---
title: "Check Money-In 3D-Secure Status (PCI-DSS compliant only)"
method: POST
path: "/v2/moneyins/card/direct/{transactionid}/3dauthenticate"
tags: ["MoneyIns | Cards"]
---

# Check Money-In 3D-Secure Status (PCI-DSS compliant only)

`POST /v2/moneyins/card/direct/{transactionid}/3dauthenticate`

## Request

- Base URL: `https://ws.lemonway.fr/mb/env-name/prod/directkitrest`
- URL: `https://ws.lemonway.fr/mb/env-name/prod/directkitrest/v2/moneyins/card/direct/{transactionid}/3dauthenticate`
- Auth: none declared. Required headers: `Authorization`, `PSU-IP-Address`

After initializing a 3-D Secure transaction with <b>POST /moneyins/card/direct/3dinit</b>, you can choose not to debit the card, and only check if the user has successfully authenticated.<br /><b>This is not a payment.</b><br />
You can not use both <b>POST /moneyins/card/direct/{transactionid}/3dauthenticate</b> and <b>PUT /moneyins/card/direct/{transactionid}/3dconfirm</b>
 - If you only want to check if the user was correctly authenticated use <b>POST /moneyins/card/direct/{transactionid}/3dauthenticate</b>)
 - If you want to receive the payment using 3-DS use <b>PUT /moneyins/card/direct/{transactionid}/3dconfirm</b><br />
A typical use-case: you want to allow your user to save a card for rebills (RegisterCard), but first, you want to make sure that the card belongs to the user and that the user can authenticate successfully.

## Path parameters

- `transactionid` integer, required

## Headers

- `Authorization` string, required
- `PSU-Accept-Language` string
- `PSU-IP-Address` string, required
- `PSU-User-Agent` string

## Request body

- MoneyIn3DAuthenticateInput
  - `card` CardInfo
    - `cardType` 0 | 1 | 2, required: Card Type<br/>0 = CB.<br/>1 = Visa.<br/>2 = Mastercard.<br/>
    - `cardNumber` string, required: Card Number
    - `cardCode` string, required: CVV Code
    - `cardDate` string, required: Card Expiration Date
  - `md` string: MD Data Returned by 3-D Secure Site
  - `pares` string: Pares Data Returned by 3-D Secure Authentication Website
  - `specialConfig` string: Leave Empty

## Response `200`

OK

- MoneyIn3DAuthenticateOutput
  - `Operation3DCode` string: Mercanet return code: 00: Authenticated owner 55: Owner not authenticated 62: Owner By-pass on ACS
  - `error` Error
    - `code` integer
    - `message` string
    - `psp` PSP
      - `message` string: Get the Error Message from PSP

## Other responses

- `401`: Unauthorized
- `500`: InternalServerError

---

[API](https://skmtc.dev/lemonway/apis/lemonway-directkit-api-2-0.md) - [All operations](https://skmtc.dev/lemonway/apis/lemonway-directkit-api-2-0/llms.txt) - [OpenAPI document](https://skmtc.dev/lemonway/apis/lemonway-directkit-api-2-0/revisions/82551a0a77b8?raw)