Secure payment and 3-D Secure: how it works
When paying, your bank sometimes asks you to confirm the transaction with a code or validation in its application: this is 3-D Secure. This small step surprises many, even though it is there to protect you. In this guide, we calmly explain to you what a secure payment is, how to recognize a reliable payment page and how 3-D Secure validation works, without any jargon. In the end, this step won't worry you at all.
What is a secure payment?
A payment is said to be “secure” when your card information circulates encrypted between your browser and the bank, out of sight. Concretely, no one can intercept your card number on the way. You recognize a secure page by two simple signs: a small padlock in the browser bar and an address that begins with https. These two elements are your first benchmark of confidence.
3-D Secure, your banking bodyguard
3-D Secure is a verification step added by your bank at the time of payment. Its goal is simple: to ensure that it is indeed 'T0' you 'T1' who pay, and not someone who has collected your card number. When it triggers, your bank asks you to confirm the purchase. This confirmation most often goes through your bank's application on your phone, or by a code received by SMS. Without this validation, the payment does not go through — this is exactly what discourages fraudsters.
Ways to validate a payment
| Method | What you do | To keep in mind |
|---|---|---|
| Banking app | You confirm with a gesture in your bank app | The most common today; keep the app installed and up to date |
| Code by SMS | You receive a code to enter on the page | Check that your phone number is up to date with your bank |
| Code + question | A code supplemented by personal information | Rarer; just follow the instructions shown |
The method depends on your bank, not the merchant site. She chooses how you get confirmed.
Verify that a payment page is trustworthy
- The address starts with https and a padlock appears in the browser.
- The total to pay is clearly displayed, with no surprises in relation to your order.
- The validation request comes from 'T0' your bank 'T1' (its name, its app, its usual design).
- We will never ask you for your code by 'T0' e-mail, telephone or 'T1' message outside the secure page.
What if validation doesn't work?
Sometimes the 3-D Secure confirmation fails: SMS not received, application that does not open, expired code... Nothing serious. First check that your phone receives the network and that your bank's application is installed and up to date. If the code does not arrive, wait a few moments then ask to resend it. In the event of a persistent blockage, it is your bank that you must contact, as it is the bank that manages this step. Our guide to payment failure covers these situations one by one.