Secure protocol 3DS for safe online purchases

3D-Secure is the secure protocol designed to ensure enhanced security and strong authentication when you use your debit or credit cards for online purchases. It is called, depending on the card type, “MasterCard SecureCode”, “Verified by Visa” and, in the case of American Express cards, “Safekey”. In the future when you transact, you may be asked to provide a special security code to the card issuing bank in order for the bank to authorise the online transaction when prompted in the PayPal payments page. Card issuing banks have different methods of generating and delivering these codes and so if you don’t know your 3D-Secure passcode or password, and you are not being given the option to enrol online in the bank’s pop up screen, then you will need to contact your bank. Please note that this is not your PayPal account password.

It means even greater security for all users of PayPal, both buyers and sellers. Our aim is to balance convenience and security in line with applicable laws, so we are adding this additional level of security in certain cases in order to keep your account safe and comply with our regulatory requirements. 3D-secure enablement provides a form of stronger authentication and makes your transactions even safer than before. We use 3D-Secure card authentication in addition to the other things we do to help the security and simplicity of your payments.

3D-Secure authentication is the interaction between your card issuing bank and you, where you may be requested to enter a special security code to verify you are the legitimate owner of the credit or debit card you are either linking to your PayPal account or using to make a transaction. If the security code is correct, you will be able to add your credit or debit card to your PayPal account for future transactions, some of which might also prompt you to re-enter your 3D-Secure passcode or password, though this should be the exception rather than the norm. If the security code is incorrect and 3D-Secure authentication fails, you will not be able to use the card to fund a transaction until you successfully complete the 3D-Secure password challenge from your bank.

We are introducing this additional security check where it is necessary to help keep your transactions safe and secure and comply with our regulatory requirements. We will not necessarily ask for this additional code every time but you should be sure to remember the 3D-Secure code you setup with your bank should you be asked for it.

Our aim is to balance convenience and security in line with applicable laws, so we are adding this additional level of security in certain cases in order to keep your account safe and comply with our regulatory requirements. We will not ask for it every time and most of the time you should be able to pay with PayPal by just entering your email address and your PayPal password and proceeding to pay.

No, the 3D-Secure code is given to you by your card issuing bank and is not the same as your PayPal password. The bank that issued the card that you’ve added to your PayPal wallet can give you the details on how to register to get your 3D-Secure code. You may also find that your bank has made it even easier for you in case you never received this 3D-Secure code for the card. For example, on the 3D-Secure verification screen which is controlled by the bank, you may see helpful options such as ‘forgot your code?’ or a similar type of message. If not seeing this kind of message, then you’ll need to contact your bank. You can also pay with your existing PayPal balance should you have funds already on your PayPal account, without needing the 3D-Secure code. Banks’ processes are all different, so you will need to contact your bank should the above option not prove successful.

No. We will only ask for this additional code from your bank where it is necessary to comply with our regulatory obligations. In most cases, you will be able to continue to pay with PayPal with just a few easy steps. This additional step has been deployed for the safety and security of all users of PayPal in addition to the continuing efforts we provide to keep your money safer.

You will have 3 to 5 attempts to achieve a successful authentication of the card. If the code you enter repeatedly fails, you will be asked to use another financial instrument to make the payment, such as your PayPal balance. Alternatively, if you are given the option in the 3D-Secure process to enrol your card or, if you’ve forgotten your password, you can click on those links to do so. Otherwise, you will need to contact your bank.

If you’re not given the option of enrolling or being reminded of your password in the pop up on the PayPal payment page, you’ll need to contact your bank.

Not if you want to make a payment using a credit or debit card. You can pay from your existing PayPal balance instead. But again, we will only prompt you for this code in limited cases when linking a credit or debit card to your PayPal account or when the value of your transaction exceeds a certain amount. In most cases, you will be able to continue to use PayPal just as you did before with just your PayPal email address on file and your PayPal password and proceeding to pay.

3D-Secure is the secure protocol designed to ensure enhanced security and strong authentication for consumers when they use their debit or credit cards for online purchases. It is called, depending on the card type, “MasterCard SecureCode”, “Verified by Visa” and in the case of American Express cards, “Safekey”. It is deployed at the point of transaction, and typically involves the customer being asked by their card issuing bank to enter a passcode or password to prove that they are the legitimate card holder. Card Issuing banks have different methods of generating and delivering these codes, so consumers need to contact their card issuing bank to find out how to register for 3D-Secure and when challenged enter their passcode/password for their card, and not the passcode/password for their PayPal account.

The Central Bank of Malaysia (Bank Negara Malaysia) requires Payment Service Providers and their merchants to deploy appropriate verification arrangements, and in our case, to be conducted by the card issuing bank when the legitimate cardholder first registers their card with a wallet, and also for higher risk transactions – which in effect means deploying 3D-Secure to allow card issuer to authenticate the transaction. For PayPal, 3D-secure enablement means stronger authentication of users and more successfully processed transactions for you. 3D-Secure card authentication is in addition to the multiple efforts that we take to further support the security and simplicity of your payments.

3D-Secure authentication is the secure and direct interaction between the card issuing bank and consumer, in which PayPal is unable to ‘view’ the cardholders banking details. PayPal generates a secure session between the card issuing bank and the cardholder to verify that the consumer is the owner of the card that they are trying to add to their wallet. For sellers that offer PayPal at checkout, there is nothing more to do - we deploy 3D-Secure when it is necessary to comply with the regulations. Once the consumer’s payment card is added to the wallet, there will be very few instances when the level of risk in the transaction is sufficiently high for us to require this higher level of verification. When the level of risk is sufficiently high but we believe that the risk in the transaction can be mitigated using 3D-Secure, rather than declining the payment, we will process such transactions through the 3D-Secure systems to request that the card issuing bank authenticate the consumer is the real cardholder. One of the benefits of using PayPal’s checkout is that we can mostly differentiate good from bad transactions, and invoke the use of 3D-Secure when it is necessary, and minimise consumer disruption from over-use of the system. We are confident that this process should increase your business with more ‘good’ approved transactions.

Generally, there should be little to no impact to your business. The purpose of introducing 3D-Secure is to frustrate fraudsters and ultimately offer a better PayPal payment experience in which buyers and sellers can confidently transact, as well as ensuring we allow card issuers to comply with local regulations and maintain high levels of transaction approvals.

No, you don’t. If you get any questions from your buyers that they are having difficulty paying because they are unable to authenticate please refer them to their card issuing bank, otherwise ask them to contact PayPal and we will assist. You don’t have to do anything. The 3D-Secure process is just one of many security checks we have in place to protect you and your customers.

For customers checking out with PayPal, you will benefit from the use of 3D-Secure without having to implement it separately into your website, and determine your own policy rules for when to require it, and when not to. Our findings are that you will find that customers take comfort in the additional security requirements, as the 3D-Secure card security becomes the norm around Asia and around the globe. Overall, you can take comfort, as before, that PayPal is always working to ensure a convenient, simple and secure payment environment. If anything goes wrong, we can help with the protection offered under our buyer and seller protection policies. The 3D-Secure security doesn’t change any of these things.

The 3D-Secure authentication process is discrete to the customer and their card issuing bank. If the customer experiences difficulty in authenticating we will work with them to determine where the issue lies, though often then would need to contact their contact their card issuing bank. In all other cases we suggest that you refer them to our customer service department and we will work with the customer to try and find alternative payment solutions or methods of authentication to help them complete the transaction.

No. Your rights are unchanged. The new security will, according to our expectations, help in approval rates and customer satisfaction.