6.3. Specification 2.2.0

The scenario selector below can be used to narrow down the required fields for a selected authentication scenario. Please note the following:

  1. When All is selected in both dropdowns, no type filters are applied. I.e. both sdkTransID and browserUserAgent is marked as required, even though they will never appear in the same message.

  2. When a Message Category or a Device Channel is selected, messages will be filtered if they are not relevant for the selection. The inclusion might change from e.g. required to optional

Message Category:
Device Channel:

/preauth endpoint

For usage, refer to /preauth endpoint.

Input

acctNumber
string
Required
Regexp: ^[0-9]{13,19}$
Categories: PA NPA
Channels: APP
Account number that will be used in the authorisation request for payment transactions. May be represented by PAN, token.
ds
string
Optional
One of:
standin visa mastercard jcb upi amex protectbuy sbn
Directory Server used in 3DS payment flow. This field is used to signal which DS to use on co-branded cards. Required for using the Dankort side on a Visa/Dankort

Meaning of values:

standin 3dsecure.io standin directory server and scheme (only in sandbox)
visa Visa
mastercard Mastercard
jcb JCB
upi UnionPay International
amex American Express
protectbuy ProtectBuy (Discover/Diners)
sbn Secured by Nets (Dankort/Forbrugsforeningen)

Output (CRD)

acsEndProtocolVersion
string
Required
Format: validVersion
The most recent active protocol version that is supported for the ACS URL.
acsInfoInd
Array of string
Optional
Regexp: ^(0[1-4]|[89][0-9])$
Provides additional information to the 3DS Server. The element lists all applicable values for the card range.

Meaning of values:

01 Authentication Available at ACS
02 Attempts Supported by ACS or DS
03 Decoupled Authentication Supported
04 Whitelisting Supported
80-99 Reserved for DS use
80 (mastercard) Supports Smart Authentication Stand-In Service
81 (mastercard) Supports Smart Authentication Direct
90 (mastercard) Supports Identity Check Express
91 (mastercard) Supports Authentication Express Merchant Delegation for Identity Check Express (Type I)
92 (mastercard) Supports Authentication Express Low Fraud Merchant (Type II)
93 (mastercard) Participates in Authentication Express Wallet Delegation
94 (mastercard) Participates in Authentication Express Wallet Delegation
80 (visa) TRA Supported by issuer
81 (visa) Data-only Supported by Issuer
82 (visa) Delegated Authentication Supported by issuer
acsStartProtocolVersion
string
Required
Format: validVersion
The earliest (i.e. oldest) active protocol version that is supported by the ACS.
dsEndProtocolVersion
string
Required
Format: validVersion
The most recent active protocol version that is supported for the DS.
dsStartProtocolVersion
string
Required
Format: validVersion
The earliest (i.e. oldest) active protocol version that is supported by the DS.
messageType
string
Required
Must be: CRD
Categories: PA NPA
Channels: APP BRW 3RI
Identifies the type of message that is passed.
threeDSMethodURL
string
Optional
Format: url
Max length: 256
The ACS URL that will be used by the 3DS Method. Note: The 3DSMethodURL data element may be omitted if not supported by the ACS for this specific card range.
threeDSServerTransID
string
Required
Format: uuid
Categories: PA NPA
Channels: APP BRW 3RI
Universally unique transaction identifier assigned by the 3DS Server to identify a single transaction.
scheme
string
Required
One of:
standin visa mastercard jcb upi amex protectbuy sbn
Account number Card Scheme

Meaning of values:

standin 3dsecure.io standin scheme (only in sandbox)
visa Visa
mastercard Mastercard
jcb JCB
upi UnionPay International
amex American Express
protectbuy ProtectBuy (Discover/Diners)
sbn Secured by Nets (Dankort/Forbrugsforeningen)

/auth endpoint

For usage, refer to /auth endpoint.

Input (AReq)

acctID
string
Optional
Max length: 64
Categories: PA NPA
Channels: APP BRW 3RI
Additional information about the account optionally provided by the 3DS Requestor.

Scheme specific rules:

Visa
Field is required if available
Optional
Categories: PA NPA
Channels: APP BRW 3RI
Additional information about the Cardholder’s account provided by the 3DS Requestor.
acctNumber
string
Required
Regexp: ^[0-9]{13,19}$
Categories: PA NPA
Channels: APP BRW 3RI
Account number that will be used in the authorisation request for payment transactions. May be represented by PAN, token.
acctType
string
Optional
Regexp: ^(0[1-3]|[89][0-9])$
Categories: PA NPA
Channels: APP BRW 3RI
Indicates the type of account. For example, for a multi-account card product.

Meaning of values:

01 Not applicable
02 Credit
03 Debit
80-99 Usable by card schemes

Scheme specific rules:

Visa
Field is required if available
acquirerBIN
string
Conditional
Max length: 11
Categories: PA NPA
Channels: APP BRW 3RI
Acquiring institution identification code as assigned by the DS receiving the AReq message.
Required if messageCategory is "01"

Scheme specific rules:

Visa
Field is required
acquirerMerchantID
string
Conditional
Max length: 35
Categories: PA NPA
Channels: APP BRW 3RI
Acquirer-assigned Merchant identifier. This may be the same value that is used in authorisation requests sent on behalf of the 3DS Requestor and is represented in ISO 8583 formatting requirements.
Required if messageCategory is "01"

Scheme specific rules:

Visa
Field is required
addrMatch
string
Optional
One of:
Y N
Categories: PA NPA
Channels: APP BRW
Indicates whether the Cardholder Shipping Address and Cardholder Billing Address are the same.

Scheme specific rules:

Visa
Field is required if available
billAddrCity
string
Optional
Max length: 50
Categories: PA NPA
Channels: APP BRW 3RI
The city of the Cardholder billing address associated with the card used for this purchase.

Scheme specific rules:

Visa
Field is required
Mastercard
Field is required unless market restrictions prevent it
billAddrCountry
string
Optional
Regexp: ^\d{3}$
Categories: PA NPA
Channels: APP BRW 3RI
The ISO 3166-1 numeric three-digit country code of the Cardholder billing address associated with the card used for this purchase.

Scheme specific rules:

Visa
Field is required
Mastercard
Field is required unless market restrictions prevent it
billAddrLine1
string
Optional
Max length: 50
Categories: PA NPA
Channels: APP BRW 3RI
First line of the street address or equivalent local portion of the Cardholder billing address associated with the card used for this purchase.

Scheme specific rules:

Visa
Field is required
Mastercard
Field is required unless market restrictions prevent it
billAddrLine2
string
Optional
Max length: 50
Categories: PA NPA
Channels: APP BRW 3RI
Second line of the street address or equivalent local portion of the Cardholder billing address associated with the card used for this purchase.

Scheme specific rules:

Visa
Field is required
Mastercard
Field is required unless market restrictions prevent it
billAddrLine3
string
Optional
Max length: 50
Categories: PA NPA
Channels: APP BRW 3RI
Third line of the street address or equivalent local portion of the Cardholder billing address associated with the card used for this purchase.

Scheme specific rules:

Visa
Field is required
Mastercard
Field is required unless market restrictions prevent it
billAddrPostCode
string
Optional
Max length: 16
Categories: PA NPA
Channels: APP BRW 3RI
ZIP or other postal code of the Cardholder billing address associated with the card used for this purchase.

Scheme specific rules:

Visa
Field is required
Mastercard
Field is required unless market restrictions prevent it
billAddrState
string
Optional
Max length: 3
Categories: PA NPA
Channels: APP BRW 3RI
The ISO 3166-2 state or province of the Cardholder billing address associated with the card used for this purchase.

