3D Secure Test Scripts
Testing Instructions
Below is a list of test cases, for 3D Secure 2, with all supported schemes.
These are broken down by Manual and Automated responses.
3D Secure Supported Card Types
| Card Type | 3DS Version | Available |
|---|---|---|
| Visa | 2.0 | Yes |
| Mastercard | 2.0 | Yes |
| Maestro | 2.0 | Yes |
| American Express | 2.0 | Yes |
| Diners | 2.0 | Yes |
| Discover | 2.0 | Yes |
| JCB | 2.0 | Coming Soon |
Manual Responses (Requiring user interaction)
For the purpose of testing each use case, the below test cards have been programmed to require a challenge which will be displayed to the end user in a web browser and will not continue until actioned.
| 3DS Version | Card Number | Amount | Password | State | Instructions |
|---|---|---|---|---|---|
| 3DS 2 | Visa - 4012006822076852 MasterCard - 5266001057658656 Diners - 3811111111111116 Amex - 378881111444441 |
Any | N/A | N/A | This card will present a PXP Mock 3DS 2 challenge screen with radio button where the outcome can be manually selected before proceeding. |
Automated Responses
For the purpose of testing each use case, the below test cards have been programmed to return specific responses to simulate each possible behaviour and outcome that could occur within a production enviornment.
Any expiry date / amount can be used in conjunction with the below test cards unless specified.
For the challenge flows, the user interaction will not be shown within the iFrame as this has already been pre-determied by the use case.
3D Secure 2.0 Test Cases
Visa
| Test No | Test Case | Card Number | Expected Outcome |
|---|---|---|---|
| #1 | FrictionlessAuthenticated | 4012002436599751 | The card is 3DS 2.0 capable and is authenticated without a challenge |
| #2 | FrictionlessAuthenticated (**Issuer does not yet support device fingerprinting**) |
4713747730076631 | The card is 3DS 2.0 capable but the card issuer does not yet support the device fingerprinting. The card is authenticated without a challenge |
| #3 | FrictionlessNotAuthenticated | 4012004607648219 | The card is 3DS 2.0 capable and is not authenticated immediately without a challenge |
| #4 | FrictionlessNotAuthenticated (**Issuer does not yet support device fingerprinting**) |
4713845329904385 | The card is 3DS 2.0 capable but the card issuer does not yet support the device fingerprinting. The card is not authenticated immediately without a challenge. |
| #5 | Attempted | 4012006646145883 | The card is 3DS 2.0 capable and authentication was attempted. A CAVV is provided as proof of the attempt |
| #6 | Attempted (**Issuer does not yet support device fingerprinting**) |
4713845329903403 | The card is 3DS 2.0 capable but the card issuer does not yet support the device fingerprinting. Authentication was attempted and a CAVV is provided as proof of the attempt |
| #7 | Unavailable | 4012002586146890 | The card is 3DS 2.0 capable but Authentication was Unavailable due to a technical or other issue at the scheme's directory server |
| #8 | Unavailable (**Issuer does not yet support device fingerprinting**) |
4713845329903411 | The card is 3DS 2.0 capable but the card issuer does not yet support the device fingerprinting. Authentication was Unavailable due to a technical or other issue at the scheme's directory server |
| #9 | FrictionlessRejected | 4012008114640379 | The card is 3DS 2.0 capable but was rejected by the card issuer |
| #10 | FrictionlessRejected (**Issuer does not yet support device fingerprinting**) |
4713747730615727 | The card is 3DS 2.0 capable but the card issuer does not yet support the device fingerprinting. The card was rejected by the card issuer. |
| #11 | ChallengeAuthenticated | 4012008587148611 | The card is 3DS 2.0 capable and is authenticated following a successful challenge |
| #12 | ChallengeAuthenticated (**Issuer does not yet support device fingerprinting**) |
4713747730615693 | The card is 3DS 2.0 capable but the card issuer does not yet support the device fingerprinting. The card is authenticated following a successful challenge. |
