What is this extra level of security I’m being asked to complete?
3D-Secure is the secure protocol designed to ensure enhanced security and strong authentication for you when you use your debit or credit cards for online purchases. It is called, depending on the card type, “MasterCard SecureCode”, “Verified by Visa” and, in the case of American Express cards, “Safekey”. In the future when you transact, you may be asked to provide a special security code to the card issuing bank in order for the bank to authorise the online transaction when prompted in the PayPal payments page. Card issuing banks have different methods of generating and delivering these codes and so if you don’t know your 3D-Secure passcode or password, and you are not being given the option to enrol online in the bank’s pop up screen, then you will need to contact your bank. Please note that this is not your PayPal account password.
Why is PayPal enabling this new set of extra security?
It means even greater security for all users of PayPal, both buyers and sellers. 3D-secure enablement provides a form of stronger authentication and makes your transactions even safer than before. We use 3D-Secure card authentication in addition to the other things we do to help the security and simplicity of your payments.
So how does it work?
3D-Secure authentication is the interaction between your card issuing bank and you, where you may be requested to enter a special security code to verify you are the legitimate owner of the banking card you are either registering with PayPal or using to make a transaction. If the security code is correct, you will be able to add your credit or debit card to the PayPal account for future transactions, some of which might also prompt you to re-enter your 3D-Secure passcode or password, though this should be the exception rather than the norm. If the security code is incorrect and 3D-Secure authentication fails, you will not be able to use the card to fund a transaction until you successfully complete the 3D-Secure password challenge from your bank.
Why are you requesting this additional level of security now? Is my account safe?
We are introducing this additional security check where it is necessary to help keep your transactions safe and secure. We will not necessarily ask for this additional code every time but you should be sure to remember the 3D-Secure code you setup with your bank should you be asked for it.
When will I need to enter this code? Do I now need to do it every time?
Our aim is to balance convenience and security, so we are adding this additional level of security in certain cases in order to keep your account safe. We will not ask for it every time and most of the time you should be able to pay with PayPal by just entering your email address and your PayPal password.
Where can I get this additional code? Isn’t it the same as my PayPal password?
No, the 3D-secure code is given to you by your card issuing bank and is not the same as your PayPal password. The bank that issued the card that you’ve added to your PayPal wallet can give you the details on how to register to get your 3D-Secure code. You may also find that your bank has made it even easier for you in case you never received this 3D-Secure code for the card. For example, on the 3D-Secure verification screen which is controlled by the bank, you may see helpful options such as ‘forgot your code?’ or a similar type of message. If not then you’ll need to contact your bank. You can also pay with your bank account directly in many countries or alternatively your existing PayPal balance should you have funds already on your PayPal account, without needing the 3D-Secure code. Banks’ processes are all different, so you will need to contact your bank should the above options not prove successful.
Am I going to have to do this extra step every time I pay with PayPal?
No. We will only ask for this additional code from your bank where it is necessary. In most cases, you will be able to continue to pay with PayPal with just a few easy steps. This additional step has been deployed for the safety and security of all users of PayPal in addition to the continuing efforts we provide to keep your money safer.
How many attempts are permitted before I’m locked out?
You will have 3 to 5 attempts to achieve a successful authentication of the card. If the code you enter repeatedly fails, you will be asked to use another financial instrument to make the payment, such as from your bank account, or your PayPal balance. Alternatively, if you are given the option in the 3D-Secure process to enrol your card or, if you’ve forgotten your password, you can click on those links to do so. Otherwise, you will need to contact your bank.
What happens if I haven’t received my 3DS password or it is declined by the bank/is incorrect?
If you’re not given the option of enrolling or being reminded of your password in the pop up on the PayPal payment page, you’ll need to contact your bank.
Do other payment service providers require this 3D-Secure?
Yes, all Payment Service Providers (PSPs) in the EU are expected to support and enforce 3D-Secure by August 1 2015.
Can I opt-out from having to enter my 3D Secure Code?
Not if you want to make a payment using a credit or debit card. You can add your bank account details to your PayPal account, or pay from your PayPal balance instead. But again, we will only prompt you for this code in limited cases when paying with a credit or debit card. In most cases, you will be able to continue to use PayPal just as you did before with just your PayPal email address on file and your PayPal password.