Some card schemes have unique merchant onboarding requirements for 3D Secure. This could be for reporting and monitoring, or compliance purposes.
Mastercard uses a tool called Identity Solutions Service Manager (ISSM) to register all merchants with 3D Secure in order for authentications to be processed. Unique identification details are required about the acquirer and merchant, to avoid potential identification issues if merchants are multi-acquired.
We can facilitate enrolment management for up to 1000 merchants per Merchant Enrolment API call (as per Mastercard guidelines). This includes the ability to enrol merchants, unenrol merchants, and query the status of a request to enrol or unenrol merchants. This can be used by acquirers, merchants, or any other payment service provider types.
3D Secure needs to be enabled on your Ravelin account before Merchant Enrolment can be used. Please speak to your account manager about enabling 3D Secure.
To learn about other card scheme enrolment requirements, see this guide.
Use the enrolment endpoint or the unenrolment endpoint and send Ravelin the following information relating to the acquirer and the merchant:
If you are a merchant, and you do not know what some of these merchant or acquirer values are, please speak to your payment gateway(s) and/or acquirer(s).
If unenrolling a merchant, you must supply a reason why the merchant is being unenrolled.
Use the query endpoint to check the status of an enrolment or unenrolment request. You must supply the enrolment request ID, which will be returned to you once the request has been successfully submitted to Mastercard.
Mastercard’s sandbox environment can be accessed by sending requests via your Ravelin sandbox account. This can be used to test merchant enrolment without enrolling merchants.
Mastercard will remove any merchant enrolment records that are enrolled, but have not performed any associated authentications for 13 months or more. This started on 15th July 2024. Merchants on the pending deletion list can be viewed by acquirers by logging into Mastercard’s ISSM portal. To remain enrolled, merchants either need to perform an authentication before the deadline or re-enrol after the deadline.
Was this page helpful?