3-D Secure
3-D Secure is the card-scheme authentication step that asks your bank to confirm it is really you before an online card payment goes through. The current version, EMV 3-D Secure or 3DS2, is how card issuers meet the strong customer authentication rules under PSD2 across the EEA, Ireland included. Depending on the risk your bank sees, the check is either invisible or a prompt to approve the payment in your banking app or with a one-time code.
Where You Meet 3-D Secure at the Cashier
You meet it on a debit card deposit, usually after you press confirm and before the balance updates. With 3DS2 your bank first scores the payment in the background, using device and transaction data the merchant passes along. Low-risk payments go through in the frictionless flow; riskier ones trigger a challenge, typically a push to your banking app, a fingerprint or an SMS code.
Small payments can escape the prompt altogether.
Under PSD2 a merchant may request a low-value exemption for remote payments under €30, but the bank can refuse it, and the exemption lapses after five consecutive unauthenticated payments or once they total €100, whichever limit the issuer applies. So a run of small deposits will eventually bring back the challenge, and whether a casino requests the exemption at all varies between operators.
What 3-D Secure Is Often Confused With
SCA is the legal requirement; 3-D Secure is the technology card payments use to satisfy it. The rule asks for two of three factors: something you know, something you have, or something you are.
The CVV is a different thing again, a static code printed on the card rather than a check run by your bank.
Nor is 3-D Secure a casino KYC or source-of-funds check. Those happen on the operator’s side, mostly at withdrawal, and passing a 3DS challenge on a deposit does not clear them.
