Make PCI DSS Assessment Easier

The complexity derives from PCI’s Data Security Standards (DSS), which include up to 13 requirements that specify the framework for a secure payment environment for companies that process, store or transmit credit card transactions.

Make PCI DSS Assessment Easier  

Training and educating employees. Technical employees should obtain any certifications or training classes necessary so that they can operate and monitor the security control set in place. Non-technical employees must be trained on general security awareness practices such as password protection, spotting phishing attacks and recognizing social engineering. All the security controls and policies in the world will provide no protection if employees do not know how to operate the tools in a secure manner. Likewise, the strongest 42-character password with special characters, numbers, mixed case, etc. is utterly broken if an employee writes it on a sticky note attached to their monitor.

For an organization to effectively manage its own risk, it must complete a detailed risk analysis on its own environment. Risk analysis goal is to determine the threats and vulnerabilities to services performed and assets for the organization. As part of a risk assessment, organization should define critical assets including hardware, software, and sensitive information and then determine risk levels for those components. This in turn allows the organization to determine priorities for reducing risk. It is important to note that risks should be prioritized for systems that will be in-scope for PCI DSS and then other company systems and networks.

Once the risk assessment has been completed the organization should have a much clearer view of its security threats and risks and can begin determining the security posture of the organization. Policies and procedures form the foundation of any security program and comprise a large percentage of the PCI DSS requirements. Business leaders and department heads should be armed with the PCI DSS requirements and the results of the risk analysis to establish detailed security policies and procedures that address the requirements but are tailored to business processes and security controls within the organization.

Building upon the foundation of security policies, the committee of business leaders and department heads should now review the PCI DSS requirements in detail and discuss any potential compliance gaps and establish a remediation plan for closing those gaps. This is where it is important to have the full support of business leaders who can authorize necessary funds and manpower to implement any remediation activities.

This is also the time to schedule the required annual penetration testing. These are typically performed by third parties, but is not required to be performed by third parties, and can take some time to schedule, perform, and remediate (if necessary). The results of a PCI DSS assessment will be delayed until the penetration test is completed so now is the time to schedule the test.

At this point the organization is ready for a full-scale PCI DSS assessment and can now enter a maintenance mode where periodic internal audits occur and regular committee meetings are held to perform risk assessments and update policies, procedures, and security controls as necessary to respond to an ever changing threat landscape. PCI DSS must become integrated into the everyday operation of the organization so that the organization remains secure and to ease the burden of the annual assessments.

Payment Card Industry (PCI) compliance assessment is a major task for any size organization, but you can make it easier.

 

Posted in Best Practices for Merchants, Credit Card Security, Payment Card Industry PCI Security Tagged with: assets, card, card transactions, compliance, compliance assessment, credit card transactions, credit-card, data security standards, DSS, networks, password protection, payment, Payment Card Industry, PCI, Phishing, process, risk, risk analysis, risk assessment, secure payment, Security, security control, security policy, transactions, transmit

Red Cross taps social-mobile payments for Philippines typhoon relief

Notably after the Japanese tsunami…the Hungarian Red Cross has used mobile technology to raise funds for disaster relief, but for the first time has enlisted social media in the process. The organization is running a Facebook campaign that lets smartphone users make instant donations to aid victims of Typhoon Haiyan in the Philippines.

The donations will pass through the MasterCard Mobile app that was developed by the Hungarian m-payments firm Cellum. The solution relies on QR codes. The method is available only in Hungary.

Process works like this:

Download the MasterCard Mobile app to your smartphone and register your bank card, then follow the steps to secure your personal data.

To donate, scan the QR code shared on Facebook with the built-in scanner of MasterCard Mobile. Transaction data are displayed on the screen to ensure the donation goes to the chosen cause.

The QR code contains a minimum sum, which can be increased.

Then press the send button to review and confirm transaction data.

The app then initiates the transaction, which you need to authorize by entering your mPIN.

You will receive feedback on the successful transaction, which can later be viewed in the transactions menu.

The donations will pass through Cellum’s system and quickly go to the Hungarian Red Cross’ account, which is dedicated to typhoon relief efforts.

Donations are a matter of impulse and that people who decide to give want to act quickly, chances are they don’t carry around a pen to put down a 24-digit bank account number on a piece of paper. By the time they get home and visit their online bank where they could transfer the money, they have already been distracted by a hundred other stimuli, so they end up sending nothing. Cellum’s solution is simple; whenever the impulse hits people, they probably have their phone at hand said Cellum spokesman Balazs Inotay.

Posted in e-commerce & m-commerce, Internet Payment Gateway, Medical Healthcare, Smartphone Tagged with: account number, authorize, confirm transaction data, Facebook, m-payments, MasterCard, mobile app, mobile technology, personal data, phone, PIN, process, qr codes, Red Cross, scanner, secure, smartphone, social media, solution, successful transaction, transfer

Electronic Payments and Ecommerce Conversions

Alternative Payments and Ecommerce Conversions

There’s no shortage of alternative payment choices: eBay’s PayPal, Google’s Wallet, Visa V.me, and MasterCard MasterPass, to name a few.  There is also a proliferation of alternate contenders, as mobile shopping threatens to disrupt traditional methods of payments.

Alternative payment companies each claim that their payment method increases conversions. My company, SeeWhy, performed an independent analysis and confirmed these claims.

In this study data shows significant increases in conversion compared with credit cards, peaking at a 101 percent increase on smartphones.

But this is not the whole story. While these increases are impressive, they only applied to around 15 percent of traffic, so the impact on your site’s overall conversion rate will be much less. Depending on the characteristics of your site you will probably see somewhere in the region of 5 to 10 percent improvement in your site’s overall conversion rate, which is still significant enough not to be ignored. As mobile commerce grows, then alternative payments will become ever more important.

However, before embarking on an alternative payment implementation, there are three important considerations you need to take into account.

1. How Many Alternative Payment Methods?

Choosing only one alternative payment method might be tough, so why not implement several, and cover the market more thoroughly? This may be a valid approach, but think carefully before choosing this option.

For example, RunningShoes.com has implemented PayPal, Google Wallet, and MasterPass as alternative payment options.

The problem is that offering payment choices can create four different competing calls-to-action, as you can see. Whenever consumers are faced with too much choice, indecision tends to follow.

This is also problematic when you consider the whole page. There are lots of visual distractions to the primary call to action, which in this case is the red Secure Checkout button.

Before embarking on implementing multiple calls-to-action, consider how you are going to solve this issue. One route you could consider is to suppress the alternate payment methods for returning customers if the customer always pays by credit card, for example. Or if the customer always purchases by PayPal, show the PayPal button most prominently, and hide the others under a Show alternate methods of payment  link.

2. How to Implement

Not all sites will see significant increases in conversion when implementing alternate payment methods. The main reason for this is that implementations can be done badly. One of the primary benefits of these payment methods is that they enable visitors to bypass the billing, shipping, and card entry steps on an ecommerce site. This is especially important for mobile sites, where entering these details using fingers and small screens defeats all but the most determined.

However, many sites implement these payment methods as an alternative only to entering the credit card number. You can see this here on Barnes and Noble ‘s site, where you are forced to enter shipping and billing information before being presented with the PayPal button. This may be a simpler implementation to do than providing an alternate checkout path, but it is frankly a waste of time, and surprisingly prevalent in PayPal implementations.

The correct method is to implement the alternative payment method as a button at the start of the checkout process, probably on the cart summary page. You can see a good example here of this at PacSun.com, an apparel site, but note the competing calls-to-action problem here as well.

PacSun deals with this slightly differently on mobile devices by not offering V.me. as a payment alternative. This avoids having a four choice vertical list of competing calls-to-action.

Alternative payments can undoubtedly result in higher conversions. However, to be effective they need to be implemented correctly to provide an alternative checkout flow, not simply a payment alternative to credit cards. This takes more effort to implement, but it is worth it. Implementing one payment method properly is a better route than superficially implementing multiple payment methods. This is especially true for mobile sales where the goal is to eliminate data entry as much as possible and alternate payments can do this very effectively. As mobile commerce becomes more important, so will alternative payments, for all merchants.

3. Which Payment Method?

Since there are multiple choices, the obvious route is to adopt PayPal. PayPal claims over 30 million U.S. mobile customers, and over a 100 million active accounts…which is a larger base than any of its competitors. SeeWhy found that 34 percent of U.S. consumers shopping online had PayPal accounts as of July 2013.

However, PayPal also carries some baggage. Having grown up as a payment method of choice for eBay, its reputation is not always considered positive. Some consumers are wary about PayPal, having had negative experiences in the past, probably with smaller merchants on eBay. In fact, according to SeeWhy’s analysis, two thirds of PayPal account holders state that their preferred payment method is a credit card.

Merchants selling luxury items might want to consider alternatives before implementing PayPal because of its reputation issues. Google Wallet is an alternative that is growing fast in part because of the growth of Android smartphones where a Google Wallet account is required to use the Play store, the Android equivalent of the app store. Google Wallet can also be linked to Google+ social sign on, so if you are considering implementing social sign on as well this might be a route to consider.

Both Visa’s V.me and MasterCard’s MasterPass both hold significant potential but the companies are only just beginning to roll out their service. It’s also worth noting that both Visa and MasterCard are rolling out their services through the acquiring banks. This will cause a proliferation of payment choices, leading to complexity and confusion for the shopper. You can see this already with MasterPass where having selected the Buy with MasterPass option, you are then presented with an array of different MasterPass wallets to choose from. Currently there are only six options, but what happens when there are hundreds?

Posted in e-commerce & m-commerce, Electronic Payments, Mobile Payments, Smartphone Tagged with: billing, calls-to-action, card entry, checkout, conversion, credit cards, e-commerce, ebay, ecommerce, electronic, google, MasterCard, masterpass, mobile commerce, mobile sales, mobile shopping, payments, PayPal, process, screens, shipping, smartphone, visa, wallet

The Most Secure Way To Process To Date – Point-To-Point Encryption

November 7, 2013 –  Payment Card Industry (PCI) Council’s recent acceptance of the world’s first Point-To-Point Encryption-validated solution is great news for both acquirers and merchants, and will aid in reducing merchant scope and increasing business security worldwide. If your P2PE know-how is a little spotty, here are the basics.

What is P2PE?

Point-To-Point Encryption (P2PE) is the combination of hardware and processes that encrypts customer credit/debit card data from the point of interaction until it reaches a merchant solution provider’s environment for processing. Because card data is immediately encrypted as the card is swiped (or dipped), it prevents clear-text information from residing on the payment environment. Encrypted card data is then transferred to, decrypted by, and processed through the solution provider processor who is the sole holder of the decryption key.

In a POS environment, merchants often store decryption keys on their backend servers. Bad idea. If a cybercriminal hacks into that environment, they not only have access to the encrypted card numbers, but the decryption key as well. Hacker jackpot. Many question the difference between P2PE and typical point of sale (POS) encryption.

The reason P2PE is arguably the most secure way to process is because merchants don’t have access to decryption keys. If a hacker breaches a merchant using a validated P2PE solution, he/she will only recover a long string of useless encrypted card numbers with no way to decode them.

Why use P2PE?

Basically, P2PE increases data security and has the ability to make a merchant’s job of reaching PCI compliance easier. The main point of using a P2PE-valiated solution is to significantly lessen the scope of security efforts through PCI Data Security Standard (DSS) requirement and P2PE Self-Assessment Questionnaire (SAQ) reduction. Compared to the 80+ questions required of mainstream merchant SAQs, the P2PE-HW SAQ only requires merchants to answer 18 questions.

