Use 3-D Secure for e-commerce transactions

🚧

IMPORTANT: Minimum data requirements for Visa Secure authentication requests

As per article ID: AI13666, effective August 12, 2024, Visa^® requires information from three data fields for all tokenized Visa Secure EMV® 3-D Secure (3DS) payment transactions. The three required data fields in authentication request messages are:

• Browser Internet Protocol (IP) address or the device IP address for in-app transactions
• Cardholder name
• Cardholder email address or phone number, or both

Clover recommends merchants to check with their providers for 3D Secure (3DS) enablement.

3-D Secure (3DS) is a protocol that provides an additional security layer for online credit and debit card-not-present (CNP) transactions. Clover uses the EMV® 3DS to authenticate customers and safeguard against CNP fraud. 3D stands for three domains:

1. The card issuer.
2. The merchant receiving the payment.
3. The 3DS infrastructure platform that is a secure go-between for the customer and the merchant.

Enable 3DS

3DS is required for apps intended for use in the European region. It is optional in other regions, but you can still use it as a tool to reduce fraud.

To create an additional security layer for CNP transactions, add the 3DS authentication method while using the Create a charge endpoint. When you turn on 3D Secure, the cardholder must validate every transaction with a secure personal identification number (PIN) sent to their phone or associated devices from their card issuer.

All major card issuers offer 3DS by a different brand name. Example:

3DS parameter requirement

Add the 3DS object to your charge request to initiate the 3DS authentication.

Request and response examples

curl --request POST \
   --url 'https://scl-sandbox.dev.clover.com/v1/charges' \
   --header 'accept: application/json' \
   --header 'authorization: Bearer ab86a5e8-48f3-b3bd-8c45-d415e9867833' \
   --header 'content-type: application/json' \
   --data '
{
 "ecomind": "ecom",
 "metadata": {
  "existingDebtIndicator": false
 },
 "threeds": {
  "authentication_result": {
   "authentication_status": "SUCCESS",
   "transaction_id": "CAACCVVUlwCXUyhQNlSXAAAAAAA",
   "cryptogram": "11B5 2345 49C3 C4DD 931A 27BD 8CA3 CD82",
   "threeds_version": "2"
  },
  "source": "NON_CLOVER"
 },
 "source": "clv_1ABCDefgHI23jKL4m5nOPQrS",
 "amount": 100,
 "currency": "USD",
 "description": "test"
}
‘

{
 "id": "3NTR8H89C1D8M", 
 "amount": 100,
 "payment_method_details": "card",
 "amount_refunded": 0,
 "currency": "USD",
 "created": 1234567891234,
 "description": "test",
 "captured": true,
 "ref_num": "1234567891",
 "auth_code": "121212",
 "outcome": {
  "network_status": "approved_by_network",
  "type": "authorized"
 },
 "paid": true,
 "status": "succeeded",
 "source": {
  "id": "clv_1ABCDefgHI23jKL4m5nOPQrS",
  "brand": "DISCOVER",
  "exp_month": "01",
  "exp_year": "2030",
  "first6": "123456",
  "last4": "4321"
 },
 "ecomind": "ecom",
 "threeds": {
  "validation_result": "AUTHENTICATION_STATUS_UNKNOWN",
  "liability_protection_status": "NOT_PROTECTED"