Legacy Merchant Hosted Card Payment with Acquirer Supported 3DS (Current) 3DS is used to add confidence that the payer is who they say they are and importantly in the event of a dispute liability shift to the Issuer.Payee (Merchant) PSP [Acquirer]Payee (Merchant) PSP [Acquirer]Payee (Merchant) [Acceptor] SitePayee (Merchant) [Acceptor] SitePayer's (Shopper's) BrowserPayer's (Shopper's) BrowserPayer [Cardholder]Payer [Cardholder]Card Scheme DirectoryCard Scheme DirectoryIssuing Bank [Issuer] WebsiteIssuing Bank [Issuer] WebsiteIssuing Bank [Issuer]Issuing Bank [Issuer]HTTPSNegotiation of Payment Terms & Selection of Payment Instrument1Present Check-out page2Select Checkout with Card3Select Card Brand4Payer Fills Form (PAN, Expiry, [CSC], [Billing Address])May be auto-filled from browserPayment Processing5Payment InitiationCustom code on merchant webpage can encrypt payload to reduce PCI burden from SAQ D to SAQ A-EPopt6Store CardMerchant can store card details apart from CSC (even if encrypted) for future use (a.k.a. Card on File)7Authorise3D SecureAt this point, the Merchant or Merchant's PSP can decide if it wishes to invoke 3DS. This is often based upon dynamic factors, e.g. if the card has been used before or if shipping address different from billing address8BIN to URL lookup (VAReq message)9Lookup URL from BIN10“PING”verify URL validity11“PING” response12URL133DS redirect (PAReq message)143DS redirect (PAReq message)153DS invoke163DS challenge17Enter 3D Secure credentials183DS response (PARes message)193DS response (PARes message)203DS response (PARes message)213DS response (PARes message)22Verification of PARes signatureEnd of 3D Secure23Authorisation Request24Authorisation Response25Authorisation ResultNotification26Result PagePayment Processing Continued: Request for Settlement process (could be immediate, batch (e.g. daily) or after some days)alt27CaptureLater Capture may be called, for example after good shipped or tickets pickedup28Auto Capture in batch processing at end-of-day29CaptureDelivery of Product30Provide products or services