What is 3D Secure Data Only?

3DS Data Only flow is a specialized transaction model used for Mastercard cards.

In this model, the additional fields required by 3DS 2.0 are mapped and sent to Mastercard and issuing banks without requesting user authentication. Mastercard includes its risk data to authorize the transaction while guaranteeing a frictionless experience for the cardholder. This approach is designed to be frictionless, meaning no additional information is requested from the user during the transaction process.

As the issuer is not involved in authentication, the Data Only flow does not provide liability shift; meaning merchants will be accountable for any fraudulent activity associated with these transactions.

Benefits of using Data Only

Improve user experience. The elimination of additional authentication steps results in a quicker and smoother transaction flow, reducing potential cart abandonment rates.
Enhance data insights. By sending additional information to Mastercard and issuing banks, the Data Only model helps create more insightful databases. This can lead to better fraud detection and higher approval rates in future transactions.
Simplified integration. Integrating Data Only is straightforward if the system already supports 3DS 2.0 since the data fields are mapped similarly.

Data Only params integration

To ensure a successful 3DS Data Only authentication, the following parameters are strongly recommended to be shared:

Property	Type	Description
`payer`	Payer object	Cardholder additional Information
`additional_risk_data.shipping.address`	Shipping address object	Information on the shipping/alternative address.

Example request with recommended parameters for Data Only

curl -X POST \
    -H 'X-Date: 2018-02-20T15:44:42.310Z' \
    -H 'X-Login: {X-Login}' \
    -H 'X-Trans-Key: {X-Trans-Key}' \
    -H 'Content-Type: application/json' \
    -H 'X-Version: 2.1' \
    -H 'User-Agent: MerchantTest / 1.0' \
    -H 'Authorization: V2-HMAC-SHA256, Signature: 1bd227f9d892a7f4581b998c21e353b1686a6bdad5940e7bb6aa596c96e0a1aa' \
    -d '{body}'
    https://api.dlocal.com/secure_payments

{
    "amount": 120.00,
    "currency": "BRL",
    "country": "BR",
    "payment_method_id": "CARD",
    "payment_method_flow": "DIRECT",
    "payer":{
        "name": "Thiago Gabriel", // Data Only param
        "email": "[email protected]", // Data Only param
        "document": "53033315550",
        "user_reference": "12345",
        "phone": "123456712345", // Data Only param 
        "address": {
            "state": "Rio de Janeiro", // Data Only param
            "city": "Volta Redonda", // Data Only param
            "zip_code": "27275-595", // Data Only param
            "street": "Servidao B-1", // Data Only param
            "number": "1106" // Data Only param
        },
        "ip": "179.27.83.210", // Data Only param
        "device_id": "2fg3d4gf234" // Data Only param
    },
    "card":{
        "holder_name": "Thiago Gabriel",
        "number": "4111111111111111",
        "cvv": "123",
        "expiration_month": 10,
        "expiration_year": 2040,
        "capture": false
    },
    "order_id": "657434343",
    "notification_url": "http://merchantsite.com/notifications",
    "additional_risk_data": {
       "shipping": {
          "address": {
              "state": "Montevideo", // Data Only param
              "city": "Montevideo", // Data Only param
              "zip_code": "11300", // Data Only param
              "street": "Avda. Brasil", // Data Only param
              "number": "1234 Ap. 501" // Data Only param
          },
     }
}

{
    "id": "D-4-cf8eef6b-52d5-4320-b5ea-f5e0bbe4343f",
    "amount": 120,
    "currency": "BRL",
    "payment_method_id": "CARD",
    "payment_method_type": "CARD",
    "payment_method_flow": "DIRECT",
    "country": "BR",
    "card": {
        "holder_name": "Thiago Gabriel",
        "expiration_month": 10,
        "expiration_year": 2040,
        "brand": "VI",
        "last4": "1111"
    },
    "three_dsecure": {
        "eci": "04"
    },
    "created_date": "2018-12-26T20:26:09.000+0000",
    "approved_date": "2018-12-26T20:26:09.000+0000",
    "status": "AUTHORIZED",
    "status_detail": "The payment was authorized",
    "status_code": "600",
    "order_id": "657434343",
    "notification_url": "http://merchantsite.com/notifications"
}