Scheme specific rules:

Visa
Field is required
Mastercard
Field is required unless market restrictions prevent it
browserAcceptHeader
string
Required
Max length: 2048
Categories: PA NPA
Channels: BRW
Exact content of the HTTP accept headers as sent to the 3DS Requestor from the Cardholder’s browser.
browserColorDepth
string
Conditional
One of:
1 4 8 15 16 24 32 48
Categories: PA NPA
Channels: BRW
Value representing the bit depth of the colour palette for displaying images, in bits per pixel. Obtained from Cardholder browser using the screen.colorDepth property. In case the actual value does not exist in the allowed values, use the closest lower value.
Required if browserJavascriptEnabled is true
browserIP
string
Optional
Format: ip
Max length: 45
Categories: PA NPA
Channels: BRW
IP address the browser is connecting from.

Scheme specific rules:

Visa
Field is required if available
Mastercard
Field is required unless market restrictions prevent it
browserJavaEnabled
bool
Conditional
Categories: PA NPA
Channels: BRW
Boolean that represents the ability of the cardholder browser to execute Java. Value is returned from the navigator.javaEnabled property.
Required if browserJavascriptEnabled is true
browserJavascriptEnabled
bool
Required
Categories: PA NPA
Channels: BRW
Boolean that represents the ability of the cardholder browser execute JavaScript.
browserLanguage
string
Required
Min length: 1
Max length: 8
Categories: PA NPA
Channels: BRW
Value representing the browser language as defined in IETF BCP47. Returned from navigator.language property.
browserScreenHeight
string
Conditional
Regexp: ^[0-9]{1,6}$
Categories: PA NPA
Channels: BRW
Total height of the Cardholder’s screen in pixels. Value is returned from the screen.height property.
Required if browserJavascriptEnabled is true
browserScreenWidth
string
Conditional
Regexp: ^[0-9]{1,6}$
Categories: PA NPA
Channels: BRW
Total width of the cardholder’s screen in pixels. Value is returned from the screen.width property.
Required if browserJavascriptEnabled is true
browserTZ
string
Conditional
Regexp: ^[+-]?[0-9]{1,4}$
Categories: PA NPA
Channels: BRW
Time-zone offset in minutes between UTC and the Cardholder browser local time. Note that the offset is positive if the local time zone is behind UTC and negative if it is ahead.
Required if browserJavascriptEnabled is true
browserUserAgent
string
Required
Max length: 2048
Categories: PA NPA
Channels: BRW
Exact content of the HTTP user-agent header. Note: If the total length of the User-Agent sent by the browser exceeds 2048 characters, truncate the excess portion.
cardExpiryDate
string
Optional
Format: yymm
Categories: PA NPA
Channels: APP BRW 3RI
Expiry Date of the PAN or token supplied to the 3DS Requestor by the Cardholder.

Scheme specific rules:

Visa
Field is required
Mastercard
Field is required
cardholderName
string
Optional
Min length: 2
Max length: 45
Categories: PA NPA
Channels: APP BRW 3RI
Name of the Cardholder. Must be ASCII characters.

Scheme specific rules:

Visa
Field is required
Mastercard
Field is required unless market restrictions prevent it
deviceChannel
string
Required
Regexp: ^(0[1-3]|[89][0-9])$
Categories: PA NPA
Channels: APP BRW 3RI
Indicates the type of channel interface being used to initiate the transaction.

Meaning of values:

01 App-based (APP)
02 Browser (BRW)
03 3DS Requestor Initiated (3RI)
80-99 Reserved for DS use
deviceRenderOptions
DeviceRenderOptions object
Required
Categories: PA NPA
Channels: APP
Defines the SDK UI types that the device supports for displaying specific challenge user interfaces within the SDK.
ds
string
Optional
One of:
standin visa mastercard jcb amex protectbuy sbn
Directory Server used in 3DS payment flow. This field is used to signal which DS to use on co-branded cards. Required for using the Dankort side on a Visa/Dankort

Meaning of values:

standin 3dsecure.io standin directory server and scheme (only in sandbox)
visa Visa
mastercard Mastercard
jcb JCB
amex American Express
protectbuy ProtectBuy (Discover/Diners)
sbn Secured by Nets (Dankort/Forbrugsforeningen)
email
string
Optional
Format: email
Max length: 254
Categories: PA NPA
Channels: APP BRW 3RI
The email address associated with the account that is either entered by the Cardholder, or is on file with the 3DS Requestor.

Scheme specific rules:

Visa
Field is required
Mastercard
Field is required unless market restrictions prevent it
Optional
Categories: PA NPA
Channels: APP BRW 3RI
The home phone number provided by the Cardholder.

Scheme specific rules:

Visa
Field is required if available
Mastercard
Field is required unless market restrictions prevent it
mcc
string
Conditional
Length: 4
Categories: PA NPA
Channels: APP BRW 3RI
DS-specific code describing the Merchant's type of business, product or service.
Required if messageCategory is "01"

Scheme specific rules:

Visa
Field is required
merchantCountryCode
string
Conditional
Format: country
Regexp: ^\d{3}$
Categories: PA NPA
Channels: APP BRW 3RI
The ISO 3166-1 numeric three-digit country code of the Merchant.
Required if messageCategory is "01"

Scheme specific rules:

Visa
Field is required
merchantName
string
Conditional
Max length: 40
Categories: PA NPA
Channels: APP BRW 3RI
Merchant name assigned by the Acquirer or Payment System.
Required if messageCategory is "01"

Scheme specific rules:

Visa
Field is required
merchantRiskIndicator
MerchantRiskIndicator object
Optional
Categories: PA NPA
Channels: APP BRW 3RI
Merchant's assessment of the level of fraud risk for the specific authentication for both the cardholder and the authentication being conducted.
messageCategory
string
Required
Regexp: ^(0[1-2]|[89][0-9])$
Categories: PA NPA
Channels: APP BRW 3RI
Identifies the category of the message for a specific use case.

Meaning of values:

01 PA - Payment
02 NPA - Non-Payment
80 (mastercard) Identity Check Insights (without authentication)
80-99 Reserved for DS use
messageExtension
Array of MessageExtension object
Optional
Max length: 10
Categories: PA NPA
Channels: APP BRW 3RI
Data necessary to support requirements not otherwise defined in the 3-D Secure message are carried in a Message Extension.
messageType
string
Required
Must be: AReq
Categories: PA NPA
Channels: APP BRW 3RI
Identifies the type of message that is passed.
messageVersion
string
Required
Must be: 2.2.0
Categories: PA NPA
Channels: APP BRW 3RI
Protocol version identifier This shall be the Protocol Version Number of the specification utilised by the system creating this message.
mobilePhone
PhoneNumber object
Optional
Categories: PA NPA
Channels: APP BRW 3RI
The mobile phone number provided by the Cardholder.

