Visa Digital Authentication Program

Last updated: April 20, 2026

Visa's Digital Commerce Authentication Program (DCAP) is an optional program that lets you share transaction data with Visa during authentication to unlock incentives on eligible consumer credit purchases in the United States (US).

Sharing device and identity data also gives Visa more signals for risk analysis, helping you improve your authorization rates and reduce fraud.

DCAP is available if you process Visa consumer credit card payments in the United States. No program enrollment is required.

To share the device data with Visa, you must provide the following fields, depending on your 3DS integration:

If you're using integrated authentication, provide the following fields in your payment request:

customer.email – the customer's email address.
source.billing_address – the customer's billing address, including all sub-fields.
risk.device.network.ipv4 – the network address of the customer's device.

You also need to provide a device ID using one of the following options:

risk.device_session_id – set this to the session ID collected by our Risk.js SDK.
risk.device.provider.id – set this to the device ID collected by your own risk solution.

If you use Flow, the device ID is captured automatically.


1{
2  "source": {
3    "type": "card",
4    "number": "4242424242424242",
5    "expiry_month": 1,
6    "expiry_year": 2030,
7    "billing_address": {
8      "address_line1": "123 Anywhere St.",
9      "address_line2": "Apt. 456",
10      "city": "Anytown",
11      "state": "AL",
12      "zip": "123456",
13      "country": "US"
14    }
15  },
16  "amount": 1000,
17  "currency": "USD",
18  "customer": {
19    "email": "hannah.bret@example.com"
20  },
21  "risk": {
22    "device_session_id": "sid_y3b2c9qmtd5kplw8xjvr4e0s",
23    "device": {
24      "network": {
25        "ipv4": "198.51.100.1"
26      }
27    }
28  },
29  "3ds": {
30    "enabled": true
31  }
32}

If you're using standalone (hosted or non-hosted) authentication, provide the following fields in your session request:

source.email – the customer's email address.
source.billing_address – the customer's billing address, including all sub-fields.
channel_data.ip_address – the network address of the customer's device.

You also need to provide a device ID using one of the following options:

device_information.device_session_id – set this to the session ID collected by our Risk.js SDK.
device_information.device_id – set this to the device ID collected by your own risk solution.


1{
2  "source": {
3    "type": "card",
4    "number": "4242424242424242",
5    "expiry_month": 1,
6    "expiry_year": 2030,
7    "email": "hannah.bret@example.com",
8    "billing_address": {
9      "address_line1": "123 Anywhere St.",
10      "address_line2": "Apt. 456",
11      "city": "Anytown",
12      "state": "AL",
13      "zip": "123456",
14      "country": "US"
15    }
16  },
17  "amount": 1000,
18  "currency": "USD",
19  "channel_data": {
20    "ip_address": "198.51.100.1"
21  },
22  "device_information": {
23    "device_session_id": "sid_y3b2c9qmtd5kplw8xjvr4e0s"
24  }
25}

To qualify for an additional 0.10% incentive, use Visa network tokens in your payments. A network token replaces your customer's card number with a secure token, which reduces fraud and can improve your authorization rates independently of DCAP.

For more information, see Network Tokens.

Visa Digital Authentication Program

Submit the required data fields

Request example

Request example

Implement network tokens