| #13 | ChallengeNotAuthenticated | 4012009442921515 | The card is 3DS 2.0 capable and is not authenticated following a failed challenge |
| #14 | ChallengeNotAuthenticated (**Issuer does not yet support device fingerprinting**) |
4713747730615701 | The card is 3DS 2.0 capable but the card issuer does not yet support the device fingerprinting. The card is not authenticated following a failed challenge. |
| #15 | Unavailable | 4012006822661778 | The card is 3DS 2.0 capable but Authentication was Unavailable due to a technical or other issue at the scheme's directory server during a challenge |
| #16 | Unavailable (**Issuer does not yet support device fingerprinting**) |
4012006822661778 | The card is 3DS 2.0 capable but the card issuer does not yet support the device fingerprinting. Authentication was Unavailable due to a technical or other issue at the scheme's directory server during a challenge |
| #17 | ChallengeRejected | 4012006822661778 | The card is 3DS 2.0 capable but was rejected by the card issuer following a challenge |
| #18 | ChallengeRejected (**Issuer does not yet support device fingerprinting**) |
4713747730615719 | The card is 3DS 2.0 capable but the card issuer does not yet support the device fingerprinting. The card was rejected by the card issuer following a challenge. |
| #19 | Error | 4111111372680051 | An unexpected error occurred during the authentication process. Details of the error will be included in the API response |
| #20 | Error (**Issuer does not yet support device fingerprinting**) |
4713747730615735 | An unexpected error occurred during the authentication process. Details of the error will be included in the API response. No fingerprinting performed because it's not supported by Issuer. |
MasterCard
| Test No | Test Case | Card Number | Expected Outcome |
|---|---|---|---|
| #1 | FrictionlessAuthenticated | 5266001057658730 | The card is 3DS 2.0 capable and is authenticated without a challenge |
| #2 | FrictionlessAuthenticated (**Issuer does not yet support device fingerprinting**) |
5266009957266702 | The card is 3DS 2.0 capable but the card issuer does not yet support the device fingerprinting. The card is authenticated without a challenge |
| #3 | FrictionlessNotAuthenticated | 5266001057658748 | The card is 3DS 2.0 capable and is not authenticated immediately without a challenge |
| #4 | FrictionlessNotAuthenticated (**Issuer does not yet support device fingerprinting**) |
5266009957266710 | The card is 3DS 2.0 capable but the card issuer does not yet support the device fingerprinting. The card is not authenticated immediately without a challenge. |
| #5 | Attempted | 5266001057658771 | The card is 3DS 2.0 capable and authentication was attempted. A CAVV is provided as proof of the attempt |
| #6 | Attempted (**Issuer does not yet support device fingerprinting**) |
5266009957266785 | The card is 3DS 2.0 capable but the card issuer does not yet support the device fingerprinting. Authentication was attempted and a CAVV is provided as proof of the attempt |
| #7 | Unavailable | 5266001057658789 | The card is 3DS 2.0 capable but Authentication was Unavailable due to a technical or other issue at the scheme's directory server |
| #8 | Unavailable (**Issuer does not yet support device fingerprinting**) |
5266009957266793 | The card is 3DS 2.0 capable but the card issuer does not yet support the device fingerprinting. Authentication was Unavailable due to a technical or other issue at the scheme's directory server |
| #9 | FrictionlessRejected | 5266001057658797 | The card is 3DS 2.0 capable but was rejected by the card issuer |
| #10 | FrictionlessRejected (**Issuer does not yet support device fingerprinting**) |
5266009957266751 | The card is 3DS 2.0 capable but the card issuer does not yet support the device fingerprinting. The card was rejected by the card issuer. |
| #11 | ChallengeAuthenticated | 5266001057658755 | The card is 3DS 2.0 capable and is authenticated following a successful challenge |
| #12 | ChallengeAuthenticated (**Issuer does not yet support device fingerprinting**) |
