E-commerce11 min read

Card Fraud and 3DS2 in B2B E-commerce: Protection Cost (2026)

Mohamed Bah·Fondateur, Kolonell
October 15, 2026
Share:
Card Fraud and 3DS2 in B2B E-commerce: Protection Cost (2026)

Card Fraud and 3DS2 in B2B E-commerce: Protection Cost (2026)

E-commerce

The verdict in three sentences

In B2B e-commerce, card fraud is expensive because baskets are large: a single fraudulent equipment order of 6,000 EUR wipes out the margin of dozens of honest orders. Protection relies on 3DS2, required by PSD2 for card payments in Europe and optional but useful in the US, plus a scoring tool billed at 0.02 to 0.10 EUR per transaction and business rules specific to B2B. The realistic goal is to get below 0.1% fraud by value without driving away busy trade buyers.

Why B2B attracts fraudsters

A seller of professional equipment (tools, IT, catering equipment) offers expensive, easy-to-resell products, often delivered in 24 to 48 hours. The fraudster uses a stolen card, opens an account in the name of a real company found in a directory and ships to a pickup point. When the real cardholder disputes, the merchant loses the goods, the payment and the chargeback fee.

3DS2 changes the equation: if strong authentication succeeds, fraud liability generally shifts to the issuing bank. It does not cover everything: item-not-received disputes stay with you, and over-systematic authentication hurts conversion. In the US, where there is no SCA mandate, merchants apply 3DS selectively to high-risk orders to get the liability shift.

Cost itemNo protectionWith 3DS2 and scoringComment
Fee per chargeback15 to 25 EUR15 to 25 EURPaid even when you sometimes win
Goods lost to fraud100% of basketShifted to issuer if 3DS2 succeedsExcludes commercial disputes
Scoring tool0 EUR0.02 to 0.10 EUR per transactionVolume-based
Manual review of risky ordersRandom2 to 5% of orders3 to 5 minutes per order
Drop-off at authentication0%2 to 8% of challenged paymentsDepends on bank and device
Fraud rate by value0.3 to 1%Target below 0.1%2026 ballpark

Exemptions that matter in B2B

PSD2 does not require strong authentication on every payment. Several exemptions reduce friction, requested through your payment provider, with the issuing bank having the final say.

Exemption or caseConditionValue for a B2B seller
Low valueUnder 30 EUR, within 5 payments or 100 EUR cumulativeLow, B2B baskets are larger
Transaction risk analysis (TRA) up to 100 EURAcquirer fraud rate below 0.13%Small consumables orders
TRA up to 250 EURRate below 0.06%Routine restocking
TRA up to 500 EURRate below 0.01%Rare, needs a very clean history
Secure corporate paymentsLodged or virtual cards via dedicated processesKey accounts with purchasing cards
Trusted beneficiaryCustomer whitelists youRepeat customers
Merchant-initiated transactionsSubscriptions, deferred payment after mandateRecurring supply contracts

Note: a corporate card used in a standard checkout is not automatically exempt. The corporate exemption targets dedicated processes, not the card itself.

Business rules that count in B2B

Generic scoring does not know your customers. A few simple rules block most attempts: checking the company registration or EU VAT number at sign-up, comparing the shipping address with the registered office, capping a new account's first order (for example 1,500 EUR), flagging resellable products shipped to pickup points. For large baskets, offering bank transfer or 30-day terms after account validation remains the best protection.

Mini case study

Julien is CFO of an online professional tool seller near Lille (illustrative persona). The store processes 4,000 card payments a month for 2,400,000 EUR a year. Fraud reaches 0.6% by value, so 14,400 EUR of losses a year, plus 60 chargebacks at 20 EUR (1,200 EUR).

Need a professional website?

Kolonell builds websites that attract clients, optimized for the Sénégalese market. Free quote in 2 minutes.

Prefer a call back?

Leave your WhatsApp number and a Kolonell expert will get back to you within 1 business day. Free, no strings attached.

You are :

He enables 3DS2 with exemptions, scoring at 0.05 EUR per transaction (2,400 EUR a year) and 6 hours of manual review a month at 35 EUR (2,520 EUR a year). Fraud drops to 0.08%, or 1,920 EUR of losses, and chargebacks fall to 15 (300 EUR). Total cost after: 1,920 + 300 + 2,400 + 2,520 = 7,140 EUR, versus 15,600 EUR before. Net saving: 8,460 EUR a year, provided authentication drop-off stays under 3% thanks to exemptions.

FAQ

Is 3DS2 mandatory for B2B e-commerce in Europe?

Yes, PSD2 requires strong authentication for customer-initiated card payments unless an exemption applies. Without 3DS2, issuers decline a growing share of payments, often 10 to 30%.

What does an anti-fraud scoring tool cost?

Tools built into payment providers charge 0.02 to 0.10 EUR per transaction, sometimes included in plans. Specialist solutions start around 200 to 500 EUR a month with a volume minimum.

Does the liability shift protect me from all disputes?

No, it covers fraud on an authenticated transaction. Commercial disputes (not received, not as described) remain yours, at 15 to 25 EUR in fees each.

What fraud rate should I target?

Below 0.1% by value is a good goal for a B2B seller. Above that, you lose access to risk-analysis exemptions and risk entering the card networks' monitoring programs.

Should I block pickup-point deliveries?

Not entirely, but capping a new account's pickup-point orders, for example at 500 EUR, sharply reduces risk on easy-to-resell products.

Let's scope your project. Send us your payment provider, volumes and chargeback rate: we price the 3DS2 integration, anti-fraud rules and monitoring dashboard, with a rollout timeline. Detailed quote within 48 h. WhatsApp +221 77 596 93 33.

Tags:#card fraud#3DS2#PSD2#B2B ecommerce#fraud scoring#card fraud protection
Share:

Mohamed Bah

Fondateur, Kolonell

Passionate about digital and entrepreneurship in Africa, Mohamed has been helping Sénégalese businesses with their digital transformation since 2020. Founder of Kolonell, he believes every SME deserves a professional and accessible online présence.