3D Secure

3D Secure authentication for travel bookings

3D Secure 2 on our hosted card form, or the result of 3D Secure done elsewhere, stored in the same token as the card. PCI Booking supports PSD2 Strong Customer Authentication through 3D Secure.

For OTAs and booking engines, PMS and hotel tech and channel managers

Three ways to get the 3D Secure result

We run it.

Our hosted card form runs 3D Secure 2 when the guest enters the card.

It comes with the card.

When a partner sends you a card it has already authenticated, by push or pull, we take in the 3D Secure result with the card.

Your payment provider runs it.

In select cases, we use the 3D Secure of a payment provider you name.

How 3D Secure works with PCI Booking

Authenticated payments

We process payments authenticated with 3D Secure, in line with PSD2 Strong Customer Authentication.

The result stays with the card

The 3D Secure result is stored in the same token as the card, so it is there when you charge later.

Charges after the booking

A deposit or balance charged after the booking can carry the authentication from when the guest booked.

Why it matters

Strong Customer Authentication

Under PSD2, many card payments in the European Economic Area need Strong Customer Authentication. 3D Secure is how card payments meet it. Keeping the result with the token means the authentication is not lost between taking the card and charging it.

Related: Take card details online · Keep cards on file · Everything PCI Booking does · How it works