Visa 3-D Secure: What It Is and How It Works
Visa Secure is Visa's EMV 3DS program. Here is how the authentication flow runs at checkout and why it cuts card-not-present fraud.
A customer pays on your site. Before the charge goes through, their bank quietly checks that they are really them. That quiet check is Visa 3-D Secure.
What Visa 3-D Secure is
Visa Secure is Visa's EMV 3DS program. It uses data checks to help you confirm who your buyer is. It helps you and the bank confirm real cardholders. It cuts fraud too.
The goal is simple. Approve the good buyer, flag the bad one, and keep the checkout fast. The check runs between your store and the bank that issued the card.
A short history
Visa built the first 3-D Secure protocol. It checked who the buyer was before the sale went through. Later, Visa and other card brands built the next version together. That version is EMV 3-D Secure. That shared version is what runs today. For a fuller background, see EMV 3-D Secure.
How the flow works at checkout
EMV 3DS is a fraud tool for online sales. It authenticates the buyer without adding unnecessary friction to checkout. Here is the shape of it.
- Your customer enters their card details at checkout.
- Your site sends transaction data to the issuer through the 3DS connection. You can plug into a 3DS program like Visa Secure. It sends your sale data to the bank in a safe way.
- The issuer reads that data and scores the risk of this specific purchase.
- For low-risk payments, transaction information can be shared with the issuer without direct customer interaction.
- Sometimes the issuer asks the customer to prove who they are. The payment waits until they do.
The exchange of data between the merchant and the issuer is the heart of it.
Frictionless versus challenged
Will your customers always see an extra step or a code? No. There are two paths.
Frictionless flow. For safe-looking sales, Visa Secure has a data-only mode. It sends the sale details to the bank. The customer does nothing. The buyer never notices a thing.
Challenge flow. For risky sales, the bank may ask for more proof. A one-time code, security questions, or a fingerprint. The buyer gets a prompt from their bank and answers it.
An EMV 3DS transaction uses consumer data to evaluate risk and prevent fraud. You and the bank both use this buyer data. Both must follow privacy laws. That duty sits with you and the bank, so ask your processor what data your checkout passes along.
Why merchants care
Two numbers from Visa. Authenticated eCommerce sales show about a 45% reduction in fraud compared with non-authenticated ones. And Visa reports a 9% lift in authorization approval rates for transactions authenticated through Visa Secure.
That second number matters as much as the first. A fraud tool that blocks good customers costs you sales. This one tends to help both sides. As online sales grow, stores must stop card-not-present fraud. They must also let good sales go through with no bumps. Visa Secure is built for exactly that trade-off.
A stolen card that gets through can come back at you as a chargeback, so catching it early pays off.
Strong Customer Authentication and version 2.2
EMVCo notes that EMV 3DS can be used to meet Strong Customer Authentication rules. It works by supporting checks from two different factors.
For the best functionality, EMVCo advises using EMV 3DS version 2.2 or newer. When you enable 3DS through your processor, ask which version they run.
Issuer-side tools you may hear about
These run at the bank, not in your store, but the names come up often.
Visa Consumer Authentication Service is a bank-side tool. It uses AI to score risk in real time. Visa Payment Passkey is a login method with no password. It works with EMV 3DS.
When authentication fails
Sometimes the check does not pass. Handle these with a plan, not a shrug. See 3-D Secure authentication failed for what to do next.
Getting started
Ask your payment processor how it connects you to a 3DS program like Visa Secure. Once it is on, test a purchase and watch your checkout stats before and after.
For a broader walk-through of the protocol across all card brands, start with our 3-D Secure guide.