Sagepay - Payment Authorised despite 3dSecure Failure

Question

We're currently updating our SagePay integration to enforce 3DSecure in line with the EU regulations coming into force.

However our tests have found that, even though 3DSecure is marked as a 'Fail', the payment was still authorised. We havent set up any specific rules in the Admin system other than the 3D Secure check. (none of the other 3d secure tick boxes are checked and there are no values in the min/max fields).

We want to set up our system so that if 3Dsecure fails it does not authorise the transaction. How do we do this?

This is a super specific question. Wouldn't you need to provide a lot of code for someone to do this? In fact, it would probably be better to hire someone you trust to take care of this. — GamingFelix
Yeh, i have a team of developers. That's why i came to the "Support forum" for SagePay. (sagepay link directly to StackOverflow as their development support forum). — David Wilson
I don't know, I'd be able to help with the specific code problem if I had the source code. But this seems very general and not at all like the topics they mention here : stackoverflow.com/help/on-topic . , but we'll see what replies you get — GamingFelix
And here, seems you're not at fault. But Sagepay's meta.stackoverflow.com/questions/359288/… — GamingFelix

PeteAUK PeteAUK · Accepted Answer · 2019-08-07T12:02:04

I'm getting exactly the same issues. Pass all of the details correctly and every test card comes back as successfully authorised. This is different to yesterday when I was being sent to the challenge page (which subsequently gave me a 404 error), so I can only surmise that SagePay haven't actually finished writing their 3DSv2 handling.

The "Magic Value" you can pass as the CardHolder doesn't actually do anything either and I'm also getting a server error when passing some of the new fields such as ThreeDSRequestorAuthenticationInfoXML and AcctInfoXML.

Waiting to hear back from an e-mail I've sent to their support team yesterday.

Sagepay - Payment Authorised despite 3dSecure Failure

2 Answers