What Is Liability Shift
Liability shift is a mechanism within 3D Secure programs that determines who bears the financial responsibility in the event of a fraudulent chargeback.
By default, in a standard Card-Not-Present transaction (online payment without a physical card), the merchant carries the financial liability for fraud. If a cardholder disputes a payment as fraudulent, the merchant loses the funds.
When a transaction goes through 3DS and the bank successfully authenticates the cardholder, the liability shifts to the issuing bank. In a subsequent chargeback, the loss falls on the bank, not the merchant.
When Liability Shift Occurs
A liability shift happens in two scenarios:
- Successful 3DS authentication. The cardholder completed a challenge (entered OTP, confirmed in-app) or the transaction passed frictionless authentication.
- Issuer is not enrolled in 3DS. If the bank does not support 3DS, liability still shifts to the bank — the merchant made a good-faith attempt at authentication.
When Liability Shift Does NOT Occur
The shift does not happen when:
- The merchant did not implement 3DS at all.
- Authentication ended in a genuine failure (not a technical error, but an actual authentication refusal).
- The transaction was exempted from 3DS (e.g., the merchant requested a low-value or TRA exemption).
- A technical error occurred with a "U" (Unable to authenticate) result.
In these cases, the merchant remains liable.
What This Means for Cardholders
As a cardholder, you are protected regardless: if a payment is fraudulent, your money will be returned through the chargeback process regardless of who the liability shifts to. The shift only determines which party in the chain (bank or merchant) absorbs the financial loss.
Understanding liability shift matters more if you use virtual or corporate cards for business payments — the absence of 3DS authentication can complicate dispute resolution.
FAQ
If a transaction went through frictionless — is there a liability shift? Yes. Frictionless is a complete 3DS authentication. The bank decided to approve the transaction based on the data it received, so liability shifts to the bank.
What is an exemption and does it affect liability shift? An exemption removes the transaction from mandatory 3DS (e.g., payments under €30). When a merchant requests an exemption, the liability shift typically does not apply — the merchant retains liability.
Can I dispute a payment that went through 3DS? You can always initiate a chargeback. However, with a successful 3DS authentication on record, it is harder for the bank to classify the transaction as fraudulent — someone with your OTP code confirmed the payment.
Want to pay securely with a clear chain of accountability? Marix cards support 3DS2 and protect your payments on international sites.