Scheme specific rules:

Visa
Field is required if available
Mastercard
Field is required unless market restrictions prevent it
notificationURL
string
Required
Format: url
Max length: 256
Categories: PA NPA
Channels: BRW
Fully qualified URL of the system that receives the CRes message or Error Message. The CRes message is posted by the ACS through the Cardholder browser at the end of the challenge and receipt of the RRes message.
purchaseAmount
string
Conditional
Regexp: ^\d{0,48}$
Categories: PA NPA
Channels: APP BRW 3RI
Purchase amount in minor units of currency with all punctuation removed.
Required if messageCategory is "01"
Required if messageCategory is "02" and threeDSRequestorAuthenticationInd is one of [02, 03]
Required if messageCategory is "02" and threeRIInd is one of [01, 02, 06, 07, 08, 09, 11]

Scheme specific rules:

Visa
Field is required
purchaseCurrency
string
Conditional
Format: currency
Categories: PA NPA
Channels: APP BRW 3RI
3-digit ISO 4217 currency code string, in which purchase amount is expressed.
Required if messageCategory is "01"
Required if messageCategory is "02" and threeDSRequestorAuthenticationInd is one of [02, 03]
Required if messageCategory is "02" and threeRIInd is one of [01, 02, 06, 07, 08, 09, 11]

Scheme specific rules:

Visa
Field is required
purchaseDate
string
Conditional
Format: yyyymmddhhmmss
Categories: PA NPA
Channels: APP BRW 3RI
Date and time of the purchase expressed in UTC.
Required if messageCategory is "01"
Required if messageCategory is "02" and threeDSRequestorAuthenticationInd is one of [02, 03]
Required if messageCategory is "02" and threeRIInd is one of [01, 02, 06, 07, 08, 09, 11]

Scheme specific rules:

Visa
Field is required
purchaseExponent
string
Conditional
Regexp: ^\d$
Categories: PA NPA
Channels: APP BRW 3RI
Minor units of currency as specified in the ISO 4217 currency exponent. This data should be available from your acquirer or card scheme. The standard is maintained at currency-iso.org. Note that the exponent used in authorization may differ, e.g. ISK has ISO 4217 exponent 0, but exponent 2 in Visa authorizations
Required if messageCategory is "01"
Required if messageCategory is "02" and threeDSRequestorAuthenticationInd is one of [02, 03]
Required if messageCategory is "02" and threeRIInd is one of [01, 02, 06, 07, 08, 09, 11]

Scheme specific rules:

Visa
Field is required
purchaseInstalData
string
Conditional
Max length: 3
From 2 To 999
Categories: PA NPA
Channels: APP BRW 3RI
Indicates the maximum number of authorisations permitted for instalment payments.
Required if threeDSRequestorAuthenticationInd is "03"
Required if threeRIInd is "02"

Scheme specific rules:

Visa
Field is required if available
payTokenInd
bool
Optional
Must be: true
Categories: PA NPA
Channels: APP BRW 3RI
A value of True indicates that the transaction was de-tokenised prior to being received by the ACS. This data element will be populated by the system residing in the 3-D Secure domain where the de-tokenisation occurs (i.e., the 3DS Server or the DS). Note: The Boolean value of true is the only valid response for this field when it is present.

Scheme specific rules:

Visa
Field is required if available
payTokenSource
string
Conditional
Regexp: ^(0[1-2]|[89][0-9])$
Categories: PA NPA
Channels: APP BRW 3RI
This data element will be populated by the system residing in the 3-D Secure domain where the de-tokenisation occurs.

Meaning of values:

01 3-D Secure Server
02 Directory Server
80-99 Reserved for DS use
Required if payTokenInd is true
recurringExpiry
string
Conditional
Format: yyyymmdd
Categories: PA NPA
Channels: APP BRW 3RI
Date after which no further authorisations shall be performed. This is a required field for recurring transactions, we suggest setting it at a reasonably high value if you don't have a defined expiry date.
Required if threeDSRequestorAuthenticationInd is one of [02, 03]
Required if threeRIInd is one of [01, 02]

Scheme specific rules:

Visa
Field is required if available
recurringFrequency
string
Conditional
Regexp: ^\d{0,4}$
Categories: PA NPA
Channels: APP BRW 3RI
Indicates the minimum number of days between authorisations.
Required if threeDSRequestorAuthenticationInd is one of [02, 03]
Required if threeRIInd is one of [01, 02]

Scheme specific rules:

Visa
Field is required if available
sdkAppID
string
Required
Format: uuid
Categories: PA NPA
Channels: APP
Universally unique ID created upon all installations of the 3DS Requestor App on a Consumer Device. This will be newly generated and stored by the 3DS SDK for each installation.
sdkEncData
string
Required
Max length: 64000
Categories: PA NPA
Channels: APP
JWE Object (represented as a string) as defined in Section 6.2.2.1 containing data encrypted by the SDK for the DS to decrypt.
sdkEphemPubKey
json
Required
Max length: 256
Categories: PA NPA
Channels: APP
Public key component of the ephemeral key pair generated by the 3DS SDK and used to establish session keys between the 3DS SDK and ACS.
sdkMaxTimeout
string
Required
Length: 2
Value: 05 … 99
Categories: PA NPA
Channels: APP
Indicates maximum amount of time (in minutes) for all exchanges.
sdkReferenceNumber
string
Required
Max length: 32
Categories: PA NPA
Channels: APP
Identifies the vendor and version for the 3DS SDK that is integrated in a 3DS Requestor App, assigned by EMVCo when the 3DS SDK is approved.
sdkTransID
string
Conditional
Format: uuid
Categories: PA NPA
Channels: APP
Universally unique transaction identifier assigned by the 3DS SDK to identify a single transaction.
Required if deviceChannel is "01"
shipAddrCity
string
Optional
Max length: 50
Categories: PA NPA
Channels: APP BRW 3RI
City portion of the shipping address requested by the Cardholder.

Scheme specific rules:

Visa
Field is required if available
Mastercard
Field is required unless market restrictions prevent it
shipAddrCountry
string
Conditional
Regexp: ^\d{3}$
Categories: PA NPA
Channels: APP BRW 3RI
The ISO 3166-1 numeric three-digit country code of the shipping address requested by the Cardholder.
Required if shipAddrState is not empty

Scheme specific rules:

Visa
Field is required if available
Mastercard
Field is required unless market restrictions prevent it
shipAddrLine1
string
Optional
Max length: 50
Categories: PA NPA
Channels: APP BRW 3RI
First line of the street address or equivalent local portion of the shipping address requested by the Cardholder.

Scheme specific rules:

Visa
Field is required if available
Mastercard
Field is required unless market restrictions prevent it
shipAddrLine2
string
Optional
Max length: 50
Categories: PA NPA
Channels: APP BRW 3RI
The second line of the street address or equivalent local portion of the shipping address requested by the Cardholder.

Scheme specific rules:

Visa
Field is required if available
Mastercard
Field is required unless market restrictions prevent it
shipAddrLine3
string
Optional
Max length: 50
Categories: PA NPA
Channels: APP BRW 3RI
The third line of the street address or equivalent local portion of the shipping address requested by the Cardholder.

Scheme specific rules:

Visa
Field is required if available
Mastercard
Field is required unless market restrictions prevent it
shipAddrPostCode
string
Optional
Max length: 16
Categories: PA NPA
Channels: APP BRW 3RI
The ZIP or other postal code of the shipping address requested by the Cardholder.

Scheme specific rules:

Visa
Field is required if available
Mastercard
Field is required unless market restrictions prevent it
shipAddrState
string
Optional
Max length: 3
Categories: PA NPA
Channels: APP BRW 3RI
The ISO 3166-2 state or province of the shipping address associated with the card being used for this purchase.

Scheme specific rules:

Visa
Field is required if available
Mastercard
Field is required unless market restrictions prevent it
threeDSCompInd
string
Required
One of:
Y N U
Categories: PA NPA
Channels: BRW
Indicates whether the 3DS Method successfully completed.

Meaning of values:

Y Successfully completed
N Did not successfully complete
U Unavailable— 3DS Method URL was not present in the PRes message data for the card range associated with the Cardholder Account Number.
threeDSReqAuthMethodInd
string
Optional
Regexp: ^(0[123]|[89][0-9])$
Categories: PA NPA
Channels: APP BRW
Value that represents the signature verification performed by the DS on the mechanism (e.g., FIDO) used by the cardholder to authenticate to the 3DS Requestor.

