Announcement

Collapse
No announcement yet.

Global Payments (Realex Payments) Important changes

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

    Global Payments (Realex Payments) Important changes

    I received this from Global Payments ( formally Realex Payments)
    I wonder if anyone else had and if Sellerdeck have any comments regarding if this will affect our integrations.

    --------------------------------------------------------------------------------------------------------------------------------------------------

    Introduction
    On 14th September 2019, a new regulation is being introduced that will change the way payments are made online within the European Economic Area (EEA). This email will give you some background information on why the changes are being made and explain what we'll be doing to meet the new regulation.

    Firstly, here's a high level summary of what you need to know:
    • When the new regulation is introduced in September 2019, most ecommerce payments will have to undergo Strong Customer Authentication (SCA) to validate that the payer is who they say they are.
    • For ecommerce card payments, a new authentication protocol is being introduced by the Card Schemes (Mastercard, Visa, American Express etc.) called 3D Secure v2 (3DS v2) that will comply with the new regulation.
    • Global Payments will be supporting the 3DS v2 protocol by introducing options that will make it easy for you to comply with the SCA requirement. Over the coming months, we'll be upgrading our authentication solution and providing further detail of what you have to do.
    Background
    The Second Payment Services Directive (PSD2) was officially published by the European Commission in December 2015 to help promote the development of a more efficient, secure and open payments landscape that encourages innovation while enhancing consumer rights and protection.

    One of the major implications of PSD2 is the focus on improving security in the payments space by emphasising SCA. The regulation to enforce the use of SCA will come into effect on 14th September 2019. This will mean that as a European merchant processing ecommerce payments, you must be able to apply SCA to your transactions where the card issuer and the merchant's payment processor (acquirer) are both in the EEA.

    For card payments, the industry standard solution designed to comply with the SCA requirement is the latest version of 3D Secure protocol - commonly referred as 3DS v2 or EMV 3DS.

    As your payments partner, we're committed to making it easy for you to comply with the SCA requirement with minimum disruption to your business. In 2019 we'll be upgrading our authentication solution to cater for the new regulation.

    For more information on PSD2 and the regulation on SCA, including details of exemption criteria and scope, please refer to the following blog: PSD2: Strong Customer Authentication for eCommerce

    Please note that remote Mail Order/Telephone Order (MOTO) transactions, anonymous prepaid cards and lodged corporate card transactions are out of scope of SCA.

    What Is 3D Secure?
    3D Secure or 3DS is the umbrella name for each of the Card Schemes' branded online payment authentication solutions: Verified by Visa, Mastercard SecureCode, American Express Safekey, J/Secure for JCB and ProtectBuy for Discover and Diners International.

    3DS is an authentication protocol that aims to reduce fraud, increase customer security and reduce merchant liability to chargebacks. It introduced a step in the transaction process where the customer is shown a screen hosted by or on behalf of their card issuer. On this screen, the customer is prompted to authenticate themselves, often via a password or similar information only known to the customer.

    How Is 3DS v2 Different?
    The original version of 3DS was designed for a 'browser only' ecommerce checkout experience and failed to consider the experience delivered via mobile browser and in-app payments that make up a significant proportion of ecommerce traffic today.

    3DS v2 is designed with the mobile checkout experience in mind by introducing new checkout flows that better suit customers paying on a mobile with new authentication methods, such as biometrics. It also provides the possibility of a fully frictionless flow by using a more comprehensive data set provided by the merchant to authenticate the customer without the need for their intervention.

    What's Changing for Your Customers?
    • If you're currently using the existing version of 3DS: The user journey for your customers will remain similar to the experience they have now. However, the frequency that they're challenged to authenticate themselves may increase. The method of completing these authentication challenges will also likely change slightly to comply with the regulation.
    • If you're not currently using the existing version of 3DS: After submitting their card details, your customer may be challenged by their card issuer to authenticate themselves. This authentication challenge takes place as part of the payment flow and the steps required for the customer to complete the authentication are determined by their issuer.
    After authentication is complete, the transaction process continues and the authorisation result is determined. Customers who authenticate themselves successfully may still have the transaction declined for other reasons, for example, if they have insufficient funds.