Are all P2PE solutions created equal?

Answer is no. Many P2PE solution vendors claim their solution reduces scope, but in order for a merchant to qualify, they must select only P2PE-validated solutions listed on the PCI Council’s website.

To get P2PE solutions and applications listed on the approved website, solution provider processors must go through a rigorous testing process performed by a qualified P2PE Qualified Security Assessor (QSA). P2PE QSAs help entities thorough the 210-page document of P2PE requirements, testing procedures, and controls required to keep cardholder data secure – a task which only a few companies in the world can do.

As of this post, the only P2PE hardware solution approved by the PCI Council is European Payment Services’ (EPS) Total Care P2PE solution, validated by P2PE QSA SecurityMetrics. A number of other P2PE solutions are currently undergoing the review process and will be added to the list once approved.

Posted in Best Practices for Merchants, Credit card Processing, Credit Card Security, Electronic Payments, Merchant Services Account, Payment Card Industry PCI Security, Point of Sale, Visa MasterCard American Express Tagged with: acceptance, acquirers, backend, cardholder, credit/debit, cybercriminal, data, decode, decrypted, decryption, DSS, encrypted, encryption, encrypts, hacker, hardware, key, Merchant's, p2pe, p2pe-hw, Payment Card Industry, PCI Council, point of sale, point-to-point, POS, process, processed, processes, Processing, processor, provider's, saqs, secure, solution, transferred, validated

Verifi Secures Patent Improving Chargeback Process for Merchants

Los Angeles-based company Verifi, providing antifraud and risk-management services recently secured a patent for its dispute-resolution technology that enables merchants to avoid chargebacks by turning them into refunds earlier in the process. According to the patent abstract, the patent covers “receiving, at the partner platform, an inquiry/dispute event notification,” and “refunding the transaction or canceling future or recurring charges associated with the transaction.”

Verifi noted in the patent application, consumers are increasingly contacting their issuing bank first in the case of a disputed credit or debit card charge, cutting the merchant out until later in the process. The patent in question, in addition to streamlining the process for issuers engaged in the dispute process, helps recurring merchants by removing cardholders from the recurring payment program during the resolution process so additional charges will not come into question until the original dispute is settled.

 

Posted in Best Practices for Merchants, Credit card Processing, Payment Card Industry PCI Security Tagged with: antifraud, cardholders, chargeback, consumers, dispute-resolution, disputed, inquiry/dispute, issuing, Merchant's, patent, payment, platform, process, receiving, recurring charges, refund, refunding, resulution, risk-management, Security, services, settled, transaction, verifi

Biometric POS Solutions Became Market-Ready? How ??

UL’s (Underwriter Laboratories) latest contribution to the future of payments has been accomplished through its three years of work with National Security, a French biometrics company that has created a commercially viable biometric technology solution for the point of sale.

The move positions UL and National Security at the forefront of an industry that is expected to expand by 140 percent to reach $12 billion in revenue over the next five years, potentially transforming online, mobile and in-store commerce by increasing the speed of transactions in the process.

Still, arguments can be made that biometric use at the point of sale will remain limited. Why does UL believe the market is right for biometrics, and how did it successfully ensure biometric payments will be ready for all parts of the payment process?

Why The Time Is Now For Biometrics 
Consumer concerns regarding identity theft and violence are on the rise, and the solution according to many is a viable biometrics payment solution. Reports show that there is already strong demand in the U.S. and Asian markets for such products, and major research outlets have put their support behind the technology.

UL’s case study elaborates on the benefits illustrating how biometric data has been developed to be harder for hackers to infiltrate and compliant with EMV security standards.
Developing The Technology 
UL’s work to ensure biometrics will remove friction at the POS has been extensive. For example, its latest case study profiles how UL developed the underlying technology to overcome challenges and work in harmony with wireless technologies such as bluetooth and Wi-Fi. Further, it explains how UL assessed the human health impact of National Security’s biometric solutions.

