As of today, Tuesday 30 June 2020, VISA or Mastercard users can make use of two new features during online purchase validation with LuxTrust Token.
 
Credit card users currently validate most of their online purchases using 3D Secure technology. To confirm their payment, they must enter a code which is either sent by SMS or generated by their LuxTrust Token. Whilst the SMS validation remains unchanged, the validation with the Token,will benefit from two new features from 30 June.
 
Consumers who use their Token and who have the LuxTrust Mobile application will now be able to choose to use it to validate their online purchases. In this way, they will no longer be blocked if they do not have their Token to hand.
 
For users who wish to continue using their classic token, 3D Secure will in turn integrate a “secret image” into authentication. This image will systematically appear when the single-use code is entered to validate their purchases. To recall, this is the same image which is displayed when a user currently performs a banking transaction via his online bank. If the user does not see or recognise this image, it is a sign that the site is fraudulent. In this case, the user should immediately stop the transaction and contact LuxTrust or his / her bank to report it.
 
These innovations are the result of the market's adaptation to comply with the European Payment Services Directive (PSD2). The aim is to further enhance the security of online transactions and to reduce the fraudulent use of credit cards on the Internet. From 1 January 2021, the majority of European merchant sites will require consumers to authenticate payments with 3D Secure when shopping online.
 
Following recent phishing attempts imitating their own communications, Luxembourg banks and LuxTrust have issued a reminder that they will not send any communication asking users to authenticate themselves or to link their LuxTrust account to 3D Secure. In order to protect their personal data, consumers are invited to follow a few recommendations:
 
- do not answer "urgent" emails or SMS messages with a link;
- never give out your account number, credit card number, LuxTrust identifiers or other personal data;
- do not open messages from an unknown sender;
- if in doubt, cancel the transaction and contact your bank or LuxTrust directly.