bred a rise in online payment fraud known as CNP fraud or card-not-present fraud.

It is difficult to verify the identity of the cardholder when making a payment to be able to confirm its legitimacy. With a physical retail outlet, the cardholder would present a payment card with the transaction being associated with an embedded chip and PIN reader.

This is not available with a CNP transaction.

What is 3DS?

3DS is a security protocol designed to authenticate users. It allows the cardholder to verify their identity and reduce payment fraud.

This in turn will reduce the amount of merchant chargebacks (claims that the payment transaction did not take place) and help minimise unauthorised card transactions.

When making a transaction, the cardholder will need to enter a passcode, password, or PIN to verify their identity, normally once redirected to their bank.

What are the benefits of 3DS?

For payment service providers (PSPs), by implementing 3DS you may see a reduction in card fraud due to cardholders having to provide additional authentication before making payments.

The latest version of 3-D Security 2.0 (3DS2) integrates with the card transaction, and only if suspicious or unknown activity is detected, the transaction will be flagged for authentication.

This will see the cardholder not being redirected to the bank for authentication but instead being able to authenticate via text message or confirmation code via an app.

Who needs to be compliant with 3DS?

Any Payment Service Provider – think Cardstream, Shopify, WorldPay, Stripe, Zettle, Square, Sage Pay, PayPoint, Streamline, Elavon, Payzone, Handepay

Securious are the only PCI QSAC in the Devon, Cornwall and Somerset region. We are delighted to be able to add 3DS to our portfolio of PCI services.

3DS Assessors are qualified by PCI SSC to perform assessments using the PCI 3DS Core Security Standard (Security Requirements and Assessment Procedures for EMV® 3-D Secure Core Components: ACS, DS, and 3DS Server).

Interested?

If you’d like to know more about 3DS and our capabilities, get in touch using the contact form below