3DS Challenge Card Testing Method: A Comprehensive Guide
Learn the 3DS challenge card testing method for secure online transactions with CVV purchases.
Redeem your gift cards at any of our Merchants
Onyx Gift Cards is a Grenadian company designed to introduce, market and manage gift cards systems in Grenada for retailers and corporations. We are enthusiastic about the effect and influence we will have on the local market. We intend to expand our systems regionally with a range of product offerings and services.
Gift cards are the preferred way of giving and receiving gifts. They carry a monetary value that can be redeemed for gifts at your favorite store.
Onyx GiftCards are “Open Gift Cards” which means that they can be redeemed at multiple merchant locations. They are standard credit card size, can fit into the average wallet and made of PVC plastic. Onyx GiftCards are Barcoded for security and safety for the consumer and bear a disclaimer at the back.
Onyx Giftcards can be bought with a branded Card backer which is black in colour and is designed to fit the card. There is an area to write a brief message to the recipient as well.
A 3DS card challenge test procedure confirms that a payment integration can request an issuer challenge and complete it in a sandbox. The test sends an authentication request (AReq), reads the challenge flag in the response (ARes), loads the ACS challenge page, submits the challenge request (CReq), and checks that the final status, ECI, and CAVV reach the authorization message.
EMV 3-D Secure version 2 moves cardholder authentication into an issuer ACS. The merchant 3DS Server sends transaction data, device data, and browser data. The ACS returns one of three outcomes: frictionless approval, frictionless rejection, or a challenge. A test procedure has to cover all three, plus the error paths.
Set threeDSRequestorChallengeInd to 03 (challenge requested by the 3DS Requestor) or 04 (challenge mandated) in the AReq. Sandbox ACS simulators also accept card-specific triggers, such as a fixed OTP of 1234 or a test PAN that always returns transStatus C.
Check the ECI and authentication value against the scheme matrix for the region and card type. Visa sandbox documentation lists 05 for authenticated, 06 for attempted, and 07 for not authenticated. Mastercard Identity Check uses 02, 01, and 00 for the same three states. Values differ by scheme, so read the current scheme test guide before you sign off.
The procedure passes when each planned case returns the expected transStatus, the ECI and authentication value match the scheme matrix, the authorization message carries the values, and the logs reconcile on dsTransID. Repeat the suite after any change to the 3DS Server version, ACS simulator config, or acquirer host.