No cover for fraudulent transactions - Secure Hosting

[GAViN™©]

As our site is nearly ready to go live and have been running some tests using a trial account with Secure Hosting, I contacted them to ask if we would be covered against fraudulent transactions, if someone used a stolen credit card for example to make a purchase from us.

Here is there reply

Hi Gavin

We do not provide any cover against fraudulent transactions however your bank may be able to offer this through a new security scheme called 3D Secure which offers Verified by Visa and MasterCard SecureCode. These schemes work in a similar way to chip and pin where the customer must enter a pin or a password only known to them at the time of placing a transaction, if the transaction is succesfully authorised then the liability is shifted to the card issuing bank or merchant bank should the transaction turn out to be fraudulent further down the line.

Standard security checks that are carried out are CV2 (3 digits on the back of the card) and AVS (address verification). These two checks are not mandatory however we can set up specific rules on how to treat a transaction based on the outcome of these checks.

To be honest, and possibly niave, I thought that this was part of the service that a PSP provided, is it not risky to use a PSP that does not cover you against this ?

I am curious to know what other actinic users cover they use against this type of thing, as we sell some expensive electrical products, i.e. LCD Televisions, etc.

Thanks.

[pinbrook]

A PSP will carry out a few basic checks for you ie checks address given online against address held by cc company, CVV etc.

You have to make a judgement each time you take an order whether you are going to accept it. It is always YOUR CALL.

Just imagine the havok if PSPs took on this responsibility, fraud would increase exponentially. So they simply warn, you decide.

Yes there are some products that carry a high risk of fraud, others that don't.

[RuralWeb]

I thought that this was part of the service that a PSP provided

As jo says this is done by your bank - if you were to use a psp such as HSBC then it does indeed carry out checks for you and will warn you about suspected fraud. securehosting is simply a middle man - you need to talk to your bank.

[GAViN™©]

We are with Barclays bank so it maybe be an idea to see what they offer, however if they do it obvioulsy needs to work with Actinic.

Having read a few posts on the forum regrading a company having a barclays merchant account and using a PSP that integrates with Actinic, I was under the assumption that only Secure Hosting will work? Although, correct me if I am wrong

If I am wrong, which other PSP's can we use which will integrate with Actinic that works with a Barclays Merchant Account?

Do all PSP's not protect the seller form fraudulent cards ? Or are we just
talking about the fact that Secure Hosting don't ?

[RuralWeb]

Having read a few posts on the forum regrading a company having a barclays merchant account and using a PSP that integrates with Actinic, I was under the assumption that only Secure Hosting will work? Although, correct me if I am wrong

I think you are getting confused Gavin - you need secure hosting to pass the transaction details to Barclays (they are a middle man thats all). In your Barclays virtual terminal you need to configure the fraud shield to validate the transactions - doing this will place any dodgy payments into the fraud section and you will be asked to check details before acepting payments.

I suggest you go into the VT and read and configure - the default setting is very high so you could start with that.

[pinbrook]

To the best of my knowledge no PSP will guarantee against fraud....

as we have stated already they flag warnings...you then decide how to proceed

[RuralWeb]

they flag warnings

That they do - its up to you to manually accept or decline the payment.

[jxm28788]

We are with Barclays bank so it maybe be an idea to see what they offer, however if they do it obvioulsy needs to work with Actinic.

Having read a few posts on the forum regrading a company having a barclays merchant account and using a PSP that integrates with Actinic, I was under the assumption that only Secure Hosting will work? Although, correct me if I am wrong

If I am wrong, which other PSP's can we use which will integrate with Actinic that works with a Barclays Merchant Account?

Do all PSP's not protect the seller form fraudulent cards ? Or are we just
talking about the fact that Secure Hosting don't ?

We use PROTX with Barclays Merchant Services, and recently upgraded to use the 3D system which is really good. PROTX also use '3rd man' which gives a fraud 'rating' based on various factors.

Only 3d authenticated transactions are 'guaranteed'. (not that the transaction isn't fraudulant, but in that the bank won't charge you if it is. Any non 3d authenticated will be charged back to you if they are fraudulant)

As we also sell high risk items I now get a warm fuzzy feeling anytime I get a big order and then look in protx to find it is a 3d transaction... "phew!"

[GAViN™©]

We use PROTX with Barclays Merchant Services, and recently upgraded to use the 3D system which is really good. PROTX also use '3rd man' which gives a fraud 'rating' based on various factors.

Only 3d authenticated transactions are 'guaranteed'. (not that the transaction isn't fraudulant, but in that the bank won't charge you if it is. Any non 3d authenticated will be charged back to you if they are fraudulant)

As we also sell high risk items I now get a warm fuzzy feeling anytime I get a big order and then look in protx to find it is a 3d transaction... "phew!"

Hi John,

It maybe an idea for me to pursue looking into Protx, I've heard vaguely about this 3D System, as Secure Hosting informed me they have not implemented this into their system yet.

I would be grateful john if you could email me via my profile on here please, if you don't mind me emailing you more about Protx ? I appreciate it.

