
Module 4
Online payment security
Click here to download the guide: “E-payment”
One of the most important things in e-payment is security.
The whole point of the online payment process is to provide the e-merchant with the ability to manage the transaction in a secure environment.
What makes an e-transaction secure?
The payment gateway can provide e-shops with fraud prevention tools, such as address verification systems, 3DS authentication, systems for monitoring and preventing suspicious and risky transactions, and operational processes that significantly reduce fraud risks if used in combination.
Additionally, payment processors affect the security compliance process, as they must be certified to the PCI-DSS standard.
Today, several standards and regulations exist to protect e-merchants and buyers from online payment fraud.
- The first layer of protection is from payment card security standards such as the 3D Secure standard. Additionally, to accept credit card payments online, e-merchants and their payment gateways need to be PCI-DSS compliant.
- In addition to PCI compliance, e-merchants selling in Europe who wish to accept card payments must also comply with payment regulations – PSD2 (Payment Services Directive), which enforces strong authentication mechanisms in online payment processes, such as SCA (Strong Client Authentication).
- Apart from payment regulations, online transactions are also covered by data protection regulations. Merchants in BiH need to comply with GDPR – a regulation that regulates how consumer data privacy is handled and directly affects the payment process.
Useful links related to safety and consumer protection