Handling 3D secure

In handling 3D Secure messages, it is important to note that in the United States, banks are not mandated to enforce step-up authentication. Instead, the decision to opt for a data-only transaction or to issue a challenge rests solely with the bank. This flexibility allows banks to apply their risk-based approach, adapting authentication processes according to the specifics of each transaction.