---
title: "Check Money-In 3D-Secure Status (PCI-DSS compliant only)"
method: POST
path: "/v2/moneyins/card/direct/{transactionid}/3dauthenticate"
tags: ["MoneyIns | Cards"]
---

# Check Money-In 3D-Secure Status (PCI-DSS compliant only)

`POST /v2/moneyins/card/direct/{transactionid}/3dauthenticate`

After initializing a 3-D Secure transaction with <b>POST /moneyins/card/direct/3dinit</b>, you can choose not to debit the card, and only check if the user has successfully authenticated.<br /><b>This is not a payment.</b><br />
You can not use both <b>POST /moneyins/card/direct/{transactionid}/3dauthenticate</b> and <b>PUT /moneyins/card/direct/{transactionid}/3dconfirm</b>
 - If you only want to check if the user was correctly authenticated use <b>POST /moneyins/card/direct/{transactionid}/3dauthenticate</b>)
 - If you want to receive the payment using 3-DS use <b>PUT /moneyins/card/direct/{transactionid}/3dconfirm</b><br />
A typical use-case: you want to allow your user to save a card for rebills (RegisterCard), but first, you want to make sure that the card belongs to the user and that the user can authenticate successfully.

## Path parameters

- `transactionid` integer, required

## Headers

- `Authorization` string, required
- `PSU-Accept-Language` string
- `PSU-IP-Address` string, required
- `PSU-User-Agent` string

## Request body

- MoneyIn3DAuthenticateInput
  - `card` CardInfo
    - `cardType` 0 | 1 | 2 — Card Type<br/>0 = CB.<br/>1 = Visa.<br/>2 = Mastercard.<br/>
    - `cardNumber` string — Card Number
    - `cardCode` string — CVV Code
    - `cardDate` string — Card Expiration Date
  - `md` string — MD Data Returned by 3-D Secure Site
  - `pares` string — Pares Data Returned by 3-D Secure Authentication Website
  - `specialConfig` string — Leave Empty

## Response `200`

OK

- MoneyIn3DAuthenticateOutput
  - `Operation3DCode` string — Mercanet return code: 00: Authenticated owner 55: Owner not authenticated 62: Owner By-pass on ACS
  - `error` Error
    - `code` integer
    - `message` string
    - `psp` PSP
      - `message` string — Get the Error Message from PSP

## Other responses

- `401` — Unauthorized
- `500` — InternalServerError

---

[API](https://skmtc.net/lemonway/apis/account-onboarding-management-api.md) · [All operations](https://skmtc.net/lemonway/apis/account-onboarding-management-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/lemonway/account-onboarding-management-api/revisions/73309fe68e2d/schema)