Meaning of values:

01 Verified
02 Failed
03 Not Performed
80-99 Reserved for DS use
threeDSRequestorAuthenticationInd
string
Required
Regexp: ^(0[1-7]|[89][0-9])$
Categories: PA NPA
Channels: APP BRW
Indicates the type of Authentication request. This data element provides additional information to the ACS to determine the best approach for handing an authentication request.

Meaning of values:

01 Payment transaction
02 Recurring transaction
03 Instalment transaction
04 Add card
05 Maintain card
06 Cardholder verification as part of EMV token ID&V
80-99 Reserved for DS use
threeDSRequestorAuthenticationInfo
ThreeDSRequestorAuthenticationInfo object
Optional
Information about how the 3DS Requestor authenticated the cardholder before or during the transaction.
threeDSRequestorChallengeInd
string
Optional
Regexp: ^(0[1-9]|[89][0-9])$
Categories: PA NPA
Channels: APP BRW
Indicates whether a challenge is requested for this transaction. For example: 1) For 01-PA, a 3DS Requestor may have concerns about the transaction, and request a challenge. 2) For 02-NPA, a challenge may be necessary when adding a new card to a wallet. 3) For local/regional mandates or other variables, this includes sending '04', requiring challenge for PSD2 compliance.

Meaning of values:

01 No preference
02 No challenge requested
03 Challenge requested (3DS Requestor preference)
04 Challenge requested (Mandate)
05 No challenge requested (transactional risk analysis is already performed)
06 No challenge requested (Data share only)
07 No challenge requested (strong consumer authentication is already performed)
08 No challenge requested (utilise whitelist exemption if no challenge required)
09 Challenge requested (whitelist prompt requested if challenge required)
80-99 Reserved for DS use

Scheme specific rules:

Visa
Field is required if available
threeDSRequestorDecMaxTime
string
Conditional
Length: 5
Value: 00001 … 10080
Categories: PA NPA
Channels: APP BRW 3RI
Indicates the maximum amount of time that the 3DS Requestor will wait for an ACS to provide the results of a Decoupled Authentication transaction (in minutes).
Required if threeDSRequestorDecReqInd is "Y"
threeDSRequestorDecReqInd
string
Optional
One of:
Y N
Categories: PA NPA
Channels: APP BRW 3RI
Indicates whether the 3DS Requestor requests the ACS to utilise Decoupled Authentication and agrees to utilise Decoupled Authentication if the ACS confirms its use.
threeDSRequestorPriorAuthenticationInfo
ThreeDSRequestorPriorAuthenticationInfo object
Optional
Categories: PA NPA
Channels: APP BRW 3RI
Information about how the 3DS Requestor authenticated the cardholder as part of a previous 3DS transaction.
threeDSRequestorURL
string
Required
Format: url
Max length: 2048
Categories: PA NPA
Channels: APP BRW 3RI
Fully qualified URL of 3DS Requestor website or customer care site. According to the specification, this data element provides additional information to the receiving 3-D Secure system if a problem arises and should provide contact information. In practice card schemes expect a merchant URL here.

Scheme specific rules:

Visa
Field is required
threeDSServerTransID
string
Conditional
Format: uuid
Categories: PA NPA
Channels: APP BRW 3RI
Universally unique transaction identifier assigned by the 3DS Server to identify a single transaction.
Required if deviceChannel is "02"
threeRIInd
string
Required
Regexp: ^(0[1-9]|1[0-2]|[89][0-9])$
Categories: PA NPA
Channels: 3RI
Indicates the type of 3RI request. This data element provides additional information to the ACS to determine the best approach for handing a 3RI request.

Meaning of values:

01 Recurring transaction
02 Instalment transaction
03 Add card
04 Maintain card information
05 Account verification
06 Split/delayed shipment
07 Top-up
08 Mail Order
09 Telephone Order
10 Whitelist status check
11 Other payment
80-99 Reserved for DS use

Scheme specific rules:

Visa
Field is required if available
transType
string
Optional
One of:
01 03 10 11 28
Categories: PA
Channels: APP BRW 3RI
Identifies the type of transaction being authenticated.

Meaning of values:

01 Goods/ Service Purchase
03 Check Acceptance
10 Account Funding
11 Quasi-Cash Transaction
28 Prepaid Activation and Load

Scheme specific rules:

Visa
Field is required
whiteListStatus
string
Optional
One of:
Y N E P R U
Categories: PA NPA
Channels: APP BRW 3RI
Enables the communication of trusted beneficiary/whitelist status between the ACS, the DS and the 3DS Requestor. Note: Valid values in the AReq message are Y or N

Meaning of values:

Y 3DS Requestor is whitelisted by cardholder
N 3DS Requestor is not whitelisted by cardholder
E Not eligible as determined by issuer
P Pending confirmation by cardholder
R Cardholder rejected
U Whitelist status unknown, unavailable, or does not apply
whiteListStatusSource
string
Conditional
Regexp: ^(0[123]|[89][0-9])$
Categories: PA NPA
Channels: APP BRW 3RI
This data element will be populated by the system setting Whitelist Status.

Meaning of values:

01 3DS Server
02 DS
03 ACS
80-99 Reserved for DS use
Required if whiteListStatus is not empty
Optional
Categories: PA NPA
Channels: APP BRW 3RI
The work phone number provided by the Cardholder.

Scheme specific rules:

Visa
Field is required if available

Output (ARes)

acsChallengeMandated
string
Conditional
One of:
Y N
Categories: PA NPA
Channels: APP BRW 3RI
Indication of whether a challenge is required for the transaction to be authorised due to local/regional mandates or other variable.
Required if transStatus is one of [C, D]
acsDecConInd
string
Conditional
One of:
Y N
Categories: PA NPA
Channels: APP BRW 3RI
Indicates whether the ACS confirms utilisation of Decoupled Authentication and agrees to utilise Decoupled Authentication to authenticate the Cardholder.
Required if transStatus is "D"
acsOperatorID
string
Optional
Max length: 32
Categories: PA NPA
Channels: APP BRW 3RI
DS assigned ACS identifier. Each DS can provide a unique ID to each ACS on an individual basis.
acsReferenceNumber
string
Required
Max length: 32
Categories: PA NPA
Channels: APP BRW 3RI
Unique identifier assigned by the EMVCo Secretariat upon Testing and Approval.
acsRenderingType
AcsRenderingType object
Conditional
Categories: PA NPA
Channels: APP
Identifies the ACS UI Template that the ACS will first present to the consumer.
Required if deviceChannel is "01" and transStatus is "C"
acsSignedContent
string
Conditional
Categories: PA NPA
Channels: APP
Contains the JWS object (represented as a string) created by the ACS for the ARes message.
Required if transStatus is "C" and deviceChannel is "01"
acsTransID
string
Required
Format: uuid
Categories: PA NPA
Channels: APP BRW 3RI
Universally unique transaction identifier assigned by the ACS to identify a single transaction.
acsURL
string
Conditional
Format: url
Max length: 2048
Categories: PA NPA
Channels: BRW
Fully qualified URL of the ACS to be used for the challenge. 02-BRW—3DS Requestor will post the CReq to this URL via the challenge window
Required if deviceChannel is "02" and transStatus is "C"
authenticationType
string
Conditional
Regexp: ^(0[1-4]|[89][0-9])$
Categories: PA NPA
Channels: APP BRW 3RI
Indicates the type of authentication method the Issuer will use to challenge the Cardholder, whether in the ARes message or what was used by the ACS when in the RReq message.

