I am from India and hold a credit card. While transacting in India, it always takes me to 3D Secure authentication page. But while paying in AliExpress, it never takes me to 3D Secure page, yet approves the payment.

Could anyone please explain why it happens or if I can enforce 3D Secure from my side by any means?

  • The business needs to support it, so unless you can make AliExpress change their process, your only options are to live without or not shop there.
    – Aganju
    Jun 17, 2017 at 9:19
  • Thnaks for the response @Aganju. Can my bank ensure that the payment is not approved if not verified by 3D Secure? Do they have the authority to? Jun 17, 2017 at 9:25
  • It would be defined in your credit card contract, but pretty sure it is not there. Large parts of the world don't use 3D, so if your bank would enforce it, your card would be unusable for travel into most if the world.
    – Aganju
    Jun 17, 2017 at 9:29
  • @Aganju thanks a lot. This is what I found out Jun 17, 2017 at 11:49

3 Answers 3


Could anyone please explain why it happens

In general the approach banks take to managing card fraud on "card not present" payments is to make the merchant pay for it. The merchant then gets to decide on what extra security features to use and hence on the balance between user connivance, implementation complexity and fraud protection.

  • 1
    Thanks for the answer. I just spoke to my bank. Turns out inside India, RBI, the central bank, enforces that every merchant has to use 2 factor auth. That is not the case with AliExpress as they're Chinese and RBI has no jurisdiction there. So only if my bank enforces it, it's possible, but it's private bank and security sort of takes a back seat to user convenience(!). So probably there's not much I can do. Jun 17, 2017 at 11:37
  • The network decides on liability rules, not the bank. @Arumoy This isn't a matter of "jurisdiction". A bank can refuse to authorize a transaction regardless of where the merchant is. Jun 28, 2018 at 20:56

Card can be of two types,2d secure and 3d secure.So as payment gateways can be also 2d secure and 3d secure. If a 3d secure card goes through a 2d secure payment gateway it would not ask for otp. All Indian based payment service providers are 3d secure as per RBL mandate. but thats not the case with International payment gateways


It's because the Reserve Bank of India (RBI) = India's Central Bank mandated CNP transactions to use 3DS or similar in 2014.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .