Liability Shift
Liability shift moves the cost of a fraud chargeback from the merchant to the card issuer when the payment passed 3D Secure authentication.
Updated October 1, 2026
Liability shift means the cardholder's bank, not you, pays for a fraud chargeback. It applies when the payment was authenticated with 3D Secure (3DS). The bank confirmed the cardholder, so the bank takes the fraud risk.
How it works
A 3DS payment is authenticated when the customer completes a challenge or the issuer approves it without one. If the cardholder later says the charge was fraud, the issuer takes the loss.
If 3DS isn't used, fails, or isn't available, liability stays with you. Strong Customer Authentication (SCA) rules in Europe send many payments through 3DS, so many European payments get this protection.
What it doesn't cover
Liability shift only covers fraud disputes, such as Visa reason code 10.4 or Mastercard 4837. It doesn't cover other reasons:
- Product not received, or not as described
- Subscription and cancellation disputes
- Duplicate charges or processing errors
You defend those with dispute evidence. Respond to every dispute and inquiry, even on authenticated payments. An ignored inquiry can become a chargeback that liability shift doesn't cover.
Why it matters
Liability shift means fewer fraud chargebacks you pay for. 3DS adds a step at checkout, so you weigh lost conversions against fraud losses.