Global Payments (Realex Payments) Important changes

[guccij]

Another email from Global this afternoon, including this part:

Ecommerce Transactions
❗️ Payments made via a website require SCA. These transactions must now support 3D Secure, which is the ecommerce authentication protocol by the Card Schemes, such as Mastercard and Visa. This allows the cardholder to authenticate themselves at the genuine holder of the card. Under PSD2, card issuers are obliged to challenge and potentially decline transactions that don’t comply.

A new version of 3D Secure (3D Secure 2 – 3DS2) is being introduced to comply with new regulations and provide a better customer experience, more security for your business and a frictionless payment experience. Read our blog called 3D Secure 2 – A Beginner’s Guide on our website.
What do I need to do?
If you use our Global Payments E-Commerce Platform (previously Realex Payments), this will support 3DS2 from September 2019. You should have already received communications from us about the changes you need to make to comply with the new SCA requirements. If you’ve any questions about the changes or would like more information on our E-Commerce Platform, please email ecomsupport@globalpay.com.

If you use a third party provider for your ecommerce services, you need to review the way in which you accept card payments. Please speak to your solution provider to make sure your solution is up to date with all the flagging requirements and that they’re making changes for the SCA mandate. Our 3DS2 solution may be used alongside your existing gateway solution, if required. You can contact us on the email above for help with this.

Details of the technical requirements for SCA can be found on our website within our Customer Centre under the Strong Customer Authentication tile.

[Josh Barling]

Thank you for your continued update and input. We are aware of all the points raised and are working on an overall solution to the updates in PSD2, including SCA and 3DS v2. This includes analysis of Sellerdeck users and their software versions and the impact across as many scenarios as possible so that a clear and simple message can be delivered.

Further information will follow, thank you.

[guccij]

Please can we have the latest update from Sellerdeck? Because if Sellerdeck can't implement the required changes, I would like to know.

[feemish]

Following our recent email about Hosted Payment Page (HPP) changes that relate to Strong Customer Authentication (SCA) and 3D Secure 2 (3DS v2), there are further actions you need to take as you're integrated with our HPP using a Shopping Cart.

If you'd like a reminder of what SCA and 3DS v2 are, more information can be found on our website - https://www.globalpaymentsinc.com/en-gb/accept-payments/ecommerce/products/3d-secure.

What Do I Need to Do?
You need to ensure you're compliant with the SCA regulation. The first step is to check if the cart you're using is listed below.

For customers using hosted carts such as Shopify, the Global Payments HPP integration will be upgraded automatically. We're working with each cart to have the upgrades complete well before the SCA deadline of September 2019.

For customers using self-hosted/open-source carts such as WooCommerce and , once the updated extension/plugin becomes available you'll be notified and you'll be able to download or install it through the relevant shopping cart marketplace.

Shopping Cart Name	Shopping Cart Type	Shopping Cart Version	Plugin Name	Current Plugin Version
CS-Cart	Self-Hosted	4.9.x	Core	N/A
Drupal Commerce	Self-Hosted	Drupal 7.x, Drupal 8.x	Global Payments E-Commerce Platform (formerly Realex Payments)	7.x-1.3
EKMPowershop	Hosted	N/A	Core	N/A
1	Self-Hosted	1.7+, Enterprise	Yoma	1.1.0
1	Self-Hosted	1.7+, Enterprise	Studio Forty9	2.0.0
2	Self-Hosted	2.x, Enterprise	Global Payments E-Commerce Platform (formerly Realex Payments)	1.1.2
OpenCart	Self-Hosted	1.5.x	qphoria	N/A
OpenCart	Self-Hosted	2.x, 3.x	Core	N/A
	Self-Hosted	2.x	Global Payments E-Commerce Platform (formerly Realex Payments)	N/A
PrestaShop	Self-Hosted	1.6, 1.7	Coccinet	2.0.2
PrestaShop	Self-Hosted	1.5	Coccinet	1.8.x
RomanCart	Hosted	N/A	Core	N/A
Shopify	Hosted	N/A	Core	N/A
UberCart	Self-Hosted	Drupal 6.x	Global Payments E-Commerce Platform (formerly Realex Payments)	7.x-2.0-alpha1
	Self-Hosted	2.x, 3.x	Core	N/A
WooCommerce	Self-Hosted	2.6.14+	SkyVerge	2.1.3
X-Cart	Self-Hosted	4.x	N/A	N/A
X-Cart	Self-Hosted	5.x	N/A	N/A
	Self-Hosted	1.5.x	Global Payments E-Commerce Platform (formerly Realex Payments)	1.2.1

What If I Can't See My Shopping Cart on the List?

If you're using an older version of one of the carts listed, you have the option to upgrade to a version that will support 3DS v2 optimisation.

For self-hosted/open-source carts not on the above list, you can also work with a web developer to implement the upgrades. Please refer to the Global Payments Developer Portal.

Customers using hosted carts not on the list should contact their shopping cart provider.

Please note, if you continue to use a cart or plugin that hasn't been upgraded after the September deadline, payments will still flow through 3DS v2 but there's an increased risk of your customers being challenged at checkout to authenticate themselves in order to complete the transaction. This may introduce friction into the checkout process and thus lead to the possibility of payments being abandoned.

