What is EMV 3-D Secure?

What is EMV 3-D Secure?

Jean Fang

Product Manager at FIME

Views 860

What is EMV 3-D Secure?

28.05.2019 12:30 pm

Consumers are managing their financial services in more digital and diverse ways than ever before. But as card-not-present (CNP) transactions across e-commerce, m-commerce and remote commerce rise across the globe so does fraud. Adding security without simply creating more points of friction is a real challenge, but one that the EMV® 3-D Secure protocol – EMV 3DS for short – is trying to combat.

The protocols are generating real interest across the industry, but what exactly is EMV 3DS? And what are the key considerations stakeholders in the online payments and financial services world should be making?

EMV 3DS – the background, the basics

Three-Domain Secure (3DS) is a standard messaging protocol used to identify and verify cardholders for CNP transactions. It creates a standardized, harmonized and secure authentication solution for all stakeholders: merchants, issuers, acquirers and schemes.

Initiated by Visa and followed by other payment schemes such as Mastercard. A new version of EMV 3DS has now been developed and is being maintained by the industry body, EMVCo.

We can break the main goals of the latest EMV 3DS specifications into three:

· Increase approval rates

Fundamentally, achieving this boosts the total volume of transactions and increases revenues for retailers, banks and schemes alike.

· Reduce fraud

Merchants or issuing banks have historically been liable for fraudulent chargebacks, but now the responsibility is shifting depending on which version of EMV 3DS is supported during the authentication. EMV 3DS risk-based-authentication helps reduce fraud and brings huge savings, as well as more confident consumers.

· Enhance the user-experience

Improved online authentication solutions – remembering the 3rd, 4th and 7th digit of a password set five years ago, for example – are far from user-friendly. And the stats speak for themselves: eCommerce cart abandonment rate is at nearly 70%, and around 28% of US online shoppers admit to quitting orders due to checkout processes being too long or complicated.

Cutting out complex additional steps for consumers will reduce cart abandonment and result in better sales for retailers (as well as customers happier to return!).

So, how does EMV 3DS work?

By improving communication ‘in the background’ between the issuing bank, the acquirer and the merchant, EMV 3DS streamlines the user experience. At a high level, basic account holder information can now be automatically retrieved and verified without additional consumer input.

EMVCo’s latest specification features even more intelligent risk-based decision-making with advanced algorithms and smarter data sharing that help evaluate if a purchase is ‘normal’ or not. For example, considering user location, amount spent and frequency of transactions. This means additional authentication processes are only requested when really needed.

Say I’m making an m-commerce payment on holiday in Australia from a site I’ve never visited before – I may then be taken through some of the new, simpler additional authentication solutions defined.

These now include one-time passwords sent via SMS, biometric authentication, use of existing authentication on mobile devices and background authentication checks.

Crucially, EMV 3DS is no longer just for payments. The use cases for identification and verification (ID&V) are expanding, so the scope of EMV 3DS has become much broader to include adding cards to a digital wallet, open banking services and financial services apps, etc.

Next steps to EMV 3DS implementation

EMV 3DS is a compelling authentication solution fit for the digital, omnichannel age. But as with any major system upgrade, implementation does not come without its challenges.

Selecting a trusted partner who understands the nuances and complexities of this new payments infrastructure can help take the strain of compliance. Whether defining and certifying a new solution, or upgrading an existing implementation, thorough testing and certification needs to be championed throughout. This is key to minimizing unexpected delays and costs on the path to service launch.

FIME’s long history supporting the industry’s digital transformation and participation in EMVCo enable us to deliver unrivalled expert support for your projects.


Latest blogs

Christian Wiens Getsafe

Why Challenger Insurers Are Doing Better Than Challenger Banks During the Coronavirus Crisis?

The 2009/10 financial crisis hit insurers much less than banks. Challenger banks such as Monzo, Revolut, Starling Bank and N26 took advantage of the increasing scepticism and dissatisfaction of customers. With their promise of "no bullshit banking" Read more »

Sponsored Post Safetrading.today

How to Earn on Cryptocurrency?

In 2010 one developer from the USA made a very unprofitable deal. This guy changed 10,000 Bitcoins to one pizza. Imagine how much money he would have today if he didn’t make this deal! And this is, as I think, the best example of a bad Read more »

Mike Kiersey Boomi

Businesses looking at M&A post-Covid-19 need to keep integration in mind

At a time when M&A has the potential to become increasingly strategic, a clear post-merger integration plan becomes vital to maintain business-critical applications, IT systems and data. Both companies involved need to understand the importance Read more »

Doug Brown NCR Digital Banking

Self-Service Banking Has a Defining Moment With COVID-19

Consumers and businesses around the world have increasingly shifted to digital self-service banking due to convenience. The ability to access money and banking services anywhere and anytime has proven essential. For banks and financial institutions Read more »

Joseph Cordahi NeoXam

Covid-19: why volatility stress-testing must extend beyond the banks

Stress-testing has become a common tool of regulators and central banks to assess the readiness of banks to deal with sudden volatility in global markets. With Wall Street suffering its worst day since the 1980’s in March, and Covid-driven Read more »

Related Blogs

Alex Malyshev SDK.finance

How to Apply For Electronic Money Institution License and Payment Institution License In Lithuania

As a supplier of core payments and transaction engine software, SDK.finance knows what difficulties our customers face in the process of applying for an Electronic Money Institution License and Payment Institution License In Lithuania. So we decided Read more »

Gemma Doswell Paybase

Paybase Predicts...

What we said in 2018 Read more »

Mark Grainger Engage Hub

Banking on change: what’s next for the financial services sector in 2020?

2019 has been the year of disruption for the Financial Services (FS) sector, largely driven by evolving customer expectations and the influx of new technology. Increasing regulatory requirements, combined with new entrants in the market and shifting Read more »

Tim Hooley Red Hat

Red Hat 2020 Trends: Financial Services x Technology

Whilst we talk about legacy technology as if it is commonplace across industries, it’s a relatively new term within Financial Services. The financial services industry didn’t used to compete by innovating for customers, instead they relied on Read more »

Alan Donnelly Salesforce

Financial Services Trends 2020

The financial services industry is starting to wake up to the idea of ecosystems and partnerships between challengers and traditional banks. In the coming year we will see the discussion evolve from old vs new and see real-world examples of Read more »

Free Newsletter Sign-up
+44 (0) 208 819 32 53 +44 (0) 173 261 71 47
Download Our Mobile App
Financial It Youtube channel