3-D Secure is a protocol that is used as an additional layer of security for online credit and debit cards, two-factor user authentication. The technology was developed for the Visa payment system in order to improve the security of online payments within the Verified by Visa (VbV) service. Services based on this protocol have also been accepted by Mastercard payment systems under the name Mastercard SecureCode (MSC) and JCB International as J/Secure, AmEx as SafeKey, Mir (NSPK) as Mir Accept. American Express added 3-D Secure on November 8, 2010 as American Express Safe Key in select markets and continues to roll it out in additional markets. The Mir payment system initially licensed the implementation of the first version of the protocol from VISA. In 2016, Mir independently implemented support for 3D-Secure 2.0 and began to provide it under the name MirAccept.
3-D Secure adds another authentication step to online payments, allowing merchants and banks to further verify that the cardholder is making the payment to protect against fraudulent transactions.
The 3-D Secure code should not be confused with the CVV2 or CVC2 code that is printed on the back of the card.
3-D Secure is not an absolute protection of money on the card during CNP operations (card not present), for example, a one-time code can be intercepted by computer viruses. Also, not all banks support 3-D Secure technology, so many goods and services can be paid for by card without any confirmation code, which limits the effectiveness of this technology during the transition period.
As of July 2016, 3D-Secure was supported by banks from 195 countries.