5266009957266728 | The card is 3DS 2.0 capable but the card issuer does not yet support the device fingerprinting. The card is authenticated following a successful challenge. |
| #13 | ChallengeNotAuthenticated | 5266001057658763 | The card is 3DS 2.0 capable and is not authenticated following a failed challenge |
| #14 | ChallengeNotAuthenticated (**Issuer does not yet support device fingerprinting**) |
5266009957266736 | The card is 3DS 2.0 capable but the card issuer does not yet support the device fingerprinting. The card is not authenticated following a failed challenge. |
| #15 | Unavailable | 5266001057658805 | The card is 3DS 2.0 capable but Authentication was Unavailable due to a technical or other issue at the scheme's directory server during a challenge |
| #16 | Unavailable (**Issuer does not yet support device fingerprinting**) |
5266009957266801 | The card is 3DS 2.0 capable but the card issuer does not yet support the device fingerprinting. Authentication was Unavailable due to a technical or other issue at the scheme's directory server during a challenge |
| #17 | ChallengeRejected | 5266001057618122 | The card is 3DS 2.0 capable but was rejected by the card issuer following a challenge |
| #18 | ChallengeRejected (**Issuer does not yet support device fingerprinting**) |
5266009957266744 | The card is 3DS 2.0 capable but the card issuer does not yet support the device fingerprinting. The card was rejected by the card issuer following a challenge. |
| #19 | Error | 5266001057266666 | An unexpected error occurred during the authentication process. Details of the error will be included in the API response |
| #20 | Error (**Issuer does not yet support device fingerprinting**) |
5266009957266769 | An unexpected error occurred during the authentication process. Details of the error will be included in the API response. No fingerprinting performed because it's not supported by Issuer. |
Maestro
| Test No | Test Case | Card Number | Expected Outcome |
|---|---|---|---|
| #1 | FrictionlessAuthenticated | 5612427025678313 | The card is 3DS 2.0 capable and is authenticated without a challenge |
| #2 | FrictionlessAuthenticated (**Issuer does not yet support device fingerprinting**) |
5612423704917353 | The card is 3DS 2.0 capable but the card issuer does not yet support the device fingerprinting. The card is authenticated without a challenge |
| #3 | FrictionlessNotAuthenticated | 5612427025678321 | The card is 3DS 2.0 capable and is not authenticated immediately without a challenge |
| #4 | FrictionlessNotAuthenticated (**Issuer does not yet support device fingerprinting**) |
5612423704911596 | The card is 3DS 2.0 capable but the card issuer does not yet support the device fingerprinting. The card is not authenticated immediately without a challenge. |
| #5 | Attempted | 5612427025678354 | The card is 3DS 2.0 capable and authentication was attempted. A CAVV is provided as proof of the attempt |
| #6 | Attempted (**Issuer does not yet support device fingerprinting**) |
The card is 3DS 2.0 capable but the card issuer does not yet support the device fingerprinting. Authentication was attempted and a CAVV is provided as proof of the attempt | |
| #7 | Unavailable | 5612427025678362 | The card is 3DS 2.0 capable but Authentication was Unavailable due to a technical or other issue at the scheme's directory server |
| #8 | Unavailable (**Issuer does not yet support device fingerprinting**) |
The card is 3DS 2.0 capable but the card issuer does not yet support the device fingerprinting. Authentication was Unavailable due to a technical or other issue at the scheme's directory server | |
| #9 | FrictionlessRejected | 5612427025678370 | The card is 3DS 2.0 capable but was rejected by the card issuer |
| #10 | FrictionlessRejected (**Issuer does not yet support device fingerprinting**) |
5612423704911638 | The card is 3DS 2.0 capable but the card issuer does not yet support the device fingerprinting. The card was rejected by the card issuer. |
| #11 | ChallengeAuthenticated | 5612427025678339 | The card is 3DS 2.0 capable and is authenticated following a successful challenge |
