3DS is a feature that verifies the cardholder's identity. Since international credit card online payments don't require card passwords or SMS verification codes, there is a risk of fraud due to card information leakage. To address this issue, card issuers may require password input to confirm the identity of the transaction initiator for transactions they consider risky.
In fact, not every transaction requires 3DS authentication. Whether a transaction needs 3DS depends on various factors such as regional regulations, card issuer requirements, and transaction amount (as 3DS authentication has costs, small transactions may be exempted), and needs to be analyzed case by case.
According to EU regulations such as PSD2, if both the cardholder and merchant are in Europe, they must comply with SCA (Strong Customer Authentication), which means 3DS authentication is mandatory.
API Only
Your website needs to handle the 3DS link returned from the transaction and guide customers through 3DS verification.
Checkout
In checkout mode, PayKKa automatically handles the 3DS process and assists your customers in completing 3DS verification.
Payment Link
When using the Payment Link product, PayKKa automatically handles the 3DS process and assists your customers in completing 3DS verification.
Challenge Flow and Frictionless Flow are two processing modes in 3DS2.
| Mode | English Name | Main Features |
|---|---|---|
| Frictionless Flow | Frictionless Flow | No cardholder interaction required, automatic backend authentication |
| Challenge Flow | Challenge Flow | Cardholder participation required in verification (e.g., entering verification code, app confirmation) |
When making API transactions or checkout transactions, you can specify your 3DS preference for the transaction through the field <authentication.challenge_indicator> in the request:
Auto: You have no special preference, and PayKKa will intelligently choose the mode for you
Any: You prefer frictionless mode, trying to avoid requiring customer secondary authentication during the transaction process
Challenge: You prefer challenge mode, hoping for customer secondary identity authentication during the transaction process to prevent fraudulent orders
Please note that this field only expresses your preference and does not guarantee that the order will definitely be processed as challenge or frictionless. Whether a transaction requires 3DS, and whether it uses challenge or frictionless mode, is ultimately determined by the card issuer