2D vs 3D Secure: the key differences
The terms are used loosely in sales conversations, so it helps to compare them side by side. The table below describes how the two approaches work in general terms. It is not a description of any specific provider's rules.
| Aspect | 2D (non-3DS) | 3D Secure |
|---|---|---|
| Cardholder authentication | No separate issuer check; card details alone are submitted | Issuer asks the cardholder to confirm, e.g. with a code or app approval |
| Checkout steps | Fewer steps for the customer | One extra step, which may be skipped by the issuer in some cases |
| Who confirms the payer | Relies on the card details being correct | The issuing bank takes part in confirming the payer |
| Dispute exposure | Merchant is generally more exposed to fraud-related disputes | Authentication can change how certain disputes are handled under card scheme rules |
| Payment Gateway Kenya support | Not offered | Card work, where discussed, is 3D-only |
What authentication means for merchants
Authentication is about confirming that the person paying is entitled to use the payment account. Without it, a stolen set of card details can be enough to complete a purchase. The merchant then deals with the order, the dispute and the time spent investigating.
2D processing is often discussed because it removes a checkout step. The trade-off is that the issuer plays no part in confirming the payer. For that reason, Payment Gateway Kenya does not offer 2D or non-3DS processing under any arrangement.
- Ask any provider exactly which authentication steps apply to each payment method.
- Check how disputes and refunds are handled before you go live.
- Treat offers of authentication-free card processing with caution and ask for full written terms.
- Protect your own API credentials and use MFA and role-based access for your team.
For regulatory context, payment systems in Kenya fall under the Central Bank of Kenya and the National Payment System Act 2011. Speak to your own advisers about how this applies to your business.
M-Pesa as the alternative for online payments in Kenya
In Kenya, Payment Gateway Kenya offers M-Pesa only. Our M-Pesa payment gateway handles pay-ins, plus payouts where confirmed for your account. You connect through the API (H2H) or the Hosted Payment Page, which are two ways into the same gateway.
Safaricom's M-PESA Express (Lipa na M-PESA Online) is a prompt-style request started by the business. The customer approves it on their phone with their M-Pesa PIN. Safaricom documentation refers to this prompt as 'STK Push'. PayBill and Till are separate transaction types.
-
Illustrative flow: 1. Customer chooses M-Pesa
At checkout, the customer selects M-Pesa on your site or on the Hosted Payment Page and enters their phone number.
-
Illustrative flow: 2. Payment request is sent
The gateway starts an M-PESA Express request. The customer sees a prompt on their phone and confirms with their PIN.
-
Illustrative flow: 3. Postback to your server
A postback sends the transaction status to your system. Postbacks are for the merchant, not a customer notification service.
-
Illustrative flow: 4. You update the order
Your system marks the order as paid or failed based on the status received, and you tell the customer through your own channels.
Pay-ins, payouts and merchant settlement are three separate flows. A pay-in is the customer paying you, a payout is your business paying a customer, and settlement is funds sent to you. Merchant settlements are sent on the same day (T+0).
Our overall transaction success rate is 85%, measured as successful transactions divided by all transactions. Pricing is Custom / Talk to sales, so ask our team for terms that fit your business.
Frequently asked questions
Short answers to the questions merchants ask most often about 2D payments and M-Pesa. If your question is not covered here, ask our team.
What is a 2D payment gateway?
A 2D payment gateway processes card payments without a separate cardholder authentication step from the issuer. The customer enters card details and the payment proceeds without a code or app approval.
Does Payment Gateway Kenya offer a 2D payment gateway in Kenya?
No. Payment Gateway Kenya never offers 2D or non-3DS processing. Where card flows are discussed, we work with 3D-only flows. In Kenya, the payment method we offer is M-Pesa.
What is the difference between 2D and 3D Secure?
3D Secure adds a step where the card issuer confirms the payer, for example with a one-time code or banking app approval. 2D skips that step, so the payment relies on the card details alone.
What can I use instead of 2D card payments in Kenya?
Payment Gateway Kenya offers M-Pesa pay-ins, plus payouts where confirmed for your account. You can connect through the API (H2H) or the Hosted Payment Page, which are two ways into the same gateway.
How does the customer confirm an M-Pesa payment?
With M-PESA Express (Lipa na M-PESA Online), the business starts a prompt-style request and the customer confirms it on their phone with their M-Pesa PIN. Safaricom documentation calls this prompt 'STK Push'.
When are merchant settlements sent?
Merchant settlements are sent on the same day (T+0). This describes when settlement is sent, not when funds are credited to your account.
How much does the M-Pesa gateway cost?
Pricing is Custom / Talk to sales. Existing merchants can add supported payment methods at no extra connection fee, as the number of enabled methods does not change the connection price.