Which of the following describes a typical 3D Secure flow?

• A. The merchant collects extra customer data
• B. It bypasses all forms of authentication
• C. A bank prompts for a one-time code or biometric verification
• D. It reduces verification requirements

Answer: (C)

3D Secure flow centers on the issuing bank performing a verification of the cardholder during a payment. In a typical flow, the bank prompts you to complete a one-time code or biometric verification, usually shown in the bank’s app or delivered via SMS. Only after you successfully verify your identity does the payment proceed to authorization. This step is driven by the issuer to reduce fraud and shift liability, and the merchant’s role is to support the flow rather than collect extra data or decide authentication themselves. So, the essence is an issuer-initiated authentication with a one-time code or biometric prompt.