3-D Secure 2: a merchant's guide
Frictionless flow, challenge flow and the exemptions that let most customers pay without a pop-up. What SCA actually requires, why 3DS 2.2 approves more transactions than 2.1, and how the liability shift works.
Notes from the Target team on acquiring, currencies, fraud and the rules that govern them. Written for merchants and the developers who build their checkouts: short, specific, with real numbers and no sales pitch. One or two new articles a month, the occasional product note in between.
Seven criteria to score before you sign: the pricing model behind the headline rate, approval rates by card country rather than a blended average, settlement currencies and timing, fraud tooling, integration effort, support and compliance — and what happens on the day you decide to leave. With a ten-line checklist to send to every shortlisted provider.
Read the articleFrictionless flow, challenge flow and the exemptions that let most customers pay without a pop-up. What SCA actually requires, why 3DS 2.2 approves more transactions than 2.1, and how the liability shift works.
Seven criteria to score before you sign, from the pricing model and approval rates by card country to what happens on the day you want to leave. Includes a ten-line checklist for every shortlisted provider.
Blended pricing hides three fees in one number. We take a €60 EU debit payment apart line by line and show the volume at which interchange++ becomes the cheaper option — for most merchants somewhere above €50k a month.
How Target picks an acquirer for each transaction in under 40 ms: issuer country, card type, currency, ticket size and the last hour's approval rates across 15+ connected banks. Plus the cascading retry that recovers soft declines.
The Commission's package splits PSD2 into a directive and a directly applicable regulation. We summarise the parts that touch merchants: SCA exemptions, IBAN-name checks, merchant-initiated transactions and the likely timeline.
Clear billing descriptors, alerts before the dispute is filed, 3-D Secure where it counts and a refund that is faster than a chargeback. Seven rules our risk team applies with every merchant, with the numbers behind each one.
Our sixth annual assessment: 12 requirements, 250+ controls, zero findings. What the auditors look at, how tokenisation keeps card data out of your systems, and what the certificate means for your own PCI scope.
Payouts to any euro IBAN now settle in under 10 seconds, around the clock, weekends included, up to €100,000 per transfer. Same €0.25 fee, same API call — set instant to true and the funds land before the webhook does.
How Target picks an acquirer for each transaction in under 40 ms: issuer country, card type, currency, ticket size and the last hour's approval rates across 15+ connected banks. Plus the cascading retry that recovers soft declines.
Payouts to any euro IBAN now settle in under 10 seconds, around the clock, weekends included, up to €100,000 per transfer. Same €0.25 fee, same API call — set instant to true and the funds land before the webhook does.
Frictionless flow, challenge flow and the exemptions that let most customers pay without a pop-up. What SCA actually requires, why 3DS 2.2 approves more transactions than 2.1, and how the liability shift works.
Seven criteria to score before you sign, from the pricing model and approval rates by card country to what happens on the day you want to leave. Includes a ten-line checklist for every shortlisted provider.
Blended pricing hides three fees in one number. We take a €60 EU debit payment apart line by line and show the volume at which interchange++ becomes the cheaper option — for most merchants somewhere above €50k a month.
Clear billing descriptors, alerts before the dispute is filed, 3-D Secure where it counts and a refund that is faster than a chargeback. Seven rules our risk team applies with every merchant, with the numbers behind each one.
The Commission's package splits PSD2 into a directive and a directly applicable regulation. We summarise the parts that touch merchants: SCA exemptions, IBAN-name checks, merchant-initiated transactions and the likely timeline.
Also filed under compliance: what strong customer authentication requires under PSD2, which exemptions your acquirer can claim, and where liability sits when a challenged payment is later disputed.
Our sixth annual assessment: 12 requirements, 250+ controls, zero findings. What the auditors look at, how tokenisation keeps card data out of your systems, and what the certificate means for your own PCI scope.
Also a company milestone: the first feature designed, built and launched end-to-end by the Riga engineering team — from the gateway connection to the toggle in the merchant dashboard.
One e-mail a month with the new articles, the product changes that affect your integration and the regulatory dates worth putting in the diary. No sales follow-ups — unsubscribe in one click.