Tag Archive for: 3DS2

What to Watch for PSR Strong Customer Authentication as PSD3 Nears Adoption

The EU's payment services package is close to final. On 29 October 2026 the Council of the EU adopted its first-reading position on the third Payment Services Directive (PSD3) and the Payment Services Regulation (PSR). The text now goes to…

How Strong Customer Authentication in the UK is Changing

The rules for strong customer authentication in the UK are set to move. In its July 2026 consultation on modernising payment services regulation, HM Treasury confirmed it has committed to start revoking the authentication provisions in the…

How Issuers Should Approach ACS Capacity Planning for Peak Trading

Black Friday falls on 27 November 2026 and Cyber Monday on 30 November. For card issuers, ACS capacity planning is the part of peak preparation that is easiest to get wrong, because the Access Control Server (ACS) is rarely the first thing…

What the European Accessibility Act Means for 3DS Challenge Screens

The European Accessibility Act has applied to services provided to consumers in the EU since 28 June 2025. It covers consumer banking services and ecommerce services, which means it reaches both ends of an online card payment, and the EMV 3D…

How Singapore’s E-Payments User Protection Guidelines Apply to Card Authentication

The Monetary Authority of Singapore's (MAS) E-Payments User Protection Guidelines set baseline protections for individuals and sole proprietors using e-payments. They are often read as a bank-account and e-wallet matter, and in some respects…

Where 3DS Latency Comes from and How to Reduce It

When a checkout feels slow, EMV 3D Secure (EMV 3DS) is often the first suspect. Sometimes that is fair, but 3DS latency is not one number. It accumulates across several steps owned by different parties: the merchant's page, the 3DS Server,…

How Issuers Can Detect Scams After a Successful 3DS Challenge

A cardholder successfully completes a 3D Secure (3DS) challenge, confirming their identity through a one-time passcode or banking app. Yet the transaction may still be fraudulent. In social-engineering scams, criminals persuade genuine cardholders…

When 3DS and SCA Apply to Commercial, Lodged, and Virtual Cards

Commercial cards cover three quite different uses. An employee may pay for a hotel on a public website with a corporate card. A company may lodge a card with its travel management company, which books and pays on its behalf. Or a booking system…

Where 3D Secure Helps Against Card Testing, and Where It Doesn’t

Card testing, also called enumeration, is the automated use of an online checkout to find out which stolen or generated card numbers still work. Bots submit large numbers of small or zero-value payments, keep the cards that succeed and sell…

How Merchants Should Measure 3D Secure Performance

Many merchants judge 3D Secure by a single figure, if they measure it at all: an authentication success rate, or a chargeback rate. Neither tells you where a sale was lost or whether authentication is protecting you. A checkout can show a healthy…