3DS Authentication: A Quick Guide for UK Businesses

3D Secure (3DS) authentication is widely used to help reduce online card fraud for ecommerce businesses, but how does it work and how can you implement it without impacting conversion rates?

In this guide, we've explained what 3DS authentication is, how the process works step by step, and what it means for UK businesses looking to balance fraud prevention with customer experience.

We’ve also explained how Wise Business can help you manage and move business funds efficiently when accepting payments from customers in the UK and internationally.

Register for Wise Business ✍️

Key Takeaways

Discover Wise Business 🔍

What is 3D Secure (3DS)?

3D Secure (3DS) stands for "Three-Domain Secure"^1,2. It involves:

• The merchant’s bank
• The card network (e.g. Visa or Mastercard)
• The cardholder’s issuing bank

It is designed to verify that the person making a payment is the legitimate cardholder.

How Does 3DS Verification Work?

When a customer makes a payment:

1. The payment gateway sends transaction details to the card network
2. The issuing bank assesses the risk
3. Low-risk transactions may be approved without interruption
4. Higher-risk transactions may require customer verification

The Purpose of 3DS Authentication

3DS is used to help reduce unauthorised transactions by adding an extra verification step. This can support fraud prevention efforts and reduce the likelihood of chargebacks.

Benefits of 3DS Authentication for UK Businesses

Enhanced Fraud Prevention

3DS provides an additional layer of security for card-not-present transactions by verifying that the customer is the legitimate cardholder before the payment is approved.

This helps detect and block suspicious activity in real time, reducing the likelihood of fraudulent transactions reaching completion.

As online fraud continues to evolve, using 3DS can play an important role in protecting revenue and minimising losses associated with unauthorised payments.^1,2

Reduced Liability for Merchants

When a transaction is successfully authenticated using 3DS, liability for certain types of fraudulent chargebacks may shift from the merchant to the card issuer.

This means that if a payment later turns out to be fraudulent, the financial responsibility often sits with the issuing bank rather than the business.

This liability shift can provide an additional layer of financial protection and reduce the operational burden of managing disputes.^1,5

Increased Consumer Confidence

Introducing authentication measures such as one-time passcodes or biometric checks can reassure customers that security checks are actively protecting their payment.

Visible safeguards at checkout can help build trust, particularly for new or high-value transactions, and may encourage customers to complete purchases with greater confidence knowing their financial information is being handled securely.^2,4

Compliance with Regulations

3DS is widely used to help businesses meet Strong Customer Authentication (SCA) requirements under PSD2, which mandate additional verification for many online payments in the UK and Europe.

By implementing 3DS, businesses can align with regulatory expectations, reduce the risk of non-compliance, and ensure that transactions meet industry security standards designed to combat fraud.^2,3

How 3DS authentication works

1. Initiating an Online Purchase - The customer enters their card details at checkout.

2. Authentication Request - The payment processor sends a request for authentication via the card network.

3. Issuer Risk Assessment - The issuing bank evaluates the transaction based on factors such as amount, location, and behaviour.

4. Customer Verification (if required) - The customer may be asked to verify their identity using either a one-time passcode, banking app approval and/or biometric authentication.

5. Transaction Outcome - The transaction is either approved or declined and the result is returned to the merchant.

Understanding Common 3DS Failures

3DS authentication failures can happen for a range of reasons, and they don’t always indicate fraud. In many cases, they’re caused by simple user errors or temporary technical issues during the verification step.

For example, entering an incorrect one-time passcode (OTP) or missing the expiry window can cause authentication to fail, as these codes are often time-sensitive.¹ Similarly, if a customer’s contact details (such as phone number or email) are outdated, they may not receive the verification code at all.^1,4

Technical factors can also play a role. Browser settings like pop-up blockers may prevent the authentication window from loading, while older devices or unsupported browsers can interrupt the process entirely.^1,7 In some cases, network issues, outdated payment integrations, or temporary outages on the issuing bank’s side can stop authentication from completing successfully.^1,3

Additionally, banks may decline authentication if a transaction is flagged as unusual based on location, spending behaviour, or use of tools like VPNs—even if the customer enters the correct details.⁴

Understanding these common causes can help businesses diagnose issues more quickly and reduce unnecessary payment failures.

How to provide a better customer experience while also implementing 3DS authentication

Clearly set expectations before authentication is triggered

One of the biggest causes of checkout drop-off during 3DS is confusion. Customers may not expect to be redirected or asked for additional verification, which can feel disruptive or suspicious.

To reduce this friction, clearly communicate during checkout that an extra security step may be required. For example, messaging like “You may be asked to verify your payment with your bank” helps prepare users and increases the likelihood they’ll complete authentication rather than abandon the transaction.

