Security & PCI

PCI compliance and PA DSS compliance have been the main topics of many articles published on our blog. However, we feel that a quick update on the subject won’t hurt. Indeed, pandemic made even more people than before prefer electronic payments to cash. Reason: con [...]

The purpose of this article is to explain, how developers of mobile apps can organize the process of accepting payments. In the article we are going to focus on card-not-present payments that app owners need to collect from app users. To those readers, who need to cr [...]

What is 3D-Secure? 3D-Secure is a fraud prevention system designed for e-commerce sites to facilitate secure online transactions by authenticating a cardholder’s identity at the time of purchase. Verified by Visa, MasterCard SecureCode and American Express SafeKey [...]

There is no doubt, that the role of mobile devices in our lives is rapidly gaining importance. Nowadays mobile devices and payment applications installed on them are often used for handling of online purchases. In this article we are going to address the ways of maki [...]

This installment continues a mini-series of articles, dedicated to the insights of payment gateway development. We continue to review different aspects, allowing to improve the efficiency of a payment gateway performance and the overall quality of its service. Paymen [...]

In this article we are going to discuss in greater detail 3-D Secure program as a cardholder data protection instrument. Particularly, we are going to focus on 3-D Secure implementation aspects within a payment system. It should be reminded that 3-D Secure is a speci [...]

All developers of payment applications, at some point in the life of products face the challenge of PA-DSS certification process. In this article we are going to look at this process a little bit more in detail. PA-DSS is an officially adopted data security standard [...]

In this article we’ve decided to readdress the security and fraud prevention issues. In particular, we are going to focus on a fraud technique, commonly referred to as phishing attacks. Phishing attacks are often used in payment processing context as a fraud techni [...]

The purpose of this post is to familiarize online merchants and other merchant services industry players with 3D Secure program. In e-commerce transactions, where the card is not physically involved, card fraud is more likely than in retail transactions. Therefore, s [...]

The purpose of this article is to familiarize payment service providers and other merchant services industry players with various merchant fraud protection tools. While one of the previously published articles covered consumer fraud protection tools (from merchant’ [...]

The purpose of this article is to familiarize different merchant services industry players with the four levels of PCI compliance, and briefly describe some solutions available for level 4 merchants (the most common category), allowing them to go through PCI certific [...]

The purpose of this article is to familiarize the key merchant services industry players with the main credit card fraud protection tools. Before credit card payment industry emerged, criminals physically robbed the banks. With the advance of e-commerce and online pa [...]