3DS Card Challenge Test Procedure | Sandbox Guide

Our Cards

Choose from any of our gift cards to give to your loved ones

related article

giftcardimage

Where to Use?

Redeem your gift cards at any of our Merchants

related article

Where to Buy?

You can purchase a gift card from any of these locations

more on this topic

ABOUT US

about

What is ONYX GiftCards?

Onyx Gift Cards is a Grenadian company designed to introduce, market and manage gift cards systems in Grenada for retailers and corporations. We are enthusiastic about the effect and influence we will have on the local market. We intend to expand our systems regionally with a range of product offerings and services.

What is a Gift Card?

Gift cards are the preferred way of giving and receiving gifts. They carry a monetary value that can be redeemed for gifts at your favorite store.
Onyx GiftCards are “Open Gift Cards” which means that they can be redeemed at multiple merchant locations. They are standard credit card size, can fit into the average wallet and made of PVC plastic. Onyx GiftCards are Barcoded for security and safety for the consumer and bear a disclaimer at the back.
Onyx Giftcards can be bought with a branded Card backer which is black in colour and is designed to fit the card. There is an area to write a brief message to the recipient as well.

How it Works?

  • Buy an Onyx Gift Card at these local stores
  • Give your gift card to friends, family, co-workers, etc.
  • The recipient can shop at our select merchants nationwide
  • Your friends, family, co-workers, etc. will present their gift card at checkout to pay for your item(s)
  • They will walk away happy with the best gift ever...the gift of Choice

Why ONYX GiftCards?

  • Save TIME. No need to run around looking for the perfect gift
  • Redeem from a variety of business island-wide. We will continue adding businesses as fast as ONYX grows.
  • ONYX Gift Cards do not expire
  • Cards are valued at convinient amounts to meet every need and occasion

Answer

A 3DS card challenge test procedure confirms that a payment integration can request an issuer challenge and complete it in a sandbox. The test sends an authentication request (AReq), reads the challenge flag in the response (ARes), loads the ACS challenge page, submits the challenge request (CReq), and checks that the final status, ECI, and CAVV reach the authorization message.

What the test covers

EMV 3-D Secure version 2 moves cardholder authentication into an issuer ACS. The merchant 3DS Server sends transaction data, device data, and browser data. The ACS returns one of three outcomes: frictionless approval, frictionless rejection, or a challenge. A test procedure has to cover all three, plus the error paths.

Prerequisites

Force a challenge in the sandbox

Set threeDSRequestorChallengeInd to 03 (challenge requested by the 3DS Requestor) or 04 (challenge mandated) in the AReq. Sandbox ACS simulators also accept card-specific triggers, such as a fixed OTP of 1234 or a test PAN that always returns transStatus C.

Step by step

  1. Collect device data with the 3DS Method URL and fill the browser fields: accept header, user agent, language, screen size, time zone, JavaScript flag.
  2. Send the AReq from the 3DS Server to the DS.
  3. Read ARes transStatus. C means a challenge. Y, N, U, and R end the flow here.
  4. Render acsURL in an iframe and post the CReq (creq) to it.
  5. Complete the challenge with the sandbox OTP or the simulator choice.
  6. Receive the CRes, then the RReq at the 3DS Server. Record the final transStatus: Y, N, U, or A.
  7. Confirm the ECI and the authentication value (CAVV or AAV) are present in the authorization request sent to the acquirer.
  8. Store dsTransID, acsTransID, transStatus, ECI, and the authentication value for reconciliation.

Test cases to run

Values to verify

Check the ECI and authentication value against the scheme matrix for the region and card type. Visa sandbox documentation lists 05 for authenticated, 06 for attempted, and 07 for not authenticated. Mastercard Identity Check uses 02, 01, and 00 for the same three states. Values differ by scheme, so read the current scheme test guide before you sign off.

Common failures

Pass criteria

The procedure passes when each planned case returns the expected transStatus, the ECI and authentication value match the scheme matrix, the authorization message carries the values, and the logs reconcile on dsTransID. Repeat the suite after any change to the 3DS Server version, ACS simulator config, or acquirer host.

Contact Us

Latest

Read our complete guide: Should You Buy CVV From a Card Shop? The Honest Buyer's Guide