Outseer

Service Overview

3DS is a chain, not a product. A merchant or acquirer submits a transaction to a 3DS Server, the 3DS Server passes it to the scheme Directory Server, the Directory locates the issuer ACS, and the ACS runs the challenge and returns a result. Each link has a different vendor. A merchant only touches the 3DS Server, often indirectly through the acquirer or gateway it already uses, while the Directory belongs to the scheme and the ACS belongs to the issuer. A large share of the 3DS experience is therefore outside merchant control: the challenge page, whether frictionless passes, and which error surfaces on failure are all issuer and scheme decisions. Any 3DS-adjacent product has to be assessed against that boundary.

Outseer positions itself as an All-Cause Fraud Prevention Platform covering 3 risk classes: scams, payments and account takeover. The foundation has two parts, the Outseer Risk Engine and the Outseer Global Data Network, the first making real-time risk decisions and the second supplying cross-institution global data. There are 3 product lines: Outseer Fraud Manager for risk-based decisions that preserve a frictionless experience, Outseer 3-D Secure balancing security and experience to support growth, and Outseer FraudAction providing 7x24 fraud intelligence and cyber attack takedown.

The differentiator is that 3DS decisions and fraud intelligence plus brand protection live on one platform. Most 3DS products answer a single question: should this transaction be challenged. Outseer answers a second one as well, namely who is attacking you, and can push impersonation sites and phishing infrastructure offline. That changes the value curve relative to a pure 3DS provider: when the attack is organised and persistent, intelligence and takedown can be worth more than the decision engine itself.

The reverse also holds. If your fraud is scattered card testing and opportunistic theft, this combination is heavy and a 3DS Server with risk controls is probably enough. A practical test is how much of the last 12 months your team spent tracing attack sources and chasing hosts to remove impersonation sites. If someone owns that work, the combined platform makes sense; if no such tickets exist, your current risk profile does not need it yet.

The vendor also publishes a 2026 consumer study titled Trust on the Line on consumer attitudes toward fraud and authentication friction. It is useful for aligning internal views on the cost of friction, but it is not a performance commitment for any product.

Key Strengths

• Decisions and intelligence on one platform: 3DS decisions use risk judgement at the transaction moment while FraudAction supplies attacker-side intelligence and response. Together they answer where an attack is coming from and whether it will continue, not only whether one payment should be challenged.
• 7x24 takedown is a scarce capability: removing impersonation sites, phishing domains and malicious apps needs continuous work across time zones and hosting providers. Most risk vendors detect but do not act, leaving the gap between discovery and takedown to the customer.
• 3 risk classes instead of 1: scams, payments and account takeover share one decision foundation. For banks the same actors often drive account takeover and payment fraud, and two separate systems create conflicting judgements.
• Risk engine separated from the data network: decision logic and global data evolve independently, so an institution can retune thresholds without replacing the data layer, or widen data coverage without a new policy release.
• 8 covered use cases: authentication, account takeover, bank-grade FIDO, brand impersonation and phishing, CNP fraud, mule detection, scam prevention and transaction fraud. Mule detection and scam prevention matter most because they sit entirely outside 3DS coverage.
• Explicitly built for card-not-present work: CNP fraud prevention is a stated use case, which is more relevant to online-only commerce and subscription billing than to businesses with physical card acceptance.

Product Ecosystem

Outseer 3-D Secure

The 3DS decision product for merchants and acquirers, aimed at balancing security with experience to support growth. It shares data with the platform risk engine, so decisions draw on device, account and historical behaviour rather than only on transaction fields.

Outseer Fraud Manager

The core risk-based decision product covering authentication, account takeover and transaction monitoring. The design goal is a frictionless experience: let low-risk traffic through and grade the rest by risk level instead of adding one uniform challenge.

Outseer FraudAction

A 7x24 fraud intelligence and cyber attack takedown service. It monitors impersonation sites, phishing infrastructure and malicious apps and drives them offline. This line complements transaction decisions by answering where the attackers are.

Outseer Risk Engine and Global Data Network

The Risk Engine is the real-time decision layer and the Global Data Network is the cross-institution data layer supplying shared device, account and attack behaviour signals. Keeping them separate lets policy and data evolve on their own cadence.

Use Case Coverage and Research

The site lists 8 use cases: authentication, account takeover, bank-grade FIDO, brand impersonation and phishing, CNP fraud prevention, mule detection, scam prevention and transaction fraud prevention. The 2026 consumer study Trust on the Line adds a view of how much authentication friction consumers tolerate, useful when arguing internally for a policy change.

