For years, merchants relied on fixed fraud rules and predictable authentication flows to manage risk. A transaction was either safe…