    Benefits of 3DS v2
    The new regulation aims to deliver safer and more secure payments for consumers but there are many benefits for merchants also:
    • Increased fraud protection with a solution better fitted to modern ecommerce
    • Liability shift from merchants to card issuers on transactions where a customer is successfully authenticated, meaning that the card issuer, rather than the merchant, is liable in the case of fraud.
    • Better user experience over the current 3DS protocol with a greater range of authentication methods including a completely frictionless flow.
    • Increased payment approvals from the card issuers.

    What do I need to do?
    It's important to be aware that changes to your integration with the Global Payments E-Commerce Platform (formerly known as Realex Payments) may be required in preparation for September 2019.

    We'll be delivering a complete customer authentication solution in 2019 that will automatically support 3DS v2 as card issuers adopt the new protocol. We'll be in touch again early next year with details of what you need to do to be SCA compliant and the best practices you can implement to ensure the best experience for your customers.

    We'd recommend that you forward this communication to your web developer and/or shopping cart provider to ensure that they're aware of these upcoming changes.

    In the interim, if you have any questions relating to 3DS v2 and what may be required of you, please don't hesitate to drop us a note by emailing ecomsupport@globalpay.com.

    Kind regards,
    Global Payments E-Commerce Support
    Arka Tribal Jewellery

    #2
    I haven't received anything yet but as I understand it, the coming changes are about better verification that the person using the card details is really the owner of the card and is unlikely to affect the integration with sellerdeck as long as you're using a PSP to handle the payments.

    As a simple example, rather than just using the 3 digits from the back of the card for verification, a one time code will be texted to your mobile phone.

    For months now whenever I pay for something online, the verification pop up has been asking me if they have my correct mobile number. This is in preparation for the upcoming changes which I believe will start appearing very soon. I think the September 2019 date is the deadline and many banks are going to launch the services much earlier than that.
    -----------------------------------------

    First Tackle - Fly Fishing and Game Angling

    -----------------------------------------

    Comment


      #3
      OK Thanks Mike!
      Arka Tribal Jewellery

      Comment


        #4
        Thank you for sharing this with the community.

        We are in conversations with Global Payments and will ensure that users are kept up to date with any changes that affect them.

        Please feel free to continue to share information relating to this topic.

        An official statement will be released to relevant users once we have finished our discussions with Global Payments.

        Thanks,
        Josh Barling, CEO Sellerdeck Ltd
        Josh Barling
        CEO | Sellerdeck Ltd

        josh.barling@sellerdeck.com

        Comment


          #5
          Any input Josh in terms of how the new rules will impact Sellerdeck Payments and if there is likely to be an update of Sellerdeck needed? Happy Christmas as well.

          Comment


            #6
            Hi David,

            3DS 2.0 requires further data to maintain a frictionless payment process while improving security and reducing fraud. We are currently detailing the changes required and scheduling them for delivery. This includes Sellerdeck Payments and other payment gateways that integrate with Sellerdeck Desktop.

            This will be resolved before it is enforced, which is set for September 14th 2019 (in Europe).

            We do not anticipate major changes and development for our users.

            More information will follow once we have our official statement ready.
            Josh Barling
            CEO | Sellerdeck Ltd

            josh.barling@sellerdeck.com

            Comment


              #7
              Looks like there going to be changes needed to the Sellerdeck Realex / Global Iris Integration.
              "As you're integrated with our Hosted Payment Page (HPP), there are additional fields that need to be sent in the HPP POST, "

              Received this email this morning;



              We recently emailed you about the new regulation being introduced within the European Economic Area (EEA) related to Strong Customer Authentication (SCA). This regulation will change the way payments are made online and as a result, changes to your integration with us will be required.

