What Is Frictionless 3DS
The 3DS2 protocol was designed so that in most cases, users never even notice authentication happening. This is the frictionless flow: the bank receives transaction data, analyzes it in the background, and automatically approves it without any action from the cardholder.
In frictionless mode, the bank receives a rich data set from the processor: device type, transaction history, IP address, geolocation, and browser fingerprint. If everything looks familiar and safe, the bank immediately responds with "Y" (Authentication successful).
Why Frictionless Flow Fails
Frictionless authentication can fail for several reasons:
- Bank requested a challenge. The available data was not convincing enough for the bank to approve silently. Instead of declining, the bank switches to challenge flow — requesting an OTP or biometrics.
- ACS technical failure. The bank's server did not respond in time and the request timed out.
- Card does not support 3DS2. Older cards only work with 3DS1, which requires a redirect and manual confirmation.
- Merchant misconfigured 3DS2. Incomplete data is sent, preventing the bank from making a frictionless decision.
- Suspicious pattern. New device, unusual amount, different city or country — the bank prefers to verify.
What Happens When It Falls Back to Challenge
If frictionless flow fails, the processor automatically initiates challenge flow. This is normal and does not mean the payment will be declined — it just requires one extra step:
- A popup window or redirect to the bank's page appears.
- The bank sends an OTP to your phone or requests confirmation in the app.
- After successful confirmation, the payment completes.
Fix Steps
Follow the on-screen instructions. If a challenge appears, complete it. This is not an error — it is an additional security step.
Make sure you have access to your phone. The OTP will be sent to the number linked to your card. Verify your SIM is active.
Check bank notifications. Some banks use push notifications instead of SMS for the challenge.
Update your banking app. An outdated app may not support in-app challenge for 3DS2.
Try the payment without VPN. An unfamiliar IP increases the likelihood of a challenge and can cause redirect issues.
Use a Marix card. Marix cards support full 3DS2, increasing the chances of frictionless authentication approval.
FAQ
Does "frictionless failed" mean the payment was declined? No. The transition from frictionless to challenge is not a refusal — it is a request for additional verification. The payment can still complete successfully.
Why do I always get a challenge instead of frictionless? The bank's decision is based on accumulated data about you. New cards, unusual purchases, and new devices frequently trigger challenge flow. Over time, frictionless approval rates tend to improve.
Can the merchant influence which flow is used? Yes. The merchant can indicate a preference in the request (requestorChallengeInd), but the final decision always rests with the bank.
Want to pay without extra authentication steps? Try Marix. Our cards are issued by banks with strong frictionless 3DS2 support.