Visa Launches VDCAP in April 2026: How the Digital Commerce Authentication Program Rewires Card Payments

What Changed on 18 April 2026

On 18 April 2026, the Acquirer and Merchant Requirements for Visa’s Digital Commerce Authentication Program (DCAP, formerly VDCAP) became effective in the US and Canada, as documented in Fiserv’s Spring 2026 Card Brand Updates. The program restructures the economics of card-not-present (CNP) authentication by tying interchange incentives to the quality of transaction data merchants provide at authorization.

According to Visa’s own CNP guidance aggregated by Checkout.com, the program’s aim is straightforward: push enriched signals into the authorization message so issuers can risk-score transactions more accurately, approve more legitimate transactions, and decline more fraud. For merchants, it becomes a pay-for-data model — better data earns fee reductions.

The Fee Structure: 0.05% and 0.10% Tiers

The DCAP fee changes layer on top of existing interchange and card scheme fees:

• 0.05% fee reduction for CNP transactions that include the full set of enriched data elements: Device ID, IP address, email, and billing address.
• 0.10% fee reduction when that enriched data is combined with Network Tokens (replacing the raw PAN with a merchant-scoped token).
• 0.05% Enhanced Data Program Fee on CNP transactions that carry DCAP enhanced data.

The net economic impact depends on the merchant’s CNP mix, average ticket size, and token penetration. A merchant already running network tokenization and 3DS 2.x flows will capture the 0.10 percent uplift with limited additional engineering; a merchant still working off legacy PAN-based flows will need to invest to qualify.

Why Visa Is Rewiring Authentication Now

Three forces converged to make 2026 the year for DCAP, explained in Checkout.com’s 2026 Payment Trends analysis:

1. CNP fraud persistence — card fraud migrated to online channels as in-person EMV adoption matured; issuer pressure for better risk signals has grown every year since 2020.
2. Agentic commerce — autonomous AI agents making purchases on behalf of users produce structured, machine-readable transaction data by default; DCAP’s incentive structure rewards exactly the kind of data AI agents emit. Visa’s Intelligent Commerce SDK launches in parallel, with over 30 partners in the sandbox and 20+ agent platforms integrating.
3. Tokenization mandates — PCI DSS 4.0 and issuer-led moves away from raw PANs make Network Tokens the structural path forward, and DCAP’s 0.10 percent tier makes the business case explicit.

What Merchants Need to Implement

The implementation ask for merchants is specific rather than speculative. The enriched data elements are:

• Device ID — a persistent merchant-side device fingerprint
• IP address — captured at the authorization call
• Email — the customer’s verified email address
• Billing address — the full structured address object

For the 0.10 percent tier, Network Tokens must replace PANs in the authorization message. Payment service providers (Adyen, Stripe, Checkout.com, Braintree) have already rolled out DCAP-compliant data paths; merchants integrated with them inherit most of the capability. Direct-acquirer merchants face a heavier lift.

Issuers and Acquirers: Who Benefits How

For issuers, the payoff is lower CNP fraud rates and higher first-attempt approval rates — Visa’s communications aggregated by the Merchant Advisory Group describe the expected outcome as “merchants see higher approval rates; issuers see lower fraud.”

For acquirers, the responsibility shifts. They must ensure merchants can actually pass the enriched data fields through their processing flow. Acquirers that offer DCAP readiness as part of their platform will retain merchants; those that don’t will see volume migrate.

Implications for Non-US Markets

DCAP is currently scoped to the US and Canada, but the design pattern will migrate. The European equivalent — PSD3 and the EU Instant Payments Regulation — similarly push for strong authentication and transaction data richness. The Gulf’s central banks and payment schemes are watching US card network moves closely. For North African markets including Algeria, Morocco and Tunisia, the practical implication is that global payment service providers will push DCAP-like data schemas into their local integrations in the next 12-24 months, whether or not Visa formally extends the program locally.

The Bigger Shift: Authentication as a Data Market

DCAP reframes what used to be a security function — authentication — as an economic market for transaction data. Merchants who produce richer data pay less; those who don’t, pay more. That is a structural change in how card rails price risk. It also sets the template for how agentic commerce transactions will be priced once AI agents become a meaningful share of CNP volume.

Sources & Further Reading

• Spring 2026 Card Brand Updates — Fiserv Merchants
• What is Visa’s Digital Commerce Authentication Program (DCAP)? — Checkout.com Support
• Top 9 Payment Trends for 2026 — Checkout.com
• Visa Launches AI Agent Developer SDK for Payments — Tom Wang
• Visa’s DCAP and VAMP Programs: Updates — Merchant Advisory Group
• Visa Merchant Business News Digest
• Visa Core Rules and Visa Product and Service Rules (Oct 2025)