What is 3DS?
3D Secure (also known as Visa Secure for Visa cards) is an authentication protocol that adds an extra verification step when you make online purchases. When triggered, you'll receive a push notification or SMS code to confirm the transaction.
How it works
You enter your card details on a merchant's website
The merchant's payment system requests 3DS authentication
You receive a verification request via your chosen delivery method
You confirm the transaction
Once verified, the payment is processed
3DS delivery methods
Method | Description |
In-app confirmation | Approve directly in the Kolo app via push notification |
SMS | Receive a one-time code via text message to your phone |
Receive a one-time code via email | |
Telegram | For Telegram bot users — receive verification in your Telegram chat |
Wallet screen | Confirmation displayed directly on your wallet section |
Types of merchant 3DS behavior
Merchants can configure 3DS in different ways:
Type | Description | Example |
Always ask | 3DS verification is required for every transaction | High-security merchants, government services |
Ask first time | 3DS is required only on your first purchase; subsequent transactions are remembered | Subscription services, streaming platforms |
Ask every time | 3DS is triggered for each transaction, regardless of history | Travel bookings, high-value purchases |
Risk-based | 3DS is triggered only for suspicious or high-risk transactions | Most e-commerce stores |
Common 3DS scenarios
✅ Successful verification
You confirm in app or enter code on website → tap Approve → payment completes
⚠️ Verification timeout
If you don't respond within the time limit (usually 90 seconds), the transaction will fail
Simply retry the payment and approve promptly
❌ 3DS not received
Check your Kolo app notification settings or on other delivery methods
Ensure your phone number is correct in your profile
Try the SMS fallback option if available
Tips
Keep the Kolo app installed with notifications enabled for seamless 3DS approval
Respond quickly — 3DS requests typically expire in a few minutes