3D Secure is an XML-based protocol designed as an additional security layer for online credit and debit card transactions. The addition of Verified by VISA, MasterCard SecureCode, and AMEX SafeKey to an ecommerce payment page can have multiple benefits for both merchants and customers.
Merchants that want to integrate Verified by Visa (VbV), MasterCard SecureCode, or AMEX SafeKey must have previously signed up for the service through their bank merchant account issuer. The service must also be enabled by the Bambora Client Support team.
- Winning sales from security-conscious customers. Customers that have signed up for the 3D Secure program look for this security tool when purchasing online.
- Increased chance of winning chargeback disputes. Offering 3D Secure protects merchants from certain fraud-related chargebacks—even if the customer doesn’t choose to enter their PIN number with the purchase.
- Weeding out potential fraud without incurring extra costs. If a customer enters an incorrect passcode, transaction fees are not charged.
- Peace-of-mind regarding security.
- Streamlined payment process. At the time of purchase, the 3D customer goes to the same standard payment form as all other clients. After entering their credit card information and submit the transaction, the payment processor (Bambora) sees the transaction request and checks to see if the card is enrolled in 3D Secure. If not enrolled, the transaction continues as normal. If it is a VbV, SecureCode, or SafeKey transaction, the system redirects the customer to their card issuing bank where they can enter their secure passcode. The bank verifies the passcode and the transaction continues as normal.
For assistance, send a message to the Bambora Customer Experience Team or call 1.888.472.0811
Address Verification System
The Address Verification System (AVS), is a free tool that compares customer-submitted order information against bank databases. See the entry in Wikipedia for more information.
When a customer submits a transaction, the address and card details are compared against data on file in an AVS bank database. Payment processors return AVS results with the approved or declined bank response. Merchants can review AVS approvals and warnings in Bambora's online member area (see image).
Not all customer cards will have data on file at the banks. In addition, AVS results are only returned after a transaction has completed processing. This means that a merchant must refund a high risk transaction, rather than blocking it, before completing the initial purchase.
Building on Equifax's QuickMatch Suite, customer credit card numbers are checked against consumer data stored at Equifax, so businesses can quickly identify potential portfolio risks and reduce the likelihood of losses due to fraud. There are three levels in the QuickMatch:
- SafeScan ID
QuickMatch pulls data from more frequently updated consumer credit databases. Business rules can also be set up to block high-risk transactions before the purchase process is complete. The result is that merchants reduce the need for manual review. For higher volume merchants the savings is threefold:
- Fewer returns and voids for suspicious transactions.
- Fewer chargeback related costs.
- Fewer man hours devoted to risk management.
eID Verify: Moving Beyond Address Authentication
Both AVS and QuickMatch are used to verify a customer's billing address information. Even more advanced tools can authenticate other parameters—including phone numbers and SIN numbers.
One of the most comprehensive tools offered by Bambora will generate questions based on the customer's credit history. If the purchaser's answer does not match the information generated from a soft check on the card owner's credit profile, the transaction can be declined. Most merchants will never need to go to this extreme, however, for those considering recurring billing type or offering high ticket items on their site, using the eID Verify authenticating questionnaire services can be valuable.
INTERAC and the Primary Account Number (PAN)
Merchants can contact INTERAC if they suspect a fraudulent INTERAC payment. When you provide them with the transaction details, it speeds up the fraud prevention process. There are two items of information you need to provide to INTERAC:
- PAN (account number)
- Name of the financial institution
Finding INTERAC Payment Details
- Log in to the Online Member Area
There are two ways to find transaction details.
- On the menu, click reporting/analysis> transaction report.
- Select the Start and End dates.
- From the Card Types list, select Interac Online and then click Refresh.
- Click an INTERAC transaction you suspect is fraudulent.
- On the menu, click reporting/analysis> transaction search.
- In the Search Criteria section, select your search options.
- In the text field, enter a text string.
- Click Search.
- Find the PAN and name of the financial institution (see image).