Meaning of values:

01 Static
02 Dynamic
03 OOB
04 Decoupled
80-99 Reserved for DS use
Required if transStatus is one of [C, D]
authenticationValue
string
Conditional
Length: 28
Regexp: ^[a-zA-Z0-9+/]{26,28}={0,2}$
Categories: PA NPA
Channels: APP BRW 3RI
Payment System-specific value provided by the ACS or the DS using an algorithm defined by Payment System. Authentication Value may be used to provide proof of authentication.
Required if messageCategory is "01" and transStatus is one of [Y, A]
cardholderInfo
string
Conditional
Max length: 128
Categories: PA NPA
Channels: APP BRW 3RI
Text provided by the ACS/Issuer to Cardholder during a Frictionless or Decoupled transaction. The Issuer can provide information to Cardholder. For example, “Additional authentication is needed for this transaction, please contact (Issuer Name) at xxx-xxx-xxxx.”
Required if acsDecConInd is "Y"
dsReferenceNumber
string
Required
Max length: 32
Categories: PA NPA
Channels: APP BRW 3RI
EMVCo-assigned unique identifier to track approved DS.
dsTransID
string
Required
Format: uuid
Max length: 36
Categories: PA NPA
Channels: APP BRW 3RI
Universally unique transaction identifier assigned by the DS to identify a single transaction.
eci
string
Optional
Max length: 2
Categories: PA NPA
Channels: APP BRW 3RI
Payment System-specific value provided by the ACS or DS to indicate the results of the attempt to authenticate the Cardholder.
messageExtension
Array of MessageExtension object
Optional
Max length: 10
Categories: PA NPA
Channels: APP BRW 3RI
Data necessary to support requirements not otherwise defined in the 3-D Secure message are carried in a Message Extension.
messageType
string
Required
Must be: ARes
Categories: PA NPA
Channels: APP BRW 3RI
Identifies the type of message that is passed.
messageVersion
string
Required
Must be: 2.2.0
Categories: PA NPA
Channels: APP BRW 3RI
Protocol version identifier This shall be the Protocol Version Number of the specification utilised by the system creating this message.
sdkTransID
string
Conditional
Format: uuid
Categories: PA NPA
Channels: APP
Universally unique transaction identifier assigned by the 3DS SDK to identify a single transaction.
Required if deviceChannel is "01"
threeDSServerTransID
string
Required
Format: uuid
Categories: PA NPA
Channels: APP BRW 3RI
Universally unique transaction identifier assigned by the 3DS Server to identify a single transaction.
transStatus
string
Conditional
One of:
Y N U A C D R I
Categories: PA NPA
Channels: APP BRW 3RI
Indicates whether a transaction qualifies as an authenticated transaction or account verification.

Meaning of values:

Y Authentication/ Account Verification Successful
N Not Authenticated /Account Not Verified; Transaction denied
U Authentication/ Account Verification Could Not Be Performed; Technical or other problem, as indicated in ARes or RReq
A Attempts Processing Performed; Not Authenticated/Verified , but a proof of attempted authentication/verification is provided
C Challenge Required; Additional authentication is required using the CReq/CRes
D Challenge Required; Decoupled Authentication confirmed.
R Authentication/ Account Verification Rejected; Issuer is rejecting authentication/verification and request that authorisation not be attempted.
I Informational Only; 3DS Requestor challenge preference acknowledged.
Required if messageCategory is "01"
transStatusReason
string
Conditional
Regexp: ^(0[1-9]|1[0-9]|2[0-6]|[89][0-9])$
Categories: PA NPA
Channels: APP BRW 3RI
Provides information on why the Transaction Status field has the specified value.

Meaning of values:

01 Card authentication failed
02 Unknown Device
03 Unsupported Device
04 Exceeds authentication frequency limit
05 Expired card
06 Invalid card number
07 Invalid transaction
08 No Card record
09 Security failure
10 Stolen card
11 Suspected fraud
12 Transaction not permitted to cardholder
13 Cardholder not enrolled in service
14 Transaction timed out at the ACS
15 Low confidence
16 Medium confidence
17 High confidence
18 Very High confidence
19 Exceeds ACS maximum challenges
20 Non-Payment transaction not supported
21 3RI transaction not supported
22 ACS technical issue
23 Decoupled Authentication required by ACS but not requested by 3DS Requestor
24 3DS Requestor Decoupled Max Expiry Time exceeded
25 Decoupled Authentication was provided insufficient time to authenticate cardholder. ACS will not make attempt
26 Authentication attempted but not performed by the cardholder
80 (mastercard) Identity Check Insights
80 (visa) Error Connecting to ACS
81 (visa) ACS Timed Out
82 (visa) Invalid Response from ACS
83 (visa) System Error Response from ACS
84 (visa) Internal Error While Generating CAVV
85 (visa) VMID not eligible for requested program
86 (visa) Protocol Version Not Supported by ACS
87 (mastercard) Transaction is excluded from Attempts Processing, because Device Channel is 3RI
87 (visa) Transaction is excluded from Attempts Processing (includes non- reloadable pre-paid cards and Non- Payments (NPA))
88 (visa) Requested program not supported by the ACS
Required if messageCategory is "01" and transStatus is one of [N, U, R]
whiteListStatus
string
Optional
One of:
Y N E P R U
Categories: PA NPA
Channels: APP BRW 3RI
Enables the communication of trusted beneficiary/whitelist status between the ACS, the DS and the 3DS Requestor. Note: Valid values in the AReq message are Y or N

Meaning of values:

Y 3DS Requestor is whitelisted by cardholder
N 3DS Requestor is not whitelisted by cardholder
E Not eligible as determined by issuer
P Pending confirmation by cardholder
R Cardholder rejected
U Whitelist status unknown, unavailable, or does not apply
whiteListStatusSource
string
Conditional
Regexp: ^(0[123]|[89][0-9])$
Categories: PA NPA
Channels: APP BRW 3RI
This data element will be populated by the system setting Whitelist Status.

Meaning of values:

01 3DS Server
02 DS
03 ACS
80-99 Reserved for DS use
Required if whiteListStatus is not empty

Challenge flow

For usage, refer to Challenge flow.

Challenge request (CReq)

messageType
string
Required
Must be: CReq
Categories: PA NPA
Channels: APP BRW 3RI
Identifies the type of message that is passed.
messageVersion
string
Required
One of:
2.1.0 2.2.0
Categories: PA NPA
Channels: APP BRW 3RI
Protocol version identifier This shall be the Protocol Version Number of the specification utilised by the system creating this message.
messageExtension
Array of MessageExtension object
Optional
Max length: 10
Categories: PA NPA
Channels: APP BRW 3RI
Data necessary to support requirements not otherwise defined in the 3-D Secure message are carried in a Message Extension.
acsTransID
string
Required
Format: uuid
Categories: PA NPA
Channels: APP BRW 3RI
Universally unique transaction identifier assigned by the ACS to identify a single transaction.
threeDSServerTransID
string
Required
Format: uuid
Categories: PA NPA
Channels: APP BRW 3RI
Universally unique transaction identifier assigned by the 3DS Server to identify a single transaction.
challengeWindowSize
string
Required
One of:
01 02 03 04 05
Dimensions of the challenge window that has been displayed to the Cardholder. The ACS shall reply with content that is formatted to appropriately render in this window to provide the best possible user experience. Preconfigured sizes are width x height in pixels of the window displayed in the Cardholder browser window.

