What is the frictionless flow in 3DS 2.0?
The frictionless flow in 3DS 2.0 is an authentication in which the issuer verifies the cardholder from the data sent with the payment, without asking for any action. If the risk looks low, the issuer confirms in the background. If not, it requests a challenge, such as approval in a banking app.
In detail
EMV 3-D Secure 2 has two paths. EMVCo describes the frictionless flow as enabling issuers to accept transactions without challenging cardholders, and the challenge as an additional step for higher-risk transactions.
How frictionless works
- The merchant’s checkout sends the authentication request with data about the payment, the device and the customer.
- The issuer’s system scores the risk.
- If the risk is low, the issuer returns an authenticated result at once. The buyer sees nothing.
- If not, the issuer asks for a challenge: a banking app approval, a biometric or a one-time code.
What influences the outcome
- Data quality: complete and accurate fields help the issuer decide.
- History: a known device and a usual amount lower the risk.
- Rules: in Europe, the issuer can apply an exemption to strong customer authentication, for example for low-risk or low-value payments.
A frictionless result counts as a successful authentication. The merchant generally benefits from the same liability shift as with a challenge.
The current specification is version 2.3.1, published in September 2022. See AVS and CVV for how data checks relate to authentication, and 3-D Secure and SCA exemptions for the European rules. A smart checkout sends the data that issuers need.