Recently I had a chargeback initiated by a customer. PayPal strongly recommends the use of 3D secure to minimise fraud. They recommend using Cardinal Commerce as a solution. I looked it up and it seems that this is a solution that should be implemented by the shopping cart software. Other ecommerce solutions have implemented this feature in their solutions (such as bluepark) and I was wondering if e-junkies is planning to implement this.
PayPal has made 3d Secure a requirement for Maestro payments with PayPal Payment pro and from what I hear from the PayPal people they are strongly planning to push for 3D secure. After all they are losing money in chargebacks and they want to minimise it. I would not be surprised if they make this a requirement in the future. So I guess, this feature needs to be implemented one way or another.
The following is what they sent as an intro to 3D secure.
Please Advise
Regards
Henry
--
3-D Secure is the authentication protocol used by Verified by Visa and
MasterCard SecureCode.
The goal of 3-D-Secure is to authenticate the consumer by the entry and
verification of a designated password or PIN prior to the completion of
an internet purchase. The 3-D Secure step slots into the payment process
before the merchant sends the normal financial authorization request to
their acquirer. The 3-D Secure protocol uses dedicated messages that
flow over the internet between the merchant, card scheme, and issuer,
outside of the network used for the financial authorization and clearing
messages.
In summary, the authentication process is carried out in the following
way:
1. The cardholder enrolls for the Verified by Visa or MasterCard
SecureCode service at their issuing bank and chooses their Personal
Assurance Message and authentication password or PIN. The cardholder
then shops for goods and enters their payment details into the merchant
checkout page as normal.
2. The merchant 3-D Secure software interacts with the card scheme
and issuer to determine whether the cardholder is enrolled for 3-D
Secure. If the cardholder is enrolled for the service, the merchant
seeks authentication of the cardholder by their issuing bank.
3. The cardholder is shown the details of their transaction and
enters their PIN. The entry of the PIN is used both to authenticate the
consumer and to confirm that the consumer approves the completion of the
transaction. The consumer's issuing bank validates the PIN.
4. The issuer responds to the merchant to indicate whether the
cardholder is authentic, and if authentic, provides an authentication
code to the merchant.
