Skip to content

Mastercard SecureCode — There Is No Enrolment Page Left

Nobody is going to ask you to enrol
  • HelpMeLogin is not Mastercard, not a bank and not a card network. This site holds no card numbers and cannot enrol anyone in anything.
  • An email or text inviting you to "activate SecureCode" is worth deleting. There is no enrolment page for it to send you to. The check is arranged between the merchant and your issuer while a payment is in flight.
  • A one-time code belongs in the payment screen you opened yourself. If a code arrives when you are not buying anything, somebody else may be trying to spend on your card. Ring the number on the back of it.
  • Type mastercard.com by hand to read the network's own material. The SecureCode name is old enough that searching it returns mostly pages nobody there wrote.

There is no Mastercard SecureCode enrolment page, and no Mastercard phone line for cardholders about it. The programme was replaced by Mastercard Identity Check, whose own Program Guide calls it "the next generation program with its origin from Mastercard SecureCode". The check still happens, run by the bank that issued your card. Some issuers keep the old name. Checked on 4 September 2026, mastercard.com/securecode served Mastercard's ordinary US homepage.

Mastercard's own authentication page →Identity Check is described here, in the network's fraud-prevention material. It is written for businesses, not cardholders, and it is not an enrolment form. HelpMeLogin is independent and not affiliated with Mastercard or BMO.

Every account-login guide on this site

What you need

10 items
What replaced itMastercard Identity Check
Enrolment pageNone, for SecureCode or Identity Check
Consumer phone lineUndisclosed. None is published for this
Who runs the checkThe bank or credit union that issued the card
mastercard.com/securecode servesMastercard's generic US homepage
Is that a soft 404?No. An invented path on the same domain returned a hard 404
Old mastercard.us page302 redirect to identity-check-vendors.html
Protocol sunset on recordEMV 3DS 1.0, the version SecureCode implemented, ran "until October 2022"
Announced retirement dateNone located
The name still in useBMO describes "Mastercard SecureCode" as "currently available" to its debit cardholders

How it works

  1. Stop hunting for an enrolment page

    The page you remember has no replacement. Typed by hand on 4 September 2026, mastercard.com/securecode returned an ordinary US homepage: no form, no mention of signing up. Nothing there wants your card number.

  2. Tell a deliberate repoint from a broken site

    A homepage served for a retired path can mean two things. Somebody pointed it there, or the site swallows every bad URL. Requesting an invented path on the same domain settled it. That one came back a hard 404.

  3. Take the question to whoever issued the card

    Authentication is the issuer's job. Sign in to your own bank's site and look under card security settings, or ring the number printed on the back of the card. That is where a usable phone number exists, because Mastercard publishes none.

  4. Do not panic if your bank still says SecureCode

    BMO currently lists "Mastercard SecureCode" as a service "currently available" to its debit cardholders. An issuer keeping the older label is not an issuer running old software. The label sits over the same 3-D Secure check.

If something goes wrong

mastercard.com/securecode just loads the Mastercard homepage

Cause
The path was repointed when the programme was replaced
Fix
That is current behaviour, not a fault at your end. The successor is Mastercard Identity Check, which has no cardholder sign-up.

I cannot find anywhere to enrol my card

Cause
There is nothing to enrol in
Fix
Registration belonged to the EMV 3DS 1.0 era. Under Identity Check the issuer decides when to challenge a payment, so nothing is arranged in advance.

My bank's site still calls it Mastercard SecureCode

Cause
Issuers keep their own product names
Fix
BMO still describes it as "currently available" for debit cardholders. Your issuer's wording governs your account even where the network's has moved on.

I want the exact date SecureCode was retired

Cause
No such announcement was located
Fix
No press release naming a date turned up. What is documented is protocol: support for EMV 3DS 1.0 ran "until October 2022". Treat a date read elsewhere as a guess.

A search result offers me a SecureCode registration form

Cause
The old brand name still pulls traffic, and somebody is monetising it
Fix
Close it. No cardholder registration page is operated under that name, so a form wanting a card number wants something no legitimate operator needs.

I need to phone somebody about a declined verification

Cause
The network publishes no consumer line for this
Fix
Ring the number on the back of the card. The decline came out of the issuer's rules, and only the issuer can see why.

What’s fixed, and what actually varies

What the network runs is settled. What your own bank calls it, and whether you ever see it, is not.

