- PayPal,
- Merchante Solutions,
- Authorise.net
- CyberSource
- ChasePaymentTech
- Paymentonline
- Zoura
- CCAvenue
Purchase Authorization Process
In the Authorization process, the users' credit card validity is checked in addition to the availability of fund in the credit card. The following are the steps.
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEglgVtbd4VslteQutZ8-Pd-QwyJz_FRh0yXgS15xQ9M-R1UiojfO5eyDOpjEWNg1GfQc9BG07Q0Vz9l1xXlCsf07FMh09mLzMEMuoiYv1adYZYjU16V96K_Ih2M2mbGdjcl3qCBbFauQPhi/s400/purchase-authorization.jpg)
- Customers will add the product to the cart in the online shop and checkout.
- He will provide the credit card details and proceed to checkout.
- The transaction will be send to the payment gateway by the Merchant's shop.
- The Payment gateway route it to the Processor.
- The Processor will send the transaction details to the Issuing bank (Visa/Master/AMEX) and validate the card details and check the availability of funds.
- The issuing bank returns the Transaction result to the Processor.
- The processor routes the result to the Gateway and from there the result is sent to the Merchant's shop to proceed for the further action (shipping of goods or decline message).
In the Settlement process, the issuing bank will settle the amount to the merchant's bank.
- Merchant request the payment gateway for the settlement of the transaction.
- The gateway sends the request to the processor.
- The Processor sends settlement payment details to Customer's credit card Issuing Bank; at the same time the Processor sends payment details to Merchant's Acquiring Bank.
- The Issuing Bank includes the Merchant's charge on the Customer's credit card statement while the Acquiring Bank credit's the Merchant's account
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhAc35AkFGBIsqzaxlxcxPFNKCYYBTSqqoL4H836tU6_0ZK0PhuOqTFHMJZEyvvOxpBl7MP9e47AvkIfFQov5HsD3BU6p3_c4U6NJNT8nwvEwkc_4g7_kX93l76MrUj6UUYB9jST8RVEChs/s400/credit-card-processing.gif)
In many online shops, the big challenge is the fraud transactions. Even if we have the secured websites (SSL Certificate enabled), there will be many fraud transactions happen. To minimize this, we can enable the AVS (Address Verification Service) check enabled. In AVS check, the address mapped to the card also will be validated. In addition, we can check the Card Security Code (CVV2 for Visa and CVVC for Master and CID for AMEX). This is one of the good check against fraud. In the store this field should not be shown (show it as password ***).
PCI Compliance
The store should be PCI compliant to do online transaction. There are Four levels in the PCI for merchants.
Level 1: Visa/MasterCard transactions totaling 6 million or more per year. This level also includes anyone who has been caught with a data security breach.
Level 2: Transaction levels between 1 million and 6 million.
Level 3: E-commerce transaction levels between 20k and 1 million.
Level 4: E-commerce transaction levels up to 20k. This includes all merchants processing 1 million transactions per year, regardless of what channel they are in.
We have to scan the servers through approved vendors and we have to submit the Assessment Questionnaire, which may be self or by the approved vendors based on the level.
Online shop should not store the credit card. If you want to store the card details, you must have a higher level of PCI compliance with the scanning of servers with physical periodic auditing by approved vendors.
Saravanan
No comments:
Post a Comment