              Here's what you need to know:
              • From September 2019, most ecommerce payments will have to undergo Strong Customer Authentication (SCA).
              • A new authentication protocol is being introduced by the Card Schemes (Mastercard, Visa, etc.) called 3D Secure 2 (3DS v2).
              • Global Payments will be supporting the 3DS v2 protocol by introducing options that will make it easy for you to comply with the SCA requirement.
              What Do I Need to Do?
              As you're integrated with our Hosted Payment Page (HPP), there are additional fields that need to be sent in the HPP POST, which will ensure you're compliant with the regulation. When you update your integration to support these additional required fields, we'll seamlessly transition you to 3DS v2, once it's supported, without any further changes being needed.

              Please click on the link below to obtain the details of the changes.

              3D Secure V2 - HPP

              What you'll need to do?
              We'd recommend that you forward this communication to your web developer and/or shopping cart provider to ensure that they're aware of these required changes.

              We've set a deadline of May 2019 for you to make the HPP changes. This supports our recommendation to complete any changes that are required well in advance of the SCA being introduced. Failure to make the changes may affect your ability to process successful transactions.

              Please respond to this email confirming you have completed the integration.

              If you have any other type of integration with the Global Payments E-Commerce Platform (formerly known as Realex Payments), we'll be in touch again with details of what you need to do. Below are the timelines for when you can expect to hear from us.
              Integration type Communication of Changes Target Date for changes to be made
              Hosted Payment Page On this email May - 2019
              Shoping Carts and Platforms Mar - 2019 Jun - 2019
              API; Apr - 2019 Jun - 2019
              MOTO No action needed No action needed
              Arka Tribal Jewellery

              Comment


                #8
                I also have this email. Hard deadline of May 2019, not September. What progress is being made on this issue please?
                Reusable Snore Earplugs : Sample Earplugs - Wax Earplugs - Women's Earplugs - Children's Earplugs - Music Earplugs - Sleep Masks

                Comment


                  #9
                  Hi All,

                  Since my last post we have continued to engage with our contacts the Global Payments digital solutions team. They have provided us with the statement of works for completing the required development and our development team have investigated this.

                  We are continuing to discuss how to proceed with this development and will update you once we have more detail.

                  We recognise the severity of this and for the Realex / Global Payments gateway and all other payment gateways that Sellerdeck integrates with.

                  Thanks,
                  Josh
                  Josh Barling
                  CEO | Sellerdeck Ltd

                  josh.barling@sellerdeck.com

                  Comment


                    #10
                    I've had a look at the the changes and there doesn't seem to be anything too hard to do so I'm not expecting Sellerdeck to have any significant problems with it.

                    As far as I can see it's mostly a few extra required fields, such as telephone number which has to be correctly formatted plus specifying that the you're using Version 2 of the hosted payment page specs.
                    -----------------------------------------

                    First Tackle - Fly Fishing and Game Angling

                    -----------------------------------------

                    Comment


                      #11
                      Hi All,

                      Just wanted to confirm that the deadline is September 2019. Global Payments are encouraging businesses to aim for May 2019.

                      That is directly from the solutions team at Global Payments.

                      Thanks
                      Josh Barling
                      CEO | Sellerdeck Ltd

                      josh.barling@sellerdeck.com

                      Comment


                        #12
                        Until I hear from Global that it's September, I shall keep the following in mind:

                        We've set a deadline of May 2019 for you to make the HPP changes
                        And if it is September, then that shouldn't stop Sellerdeck doing what it needs to well in advance.
                        Reusable Snore Earplugs : Sample Earplugs - Wax Earplugs - Women's Earplugs - Children's Earplugs - Music Earplugs - Sleep Masks

                        Comment


                          #13

                          Following our recent email about Hosted Payment Page (HPP) changes that relate to Strong Customer Authentication (SCA) and 3D Secure 2 (3DS v2), there are further actions you need to take as you're integrated with our HPP using a Shopping Cart.

                          If you'd like a reminder of what SCA and 3DS v2 are, more information can be found on our website - https://www.globalpaymentsinc.com/en-gb/accept-payments/ecommerce/products/3d-secure.