Where necessary, we'd recommend that you forward this communication to your web developer and/or shopping cart provider to ensure that they're aware of these required changes.

[guccij]

Until I hear from Global that it's September, I shall keep the following in mind:

We've set a deadline of May 2019 for you to make the HPP changes

And if it is September, then that shouldn't stop Sellerdeck doing what it needs to well in advance.

[Josh Barling]

Hi All,

Just wanted to confirm that the deadline is September 2019. Global Payments are encouraging businesses to aim for May 2019.

That is directly from the solutions team at Global Payments.

Thanks

[Mike Hughes]

I've had a look at the the changes and there doesn't seem to be anything too hard to do so I'm not expecting Sellerdeck to have any significant problems with it.

As far as I can see it's mostly a few extra required fields, such as telephone number which has to be correctly formatted plus specifying that the you're using Version 2 of the hosted payment page specs.

[Josh Barling]

Hi All,

Since my last post we have continued to engage with our contacts the Global Payments digital solutions team. They have provided us with the statement of works for completing the required development and our development team have investigated this.

We are continuing to discuss how to proceed with this development and will update you once we have more detail.

We recognise the severity of this and for the Realex / Global Payments gateway and all other payment gateways that Sellerdeck integrates with.

Thanks,
Josh

[guccij]

I also have this email. Hard deadline of May 2019, not September. What progress is being made on this issue please?

[feemish]

Looks like there going to be changes needed to the Sellerdeck Realex / Global Iris Integration.
"As you're integrated with our Hosted Payment Page (HPP), there are additional fields that need to be sent in the HPP POST, "

Received this email this morning;



We recently emailed you about the new regulation being introduced within the European Economic Area (EEA) related to Strong Customer Authentication (SCA). This regulation will change the way payments are made online and as a result, changes to your integration with us will be required.

Here's what you need to know:

• From September 2019, most ecommerce payments will have to undergo Strong Customer Authentication (SCA).
• A new authentication protocol is being introduced by the Card Schemes (Mastercard, Visa, etc.) called 3D Secure 2 (3DS v2).
• Global Payments will be supporting the 3DS v2 protocol by introducing options that will make it easy for you to comply with the SCA requirement.

What Do I Need to Do?
As you're integrated with our Hosted Payment Page (HPP), there are additional fields that need to be sent in the HPP POST, which will ensure you're compliant with the regulation. When you update your integration to support these additional required fields, we'll seamlessly transition you to 3DS v2, once it's supported, without any further changes being needed.

Please click on the link below to obtain the details of the changes.

3D Secure V2 - HPP

What you'll need to do?
We'd recommend that you forward this communication to your web developer and/or shopping cart provider to ensure that they're aware of these required changes.

We've set a deadline of May 2019 for you to make the HPP changes. This supports our recommendation to complete any changes that are required well in advance of the SCA being introduced. Failure to make the changes may affect your ability to process successful transactions.

Please respond to this email confirming you have completed the integration.

If you have any other type of integration with the Global Payments E-Commerce Platform (formerly known as Realex Payments), we'll be in touch again with details of what you need to do. Below are the timelines for when you can expect to hear from us.

Integration type	Communication of Changes	Target Date for changes to be made
Hosted Payment Page	On this email	May - 2019
Shoping Carts and Platforms	Mar - 2019	Jun - 2019
API;	Apr - 2019	Jun - 2019
MOTO	No action needed	No action needed

[Josh Barling]

Hi David,

3DS 2.0 requires further data to maintain a frictionless payment process while improving security and reducing fraud. We are currently detailing the changes required and scheduling them for delivery. This includes Sellerdeck Payments and other payment gateways that integrate with Sellerdeck Desktop.

This will be resolved before it is enforced, which is set for September 14th 2019 (in Europe).

We do not anticipate major changes and development for our users.

More information will follow once we have our official statement ready.

[DavidCP]

Any input Josh in terms of how the new rules will impact Sellerdeck Payments and if there is likely to be an update of Sellerdeck needed? Happy Christmas as well.

[Josh Barling]

Thank you for sharing this with the community.

We are in conversations with Global Payments and will ensure that users are kept up to date with any changes that affect them.

Please feel free to continue to share information relating to this topic.

An official statement will be released to relevant users once we have finished our discussions with Global Payments.

Thanks,
Josh Barling, CEO Sellerdeck Ltd

[feemish]

OK Thanks Mike!

[Mike Hughes]

I haven't received anything yet but as I understand it, the coming changes are about better verification that the person using the card details is really the owner of the card and is unlikely to affect the integration with sellerdeck as long as you're using a PSP to handle the payments.

As a simple example, rather than just using the 3 digits from the back of the card for verification, a one time code will be texted to your mobile phone.

For months now whenever I pay for something online, the verification pop up has been asking me if they have my correct mobile number. This is in preparation for the upcoming changes which I believe will start appearing very soon. I think the September 2019 date is the deadline and many banks are going to launch the services much earlier than that.