Electronic Commerce Indicator (ECI) is a value returned by Directory Servers (namely Visa, MasterCard, JCB, etc.) indicating the outcome of authentication attempted on transactions enforced by 3DS.

 

ECI value returned by Visa ↗, American Express, and JCB and its interpretation:

    • ECI 05: 3DS authentication was successful; transactions are secured by 3DS.

    • ECI 06: authentication was attempted but was not or could not be completed; possible reasons being either the card or                       its Issuing Bank has yet to participate in 3DS.

    • ECI 07: 3DS authentication is either failed or could not be attempted; possible reasons being both card and Issuing Bank                     are not secured by 3DS, technical errors, or improper configuration.

 

ECI value returned by MasterCard ↗ and its interpretation:

    • ECI 02: 3DS authentication is successful; both card and Issuing Bank are secured by 3DS.

    • ECI 01: 3DS authentication was attempted but was not or could not be completed; possible reasons being either the card                   or its Issuing Bank has yet to participate in 3DS, or cardholder ran out of time to authorize.

    • ECI 00: 3DS authentication is either failed or could not be attempted; possible reasons being both card and Issuing Bank                     are not secured by 3DS, technical errors, or improper configuration

 

ECI value returned by MyDebit Secure and its interpretation:

    • ECI 15: 3-D Secure authentication is successful, where Merchant, Cardholder and Issuing Bank are all 3-D Secure                                 participants.

    • ECI 16: 3-D Secure authentication was attempted by Merchant but unsuccessful, this can be due to:

                    1. Cardholder is not enrolled to participate in 3-D Secure

                    2. Issuing bank is not 3-D Secure ready or system unavailable

    • ECI 17: 3-D Secure authentication is unsuccessful, or Merchant did not attempt to perform 3-D authentication. Payment                     card is not enrolled to participate in 3-D Secure, or the Issuing bank does not handle transaction as a 3-D Secure                authentication.