PayPal Pro

[kessock]

Well, just had a call from PayPal and they hacve said to me that,
"as I am not capturing the details and do not store the details I do not need to comply"
They say all the details are sent from a SSL directly to PayPal and are not dealt with on my computer so compliance is only needed if I am doing 60,000 transactions per year.
What the hell are you supposed to belive (not paypal I feel).

[kessock]

Just a quickie,
If I do the Worldpay thing which looks a shed load better than the pp option (thank you lee) and all online payments are done through this am I riught in thinking I only have to have the quarterly scan done via SM.
If so can anyone advise me where I can get the self asessment form which needs returning to them.
I have tried calling them, emailing them and also emails barclaycard business to find out but I get no response from anyone.
Talk about less than helpful, how do these companies keep going with customer service like this?
Thanks in advance.
mark

[leehack]

You will not need to undergo any scans, especially from SM as I understand. It is your PSP who needs to undergo them, by using a PSP you wipe your hands of all responsibility. PSP & 3D secure and the merchant is almost smiling nowadays.

[kessock]

Thanks for the reply Lee,
Excuse the ignorance, 3D?
What does that mean, not a heli flight I know ;-)
If that means I am clear of the responsibility I can ignor the email reminders I seem to get from Barclay Merchant Services on a daily basis then (or can I)
Thanks again for the help.
If I could afford to I would have used your services by now as I like your work (just gotta watch the pennies due to the climate :-(
Mark

[leehack]

3D secure is another step card companies are taking to combat fraud and indemnify a site owner against a fraud (if it is used).

BMS emails should be passed to the spam folder, never to be read IMO, but make your own investigations and decisions. Search the forum on 'Security Metrics' and grab yourself an urn of tea.

[kessock]

Why I always end up picking the wrong one I will never know.
Too much information on the net, reckon I will need a field of tea let alone an urn.
Just as well I have not actually gone with them and been pointed in the right direction once more.
Thanks again (tea calling me).
Cheers.
Mark

[pinbrook]

FTR

Paypal is compliant as the cc processing is done on pp secure server, paypalpro is not as the cc is captured on your webspace.

if you use worldpay, protx, hsbc, secpay andmaybe others i can't recollect - these psps are compliant therefore you inherit their compliance.

if you don't have a merchant acct - then use worldpay and paypal. (not pro)

above only applies for webpayments and not phone orders

you will need level4 self cert compliance for this

see this`thread http://community.actinic.com/showthread.php?t=41266