Why 3D Secure Isn't Always Enough to Protect You

An online payment is a small choreography involving at least five different parties: the payer, the recipient, their bank, your bank, and the infrastructure connecting them. When something goes wrong, the first thing you discover is that none of the five feels responsible. The second is that, without understanding how the process works, you can't even figure out who to complain to.

New European regulations, progressively implemented in recent years, have significantly raised the bar. Today, any online payment above a certain threshold must go through strong customer authentication, meaning at least two different factors. The practical consequence is that the classic 'copy-paste' card theft is far less effective than before, and scammers have shifted towards social engineering.

Ironically, credit cards are still among the most protective tools we have for online purchases. Chargeback, which is the ability to request a refund in case of a problem, has existed for decades and almost always works. The limitation is that it can take weeks between opening a case and receiving a refund, and not all banks handle it with the same diligence.

When paying online, the first thing I look at is the method the seller asks me to use. If someone insists on an immediate bank transfer to a personal account, or worse, a postal top-up, ten out of ten times something is off. It's not even a matter of trust anymore: it's that these tools, by design, don't provide a real reconsideration mechanism. Once the money is sent, you're chasing it.

One detail almost no one tells you is that online payments in euros between European parties are now almost all instant, and the cost for the bank is close to zero. When someone charges you a small extra fee because 'instant payment costs,' they're telling you something that hasn't been true for years. It's not dramatic, but it's a good indicator of who you're dealing with.

If you want personal advice: always start with the tools that protect you, and then discuss the price. Doing the opposite is like haggling over a car's paint job without ever having looked at the engine. It looks good, but it's a problem on the first long trip.