Posted in Credit card Processing, Electronic Payments, EMV EuroPay MasterCard Visa, Mobile Point of Sale, Near Field Communication, Point of Sale Tagged with: biometric, bluetooth, commerce, data, developing, EMV, future, hackers, identity theft, impact, in-store, mobile, online, payment process, payments, point of sale, POS, process, security standards, solution, speed, transactions, viable, Wi-Fi, wireless

10 Reasons Point Of Sale Systems are Better Than Cash Registers

Cash registers were the only game in town not too long ago, but these days companies have many more choices. Replacing antiquated cash registers with modern POS (point of sale devices carries a number of important benefits, including: 

1. Can cut down on user errors. Hitting a wrong key is always a risk when ringing a sale, but point of sale devices have built in checks to ensure that the information is entered accurately.

2. Customers receive more informative itemized receipts with a point of sale devices. Many cash registers can only print the date and the amount of the sale, but since point of sale devices are tied into the inventory control system they can provide much more detailed information, including a description of the item, the list price and the sale price.

3. Easy to look up past transactions. If you need to know how much you sold last Tuesday a point of sale system can give you that information in a snap. It would take many hours of laborious work to find the same answer using a cash register.

4. Maintenance and repair costs are often much lower on a point of sale device than a cash register.  The number of companies that repair cash registers is dwindling, and that means that repair costs can be rather high.  There are many vendors who repair point of sale devices, and that can keep repair costs low.

5. Provide faster service than old fashioned cash registers. Every part of the process, from authorizing a credit card transaction to printing a customer receipt, is faster on a point of sale device.

6. Simplify the accounting process. Old fashioned cash registers force accountants to sort through hundreds of receipts, but with a point of sale system financial personnel can simply use the built in reports or create their own.

7. Unlike a cash register, a point of sale system often includes an overall inventory management system. Store owners can use a point of sale system to track their biggest sellers and reorder those products when stock gets low.

8. Workers now a days are often more comfortable with point of sale devices than old fashioned cash registers. Generation now entering the workforce never knew a time without computers, and as a result they are very comfortable working with computerized technology like point of sale devices.

9. You can use a point of sale system to create your own purchase orders, eliminating an extra step in the ordering process. You can even automate the ordering process to make sure you never run out of your hottest selling products.

10. You can see real time inventory with a point of sale device, something that even the best cash registers simply cannot do.  In fact, many companies have found that implementing a point of sale system virtually eliminates the need for a costly hand count.

There are many reasons why your company should consider  state of the art point of sale device and ditching the old fashioned cash register. These devices can lower the cost of doing business while increasing productivity, and that can be good for the bottom line.

Ready to make the switch from a cash register to a point of sale system? National Transaction can provide the software, hardware and support for any POS need. NTC integrate your payment processing into many accounting software titles such as Intuit Quickbooks or Peachtree Accounting. NTC can also provide integation for any restaurant cash register system and all industry specific solutions. NTC provide credit card readers for Android, Apple and Blackberry smartphones and tablet devices. National Transaction can make the World your Point Of Sale.

Posted in Credit card Processing, Mobile Point of Sale, Point of Sale, Visa MasterCard American Express Tagged with: accounting, amount, Android, Apple, authorizing, benefits, blackberry, cash register, computerized, control, costs, credit-card, date, devices, hardware, inventory, itemized, low, maintenance, point of sale, POS, price, print, process, readers, receipts, reorder, repair, sale, sale price, Smartphones, software, stock, system, transactions, vendors, virtually

What Electronic Check Processing is and How it Works

What is an electronic check?

Electronic Check also known as Echeck – is an electronic version of a Paper Check. Electronic Checks allow merchants to convert paper check payments made by customers to electronic payments that are processed through the (ACH) Automated Clearing House Network. It’s a fast, efficient, and secure way to process check payments.

