3DS Identifies Cardholder Authorisation, Fong Po-Kiu Advocates EU-Style Mandatory Verification

HSBC, Hang Seng and BOCHK all said they were aware of the card-theft phone-purchase incidents, but whether to adopt 3DS verification is decided by merchants. Hong Kong Information Technology Federation honorary president Fong Po-Kiu pointed out that 3DS identifies before debiting whether a transaction is authorised by the cardholder, and fraudsters cannot use the card if they do not also hold the cardholder's phone for SMS one-time passwords or bank app verification. He believes the government needs to refer to the EU's SCA regulations to mandate additional identity verification for online transactions.