3D Secure Additional Research

<<Background>>

3D Secure is a card-association independent name for the mechanism used by the Verified By Visa and MasterCard SecureCode programs

MasterCard SecureCode is a service to enhance your existing MasterCard account. A private code means added protection against unauthorized use of your card when you shop at participating online retailers.

<<Experience with DRWP>>

Our experience with DRWP integration shows that 3DS is required to Maestro card transaction, but seems it is not true, see the more information below.

<<More Information>>

Point 1: It seems not all Maestro cards require 3DS (MasterCard secure code) during the transaction, per my research, only Maestro card in UK requires 3DS for transaction, here is the information fromhttp://www.getelastic.com/who-needs-3d-secure-verified-by-visa-and-mastercard-se curecode-examined/

And as we know, MasterCard secure code is an additional protection service for cardholder, it is highly recommended by MasterCard association but not mandatory for all MasterCard (also Maestro card), the cardholder might not be enrolled this service (depending on if card issuer provides the service), and merchants can also accept Maestro card, here is information fromhttp://www.maestrocard.com/uk/security/securecode.html



Point 2: Another scenario is that even cardholder has enrolled MasterCard secure code for his Maestro card, but merchants don’t provides MasterCard secure code facility, the transaction can also be accepted. Here is the information from Mastrohttp://www.maestrocard.com/uk/security/securecode_faq.html

Same situition to Verfied by Visa (VbV). Refer to the information fromhttp://www.visa.ca/en/personal/securewithvisa/vbv/faqs.jsp

What if the online merchant is not participating inVbV?

Over time, more and more online merchants will participate inVbV. However, if an online merchant does not currently participate, your transaction will proceed as normal, without the presentation of aVbVwindow by your card issuer.

<<Conclusion>>

So basically we could say 3DS is not mandatory for all Maestro card transaction, depending on the following stuff:

1) if cardholder has enrolled the service with card issuer

2) if card issuer provides the service for customer

3) if merchant provides the facility (use 3DS) to customer when they purchase goods