3D Secure (3DS) is the card authentication protocol behind the OTP/password popup that sometimes appears during online checkout. For Indian merchants accepting international card payments, 3DS configuration directly affects both fraud protection and conversion rates — two things that pull in opposite directions.
This guide covers what 3DS is, how it affects your business, when to use it, and how platforms like Playto Pay handle 3DS for Indian merchants.
What Is 3DS?
3D Secure (3DS) is an authentication protocol developed by card networks (Visa, Mastercard, Amex) to verify that the person making an online purchase is the actual cardholder. When 3DS is triggered, the buyer sees an additional authentication step — typically an OTP to their phone, a biometric prompt, or a redirect to their bank's authentication page.
3DS 1.0 (legacy): Simple redirect to bank's login page. Clunky UX. High checkout abandonment.
3DS 2.0 (current): Risk-based authentication. Frictionless flow for low-risk transactions (no visible OTP). Challenge flow for higher-risk transactions (OTP required). Significantly better conversion than 3DS 1.0.
The Critical Benefit: Chargeback Liability Shift
When a transaction completes with successful 3DS authentication, liability for fraud chargebacks shifts from you to the issuing bank.
Without 3DS: Fraud chargeback → you lose the money + pay $15-$30 dispute fee.
With 3DS (authenticated): Fraud chargeback → issuing bank eats the loss, not you.
This is the primary reason Indian merchants should care about 3DS. For high-ticket transactions where fraud risk is elevated, 3DS provides insurance.
The Trade-Off: Conversion Rate Impact
3DS adds friction. Friction reduces conversion. The magnitude depends on implementation:
3DS 1.0 (legacy redirect): Checkout abandonment increase: 15-30%. Significant conversion loss.
3DS 2.0 frictionless flow (low-risk transactions): Near-zero conversion impact — the authentication happens in the background with no visible step.
3DS 2.0 challenge flow (OTP required): Conversion drop: 5-15% depending on market.
For Indian merchants accepting international cards (US, UK, EU customers): International card issuers increasingly use 3DS 2.0 frictionless flows for established cardholders. Many transactions will complete with no visible OTP even when 3DS is enabled. The conversion impact is less severe than Indian merchants fear.
When Indian Merchants Should Enable 3DS
Enable 3DS for:
-
High-ticket transactions ($500+) where chargeback loss is significant
-
Transactions flagged as higher risk (new customers, unusual geography, large vs typical order size)
-
Recurring subscription renewals (3DS on first charge, then MIT exemption on subsequent charges)
-
Any transaction category with above-0.5% chargeback rate Consider 3DS optional for:
-
Low-ticket transactions ($20-$50) from established customers with clean history
-
Returning customers with successful payment history
-
Low-fraud-risk geographies Indian merchants transacting with Indian cards on Indian PGs: RBI mandates second-factor authentication (2FA) for all domestic card transactions. This is separate from the international 3DS framework but serves the same function.
3DS and International Card Acceptance for Indian Merchants
For Indian merchants accepting international Visa/Mastercard through platforms like Playto Pay:
SCA (Strong Customer Authentication) for EU cards: European regulations (PSD2) require Strong Customer Authentication for most EU card payments. 3DS 2.0 is the mechanism. European card issuers increasingly require 3DS for Indian merchant checkouts. Non-compliant transactions may be declined by EU issuing banks.
US cards: US doesn't have equivalent SCA mandates. 3DS is voluntary for US card transactions but provides the liability shift benefit.
UK cards post-Brexit: UK has its own SCA requirements similar to EU PSD2.
Practical implication: For Indian merchants with significant EU customer base, 3DS 2.0 compliance on EU card transactions is increasingly necessary to avoid declines.
How Playto Pay Handles 3DS
Playto Pay configures 3DS for Indian merchant card acceptance:
- 3DS 2.0 enabled for supported card types
- Risk-based authentication: Low-risk transactions go through frictionless flow (no visible OTP)
- Challenge flow applied to higher-risk transactions
- SCA compliance for EU card transactions
- Liability shift applies when 3DS authentication completes successfully For Indian merchants, Playto Pay's 3DS configuration balances fraud protection (liability shift) with checkout conversion (minimizing unnecessary friction).
3DS vs OTP for Indian Merchants
A common confusion: the OTP Indian customers receive for UPI and domestic card transactions is not the same as international 3DS.
- UPI OTP/PIN: RBI-mandated authentication for UPI transactions. Applies to Indian customers paying via UPI. 0% MDR-zero cost.
- Domestic card 2FA: RBI-mandated second-factor for Indian card transactions. Applies to Indian cards.
- International 3DS: Card network protocol for international card authentication. Applies to Visa/Mastercard issued outside India. All three serve the same purpose (verify the cardholder) but are separate systems.
FAQ
What is 3DS for Indian merchants accepting international cards? 3D Secure is a card authentication protocol that adds a verification step (OTP or biometric) during checkout. Successful authentication shifts fraud chargeback liability from the merchant to the issuing bank.
Does 3DS hurt conversion rates? 3DS 2.0's risk-based approach means low-risk transactions pass with no visible OTP (frictionless). Conversion impact is minimal for these transactions. Higher-risk transactions triggering OTP see 5-15% conversion drop, which is often worth the chargeback liability protection.
Is 3DS required for EU card payments? EU PSD2 regulations require Strong Customer Authentication for most EU card transactions. 3DS 2.0 is the standard mechanism. Non-compliant transactions may be declined by EU issuing banks.
What is the liability shift benefit of 3DS? When a transaction completes with 3DS authentication, fraud chargebacks become the issuing bank's liability, not yours. For high-ticket international card transactions, this is significant protection.
Does Playto Pay support 3DS? Yes. Playto Pay implements 3DS 2.0 for international card acceptance, with risk-based frictionless flow for low-risk transactions and challenge flow for higher-risk ones.
Should Indian merchants always enable 3DS? For high-ticket transactions and EU card customers: yes. For low-ticket, returning customers in low-fraud geographies: optional. The liability shift benefit typically outweighs conversion loss for most Indian merchant profiles.