In the meantime anyone have a link for Protx ?

So basically you set the PSP for Protx within Actinic and then setup a Protx account via your Barclays Merchant Account ? You can view your transactions by logging into your Protx account and from here you can see these 3D transactions?

Obviously I have not read up on Protx yet but this is the vibes I'm getting from these posts as to what the procedure is?

I'm also guessing that Protx maybe more expensive than Secure Hosting, and since you "upgraded" to the 3D System, I assume there is an additional price on top? - This is something that my boss would need to decide.

At least I can get some prices from Protx and give him the option.

Anyway, if you could email me John I would appreciate it

[jxm28788]

costs are here - http://www.protx.com/

not sure how that stacks up against the others. I think I just pay protx a flat fee per month then a % to BMS.

Don't think there was a charge for 3D, just had to upgrade my version of actinic to give me protocol 2.22 (see following thread) -

http://community.actinic.com/showthr...=protocol+2.22

then just tell BMS to set me up for 3d, and tell protx to set me up for it. I think they have recently changed the procedures to make it easier so speak to protx.

You set up a protx account with protx not BMS, but you have to tell protx your using BMS and tell BMS your changing to protx... it was a bit of a hassle at the time and it was a long time ago that I set it up...

3d secure is also known as verified for visa (VfV) and Mastercard Securecode (i think) (MSC). Their two proprietry systems fall under the heading of 3d.

Another thing to note is that visa/mastercard are starting to push traders into using 3d, and also pushing (forcing!) customers into registering for 3d so soon you/they may not have a choice. But hey, no chargebacks on 3d transactions - what's not to like!

[GAViN™©]

costs are here - http://www.protx.com/

not sure how that stacks up against the others. I think I just pay protx a flat fee per month then a % to BMS.

Don't think there was a charge for 3D, just had to upgrade my version of actinic to give me protocol 2.22 (see following thread) -

http://community.actinic.com/showthr...=protocol+2.22

then just tell BMS to set me up for 3d, and tell protx to set me up for it. I think they have recently changed the procedures to make it easier so speak to protx.

You set up a protx account with protx not BMS, but you have to tell protx your using BMS and tell BMS your changing to protx... it was a bit of a hassle at the time and it was a long time ago that I set it up...

3d secure is also known as verified for visa (VfV) and Mastercard Securecode (i think) (MSC). Their two proprietry systems fall under the heading of 3d.

Another thing to note is that visa/mastercard are starting to push traders into using 3d, and also pushing (forcing!) customers into registering for 3d so soon you/they may not have a choice. But hey, no chargebacks on 3d transactions - what's not to like!

Cheers John, thanks for the swift reply

One thing I did forget to ask is, through Protx, can you log into your protx account, and issue refunds or partial refunds on orders, as this is a must for us?

At the moment, the site is almost ready to go, and therefore at the min we dont have any PSP set up, so it should be relatively straight forward, incidently, how long does the whole setup procedure take? (Setting up account with protx, and informing BMS ?)

Am using Actinic 7.0.6 so Protocol 2.22 is implemented in this version.

[jxm28788]

Cheers John, thanks for the swift reply

One thing I did forget to ask is, through Protx, can you log into your protx account, and issue refunds or partial refunds on orders, as this is a must for us?

At the moment, the site is almost ready to go, and therefore at the min we dont have any PSP set up, so it should be relatively straight forward, incidently, how long does the whole setup procedure take? (Setting up account with protx, and informing BMS ?)

Am using Actinic 7.0.6 so Protocol 2.22 is implemented in this version.

Absolutely. You can enter transactions manually, without even going through your website (eg. phone orders), do refunds, partial refunds, and all kinds of whizzy things like delayed transactions and other stuff I don't understand or use...

You can also set bandings on the security - eg. only accept orders over £50 if the postcode and security code is correct, and only accept orders over £300 if 3d authenticated etc etc.

Sorry, don't remember setup times... it took a while but I seem to remember that it was the BMS application that took time and if you already have that it should take less than a week to make any changes.

But start now, because it does take time. Don't wait til a few days before launch and expect it all to happen straight away!

[GAViN™©]

Thanks for the help John much appreciated

My Manager has come back to me after sending him information from above posts. And has come back to me about Barclays ePDQ CPI system?

http://www.tele-pro.co.uk/epdq/
http://www.tele-pro.co.uk/epdq/integration.htm

Is this available to integrate into Actinic ?
Or is this something completely different.

In the Business Settings -> Payment & Security Tab, I don't see anything relating to this other than Secure Hosting (EPDQ)...

I could be going off the rails onto something completely different here, or can you use PROTX, or Secure Hosting as the middle man?

I'm slightly confused on this, if someone can make this clearer to me?

Thanks!

[jxm28788]

I'll leave this one to someone else to answer, BMS tried to sell that to me too but I don't have any idea how it works...

[pinbrook]

To be honest you'd be better chosing something that is already integrated with actinic.

ie secure hosting/protx or any other on the list on the payment and security tab