SecurePay EMV 3D Secure - Magento 2

Magento 2 SecurePay EMV 3D Secure Payments extension allows the store owners to accept credit cards through SecurePay payment gateway.

A product of Australia Post – SecurePay is an online payment service that is easy to integrate, flexible and secure.

Customers have the choice of paying with a range of credit cards, including Visa and MasterCard. SecurePay Online Payments can also be  American Express and Diners Club International.

Payment options

The extension included 2 payment options 

SecurePay Direct Post: Allows your customers to purchase directly from your site using Credit Cards.

SecurePay XML API: Allows your customers to purchase directly from your site using Credit Cards.

Used API Credentials

Merchant ID and Transaction Password provided by SecurePay.

Features of SecurePay - Direct Post integration

• Process credit card details directly at checkout through the API service.
• Accept all major credit cards
• Secure Checkout Process
• Capture new sales.
• Create an invoice automatically.
• Support 3D Secure V2 authentication (EMV 3D Secure).
• Enable or disable the EMV 3D Secure option.
• Refund Online.
• Risk Management.
• Encrypted payment credentials.
• Support SSL Certificate.
• Production/Test environment.
• Support multiple stores.
• Support multiple websites.
• Unlimited domains.

Features of SecurePay - XML API integration

• Process credit card details directly at checkout through the API service.
• Accept all major credit cards.
• Secure Checkout Process
• Authorsie.
• Capture the invoice online.
• Create an invoice automatically.
• Refund Online.
• Risk Management.
• Encrypted payment credentials.
• SSL certificate.
• Production/Test environment.
• Multiple Stores.
• Multiple websites.
• Unlimited domains.

SecurePay 3D Secure 2 (3DS2)

3D Secure 2 (3DS2) is an additional layer of security that aids fraud prevention. A protocol being managed by EMVCo, this is used to verify the identity of the person doing the purchase to ensure that they are the legitimate cardholder even before the payment is done.

This is done by providing the card issuer high volume of contextual data to aid in the decision which authentication flow to be used. The card issuer checks whether the payment being requested is from the legitimate cardholder. This results to a more frictionless experience where customers are verified, and payment then proceeds. In cases where the issuer identifies that the transaction is high risk, they can prompt challenge questions for the customer to answer as an additional verification.

With SecurePay 3DS2 which currently supports protocol version 2.1.0, you will be able to authenticate before submitting payment authorisation requests. Depending on the result of authentication, merchants or issuers can bear responsibility during chargebacks when the payment authorised is found to be fraudulent and not authorised by the cardholder.

To utilise SecurePay 3DS2 feature, firstly, you must have an existing SecurePay eCommerce account. In addition, the card schemes you support should be enabled for 3DS2 through your acquiring facility and your SecurePay account must be enabled for 3DS2.