3 ms·

There is. Strong Customer Authentication https://en.wikipedia.org/wiki/3-D_Secure https://en.wikipedia.org/wiki/3-D_Secure https://www.mastercard.com/gateway/

by iam-TJ 4y ago

There is. Strong Customer Authentication https://en.wikipedia.org/wiki/3-D_Secure https://en.wikipedia.org/wiki/3-D_Secure https://www.mastercard.com/gateway/payment-solutions/security/strong-customer-authentication.html https://www.mastercard.com/gateway/payment-solutions/securit... https://www.visa.co.uk/partner-with-us/payment-technology/strong-customer-authentication.html https://www.visa.co.uk/partner-with-us/payment-technology/st... https://www.barclaycard.co.uk/business/business-matters/fraud-and-security/sca-deadline https://www.barclaycard.co.uk/business/business-matters/frau...

lovetocode 4y ago
Yup came here to say this exact thing.
artpi 4y ago
Came here for that. Handling those was fun to implement in our payments systems :D
kierenj 4y ago
Yeah - is it not common in the US or something? You can hardly make a card purchase in the UK without it
- xeromal 4y ago
  The US population values convenience over security. Honestly, I'm in that boat. Our CC processes -> Merchants -> Customers probably end up eating the fees somehow, but being able to just insert a card and bounce keeps the machine running. I assume fraud is minimal enough that the profit of convenience outweighs it.
  - Symbiote 4y ago
    You are describing in-person purchases, but the discussion is about online purchases. The EU+UK and Visa/MasterCard have different policies for these. Low-value [1] contactless purchases only occasionally require a PIN, higher-value in-person purchases always do, and online ones require the 2FA system linked above. [1] https://en.wikipedia.org/wiki/Contactless_payment#CVM_limit https://en.wikipedia.org/wiki/Contactless_payment#CVM_limit
    - teknolog 4y ago
      Machine learning has pretty much solved this. They detect almost all outright fraud immediately.
    - xeromal 4y ago
      I believe it's still the same for the US. Some merchants will requires additional verification over a certain amount, but for the most part it is seamless. I've bought things for 700-800$ that don't require any checks.
  - hocuspocus 4y ago
    In person: we've had contactless cards since 2014/2015. And nowadays with Apple/Google/Samsung Pay there's no limit. Online: SCA used to be wonky but today I pick up my phone and touch the fingerprint sensor, done. It's hardly inconvenient, and we enjoy significantly lower transaction fees.
    - xeromal 4y ago
      We had contactless in 2009-2012ish, but it was called Isis and died as soon as the actual Isis started attacking syria. Always was amused by that. I was in salt lake city where it was trialed at Jamba Juices and other fast food merchants.
      - hocuspocus 4y ago
        There's a difference between trials and every bank starting to gradually (and silently, some people got upset) issue contactless cards from 2013 on, and payment terminals being updated everywhere. I remember going to the US in 2015 and 2016 and while Apple/Samsung Pay had started to gain traction, the idea of tapping my card to pay was still science-fiction.
therealmarv 4y ago
It's even mandatory by law for online purchases in EU to have this second factor on online payments.

by iam-TJ 4y ago

lovetocode 4y ago

Yup came here to say this exact thing.

artpi 4y ago

Came here for that. Handling those was fun to implement in our payments systems :D

kierenj 4y ago

Yeah - is it not common in the US or something? You can hardly make a card purchase in the UK without it

xeromal 4y ago
The US population values convenience over security. Honestly, I'm in that boat. Our CC processes -> Merchants -> Customers probably end up eating the fees somehow, but being able to just insert a card and bounce keeps the machine running. I assume fraud is minimal enough that the profit of convenience outweighs it.
- Symbiote 4y ago
  You are describing in-person purchases, but the discussion is about online purchases. The EU+UK and Visa/MasterCard have different policies for these. Low-value [1] contactless purchases only occasionally require a PIN, higher-value in-person purchases always do, and online ones require the 2FA system linked above. [1] https://en.wikipedia.org/wiki/Contactless_payment#CVM_limit https://en.wikipedia.org/wiki/Contactless_payment#CVM_limit
  - teknolog 4y ago
    Machine learning has pretty much solved this. They detect almost all outright fraud immediately.
  - xeromal 4y ago
    I believe it's still the same for the US. Some merchants will requires additional verification over a certain amount, but for the most part it is seamless. I've bought things for 700-800$ that don't require any checks.
- hocuspocus 4y ago
  In person: we've had contactless cards since 2014/2015. And nowadays with Apple/Google/Samsung Pay there's no limit. Online: SCA used to be wonky but today I pick up my phone and touch the fingerprint sensor, done. It's hardly inconvenient, and we enjoy significantly lower transaction fees.
  - xeromal 4y ago
    We had contactless in 2009-2012ish, but it was called Isis and died as soon as the actual Isis started attacking syria. Always was amused by that. I was in salt lake city where it was trialed at Jamba Juices and other fast food merchants.
    - hocuspocus 4y ago
      There's a difference between trials and every bank starting to gradually (and silently, some people got upset) issue contactless cards from 2013 on, and payment terminals being updated everywhere. I remember going to the US in 2015 and 2016 and while Apple/Samsung Pay had started to gain traction, the idea of tapping my card to pay was still science-fiction.

therealmarv 4y ago

It's even mandatory by law for online purchases in EU to have this second factor on online payments.