Lesson 2 · Practitioner · Both · 24 min
3DS & Risk Engines
How card authentication and real-time risk scoring decide approve, challenge, or decline—and how PMs tune for fraud vs conversion.
Objectives
- ▸Explain 3-D Secure’s role in liability and authentication
- ▸Describe risk engine inputs and decision outcomes
- ▸Balance false positives against fraud losses
- ▸Instrument funnel metrics for challenge rates
3DS adds an authentication step between merchant, issuer, and card networks (OTP, biometrics, risk-based frictionless). Successful issuer authentication often shifts liability for certain fraud types toward issuers—details depend on region, card brand, and exemption use.
- Frictionless vs challenged flows based on risk scores.
- Exemptions (low value, TRA) can improve conversion but need governance.
- Poor OTP UX drives abandonment—measure it.
Key terms
3DSACSFrictionless flowRisk scoreFalse positiveLiability shift