3D Secure 2.0 is a protocol designed to help prevent credit card fraud by providing an additional means of customer authentication. Please see https://ja.komoju.com/blog/news/3d-secure/ (Japanese only) for more information.

Many regulations and rules require merchants to support 3D Secure.

KOMOJU supports 3D Secure 2.0 out of the box for our primary integration methods (Hosted Page, Hosted Fields). However for merchants who create payments directly, some extra work is required in order to support 3DS.

You can read more about how to test 3D Secure through API in 3D Secure Without a Session.

Test Cards

You can use the following credit card information to test the 3D Secure flow in test mode. Name and CVV can be anything, and expiration date can be any future date.

To improve the reliability and performance of our payment environment, KOMOJU is upgrading its underlying 3D Secure (3DS) infrastructure vendor. From 2026/Sep/01, please use the new test cards to test 3DS.

Authentication success (3DS frictionless)

These card numbers can be used to complete a transaction without an authentication challenge.

From 2026/Sep/01, please use the following cards

Authentication with challenge (3DS friction)

These card numbers can be used to test transactions with a password challenge. Please use 123456 to pass the challenge.

From 2026/Sep/01, please use the following cards

You can use 1234 to pass the challenge or 1111 to fail the challenge.

Authentication rejected (3DS frictionless failure)

These card numbers can be used to test a rejected authentication without a challenge.

From 2026/Sep/01, please use the following cards

Authentication failed on challenge

These card numbers can be used to test transactions with a challenge password that will fail. Please use any number to simulate a failed authentication.

From 2026/Sep/01, use the test cards in “Authentication with challenge” session and use 1111 to fail the challenge.