To ensure the security of online purchases, the customer may be required to complete a 3D Secure (3DS) authentication. This security step is designed to confirm that the customer is indeed initiating the online transaction. It is not always required to complete an online payment.
Context
Transactions made with a physical bank card (at a terminal or ATM) are secured by the card’s PIN code, which verifies that the person making the transaction is the cardholder. Since this type of security is not present for online transactions, 3DS authentication allows the customer to confirm via their app that they are the originator of the transaction — whether using a physical card, a virtual card, or for a one-time payment.
3DS authentication is triggered once the payment form has been completed and the card information submitted. If 3DS is required, the customer will be prompted to open their app to validate the transaction through strong authentication.
A push notification will be instantly sent and will redirect the customer to the 3DS validation screen. If the customer does not receive the notification, they can go directly to the "Payments" tab in the app. The 3DS validation will also appear automatically when opening the app.
Validation
3DS validation allows the customer to confirm the online transaction within 8 minutes using strong authentication (such as a 4-digit code or fingerprint) and to select the payment source. If the customer wishes to cancel the transaction, they must tap “Reject payment”.
If any card settings required for the transaction need to be enabled, they will be shown on the 3DS authentication screen:
- If one or more features need to be activated to authorize the transaction (e.g., online payments or international payments), the customer will be invited to activate them from the 3DS validation screen to validate it ;
- If the card used for the transaction is currently suspended, the customer will be able to reactivate it from the 3DS screen in order to validate the 3DS.
The customer must tap the button to activate the card and the required features in order to validate the transaction.
They can then manually disable those features again once the transaction is completed, if they wish.
If the 3DS authentication is not completed within the allotted time, the customer will no longer be able to access the validation, and the transaction will be automatically declined.
Security
3D Secure authentication confirms that you are the one initiating an online transaction. No Sumeria advisor will ever ask you to validate a 3DS authentication or to make a payment. If in doubt, do not validate anything and contact our customer service immediately.