Payer Authentication (3DS)

3D Secure (3DS) adds an authentication step for online card payments — cardholders verify their identity with their bank before the transaction completes.

Benefits

• Liability shift — Approved 3DS transactions shift chargeback liability to the issuer
• Reduced fraud — Catches stolen cards via behavioral and biometric authentication
• Frictionless for low-risk — Most transactions complete without customer action

Frontend Implementation

CyoGateGateway.ThreeDS.mount('#threeds-container', {
  paymentToken: payment_token,
  amount: '29.99',
  currency: 'USD',
  onAuthenticated: function(authResult) {
    submitWithAuthData(authResult);  // authResult.eci, .cavv, .xid
  },
  onChallenge: function() { showChallengePending(); },
  onError: function(error) { handleError(error); }
});

Backend — Process with 3DS Data

$post = array(
    'security_key'     => YOUR_PRIVATE_KEY,
    'type'             => 'sale',
    'amount'           => '29.99',
    'payment_token'    => $payment_token,
    'cardholder_auth'  => $auth_result['eci'],
    'cavv'             => $auth_result['cavv'],
    'xid'              => $auth_result['xid'],
    'three_ds_version' => '2',
);

See also: Testing Guide | Sandbox Testing