Payments · Skincare4 min readUpdated October 26, 2026

Fraud Prevention and 3D Secure for Skincare Brands

The fraud a beauty store sees, what 3D Secure's liability shift covers and doesn't, where to ask for it, and how refills and wallets fit in.

Nick Bonnassies, CMO at Tagada · checked against 5 sources

Article summary

TL;DR

Use 3D Secure on risky first orders, not on every customer. For authenticated payments, liability for eligible fraud disputes typically shifts to the issuer, but it isn't guaranteed, and it doesn't cover refills charged off-session or "I forgot my subscription" disputes. Add velocity rules against card testing, limits on welcome offers and samples, and clear subscription terms.

Liability shift "can be expected for successfully authenticated payments that later receive eligible fraud disputes, but it isn't guaranteed".
Off-session payments, such as subscription refills, don't support 3DS.
Excessive fraud in a monitoring program can remove liability shift.
Visa counts fraud reports together with disputes in its 1.5% VAMP ratio.
Visa's CE 3.0 lets merchants fight card-absent fraud disputes with matching device and IP data from past undisputed orders.

Want to go further? Ask

On this page

This guide is part of our hub on skincare payment processing.

Fraud a beauty store sees

Type	What it looks like	First defense
Card testing	Many small attempts on minis or samples	Velocity limits, bot protection
Welcome offer abuse	Many accounts, one address, repeated first-order codes	Device and address rules
Reseller buying	Large quantities of a viral product	Quantity limits per order and customer
Stolen cards	Big routine bundles, rush shipping, mismatched countries	3DS on risky orders
Friendly fraud	A real customer disputes a refill	Terms, notices, cancellation4 5

Fraud reports count in Visa's ratio2, so card testing alone can push a small store over its processor's limits.

What 3D Secure does, and doesn't

3DS...	Does	Doesn't
Authenticates the cardholder	Typically shifts eligible fraud liability1	Guarantee the shift1
Runs at checkout	Covers first orders	Run on off-session refills1
Uses device data	Often frictionless1	Stop "not as described" disputes

What 3D Secure does

Authenticates the cardholder
Typically shifts eligible fraud liability
Covers first orders at checkout
Often frictionless, using device data

What it doesn't

Guarantee the liability shift
Run on off-session refills
Stop "not as described" disputes

Liability shift can be expected for successfully authenticated payments that later receive eligible fraud disputes, but it isn't guaranteed.

Stripe Docs, Authenticate with 3D Secure, Disputes and liability shift, read October 26, 2026

Watch out

Answer inquiries on 3DS-authenticated charges. A no-reply can become a chargeback that may invalidate the liability shift1.

Where to ask for 3DS

First orders
Above your average basket.
Country mismatch
Between card, shipping and IP.
Rush shipping
To a new address.
Several cards
Tried on one device.
Not on returning customers
With history.

Refills and wallets

Refills run off-session: no 3DS1. They rest on consent at sign-up, notices and easy cancellation4 5.
Apple Pay and Google Pay can carry cryptograms that support liability shift in some cases1.

Fig. 1First order and refill: two different protections

First order

CheckoutCustomer is on-session
asks for3D SecureCardholder authenticatedApproved

Eligible fraud liability typically shifts

Refill

RenewalCharged off-session
can't run3D SecureNot supported off-sessionDeclined

No 3DS: consent, notices and cancellation decide

3DS guards the first order; your terms guard every refill.

Stripe Docs, 3D Secure; Visa Core Rules, April 2026; Mastercard subscription FAQs, 2022.

Tagada follows Visa and Mastercard rules and the laws that apply to payments.

Friendly fraud on refills

Prevention	Rule behind it
Trial terms separate; reminder 7 days before the end	Visa4
Confirmation and notice before billing	Mastercard5
Online cancellation	Visa4, Mastercard5
Keep IP, device and order history	CE 3.0 evidence3

Dispute playbook: chargebacks for skincare brands.

How Tagada helps

3DS where the risk is, smooth checkout everywhere else

Native 3DS2, device intelligence and a rules engine
One-page checkout with Apple Pay and Google Pay
Subscriptions with trials, billing cycles, retries and automatic recovery
TagadaPay underwrites each file, with enhanced review on regulated verticals

Plans are on the pricing page.

Apply for processing

3DS where the risk is, smooth checkout everywhere else

Updated on October 26, 2026

Nick Bonnassies

CMO at Tagada

CMO at Tagada. Before Tagada, Nick built direct-to-consumer brands that generated over $115M in sales, raised over $25M in crowdfunding and sold two of them. He also works as a fractional CMO on marketing operations and AI systems.

Frequently asked questions

Does 3D Secure stop chargebacks on a skincare store?

It typically shifts liability for eligible fraud disputes to the issuer, without a guarantee. It doesn't cover non-fraud disputes or off-session refills.

How do I stop card testing on my beauty store?

Limit attempts per card, device and IP, add bot protection on checkout, and watch for bursts of small orders on minis and samples. Fraud reports count in Visa's ratio.

Can I use 3D Secure on subscription refills?

No. Refills are off-session payments, which don't support 3DS. Protect them with consent at sign-up, notices before charges and easy cancellation.

How do I fight a fraud chargeback?

For Visa card-absent fraud (10.4), CE 3.0 accepts matching IP, device and account data from past undisputed orders. Keep that data for every order.

Sources

Checked October 26, 2026

TagadaPay

Stop beauty fraud without blocking good customers

Tell us what you sell and how you sell it. Each application is underwritten, and approval is not guaranteed.

Apply for processing See pricing

01Tell us what you sell and how
02Underwriting reviews your business
03Process through TagadaPay alongside your other processors