Fixed

  • Mastercard Identity Check is the successor to Mastercard SecureCode
  • No cardholder enrolment page exists for either name
  • The card issuer performs the authentication
  • mastercard.com/securecode serves Mastercard's US homepage

Varies

  • What your issuer calls the check, which may still be Mastercard SecureCode
  • Whether a purchase is challenged at all, which the issuer decides
  • How a challenge reaches you: a one-time code, an app prompt, or nothing visible
  • Whether your issuer publishes a phone number for it

Sign in to the bank that issued the card and read its own security pages. Whatever wording it uses there governs your account.

How compares

Four pages on this site where a name outlived the thing it named.

ChainThe name on the old pageWhat it is called nowWhere it actually lives
Mastercard SecureCodeMastercard SecureCodeMastercard Identity CheckNo consumer page at all; the issuer runs it
Robinhood Gold CardX1 CardRobinhood Gold Cardrobinhood.com/creditcard
PNC PayCardPNC PayCardThe page that loads is titled Money Networkpncpaycard.com
Brooks BrothersBrooks Brothers, at Citi Retail ServicesIssued by First Electronic Bank, run by Imprintaccount.imprint.co/brooksbrothers

Checked on 4 September 2026 against first-party pages. A retired name can keep ranking long after the thing behind it was rebuilt.

A brand name surviving in search results tells you nothing about whether its operator still answers to it.

What happened to SecureCode, and what did not

The post this page replaces told readers to go to mastercard.com/securecode and sign up. Follow that today and you land on an ordinary US homepage. No form, no card field, nothing to complete.

The Identity Check Program Guide introduces the programme as "the next generation program with its origin from Mastercard SecureCode", which is a corporate way of saying the same idea was rebuilt. Protocol drove that. SecureCode implemented the first generation of 3-D Secure, and the EMV 3DS material records that support for EMV 3DS 1.0 ran "until October 2022". When the protocol went, the consumer-facing brand went with it.

The shape of the replacement is the part people get wrong. Under the old design a cardholder registered a password with the issuer and typed it at checkout, which is why enrolment existed. Under Identity Check there is nothing to register: the parties exchange data while a payment is in flight, and the issuer alone decides whether to challenge you. The missing enrolment page is the design working, not a gap in it.

Two things stop this being an obituary. No press release naming a retirement date could be found, so a specific date quoted elsewhere is somebody's invention. And the name is still in live consumer use: BMO describes "Mastercard SecureCode" as a service "currently available" to its debit cardholders, which is a bank keeping a label its customers recognise over a check that has been rebuilt underneath them.

One detail confirms the repoint was intentional. An invented path on the same domain returned a hard 404 on 4 September 2026, while /securecode returned the homepage. Somebody chose that. The old mastercard.us page behaves similarly, sending a 302 to identity-check-vendors.html.

There is nothing for a cardholder to do here. That is the finding.

Questions people ask

How do I enrol in Mastercard SecureCode?

You cannot, and no longer need to. Identity Check replaced the programme and requires no cardholder registration. No form anywhere does this job.

Is Mastercard SecureCode dead?

The programme is superseded. The name is not. BMO still lists "Mastercard SecureCode" as "currently available" to its debit cardholders, so an issuer using the old label is behaving normally.

What replaced Mastercard SecureCode?

Mastercard Identity Check. The Identity Check Program Guide describes it as "the next generation program with its origin from Mastercard SecureCode".

When was SecureCode retired?

No announcement of a date could be found. The nearest documented milestone is protocol rather than branding: support for EMV 3DS 1.0, the version SecureCode implemented, ran "until October 2022".

What is the Mastercard phone number for SecureCode?

Undisclosed. No consumer support line for card authentication is published by the network. Use the number on the back of your card, because the issuer is the only party that can see the decision.

My bank asked for a one-time code. Was that SecureCode?

Probably the same underlying check, whatever label sits on it. Identity Check runs over EMV 3DS, and a one-time code is one way an issuer can challenge a payment.

Does any of this change my card number or my account?

No. The card, the number and the credit line belong to the issuing bank, and authentication branding sits outside all of that.

HelpMeLogin is an independent informational site. It is not Mastercard, not BMO, not a bank or card network, and not affiliated with any company named here. No page on this site will ever ask you to enrol a card.