3d secure

Updated 

strong identification in an online store
- more security for businesses

 

That14. september 2019new rules of the European Union entered into force (EU) on strong authentication (Strong Customer Authentication) when using payment cards online. The online stores that accept payments from foreign cards are encouraged to activate 3D Secure as soon as possible, so that the foreign payment cards that fall under the rules are not rejected. Although card companies and authorities in Europe will give an adaptation period, we recommend that companies activate 3D Secure as soon as possible.
At the bottom of the page you will find a list of the relevant countries and the status of each country individually. It is not yet known when the rules will come into effect for Icelandic payment cards, but when it does, the above will also apply to Icelandic payment cards.

Strong authentication is based on the cardholder identifying himself with two of the three authentication methods, i.e. something he knows (password), something he has (eg smartphone) or something personal (fingerprint/face scanner). The purpose of strong authentication is to reduce fraudulent transactions and ensure that the cardholder is the only person who can authorize a transaction.

The card companies, Visa and Mastercard, offer a 3D Secure solution designed to protect both cardholders and companies from card fraud. That solution meets the European Union rules on strong authentication.

Due to the aforementioned changes, it is necessary to activate 3D Secure for everyone who accepts payments online.

 

What is strong three-factor authentication?

nm95430-takn-a-borgun.is.png

 

Instead of entering something your customer knows, for example a password, your customers can combine "something they have" like a smart watch or smartphone with "something they are" like a fingerprint. This method is called two-factor authentication.

NM95430-ta__kn-a__-borgun.is_2.png

Before the 3D Secure requirements were imposed, it was usually enough to identify yourself with a password that is easy to forget. With strong authentication, it is easier for a customer to verify who they are, and should therefore reduce churn from online shopping.

 

NM95430-ta__kn-a__-borgun.is_3.png

 

strong identification in an online store
- frequently asked questions and answers

What is 3D Secure?
Commonly known as Mastercard SecureCode and Verified by Visa. The goal of 3D Secure is to reduce fraud and provide increased security for cardholders and companies in online shopping. With 3D Secure functionality, cardholders must enter a special key number that the person receives as an SMS to their phone to verify that they are indeed the rightful owner of the card. 3D Secure thus significantly reduces the risk of companies due to receiving payments online.

Upgrade of 3D Secure to 3D Secure 2.1
3D Secure 2.1 is the European Union's new rules for strong authentication when using payment cards. Strong authentication increases the security of card-not-present transactions, such as online payments. This also applies to contactless transactions with a smartphone/watch in your pocket.

The purpose of strong authentication is to reduce fraudulent transactions and ensure that the cardholder is the only person who can authorize a transaction.

Strong authentication is based on the cardholder identifying himself with two of the three authentication methods, i.e. something he knows (password), something he has (eg smartphone/watch) or something personal (fingerprint/face scanner).

Does my site need to be connected to 3D Secure?
According to the requirements of the card companies and card issuers, all webshops must be 3D Secure by September 14, 2019, so that foreign payment cards are not blocked.

What happens if you do not activate 3D Secure in Payment Gateway?
If you do not activate 3D Secure on your site that uses Geiðslugått, you run the risk of receiving rejections on foreign cards after September 14, 2019. When the law is implemented in Iceland, rejections on domestic cards will occur.

How do I connect 3D Secure to my online store?

  • Borgun's payment page:If you have a Borgun payment page, we will make arrangements on the payment page on our side and thereforeyou don't need to do anything.

  • Borgurin's payment gateway:If you have a company that accepts payments through Borgun's payment portal3D Secure must be enabled, before January 1, 2021, so that transactions to foreign payment cards are not rejected. When the law is implemented in Iceland, the ports will be added to the national map.

  • RPG (Borgun Restful Payment GateWay): If you have a company that accepts payments through Borgun's web service3D Secure must be enabled, before January 1, 2021, so that transactions to foreign payment cards are not rejected. When the law is implemented in Iceland, the ports will be added to the national map.

 

The following regulators have issued notices regarding the implementation of strong authentication in online transactions on cards issued in their countries:
 

Austria

Have announced a temporary transition period but have not given timelines

Belgium

Have announced a temporary transition period but have not given timelines

Britain

Have announced an 18-month transition period

Denmark

Have announced an 18-month transition period

Finland

Have announced a temporary transition period but have not given timelines

France

Have announced an 18-month transition period

Holland

Have announced a temporary transition period but have not given timelines

Ireland

Have announced a temporary transition period but have not given timelines

Italy

Have announced a temporary transition period but have not given timelines

Cyprus

Have announced a temporary transition period but have not given timelines

Lithuania

Have announced a temporary transition period but have not given timelines

Luxembourg

Have announced a temporary transition period but have not given timelines

Malta

Have announced a temporary transition period but have not given timelines

Norway

Have announced a temporary transition period but have not given timelines

Poland

Have announced a transition period, but Polish banks have to register separately to get a grace period

Slovenia

Have announced a temporary transition period but have not given timelines

Spain

Have announced a temporary transition period but have not given timelines

Sweden

The rules have already entered into force and no adjustment period has been given

Czech Republic

The rules have already entered into force and no adjustment period has been granted

Hungary

Have announced a 12-month transition period

Germany

Have announced a temporary transition period but have not given timelines