3DS Validate Result

https://auth.zamupay.com

POST

/apps/graph/api/v1/cybersource/payer-auth/validate

Step 3 of 3DS flow. Validates the result of the 3DS challenge.

Important: Only proceed to Authorisation if AuthenticationStatus is AUTHENTICATED or ATTEMPTED. A status of FAILED or REJECTED means the cardholder did not authenticate — do not proceed.

Pass the returned AuthenticationId as PayerAuthenticationId in the Authorisation request.

Request

Authorization

Header Params

Body Params application/json

Examples

Responses

🟢200

text/plain

Request Example

Shell

JavaScript

Java

Swift

curl --location 'https://auth.zamupay.com/apps/graph/api/v1/cybersource/payer-auth/validate' \
--header 'Authorization: Bearer {{access_token}}' \
--header 'Content-Type: application/json' \
--data '{
  "AuthenticationId": "AUTH-3DS-00456",
  "TransactionId": "txn_cardinal_0012345"
}'

Response Example

{
  "AuthenticationId": "AUTH-3DS-00456",
  "AuthenticationStatus": "AUTHENTICATED",
  "Eci": "05",
  "Cavv": "AAABCSIIAAAAAAACcwgAEMCoNh==",
  "XId": "MDAwMDAwMDAwMDAwMDAwMDAwODI=",
  "ProtocolVersion": "2.2.0"
}

Modified at 2026-05-07 13:08:30

3DS Enrolment Check

Fraud Screen Transaction