3-D Secure
3-D Secure (3DS) is an extra check when you pay by card online: your bank asks you to approve the purchase in its app, with an SMS code or with biometrics.
How it works
When you pay online, the merchant sends the payment details to the bank that issued your card. If the bank decides a check is needed, a bank window opens or a push arrives in your banking app. You approve the purchase, and only then is the money taken.
The current version, 3DS2, scores risk using many signals: device, location, amount, purchase history. Small, familiar payments often go through with no prompt, while unusual ones need approval. In Europe this kind of strong customer authentication is required by law for many online payments.
For merchants, 3DS matters because if a fraudulent payment passed the check, liability often shifts to the card issuer. For you, it means a stolen card number is much harder to use without your approval.
You buy a €120 ticket. The site shows your bank's window and your app asks: "Approve €120 at shop X?". You tap Yes and the payment goes through. If you saw a request for €950 from a shop you never visited, you would tap Decline and freeze the card.
The main mistake is giving your 3DS code to someone on the phone, or entering it without reading what it is for. Scammers call pretending to be the bank and ask for a code to cancel a transaction, then use it to approve their own purchase. A code or approval prompt is only for you and only for a purchase you are making right now. Always read the amount and the shop name.
Questions and answers
What is 3-D Secure in simple terms?
It is a second step when you pay by card online: your bank checks that it is really you through its app, an SMS code or biometrics.
Why am I not getting my 3-D Secure code?
Usually because of SMS or signal problems, an outdated phone number at the bank, or the approval going to the banking app instead. Check the app and your profile number, and contact the bank if that does not help.
Can I dispute a payment approved with 3-D Secure?
You can, but it is harder: the approval counts as evidence that you made the payment. That is why you should never approve a transaction you did not start.
Related terms
Read next
Tables for the three KopiBank cards on sale now: what each operation costs, the limits, and where each card does not work.…
Read →How to spend crypto abroadAlmost nowhere abroad takes crypto directly, so you need to turn it into something you can pay with: a card or cash. Here is how…
Read →Apple Pay and Google Pay with a crypto cardUsing Apple Pay or Google Pay with a crypto card means paying by phone or watch with a card that draws from a crypto…
Partner links are marked. If you sign up through them, we may earn a commission at no cost to you. Details
Updated: 2026-10-19