What is New with EMV® 3DS v2.3?

EMVCo has updated the EMV® 3-D Secure (EMV 3DS) Specifications to support more secure and convenient e-commerce authentication. In this post, EMVCo EMV 3DS Working Group Chair Elint Chu answers key questions about EMV 3DS v2.3. What was included in the publication of EMV 3DS v2.3? EMVCo has updated the EMV 3-D Secure (EMV 3DS) Specifications from version 2.2 to version 2.3. The specifications include the Protocol and Core Functions Specification v2.3.0, SDK Specification v2.3.0, and Split-SDK Specification with Browser SDK Annex. EMVCo has also published a number of documents to support implementation of the EMV 3DS Specifications, including EMV 3DS Secure Browser Best Practices. The EMV 3DS Testing Programme is also being updated to align with EMV 3DS v2.3 and are expected to be available in the second half of 2022. All EMV 3DS Specifications and supporting documents are publicly available on the EMVCo website. See related post: What is EMV 3-D Secure? What was the process for updating the EMV 3DS Specifications? EMVCo reviews and evaluates EMV Specifications on a regular cycle to determine updates required to enhance and evolve specifications in line with advancements in payments technology and industry needs. Payments industry stakeholders actively participate in this process through the EMVCo Associates Programme. EMVCo Associates reviewed and provided input on the proposed changes to EMV 3DS v2.3 via business and technical Special Interest Meetings (SIMs) and a Request for Comments. The final draft specification was then approved to be published by EMVCo’s Board of Advisors. What are the key updates introduced in EMV 3DS v2.3? EMV 3DS v2.3 introduces enhancements to increase flexibility for optimising EMV 3DS implementation across multiple channels and devices, help issuers identify fraudulent transactions more quickly and accurately, and streamline the authentication process for consumers to improve the overall payment experience. Does EMV 3DS v2.3 address friction in the authentication process? Yes. EMV 3DS v2.3 further enhances the exchange of data between merchants and issuers, so that issuers can better evaluate the transaction associated risks and the consumer performing it. The information can be used to determine the level of authentication required, without adding unnecessary friction to the payment process. This should translate into higher transaction approval rates without a step-up challenge and means that for most transactions, the consumer clicks or taps online, and the payment is approved. For those transactions that issuers determine higher risk, such as those made from a new device, transactions made for an unusually large amount, or unexpected transaction types, EMV 3DS v2.3 also includes enhancements that simplify the challenge process for consumers to confirm the transaction, minimising friction for all parties involved. What are some of the specific updates in EMV 3DS v2.3 that support a better payment experience for consumers? EMV 3DS v2.3 introduces a number of updates that can help to optimise the checkout experience for consumers. These include enhancements to the user interface (UI) to provide issuers and merchants with additional options for streamlining how information is presented and communicated to consumers to guide them through the authentication process easily and efficiently. The addition of automated out-of-band (OOB) transitions provides a simpler, easier-to-use way for consumers to confirm a transaction when an authentication method through a separate channel is required. While this is typically a manual process for consumers involving multiple steps– for example, a push notification is sent to their mobile banking app, they leave a merchant app to then log in separately to the banking app to review and confirm the transaction as legitimate – this new enhancement automates the transition between the merchant app and the banking app w