Na strži 2102/61a
140 00 Praha 4

08:00 – 19:00
Monday – Friday

Mobile authorization application
& 3D Secure

3D Secure (3DS) is a service that enhances the security of online card payments.

How does it work?


The 3DS technology is used in all types of Expobank CZ debit cards. The service is free for Expobank CZ clients. Introducing MasterCard ID Check – a new
generation of the MasterCard SecureCode (3DS) thanks to which your payment over the Internet will be simpler and more secure. The new method of authorizing 3DS secure online payments took effect starting on February 27th 2020. 

To use the new generation of the MasterCard ID Check, you need to set up an additional security feature, the ePIN code. The ePIN code can be configured through Internet banking under Cards > 3D Secure & ePIN. Payments to 3DS-secure merchants will be accepted only after setting up the ePIN code. 

If you do not use Internet banking, you can obtain an ePIN code at our customer service line at +420 233 233 233 (Mon-Fri, 8:00 a.m. - 7:00 p.m.). The ePIN will be sent to you via an SMS text message to the number registered for 3DS transactions.

Payment authorization

If you do not have internet banking, you can get the ePIN code on our customer line +420 233 233 233 (Mon - Fri 8.00 - 19.00). It will be sent to you via SMS to a mobile number registered for 3DS.

To simplify the authorization of online payments, we now offer a mobile authorization application, where instead of using an SMS code and an ePIN code, it is enough to authorize the payment by using biometric data or PIN code of the application on a mobile device.

All you need to do to use this advanced solution is installing our mobile authorization application. If you want to use fingerprint authorization, your mobile device has to support biometric identification. Another requirement is access to Internet banking, where the mobile authorization application must be registered.


What are the features of the Expobank CZ mobile authorization application?

  • Authorization of online payments made to merchants offering 3DS payments
  • Instant temporary or permanent blocking of your card, instant unblocking of your card
  • Instant card limit change
  • Card PIN change
  • Card activation
  • Secure verification of your access to Internet banking
  • Authorization of payments and transactions entered via Internet banking

NEO account - It will only take you 7 minutes to open
an account


Typical examples

I have Internet banking and a smartphone supporting biometric identification

After installing the application, you have to register the application through Internet banking (Settings > Mobile authorization application) and set the PIN code for the mobile application, which you can use (apart from fingerprint) to authorize your online payments or transactions entered via Internet banking. Due to security considerations, we recommend that you use a code different from the PIN code for your payment card.

3DS secure payments are authorized using a push notification sent to your mobile device. After you open a push notification, you will be requested to authorize the payment. Authorization can be completed using a fingerprint or the PIN code for the application. There is no need to copy an SMS code and to enter the ePIN.

It might happen that you don't have mobile data or are in an area without Internet coverage. How can a payment be made in a situation like this? You can still use an SMS code. However, MasterCard ID Check will also require entering the ePIN code. Due to security considerations, we recommend that you choose an ePIN code that is different from the PIN code for your payment card. Payments can be made to 3DS-secure merchants only after setting up the ePIN code.

I have Internet banking and a smartphone that does not support biometric identification

After installing the application , you have to register the application through Internet banking (Settings > Mobile authorization application) and set the PIN code for the mobile application, which you can use to authorize your online payments or transactions entered via Internet banking. Due to security considerations, we recommend that you use a code different from the PIN code for your payment card.

3DS secure payments are authorized using a push notification sent to your mobile device. After you open the push notification, you will be requested to authorize the payment. Authorization can be completed using the PIN code for the application. There is no need to copy an SMS code and to enter the ePIN.

It might happen that you don't have mobile data or are in an area without Internet coverage. How can a payment be made in a situation like this? You can still use an SMS code. However, MasterCard ID Check will also require entering the ePIN code. Due to security considerations, we recommend that you choose an ePIN code that is different from the PIN code for your payment card. Payments can be made to 3DS-secure merchants only after configuring the ePIN code.

I have Internet banking but i donť have a smartphone

You will authorize 3DS secure payments using an SMS code and the ePIN code. Payments can be made to 3DS-secure merchants only after configuring the ePIN code.

I don´t have Internet banking but i have a smartphone

You cannot use the benefits of the mobile authorization application without Internet banking. You will authorize 3DS secure payments using an SMS code and the ePIN code. The ePIN code can be obtained at our customer service line at +420 233 233 2332 (Mon-Fri, 8:00 a.m. - 7:00 p.m.). The ePIN has unlimited validity, and it will remain in effect until you request a new ePIN. The ePIN will be sent to you via an SMS text message to the number registered for 3DS transactions. Payments can be made to 3DS-secure merchants only after setting up the ePIN code.

I have neither Internet banking nor a smartphone 

You will authorize 3DS secure payments using an SMS code and the ePIN code. The ePIN code can be obtained at our customer service line at +420 233 233 233 (Mon-Fri, 8:00 a.m. - 7:00 p.m.). The ePIN has unlimited validity, and it will remain in effect until you request a new ePIN. The ePIN will be sent to you via an SMS text message to the number registered for 3DS transactions. Payments can be made to 3DS-secure merchants only after setting up the ePIN code.


