Identity authentication services required for card payment

EMV 3-D Secure
（3D Secure 2.0）

It is a personal authentication service to prevent fraud due to theft of information such as credit card numbers, and is recommended by international card brands to introduce it in order to perform Credit card payment safely.
Each credit card company determines the risk of fraud using the cardholder's device information, etc., and requires the cardholder to enter a password if necessary to ensure the safety of the transaction.

* The name differs depending on the brand, but it is collectively called "EMV 3-D Secure (3D Secure 2.0)".

Challenges like this can be overcome.
It can be solved

I want to take security measures

Benefits of EMV 3-D Secure (3D Secure 2.0)

fraud Prevention

Prevent credit card fraud by detecting fraudulent transaction risk

chargeback Risk aversion

Avoid chargeback risk burden when fraudulent transactions are discovered in authenticated (or credit card company/member not participating*) transactions.

Cart abandonment improvement

Reduction of password entry burden through risk-based authentication and improvement of UX to improve abandonment (cart abandonment) at the time of payment (compared to 3D Secure 1.0)

* The EC business operator has conducted a transaction via EMV 3-D Secure (3D Secure 2.0), but authentication is not performed depending on the status of the card company or the cardholder's settings.

Background to EMV 3-D Secure (3D Secure 2.0)

With the expansion of non-face-to-face transactions, the damage caused by credit card fraud is also on the rise, and the realization of a safe credit card usage environment is regarded as an issue. In the Credit Card Security Guidelines, which are positioned as practical guidelines for the obligation of security measures stipulated in the Installment Sales Act, related businesses are required to take "multifaceted and multilayered measures," and EMV 3-D Secure is stipulated as one of the specific measures for "personal authentication."

Four Specific Measures

Identity authentication
Example) 3D Secure

Voucher Verification
Example) Security Code

Attribute / behavior analysis
e.g. Fraud detection system

Shipping information
e.g. Fraudulent address detection

Features of EMV 3-D Secure (3D Secure 2.0): Authentication Conductor

Identity authentication is a mechanism to prevent fraud by implementing the identity verification process, such as entering a PIN at a Credit card payment at a physical store, even on non-Card Present Transactions sites such as e-commerce sites. In EMV 3-D Secure (3D Secure 2.0), the authentication process is divided into three patterns by "risk-based authentication" that determines the degree of risk based on device information, behavioral information, and attribute information used in online shopping.

Features of EMV 3-D Secure (3D Secure 2.0): chargeback Risk Burden

Among transactions that implement EMV 3-D Secure (3D Secure 2.0), if a fraud occurs in (1) successful authentication or (2) a transaction in which the credit card company or the member has not ^{participated*}, in principle, the credit card company bears the risk.

	status	Risk Burden
1	EMV 3-D Secure Authentication Successful	Merchants are exempt from liability ^*1
2	Member's card issuer or member has not joined EMV 3-D Secure	Merchants are exempt from liability ^*1
3	EMV 3-D Secure Authentication Out of Trade	Merchants are not exempt from liability

*1 Even if EMV 3-D Secure authentication is performed at the time of card registration, it is not subject to liability unless EMV 3-D Secure authentication is also performed at the time of subsequent transactions.
*2 Based on the content of the contract with the contract card company (acquirer).

EMV 3-D Secure (3D Secure 2.0) brands and service names

International brands refer to their respective services by their respective names:

	Service Name
Visa	Visa Secure
Mastercard	Mastercard ID check
JCB	J/Secure
Amex	American Express Safekey
Diners	ProtectBuy

Precautions

About EMV 3-D Secure (3D Secure 2.0) compatible brands

VISA, Mastercard, JCB, American Express ^*, and Diners brands are supported. For other credit card brands, it will be a normal transaction without identity verification.
* If you are using merchant acquiring service, it is a condition of use that you have a contract with JCB Co., Ltd.
If you are contract directly with your credit card company, you must have a contract with American Express International, Inc., Inc. as a condition of use.
Points to note after changing the amount of EMV 3-D Secure (3D Secure 2.0)

If you change the amount of payment using EMV 3-D Secure (3D Secure 2.0), you will be payment without using 3D Secure.
Therefore, if you receive a chargeback from the credit card company at a later date by fraud, etc., you may have no choice but to accept it.
EMV 3-D Secure (3D Secure 2.0) Installation Cost

The introduction cost is an individual estimate. Please contact us for details.
Availability of EMV 3-D Secure (3D Secure 2.0)

Whether or not it can be introduced depends on the development environment such as EC cart. Please check with the development company.
Detection Accuracy of EMV 3-D Secure (3D Secure 2.0)

Although there is a possibility that a credit card fraud may not be detected, we recommend that you consider introducing it, including deduction measures in case it is not detected.