3D Secure 2

3D Secure 2 (3DS2) adds an additional authentication layer for online card payments. It is required under PSD2 SCA in the EEA and provides liability shift for fraudulent transactions.

Dynamic 3D Secure in Adyen

3DS2 is enabled by default on Adyen merchant accounts. In the Adyen Customer Area you can adjust its behavior under:

Revenue & risk → Dynamic 3D Secure

There you can set the default rule:

• Always – force 3DS whenever possible,

• Prefer not – skip 3DS unless the issuing bank requires it.

No other manual "on/off" switch is needed.

How it works in Sylius

When using Adyen Drop-in with the Advanced flow, 3D Secure 2 works out of the box:

• The checkout frontend calls Adyen /payments.

• If 3DS2 is required, Adyen returns an action (e.g. IdentifyShopper or ChallengeShopper).

• Drop-in automatically handles these flows and finalizes with /payments/details.

• No additional Sylius configuration is required.

Testing

Adyen provides test cards to simulate both flows:

• Challenge flow: Visa 4212 3456 7891 0006, expiry 03/2030, CVC 737

• Frictionless flow: Mastercard 5201 2815 0512 9736, expiry 03/2030, CVC 737

Full list: Adyen test cards

---

For more details about implementation and configuration, see the official Adyen 3D Secure 2 documentation.