3-D Secure is an authentication protocol for online card payments that adds a verification step between the cardholder and their issuing bank at the moment of purchase, on top of the card details themselves.
Definition
3-D Secure is an authentication protocol for online card payments that adds a verification step between the cardholder and their issuing bank at the moment of purchase, on top of the card details themselves. The current version, 3DS2, can verify a transaction silently using device and behavioural data (a "frictionless" flow) or, when the bank wants more assurance, challenge the cardholder with a one-time code, a banking-app approval or a biometric.
A successful 3DS authentication generally shifts liability for fraudulent transactions from the merchant to the issuer.
For iGaming operators, 3DS is a balance between fraud protection and conversion. The challenge flow adds friction at the deposit step and loses some legitimate payments — abandoned when the code is slow, the app is not installed, or the user gives up — while frictionless authentication and liability shift reduce chargebacks and fraud losses.
In context
3DS behaviour varies widely by market and issuer, which is why payment teams analyse it at BIN and country level. In some regulated markets (notably the EU/UK under strong customer authentication rules) 3DS is effectively mandatory for most transactions; elsewhere it is applied selectively based on risk.
An operator's PSP and acquirer setup determines whether 3DS is invoked always, never, or by a risk engine, and whether declines can be retried without it.
The practical levers are: routing transactions to acquirers and 3DS flows that maximise the frictionless rate for each BIN and GEO; using exemptions where the rules allow (low value, low risk, trusted beneficiary) to skip the challenge; retrying a soft decline through an alternative route; and offering local alternative payment methods (instant bank transfer, e-wallets, vouchers) in markets where card 3DS friction is high, so a user who abandons a 3DS challenge still has a way to fund. Affiliates feel 3DS indirectly: a brand with poor 3DS conversion in a GEO shows a lower deposit-to-registration ratio there, which reduces the value of traffic sent to it regardless of the affiliate's own funnel quality.
Worked example
An operator's Brazilian card approval is 61%, with analysis showing most losses at the 3DS challenge step. It adds Pix as the primary local method and routes card traffic to an acquirer with a higher frictionless rate.
Overall deposit success rises to 86%, and the affiliate channel for Brazil shows a better deposit-to-registration ratio without any change in traffic.
Related terms
Frequently asked questions
Browse the full iGaming & affiliate glossary — hundreds of EN/RU terms with examples.
← Back to glossary