Multi-factor authentication (MFA)

Multi-factor authentication (MFA) is a security method that requires a user to verify their identity using two or more independent factors before a transaction or action is approved — typically a combination of something they know (a PIN or password), something they have (a device or OTP) and something they are (biometric data such as a fingerprint or facial recognition). In the context of payments, MFA is a core component of 3DS authentication and DebiCheck mandate confirmation, and is considered a baseline security requirement by South African consumers according to Stitch's 2025 Consumer Payments Report.