Diagram explaining 3D Secure, Half 3D, and Non 3D e-commerce transaction levels

E-Commerce can briefly be described as the sale and purchase of products over the internet, a term that has been in use since 1969.

Virtual POS operates behind e-commerce transactions.

Are all e-commerce transactions carried out through Virtual POS at the same level?

E-commerce transactions take place at different levels.

  • Non 3D
  • Half 3D
  • Full 3D (3D Secure)

Non 3D Secure Transaction; refers to cases where the merchant does not support 3D Secure transactions. Even if the card supports 3D Secure, the transaction takes place as Non 3D because the merchant does not support it.

Half 3D Secure transaction; is briefly the term used when the merchant supports 3D Secure transactions but the card does not.

3D Secure transaction; is the term used when both the merchant and the card support 3D Secure transactions.

In cases where the merchant does not support 3D Secure transactions, can such transactions occur as 3D Secure/Half 3D Secure?

A transaction initiated by the merchant without running the 3D process is evaluated as Non Secure.

Let's explain 3D Secure, Half 3D Secure, and Non 3D transactions based on the Visa VERes, PARes, and ECI (Electronic Commerce Indicator) codes:

VEResDescriptionPAResDescription3D/Half 3D/Non 3DECI
YAuthentication AvailableYAuthentication Successful3D Secure5
YAuthentication AvailableAAttempts Processing PerformedHalf 3D6
YAuthentication AvailableUAuthentication Could Not Be PerformedNon 3D7
YAuthentication AvailableNAuthentication Failed, Merchant should not submit Auth RequestNon 3D7
Error MessageNon 3D7
Validation Of signature or critical fields failedNon 3D7
NCardholder Not ParticipatingHalf 3D6
UNon 3D7
Critical Field Validation FailedNon 3D7
Error MessageNon 3D7

In the VERes message produced as a result of the VEReq message;

  • If the VERes value is anything other than Y or N, the transaction is treated as a transaction without 3D Secure (ECI=7).
  • If the VERes value is N, it is treated as Half 3D Secure.
  • If the VERes value is Y;
    • A PAReq message is sent. The PARes value produced as the response to the PAReq message;
      • If the PARes value is Y; it is a 3D Secure transaction
      • If the PARes value is A; it is a Half 3D Secure transaction
      • If the PARes value is U; it is treated as a transaction without 3D Secure.
      • If the PARes value is N, erroneous, or signature verification fails, the transaction is included in the authorization flow by the merchant

You can find details about how a transaction's 3D Secure level is determined in my article below.

https://arifunal.com/yazi/bir-islemin-3d-secure-yari-3d-ya-da-non-3d3dsiz-oldugu-nasil-belirlenir/