3D Secure (3DS) adds an extra layer of security to your online card payments by requiring strong authentication. The steps you follow depend on your card's banking provider.
For: All Spendesk cardholders making online card payments.
Before you start
🔒 Access: Your 3DS verification method depends on your wallet currency (EUR or GBP). You can't switch methods manually.
You need a valid mobile phone number on your Spendesk profile. Landline numbers aren't supported.
EEA (EUR) users must install the Spendesk mobile app before making an online payment.
What is strong authentication?
Strong authentication requires verification of at least two different authentication factors from these three categories:
Something you have (a physical key, a smartphone)
Something you know (a password or PIN)
Something you are (a fingerprint or facial recognition)
Set up 3DS for EEA (EUR) accounts
Download and install the Spendesk mobile app on your phone. SMS codes aren't supported on EEA (EUR) accounts.
Make your online payment as usual.
Open the in-app notification prompting you to validate the payment via 3DS.
Validate the payment in the Spendesk mobile app.
⚠️ Warning: Once you've enabled in-app validation, you can't revert to SMS verification. In-app validation is required under European PSD2 regulations.
Set up 3DS for UK (GBP) accounts
Log in to your Spendesk account.
Navigate to your profile and add your mobile phone number. You need this to receive the SMS code.
Make your online payment as usual.
Enter your payment password (4 capital letters, for example "ERFX") when prompted.
Enter the one-time password (OTP) you receive by SMS.
Your payment is authorized once you enter both the payment password and the SMS code correctly. Your payment password is the same across all your Adyen (GBP) cards.
Where to find your payment password (UK accounts)
In the Spendesk mobile app:
Go to My profile > Security options > Payment passwords, then click Reveal password.
Open any Physical card details page.
Open any Virtual card details page.
In the Spendesk desktop app:
Open the Physical card details page.
Open any Virtual card details page.
Screenshots of where to find your payment password
Virtual cards on the mobile app:
Physical card on the mobile app:
Security settings on the mobile app:
The detailed view:
From virtual cards on the desktop app:
From the physical card on the desktop app:
Troubleshooting
Symptom: You don't receive the SMS code on a UK (GBP) account.
Cause: Your phone number may not be supported by our SMS provider, or your phone settings may be incorrect.
Resolution:
Check that your phone number is correctly entered under Avatar > My profile.
Set your phone's date and time to "Automatic."
Click "Send a new code" if the code doesn't arrive immediately.
Restart your phone if the issue continues.
If your mobile network isn't supported, contact Spendesk support via chat with your network provider name, location, phone number, and the date and time of your last attempt.
Symptom: You don't receive the in-app notification on an EEA (EUR) account.
Cause: Notifications may be disabled, or the app may need an update.
Resolution:
Open the Spendesk app and authenticate manually — any pending action displays automatically.
Check that notifications are enabled for the Spendesk app in your phone settings.
Update the Spendesk app to the latest version.
If the issue continues, delete and reinstall the app. Note that only one device can be registered at a time.
Symptom: Your phone number isn't supported for SMS verification (for example, some non-European numbers).
Cause: Some mobile network providers or countries aren't yet supported by our SMS partner.
Resolution: Contact Spendesk support via chat. In some cases, our team can arrange a fallback to email-based OTP instead of SMS.
💡 Tip: For more detailed troubleshooting steps, see the dedicated 3DS common issues article.