3DS exemptions

Last updated: June 19, 2024

To increase the likelihood of a frictionless transaction, you can request a 3D Secure (3DS) exemption for transactions that must be PSD2 compliant, provided that it meets the exemption's criteria.

If you want, you can submit exemptions directly in the authorization stage of the payment flow.

The exemptions available for you to use depend on which ones are supported by the Visa and Mastercard schemes, as well as on Checkout.com.

If the issuer does not support the exemption you've requested, Checkout.com will submit "challenge_indicator": "no_challenge_requested" by default.

Information

If the customer's bank approves your exemption request, you do not benefit from liability shift if the transaction turns out to be fraudulent.

Exemption	Description
`data_share`	Data Sharing exemptions apply to payments for which the merchant would like to ensure a frictionless authentication for, and transactions that are not subject to Strong Customer Authentication (SCA) compliance.
`low_value`	For payments where the amount does not exceed €30. SCA may still be requested by the issuer despite the payment satisfying the requirements for `low_value` exemption. This may be due to either: The cumulative amount for transactions initiated by the cardholder since SCA was last performed exceeds €100. The cardholder has initiated 5 transactions since SCA was last performed.
`secure_corporate_payment`	For payments that use secure corporate cards, which are exempt from 3DS authentication.
`transaction_risk_assessment`	For UK domestic acquiring through Checkout Ltd, our threshold is unchanged. Merchants can use the Transaction Risk Assessment exemption for UK domestic transactions up to €250. For EU domestic acquiring through Checkout SAS, our threshold is unchanged. Merchants can use the Transaction Risk Assessment exemption for EU domestic transactions up to €250.
`trusted_listing`	For payments where the cardholder has already added the merchant as a trusted merchant.
`trusted_listing_prompt`	For payments where the merchant would like to prompt the cardholder to add them as a trusted merchant.

If the issuer rejects the exemption, they will request a challenge, which the cardholder is required to complete.


1{
2  "source": {
3    "type": "card",
4    "number": "4485040371536584",
5    "expiry_month": 1,
6    "expiry_year": 2030
7  },
8  "amount": 100,
9  "currency": "USD",
10  "authentication_type": "regular",
11  "authentication_category": "payment",
12  "challenge_indicator": "low_value",
13  "reference": "ORD-5023-4E89",
14  "transaction_type": "goods_service",
15  "shipping_address": {
16    "address_line1": "Checkout.com",
17    "address_line2": "90 Tottenham Court Road",
18    "city": "London",
19    "state": "UK",
20    "zip": "W1T 4TJ",
21    "country": "GB"
22  },
23  "completion": {
24    "type": "non_hosted",
25    "callback_url": "https://example.com/sessions/callback"
26  }
27}

Information

Request example