                          What Do I Need to Do?
                          You need to ensure you're compliant with the SCA regulation. The first step is to check if the cart you're using is listed below.

                          For customers using hosted carts such as Shopify, the Global Payments HPP integration will be upgraded automatically. We're working with each cart to have the upgrades complete well before the SCA deadline of September 2019.

                          For customers using self-hosted/open-source carts such as WooCommerce and , once the updated extension/plugin becomes available you'll be notified and you'll be able to download or install it through the relevant shopping cart marketplace.
                          Shopping Cart Name Shopping Cart Type Shopping Cart Version Plugin Name Current Plugin Version
                          CS-Cart Self-Hosted 4.9.x Core N/A
                          Drupal Commerce Self-Hosted Drupal 7.x, Drupal 8.x Global Payments E-Commerce Platform (formerly Realex Payments) 7.x-1.3
                          EKMPowershop Hosted N/A Core N/A
                          1 Self-Hosted 1.7+, Enterprise Yoma 1.1.0
                          1 Self-Hosted 1.7+, Enterprise Studio Forty9 2.0.0
                          2 Self-Hosted 2.x, Enterprise Global Payments E-Commerce Platform (formerly Realex Payments) 1.1.2
                          OpenCart Self-Hosted 1.5.x qphoria N/A
                          OpenCart Self-Hosted 2.x, 3.x Core N/A
                          Self-Hosted 2.x Global Payments E-Commerce Platform (formerly Realex Payments) N/A
                          PrestaShop Self-Hosted 1.6, 1.7 Coccinet 2.0.2
                          PrestaShop Self-Hosted 1.5 Coccinet 1.8.x
                          RomanCart Hosted N/A Core N/A
                          Shopify Hosted N/A Core N/A
                          UberCart Self-Hosted Drupal 6.x Global Payments E-Commerce Platform (formerly Realex Payments) 7.x-2.0-alpha1
                          Self-Hosted 2.x, 3.x Core N/A
                          WooCommerce Self-Hosted 2.6.14+ SkyVerge 2.1.3
                          X-Cart Self-Hosted 4.x N/A N/A
                          X-Cart Self-Hosted 5.x N/A N/A
                          Self-Hosted 1.5.x Global Payments E-Commerce Platform (formerly Realex Payments) 1.2.1
                          What If I Can't See My Shopping Cart on the List?

                          If you're using an older version of one of the carts listed, you have the option to upgrade to a version that will support 3DS v2 optimisation.

                          For self-hosted/open-source carts not on the above list, you can also work with a web developer to implement the upgrades. Please refer to the Global Payments Developer Portal.

                          Customers using hosted carts not on the list should contact their shopping cart provider.

                          Please note, if you continue to use a cart or plugin that hasn't been upgraded after the September deadline, payments will still flow through 3DS v2 but there's an increased risk of your customers being challenged at checkout to authenticate themselves in order to complete the transaction. This may introduce friction into the checkout process and thus lead to the possibility of payments being abandoned.

                          Where necessary, we'd recommend that you forward this communication to your web developer and/or shopping cart provider to ensure that they're aware of these required changes.
                          Arka Tribal Jewellery

                          Comment


                            #14
                            Please can we have the latest update from Sellerdeck? Because if Sellerdeck can't implement the required changes, I would like to know.
                            Reusable Snore Earplugs : Sample Earplugs - Wax Earplugs - Women's Earplugs - Children's Earplugs - Music Earplugs - Sleep Masks

                            Comment


                              #15
                              Thank you for your continued update and input. We are aware of all the points raised and are working on an overall solution to the updates in PSD2, including SCA and 3DS v2. This includes analysis of Sellerdeck users and their software versions and the impact across as many scenarios as possible so that a clear and simple message can be delivered.

                              Further information will follow, thank you.
                              Josh Barling
                              CEO | Sellerdeck Ltd

                              josh.barling@sellerdeck.com

                              Comment

                              Working...
                              X