What is 3D-Secure (3DS)?

3DS, 3DSv2, online payment

Updated over a week ago

3D-Secure (3DS) aims to protect your online transactions by preventing fraud attempts while ensuring the legitimacy of customers to merchants.

💡 Following the implementation of the provisions of the second European Payment Services Directive (PSD2), online transactions must now be secured through strong customer authentication (SCA). To meet this requirement, the 3DS protocol has been enhanced, and a version 2 compliant with these standards has been introduced.

As part of our partnership with Mastercard, Qonto card payments benefit from this higher level of protection.

How does 3DS work?

With this system, the cardholder must prove his identity to validate each transaction, either through strong customer authentication (SCA) or two-factor authentication (2FA).

  • If the merchant uses the latest version 3DSv2, and strong customer authentication (SCA) is enabled for your Qonto account, you will need to confirm the operation through the Qonto notification received on the associated phone. This is the most secure and recommended method.

  • If the merchant uses the old version of 3DS and/or you have only two-factor authentication (2FA) enabled on your Qonto account, 2FA will be applied. You will receive a unique code via SMS to the phone number associated with the Qonto account. The code must be entered on the payment page.

This authentication is mandatory, even when multiple payments are made close together in time.

☝️ Good to know:

  • Recurring subscriptions are approved via 3DS during the first transaction. However, subsequent automatic transactions do not need to be validated again.

    Example 👉 You subscribe to a monthly subscription with an online media outlet.
    The first payment, corresponding to the registration of the card on the site, will be subject to 3DS. In the following months, the amount of your subscription will be automatically debited from the card by the merchant without requiring validation.

  • 3D Secure does not apply to in-store card payments or to validate automatic withdrawals

  • Merchants offering 3DS display a Verified by Visa or MasterCard SecureCode logo on their website

Did this answer your question?