3D Secure 2 in Practice: Flows, Exemptions, and Liability Shift
3D Secure 2 is not a switch where turning it on makes you safe and turning it off saves money. It is a mechanism you keep tuning between chargeback liability and conversion rate. This article covers how 3DS1 and 3DS2 differ, the frictionless and challenge flows, the four conditions that make liability shift valid, PSD2 SCA requirements and common exemption types, when to trigger and when to exempt, hosted versus self-built 3DS Server integration, the two-sided effect on success rate and chargebacks, and a tuning checklist.