Payments · Supplements4 min readUpdated October 26, 2026

Fraud Prevention and 3D Secure for Supplement Brands

The fraud a supplement store sees, what 3D Secure's liability shift covers and doesn't, where to ask for it, and how renewals and wallets fit in.

Nick Bonnassies, CMO at Tagada · checked against 5 sources

Article summary

TL;DR

Use 3D Secure on risky first orders, not on everyone. When a payment is authenticated, liability for eligible fraud disputes typically shifts to the card issuer, but it isn't guaranteed, and it doesn't cover "I didn't order this subscription" disputes or renewals charged without the customer. Pair 3DS with device data, velocity rules and clear subscription terms.

Liability shift "can be expected for successfully authenticated payments that later receive eligible fraud disputes, but it isn't guaranteed".
Off-session payments, such as subscription renewals, don't support 3DS.
A merchant with excessive fraud in a monitoring program can lose liability shift.
Visa counts fraud reports and disputes together in its 1.5% VAMP ratio.
Visa's CE 3.0 lets merchants fight card-absent fraud disputes with matching device and IP data from past undisputed orders.

Want to go further? Ask

On this page

This guide is part of our hub on nutraceutical payment processing.

Fraud a supplement store sees

Type	What it looks like	First defense
Card testing	Many small attempts, often on the cheapest product	Velocity limits, bot protection, CAPTCHA on spikes
Stolen cards	Big bundles, rush shipping, mismatched addresses	3DS on risky orders, address checks
Reseller abuse	Many accounts, same address, first-order discounts	Device and address rules
Friendly fraud	A real customer disputes a real order or renewal	Clear terms, reminders, easy cancellation4 5

Many small attempts on the cheapest productCard testingVelocity limits, bot protection, CAPTCHA on spikes.
Big bundle, rush shipping, mismatched addressesPossible stolen card3DS on the order, address checks.
Many accounts, same address, first-order discountsReseller abuseDevice and address rules.
A real customer disputes a real renewalFriendly fraudClear terms, reminders, easy cancellation.

Fraud reports count in Visa's ratio alongside disputes2. Card testing alone can push a small store over its processor's limits.

What 3D Secure does, and doesn't

3DS...	Does	Doesn't
Authenticates the cardholder	Moves eligible fraud liability to the issuer, typically1	Guarantee liability shift on any given payment1
Runs at checkout	Covers the first order	Run on off-session renewals1
Uses device and transaction data	Often frictionless, without a challenge1	Stop non-fraud disputes such as "not as described"1
Works with most cards	Applies where supported	Help when the card doesn't support it, except in some network cases1

Liability shift "can be expected for successfully authenticated payments that later receive eligible fraud disputes, but it isn't guaranteed".

Stripe Docs, Authenticate with 3D Secure, read October 26, 2026

Watch out

If you receive an inquiry on a 3DS-authenticated charge, answer it. A no-reply can become a chargeback that can invalidate the liability shift1.

Where to ask for 3DS

Big first orders
First orders above your average basket.
Mismatch
Between billing country, shipping country and IP.
Rush shipping
To a new address.
Several cards tried
On the same device.
High-risk hours
Or patterns your data shows.
Not on returning customers
Not on every returning customer: extra steps cost conversions.

Fewer declines on legitimate orders: reducing payment declines for supplement brands.

Renewals and wallets

Renewals are off-session: no 3DS1. Protect them with the consent captured at sign-up, reminders and receipts4 5.
Apple Pay and Google Pay can carry cryptograms that also support liability shift in some cases1.
Save the card with authentication at sign-up when you can, so later renewals rest on a verified first payment.

Tagada follows Visa and Mastercard rules and the laws that apply to payments.

Friendly fraud: the subscription problem

A customer who forgot a renewal may report it as fraud. 3DS can't help, because the renewal ran without them1.

Prevention	Rule behind it
Trial terms shown separately; reminder 7 days before the end	Visa4
Confirmation with cancellation instructions; notice before billing	Mastercard5
Online cancellation	Visa4, Mastercard5
Keep IP, device and order history	CE 3.0 evidence for card-absent fraud disputes3

Fig. 1Where a forgotten renewal can still be prevented

Sign-up3DS and consent, trial terms shown separately
ConfirmationCancellation instructions
Trial reminder7 days before the end
Notice before billingMastercard rule
RenewalOff-session, no 3DS

3DS stops at the first order; the rest is consent, notice and an easy exit.

Visa Core Rules, April 2026; Mastercard subscription FAQs, 2022; Stripe Docs on off-session payments.

Full dispute playbook: chargebacks for supplement brands.

How Tagada helps

3DS2 and device rules on the orders that need them

Native 3DS2, device intelligence and a rules engine
One-page checkout with Apple Pay and Google Pay
Subscriptions with trials, billing cycles, retries and automatic recovery
TagadaPay lists "Supplements / nutra" among its industries; each file is underwritten, with enhanced review on regulated verticals

Plans are on the pricing page.

Apply for processing

3DS2 and device rules on the orders that need them

Updated on October 26, 2026

Nick Bonnassies

CMO at Tagada

CMO at Tagada. Before Tagada, Nick built direct-to-consumer brands that generated over $115M in sales, raised over $25M in crowdfunding and sold two of them. He also works as a fractional CMO on marketing operations and AI systems.

Frequently asked questions

Does 3D Secure stop chargebacks?

It typically moves liability for eligible fraud disputes to the card issuer, but Stripe notes it isn't guaranteed. It doesn't cover non-fraud disputes, such as "not as described" or cancelled subscriptions, or renewals charged off-session.

Should I use 3D Secure on every order?

Usually not. Ask for it on risky first orders: high baskets, mismatched countries, rush shipping or many card attempts. Most authentications can be frictionless, but challenges cost conversions.

Does 3D Secure work on subscription renewals?

No. Renewals are off-session payments, which don't support 3DS. Protect them with clear consent at sign-up, reminders before charges, and easy cancellation.

What is liability shift?

For a successfully authenticated payment, liability for eligible fraud chargebacks typically moves from the merchant to the card issuer. It can be lost if your account has excessive fraud under a monitoring program.

Sources

Checked October 26, 2026

TagadaPay

Challenge the risky orders, not every customer

Tell us what you sell and how you sell it. Each application is underwritten, and approval is not guaranteed.

Apply for processing See pricing

01Tell us what you sell and how
02Underwriting reviews your business
03Process through TagadaPay alongside your other processors