# 3D Secure

> 3D Secure is a security protocol in which the bank that issued a card confirms the cardholder's identity during an online payment. The bank asks for a one-time SMS code or an approval in its mobile banking app. The aim is to stop fraudulent payments made with stolen card details.

- URL: https://radkod.com/en/glossary/3d-secure
- Publisher: RadKod
- Published: 2026-07-30

## What is 3D Secure?

3D Secure is an extra verification step added to online card payments. The card number, expiry date and security code are not enough on their own. The issuing bank also checks that the person paying really is the cardholder. Visa calls it Visa Secure and Mastercard calls it Mastercard Identity Check. The protocol's specifications are managed by EMVCo.

## How does it work?

Here is an everyday case. A customer enters card details on your site and presses pay. The [virtual POS](/en/glossary/virtual-pos) provider routes the transaction to the issuing bank. The bank sends a one-time code to the customer's phone or asks for approval in its banking app. If the customer approves, the payment goes ahead. Someone who stole the card cannot finish, because they do not have the phone.

The newer version, 3D Secure 2, sends the bank more information about the device and the purchase. For some low-risk payments the bank may approve without an extra step. This is called a frictionless flow. The bank decides when a code is required.

## Why does it matter?

For customers, it lowers the risk of card misuse. For sellers, it lowers the risk of disputes and chargebacks from fraud. For authenticated payments, liability for fraud-related disputes usually shifts to the issuing bank, but the rules vary by card scheme and contract. Check your merchant agreement and ask your provider. We build checkout with 3D Secure in our [e-commerce](/en/services/e-commerce) projects. See [payment gateway integration](/en/blog/payment-gateway-integration) for more.

## Frequently asked questions

### Can I take payments without 3D Secure?

Some providers allow it under certain conditions, but then most of the risk from fraud disputes can stay with the seller. In Turkey, most online card payments go through 3D Secure.

### Will 3D Secure lower my sales?

The extra step can make some customers drop off. 3D Secure 2 reduces it for low-risk payments, and a fast, clear checkout page keeps the loss small.

### What if the SMS code never arrives?

The payment does not complete and the customer has to try again. We make sure the site shows a clear error message and keeps the basket intact.