# Time has run out – 3DS2 is here and retailers need to be on board 
Author:  Pal Sinha, Barnali 
Author URL: https://financedigest.com/author/pal-sinha-barnali
Published: 2022-10-25
Category: BUSINESS
Category URL: https://financedigest.com/category/business
Meta Title: Why 3DS2 Compliance Is Crucial for Payment Security
Meta Description: Discover the importance of transitioning to 3DS2 for improved security, reduced online fraud, and enhanced shopping experiences for both retailers and
URL: https://financedigest.com/time-has-run-out-3ds2-is-here-and-retailers-need-to-be-on-boardhtml

![undefined](https://prod.superblogcdn.com/site_cuid_cm5qst7v3003gwirgwqtxn8i8/images/fd161117-1-1-1736814983423-compressed.jpg)

![Ralf Gladis, CEO, Computop](https://prod.superblogcdn.com/site_cuid_cm5qst7v3003gwirgwqtxn8i8/images/ralf-gladis-450x673-1736814983352-compressed.jpg)

_By_ **_Ralf Gladis,_** _CEO,_ [_Computop_](http://www.computop.com)

The digital payment landscape hit a milestone in October. From the middle of the month, leading credit card companies including Visa and Mastercard stopped accepting 3-D Secure (3DS) version 1 transactions across the world. This is the final nail in the coffin for 3DS1, which in the UK was phased out in March, in a global move to [improve security and enhance frictionless online](https://www.financedigest.com/improving-online-visibility-for-insurers.html "IMPROVING ONLINE VISIBILITY FOR INSURERS") and in-store shopping experiences for consumers.

The move to 3DS2, the main method of card authentication to meet the Strong Customer Authentication (SCA) requirements under the second Payment Services Directive (PSD2), has already seen a 73 percent decline in online payment fraud, according to a recent [report](https://www.computerweekly.com/news/252525623/Security-regulation-cuts-online-payment-fraud-at-73-of-retailers) about SCA from Barclaycard. However, the company also said that 28% of [businesses are still not fully compliant with the regulation](https://www.financedigest.com/2018-is-a-year-of-regulation-is-your-business-ready.html "2018 is a year of regulation – is your business ready?"). Its own [data shows that £2.07 million](https://www.financedigest.com/exclusive-binance-moved-346-million-for-seized-crypto-exchange-bitzlato-data-show.html "Exclusive-Binance moved 6 million for seized crypto exchange Bitzlato, data show") in sales are being declined daily due to payments being routed through non-secure channels.

Retailers have had a long time to ensure they are ready for 3DS2.  In May 2021, the [Financial Conduct Authority extended its deadline for compliance](https://www.financedigest.com/the-lego-blocks-of-saas-how-microservices-can-help-ensure-compliance-with-changing-financial-regulations.html "The Lego blocks of SaaS: how microservices can help ensure compliance with changing financial regulations") by six months, which was a further six month extension, owing to the impact of the pandemic. While it [said](https://www.fca.org.uk/news/statements/deadline-extension-strong-customer-authentication) that it still expected firms to take robust action to reduce the risk of fraud, it wanted to minimise the disruption to customers and merchants.

**Why is 3DS2 important?**

3DS2 is aimed at improving [consumer rights and enhancing online security and delivers significant advantages to both retailers](https://www.financedigest.com/france-leans-on-retailers-to-help-consumers-cope-with-food-prices.html "France leans on retailers to help consumers cope with food prices") and customers. It relies heavily on two-factor authentication in each transaction, which is based on the use of two or more elements categorised as: ‘knowledge’, something that only the [user knows such as a password; ‘possession’, something that only the user possesses such as a smartphone; and inherence, something that is a personal or physical aspect of the user, for example, a fingerprint or retina](https://www.financedigest.com/ai-is-the-new-password-security-and-ease-for-finance-users.html "AI is the new password: security and ease for finance users "). These must be independent from each other.

From a security perspective, a password could be discovered during a phishing attack, or a smart device could be stolen, for example, but the biometric feature can only ever be linked to the person, which is why [biometrics make a major contribution to the secure payment](https://www.financedigest.com/the-future-of-biometrics-in-payments.html "The Future of Biometrics in Payments") process and are vital to 3DS2.

**Reasons for compliance**

It has clearly been a challenge for many merchants to [invest the time and money in the resources that are needed](https://www.financedigest.com/5-reasons-why-women-need-to-get-into-property-investing.html "5 Reasons why women need to get into property investing") to comply with the protocol, and it is not surprising that so many are still struggling to administer it correctly. What retailers [need to consider now is the balance](https://www.financedigest.com/regulators-need-to-strike-the-balance-between-protection-and-strangulation.html "REGULATORS NEED TO STRIKE THE BALANCE BETWEEN PROTECTION AND STRANGULATION") between the perceived inconvenience and cost of 3DS2 and the very real prospect of losing precious sales.

