3D Secure’s Next Act: From Checkout Friction to Trust Orchestration

3D Secure (3DS) was created to authenticate cardholders in card-not-present e-commerce transactions, where merchants lack the physical security of a point-of-sale terminal. Visa introduced Verified by Visa in 2001, and EMVCo later standardized the modern framework, publishing EMV 3DS 2.0 in 2016. But 3DS did not become a universal authentication layer for global e-commerce; instead, it evolved into a selective risk and authentication tool. 

Merchants balance fraud losses, liability shifts, checkout completion, authorization approvals, customer experience, and repeat purchase behavior. As AI fraud screening, device intelligence, tokenization, wallets, biometrics, and passkeys grow, 3DS is becoming less visible to consumers and more of a behind-the-scenes trust orchestration layer. It still has a future in payments, though. 

Key questions discussed in this report:

• What was 3D Secure designed to do?
• Do merchants still use 3D Secure?
• Are the card brands planning to sunset 3D Secure?

Companies Mentioned:

Adyen, Amazon, Early Warning Systems, EMVCo, Forter, Kount, Mastercard, Riskified, Shopify, Sift, Signifyd, Stripe, Visa