---
title: "3DS challenge"
method: POST
path: "cards#3ds-challenge"
tags: ["webhook-event", "3ds"]
---

# 3DS challenge

`POST cards#3ds-challenge` (webhook)

Triggered when a customer initiates a push notification for 3DS. The provided information can be used to send a push notification to the customer's mobile app.

* Event type: `cards#3ds-challenge`
* Profile level subscriptions: Not Supported
* Application level subscriptions: Supported

Events may not be delivered in the order they occurred. Use `data.occurred_at` to reconcile the order.
See the [Event ordering guide](/guides/developer/webhooks/event-ordering) for details.

See the [Webhooks guide](/guides/developer/webhooks) for setup instructions, signature verification, and best practices.

## Headers

- `X-Signature-SHA256` string
- `X-Delivery-Id` string, uuid
- `X-Test-Notification` boolean

## Payload

- union
  - V4009
    - `schema_version` '4.0.0' — Version of the event schema. Determined by the `schema_version` on your [webhook subscription](/api-reference/webhook).
    - `subscription_id` string, uuid — ID of the webhook subscription that triggered this event.
    - `event_type` string — Event type identifier
    - `sent_at` string, date-time — Timestamp when the event was sent.
    - `data` object
      - `resource` object
        - `client_id` string — Your `api_client_id`
        - `card_token` string — Card token
        - `profile_id` integer — Profile ID
        - `type` string — Resource type (always `card`).
      - `challenge_expires_after` integer — The number of seconds before the challenge expires.
      - `occurred_at` string, date-time — When the challenge is triggered.
      - `challenge_method` string — The challenge method chosen by customer (always `PUSH`).
      - `transaction` object
        - `reference` string — Transaction reference. You should use this field when notifying us of the challenge result.
        - `channel` string — User agent (usually `browser` or `app`).
        - `merchant` object
          - `category` string, nullable — Merchant category code
          - `country` string — Merchant country. Follows ISO 3166-1 alpha-2 standard.
          - `name` string — Merchant name
          - `url` string, nullable — Merchant url
        - `money_value` object
          - `value` number — Transaction amount
          - `currency` string — Currency code
  - V2009
    - `schema_version` '2.0.0' — Version of the event schema. Determined by the `schema_version` on your [webhook subscription](/api-reference/webhook).
    - `subscription_id` string, uuid — ID of the webhook subscription that triggered this event.
    - `event_type` string — Event type identifier
    - `sent_at` string, date-time — Timestamp when the event was sent.
    - `data` object
      - `resource` object
        - `client_id` string — Your `api_client_id`
        - `card_token` string — Card token
        - `profile_id` integer — Profile ID
        - `type` string — Resource type (always `card`).
      - `challenge_expires_after` integer — The number of seconds before the challenge expires.
      - `occurred_at` string, date-time — When the challenge is triggered.
      - `challenge_method` string — The challenge method chosen by customer (always `PUSH`).
      - `transaction` object
        - `reference` string — Transaction reference. You should use this field when notifying us of the challenge result.
        - `channel` string — User agent (usually `browser` or `app`).
        - `merchant` object
          - `category` string, nullable — Merchant category code
          - `country` string — Merchant country. Follows ISO 3166-1 alpha-2 standard.
          - `name` string — Merchant name
          - `url` string, nullable — Merchant URL
        - `money_value` object
          - `value` number — Transaction amount
          - `currency` string — Currency code

## Acknowledgement `200`

Return any `2xx` status to acknowledge receipt of the event.

- object
  - `status` string

---

[API](https://skmtc.net/wise/apis/platform-api.md) · [All operations](https://skmtc.net/wise/apis/platform-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/wise/platform-api/revisions/4907a1d269ab/schema)