Prevent accepting payment if 3DS fails authentication

  • Resolved Ashish Desai

    (@shubhamgulati12)


    3 years, 9 months ago

    Hi,

    I am using this wonderful plugin and the advanced feature to force 3D secure however there’s a slight issue with one case when 3D secure fails and the payment is still getting marked as a success.

    So, to brief the issue, The real problem here is that 3D Secure authentication failed because the issuer is unavailable. Liability does not shift in this case. This indicates an issuer problem. It is likely in this case that the issuer is experiencing a partial outage.

    Payment example:

    OnPaste.20210520-122522

    As per Stripe support, in order to block such payments, there’s an option to prevent payments to go through for such cases where the issuer is having problems which are available on the below-mentioned page:
    https://stripe.com/docs/issuing/3d-secure#prevent-fraud

    Kindly let us know if you can use any filter on our side to prevent accepting such payments or enable that as a feature as a part of this plugin that would really help us stay protected from fraud payments?

    Looking forward to your response.

Viewing 6 replies - 1 through 6 (of 6 total)

  • +1

    Plugin Author Payment Plugins

    (@mrclayton)

    Hi @shubhamgulati12,

    The docs that you linked to pertain to issued cards which are virtual cards that can be created via Stripe. This plugin does not support the creation of virtual cards so the Authorization object is not relevant.

    Are you issuing virtual cards and allowing customers to pay with them on your site?

    Kind Regards,

    Thread Starter Ashish Desai

    (@shubhamgulati12)

    @mrclayton Thanks very much for your kind response.

    Prepaid cards are accepted on the site however the payment in question was not done via virtual card.

    Here are payment details which clearly shows that it was not a prepaid/virtual card but an actual credit card: https://i.imgur.com/OKiBkwj.png (Sensitive details are hidden)

    So, my question is that is there any way we can deny accepting the payment through stripe in case the 3DS step is unavailable from the issuer (bank) side?

    Kindly advise if this requires follow-up on Stripe support for some additional documentation?

    Plugin Author Payment Plugins

    (@mrclayton)

    Hi @shubhamgulati12,

    Can you share what your account ID is and the payment intent ID for this particular charge? That will allow me to look up the 3DS property and see what the response contained.

    You can send that info to me via the Help button in the plugin settings if you don’t want to share that info publicly.

    Kind Regards

    Thread Starter Ashish Desai

    (@shubhamgulati12)

    @mrclayton I’ve sent the info via the help button using my email. Hope it helps in debugging.
    Please let me know if you need any additional info.

    Plugin Author Payment Plugins

    (@mrclayton)

    @shubhamgulati12

    Here is some helpful info from Stripe regarding liability shift.

    https://stripe.com/docs/payments/3d-secure#disputed-payments

    Based on those docs, liability is shifted if 3DS for the bank is down or not active.

    This can happen if the issuer’s 3D Secure server is down or if the issuer does not support 3D Secure, despite the card network requiring 3D Secure support. During the payment process, the cardholder isn’t prompted to complete 3D Secure authentication, since the card is not enrolled. Although the cardholder did not complete 3D Secure authentication, liability still shifts to the issuer.

    The payment proceeds normally in this situation and it’s controlled by Stripe’s SDK not the plugin.

Viewing 6 replies - 1 through 6 (of 6 total)
  • The topic ‘Prevent accepting payment if 3DS fails authentication’ is closed to new replies.