November 2023 will mark the final phase of the sunset of 3DS 1.0.2.
The sunset of 3DS 1.0 is coming quickly this November. When the sunset occurs, the Directory Server will no longer be able to support 3DS 1.0 transaction requests, and Cardinal will sunset 3DS 1.0 and all its features (except in countries with network extensions). If merchants are sending transactions down 3DS 1.0, they will receive an error message. What does that mean? Plain and simple, lost transactions and lost revenue.
The following networks will discontinue support of 3DS 1.0 and all related technology in November 2023.
On the sunset date, the Directory Server will be shut down, and merchants will not be able to send 3DS 1.0 transactions. If a merchant has not migrated to EMV® 3DS, the merchant will not be able to continue with 3DS processing.
OCTOBER 18, 2022
November 16, 2023
JCB J/Secure
Visa Secure
Let’s compare 3DS 1.0 and EMV 3DS:
3DS 1.0
EMV 3DS
Authentication
Method
Payment Channel & Use Cases
Data Exchange
Decisioning
Uses static passwords and security questions
Uses stronger authentication methods (e.g., OTP, OTP + KBA, biometrics)
Browser-based only supported guest checkout
Supports both browser and mobile and loT devices using biometrics, NPA, 3RI, Decoupled Authentication, and more
Limited data elements
10X more data exchanged between merchant and issuer
Merchants bound by issuer decisioning
Merchants have input into decisioning
*American Express, India, will sunset in October 13, 2023.
The time to act is now. With the sunset of 3DS 1.0 quickly approaching, it’s important to migrate to EMV 3DS. If there are any updates or changes before October, we'll keep you posted. If you have any questions, need to upgrade, or get started on EMV 3DS, let’s talk.
Mastercard IdentityCheck
American Express SafeKey*
Discover ProtectBuy
EMV® is a registered trademark in the U.S. and other countries and an unregistered trademark elsewhere. The EMV trademark is owned by EMVCo, LLC
The benefits of EMV 3-D Secure are clear.
More seamless and integrated consumer experience on various devices.
More than 150 data elements.
Stronger risk-based authentication and the ability to authorize with greater confidence.
Last but not least, helping to lower false declines and fraud.
+1.877.352.8444
Support@cardinalcommerce.com
Click to view sunset dates
Back to top
Click for Mastercard updates including extensions in the following countries: India and Bangladesh
Click here for Mastercard updates
Click to view sunset dates
OCTOBER 14, 2022
OCTOBER 14, 2022
Click here for Visa Extensions for: India, Bangladesh, Bhutan, Maldives, Nepal, and Sri Lanka
Click for Visa updates including extensions in the following countries: India, Bangladesh, Bhutan, Maldives, Nepal, and Sri Lanka
Mastercard Sunset Updates
February 1, 2023
October 18, 2022
August 1, 2022
June 1, 2022
The Mastercard Firewall will respond to VEReqs with a SITE NOT FOUND error as the 3DS 1.0 URL will no longer be available.
3DS 1.0 will stop routing VEReqs and the 3DS 1.0 DS will respond with a transaction status = N for all Verify Enrollment Response (VERES)
- Merchants that receive at VERES = N will have two options – Resubmit to EMV 3DS, or proceed to authorization without authentication
- Mastercard Key Management Services (KMS) will cease uploading SPA1 issuer keys
All merchants are heavily encouraged to STOP sending verifying enrollment requests (VEReq) to the 3DS 1.0 Directory Server (DS).
All merchants that split traffic between 3DS 1.0 and EMV 3DS are heavily encouraged every first and third Wednesday to route all traffic to EMV 3DS and not use 3DS 1.0 authentication.
Hover over dates to view details
Timeline
February 1, 2023
October 18, 2022
August 1, 2022
June 1, 2022
Tap a year to learn more
The Mastercard Firewall will respond to VEReqs with a SITE NOT FOUND error as the 3DS 1.0 URL will no longer be available.
3DS 1.0.2 will stop routing VEReqs and the 3DS 1.0 DS will respond with a transaction status = N for all Verify Enrollment Response (VERES)
- Merchants that receive at VERES = N will have two options – Resubmit to EMV 3DS, or proceed to authorization without authentication
- Mastercard Key Management Services (KMS) will cease uploading SPA1 issuer keys
All merchants are heavily encouraged to STOP sending verifying enrollment requests (VEReq) to the 3DS 1.0.2 Directory Server (DS).
All merchants that split traffic between 3DS 1.0 and EMV 3DS are heavily encouraged every first and third Wednesday to route all traffic to EMV 3DS and not use 3DS 1.0 authentication.
Mastercard Sunset Updates
Back to homepage
Check out specific dates and details affecting MC only transactions below.
Back to homepage
Check out specific dates and details affecting MC only transactions below.
Mastercard extensions for:
India, Bangladesh
Mastercard has extended the sunset of 3DS 1.0 for India and Bangladesh through October 3, 2023. Any transactions sent to the 3DS 1.0 Directory Server after this date will result in an error.
October 3, 2023 3DS 1.0 Directory Server will stop routing verify enrollment requests (VEReqs). The 3DS 1.0 Directory Server will respond with a transaction status of N for all verify enrollment responses (VERes).
November 1, 2023 The Mastercard firewall will respond to VEReqs with a site not found error, as the 3DS 1.0 Directory Server URL will no longer be available
View extensions for India and Bangladesh
Updates for:
India, Bangladesh, Bhutan, Maldives, Nepal, and Sri Lanka
Back to homepage
India, Bangladesh, Bhutan, Maldives, Nepal, and Sri Lanka have been extended through October 12, 2023 but there are some very detailed nuances that affect this sunset.
Visa will continue to support 3DS 1.0 transaction processing solely for domestic transactions, including the maintenance of the 3DS 1.0 Directory Server (DS). Cross-border transactions initiated by merchants from India, Bangladesh, Bhutan, Maldives, Nepal, and Sri Lanka to the rest of the world must be made using EMV 3DS for authentication beyond October 15, 2022.
In addition, ***Non-compliance fees will begin to be assessed for clients that do not migrate to EMV 3DS****
Although Visa will continue to support 3DS 1.0 until October 12, 2023, for Bangladesh, Bhutan, Maldives, and Nepal, the following fees will be assessed on clients that have not migrated to EMV 3DS before the listed effective date.
Client Type
Fees
Fee Effective Date
Issuer
Acquirer
$750.00 per BIN per month
$0.003 per authentication
November 1, 2022
Bangladesh, Bhutan, Maldives, Nepal
India and Sri Lanka
Although Visa will continue to support 3DS 1.0 until October 12, 2023, for India and Sri Lanka, the following fees will be assessed on clients that have not migrated to EMV 3DS before the listed effective date.
$0.005 per authentication
January 1, 2023
Client Type
Fees
Fee Effective Date
Issuer
$750.00 per BIN per month
January 1, 2023
April 1, 2023
$0.003 per authentication
$0.005 per authentication
Acquirer
November 1, 2022
January 1, 2023
Updates for:
India, Bangladesh, Bhutan, Maldives, Nepal, and Sri Lanka
Back to homepage
