Online payment on Chinese platforms operates under different logics than European e-commerce. The question of the presence or absence of the 3D Secure protocol on these sites frequently arises among French buyers, but the technical reality is more nuanced than a simple list of sites “with” or “without” bank verification.
Mobile Payment in China: An Ecosystem That Bypasses the 3D Secure Logic
Most daily transactions in China are conducted through Alipay or WeChat Pay. These mobile wallets rely on a system of QR codes and in-app authentication, not on the 3D Secure protocol as it exists in Europe with Visa or Mastercard.
Recommended read : Discover the best tools to optimize your online architecture projects
Specifically, when a Chinese merchant accepts a payment via Alipay, they do not trigger a 3D Secure verification on their end. Authentication occurs within the wallet app, not at the level of the international banking network. This is a fundamental distinction that many online articles fail to make.
For foreign buyers, the situation becomes more complicated. Several recent guides indicate that adding a Visa or Mastercard to Alipay triggers an OTP verification or an approval within the cardholder’s banking app. Even if the Chinese merchant does not manage 3D Secure, your issuing bank may impose it at the time of card registration.
Recommended read : Discover our list of must-read famous mangas in C
Consulting a list of Chinese sites without 3D Secure helps to identify the relevant platforms, but does not guarantee the complete absence of bank verification on the European side.
Chinese E-commerce Sites and 3D Secure: What Available Data Shows
No verifiable source exhaustively documents which specific Chinese merchants do not use 3D Secure. Field reports vary on this point, as the presence or absence of the protocol depends on several simultaneous parameters.
The Role of the Payment Gateway
A site like AliExpress, Taobao, or JD.com does not directly implement 3D Secure. It is the payment gateway (Alipay, Stripe, or a local provider) that decides whether to activate verification. The same site may trigger 3D Secure for a French buyer and not do so for a buyer using a domestic UnionPay card.
3D Secure verification depends on the gateway and the issuing bank, not solely on the merchant site. This is why fixed lists of “sites without 3D Secure” are structurally unreliable: they can become outdated as soon as a payment provider changes its policy.
International Cards in Chinese Wallets
The acceptance of foreign cards in Alipay and WeChat Pay has expanded in recent years. Visa, Mastercard, JCB, Diners Club, Discover, and UnionPay International cards can now be added to these applications, with dedicated pathways for foreign visitors.
This opening does not eliminate security checks. Here are the most common situations:
- When initially adding the card to the wallet, the issuing bank sends an OTP code via SMS or requests validation through its mobile app
- Subsequent payments via QR code generally do not trigger a new 3D Secure verification, as authentication relies on the wallet itself (PIN code, biometrics)
- Some European banks block transactions to Chinese providers if the amount exceeds a threshold defined by their internal anti-fraud policy
European Regulation and Payments to China: The DSP2 Framework
In France and the European Union, the Payment Services Directive (DSP2) mandates strong authentication for online payments. This requirement applies to the issuing bank of the card, not the foreign merchant.
A Chinese site may not implement 3D Secure in its checkout process. But if the buyer uses a card issued in Europe, their bank is required to trigger strong authentication unless exceptions provided by regulation apply (low-value transactions, trusted beneficiaries, favorable risk analysis).
This mechanism explains why some buyers can complete a payment on a Chinese site without any additional verification, while others are blocked on the same site. The determining variable is the policy of the issuing bank, not that of the merchant.
Concrete Risks of Purchasing Without 3D Secure Verification
The absence of 3D Secure during a payment has direct implications for both the buyer and the seller.
- Without strong authentication, the responsibility in case of fraud falls more on the merchant. For the European buyer, the chargeback procedure with their bank remains possible, but the timelines and complexity increase with a merchant based outside the EU
- Card data transmitted without an additional verification layer are more exposed in case of a compromise of the merchant site
- Some French banks automatically flag transactions without 3D Secure to third countries, which can lead to a temporary card block
On the other hand, using a wallet like Alipay adds a layer of intermediation: the card number is not transmitted directly to the merchant, which limits the exposure of banking data even in the absence of 3D Secure on the site side.
Payment Alternatives for Purchasing on Chinese Sites
Rather than seeking to bypass 3D Secure, several approaches reduce friction while maintaining an adequate level of protection.
Virtual single-use cards, offered by most French online banks, allow generating a card number dedicated to a single transaction. Even without 3D Secure on the merchant side, the virtual card limits the risk to a single purchase and a capped amount.
PayPal remains accepted on certain Chinese platforms oriented towards export (notably AliExpress). The payment then goes through the PayPal ecosystem, which applies its own verification mechanisms independently of the 3D Secure protocol.
Adding a card to Alipay via the dedicated pathway for foreigners constitutes a third option. Once the card is registered and validated, daily payments in China are made without further bank verification, as authentication is managed by the wallet.
The search for a definitive list of Chinese sites without 3D Secure encounters a technical reality: the protocol is not a fixed switch on the merchant side, but a dynamic mechanism involving the payment gateway, the issuing bank, and the regulations of the buyer’s country. It is better to adapt one’s payment method to the context than to rely on the permanent absence of a security verification.