Z-D Secure, SMS confirmation of payment, Aliexpress and Sberbank card?

Question

Information Security

Faced with the fact that the bank card is tied to Aliexpress and purchases are automatically debited without confirmation via sms or any other additional protection. I started to google on this topic, how to protect payment on Ali using SMS confirmation.

One person writes:

This happens because you do not have the Z-D Secure function connected to your card, which just protects your card with the help of payment confirmation via SMS. You can connect Z-D Secure through your online bank yourself, here each bank has its own mobile application, so you need to figure out how to do it yourself (usually it’s very)

And here is what he writes tori and this contradicts the first:

The seller's website, in this case Aliexpress, must be connected to the “Verified by Visa” and / or “MasterCard SecureCode” system. Therefore, 3D-Secure is useless in this case.

There is also the answer of the savings bank:

Sberbank's response The need to confirm operations with an SMS password is determined not by the bank, but by the settings of the site's payment service. The bank in this case cannot influence the situation and establish a mandatory additional confirmation.

And under the answer of the Savings Bank again a controversial opinion:

Sberbank's answer, what are you saying? When paying on Aliexpress through a Sberbank card, the buyer is redirected to the Sberbank website !!!! and on this page you need to enter the SMS password (ZD Secure is called if that). I’ll even attach a special photo for your self-education: Here’s a video https://www.youtube.com/watch?v=UF468wY6mr0 where the uncle pays with a Sberbank card for Aliexpress. It's good that I don't use this terrible bank anymore....

So in the end, who to believe and what happens? Can I activate 3D Secure in Sberbank and force aliexpress to request confirmation of payment via sms, or is it still not a lie in the response of Sberbank and Sberbank in this case cannot influence the situation and establish a mandatory additional confirmation ???

Answer 1

The merchant (website) itself decides whether to enable this feature or not. The same on Amazon - the card is linked without 3D-Secure, only by number + CVV.
If someone finds out your card number and CVV, links it to Aliexpress and orders something without your approval, you can easily dispute the transaction without 3D-Secure through the bank - in this case, the responsibility lies with the store, not you .
If this does not suit you, do not use bank cards, but prefer Internet money, like Webmoney and Yumani. They are better than the banking system in all technical aspects and were originally designed for online payments.

Answer 2

Well, aliexpress writes off according to the "token" of the linked card, and not according to the card data, here the bank also decides to demand it or not.

Answer 3

3D Secure was rather invented for those stores that have a certain number of suspicious transactions. Those. if the bank sees that the store has suspicious transactions, then it will be forced to turn on 3D Secure. But there is another side to being able to "turn off" 3D Secure, this also requires additional verification, which not every service will approve.

Answer 4

Who told you that the tax and special services need court decisions? Since last year, the tax authorities have been seeing online accounts of physicists in any bank, and yurikov, in my opinion, since 2017. Forget about bank secrecy ...