Card Payment Help

For your safety, banks worldwide now require an extra identity check on most online card payments. This is called 3D Secure (3DS), and it is mandatory under international card-network and Japanese regulations.

After you enter your card number, your bank opens a small pop-up window that asks you to:

• Enter a one-time code sent by SMS to your phone
• Approve the payment in your bank’s mobile app
• Type a password registered with your bank (sometimes called “Verified by Visa” or “Mastercard SecureCode”)

If this step fails or times out, the entire payment is declined — even though your card itself is fine and has enough funds.

• SMS did not arrive. If your phone number on file with the bank is outdated (especially after moving overseas), the verification code never reaches you.
• Pop-up was closed too early. The 3D Secure window can look like an ad or spam — closing it cancels the payment.
• Bank app was not set up. Some banks now require you to approve payments inside their mobile app rather than via SMS. If the app is not installed, the authentication fails.
• Old Mastercard SecureCode password. Some banks still use a static password that customers have forgotten. Resetting it through your bank usually fixes the issue.
• Card issued by a small or regional bank. Not all issuers fully support 3D Secure 2.0; international payments may be blocked outright.

1. Try a different card. American Express, JCB, and most Visa cards issued in Japan, the US, or the UK usually go through smoothly.
2. Check your phone for an SMS or app notification from your card issuer right after submitting payment. The code expires within a few minutes.
3. Contact your bank. Ask them to confirm that 3D Secure is enabled on your card and that international online payments are not blocked. This is the single most effective fix.
4. Use a desktop or laptop browser. Some 3D Secure pop-ups behave poorly on older mobile browsers. Switching to Chrome, Safari, or Firefox on a computer often resolves the issue.
5. Disable VPN or ad-blockers for the payment page. They can sometimes block the authentication pop-up.

• We never see or store your card number. All payments are processed by Stripe, a PCI-DSS Level 1 certified provider trusted by Amazon, Shopify, and Apple.
• We never disable 3D Secure. Even though it occasionally causes failed payments, it protects you from fraud and chargebacks.
• We never charge you twice. If you see a pending charge from a failed attempt, your bank will release it automatically within 1–7 business days.