Topic starter
11/07/2026 8:44 pm
TL;DR: UK remote-purchase fraud cost businesses over £722 million in 2024, and 3D Secure remains the main mechanism for Strong Customer Authentication in online card payments, according to Sift. The real test is not whether 3DS exists, but whether merchants can tune exemptions, challenge flows, and telemetry without adding avoidable checkout friction.
Editorial analysis by NHI Mgmt Group, based on content published by Sift: “3D Secure Authentication: How It Protects Online Payments”.
By the numbers:
- Remote-purchase fraud cost UK businesses over £722 million in 2024, according to Sift.
Key questions
Q: How should merchants govern 3D Secure exemptions without creating fraud gaps?
A: Merchants should treat exemptions as a controlled policy layer, not a convenience setting.
Q: Why do card-not-present payments still need step-up authentication?
A: Card-not-present payments lack the physical and visual checks that exist in store, so the issuer has to infer legitimacy from context.
Q: What breaks when 3D Secure challenge flows are too aggressive?
A: Overly aggressive challenge flows increase abandonment, frustrate legitimate customers and can reduce completed sales even when fraud is falling.
Practitioner guidance
- Tune exemption rules as policy, not default behaviour Set explicit thresholds for low-value, recurring and whitelisted transactions, then review how each exemption affects approval rates and fraud losses.
- Improve transaction data quality for issuer risk scoring Send device, account and behavioural context consistently so frictionless decisions are based on enough evidence to reduce unnecessary challenges.
- Test fallback paths for unsupported cards and edge cases Validate older 3DS versions, non-authenticated authorisations and retry logic so checkout does not fail silently for customers on legacy cards.
Bottom line: Card-not-present fraud is still a major exposure for UK merchants, and 3D Secure has become the main control used to reduce that risk in online card payments.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
11/07/2026 9:12 pm
3D Secure is now a governance control, not a checkout feature. The article makes clear that the value of 3DS depends on how well merchants govern risk signals, exemptions and challenge logic. That shifts the control from a payment plugin to a policy decision point that sits between fraud prevention and customer friction. For practitioners, the meaningful question is whether authentication policy is being actively governed or simply left to default settings.
A question worth separating out:
Q: Which matters more for payments teams, fraud reduction or customer friction?
A: Neither can be optimised in isolation. Fraud reduction that drives excessive friction can push customers away, while frictionless checkout without enough risk analysis increases loss exposure. Payments teams need a policy that measures approval rate, challenge rate, chargebacks and abandonment together, then adjusts authentication accordingly.
👉 Read our full editorial: 3D Secure is becoming a core control for card-not-present fraud