3-D Secure (3DS) is a security check for online card payments that lets your card issuer confirm it is really you before approving the payment. When you buy crypto with a card, your issuer may ask you to enter a one-time passcode or use biometrics, such as a fingerprint, before the payment goes through.
How 3-D Secure works
3-D Secure is a card-industry standard, managed by EMVCo, that checks whether the person paying online is the real cardholder. The shop shares details about the payment and your device with your card issuer, the bank that gave you the card.
As of September 2026, EMVCo describes two paths:
- Frictionless: the issuer approves a low-risk payment without asking you anything.
- Challenge: for a higher-risk payment, the issuer asks you to prove it is you, for example with a one-time passcode or a fingerprint.
Visa calls its programme Visa Secure. Mastercard calls its programme Mastercard Identity Check.
Example
An illustrative case: you pay online with a debit card. Your bank opens a window and asks for a one-time code sent to your phone. You enter the code, the bank confirms it is you, and the payment continues.
Why it matters when you buy crypto
If you pay for crypto with a card, your card issuer may ask for a 3-D Secure check. Finish it in the window that opens, or the payment may not go through. If checks keep failing, see how to fix a failed 3DS authentication.
Card issuers may treat crypto purchases as cash advances, which can add a cash advance fee and interest. Coinmama does not add its own fee. All fees are shown before you confirm your order.
Payment options depend on your country: see supported payment methods before you buy crypto on Coinmama.
Risks and red flags
3-D Secure makes card fraud harder, but scammers imitate it.
- A genuine check appears only during a payment you started. An unexpected code or approval request is a red flag.
- Never share a one-time passcode with anyone who calls, texts or emails you, even if they claim to be from your bank or from Coinmama. Read about phishing attacks and employee impersonator scams.
- Check the shop name and amount before you approve a payment.
Go deeper: our guide on how to buy crypto walks through a purchase step by step.
