Also called: American Express SafeKey, SafeKey
What Amex SafeKey is
Amex SafeKey adds an identity-verification layer to American Express online and in-app purchases. It uses the EMV 3-D Secure standard to let you and the card issuer exchange transaction, customer, merchant, and device information before authorization.
SafeKey is American Express's specific 3-D Secure program, not a separate payment network or a card-processing rate. The issuer uses the exchanged information to assess risk, while your checkout and its 3-D Secure provider pass the authentication request and result.
SafeKey can shift liability for qualifying fraud disputes, but the issuer controls the authentication decision.
How SafeKey authentication works
For a low-risk purchase, the issuer can authenticate in the background without asking the cardmember for another step. For a higher-risk purchase, the issuer can require extra verification, such as a one-time passcode. The issuer makes the risk decision, not your business.
The information can include details already collected during checkout, such as the customer's name, email, phone number, and shipping address. SafeKey supports browser and in-app purchases. Sending accurate checkout information gives the issuer more transaction context without requiring a challenge for every customer.
What SafeKey means for fraud liability and costs
SafeKey's materials state that liability for fraud-related chargebacks transfers from you to the issuer for authenticated and attempted transactions. An authenticated transaction is one where the issuer confirms the cardmember's identity. An attempted transaction is one where you tried SafeKey authentication, but the issuer does not support the required version or its Access Control Server is unavailable.
That liability shift can reduce your exposure to qualifying fraud disputes, but SafeKey does not guarantee fewer disputes, more approvals, or higher sales. Its described function is authentication, not a processing-rate component. The merchant materials do not specify a SafeKey fee or statement descriptor, so do not treat an unlabeled security charge as a confirmed SafeKey fee.
What you can actually change
Your business does not control the issuer's risk decision. You control whether your checkout is set up for SafeKey and whether it passes useful transaction data.
- Confirm your online and in-app checkout supports American Express SafeKey through a 3-D Secure provider.
- Send accurate customer, transaction, merchant, and device data with authentication requests.
- Review authentication results and fraud-related disputes to confirm which transactions were authenticated or attempted.
- Ask for the exact service and billing basis behind any statement line described as an authentication or security fee.
- Verify checkout support. Have your checkout team confirm that SafeKey authentication is enabled for American Express browser and in-app purchases.
- Check the data sent. Review your authentication requests for complete customer, transaction, merchant, and device details.
- Track dispute outcomes. Compare SafeKey authentication results with fraud-related chargebacks to see where liability shifted.
Frequently asked questions
Is Amex SafeKey the same as 3-D Secure?
No. SafeKey is American Express's program built on the EMV 3-D Secure standard. It uses that standard to exchange transaction and customer information between your business and the issuer for authentication.
Does SafeKey require customers to enter a one-time passcode?
No. Low-risk purchases can be authenticated in the background without an extra step. For higher-risk purchases, the issuer can require additional verification, such as a one-time passcode.
Does Amex SafeKey shift chargeback liability?
SafeKey's materials state that liability for fraud-related chargebacks transfers from the merchant to the issuer for authenticated and attempted transactions. An attempted transaction means you tried authentication, but the issuer could not support it or its Access Control Server was unavailable.