|
FREQUENTLY ASKED QUESTIONS
What type of fraudulent credit card activity do merchants
need to be concerned about?
There are a number of things that can raise “flags”. Some
examples are (1) the amount of a transaction, (2) where the transaction
physically originates from, (3) does the location match the billing address
of the card, , and (4) foreign
transactions are often suspect, especially if total the item or items ordered
exceeds your normal transaction size.
How does your payment gateway protect merchants from these types of fraud?
FAST TRANSACT's Fraud Barricade provides a customizable
13-feature interface. Our fraud protection
includes credit card blacklist; email, IP address, and dot extension screening;
AVS and CVV2 data and risk management controls. We also have an unalterable
audit trail that tracks all system changes, transactions, and general user
activity.
What are some of the advanced fraud
features?
Approved / declined order limits, IP or origin
match billing address, negative database, high risk country filter, and subscription
limits.
What sets FAST TRANSACT apart from the other payment
gateways on the market?
Our Agent Interface allows us to see all transaction
data in real time. We also have sub-agent accounts available—this allows software
companies or web developers who have integrated our product to set up gateway
accounts on their own and monitor their client’s activity. Our CISP
rebilling feature allows merchants to perform recurring transactions while
adhering to the CISP standards. This feature is unique to FAST TRANSACT's payment
gateway.
What is CISP?
CISP stands for Cardholder Information Security Program.
It is a set of criteria that Visa created to ensure cardholder data
is properly stored so it cannot be compromised by outside hackers OR by inside
employees. When CISP was first created, only traditional credit cards had to
be certified CISP compliant. Soon after, VISA changed the rules to include payment
gateways. Software companies that have some sort of payment
processing integration must also be certified by Visa to be CISP compliant or
they risk leaving their clients open to fraud.
What is “integration”?
Integration occurs when a website or software product
is coded to send card transaction data to a payment gateway.
If an online merchant has a shopping cart on their site, chances are
its integrated with several different payment gateways. For example our gateway
integrates with QuikStore, Miva Merchant, osCommerce and many others. Some
webmasters choose to create their own transaction interface and connect the website
directly with the payment gateway.
Is it less safe to integrate FAST TRANSACT's payment
gateway directly to a merchant’s website?
Absolutely not. All of the fraud features mentioned
earlier (AVS, CVV, Fraud Barricade) are available when integrating our payment
gateway. Additionally we require that the IP address of the server sending the
transaction data be entered into our access security section. This works with
both static and dynamic IP’s. All server communication is done in a secure socket
layer format..
If someone does directly integrate a website, does that
mean the cardholder data is stored on a merchant’s server?
Only if the webmaster has programmed it that way. It is absolutely unnecessary for a merchant to store cardholder data. That is why gateways must be CISP compliant. The gateway will store all cardholder data. |
|
VISA FRAUD GUIDES
Rules
for VISA Merchants - Card Acceptance & Chargeback Management Guidelines
Download
pdf
[2.42 MB]
Skimming
is a Skam
Download
pdf [155 KB]
Take
the Order but Don't Get Taken In
Download
pdf [182 KB
]
Visa
Prepaid Cards - How to Recognize, Accept, and Process Them
Download
pdf | [324KB]
If the
Card is NOT There, You Need to be MORE Aware
Download
pdf [193
KB]
Visa
Card Acceptance & Processing Guide
Download
pdf [537 KB]
5 Simple
Steps to Safer Key-Entered Transactions
Download
pdf [77.0 KB]
Are
You Playing It Safe at the Point of Sale
Download
pdf [68.4 KB]
Heads
Up to the Warning Signs of Fraud
Download
pdf [82.3 KB]
|