3-D Secure technology. What is it and how does it ensure the security of online payments.

Mutt

Professional
Messages
1,057
Reputation
7
Reaction score
596
Points
113
Contents
  • 1. 3-D Secure technology. What is it, its essence and advantages
  • 2. The difference between the new technology and the use of the CVV2 / CVC2 code
  • 3. How to pay for a purchase using the 3-D Secure function

The widespread use of bank cards, payment systems and electronic wallets has caused an equally wide flight of imagination among fraudsters. More and more often we hear about the loss of money from bank cards, and methods for this are invented almost every day. That is why the 3-D Secure technology appeared, which is designed to ensure the safety of bank card holders during transactions without presenting a card (CNP transactions, abbreviated from Card Not Present).

Let's take a look at what this technology is and how it works.

3-D Secure technology. What is it, its essence and advantages
The new 3-D Secure technology is an additional layer of protection for online payments, designed to significantly reduce fraud with bank cards.

The protocol was originally developed for Visa cards, and was named Verified by Visa (VbV). Later it was recognized and used by other payment systems, but with different names and in a slightly modified form:
  • MasterCard in the form of MasterCard SecureCode (MCC);
  • American Express under the "name" Safekey;
  • JCB International as J / Secure.

Why "3-D"? The fact is that for any operation, 3 domains are used:
1. Domain of the issuing bank;
2. Domain of the acquiring bank in which the merchant's account is served;
3. The domain of compatibility is an intermediary that ensures the transfer of information between the first two participants (payment system).

The essence of the 3-D Secure technology is to use additional authentication of the cardholder (i.e., user authentication according to a specific attribute, for example, by the entered password) when confirming an expense transaction with his card. When making a payment, you are directed to a special secure page, where you will be asked to send a confirmation code (or password) to your number in the form of an SMS message. The cell phone number must be registered with the bank that issued your card (the card is tied to it). This password is entered in the corresponding field on the page, and if the sequence of numbers sent to you and the one you entered matches, the payment will be completed.

There are other confirmation options, less reliable, when the password can be printed out in the terminals of the bank that issued the card. Then you will receive several of them at once on one check. An unreliable permanent password set on the bank's website once, or a microprocessor card (scratch card) that generates passwords for each transaction can also be used.

The main advantage of the 3-D Secure protocol is a significant increase in the level of security of online payments with a small investment of time for the bank card holder.

Another important point is the responsibility of the issuing bank. If funds from your card were stolen as a result of an expense transaction using 3-D Secure, the responsibility for the fraud will lie with the issuing bank of your payment card, or you. This is the so-called “Transfer of Responsibility” rule established by payment systems.

In the event that the seller (represented by the acquiring bank) does not support this card authentication service, then all responsibility lies with him. Thus, if the details of your card were stolen and tried to "drain" money from it through banks that do not additionally protect transactions, then, in theory, responsibility should be removed from the cardholder (ie from you), and all the money should be returned to you!

The difference between the new technology and the use of the CVV2 / CVC2 code
The CVV2 / CVC2 authentication code is indicated on the back of any plastic card. Knowing it and other card details, you can carry out operations without the knowledge of its holder. This is what the swindlers take advantage of. You don't know how reliable the site you are going to make a purchase on is. Perhaps, having entered this code once, you will forever say goodbye to the money that was still on the card. The CVV2 / CVC2 code is constant and changes only with the card, and not over time.

Unlike a similar code, passwords obtained using 3-D Secure technology are always different. In addition, they can be recognized only before the actual operation of the operation and only after its thorough verification by the bank. Thus, even with all the details of the payment card in hand, it is impossible to make a payment without the knowledge of its owner. After all, only he is able to confirm the calculations using his phone.

How to pay for a purchase using the 3-D Secure feature
The first sign that your chosen online store supports the new technology is the presence of the MasterCard SecureCode or Verified by Visa logo on the payment page.
First, you simply choose the right products or services and click the "pay" button. You will then be automatically redirected to the appropriate page.

Important! In the process of paying for a product or service, you are redirected not to the usual payment page of the online store, but to a similar bank resource (!), In which the seller is served. This is another guarantee of secure payments.

If you have previously registered in the 3-D Secure system, you will be immediately prompted to enter a one-time password. You, as already mentioned, will receive it by SMS or "peep" in the receipt printed at the ATM. Keep in mind - there are many passwords on the check and they are numbered. You need to enter a confirmation with a serial number that the site requests.

For those who have not yet managed to use this service, the system will offer to go through a simple registration procedure at your bank.

Attention! You will have 3 attempts to enter the password. Then the transaction will be rejected.

All information entered by you when paying using the 3-D Secure protocol will be stored only on the bank's server, and, accordingly, hidden from outsiders' access.

Anything new always raises a number of doubts and even a note of mistrust. But the new technology 3-D Secure is the latest, but therefore no less easy to use security protocol. With it, you will be sure that all payments are verified by the bank, and the card is protected from the encroachments of swindlers. But even with such a high level of reliability, take good care of your phone - its loss can lead to theft of funds from your bank card.
 
Top