Verified by Visa (VBV): 2026 Merchant Guide to Visa Secure & 3D Secure

Verified by Visa (VBV) is Visa's cardholder-authentication program - now branded Visa Secure - that uses the 3D Secure protocol to confirm a shopper is the legitimate cardholder before an online payment is approved. When a transaction runs through VBV, the issuing bank reviews 100-plus data points in real time and, for fraud-based disputes, liability shifts from the merchant to the issuer.

Visa retired the "Verified by Visa" name in 2019 in favor of Visa Secure, and the underlying technology moved from 3D Secure 1.0 to 3D Secure 2 (3DS2) - yet merchants, processors, and checkout pages still widely use the term VBV. Visa's own network data shows the payoff: authenticated transactions run about 11 basis points of fraud versus 20 basis points on non-authenticated e-commerce payments, a roughly 45% reduction, plus about a 9% lift in approval rates. This 2026 guide explains how VBV/Visa Secure works, what it does and doesn't protect, and how to enable it. For background on what is a chargeback, plus the disputes authentication can't prevent, see our guides on chargeback fraud and Visa Compelling Evidence 3.0.

What Is Verified by Visa (VBV)?

Verified by Visa is an anti-fraud tool that verifies whether the rightful cardholder is making a purchase. The identity check uses 3D Secure technology. "Three-Domain Secure" means three separate parties confirm the authenticity of a transaction: the merchant's bank, the card issuer, and the payment network (Visa).

When you enroll in Visa Secure, you share roughly ten times more transaction data with Visa - merchandise sold, shipping location, device type, and more. The issuer's risk engine assesses that data to confirm the cardholder's identity. If everything checks out, the payment proceeds invisibly; on the small share of risky transactions, the bank steps up to an extra verification challenge.

Is Verified by Visa the Same as Visa Secure?

Yes. Visa Secure is simply the current name for Verified by Visa. Visa rebranded the program in 2019 to mark its move to 3D Secure 2, the modern, risk-based version of the protocol. The names are interchangeable - "VBV" persists in everyday merchant and processor language, while "Visa Secure" is the official term you'll find in Visa documentation today.

How Does Verified by Visa Work?

Verified by Visa runs a step-by-step verification process behind the scenes:

• Enrollment: Merchants enable 3D Secure 2 through their payment service provider or processor; cardholders are automatically covered through their issuing bank - no separate password registration is required as it was under the old 1.0 spec.
• Customer checkout: The shopper enters standard card details. Visa Secure automatically analyzes 100-plus context data points in real time. For roughly 95% of transactions, the issuer approves frictionlessly and the customer never sees a challenge.
• Step-up authentication: For the ~5% of transactions that look risky, the issuer requests an extra factor - a one-time passcode, biometric approval, or in-app confirmation, usually through the bank's own app rather than a separate webpage.
• Confirmation: If authentication succeeds, the payment completes and fraud liability shifts to the issuer. If it fails, the transaction is declined to help prevent fraud.

Understanding 3D Secure

Verified by Visa is Visa's branded implementation of 3D Secure, a messaging protocol first developed in 1999 and launched commercially by Visa in 2001 as 3D Secure 1.0. That first version forced a password step on nearly every transaction, creating heavy checkout friction.

3D Secure 2 replaced it with risk-based authentication: data and device signals (EMV, biometrics, behavioral patterns) let issuers approve most payments invisibly. 3DS2 is now the global standard and underpins Europe's Strong Customer Authentication (SCA) requirement under PSD2. Visa retired 3D Secure 1.0 for new merchants in October 2022, and every major network now runs its own 3DS2 program - Mastercard Identity Check, American Express SafeKey, and others.

Card-not-present fraud is the reason this matters: Visa's network data shows CNP fraud runs about 7.5 times higher than card-present fraud and accounts for nearly 89% of all payment fraud, which is why every major card brand keeps investing in its own 3DS2 program. For a deeper technical walkthrough of the protocol, see our 3D Secure 2 guide.

What Does "3D Secure Eligible" Mean?

A card or transaction is "3D Secure eligible" when the card's BIN (bank identification number) is enrolled in a 3D Secure program and the transaction data can be checked against it. Not every card is eligible: some issuing banks, prepaid cards, or older card ranges haven't enrolled in 3DS2, so those transactions skip the authentication check entirely and fall back on standard fraud screening. Payment gateways typically flag eligibility automatically during checkout; merchants don't need to check this manually for each transaction, though it explains why some cards trigger a Visa Secure challenge and others never do.

