3DS2 Protocol for Card Payments

This helps the customer’s bank to evaluate the transaction for risk and decide on the payment flow.

• Frictionless Flow: This flow is activated if the bank determines that the transaction is from a trusted device and allows the payment to go through without any additional authentication from the customer. Currently, this would not be applicable in India for domestic payments as RBI mandates OTP-based authentication. For international payments, this flow is viable.
• Challenge Flow: This flow is activated if the bank determines that the transaction is not from a trusted device and needs additional information. The customer needs to perform additional authentication steps.

• Integration does not differ for challenge or frictionless flow.
• Frictionless flow is not applicable for payments on cards issued in India.

Given below is a diagram that explains the 3DS2 flow:

​

Next Steps

Choose the integration suitable for you:

• Integration Steps for New Razorpay Businesses (Integrating after October 15, 2022)
• Migration Steps for Existing Razorpay Businesses (Integrated before October 15, 2022)