Mastercard Identity Check

Mastercard Identity Check is the authentication service in the Mastercard card network that uses the 3-D Secure protocol in online transactions to authenticate customers at checkout.

Mastercard Identity Check generates a unique, 32-character transaction token, called the account authentication value (AAV) each time a Mastercard Identity Check-enabled account holder makes an online purchase. The AAV binds the account holder to a specific transaction. Mastercard Identity Check transactions use the universal cardholder authentication field (UCAF) as a standard to collect and pass AAV data.

Before implementing payer authentication for Mastercard Identity Check, contact customer support to have your account configured for this feature.

Supported Processors

Chase Paymentech Solutions
Elavon Americas
FDC Nashville Global
Streamline
Worldpay VAP

Processor-Specific Information

Fields Specific to the Mastercard Identity Check Use Case

These API fields are required specifically for this use case.

consumerAuthenticationInformation.directory ServerTransactionId: set this field to the transaction ID returned by Mastercard Identity Check during the authentication process.
consumerAuthenticationInformation.paSpecificationVersion: set this field to the Mastercard Identity Check version returned by Mastercard Identity Check during the authentication process.
consumerAuthenticationInformation.ucafCollectionIndicator: set to the last digit of the raw ECI value returned from authentication. For example, if ECI=02, this value should be 2.
processingInformation.commerceIndicator: set this field to one of these values:
- spa: Successful authentication (3-D Secure value of 02).
- spa: Authentication was attempted (3-D Secure value of 01).
- spa or internet: Authentication failed or was not attempted (3-D Secure value of 00)

Endpoints

POST /pts/v2/payments

Example

{  "clientReferenceInformation": {    "code": "TC50171_6"  },  "consumerAuthenticationInformation": {    "ucafCollectionIndicator": "2",    "ucafAuthenticationData": "EHuWW9PiBkWvqE5juRwDzAUFBAk",    "directoryServerTransactionId": "f38e6948-5388-41a6-bca4-b49723c19437",    "paSpecificationVersion": "2.2.0"  },  "processingInformation": {    "commerceIndicator": "spa"  },  "orderInformation": {    "billTo": {      "country": "US",      "lastName": "Deo",      "address1": "201 S. Division St.",      "postalCode": "48104-2201",      "locality": "Ann Arbor",      "administrativeArea": "MI",      "firstName": "John",      "email": ""    },    "amountDetails": {      "totalAmount": "105.00",      "currency": "USD"    }  },  "paymentInformation": {    "card": {      "expirationYear": "2030",      "number": "555555555555XXXX",      "securityCode": "123",      "expirationMonth": "12",      "type": "002"    }  }}

{  "_links": {    "authReversal": {      "method": "POST",      "href": "/pts/v2/payments/6758990751436655004951/reversals"    },    "self": {      "method": "GET",      "href": "/pts/v2/payments/6758990751436655004951"    },    "capture": {      "method": "POST",      "href": "/pts/v2/payments/6758990751436655004951/captures"    }  },  "clientReferenceInformation": {    "code": "TC50171_3"  },  "id": "6758990751436655004951",  "orderInformation": {    "amountDetails": {      "authorizedAmount": "100.00",      "currency": "USD"    }  },  "paymentAccountInformation": {    "card": {      "type": "002"    }  },  "paymentInformation": {    "tokenizedCard": {      "type": "002"    },    "card": {      "type": "002"    }  },  "pointOfSaleInformation": {    "terminalId": "111111"  },  "processorInformation": {    "approvalCode": "888888",    "authIndicator": "1",    "networkTransactionId": "123456789619999",    "transactionId": "123456789619999",    "responseCode": "100",    "avs": {      "code": "X",      "codeRaw": "I1"    }  },  "reconciliationId": "71183995FDU0YRTK",  "status": "AUTHORIZED",  "submitTimeUtc": "2026-02-08T23:31:15Z"}

Required Fields

Default Required Fields

These API fields are required specifically for processing an authorization using Mastercard Identity Check.

Field	Description
`consumerAuthenticationInformation.directoryServerTransactionId`	Set this field to the transaction ID returned by Mastercard Identity Check during the authentication process.
`consumerAuthenticationInformation.paSpecificationVersion`	Set this field to the Mastercard Identity Check version returned by Mastercard Identity Check during the authentication process.
`consumerAuthenticationInformation.ucafCollectionIndicator`	Set to the last digit of the raw ECI value returned from authentication. For example, if ECI=02, this value is 2.
`orderInformation.amountDetails.currency`
`orderInformation.amountDetails.totalAmount`	—
`orderInformation.billTo.address1`	—
`orderInformation.billTo.administrativeArea`	—
`orderInformation.billTo.country`	—
`orderInformation.billTo.email`	—
`orderInformation.billTo.firstName`	—
`orderInformation.billTo.lastName`	—
`orderInformation.billTo.locality`	—
`orderInformation.billTo.postalCode`	—
`paymentInformation.card.expirationMonth`	—
`paymentInformation.card.expirationYear`	—
`paymentInformation.card.number`	—
`processingInformation.commerceIndicator`	Set this field to one of these values: `spa` for successful authentication (3-D Secure value of `02`), `spa` when authentication was attempted (3-D Secure value of `01`), or `spa` or `internet` when authentication failed or was not attempted (3-D Secure value of `00`).

Brazil-Specific Field for Data Only Authorizations

Field	Description
`consumerAuthenticationInformation.ucafCollectionIndicator`	For data only authorizations in Brazil, set this field to `4`.

Was this page helpful?

Last published: October 28, 2026