A method and apparatus for authenticating a transaction are described. The method may include: receiving, at an authentication device, an electronic transaction request as part of authenticating a card-originated transaction between a merchant and a consumer; determining, based on characteristics of the electronic transaction request, a risk value associated with the electronic transaction request; selecting a first identification value or a second identification value based on a comparison of the risk value to a risk threshold, wherein the first identification value indicates that the risk value exceeds the risk threshold and the second identification value indicates that the risk value does not exceed the risk threshold; generating a communication to transmit to an authorization device, the communication comprising a first data field having the selected first identification value or the selected second identification value; and transmitting the communication to the authorization device.