Design clear, actionable recovery paths for failed authentication

When 3DS fails, customers are often left unsure what went wrong or what to do next. This can lead to lost sales even when the issue is easily fixable.

Providing specific, actionable guidance—such as prompting users to retry, request a new code, or check their banking app—can significantly improve recovery rates. The goal is to turn failed authentication into a recoverable moment rather than a dead end in the checkout journey.¹

Optimise the authentication experience across devices and browsers

3DS flows often involve redirects, pop-ups, or embedded frames, which can behave differently across devices. Poor optimisation—especially on mobile—can cause authentication steps to fail or appear broken.

Ensuring compatibility across modern browsers, supporting mobile-first design, and minimising loading delays can help maintain a smooth experience. This is particularly important as a large proportion of ecommerce transactions now take place on mobile devices.^1,4

Use 3DS intelligently to minimise unnecessary friction

Modern 3DS (particularly 3DS2) allows low-risk transactions to be approved without customer interaction through risk-based authentication.

Working with your payment provider to apply 3DS selectively—only when needed—can help reduce unnecessary interruptions while still protecting against fraud. This balance is key to maintaining both strong security and high conversion rates.^1,4

Provide alternative payment options as a fallback

Even with optimisation, some customers will still fail authentication due to bank-side issues, device limitations, or incorrect details.

Offering alternative payment methods—such as digital wallets or bank transfers—gives customers another path to complete their purchase. This can help recover revenue that would otherwise be lost due to 3DS-related friction.

Ensure customer data and payment flows are kept up to date

Authentication often relies on accurate customer details held by the issuing bank, such as phone numbers for OTP delivery. If these are outdated, verification can fail even when the customer is legitimate.

Encouraging customers to keep their details up to date, and ensuring your payment integrations are correctly configured and maintained, can reduce avoidable authentication failures and improve overall success rates.¹

Manage Your Business Payments More Efficiently with Wise

Managing payments from customers in multiple countries can involve currency conversion and operational complexity.

Wise Business offers a way to hold and manage funds in multiple currencies and send payments internationally with transparent fees.

With Wise Business, you can:

• 🌍 Send money to 140+ countries at the mid-market exchange rate with no hidden fees or sneaky exchange rate markups (product availability varies by region; please check the Wise website for local availability)

• 📥 Receive payments using 8+ local account details for 24 currencies

• 💰 Hold money in 40+ currencies

• ⚡ Use the batch payments tool to create and send up to 1,000 payments in a single transfer

• 👥 Run payroll and make international payments for up to 1,000 employees all over the world

• 💳 Get business debit cards with 0.5% cashback for you and your team to keep track of team expenses and spend all over the world

• 🏢 Manage cash in 55+ currencies across international offices from a single business account and move money between business accounts in seconds (exact speeds can vary depending on individual circumstances and may not be the same for all transactions)

• 🔄 Connect and sync every business transaction to your favourite accounting software, including Xero, Quickbooks, and more

• 🔐 Create your own payment approvals process to manage your team better with customised access for different team members

• 📑 Create custom professional invoices and schedule invoice payments for future dates

• 📈 Earn returns on GBP, USD and EUR with Wise Interest (Capital at risk, growth not guaranteed. Your money is at risk if governments default or interest rates go negative. Visit https://wise.com/gb/interest/ to find out more)

• 🔗 Create payment links and QR codes to get paid easily

• ⚙️ Automate payouts with the Wise API (comes with 24/7 customer support, a sandbox account to test integrations, API tokens, and clear documents on how to implement and make the most of our API)

Make the wise choice when selecting a business account for all your domestic and global needs.

Be Smart, Get Wise.

Register for Wise Business ✍️

FAQs

What is the difference between 3DS1 and 3DS2?

3DS2 allows more transaction data to be shared, enabling better risk assessment and fewer customer interruptions compared to 3DS1^1,2.

How can I activate 3D Secure?

Most providers include 3DS by default. You can typically manage settings within your payment provider dashboard.

What should I do if authentication fails?

Advise customers to check their details, update their banking app, or contact their bank directly.

Are there fees associated with 3DS?

Fees depend on your payment provider. Some include it within transaction pricing, while others may charge per authentication.

How does 3DS relate to SCA?

3DS is one method used to meet SCA requirements, which require two-factor authentication for many online payments^1,2.

Sources:

1. A Complete Guide to 3D Secure Authentication - Takepayments
2. 3D Secure Authentication Explained - GoCardless
3. Strong Customer Authentication - Stripe Docs
4. 3D Secure Guide - Adyen
5. A Guide to 3D Secure - Dojo

Sources last checked on 30 March 2026