What Does VBV vs Non-VBV Mean?

A "VBV" transaction is one routed through 3D Secure authentication, where the issuer verifies the cardholder. A "non-VBV" transaction skips that extra issuer check - it may still pass basic fraud screening, but it carries no 3D Secure liability shift. For merchants, non-VBV payments are faster but riskier: without authentication, you retain liability for fraud-based chargebacks. The term "non-VBV" is also widely abused in carding circles precisely because those cards bypass the extra security layer.

Pros of Verified by Visa

Verified by Visa's core benefit is robust fraud prevention, but it carries several additional advantages:

• Liability shift: On authenticated transactions, responsibility for fraud-based disputes moves from you to the issuer.
• Reduced chargebacks: Fewer unauthorized-fraud disputes, and the ones that slip through aren't your financial burden.
• Easy compliance: 3D Secure 2 satisfies SCA and similar mandates across many markets out of the box.
• Frictionless protection: Real-time, invisible checks for ~95% of customers keep conversion high while adding security.
• Better risk assessment: Rich shared data improves fraud detection and reduces false positives.
• Interchange discounts: Visa reduces interchange fees on qualified authenticated transactions.

Cons of Verified by Visa

By and large Visa Secure achieves its goal of safer transactions, but there are drawbacks to weigh:

• Possible cart abandonment: The step-up challenge can frustrate the ~5% of customers who hit it, and occasional glitches may slow checkout. Independent analysis of five European markets after SCA enforcement found only about 79% of authenticated transactions completed, with checkout friction costing merchants up to 8-10% of revenue (Forter analysis, published via The Paypers, 2023).
• Exposure to scams: Fraudsters create fake Visa Secure pop-ups, so phishing remains a risk.
• It only covers fraud disputes: Visa Secure does nothing for friendly fraud or service-related chargebacks - the categories that dominate most merchants' dispute volume.

Does VBV Stop Chargebacks?

No - VBV reduces chargebacks but doesn't eliminate them. Verified by Visa only addresses chargebacks tied to unauthorized fraud, and on authenticated transactions it shifts that liability to the issuer, which means the dispute never lands on the merchant's plate in the first place. It offers no protection against friendly fraud (customers disputing legitimate purchases) or service-related disputes like "item not as described" or "credit not processed." Because those categories make up a large and growing share of disputes, Visa Secure should be one layer of a broader strategy, not your whole defense, paired with chargeback alerts that catch the disputes authentication can't stop before they turn into losses.

Frequently Asked Questions

Is Verified by Visa the same as Visa Secure?

Yes. Visa rebranded Verified by Visa as Visa Secure in 2019 alongside its shift to 3D Secure 2. Both names refer to the same cardholder-authentication program.

What is the difference between VBV and non-VBV cards?

A VBV transaction is authenticated through 3D Secure, so the issuer verifies the cardholder and fraud liability can shift to the bank. A non-VBV transaction bypasses that check - faster, but with no liability shift and higher fraud exposure for the merchant.

Is VBV mandatory for merchants?

Not universally. In Europe, PSD2 Strong Customer Authentication effectively requires 3D Secure on most online card payments. In other markets it's optional but strongly recommended for the fraud protection and liability shift it provides.

Does Verified by Visa stop all chargebacks?

No. It reduces fraud-related chargebacks and shifts their liability to the issuer, but it does not stop friendly fraud or service-related disputes, which still fall to the merchant.

What does "3D Secure eligible" mean?

It means the card's BIN is enrolled in a 3D Secure program, so the transaction can be checked against the issuer's risk engine. Cards or transactions that aren't eligible skip the 3DS authentication step and rely on standard fraud screening instead.

How do merchants enable Verified by Visa?

Through your payment gateway or processor's 3D Secure 2 integration. Most modern gateways support Visa Secure natively, so enabling it is typically a configuration step rather than a separate enrollment.

Conclusion

Verified by Visa - Visa Secure - is an important safeguard for the transaction process and a smart layer of fraud defense. But it is preventative only: it won't help you fight the false disputes and friendly fraud that drive most chargebacks. For complete protection, pair Visa Secure with a broader ecommerce fraud prevention strategy and a dedicated dispute-management solution.

Chargeflow automates evidence gathering and chargeback representment across every reason code, with a 100% submission rate and pay-only-if-we-win pricing. Start for free or contact our team to recover chargebacks on autopilot.