3DS: How to streamline the customer journey without compromising security

Balancing transaction security with a seamless shopping experience is the cornerstone of any payment strategy. For decision-makers, mastering 3D Secure (3DS) has a direct impact on the bottom line. In 2026, Strong Customer Authentication (SCA) is the key factor determining whether a purchase intent converts into actual revenue or a cart abandonment, in a landscape where fraud is becoming industrialized and regulations are tightening payment flows.

The evolution of 3D Secure: from technical burden to strategic asset

The 3D Secure protocol has come a long way since its first version. Initially seen as a major conversion barrier due to intrusive redirects, it has evolved into a sophisticated data exchange system. The transition to 3DS2 shifted the approach from binary checks to dynamic Risk-Based Authentication. As noted by Adyen, this protocol allows for over 100 contextual data points to be sent to the issuing bank to verify the cardholder's identity without friction. In 2026, this analysis enables invisible transaction validation in 85% to 95% of cases, according to benchmarks from Medium.

The regulatory imperative and the end of Direct to Authorization (DTA)

3DS management in France is dictated by PSD2 and the recommendations of theObservatory for the Security of Payment Means (OSMP). A major change for merchants is the drastic lowering of the velocity limit for online payments without 3D Secure. The OSMP confirms that as of January 12, 2026, this limit is set at 0.01 euros for Customer Initiated Transactions (CIT) within the European Economic Area.

In practical terms, the "Direct to Authorization" (DTA) practice, which allowed bypassing authentication for small amounts, is a thing of the past. According to GPayments, any transaction that does not go through a 3DS flow is now subject to a systematic "soft decline" from the issuing bank. This shift forces merchants to optimize their scalable architecture to make this step as transparent as possible.

The liability shift mechanism: Protection and arbitration

The fundamental benefit of 3DS remains the liability shift. When a transaction is successfully authenticated, financial liability in the event of fraud moves from the merchant to the issuing bank. It is a vital safeguard: data from Mastercard indicate that strong authentication protocols can reduce fraud-related disputes by up to 80% compared to non-authenticated flows. At the same time, Visa reports a 45% drop in fraud incidents for transactions authenticated via "Visa Secure." In 2025 alone, 3DS helped reduce fraud volume by $13.2 billion in the Eurozone and the UK.

The pillars of 3DS 2.3: What changes for your checkout in 2026

Version 2.3, released byEMVCo, introduces features to streamline the purchasing journey.

• Device Binding: As GPaymentspoints out, this feature allows consumers to link their device to their banking identity so that future purchases are recognized as "trusted," enabling an immediate frictionless flow.
• Automated Out-of-Band (OOB) transitions: The 3DS 2.3 protocol now automates the transition between the merchant app and the banking app, resolving this historical pain point that often led to mobile checkout failures.
• Split-SDK: This model simplifies 3DS implementation for devices such as smart speakers or IoT (Internet of Things) hardware.

The frictionless paradox: Analysis of 2026 rates

"Frictionless" is the ideal state, but according to the 2026 report from Ravelin, we are seeing a global decline in this rate: issuers are tightening their fraud analysis and more frequently rejecting exemption requests submitted by merchants.

To reverse this trend, Stripe points out that a well-configured 3DS2 improves approval rates by 2% to 4%, whereas a poor implementation can cause them to drop by 8% to 15%. One merchant saw their rate climb from 9% to 22% by optimizing their routing, increasing their revenue per visitor by 11%.

Orchestration: The cornerstone of an agnostic authentication strategy

In a multi-PSP ecosystem, managing 3DS becomes complex. This is where Purse's payment orchestration comes in.

Unlike the traditional flow where 3DS is tied to the final processor, agnostic (or standalone) 3DS triggers authentication before processor selection. The orchestrator stores the result and transmits it to the chosen PSP.

The major benefit: If the first PSP fails, the orchestrator can route the transaction to a second PSP while reusing the authentication already obtained. The buyer is not prompted a second time, ensuring payment continuity despite the technical incident.

Economic analysis: The cost of failure

A declined payment is never neutral. According to Signifyd, 19% of shoppers declined without a clear explanation abandon their cart for a competitor. For subscription models, data from Churnkey shows that payment failures account for up to 30% of total churn.

Thanks to fallback, merchants can recover between 15% and 35% of these technically failed transactions.

Roadmap for transactional excellence

For 2026-2027, the 3DS strategy must integrate the new frontiers of payment:

1. Network Tokens As recommended by Visa, using networks reduces failures due to expired cards and increases issuer confidence.
2. Agentic Commerce : AI will soon manage transactions on behalf of users. To secure these autonomous agents, authentication will shift to Passkeys, ensuring seamless, passwordless validation.
3. Sovereignty: Integrating European alternatives like Wero is crucial for regaining control over payment rails in the face of American competitors.

Payments should no longer be a cost line, but your primary growth lever.

‍