Limitations

• Heavy for scattered fraud: if the problem is occasional card testing and opportunistic theft, the intelligence and takedown half adds little while still being paid for. Quantify your risk profile before matching a feature list.
• Part of the 3DS experience is outside your control: challenge UI, frictionless pass rates and failure semantics belong to the issuer ACS and the scheme directory. You can only refine the signals and thresholds you submit.
• Frictionless ratios follow risk models and regulatory exemptions: low-value exemptions, trusted beneficiaries and SCA interpretation are not vendor settings. A product can sharpen signals but cannot promise a ratio.
• 3DS does not cover every fraud type: post-authorisation fraud, friendly fraud, refund abuse and parts of APP scams sit outside the authentication layer. Mule detection and scam prevention cover some of the gap, but dispute handling stays with the merchant.
• Compliance responsibility does not transfer: PCI DSS scope, SCA evidence and local regulatory reporting remain with the merchant and acquirer, and vendors supply tools, intelligence and evidence rather than conclusions.
• Integration and certification take months: the 3DS Server side needs scheme certification while Fraud Manager must be wired into your own channels, and cross-browser and cross-device testing runs on long schedules that stack when several products launch together.
• Cost scales with volume: decision products typically track annual transaction counts, number of channels and intelligence scope, so low-volume businesses pay a high unit cost.
• Intelligence value depends on attack intensity: FraudAction returns the most when external attacks are frequent. In quiet periods its marginal value drops sharply while contracts are usually annual.

Use Cases

• Banks and issuers defending against account takeover (★★★★★): account takeover, authentication and payment fraud share one decision foundation, avoiding conflicting channel policies, and intelligence traces the groups behind them.
• Brands under sustained impersonation and phishing (★★★★★): when 7x24 monitoring and takedown are required, this is the clearest difference from pure risk vendors.
• Cross-border e-commerce and subscription CNP fraud (★★★★☆): card-not-present is a stated use case, and 3DS decisions pair with transaction monitoring, provided you remember 3DS covers authentication only.
• Institutions needing mule detection and scam prevention (★★★★☆): both are blind spots for pure 3DS products and matter more for transfer and account-based businesses.
• Mainland China operations (☆☆☆☆☆): domestic card 3DS runs through domestic acquirers and the domestic scheme and overseas vendors are not part of it. Cross-border and outbound business can use the overseas path after confirming acquirer and scheme admission for the 3DS Server.
• Worst fit: small merchants with minimal fraud loss (★☆☆☆☆): platform and intelligence costs would clearly exceed the savings, and acquirer-provided 3DS with basic controls fits better.

Pricing

Cost drivers include annual transaction count, number of covered channels across online banking, apps, contact centres and e-commerce, authentication method mix, the frictionless ratio you expect, whether intelligence and takedown are included and how many brands and regions they cover, SaaS versus on-premise deployment, and project delivery scope. No price list is published, so concrete quotes belong in a contract.

The table reflects the currently published product structure on the Outseer website. No standard rate card is published; actual quotes and delivery scope are governed by your contract.

FAQ

• Is Outseer just a 3DS provider?
  No. 3-D Secure is 1 of 3 product lines alongside Fraud Manager and FraudAction. The positioning is an all-cause fraud prevention platform, with 3DS covering the authentication link only.

• What does FraudAction actually do?
  It provides 7x24 fraud intelligence and cyber attack takedown, monitoring and acting against impersonation sites, phishing infrastructure and malicious apps. It complements transaction decisions, and its value depends on the attack intensity you actually face.

• Can it guarantee my frictionless ratio?
  No. The ratio follows risk thresholds and regulatory exemptions. A vendor can supply sharper signals and more flexible policy tooling, but the outcome also depends on issuers, schemes and regulators.

• Does using it remove chargeback work?
  No. 3DS covers authentication, while post-authorisation fraud, friendly fraud and refund abuse need separate handling. Mule detection and scam prevention close part of the gap, but dispute processes remain yours.

• Can mainland China merchants use it?
  Domestic card 3DS runs through domestic acquirers and the domestic scheme and overseas providers are not part of it. Cross-border and outbound sellers on overseas acquiring can evaluate the 3DS product after confirming admission and certification with the acquirer.

Source: original 16IDC content. Product capabilities, supported countries and fee definitions follow the official documentation on outseer.com and your contract.