Result

Field Status Definitions
Required Required fields must be sent. If the data is not sent Ravelin will return an error.
Important Important fields are crucial for performance.
Optional Optional fields are additional data points that can be shared with the card schemes, issuers, and Ravelin. These fields may impact performance or dashboard usability.
Conditional Fields that may be required under certain conditions.

Jump to Response

POST 3ds.live.pci.ravelin.com/3ds/result

Call this endpoint after you have been notified that a 3DS challenge has completed.

The way you are notified depends on the device channel being used:

  • Browser device channel - when you receive a request to your Challenge Notification URL.
  • App device channel - when your mobile app receives a call to the completed() callback method, and notifies your back-end.

If the challenge was successful, the response will contain an authenticationValue which can be used to authorise the transaction with your payment gateway.

For PCI compliance reasons, we delete the 3DS result details shortly after this endpoint is called.

Result Request

Show all
threeDSServerTransID string
2.1.0 2.2.0
APP BRW 3RI
required

The unique identifier (UUID) for tracking the transaction throughout the 3DS process.

Example: "c5584543-b67e-5117-bb34-3567ac6a1123"

Result Response

Show all
timestamp integer

A Unix timestamp indicating when we finished handling the request.

status integer

The HTTP response status code.

cardScheme string
2.1.0 2.2.0

The card scheme which the card uses.

Example: "Visa"
liabilityShifted boolean

Whether liability for this transaction was shifted to the issuer. See Liability Shift.

Example: true
data object

The Result Response details.

Hide definition
messageVersion string
2.1.0 2.2.0
APP BRW 3RI

3DS protocol version identifier.

threeDSServerTransID string
2.1.0 2.2.0
APP BRW 3RI

The unique identifier (UUID) for tracking the transaction throughout the 3DS process.

Example: "c5584543-b67e-5117-bb34-3567ac6a1123"
sdkTransID string
2.1.0 2.2.0
APP

Universally unique transaction identifier assigned by the 3DS SDK to identify a single transaction.

Example: "a3384543-b67e-5117-bb34-4567ac6a1123"
authenticationType string
2.1.0 2.2.0
APP BRW

The type of authentication the issuer used to challenge the Cardholder.

Options:
01Static, for example, a password or passcode
02Dynamic, for example, a one time password (OTP)
03Out-of-Band (OOB), for example, using the issuing bank's mobile app
04Decoupled Authentication
authenticationValue string
2.1.0 2.2.0
APP BRW 3RI

The card scheme specific value to be used for authorising the transaction. Also referred to as "CAVV" (Cardholder Authentication Verification Value) by Visa, AAV (Accountholder Authentication Value) by Mastercard and AEVV (American Express Verification Value) by American Express.

There are limitations on when and for how long the authenticationValue can be stored.

Please refer to the Payment Card Industry 3-D Secure (PCI 3DS) guide for further details.

transStatus string
2.1.0 2.2.0
APP BRW 3RI

Indicates the outcome of the authenticate request, and how to proceed.

Options:
YAuthentication Successful

The authentication was successful, continue to authorisation using the authenticationValue from the Result Response.

AAuthentication Attempted

3DS was attempted but was not possible. However the card scheme granted a successful authentication on the issuer's behalf.

NAuthentication Failed

The authentication failed, stop processing the transaction.

UAuthentication Unavailable

Authentication could not be performed. You may attempt to proceed to authorisation without an authenticationValue.

RAuthentication Rejected

The issuer rejected the authentication attempt and requests that authorisation is not attempted.

transStatusReason string
2.1.0 2.2.0
APP BRW 3RI

Provides information on the transStatus value.

Options:
01Card authentication failed
02Unknown device
03Unsupported device
04Exceeds authentication frequency limit
05Expired card
06Invalid card number
07Invalid transaction
08No card record
09Security failure
10Stolen card
11Suspected fraud
12Transaction not permitted to cardholder
13Cardholder not enrolled in service
14Transaction timed out at the ACS
15Low confidence
16Medium confidence
17High confidence
18Very high confidence
19Exceeds ACS maximum challenges
20Non-payment (NPA) transaction not supported
213RI transaction not supported
22ACS technical issue
23Decoupled authentication required by ACS but not requested by 3DS Requestor
243DS Requestor decoupled authentication max expiry time exceeded
25Insufficient time provided for decoupled authentication to authenticate cardholder. ACS will not attempt authentication
26Authentication attempted but not performed by the cardholder
eci string
2.1.0 2.2.0
APP BRW 3RI

Electronic Commerce Indicator - a payment system specific value which indicates the result of the attempt to authenticate the cardholder.

Options:
00Authentication Failed

Mastercard

01Authentication attempted, but not completed

Mastercard

02Authentication Successful

Mastercard

05Authentication Successful

Visa, American Express, Discover, JCB, UnionPay

06Authentication attempted, but not completed

Visa, American Express, Discover, JCB, UnionPay

07Authentication Failed

Visa, American Express, Discover, JCB, UnionPay

interactionCounter string
2.1.0 2.2.0
APP BRW

The number of authentication attempts by the cardholder, for example, they may attempt a second time if they enter their password incorrectly.

challengeCancel string
2.1.0 2.2.0
APP BRW

Indicates that the authentication was cancelled

Options:
01Cardholder selected "Cancel"
023DS Requestor cancelled authentication
03Transaction abandoned
04Transaction timed out at ACS
05Transaction timed out at ACS - First Challenge Request (CReq) not received by the ACS
06Transaction error
07Unknown
whiteListStatus string
2.2.0
APP BRW 3RI

Indicates whether the cardholder has added the merchant to their list of trusted merchants. A cardholder can typically only choose to trust a merchant after successfully completing a challenge. A cardholder may not be required to complete a challenge with a merchant they have previously trusted.

Options:
YMerchant is trusted by cardholder
NMerchant has not yet been trusted by cardholder
ENot eligible as determined by issuer
PPending confirmation by cardholder
RCardholder rejected the request to trust the merchant
UTrusted status unknown, unavailable, or does not apply
whiteListStatusSource string
2.2.0
APP BRW 3RI

Identifies the system which set the whiteListStatus value.

Options:
013DS Server
02Directory Server (DS)
03Access Control Server (ACS)

Feedback