Fixed
RDX Updates
July 24th, 2026
- Clarification of the conditional use of the StepupResponse.Credentials.Credential (List)(Object)
- Updates to the Field Values of the 3RI Indicator Values and 3DS Requestor Authentication Indicator Values
- Added ThreeDSRequestorAuthenticationInd to RiskRequest
- Deleted Non-Payment Authentication Indicator from RiskRequest
- Updated use of StepupType to "Conditional; required if challenge is expected"
- Added WhyInfo object to the InitiateActionResponse
- Updated all instances of StepupType to include OUTOFBAND_EMBEDDED
- Updated OOBPushCallbackUrl to OOBPushCallBackUrl (capital B to match code) in InitiateActionRequest
- Updated OOBCallbackValidateStatus to OOBCallBackValidateStatus (capital B for consistency)
- Updated OOB path from /oob-callback-validate-status to /OOBPushValidateStatus
- Removed spaces from VisaPaymentTokenExtension property names (TokenAssuranceMethod, TokenCryptogram, TokenCryptogramValidityIndicator)
- Updated WhitelistStatus enum from (Y/N/E/P/R/U) to MerchantWhitelisted and MerchantNotWhitelisted values
- Removed INFORMATION ONLY from StepupResponse.Status enum
- Removed DelayedShipment and SplitPayment from 3RIIndicator values (not valid in 3DS 2.2.0)
- Removed ExemptionResponse object from RiskResponse
- Changed IsBbConsentRequired from type: string to type: boolean
- Changed RiskRequest.TransactionInfo.RiskProviderInfo.Name enum from ThreatMetrix to TM
- Changed lettercase from lowercase to capital "T" on ThreeDSReqPriorAuthData, ThreeDSReqPriorAuthMethod, ThreeDSReqPriorAuthTimestamp, ThreeDSReqPriorRef fields.