SCA and 3-D Secure: Keeping European Checkouts Converting

Why your European buyers see extra verification

Under PSD2, most online card payments in the European Economic Area and the UK require Strong Customer Authentication: the buyer proves two of three factors — something they know, something they have, something they are. In practice that means a 3-D Secure challenge: a bank app push, a one-time code, or a biometric prompt.

Done badly, this is where checkouts go to die. Every extra screen is an exit; an SMS code that arrives late on a phone that is also the purchase device is a masterclass in cart abandonment.

Exemptions are the conversion lever

PSD2 allows several exemptions where a frictionless flow — no challenge at all — is permitted. Whether you get them depends on how the request is flagged and how good the acquirer's fraud record is.

• Low-value: transactions under €30, subject to cumulative limits
• Transaction risk analysis: the acquirer's fraud rate earns frictionless treatment up to €100–€500
• Merchant-initiated transactions: subscription renewals are out of scope of SCA entirely once the mandate is set up with an authenticated first payment
• Trusted beneficiaries: buyers can allowlist a merchant with their bank

Subscriptions: authenticate once, correctly

For recurring billing the critical moment is the first payment. Authenticate it properly and store the network transaction reference, and every renewal can be flagged as a merchant-initiated transaction that skips SCA. Miss that setup and renewals will intermittently fail with soft declines that look random but are really authentication debt.

What good 3DS performance looks like

With 3-D Secure 2, device data flows to the issuer in the background and the majority of legitimate transactions should complete without a visible challenge. If most of your European buyers are seeing challenges, something is misconfigured — data quality, exemption flagging, or an acquirer with a poor risk score. A merchant of record runs this tuning across its whole portfolio, which is why its frictionless rates are usually better than any single seller can negotiate alone.