The other issue that non-complying [retailers will have to face](https://www.financedigest.com/after-christmas-relief-uk-retailers-face-2023-reality-check.html "After Christmas relief UK retailers face 2023 reality check") is reputational damage. [Customers whose payments](https://www.financedigest.com/stay-ahead-of-the-curve-and-meet-your-customers-payments-needs.html "STAY AHEAD OF THE CURVE AND MEET YOUR CUSTOMERS PAYMENTS NEEDS") are refused because a retailer is not compliant will not hesitate to quickly move their business elsewhere. If they choose to vent their frustrations online, the ripple effect could be potentially devastating.

Retailers who are compliant are reporting significant drops in fraud since the rollout, [according to the Barclaycard study](https://www.financedigest.com/investors-seek-higher-returns-as-catastrophe-bond-issuance-slows-during-q2-according-to-aon-study.html "INVESTORS SEEK HIGHER RETURNS AS CATASTROPHE BOND ISSUANCE SLOWS DURING Q2, ACCORDING TO AON STUDY"), and because consumers in the UK have become accustomed to two-factor authentication during transactions, fewer are abandoning online baskets, which, in turn, is increasing sales.

It’s important for compliant retailers to [deliver as much information as possible](https://www.financedigest.com/limitless-possibilities-delivering-disruption-with-iot.html "Limitless possibilities: Delivering disruption with IoT") to enable frictionless checkout. Rather than just providing a [response to the basic data](https://www.financedigest.com/aon-introduces-new-cyber-solution-in-response-to-eu-regulation-on-data-protection.html "Aon introduces new cyber solution in response to EU regulation on data protection") points that are demanded by 3DS2, if they put more into their payment string, they will be rewarded with less frequent authentication requests. It might require a few further tweaks to their [ERP and shop systems](https://www.financedigest.com/is-your-erp-system-industry-4-0-compatible.html "Is your ERP system Industry 4.0 compatible?"), but in the long run, and to encourage more conversions, it is worth it.

**Exemptions are few**

While 3DS2 processes are not mandatory in the UK, SCA is, and 3DS2 is regarded as the easiest and most effective solution to comply with it. For retailers who are still resisting compliance, it is worth [knowing which payments](https://www.financedigest.com/the-end-of-payments-as-we-know-it.html "The end of payments as we know it") are exempted – although these are few. They include: merchant-initiated transactions which are initiated by retailers at a later date with the consumers consent; low [value payments](https://www.financedigest.com/2021-predictions-realising-the-value-of-payments-transformation.html "2021 Predictions: Realising the Value of Payments Transformation"), under £45, but only if the retailer doesn’t ordinarily struggle with fraud, or their payment service provider has demonstrably low levels of fraud on its platform; if a consumer regularly uses an eCommerce site, for example to do their weekly grocery shop, and ‘whitelists’ the site; corporate payments made between companies, but not individuals or cards issued to employees; and direct debits, such as subscription payments, which typically will only require SCA for the first payment.

**Seismic** [impact on consumer payments](https://www.financedigest.com/the-impact-of-late-payments-on-sme.html "The Impact Of Late Payments On SME")

In the broader ecosystem it is not only retailers, but payment service providers and [banks that have had to make changes to accommodate and support](https://www.financedigest.com/comserve-to-support-allied-irish-bank-nationwide.html "COMSERVE TO SUPPORT ALLIED IRISH BANK NATIONWIDE") 3DS2. It is widely acknowledged that this introduction has been as seismic to consumer payments as [Chip & PIN](https://www.financedigest.com/chip-and-pin-in-the-us-why-all-the-confusion.html "Chip and PIN in the US – why all the confusion?") were when introduced in the UK in 2006. That is why there have been delays, and why the FCA has been lenient in forcing all parties to comply. Ultimately, however, 3DS2 is [designed to benefit all consumers](https://www.financedigest.com/western-digital-transforms-the-mobile-experience-with-new-high-performance-solutions-designed-to-address-todays-and-tomorrows-consumer-demand-for-high-quality-content.html "Western Digital Transforms the Mobile Experience with New High-Performance Solutions Designed to Address Today’s and Tomorrow’s Consumer Demand for High-Quality Content"), and retailers. It promises to drastically [reduce fraudulent payments](https://www.financedigest.com/how-can-you-reduce-the-risk-of-fraud-in-b2b-payments.html "How can you reduce the risk of fraud in B2B payments?") and make shopping a safer experience, so it is vital that the 28% of businesses that are still not fully on-board, take the final steps before their sales start to plummet and customers begin to question why their payments are being declined.


---
This blog is powered by Superblog. Visit https://superblog.ai to know more.
---