Are you looking for test card numbers?

Would you like to contact support?

Data-only flow

Implement 3D Secure 2 without requesting for an authentication.

Data-only is currently only available in Brazil for Mastercard. Using the data-only flow in non-supported markets can lead to an increased amount of authentication rejections.

In a regular 3D Secure 2 flow, the payment has to be authenticated before it can be authorised. In a data-only flow, you send the same 3D Secure 2 data to the schemes without requesting for an authentication. The data-only request goes directly to the scheme, and then the scheme includes their own risk data in the authorisation message before sending it to the issuer.

Using the data-only flow

The data-only flow allows you to use the scheme's 3D Secure-specific risk scoring models, which helps increase your authorisation rates in specific markets, without incurring additional fees.

Since there is no authentication request to the issuer in a data-only flow, your shoppers will not be presented with a 3D Secure 2 challenge.

Since no strong customer authentication is applied to a data-only transaction, the chargeback liability will stay with you and not shift to the issuer.

Before you begin

Before you can start accepting 3D Secure 2 authenticated transactions on browsers or in-app, make sure that you:

  1. Sign up for an Adyen test account at
  2. Get your API Key. Save a copy as you'll need it for API calls you make to the Adyen payments platform.
  3. Install one of our Libraries to connect with the Adyen APIs. For more information on these steps, refer to Get started with Adyen.

Submit a data-only payment request

Submit POST /authorise call containing the required 3D Secure 2 fields and the following parameter:

  • additionalData.threeDS2DataOnlytrue
We recommend that you provide all available information to increase the likelihood of achieving a frictionless flow and a higher authorisation rate. In addition to the regular parameters you provide to Adyen, send additional parameters in this list.


curl \
-H "X-API-key: [Your API Key here]" \
-H "Content-Type: application/json" \
-d '{
      "threeDS2DataOnly": true
      "holderName":"Card Holder",


You'll receive a response containing:

  • resultCode: If you get an Authorised response, this means that the payment was successful.

For a complete list of resultCode values and the actions that you need to take, see Result codes.

"pspReference": "991563647392517G",
"resultCode": "Authorised",

Testing the data-only flow

Use the test card below to try the 3D Secure 2 data-only flow.

Card Type Card Number Expiry Date CVC/CVV
Mastercard 5454 5454 5454 5454 10/2020 737