Transactions to Merchant account exempt from SCA
Low-risk or low-value transactions are usually exempt from Strong Customer Authentication (SCA) and 3DS checks. 'One leg out transactions' – where either the merchant or customer is outside the EEA (such as New Zealand) – are also exempt.
At any given time, if the overall rate of fraudulent transactions is low enough to be compliant with card scheme rules, we may allow some higher value transactions to skip 3DS.
As a merchant, you can choose to turn off these exceptions so all your customers' transactions are subject to authentication and pass through 3 Domain Security (3DS). At the moment, we don't allow merchants to opt out of 3DS or set their own risk appetite.