Supporting the Deployment of EMV® 3-D Secure Solutions

Over recent years, the EMV® 3-D Secure (EMV 3DS) Specifications have evolved to include various new technical features to address payments innovations, emerging regulatory requirements and shifting consumer behaviours. As the specifications have expanded, EMVCo has received feedback from its Associates, Subscribers and other industry participants requesting guidance on how the features can support key business cases. These include how better to achieve a frictionless experience, provide different challenge methods to authenticate cardholders, or support the growing popularity of recurring and instalment transactions. While EMVCo itself is not involved in the implementation of EMV Specifications, the industry feedback signalled a clear opportunity to help banks, solution providers and merchants optimise the development and deployment of EMV 3DS solutions. In this post, Tabitha Odom, Chair of the EMVCo 3DS Working Group, explains how the launch of a new, interactive online resource addresses this opportunity and will help promote more secure and seamless online payments. Q: What is the new EMV 3DS resource published by EMVCo? EMVCo has released its EMV 3DS White Paper (first published as a PDF file in April 2024) in an interactive online format. This provides industry participants with an accessible, easy-to-use resource that promotes a comprehensive understanding of the EMV 3DS Specifications. By summarising the business value, technical features and user experience considerations associated with key use cases, the interactive white paper offers guidance on how EMV 3DS technology can be used to help streamline consumer authentication and enhance fraud prevention. Q: Who can access the new resource? The interactive white paper is publicly available for anyone to access free of charge. It is aimed at diverse groups with varying perspectives, whether you require a high-level overview of the capabilities of EMV 3DS, specific technical detail to support the development or implementation of EMV 3DS solutions, or a demonstration of the user experience. Q: What use cases does the white paper address? The white paper currently explores three key EMV 3DS use cases: Frictionless authentication, out-of-band authentication, and recurring and instalment transactions: Frictionless authentication The EMV 3DS ‘frictionless flow’ enables issuers to accept transactions without challenging cardholders, resulting in a seamless shopping experience for both cardholders and merchants. This can help to reduce cart abandonment and the risk of fraud. The frictionless experience is achieved through a real-time risk assessment that considers various data elements, including the details of the transaction, the cardholder’s transaction history and relationship with the merchant, the device used to perform the transaction, and other technical details such as the device location or IP address. The white paper explores how the risk assessment is enhanced by two key EMV 3DS features – Trust Lists and Device Binding. Trust Lists enable the cardholder to create a list of preferred merchants, while Device Binding allows cardholders to link the device used for e-commerce transactions to their payment card. These features result in faster transactions and fewer challenges. Out-of-band authentication Out-of-band (OOB) authentication challenges the cardholder to authenticate with their issuer through a separate channel, helping to improve security and reduce fraud. For example, the issuer may request the cardholder to use their mobile banking application to authenticate and validate the transaction performed on a laptop browser. The white paper demonstrates how the specifications support various options for OOB authentication. This includes automated OOB transitions, which help the consumer to switch seamlessly between a merchant application and an authentication application. Recurring and instalment transactions Recurring payment