4 ms·

> they've never supported 3-D Secure That's a feature. It's a horrible system which I wish nobody ever used. I've literally never been able to successfully com

> they've never supported 3-D Secure That's a feature. It's a horrible system which I wish nobody ever used. I've literally never been able to successfully complete a transaction.

Silhouette 10y ago
It's not great in many respects, but it has the compelling advantage of shifting fraud liability from the merchant to someone else. Depending on your market, it may be worth the loss in conversions from activating it. Even if you're in a normally low-fraud market, as every business I work with that takes card payments is, almost anyone taking small value card payments on-line is vulnerable to being used as a card testing engine if their system can be automated. If nothing else, being able to toggle the extra check on temporarily if you become aware that your system is being abused that way is an extra level of security you can apply in a hurry.
fomojola 10y ago
I've experienced 3D secure and verified by visa effectively insulating a merchant from chargeback risk (I'm talking 99% success rates winning chargebacks). You're right, it is incredibly user-hostile and truly painful to integrate (as compared to Stripe) but if you're in a business that sees a lot of people trying to rip you off it works wonders.
- wmf 10y ago
  It works wonders in eliminating chargebacks by also eliminating legitimate customers?
  - detaro 10y ago
    Fewer customers but a lot less fraud could very well be the more profitable and safe option.
    - morgante 10y ago
      Perhaps, but it's important to actually run that calculation. After all, shutting down web payments entirely would totally eliminate fraud—but also cripple your business in the process. Personally, I will never use a 3D Secure system these days. If you require it, I'll simply skip purchasing.
  - ryanlol 10y ago
    You only display it to risky customers?
bct 10y ago
In addition to what everyone else said there are big regional effects: in North America cardholders have often never seen 3D Secure before, they don't know their passwords, and issuers don't care enough to make their authentication pages usable. But in France and the UK it's pretty standard; cardholders are used to it, and issuers make an effort to decide whether it's worth requiring authentication.
vertex-four 10y ago
Which bank are you with? Every bank in the UK seems to have a different implementation of it. My own bank just does some automated fraud detection (I assume picking up my IP address, browser details, etc), while a friend's bank requires the user to enter three random letters from a passcode.

> they've never supported 3-D Secure That's a feature. It's a horrible system which I wish nobody ever used. I've literally never been able to successfully complete a transaction.

Silhouette 10y ago

It's not great in many respects, but it has the compelling advantage of shifting fraud liability from the merchant to someone else. Depending on your market, it may be worth the loss in conversions from activating it. Even if you're in a normally low-fraud market, as every business I work with that takes card payments is, almost anyone taking small value card payments on-line is vulnerable to being used as a card testing engine if their system can be automated. If nothing else, being able to toggle the extra check on temporarily if you become aware that your system is being abused that way is an extra level of security you can apply in a hurry.

fomojola 10y ago

I've experienced 3D secure and verified by visa effectively insulating a merchant from chargeback risk (I'm talking 99% success rates winning chargebacks). You're right, it is incredibly user-hostile and truly painful to integrate (as compared to Stripe) but if you're in a business that sees a lot of people trying to rip you off it works wonders.

wmf 10y ago
It works wonders in eliminating chargebacks by also eliminating legitimate customers?
- detaro 10y ago
  Fewer customers but a lot less fraud could very well be the more profitable and safe option.
  - morgante 10y ago
    Perhaps, but it's important to actually run that calculation. After all, shutting down web payments entirely would totally eliminate fraud—but also cripple your business in the process. Personally, I will never use a 3D Secure system these days. If you require it, I'll simply skip purchasing.
- ryanlol 10y ago
  You only display it to risky customers?

bct 10y ago

In addition to what everyone else said there are big regional effects: in North America cardholders have often never seen 3D Secure before, they don't know their passwords, and issuers don't care enough to make their authentication pages usable. But in France and the UK it's pretty standard; cardholders are used to it, and issuers make an effort to decide whether it's worth requiring authentication.

vertex-four 10y ago

Which bank are you with? Every bank in the UK seems to have a different implementation of it. My own bank just does some automated fraud detection (I assume picking up my IP address, browser details, etc), while a friend's bank requires the user to enter three random letters from a passcode.