
How 3D Secure Affects Your Visa VAMP Ratio
Merchants under pressure from the Visa Acquirer Monitoring Program (VAMP) often ask one question about 3D Secure: does authenticating a transaction keep it out of the VAMP ratio? Based on what Visa has published, the answer is 'partly'. Authentication…

What to Watch for PSR Strong Customer Authentication as PSD3 Nears Adoption
The EU's payment services package is close to final. On 29 October 2026 the Council of the EU adopted its first-reading position on the third Payment Services Directive (PSD3) and the Payment Services Regulation (PSR). The text now goes to…

How Strong Customer Authentication in the UK is Changing
The rules for strong customer authentication in the UK are set to move. In its July 2026 consultation on modernising payment services regulation, HM Treasury confirmed it has committed to start revoking the authentication provisions in the…

How Issuers Should Approach ACS Capacity Planning for Peak Trading
Black Friday falls on 27 November 2026 and Cyber Monday on 30 November. For card issuers, ACS capacity planning is the part of peak preparation that is easiest to get wrong, because the Access Control Server (ACS) is rarely the first thing…

What the Japan EMV 3DS Requirement Means for Issuers and Merchants
The Japan EMV 3DS requirement is often described as a government mandate that took effect in April 2025. The reality is more specific. It comes from Japan's Credit Card Security Guidelines, which set expectations for card issuers and ecommerce…

How Stale Cardholder Contact Data Breaks 3DS Challenges
Every EMV 3D Secure (EMV 3DS) challenge depends on cardholder contact data: the phone number that receives a one-time passcode, the email address used as a fallback, the device registered for banking-app approvals. When that data is out of…

What Australia’s CNP Fraud Statistics Say About Authentication
Australia's CNP fraud statistics, the card-not-present (CNP) figures published by the Australian Payments Network (AusPayNet), tell two different stories at once. Fraud on Australian cards used with Australian merchants is at record-low rates.…

How Restrictions on Third-Party Cookies Affect the 3DS Method
In browser-based EMV 3D Secure (EMV 3DS), the 3DS Method lets the issuer's Access Control Server (ACS) collect browser information through a hidden frame on the merchant's checkout. Because that frame belongs to the ACS while the page belongs…

What the European Accessibility Act Means for 3DS Challenge Screens
The European Accessibility Act has applied to services provided to consumers in the EU since 28 June 2025. It covers consumer banking services and ecommerce services, which means it reaches both ends of an online card payment, and the EMV 3D…

How Singapore’s E-Payments User Protection Guidelines Apply to Card Authentication
The Monetary Authority of Singapore's (MAS) E-Payments User Protection Guidelines set baseline protections for individuals and sole proprietors using e-payments. They are often read as a bank-account and e-wallet matter, and in some respects…
