[tyingq]

Not in the US. 100% of the cost of card-not-present fraud is on the merchant.

Edit:

a) In the US, currently, 3DS would reduce your conversion to the point it would useless if mandatory. If optional, use would be abysmally low.

b) "payment facilitator entity handling fraud liability on merchant's behalf" Never heard of this. Certainly, Stripe and their ilk don't do this.

[ChemicalWarfare]

This will depend on a couple of things. 3DS for example shifts the liability towards the bank. Another example would be a payment facilitator entity handling fraud liability on merchant's behalf.