3D Secure (3DS) is an additional security layer used during online credit and debit card transactions. It helps us prevent unauthorized card usage by asking cardholders to verify their identity through an extra authentication step.
Why am I seeing a 3D Secure challenge?
To protect you from fraud, we occasionally initiate challenges for extra verification on a transaction.
How does the 3D Secure challenge flow work?
-
Initiation: When you start an online transaction, we might ask for additional verification. You’ll see this request appear in a pop-up on the website where you’re making the purchase. Look for a message like the one below, which guides you through scanning a QR code, logging in and verifying your identity:
- Notification: We’ll send you an email to the address on file and mobile notification. Each one will take you to your Mercury account to log in. You might have to update your mobile app to version 4.17 or later to receive 3DS notifications if you haven’t updated after March 24, 2025. Be on the lookout for an email with the subject line: "Verify Your Identity to Complete Your Purchase"
-
Challenge prompt: Once you’re logged into Mercury, we’ll ask if it’s you making the purchase, and you can confirm or deny. It’ll look like this:
- Completion: Once you’ve let us know it’s you, we’ll complete the transaction.
What if I don’t receive a notification or the challenge times out?
- Email notifications: You’ll always receive an email notification with a link to verify your transaction. The message will be sent to the email address associated with your Mercury account and will have the subject line “Verify Your Identity to Complete Your Purchase”.
- Mobile notifications: Your Mercury mobile app might need to be updated to receive mobile 3DS notifications. If you haven’t updated your app after March 24, 2025, you might not receive a mobile notification. We also strongly recommend setting up biometric verification like FaceID to make it even easier (and more secure) to log in to the mobile app to complete verification.
- Challenge timeout: For your security, challenges time out after 10 minutes. When you log in to the challenge, we’ll show you a countdown timer that displays how much time is left. If 10 minutes have passed since you attempted the transaction, try the transaction again with the merchant.
How do I know if my transaction was successful?
After successfully completing the 3D Secure challenge:
- Confirmation screen: After you click or press “This was me” to verify your identity, we’ll show a confirmation screen letting you know the transaction will progress.
- Merchant confirmation: You should also see the pop-up on your merchant website confirming that the transaction went through.
- Mercury transactions: You should see the transaction reflected as pending on your Mercury Transactions page.
The Mercury Debit Cards are issued by Choice Financial Group and Column N.A., Members FDIC, pursuant to licenses from Mastercard®. The IO Card is issued by Patriot Bank, N.A., Member FDIC, pursuant to a license from Mastercard International Incorporated.