Announcement Regarding JCA’s Mandate on 3D Secure Implementation in Japan and Evonet's Response Measures

Dear Valued Customers,

As global concerns over payment security continue to rise, 3D Secure (3DS) authentication has become an essential tool for enhancing payment security. Starting from April 2025, the Japanese government will mandate the use of 3D Secure for all online payment transactions. This regulation aims to reduce fraud risks and enhance consumer payment safety. However, we understand that while 3DS can significantly improve security, it may also impact the user experience, payment flow, and conversion rates.
In order to comply with this new regulation and safeguard transaction security, while minimizing the negative impact on your customers’ experience, we have developed a series of exemption policies. These measures are designed to ensure a smooth, secure payment experience for you and your consumers. Our main goal is to maintain a balance between enhanced security and a seamless user experience.

Our Measures:

1. Handling of Repeated Transactions from the Same Card Number: To ensure security without compromising user experience, we will take a flexible approach to repeated transactions from the same card number.

• First Transaction: The first transaction with the same card number will undergo 3DS authentication to comply with the new security requirements.
• Repeat Transactions Within 30 Days: For repeated transactions from the same card number within 30 days, 3DS authentication will be waived to provide a smoother user experience.
• Repeat Transactions After 30 Days:
  • For credit card transactions, 3DS authentication will be required again to strengthen transaction security.
  • For debit cards and prepaid cards, 3DS authentication will be waived to ensure continued ease of use.
• Repeat Transactions After 180 Days: For debit and prepaid cards, 3DS authentication will be required after 180 days to maintain the security of longer-term transactions.

2. Exemption for Certain Transaction Types: We understand that some transaction types may require a higher level of flexibility and fewer disruptions. Therefore, the following types of transactions will be exempt from 3DS authentication:

• GPAP Transactions (e.g., government payments, public services, etc.)
• MOTO Transactions (Mail Order/Telephone Order transactions)
• MIT Transactions (Merchant Initiated Transactions)
• Special B2B Transactions (e.g., large-scale enterprise payments)

3. Merchant-Requested Reauthentication: During the exemption period, merchants will have the option to proactively request 3DS authentication for a transaction. Once reauthentication is completed, the exemption period will reset according to the new authentication status. This allows merchants to enhance transaction security when needed, while minimizing friction for consumers.
4. Customized Solutions for Special Merchants: For merchants with unique needs, we will offer tailored solutions to ensure that they can comply with the policy while minimizing the impact on their operations.

Why Are We Implementing These Measures?

We recognize that while 3DS authentication is effective at reducing fraud and improving security, it may also introduce friction into the payment process, particularly for repeat or frequent transactions. Our measures aim to ensure that transactions remain secure, while providing a smoother payment experience and minimizing the potential drop in conversion rates. These adjustments are designed to protect both your business and your consumers, allowing you to continue processing payments efficiently while adhering to government regulations.

Continuous Monitoring of Market and Policy Changes

We remain committed to staying updated on the latest developments in the Japanese payment market and will closely monitor any further regulatory changes. Our team will ensure that our policies are adjusted as necessary to keep your payment experience secure and efficient.

We understand that these changes may present challenges, but we believe that with the right approach, we can ensure the right balance between payment security and user experience. We value your partnership and remain committed to delivering secure and seamless payment services. If you have any questions or need further clarification, please feel free to contact us.

Thank you for your understanding and support as we navigate this new phase in payment security together.

Evonet Team

关于日本信用卡协会（JCA）发布的强制要求执行3D Secure认证的公告及Evonet的应对措施

尊敬的客户：

随着全球支付安全形势的日益严峻，3D Secure（3DS）认证作为一种强有力的身份验证手段，已经成为提升支付安全的重要工具。自2025年4月起，日本政府将强制执行3D Secure认证，所有在线支付交易将要求完成此项安全验证。此次政策的出台旨在减少欺诈风险，提高消费者的支付安全性。然而，作为支付行业的服务提供商，我们深知3DS认证虽然有效防范风险，但其也可能对用户体验、支付流程以及交易转化率造成一定的影响。
为了保障交易的安全性，同时尽量减少强制3DS认证对您的消费者带来的负面影响，我们在全面遵守日本政府规定的同时，特别制定了多项豁免政策，旨在为您提供更加平滑、安全的支付体验。我们的核心目标是通过以下措施，确保支付流程的流畅性，并且减少因认证要求增加的交易障碍。

具体措施

1. 针对同一卡号的重复交易处理：在确保支付安全的前提下，我们将对同一卡号的重复交易进行灵活处理。

• 首次交易：所有同一卡号的首次交易将进行3DS校验，确保符合政府的安全要求。
• 30天内的重复交易：对于首次交易后30天内出现的同一卡号重复交易，我们将豁免3DS认证，以确保您和您的消费者享受更为简便的支付体验。
• 30天后的重复交易：
  • 对于信用卡交易，系统将重新进行3DS认证，以加强交易安全。
  • 对于借记卡或预付卡的重复交易，我们将继续豁免3DS认证，减少额外认证步骤带来的不便。
• 180天后的重复交易：借记卡和预付卡在180天后的重复交易将重新进行3DS认证，以进一步提升长期交易的安全性。

2. 豁免特定交易类型：我们认识到某些特殊类型的交易对客户体验和交易流程的要求较高，因此将豁免以下几类交易的3DS认证：

• GPAP交易（例如，政府支付、公共服务等领域的支付）
• MOTO交易（电话订单交易）
• MIT交易（商户发起交易）
• 特殊B2B交易（例如大宗企业支付等特殊交易场景）

3. 商户主动请求重新认证的能力：为了更灵活地适应不同的支付需求，商户可以在交易豁免期间主动请求发起3DS认证。一旦重新认证通过，相关交易将根据新的认证状态重置豁免期限。这意味着商户在必要时可以选择增强交易的安全性，进一步保障资金流转的安全性。
4. 针对特殊商户的定制化服务：对于有特殊需求的商户，我们将根据具体情况提供定制化的解决方案，确保每个商户都能在遵守政策的同时，最大限度地降低3DS认证对其运营的影响。

为何采取这些措施？

我们深知，虽然3DS认证能够有效提升支付交易的安全性，但其对支付体验的影响也不可忽视，尤其是在重复交易、频繁交易的场景下，强制认证可能会导致客户转化率的下降。为了帮助您应对这一转变，我们的措施将确保您的支付流程更加顺畅，同时不会牺牲安全性。在这些调整措施下，您的消费者将享受到更好的支付体验，同时您也能确保符合政府法规的要求。

我们将继续关注市场和政策变化

我们承诺，会持续关注日本支付市场的动态，密切关注日本政府在支付安全方面的进一步政策变化。我们的团队将确保根据实际情况对我们的政策进行适时调整，以保证您和您的消费者在支付过程中能够获得最佳的服务。
我们理解这一政策变动可能会对您和您的消费者带来一定的挑战，但我们相信通过我们的共同努力，我们能够确保支付安全性与用户体验之间的平衡。我们非常重视与您的合作，并将继续为您提供更安全、更便捷的支付服务。如果您有任何疑问或需要进一步了解相关信息，请随时与我们联系。

感谢您的理解与支持，让我们携手应对未来支付新变革，打造更加安全和高效的支付生态。

Evonet 团队