FAQ

What should I do if I don't receive an SMS message with a one-time code when making a payment to a 3DS secure merchant?

Delivering an SMS text message usually takes a few seconds, but sometimes it might take longer. If you don't receive an SMS within one minute, request a new SMS using the link in the code entry window.

What should I do if I don't receive a push notification?

Verify that the application is running and that your device is connected to the Internet. If you don't receive a push notification despite the fact that the application is running and you have Internet connection, select "Problems with the application? Send me an SMS" in the payment gateway, and authorize the payment using a 3D Secure SMS code and the ePIN code.

What should I do if I enter the wrong SMS security code?

You have three attempts to enter the code. After the third unsuccessful attempt, your card will be blocked for online 3DS secure payments due to security reasons. Other card payments (in-store purchases, ATM withdrawals, online purchases from merchants not supporting 3DS secure payments) will not be affected. Your card will be automatically unblocked at midnight on the same day.

How do I change the mobile phone number or ePIN code for the 3D Secure service?

The procedure for changing the mobile phone number for security SMS messages and the ePIN code is the same as the procedure for registering the phone number (scroll down for instructions).

Can I register multiple phone numbers for the same card?

Only one phone number per card can be registered.

Can I register the same phone number for multiple cards?

Yes. If you have several payment cards, you can assign a single phone number to all of them.

How do I set up a mobile number and the ePIN code for 3DS secure online payments?


I have access to Internet banking
Select Cards in the main menu. Choose the card for which you want to register a telephone number from the list of your payment cards in the column on the left side. Click on the 3D Secure & ePIN link and enter your mobile telephone number. The same menu can also be used to set or change your ePIN code, which is required for authorizing 3DS secure payments together with a 3D Secure code sent via an SMS text message. Settings take effect immediately. Payments can be made to 3DS-secure merchants only after configuring the ePIN code.

I don't have access to Internet banking:

Setting the telephone number

Visit a branch
When visiting a branch, the account holder and the cardholder will be asked to fill out a form to confirm that the registered mobile telephone number will be used for the authorization of online payments made by the selected payment card.

Mail
Download the "Application for Registering a Mobile Phone Number for 3D Secure Payments" and fill in the requested information. Have the signatures of the account holder and the cardholder on the form certified by a notary public or an official at a Czech Point. Mail the original of the certified form to your Expobank CZ branch.

    Setting the ePIN code

The ePIN code can be obtained at our customer service line at +420 233 233 233 (Mon-Fri, 8:00 a.m. - 7:00 p.m.). The ePIN has unlimited validity, and it will remain in effect until you request a new ePIN. The ePIN will be sent to you via an SMS text message to the number registered for 3DS transactions.

Is there anything else you would like to know?

We will be happy to contact you. Please fill in your name, e-mail and write us a message - our helpful staff will reply to you within 24 hours. Working hours: Mon – Fri (8:00 – 19:00)

ATMs

Withdrawals from ATMs work similarly. After inserting the banking card, the ATM will inquire if you want to credit the money in Czech crowns or local currency. If you choose the first option, you are again trapped by the DCC service, which can strip you of a good deal of money based on the abovementioned principle.

“The Ministry of Finance warns against using the DCC service” MFCR.cz.

Even in the Czech Republic, some companies as terminal providers support traders and entice them to profit from the increase in the exchange rate (i.e. the commission) if they offer the DCC service.

You will not lose money with a NEO account

In Expobank CZ a.s. we protect our clients from unfavorable DCC service and other unnecessary losses. With a NEO account, you can adjust your payment card options and easily block DCC option from the comfort of your home.

Instructions on how to block DCC

You can find settings for changing the DCC option in the “Cards” section of the Internet banking.

  1.  In Internet banking, in the "Cards" section, select the card for which you want to block the DCC option and click on “Other options
     

  2.  Select an option
    "DCC and other functions"
     

  3. In the last step in the “Other options” section, select which
    service you would like to activate / deactivate.
    The change is valid immediately after authorization.

You can confirm deactivation (or activation) by an authorization SMS or in application.

A magnetic stripe can be costly

Payment card transaction can be executed in several ways - contactlessly, using a chip or, if the terminal does not support any of the previous options (these devices are practically no longer available in Europe, however outside Europe it is still a standard method of carrying out transactions), using a magnetic stripe, which is located on the side of the payment card.

A magnetic stripe has a lower level of security compared to the chip. A potential attacker can copy information stored on a magnetic stripe via a skimming device, which may be installed on an ATM, terminal, etc. Thus, the payment card may be misused. Such unauthorized use usually occurs abroad.

As in the case of blocking the DCC option, at Expobank CZ a.s. you can also block payments using magnetic stripe.

Simply enter your contact details