MasterCard Announcements August 2021

MasterCard releases the latest news update for August with a number of important deadlines.

Brexit Related Changes

On September 14, 2021, MasterCard will add UK/Gibraltar to the list of countries where Smart Authentication Stand-in will no longer fully authenticate Intra-EEA/UK/Gibraltar transactions above EUR 30. All Intra-EEA/UK/Gibraltar transactions above EUR 30 will receive a Attempts authentication response. 

In addition, Issuers in UK/Gibraltar may be automatically enrolled into Smart Authentication Direct for Acquirer Exemption service if they step-up more than 10 percent of their authentication requests featuring acquirer exemptions or Strong Consumer Authentication (SCA) flags.

Decommissioning of Attempts Server

The Attempts Servers for 3DS1 is scheduled to be decommissioned on 5th October 2021/

Once the Attempts Server is decommissioned, request to the MasterCard Directory Server will no longer return an Attempts Reply but will return an ‘N’ for ‘Not Enrolled’. This clearly has implications on liability shift.

The recommended course of action to to fail up to 3DS2 for these cases. The Attempts Server is being decommissioned to encourage migration to Version 2.

Important Upcoming Dates

• 5 October 2021: 3DS1 Attempts server to be decommissioned on this date. Card Range Caching will be brought back into service.
• 15 October 2021: SPA1 for EMV 3DS will be retired on this date.
• 30 April 2022: MasterCard will no longer allow 3DS 1.0 account range or Merchant ID enrollments.
• 14 October 2022: MasterCard will no longer process any 3DS 1.0 transactions for cardholder authentication. Any transaction submitted to the MasterCard 3DS 1.0 Directory Server will result in an error response.