| #12 | ChallengeAuthenticated (**Issuer does not yet support device fingerprinting**) |
5612423704911604 | The card is 3DS 2.0 capable but the card issuer does not yet support the device fingerprinting. The card is authenticated following a successful challenge. |
| #13 | ChallengeNotAuthenticated | 5612427025678347 | The card is 3DS 2.0 capable and is not authenticated following a failed challenge |
| #14 | ChallengeNotAuthenticated (**Issuer does not yet support device fingerprinting**) |
5612423704911612 | The card is 3DS 2.0 capable but the card issuer does not yet support the device fingerprinting. The card is not authenticated following a failed challenge. |
| #15 | Unavailable | 5612427025678396 | The card is 3DS 2.0 capable but Authentication was Unavailable due to a technical or other issue at the scheme's directory server during a challenge |
| #16 | Unavailable (**Issuer does not yet support device fingerprinting**) |
5612423704911679 | The card is 3DS 2.0 capable but the card issuer does not yet support the device fingerprinting. Authentication was Unavailable due to a technical or other issue at the scheme's directory server during a challenge |
| #17 | ChallengeRejected | 5612427025637699 | The card is 3DS 2.0 capable but was rejected by the card issuer following a challenge |
| #18 | ChallengeRejected (**Issuer does not yet support device fingerprinting**) |
5612423704911620 | The card is 3DS 2.0 capable but the card issuer does not yet support the device fingerprinting. The card was rejected by the card issuer following a challenge. |
| #19 | Error | 5612427025678388 | An unexpected error occurred during the authentication process. Details of the error will be included in the API response |
| #20 | Error (**Issuer does not yet support device fingerprinting**) |
5612423704911646 | An unexpected error occurred during the authentication process. Details of the error will be included in the API response. No fingerprinting performed because it's not supported by Issuer. |
American Express
| Test No | Test Case | Card Number | Expected Outcome |
|---|---|---|---|
| #1 | FrictionlessAuthenticated | 375987112281683 | The card is 3DS 2.0 capable and is authenticated without a challenge |
| #2 | FrictionlessAuthenticated (**Issuer does not yet support device fingerprinting**) |
375987123418258 | The card is 3DS 2.0 capable but the card issuer does not yet support the device fingerprinting. The card is authenticated without a challenge |
| #3 | FrictionlessNotAuthenticated | 375987112281691 | The card is 3DS 2.0 capable and is not authenticated immediately without a challenge |
| #4 | FrictionlessNotAuthenticated (**Issuer does not yet support device fingerprinting**) |
375987123418266 | The card is 3DS 2.0 capable but the card issuer does not yet support the device fingerprinting. The card is not authenticated immediately without a challenge. |
| #5 | Attempted | 375987112281733 | The card is 3DS 2.0 capable and authentication was attempted. A CAVV is provided as proof of the attempt |
| #6 | Attempted (**Issuer does not yet support device fingerprinting**) |
375987123418308 | The card is 3DS 2.0 capable but the card issuer does not yet support the device fingerprinting. Authentication was attempted and a CAVV is provided as proof of the attempt |
| #7 | Unavailable | 375987112281741 | The card is 3DS 2.0 capable but Authentication was Unavailable due to a technical or other issue at the scheme's directory server |
| #8 | Unavailable (**Issuer does not yet support device fingerprinting**) |
375987123418316 | The card is 3DS 2.0 capable but the card issuer does not yet support the device fingerprinting. Authentication was Unavailable due to a technical or other issue at the scheme's directory server |
| #9 | FrictionlessRejected | 375987112281758 | The card is 3DS 2.0 capable but was rejected by the card issuer |
| #10 | FrictionlessRejected (**Issuer does not yet support device fingerprinting**) |
