Enhance Security With 3D Secure on iPOSpays

3D Secure (3DS) is a global security standard designed to add an extra layer of protection to online card transactions. By requiring additional authentication, 3DS significantly reduces the risk of fraudulent activity. We’ve integrated this advanced security feature into Send Payment Link, Hosted Payment Page (HPP), and the Generic Hosted Payment Page (GHPP), ensuring the highest standards of payment security and providing customers with a safer online transaction experience.

Enabling 3D Secure for Merchants

For this feature to work, the ISO must activate the 3DS for their merchants on the iPOSpays portal.

Prerequisites

To enable 3DS for all necessary card brands (Visa, Mastercard, American Express, etc.), the following information is required from your sponsor bank(s).

If details for a specific brand are not submitted, 3DS will not be activated for that brand.

What is the Acquirer BIN?

It is a 6-digit number assigned to the Acquirer, by the card schemes, so the Acquirer can process payments. Each merchant will have a unique acquirer BIN for Visa, Mastercard, AMEX, and Discover.

  • First digit identifies the scheme
  • Visa begins with 4xxxxx
  • Mastercard begins with 5xxxxx and recently added 2xxxxx-series BINs
  • AMEX begins with 3xxxxx
  • Discover begins with 6xxxxx

Acquiring banks/processors have a BIN assigned to them from each card network. This identifies the acquirer/processor to the networks and holds the acquirer/processor financially responsible for settlement and risk.

An Acquirer BIN IS NOT an ICA. An ICA is a 4 - 6-digit number assigned by MC but is a level (hierarchy) above the Acquirer BIN.

What does the merchant need to provide?

  • 3DS requires the merchant acquirer BIN for each card scheme used for 3DS.

  • Every merchant with a merchant account will use the ‘Acquiring BIN’ for each card scheme in order to transaction/process payments.

  • The merchant processor/gateway/ISO/Acquirer will assign the Merchant a Merchant ID and will assign the Acquirer BIN for that merchant to accept and process payments.

  • The gateway/processor most likely has direct access to the Acquirer. For that processor/gateway to process payments, the Acquirer would have to assign them an Acquirer BIN (assigned to that Acquirer by each card scheme).

Why is it important for 3DS/CCA?

  • During 3DS authentication, the Acquirers Bank Identification Number (Merchant.acqBINfield) is required in the Verify Enrollment Request (VEReq). This field must be the merchant’s acquiring BIN for each card network.

  • The Merchant Identifier (ID) Number (Merchant.merID field) must be the Merchant ID assigned by the acquirer to the merchant for use in Visa, MC, Discover, and AMEX transactions.

  • The Merchant BIN field validates the merchant as a participating member of 3DS. If the BIN field is incorrect, the merchant will NOT receive 3DS program benefits.

  • If this value is not known, merchants need to ask their acquirer or merchant processor representative.

Who Can Help Find the Acquirer BINs?

The merchant can explain their relationship (direct or indirect) with their Merchant Acquirer.

  • The merchant uses a processor, ISO/MSP or gateway and this will help understand which service provider can furnish the Acquirer BINs.

  • An ISO/MSP is a 3rd party provider and NOT bank association members, and would be registered by the acquirer (using the acquirer’s assigned BINs from the networks)

The ISO is often the service provider best known by the merchant. Reviewing the ISO’s web site should expose the actual acquirer and the ISO should have contacts at this bank.

Send the Bank Identification Number (BIN) information below for ISO’s each sponsor bank

Acquirer IDDescription
Visa Acquirer IDThis is the Visa BIN . All Visa BINs will begin with ‘4’ and are 6 digits long. (4XXXXX).
MC Acquirer IDThis is the MasterCard SecureCode BIN . All BINs are 6 digits long and can begin with any digit since 2022.
JCB Acquirer IDThis is the JCB BIN . JCB BINs are typically 8 digits in length.
AMEX Acquirer IDThis is the Amex SE# or BIN . Amex BINs are 11 digits in length.
Diners or Discover Acquirer IDThis is the Diners or Discover BIN . All BINs are 6 digits long.
China Union Pay (UPI) Acquirer IDThis is the UPI BIN .
AMEX MIDA Merchant ID, commonly abbreviated as MID, is a 15 digit unique identification number assigned to a business or merchant by a payment processor.

Please ensure that the provided information is accurate and up-to-date. Once obtained, kindly send it to product@dejavoo.io.

How to Enable:

In order to enable 3DS, first you would need to enable the integration for the Merchant’s profile and then, enable the parameter on each desired TPN within this Merchant’s profile.

For Existing Merchants:

  • Login to the iPOSpays portal using an ISO account.
  • Select the Merchant Module
  • Use the search box at the top to find and select the merchant for whom you wish to enable 3DS.
  • Click on the merchant DBA and select Edit Merchant.
  • Click on the Integrations drop-down menu and select 3D Secure.
  • Click Save for the changes to take effect.

For New Merchants:

  • Login to the iPOSpays portal using an ISO account.
  • Select the Merchant Module
  • Click on the menu button on the top left corner inside the module. Select Add Merchant.
  • Fill out all required fields
  • Click on the Integrations drop-down menu and select 3D Secure.

Enable from “Edit Parameter” for the TPN:

  • Click on S.T.E.A.M, then Edit Parameters.
  • Use the search box to find and select the TPN for which you desire to enable this feature. Then, click Edit Parameter.
  • Click on the Integrations Tab and enable 3D Secure.
  • Click Save and perform a parameter update for the changes to take effect.
Enable 3D Secure from Edit Parameter -> Integrations
Enable 3D Secure from Edit Parameter -> Integrations

How does 3D Secure work on iPOSpays?

  • Transaction Initiation: When a customer enters their card details on our secure hosted payment page (HPP) or generic hosted payment page (GHPP), their browser sends a request to our servers.
  • Authentication Request: Our system forwards this request to their card issuer, who determines if 3DS authentication is required based on specific factors.
  • Cardholder Verification: (if required): If 3DS authentication is necessary, the card issuer will redirect the customer to their secure authentication page. The customer will be prompted to provide additional authentication details to verify their identity using a one-time password sent to the customer’s phone number.
  • Transaction Completion: Once their identity is verified by the card issuer, the transaction is completed securely.

Benefits of 3D Secure on iPOSpays

The implementation of 3DS will provide several benefits to ISOs and their merchants:

  • Enhanced Security: Protects customer’s sensitive card information from unauthorized access.
  • Reduce Fraudulent Transactions: 3DS adds an extra layer of verification during online transactions, making it harder for fraudsters to use stolen card information.
  • Increase Authorization Rates: By verifying the cardholder’s identity, 3DS can help reduce the number of declined transactions due to suspicion of fraud.
  • Improve Compliance: Many card networks mandate 3DS compliance for card-not-present transactions. Implementing 3DS ensures adherence to these regulations.
  • Reduced Chargebacks: Fraudulent transactions often lead to chargebacks, which incur fees for merchants. Implementing 3DS can significantly reduce these costs.
  • Improved Customer Confidence: Increased security fosters trust among customers, leading to a better overall shopping experience.

Compatibility

This feature works on the following.

  • Send Payment Link
  • Hosted Payment Page
  • Generic Hosted Payment Page