Meaning of values:

01 250 x 400
02 390 x 400
03 500 x 600
04 600 x 400
05 Full screen

Challenge response (CRes)

acsCounterAtoS
string
Required
Categories: PA NPA
Channels: APP
Counter used as a security measure in the ACS to 3DS SDK secure channel.
acsTransID
string
Required
Format: uuid
Categories: PA NPA
Channels: APP BRW 3RI
Universally unique transaction identifier assigned by the ACS to identify a single transaction.
challengeCompletionInd
string
Required
One of:
Y N
Categories: PA NPA
Channels: APP
Indicator of the state of the ACS challenge cycle and whether the challenge has completed or will require additional messages. Shall be populated in all CRes messages to convey the current state of the transaction.
messageExtension
Array of MessageExtension object
Optional
Max length: 10
Categories: PA NPA
Channels: APP BRW 3RI
Data necessary to support requirements not otherwise defined in the 3-D Secure message are carried in a Message Extension.
messageType
string
Required
Must be: CRes
Categories: PA NPA
Channels: APP BRW 3RI
Identifies the type of message that is passed.
messageVersion
string
Required
Must be: 2.2.0
Categories: PA NPA
Channels: APP BRW 3RI
Protocol version identifier This shall be the Protocol Version Number of the specification utilised by the system creating this message.
sdkTransID
string
Conditional
Format: uuid
Categories: PA NPA
Channels: APP
Universally unique transaction identifier assigned by the 3DS SDK to identify a single transaction.
Required if deviceChannel is "01"
threeDSServerTransID
string
Required
Format: uuid
Categories: PA NPA
Channels: APP BRW 3RI
Universally unique transaction identifier assigned by the 3DS Server to identify a single transaction.
transStatus
string
Conditional
One of:
Y N
Categories: PA NPA
Channels: APP BRW 3RI
Indicates whether a transaction qualifies as an authenticated transaction or account verification.

Meaning of values:

Y Authentication/ Account Verification Successful
N Not Authenticated /Account Not Verified; Transaction denied
Required if messageCategory is "01"

/postauth endpoint

For usage, refer to /postauth endpoint.

Input

threeDSServerTransID
string
Required
Format: uuid
Categories: PA NPA
Channels: APP BRW 3RI
Universally unique transaction identifier assigned by the 3DS Server to identify a single transaction.

Output (RReq)

acsRenderingType
AcsRenderingType object
Conditional
Categories: PA NPA
Channels: APP
Identifies the ACS UI Template that the ACS will first present to the consumer.
Required if acsDecConInd is not "Y"
acsTransID
string
Required
Format: uuid
Categories: PA NPA
Channels: APP BRW 3RI
Universally unique transaction identifier assigned by the ACS to identify a single transaction.
authenticationType
string
Conditional
Regexp: ^(0[1-4]|[89][0-9])$
Categories: PA NPA
Channels: APP BRW 3RI
Indicates the type of authentication method the Issuer will use to challenge the Cardholder, whether in the ARes message or what was used by the ACS when in the RReq message.

Meaning of values:

01 Static
02 Dynamic
03 OOB
04 Decoupled
80-99 Reserved for DS use
Required if transStatus is one of [Y, N]
authenticationValue
string
Conditional
Length: 28
Regexp: ^[a-zA-Z0-9+/]{26,28}={0,2}$
Categories: PA NPA
Channels: APP BRW 3RI
Payment System-specific value provided by the ACS or the DS using an algorithm defined by Payment System. Authentication Value may be used to provide proof of authentication.
Required if messageCategory is "01" and transStatus is one of [Y, A]
challengeCancel
string
Optional
Regexp: ^(0[13-8]|[89][0-9])$
Categories: PA NPA
Channels: APP BRW 3RI
Indicator informing the ACS and the DS that the authentication has been canceled.

Meaning of values:

01 Cardholder selected "Cancel"
03 Transaction Timed Out— Decoupled Authentication
04 Transaction Timed Out at ACS— other timeouts
05 Transaction Timed Out at ACS— First CReq not received by ACS
06 Transaction Error
07 Unknown
08 Transaction Timed Out at SDK
80-99 Reserved for DS use
dsTransID
string
Required
Format: uuid
Max length: 36
Categories: PA NPA
Channels: APP BRW 3RI
Universally unique transaction identifier assigned by the DS to identify a single transaction.
eci
string
Optional
Max length: 2
Categories: PA NPA
Channels: APP BRW 3RI
Payment System-specific value provided by the ACS or DS to indicate the results of the attempt to authenticate the Cardholder.
interactionCounter
string
Conditional
Length: 2
Value: 00 … 99
Categories: PA NPA
Channels: APP BRW
Indicates the number of authentication cycles attempted by the Cardholder.
Required if acsDecConInd is not "Y"
messageCategory
string
Required
Regexp: ^(0[1-2]|[89][0-9])$
Categories: PA NPA
Channels: APP BRW 3RI
Identifies the category of the message for a specific use case.

Meaning of values:

01 PA - Payment
02 NPA - Non-Payment
80 (mastercard) Identity Check Insights (without authentication)
80-99 Reserved for DS use
messageExtension
Array of MessageExtension object
Optional
Max length: 10
Categories: PA NPA
Channels: APP BRW 3RI
Data necessary to support requirements not otherwise defined in the 3-D Secure message are carried in a Message Extension.
messageType
string
Required
Must be: RReq
Categories: PA NPA
Channels: APP BRW 3RI
Identifies the type of message that is passed.
messageVersion
string
Required
Must be: 2.2.0
Categories: PA NPA
Channels: APP BRW 3RI
Protocol version identifier This shall be the Protocol Version Number of the specification utilised by the system creating this message.
sdkTransID
string
Conditional
Format: uuid
Categories: PA NPA
Channels: APP
Universally unique transaction identifier assigned by the 3DS SDK to identify a single transaction.
Required if deviceChannel is "01"
threeDSServerTransID
string
Required
Format: uuid
Categories: PA NPA
Channels: APP BRW 3RI
Universally unique transaction identifier assigned by the 3DS Server to identify a single transaction.
transStatus
string
Conditional
One of:
Y N U A R
Categories: PA NPA
Channels: APP BRW 3RI
Indicates whether a transaction qualifies as an authenticated transaction or account verification.

Meaning of values:

Y Authentication/ Account Verification Successful
N Not Authenticated /Account Not Verified; Transaction denied
U Authentication/ Account Verification Could Not Be Performed; Technical or other problem, as indicated in ARes or RReq
A Attempts Processing Performed; Not Authenticated/Verified , but a proof of attempted authentication/verification is provided
R Authentication/ Account Verification Rejected; Issuer is rejecting authentication/verification and request that authorisation not be attempted.
Required if messageCategory is "01"
transStatusReason
string
Conditional
Regexp: ^(0[1-9]|1[0-9]|2[0-6]|[89][0-9])$
Categories: PA NPA
Channels: APP BRW 3RI
Provides information on why the Transaction Status field has the specified value.