375987123418324 | The card is 3DS 2.0 capable but the card issuer does not yet support the device fingerprinting. The card was rejected by the card issuer. |
| #11 | ChallengeAuthenticated | 375987112281709 | The card is 3DS 2.0 capable and is authenticated following a successful challenge |
| #12 | ChallengeAuthenticated (**Issuer does not yet support device fingerprinting**) |
375987123418274 | The card is 3DS 2.0 capable but the card issuer does not yet support the device fingerprinting. The card is authenticated following a successful challenge. |
| #13 | ChallengeNotAuthenticated | 375987112281717 | The card is 3DS 2.0 capable and is not authenticated following a failed challenge |
| #14 | ChallengeNotAuthenticated (**Issuer does not yet support device fingerprinting**) |
375987123418282 | The card is 3DS 2.0 capable but the card issuer does not yet support the device fingerprinting. The card is not authenticated following a failed challenge. |
| #15 | Unavailable | 375987112281774 | The card is 3DS 2.0 capable but Authentication was Unavailable due to a technical or other issue at the scheme's directory server during a challenge |
| #16 | Unavailable (**Issuer does not yet support device fingerprinting**) |
375987123418340 | The card is 3DS 2.0 capable but the card issuer does not yet support the device fingerprinting. Authentication was Unavailable due to a technical or other issue at the scheme's directory server during a challenge |
| #17 | ChallengeRejected | 375987112281725 | The card is 3DS 2.0 capable but was rejected by the card issuer following a challenge |
| #18 | ChallengeRejected (**Issuer does not yet support device fingerprinting**) |
375987123418290 | The card is 3DS 2.0 capable but the card issuer does not yet support the device fingerprinting. The card was rejected by the card issuer following a challenge. |
| #19 | Error | 375987112281766 | An unexpected error occurred during the authentication process. Details of the error will be included in the API response |
| #20 | Error (**Issuer does not yet support device fingerprinting**) |
375987123418332 | An unexpected error occurred during the authentication process. Details of the error will be included in the API response. No fingerprinting performed because it's not supported by Issuer. |
Diners Club
| Test No | Test Case | Card Number | Expected Outcome |
|---|---|---|---|
| #1 | FrictionlessAuthenticated | 3811111111111207 | The card is 3DS 2.0 capable and is authenticated without a challenge |
| #2 | FrictionlessAuthenticated (**Issuer does not yet support device fingerprinting**) |
3822222222000010 | The card is 3DS 2.0 capable but the card issuer does not yet support the device fingerprinting. The card is authenticated without a challenge |
| #3 | FrictionlessNotAuthenticated | 3811111111111173 | The card is 3DS 2.0 capable and is not authenticated immediately without a challenge |
| #4 | FrictionlessNotAuthenticated (**Issuer does not yet support device fingerprinting**) |
3822222222000028 | The card is 3DS 2.0 capable but the card issuer does not yet support the device fingerprinting. The card is not authenticated immediately without a challenge. |
| #5 | Attempted | 3811111111111165 | The card is 3DS 2.0 capable and authentication was attempted. A CAVV is provided as proof of the attempt |
| #6 | Attempted (**Issuer does not yet support device fingerprinting**) |
3822222222000036 | The card is 3DS 2.0 capable but the card issuer does not yet support the device fingerprinting. Authentication was attempted and a CAVV is provided as proof of the attempt |
| #7 | Unavailable | 3811111111111181 | The card is 3DS 2.0 capable but Authentication was Unavailable due to a technical or other issue at the scheme's directory server |
| #8 | Unavailable (**Issuer does not yet support device fingerprinting**) |
3822222222000044 | The card is 3DS 2.0 capable but the card issuer does not yet support the device fingerprinting. Authentication was Unavailable due to a technical or other issue at the scheme's directory server |
| #9 | FrictionlessRejected | 3811111111111199 | The card is 3DS 2.0 capable but was rejected by the card issuer |
