3D Secure

We are launching a new authentication tool protecting on-line card payments

3D Secure is a modern tool to secure on-line card payments. 3D Secure is available for all types of payment cards and all card holders may use it free of any charges by way of the so-called push notifications, in the UniCredit Bank's mobile Smart Banking or Smart Key applications, or the corporate equivalent – the Business Smart Banking.

Be ready! Agree on and activate the Smart Banking or Smart Key applications, or their corporate equivalent.

From January 2021, you are now able to authenticate payments in an easier, faster and even more secure way and in line with security standards. No more rewriting of SMS codes. You will authorise card payments in e-shops using notifications in the Smart Banking or Smart Key applications, or in their corporate equivalent.

Most frequent causes why you are not receiving push notifications:

IMPORTANT

In order to be able to start authorising on-line card payments with 3D Secure from January 2021, you need to install and activate the Smart Banking or Smart Key application in your mobile phone. Instead of the SMS authentication code, you will use the Smart Banking or Smart Key application to authorise your on-line payments.

HOW DOES IT WORK?

3DSecure

When you choose the card payment in an e-shop, you (card holder) will receive a push notification in the selected mobile application installed in your mobile phone asking you to authorise the payment.
By clicking on the push notification delivered, you will be automatically re-directed to the payment authentication screen in the Smart Banking/Smart Key application.
You will authorise the card payment in the same manner you use for payments in the Smart Banking/Smart Key application, that is by using biometric data (e.g. fingerprint) or the PIN code.
After successfully verifying a payment in the mobile banking application, continue to complete the payment and purchase on the internet.

HOW TO GET THE SMART BANKING OR BUSINESS SMART BANKING APPLICATION?

Download Smart Banking to your mobile phone.

Download Business Smart Banking to your mobile phone.

Versions supporting confirmation of payments via push notifications:

Smart banking:

iOS: 5.2.11.0 and newer

Android: 4.4.0.0 and newer

Business Smart banking:
3.13.0.101 and newer

If you use Online Banking:

In your on-line banking, go to: account details (account details) – (mobile services) – Smart Banking or Business Smart Banking.
We will send you an SMS with activation codes (please note that the activation codes will be sent to you on the next business day).
Open the application in your mobile phone and activate it using the User Number for the on-line banking and the SMS codes.

If you do not use on-line banking, you may call our Infoline at +420 221 210 031, visit any of our branch offices or contact your banker to activate Smart Banking.

More information about activation of the application is available on our web site in the Smart Banking or Business Smart Banking section.

WHAT IF I DO NOT WANT TO USE YOUR SMART BANKING OR BUSINESS SMART BANKING APPLICATION?

In such event, you (as the card holder) may activate only the Smart Key option in the Smart Banking or Business Smart Banking application.

HOW TO GET THE SMART KEY APPLICATION?

SMART KEY AND ITS ADVANTAGES:

Smart Key will serve you to authorise and sign card transactions. What are the advantages of Smart Key?

It is free and available 24/7.
Currently the highest security standard on the market (complying with the EU directives).
Option of using biometric identification (fingerprint, Face ID).
Thanks to the application in the phone, you may authorise on-line payments at any time wherever you are.
You may use Smart Key to authorise on-line payments for all your UniCredit Bank cards.

More information about activation is available on our web site in the Smart Key section.

WHAT TO REMEMBER

In order to be able to use the new on-line payment authentication method, your phone must be connected to the Internet and you need to allow push notifications in your phone as well as in the Smart Banking or Smart Key applications, or their corporate equivalent. Please, check this setting. A simple guide how to turn on push notifications can be found on our web site here.

WHAT IF I DO NOT WANT TO USE ANY MOBILE APPLICATION?

If you do not wish to use any of the selected mobile applications, you should choose a payment method other than the card payment for your on-line purchases.

FREQUENTLY ASKED QUESTIONS ON 3D SECURE TOOL

What is push notification in the Smart Banking/Smart Key mobile application?

It is a notification the card holder uses to authorise card payments in e-shops displayed in the card holder's mobile phone or in the Smart Banking/Smart Key application.

What if I do not have an account at UniCredit Bank, only a payment card?

In such event, we recommend that you set up the SSmart Key in the Smart Banking application at any UniCredit Bank branch offices. This way, you will be able to continue to use the card for secure payments in e-shops.

What to do if I have the application but do not receive confirmation notifications on my phone for card payments?