Meaning of values:

01 Card authentication failed
02 Unknown Device
03 Unsupported Device
04 Exceeds authentication frequency limit
05 Expired card
06 Invalid card number
07 Invalid transaction
08 No Card record
09 Security failure
10 Stolen card
11 Suspected fraud
12 Transaction not permitted to cardholder
13 Cardholder not enrolled in service
14 Transaction timed out at the ACS
15 Low confidence
16 Medium confidence
17 High confidence
18 Very High confidence
19 Exceeds ACS maximum challenges
20 Non-Payment transaction not supported
21 3RI transaction not supported
22 ACS technical issue
23 Decoupled Authentication required by ACS but not requested by 3DS Requestor
24 3DS Requestor Decoupled Max Expiry Time exceeded
25 Decoupled Authentication was provided insufficient time to authenticate cardholder. ACS will not make attempt
26 Authentication attempted but not performed by the cardholder
80 (mastercard) Identity Check Insights
80 (visa) Error Connecting to ACS
81 (visa) ACS Timed Out
82 (visa) Invalid Response from ACS
83 (visa) System Error Response from ACS
84 (visa) Internal Error While Generating CAVV
85 (visa) VMID not eligible for requested program
86 (visa) Protocol Version Not Supported by ACS
87 (mastercard) Transaction is excluded from Attempts Processing, because Device Channel is 3RI
87 (visa) Transaction is excluded from Attempts Processing (includes non- reloadable pre-paid cards and Non- Payments (NPA))
88 (visa) Requested program not supported by the ACS
Required if messageCategory is "01" and transStatus is one of [N, U, R]
whiteListStatus
string
Optional
One of:
Y N E P R U
Categories: PA NPA
Channels: APP BRW 3RI
Enables the communication of trusted beneficiary/whitelist status between the ACS, the DS and the 3DS Requestor. Note: Valid values in the AReq message are Y or N

Meaning of values:

Y 3DS Requestor is whitelisted by cardholder
N 3DS Requestor is not whitelisted by cardholder
E Not eligible as determined by issuer
P Pending confirmation by cardholder
R Cardholder rejected
U Whitelist status unknown, unavailable, or does not apply
whiteListStatusSource
string
Conditional
Regexp: ^(0[123]|[89][0-9])$
Categories: PA NPA
Channels: APP BRW 3RI
This data element will be populated by the system setting Whitelist Status.

Meaning of values:

01 3DS Server
02 DS
03 ACS
80-99 Reserved for DS use
Required if whiteListStatus is not empty

Error object

acsTransID
string
Optional
Format: uuid
Categories: PA NPA
Channels: APP BRW 3RI
Universally unique transaction identifier assigned by the ACS to identify a single transaction.
dsTransID
string
Optional
Format: uuid
Max length: 36
Categories: PA NPA
Channels: APP BRW 3RI
Universally unique transaction identifier assigned by the DS to identify a single transaction.
errorCode
string
Required
One of:
101 102 103 201 202 203 204 301 302 303 304 305 306 307 402 403 404 405
Code indicating the type of problem identified in the message.

Meaning of values:

101 Message Received Invalid
102 Message Version Number Not Supported
103 Sent Messages Limit Exceeded
201 Required Data Element Missing
202 Critical Message Extension Not Recognised
203 Format of one or more Data Elements is Invalid according to the Specification
204 Duplicate Data Element
301 Transaction ID Not Recognised
302 Data Decryption Failure
303 Access Denied, Invalid Endpoint
304 ISO Code Invalid
305 Transaction data not valid
306 Merchant Category Code (MCC) Not Valid for Payment System
307 Serial Number not Valid
402 Transaction Timed Out
403 Transient System Failure
404 Permanent System Failure
405 System Connection Failure
errorComponent
string
Required
One of:
C S D A
Code indicating the 3-D Secure component that identified the error.

Meaning of values:

C 3DS SDK
S 3DS Server
D Directory Server
A ACS
errorDescription
string
Required
Max length: 2048
Text describing the problem identified in the message.
errorDetail
string
Required
Max length: 2048
Additional detail regarding the problem identified in the message.
errorMessageType
string
Optional
One of:
ARes AReq PRes PReq CRes CReq RReq RRes Erro
Identifies the Message Type that was identified as erroneous.
messageType
string
Required
Must be: Erro
Categories: PA NPA
Channels: APP BRW 3RI
Identifies the type of message that is passed.
messageVersion
string
Required
Must be: 2.2.0
Categories: PA NPA
Channels: APP BRW 3RI
Protocol version identifier This shall be the Protocol Version Number of the specification utilised by the system creating this message.
sdkTransID
string
Optional
Format: uuid
Categories: PA NPA
Channels: APP
Universally unique transaction identifier assigned by the 3DS SDK to identify a single transaction.
threeDSServerTransID
string
Required
Format: uuid
Categories: PA NPA
Channels: APP BRW 3RI
Universally unique transaction identifier assigned by the 3DS Server to identify a single transaction.

Nested objects

ThreeDSRequestorAuthenticationInfo

threeDSReqAuthData
string
Optional
Max length: 20000
Data that documents and supports a specific authentication process. In the current version of the specification, this data element is not defined in detail, however the intention is that for each 3DS Requestor Authentication Method, this field carry data that the ACS can use to verify the authentication process. For example, if the 3DS Requestor Authentication Method is: 03, then this element can carry information about the provider of the federated ID and related information. 06, then this element can carry the FIDO attestation data (including the signature). 07, then this element can carry FIDO Attestation data with the FIDO assurance data signed. 08, then this element can carry the SRC assurance data.

Scheme specific rules:

Visa
Field is required if available
threeDSReqAuthMethod
string
Optional
Regexp: ^(0[1-8]|[89][0-9])$
Mechanism used by the Cardholder to authenticate to the 3DS Requestor.

Meaning of values:

01 No 3DS Requestor authentication occurred (i.e. cardholder “logged in” as guest)
02 Login to the cardholder account at the 3DS Requestor system using 3DS Requestor’s own credentials
03 Login to the cardholder account at the 3DS Requestor system using federated ID
04 Login to the cardholder account at the 3DS Requestor system using issuer credentials
05 Login to the cardholder account at the 3DS Requestor system using third-party authentication
06 Login to the cardholder account at the 3DS Requestor system using FIDO Authenticator
07 Login to the cardholder account at the 3DS Requestor system using FIDO Authenticator (FIDO assurance data signed)
08 SRC Assurance Data

Scheme specific rules:

Visa
Field is required
threeDSReqAuthTimestamp
string
Optional
Format: yyyymmddhhmm
Date and time in UTC of the cardholder authentication.

Scheme specific rules:

Visa
Field is required if available

DeviceRenderOptions

sdkInterface
string
Optional
One of:
01 02 03
Lists all of the SDK Interface types that the device supports for displaying specific challenge user interfaces within the SDK.

Meaning of values:

01 Native
02 HTML
03 Both
sdkUiType
Array of string
Optional
One of:
01 02 03 04 05
Lists all UI types that the device supports for displaying specific challenge user interfaces within the SDK.

Meaning of values:

01 Text
02 Single Select
03 Multi Select
04 OOB
05 HTML Other (valid only for HTML UI)

AcctInfo

chAccAgeInd
string
Optional
One of:
01 02 03 04 05
Length of time that the cardholder has had the account with the 3DS Requestor.

Meaning of values:

01 No account (guest check-out)
02 Created during this transaction
03 Less than 30 days
04 30−60 days
05 More than 60 days

Scheme specific rules:

Visa
Field is required if available
chAccChange
string
Optional
Format: yyyymmdd
Date that the cardholder’s account with the 3DS Requestor was last changed, including Billing or Shipping address, new payment account, or new user(s) added.

Scheme specific rules:

Visa
Field is required if available
chAccChangeInd
string
Optional
One of:
01 02 03 04
Length of time since the cardholder’s account information with the 3DS Requestor was last changed, including Billing or Shipping address, new payment account, or new user(s) added.

Meaning of values:

01 Changed during this transaction
02 Less than 30 days
03 30−60 days
04 More than 60 days

Scheme specific rules:

Visa
Field is required if available
chAccDate
string
Optional
Format: yyyymmdd
Date that the cardholder opened the account with the 3DS Requestor.

Scheme specific rules:

Visa
Field is required if available
chAccPwChange
string
Optional
Format: yyyymmdd
Date that cardholder’s account with the 3DS Requestor had a password change or account reset.

Scheme specific rules:

Visa
Field is required if available
chAccPwChangeInd
string
Optional
One of:
01 02 03 04 05
Indicates the length of time since the cardholder’s account with the 3DS Requestor had a password change or account reset.

