THREE DS 2.0 PROTOCOL

3D Secure 2.0 (3DS 2.0) is the latest update of the 3D Secure authentication protocol, which allows issuing banks to verify card owners during the transaction process. Verifying card owners can transfer liability for fraud disputes away from the merchants who utilize 3DS.

This requires merchants to send additional data with each transaction to help the issuing bank/network determine if the cardholder is actually making the transaction. If there is a mismatch, then the bank will respond asking the customer for additional user authentication data.

The issuer’s 3D Secure service provider assesses the transaction risk.

• If the transaction is determined as high-risk, the transaction goes through a challenge.

• If the transaction is deemed as low-risk, no further action is required on the cardholder’s end. The issuer sends the authentication result to the merchant, who in turn submits the transaction for authorisation with a flag indicating the authentication result.

• In the Indian market, however, we have a mandatory 2 factor authentication in place.

JUSPAY supported partners for web-redirection based card flows on 3ds2 protocol

1. Cybersource

2. PayU

3. Razorpay

4. GoCashfree

5. TPSL

6. MPGS

7. Pinelabs

8. PhonePe

9. CC Avenue

Merchant actionable: Please check with your GW SPOC, if 3DS 2.0 processing and configurations are enabled for your MID

JUSPAY supported partners for native OTP based card flows on 3ds2 protocol

1. Razorpay

2. PayU

3. Paytm

API Integration based merchants looking for 3ds2 complaint native OTP flows can pass these details to Juspay in Txns API

/txns : Key: transient_info, Value: {“deviceInformation” : JSON}

Mandatory Params:

colourDepth :: Int
javaEnabled :: Boolean
cookieEnabled :: Boolean
javaScriptEnabled :: Boolean
language :: String
screenHeight :: Int
screenWidth :: Int
timeZone :: Int

ALL Params:

{ acceptHeaders :: NullOrUndefined String ,
colourDepth :: Int ,
javaEnabled :: Boolean ,
javaScriptEnabled :: Boolean ,
cookieEnabled :: Boolean ,
language :: String ,
screenHeight :: Int ,
screenWidth :: Int ,
ipAddress :: NullOrUndefined String ,
userAgent :: NullOrUndefined String ,
timeZone :: Int ,
acceptContent :: NullOrUndefined String ,
threeDSecureChallengeWindowSize :: NullOrUndefined String ,
mobilePhoneModel :: NullOrUndefined String }