How does Lili help keep your online transactions secure?

As online fraud becomes more sophisticated, Lili uses multiple layers of protection to keep your account and transactions safe. One of the most important is 3D Secure - a Visa-standard authentication protocol that verifies your identity during online purchases before a transaction is approved.

What is 3D Secure?

3D Secure helps ensure that your online transactions are safe by using multi-factor authentication, such as one-time passwords (OTP), to confirm your identity. This adds a critical security step without compromising on speed or convenience.

Note: OTPs are sent via SMS from a dedicated phone number.

Key Items to Know

• Used only for online payments with merchants that support 3D Secure.
• Works only with U.S. phone numbers.
• Have your phone ready to receive the OTP when making online purchases.

How Does 3D Secure Work?

Here's a step-by-step look at what happens during a 3D Secure transaction:

1. Card Details Entered
   At checkout, you enter your debit card number, expiration date, and CVV code on the merchant’s website.
2. Authentication Prompt
   You’re redirected to a secure verification page managed by the card provider. You may be asked to confirm your identity using an OTP (see below).
3. Transaction Completed
   Once your identity is verified, the payment is processed. If authentication fails, the transaction is declined to protect your account from unauthorized use.

Note the following:

• The text message with the one-time code will look like the following:

• The screen on the merchant's website asking you to enter in that code:

Important: Lili will never ask for your OTP

If anyone contacts you by phone, email, or text claiming to be from Lili and asks for your one-time passcode, do not share it. Lili will never ask for your OTP. This is a common social engineering tactic used by fraudsters to intercept authenticated transactions.

If you receive a suspicious message, ignore it and contact Lili Support directly through the app.

What to do if authentication fails or you did not receive an OTP

• No OTP received? Check that your phone number on file is correct. Go to Main Menu then Profile then Phone Number to verify.
• OTP expired? Return to the merchant's checkout and retry the transaction — a new OTP will be sent.
• Transaction still failing? Contact Lili Support from within the app for assistance.
• Non-U.S. phone number? 3D Secure currently works only with U.S. phone numbers. If your registered number is a non-U.S. number, update it to a U.S. number in your profile settings or contact Lili Support.

How to confirm your transaction went through

After successful authentication:

1. You will see a confirmation on the merchant's website indicating the payment was approved.
2. Open the Lili app and navigate to your Checking Account transactions - the payment will appear as a pending transaction within minutes.

If the transaction does not appear after a few minutes and the merchant has confirmed payment, contact Lili Support.

Additional security protections on your Lili account

3D Secure is one part of a broader set of protections Lili has in place for your account:

• Card freeze controls — instantly lock your debit card from the Cards section of the app if it is lost, stolen, or you notice suspicious activity.
• Multi-factor authentication (MFA) — required to log in and to view sensitive card details.
• Real-time transaction notifications — receive instant alerts for every transaction on your account.
• FDIC insurance — your deposits are insured through Lili's network of program banks.

Lili is a financial technology company, not a bank. Banking services are provided by Sunrise Banks, N.A., Member FDIC. The Lili Visa® Debit Card is issued by Sunrise Banks, N.A., Member FDIC, pursuant to a license from Visa U.S.A., Inc. The Card may be used everywhere Visa debit cards are accepted. 

Wire Transfer services are provided by Column Bank N.A., Member FDIC. All wires are subject to acceptance criteria and risk-based review and may be rejected at the sole discretion of Column Bank N. A. or Lili App Inc.