| #10 | FrictionlessRejected (**Issuer does not yet support device fingerprinting**) |
3822222222000051 | The card is 3DS 2.0 capable but the card issuer does not yet support the device fingerprinting. The card was rejected by the card issuer. |
| #11 | ChallengeAuthenticated | 3811111111111124 | The card is 3DS 2.0 capable and is authenticated following a successful challenge |
| #12 | ChallengeAuthenticated (**Issuer does not yet support device fingerprinting**) |
3822222222000069 | The card is 3DS 2.0 capable but the card issuer does not yet support the device fingerprinting. The card is authenticated following a successful challenge. |
| #13 | ChallengeNotAuthenticated | 3811111111111132 | The card is 3DS 2.0 capable and is not authenticated following a failed challenge |
| #14 | ChallengeNotAuthenticated (**Issuer does not yet support device fingerprinting**) |
3822222222000077 | The card is 3DS 2.0 capable but the card issuer does not yet support the device fingerprinting. The card is not authenticated following a failed challenge. |
| #15 | Unavailable | 3811111111111140 | The card is 3DS 2.0 capable but Authentication was Unavailable due to a technical or other issue at the scheme's directory server during a challenge |
| #16 | Unavailable (**Issuer does not yet support device fingerprinting**) |
3822222222000085 | The card is 3DS 2.0 capable but the card issuer does not yet support the device fingerprinting. Authentication was Unavailable due to a technical or other issue at the scheme's directory server during a challenge |
| #17 | ChallengeRejected | 3811111111111157 | The card is 3DS 2.0 capable but was rejected by the card issuer following a challenge |
| #18 | ChallengeRejected (**Issuer does not yet support device fingerprinting**) |
3822222222000093 | The card is 3DS 2.0 capable but the card issuer does not yet support the device fingerprinting. The card was rejected by the card issuer following a challenge. |
| #19 | Error | 3811111111111215 | An unexpected error occurred during the authentication process. Details of the error will be included in the API response |
| #20 | Error (**Issuer does not yet support device fingerprinting**) |
3822222222000101 | An unexpected error occurred during the authentication process. Details of the error will be included in the API response. No fingerprinting performed because it's not supported by Issuer. |
3DS 2.0 - scaChallengeIndicator & WhiteListStatus behaviour
If setting "scaChallengeIndicator": "requestChallengeWithWhitelistPrompt" in the PreAuthentication request, the below amounts will return the specified WhiteListStatus values in the Challenge Response.
For the purpose of testing, please use card 5266001057658755 along with scaPolicy to 2 or 3 which forces 3D Secure 2.0 on all cards.
| Value | Amount | Description |
|---|---|---|
| Y | 157.44 | 3DS Requestor is whitelisted by cardholder |
| N | 157.55 | 3DS Requestor is not whitelisted by cardholder |
| E | 157.66 | Not eligible as determined by issuer |
| P | 157.77 | Pending confirmation by cardholder |
| R | 157.88 | Cardholder rejected |
| U | 157.99 | Whitelist status unknown, unavailable, or does not apply |
scaExemptionEngineResult behaviour
If PSD2 has been enabled on your account, PXP will begin to apply exemptions on your behalf.
The below cards will simulate use cases when exemptions will be applied for 3DS 2 enabled cards, taking into account their issued location in relation to the EEA.
| Card | Region | 3DS Version | Description |
|---|---|---|---|
| 4003028255459216 | EEA | 2.0 | This card is located within the EEA so is mandated for SCA. Set the amount to be 30.00 EUR or below (or equivalent in the chosen currency) to qualify for lowValue. Set the amount to be 30.01 EUR or above (or equivalent in the chosen currency) to recieve noExemptionAvailable. It can be used with any scaPolicy. |
| 4066332133641886 | Non EEA | 2.0 | This card is located outside the EEA so qualifies for oneLegOut. It is best used with scaPolicy 1. |
Updated 4 months ago