What Is American Express Safekey

Online security that helps to protect businesses and helps them prosper

• American Express SafeKey® is an authentication service which helps prevent unauthorized use of your American Express® Card online by confirming your identity with additional verification information.
• American Express SafeKey helps detect unauthorised online use of American Express ® Cards at participating merchants. This is done by sending you a dynamic One-Time Password for certain transactions via e-mail and/or SMS.
• The growth of digital commerce has placed greater emphasis on Merchants and Issuers to enhance their fraud prevention techniques while ensuring their customers can transact quickly and easily on whatever device they choose. American Express SafeKey 2.0 is a security solution that leverages the global industry standard, EMV® 3-D Secure, to detect and reduce online fraud—providing an extra layer.

American Express SafeKey^® is a 3-D Secure^® authentication tool that works to reduce online fraud by confirming the Cardmember’s identity with an additional password. Whether you’re a Merchant or an Acquirer, with American Express SafeKey^®, you can leverage existing 3-D Secure^® technology to minimise fraud through a consumer friendly solution.

American Express SafeKey is a fraud prevention tool that is offered to all customers who use this card. SafeKey, like 3D Secure offers additional protection to you as a shopper and as a company. What is SafeKey? Just like Verified by Visa and Mastercard Secure code, American Express SafeKey is there to offer password protection to shoppers who have an American Express card.

Key Steps to Start Using SafeKey

• Select a certified 3DS Server Provider (see www.amexenabled.com for a list of providers who are certified for SafeKey)

• Work with your 3DS Server to complete technical set up for SafeKey

• Ensure the SafeKey logo is visible on your website and at checkout

• Contact your American Express Middle East Merchant Relationship Manager, or email MerchantSafeKey@americanexpress.com.bh if you have any questions

What Is Safekey Amex

• Select a certified 3DS Server Provider (see www.amexenabled.com for a list of providers who are certified for SafeKey)

• Work with your 3DS Server to complete technical set up for SafeKey

• Ensure the SafeKey logo is visible on your website and at checkout

• Contact your American Express Middle East Merchant Relationship Manager, or email MerchantSafeKey@americanexpress.com.bh if you have any questions

Technically, SafeKey can be switched off by the Merchant. However, please note that the intention of SafeKey is to reduce instances of online Card fraud. As such, American Express does not recommend turning off SafeKey at any time in accordance with guidelines.

1. During checkout, the Cardmember inputs their payment method as American Express and provides the Card number.
2. The Merchant Plug-in ('MPI') component running at the Merchant will communicate with the American Express Directory Server to determine if the American Express Card is enrolled in American Express SafeKey.
3. The American Express Directory Server will communicate with the Card Issuer to determine if the Card is enrolled in the service.
4. The Issuer will respond with a status of 'Y' if the Card is enrolled, along with a URL where the Cardmember needs to be sent for authentication (the Authentication Site).
5. The Merchant application will automatically redirect the Cardmember to the Authentication Site.
6. At the Authentication Site, the Issuer will display the password page where the Cardmember will input the password. The Issuer will send a response to the Merchant with the authentication result. For security, the message will be digitally signed.
7. The MPI will validate the signature and advise the Merchant of the authentication result.
8. The Merchant can approve or decline the transaction based on the authentication result.

An American Express SafeKey authentication attempt occurs when a Merchant requests to authenticate the Cardmember but the Cardmember or Issuer has not been enrolled in the SafeKey programme, and both the Merchant and Issuer are in SafeKey-designated markets. In this scenario, valid authentication data [e.g., American Express Verification Value ('AEVV') and Electronic Commerce Indicator ('ECI')] value will be required in the Authorisation and Submission messages as evidence of the attempt.

No. Merchants can only obtain FLS on fully authenticated SafeKey charges. For non-authenticated SafeKey charges, or standard e-commerce charges, the standard Card Not Present Card acceptance policy applies and the Merchant is liable if the Cardmember later disputes the charge.

For Additional information on which market standard specifications currently support American Express SafeKey, Merchants may contact their American Express Middle East Relationship Manager, or email MerchantSafeKey@americanexpress.com.bh

For additional details, Merchants can contact their American Express Middle East Merchant Relationship Manager, or email MerchantSafeKey@americanexpress.com.bh

In order to be eligible for the Fraud Liability Shift a Merchant must:

What Is Safekey

• Use all other American Express online fraud prevention tools available in their market
• Utilize SafeKey
• Maintain a Fraud-to-Gross (FTG) level of 1% or less for all SafeKey transactions