3D Secure on Virtual Cards: Why It's Needed and Why It Sometimes Fails

3D Secure is a protocol that adds an extra confirmation step to a payment: a code from an app, a push notification, or less commonly an SMS. For the user, it's an extra click; for the card issuer, it's a way to offload some responsibility for disputed transactions.

How It Works on a Virtual Card

In most services, 3DS for virtual cards works via a push notification in the issuer's app or Telegram bot, rather than an SMS to a phone number. This is more convenient: the code doesn't arrive at an old number while roaming, isn't delayed by the carrier, and doesn't get lost in spam.

The downside is that if you have no internet at the time of payment, the push won't arrive. Therefore, it's useful to have a backup channel: for example, open the app in advance over Wi-Fi or request a temporary code from support.

Why the Service Sometimes Doesn't Request 3DS

Not every payment goes through 3D Secure. There are three typical reasons:

• The service operates on a recurring billing scheme – subscription repeat charges usually go through without 3DS, otherwise the user would have to manually confirm payment every month.
• The amount is below the threshold at which the acquirer requests additional verification. Each bank sets its own limit.
• The merchant uses a frictionless flow – they check the risk algorithmically and pass through low-risk transactions without user intervention.

What to Do If 3DS Doesn't Arrive

If the payment hangs on the confirmation waiting page – do not click pay again. Duplicate payments are a common cause of two charges for one order. Wait a minute, check notifications, and only then cancel.

If the push never arrives – check whether notifications for the card app are enabled in your phone's system settings. This is a frequent cause of missing confirmations, especially after an iOS update.