What Visa Secure is
Visa Secure is Visa's program for using EMV 3-D Secure (3DS) to authenticate Visa cardholders during online purchases. It connects a participating merchant with the cardholder's bank, also called the issuer, to help confirm that the person using the card is its rightful account holder.
Visa Secure was formerly called Verified by Visa. It applies to online card payments, where the physical card is not presented. It is an authentication step, not the payment approval itself.
Visa Secure helps verify online Visa cardholders, but authentication does not guarantee approval or prevent every dispute.
How Visa Secure works
When your checkout requests authentication, transaction, device and behavioral data are exchanged with the issuer. The issuer evaluates hundreds of data points in milliseconds to help decide whether the cardholder is genuine and how to handle the transaction.
Most purchases pass without a visible extra step. For a purchase assessed as unusual or higher risk, the issuer can ask the customer to verify their identity with a one-time code or biometrics. The challenge comes from the issuer, not from a requirement that every customer download an app or register for Visa Secure.
Authentication and authorization are separate decisions. Authentication checks identity; authorization is the issuer's decision to approve or decline based on the account and transaction.
What it means for fraud and checkout
Visa Secure is designed to help reduce unauthorized online card use while limiting unnecessary checkout friction. A low-risk customer can complete a purchase without seeing a challenge, while a higher-risk transaction can prompt extra verification. Authentication does not guarantee that the issuer will approve the sale.
Visa says authentication can shift liability away from a merchant for some fraud-related disputes, subject to the applicable program eligibility rules. Do not treat authentication as a guarantee against chargebacks or all fraud. Visa Secure is an authentication program, not a pricing method: it does not set interchange rates or your processor's markup, and its name alone does not identify a specific charge on your statement.
What you can actually change
You control how authentication fits into your online checkout, not the issuer's risk decision. Focus on whether the flow works for your customers and whether the results justify any provider charges.
- Confirm your checkout and payment setup support Visa Secure for online Visa transactions.
- Review challenge rates and checkout abandonment alongside fraud and authorization results.
- If you are billed for authentication, compare the exact statement descriptor and per-transaction amount with your provider's pricing schedule.
- Keep other fraud controls in place, including transaction monitoring and clear processes for handling customer disputes.
- Test the checkout flow. Place test orders on desktop and mobile to confirm customers can complete authentication without losing their cart.
- Track the outcomes. Compare authenticated transactions with fraud reports, approved sales and checkout completion over time.
- Inspect billed charges. Match any authentication-related statement line to its per-transaction price in your provider's pricing schedule.
Frequently asked questions
Is Visa Secure the same as 3-D Secure?
Visa Secure is Visa's implementation of EMV 3-D Secure (3DS). 3-D Secure is the broader authentication protocol, while Visa Secure is Visa's program using that protocol for online Visa purchases.
Does Visa Secure guarantee that an online payment will be approved?
No. Visa Secure helps authenticate the cardholder, while authorization is a separate issuer decision. The issuer can still decline a transaction based on the account or payment details.
Does Visa Secure prevent chargebacks?
No authentication system prevents every fraud claim or dispute. Visa says authentication can shift liability for some fraud-related disputes, but eligibility rules apply and the result is not guaranteed.