So to clarify right, the following parties are required to support 3DS for it to appear:
- Merchant’s Acquirer
If they don’t, it won’t appear.
3DSecure pushed all liability onto the bank though, as it’s up to them to verify.
If they decide to go through straight to payment and then authorize that, rest assured this is normal ML by the bank to reduce friction to payments you’d normally make - this raises customer satisfaction as there’s now not another step to purchase.
Rest assured the bank is still equally liable if they decide to push through the 3DS without actually having you verify the payments.
Hope this clarifies anything - for any actual legislation around PDS2 @NFH may be better suited - but that’s essentially how MasterCard 3DSecure, American Express SafeKey and Verified by Visa work and both are complaint with the incoming legislation, to my knowledge.
If there are any other questions, feel free to ask (just make sure you @ me)