First, make sure that you are really shopping in an e-shop supporting 3D Secure tool. Purchases from e-shops not supporting the 3D Secure tool are not authenticated by way of push notifications in the Smart Banking/Smart Key application.
If you did not receive a push notification in the Smart Banking/Smart Key application to authorise the payment, check your connection to the Internet and try to cancel the payment and then repeat it.
If the push notification is delivered to a phone number other than the expected number, contact our Infoline at +420 221 210 031 or visit any of our branch offices and apply for a phone number change.

What if I use several cards (personal/business) for on-line payments, but I only have one mobile phone?

If you have the Smart Banking or Smart Key application, the push notification will be sent to your mobile phone irrespective of the payment card you have chosen for the payment in the e-shop.

What should I do when my card was lost or stolen?

If you have lost your payment card, you should block it immediately so it cannot be used anymore. To block the card, call the Infoline at +420 221 210 031.
The Infoline will immediately block the card with you to prevent any abuse and agree on the issuance of a new payment card.

What should I do when my mobile phone was lost?

If your mobile phone is lost, please use the standard channels to contact your mobile operator.
Please, make sure that you have not also lost your payment card along with your phone. If yes, you need to block the card via our Infoline +420 221 210 031.

Are you afraid that the payment card data could be stolen on the Internet?

With the 3D Secure payment at an e-shop, the sensitive data of the payment card are only provided to the bank which authorises your payment.

Can I refuse the use of the new 3D Secure tool on my card?

Use of the new 3D Secure tool to authorise on-line card payments is mandatory for all card holders.
If you do not wish to use the Smart Banking or Smart Key application to authorise on-line payments, we recommend that you choose a payment method other than the card payment for your on-line purchases.

Can I register multiple phone numbers for one payment card or use Smart Banking/Smart Key application for multiple cards?

Unfortunately no, you may register only one phone number for one card. On the contrary, you may authorise payments made by any of your payment cards within a single Smart Banking/Smart Key application.

Can I use on-line card payment for e-shops do not support the 3D Secure tool?

The only requirement for on-line purchases is to have 3D Secure on-line payments enabled on your card.

How do I recognise a trustworthy e-shop?

Only use the card on sites using the SSL protocol to secure data transmission – the browser's address bar will display https:// and a padlock icon.
However, it is not possible to warrant maximum possible security with e-shops, and therefore always prefer e-shops which support the 3D Secure technology. Such an e-shop bears the following logos:

How long do push notifications last?

Push notifications last 3 minutes from delivery. When the push notification disappears or the related purchase expires, the card holder needs to repeat the purchase or card payment in the relevant e-shop.

Can I confirm payments using a root/jailbreak device?

3DS Push authentication on a root (and otherwise "suspicious") device is expressly prohibited by the European Union's Payment Services Directive. Therefore, 3DS payments cannot be confirmed on the root/jailbreak device.

Which payment card data is entered in the on-line payment process?

The mandatory data during on-line card payment include the card number and expiry date and the security CVC2/CVV2 code (the three digits in the signature area on the back of the card).
If the e-shop supports the 3D Secure tool, you will be asked to authorise the card payment by way of a push notification in the Smart Banking or Smart Key application.

What kind of a card can I use for on-line payments with 3D Secure tool?

You may use any of our Visa or Mastercard cards. All debit and credit cards issued by UniCredit Bank support the new 3D Secure service.
You may make card payments on the Internet with all UniCredit Bank payment cards with on-line payments enabled and sufficient limit for on-line payments set by the owner. The settings can easily be changed or checked in on-line banking, in the Smart Banking mobile application, or by calling Infoline at +420 221 210 031.

Is the payment card already active for on-line payments when delivered?

Due to security reasons, all new payment cards are automatically issued inactive for any use.
You may activate it via the ATM by checking the balance or withdrawing money, or you may call UniCredit Bank's Infoline+420 221 210 031.

YOUR SECURITY MATTERS TO US

Our application follows the highest security standards.
Thanks to plentitude of security features, the mobile application is very well protected against cyber attacks.
The entire communication with the bank going through the application is encrypted.
The Smart Banking application is connected directly with your mobile phone and no sensitive information is being stored.
All your logins and authorisations of payments in the application are protected by the PIN code (for the Smart Banking or Smart Key application), fingerprint or the Face ID technology.
The PIN code (for the Smart Banking or Smart Key application) is unique, because you choose it yourself and it must consist of 6 to 8 digits.
If incorrect PIN code (for the Smart Banking or Smart Key application) is entered 3 times in a row, the user is blocked.
Logout takes place automatically after 3 minutes of your inactivity.
The maximum amount you may send via the on-line banking is CZK 50 000 (this limit does not apply to on-line card payments).