🛡️How to Interpret 3DS-Verified Transactions

✅ Exempting Customers from 3DS Processing

🕒 When to Exempt a User from 3DS

Exempting a user from 3DS allows transactions to process without additional authentication, which:

  • Reduces friction
  • Improves conversion rates

This is typically used for:

  • Low-risk transactions (e.g., small purchases)
  • Trusted, repeat customers
🚧

Note:

Some issuing banks, especially in the EU, may override 3DS exemptions, leading to declined transactions.


🛠️ How to Exempt a User from 3DS

Steps:

  1. Navigate to the customer's record
  2. Select Exempt 3DS Processing
Exempt 3DS

🔍 How to Interpret 3DS Transactions

🧾 Key Definitions

  • CAVV – Cardholder Authentication Verification Value
  • ECI – Electronic Commerce Indicator
  • DS Transaction ID – Unique ID for the transaction
  • Version – 3DS protocol version used
  • Authentication Status – Whether authentication succeeded or failed
  • Transaction Status – Outcome of the issuer's authentication process
  • Transaction Status Reason – Code indicating why a transaction was approved, rejected, or flagged
  • Access Control Server (ACS) – Handles 3DS authentication between issuer, merchant, and cardholder

📊 Breakdown of Transaction Statuses

StatusDescriptionScenarios
Y (Yes)Authentication SuccessfulThe cardholder was successfully authenticated. Liability typically shifts to the issuer.
A (Attempted)Authentication Attempted but Not Fully VerifiedAuthentication was attempted but not completed. For example, the issuer doesn't support 3DS.
N (No)Authentication FailedThe cardholder failed authentication or the issuer denied it. The merchant assumes liability.
U (Unavailable)Authentication Could Not Be PerformedThe authentication service was unavailable.
R (Rejected)Authentication RejectedThe issuer explicitly rejected the authentication request due to fraud or invalid data.
C (Challenge)Challenge RequiredThe cardholder must complete a second verification step (e.g., OTP, biometrics). Usually for high-risk transactions.

🔍 Details on the A (Attempted) Status

If the issuer does not support 3DS or has an internal error:

  • The card network (Visa, Mastercard, etc.) may step in to assess the transaction.
  • The network evaluates based on:
    • Transaction amount
    • Merchant category
    • Risk profile

Possible Outcomes:

  • If approved: Issuer assumes liability.
  • If rejected: A (Attempted) is returned and the issuer still assumes liability.

🧾 Transaction Status Reason Codes

CodeExplanation
00Authentication Successful
01Card authentication failed
02Unknown Device
03Unsupported Device
04Exceeds authentication frequency limit
05Expired card
06Invalid Card Number
07Invalid transaction
08No card record
09Security failure
10Stolen card
11Suspected Fraud
12Transaction not permitted to cardholder
13Cardholder not enrolled in service
14Transaction timed out at the ACS
15Low confidence
16Medium confidence
17High confidence
18Very High confidence
19Exceeds ACS maximum challenges
20Non-Payment transaction not supported
213RI transaction not supported
80 (Mastercard)Identity Check Insights
80 (Visa)Error Connecting to ACS
81 (Visa)ACS Timed Out
82 (Visa)Invalid Response from ACS
83 (Visa)System Error Response from ACS
84 (Visa)Internal Error While Generating CAVV
85 (Visa)VMID not eligible for requested program
86 (Visa)Protocol Version Not Supported by ACS
87 (Mastercard)Transaction is excluded from Attempts Processing
87 (Visa)Excluded from Attempts Processing (e.g. prepaid cards, NPAs)
88 (Visa)Requested program not supported by the ACS

Visual Examples

Successful 3DS Transactions

Successful 3DS

Rejected 3DS Transactions