Quick Answer
A failed 3DS authentication spike usually means the account is seeing lower-quality traffic, more attack pressure, or a checkout flow that is no longer handling risk challenges cleanly.
What Stripe Is Likely Comparing
- 3DS failure rate before and after the spike
- traffic source and device mix
- approval and fraud outcomes for challenged transactions
Most Common Root Causes
- bots and card testing
- risky acquisition cohorts
- friction or technical issues in the challenge flow
Evidence Stripe Will Weight Most
- 3DS outcomes by source and device
- fraud loss or dispute movement after the spike
- changes to challenge rules or checkout UX
Operational Fix Sequence
- Segment the failed-challenge cohort.
- Distinguish attack traffic from customer friction.
- Tune step-up rules and checkout handling.