Meaning of values:

01 No change
02 Changed during this transaction
03 Less than 30 days
04 30−60 days
05 More than 60 days

Scheme specific rules:

Visa
Field is required if available
nbPurchaseAccount
string
Optional
Max length: 4
Regexp: ^[0-9]{1,4}$
Number of purchases with this cardholder account during the previous six months.

Scheme specific rules:

Visa
Field is required if available
paymentAccAge
string
Optional
Format: yyyymmdd
Date that the payment account was enrolled in the cardholder’s account with the 3DS Requestor.

Scheme specific rules:

Visa
Field is required if available
paymentAccInd
string
Optional
One of:
01 02 03 04 05
Indicates the length of time that the payment account was enrolled in the cardholder’s account with the 3DS Requestor.

Meaning of values:

01 No account (guest check-out)
02 During this transaction
03 Less than 30 days
04 30−60 days
05 More than 60 days

Scheme specific rules:

Visa
Field is required if available
provisionAttemptsDay
string
Optional
Max length: 3
Regexp: ^[0-9]{1,3}$
Number of Add Card attempts in the last 24 hours.

Scheme specific rules:

Visa
Field is required if available
shipAddressUsage
string
Optional
Format: yyyymmdd
Date when the shipping address used for this transaction was first used with the 3DS Requestor.
shipAddressUsageInd
string
Optional
One of:
01 02 03 04
Indicates when the shipping address used for this transaction was first used with the 3DS Requestor.

Meaning of values:

01 This transaction
02 Less than 30 days
03 30−60 days
04 More than 60 days

Scheme specific rules:

Visa
Field is required if available
shipNameIndicator
string
Optional
One of:
01 02
Indicates if the Cardholder Name on the account is identical to the shipping Name used for this transaction.

Meaning of values:

01 Account Name identical to shipping Name
02 Account Name different than shipping Name

Scheme specific rules:

Visa
Field is required if available
suspiciousAccActivity
string
Optional
One of:
01 02
Indicates whether the 3DS Requestor has experienced suspicious activity (including previous fraud) on the cardholder account.

Meaning of values:

01 No suspicious activity has been observed
02 Suspicious activity has been observed

Scheme specific rules:

Visa
Field is required if available
txnActivityDay
string
Optional
Max length: 3
Regexp: ^[0-9]{1,3}$
Number of transactions (successful and abandoned) for this cardholder account with the 3DS Requestor across all payment accounts in the previous 24 hours.

Scheme specific rules:

Visa
Field is required if available
txnActivityYear
string
Optional
Max length: 3
Regexp: ^[0-9]{1,3}$
Number of transactions (successful and abandoned) for this cardholder account with the 3DS Requestor across all payment accounts in the previous year.

Scheme specific rules:

Visa
Field is required if available

PhoneNumber

cc
string
Required
Regexp: ^\d{1,3}$
Country code
subscriber
string
Required
Regexp: ^\d{1,12}$
Subscriber number

MerchantRiskIndicator

deliveryEmailAddress
string
Optional
Format: email
Max length: 254
For Electronic delivery, the email address to which the merchandise was delivered.

Scheme specific rules:

Visa
Field is required if available
deliveryTimeframe
string
Optional
One of:
01 02 03 04
Indicates the merchandise delivery timeframe.

Meaning of values:

01 Electronic Delivery
02 Same day shipping
03 Overnight shipping
04 Two-day or more shipping

Scheme specific rules:

Visa
Field is required if available
giftCardAmount
string
Optional
Regexp: ^\d{0,15}$
For prepaid or gift card purchase, the purchase amount total of prepaid or gift card(s) in major units (for example, USD 123.45 is 123).

Scheme specific rules:

Visa
Field is required if available
giftCardCount
string
Optional
Regexp: ^\d{2}$
For prepaid or gift card purchase, total count of individual prepaid or gift cards/codes purchased.

Scheme specific rules:

Visa
Field is required if available
giftCardCurr
string
Optional
Format: currency
For prepaid or gift card purchase, ISO 4217 three-digit currency code of the gift card, other than those listed in Table A.5.

Scheme specific rules:

Visa
Field is required if available
preOrderDate
string
Optional
Format: yyyymmdd
For a pre-ordered purchase, the expected date that the merchandise will be available.

Scheme specific rules:

Visa
Field is required if available
preOrderPurchaseInd
string
Optional
One of:
01 02
Indicates whether Cardholder is placing an order for merchandise with a future availability or release date.

Meaning of values:

01 Merchandise available
02 Future availability

Scheme specific rules:

Visa
Field is required if available
reorderItemsInd
string
Optional
One of:
01 02
Indicates whether the cardholder is reordering previously purchased merchandise.

Meaning of values:

01 First time ordered
02 Reordered

Scheme specific rules:

Visa
Field is required if available
shipIndicator
string
Optional
One of:
01 02 03 04 05 06 07
Indicates shipping method chosen for the transaction. Merchants must choose the Shipping Indicator code that most accurately describes the cardholder’s specific transaction, not their general business. If one or more items are included in the sale, use the Shipping Indicator code for the physical goods, or if all digital goods, use the Shipping Indicator code that describes the most expensive item.

Meaning of values:

01 Ship to cardholder’s billing address
02 Ship to another verified address on file with merchant
03 Ship to address that is different than the cardholder’s billing address
04 “Ship to Store” / Pick-up at local store (Store address shall be populated in shipping address fields)
05 Digital goods (includes online services, electronic gift cards and redemption codes)
06 Travel and Event tickets, not shipped
07 Other (for example, Gaming, digital services not shipped, emedia subscriptions, etc.)

Scheme specific rules:

Visa
Field is required if available

MessageExtension

criticalityIndicator
bool
Required
A Boolean value indicating whether the recipient must understand the contents of the extension to interpret the entire message.
data
json
Required
Max length: 8059
The data carried in the extension.
id
string
Required
Max length: 64
A unique identifier for the extension. Note: Payment System Registered Application Provider Identifier (RID) is required as prefix of the ID.
name
string
Required
Max length: 64
The name of the extension data set as defined by the extension owner.

ThreeDSRequestorPriorAuthenticationInfo

threeDSReqPriorAuthData
string
Optional
Max length: 2048
Data that documents and supports a specific authentication process. In the current version of the specification this data element is not defined in detail, however the intention is that for each 3DS Requestor Authentication Method, this field carry data that the ACS can use to verify the authentication process. In future versions of the specification, these details are expected to be included.

Scheme specific rules:

Visa
Field is required if available
threeDSReqPriorAuthMethod
string
Optional
Regexp: ^(0[1-4])|([89][1-10])$
Mechanism used by the Cardholder to previously authenticate to the 3DS Requestor.

Meaning of values:

01 Frictionless authentication occurred by ACS
02 Cardholder challenge occurred by ACS
03 AVS verified
04 Other issuer methods

Scheme specific rules:

Visa
Field is required if available
threeDSReqPriorAuthTimestamp
string
Optional
Format: yyyymmddhhmm
Date and time in UTC of the prior cardholder authentication.

Scheme specific rules:

Visa
Field is required if available
threeDSReqPriorRef
string
Optional
Max length: 36
This data element provides additional information to the ACS to determine the best approach for handing a request.

Scheme specific rules:

Visa
Field is required if available

ACSRenderingType

acsInterface
string
Required
One of:
01 02
This the ACS interface that the challenge will present to the cardholder.

Meaning of values:

01 Native UI
02 HTML UI
acsUiTemplate
string
Required
One of:
01 02 03 04 05
Identifies the UI Template format that the ACS first presents to the consumer.

Meaning of values:

01 Text
02 Single Select
03 Multi Select
04 OOB
05 HTML Other