What Does "Authentication Required" Mean on Stripe
When paying on a site that uses Stripe, if you see "authentication required" or the payment stalls without completing, it means your bank requires additional verification before approving the transaction.
Technically, this means Stripe received a response from the bank with the code authentication_required (or the older decline code authenticate). The bank is saying: "I recognize this card, but I need to confirm the real cardholder is making this purchase."
What Is SCA and Why Your Bank Requires It
SCA (Strong Customer Authentication) is an authentication standard introduced by the European PSD2 directive. It requires online payments to use at least two of three factors:
- Something you know — password, PIN
- Something you have — phone (for SMS code or push notification)
- Something you are — biometrics (Face ID, fingerprint)
Stripe as a payment gateway initiates a 3DS process to fulfill SCA. If the bank cannot authenticate you silently in the background (frictionless), it requests a challenge — an extra confirmation step.
Fix Steps
Do not close the page. When Stripe shows authentication required, a 3DS popup usually opens automatically within a few seconds. Wait for it.
Check your smartphone. You may receive an SMS with an OTP code or a push notification from your banking app.
Open your banking app. Some banks use only in-app push notifications for SCA, not SMS.
Verify your phone number is current. The code is sent to the number registered with your bank. Make sure your SIM card is active.
Disable blockers and VPN. These can interfere with the 3DS iframe loading or the redirect to your bank's authentication page.
Try a different browser. Safari sometimes blocks 3DS popups. Use Chrome or Firefox instead.
Try a different card. If your bank is experiencing technical issues with SCA, use a card from another bank or a Marix card.
FAQ
Will I be charged if I don't complete authentication? No. The payment will not complete until authentication is successful. If the session times out, the payment attempt is automatically cancelled.
Why did Stripe start requiring authentication when it didn't before? Banks are progressively tightening SCA requirements. A transaction that previously passed frictionless may now require a challenge. This is a normal evolution of security systems.
Is Stripe authentication required permanent? No. Once you successfully authenticate, future transactions may pass frictionless again — especially as your purchase pattern becomes more familiar to the bank.
Tired of repeated authentication prompts? Try Marix. Virtual cards with 3DS2 support provide a smoother payment experience on Stripe-powered sites.