One-time password (OTP) authentication

If you choose to enroll your Adyen-issued card in 3D Secure through the one-time password (OTP) flow, the cardholder goes through the following process when making an online payment:

1. The cardholder is redirected to a 3D Secure authentication page. In this page, they must provide:
   • Their password.
   • A one-time password (OTP) sent through a text message to their mobile phone number.
2. The cardholder's credentials are validated against the authentication data that you set for the card.
   • If the authentication is successful, the payment is sent to Adyen for authorisation.
   • If the authentication fails, the payment fails.
3. If the payment authorisation is approved, the payment is completed.

Add authentication data

To enroll the Adyen-issued card in 3D Secure, add the cardholder's mobile phone number and a password when issuing cards.

When creating or updating the card, include the authentication object containing:

• A password.
• A phone object that includes the number and type set to mobile.

Adyen enrolls the card with the phone number and password in 3D Secure.

Here is an example of how you can create a card with authentication data to support 3D Secure authentication.

You can also add the object at a later time or change the cardholder's phone number and password by sending a PATCH /paymentInstruments/{id} request to update the card.

Get updates

We will notify you of the status and outcome of the authentication after the cardholder has completed 3D Secure authentication. Regardless of whether the authentication process was successfully completed, failed, or expired, we send the balancePlatform.authentication.created webhook.

To keep track of webhooks, make sure that your server can receive and accept webhooks.

The balancePlatform.authentication.created webhook contains the following information.