Because of the many benefits and increased security methods that electronic checks offer, this method of payment is quickly growing in popularity. In 2007, electronic check conversion increased by 30%, with more than 3.1 billion paper checks converted to echecks through in-store transactions. Familiarizing yourself with how electronic checks work, the benefits and security features they offer, and how you can get started with electronic check conversion will save you time and money and help you provide greater protection for your business and your customers.

How it works:

Electronic check conversion is a simple method of processing payments, and the changes to how you do business are minimal. One of this method’s greatest advantages is that you can electronically submit checks instead of having to physically take them to the bank, saving you time and increasing employee efficiency.

When you receive a paper check payment from your customer, you will run the check through an electronic scanner system supplied by your merchant service provider like National Transaction Corporation (NTC). This virtual terminal captures the customer’s banking information and payment amount written on the check. The information is transferred electronically via the Federal Reserve Bank’s ACH Network, which takes the funds from your customer’s account and deposits them to yours.

Once the echeck has been processed and approved, the virtual terminal will instantly print a receipt for the customer to sign and keep. Employees should mark the paper check as “void” and return it to the customer. Your merchant transactions will be available online for viewing with customized detailed reporting, which may vary in features depending on the merchant service provider you choose.

Using electronic check conversion to process your customers’ payments holds many benefits over paper checks:

Benefits:

1. Received Funds Sooner. Businesses that use electronic check conversion have funds deposited almost twice as fast as those using the traditional check processing method, with billing companies often receiving payments within one day.

2. Reduced Fraud and Fewer Errors. Echecks are processed using an automated system, which cuts down the number of people who must handle the check, reducing the potential for error and fraud. Merchant service providers (NTC) also maintain, monitor, and check files against negative account databases that store information about individuals or companies that have past records of fraud to help decrease fraudulent activity.

3. Reduced Processing Costs. In general, the cost to process an echeck is substantially less than that of paper check processing or credit card transactions. Echecks require less manpower to process and eliminate incidental costs such as deposit and transaction fees that accompany paper checks. With Echecks, you can save up to 60% in processing fees.

4. Sales Increase. If your business didn’t accept paper checks in the past, you can expand the payment options available to your customers and increase sales by offering echecks. If you are converting from accepting paper checks to echecks, you can still expand your customer base by being able to accept international and

out-of-state checks without the worry of fraud. Echecks require account validation and customer authentication processes that identify bad checks within seconds.

5. Safe, Simple and Smart. Electronic check conversion is easy to set up and relies on the ACH Network for processing, the same reliable and trusted funds transfer system that handles Direct Deposit and Direct Payment. Plus, echecks are a smart choice for the environment, helping to reduce more than 67.4 million gallons of fuel used and 3.6 million tons of greenhouse gas emissions created by transporting paper checks.

Increase security with electronic checks – Electronic check conversion leverages the latest information protection features such as encryption and message authentication. Because of this, many retail merchants, merchant service providers, and financial institutions consider it to be one of the most secure payment methods in the electronic payment processing industry.

 Authentication – Merchants must verify that the person providing the checking account information has the authority to use that checking account. There are a number of authentication services and products available to merchants, including:

Digital Signatures or Digital Certificates are a way of Encrypting information that gives the receiver a more reliable indication that the information was sent by the claimed sender. They are used by programs on the Internet to confirm the identity of a customer to concerned third parties, serving a similar purpose as a handwritten signature. Digital Signatures cannot be easily tampered with or imitated and are easily transportable, thereby making them a reliable method for verifying identity when implemented correctly. Digital Signatures are often used to implement Electronic Signatures, a broader term that refers to any Electronic Data that carries the intent of a signature.

Duplicate Detection and prevention is another way to reduce fraudulent activities. Financial institutions have software and operational controls in place to prevent duplication of the scanned electronic representations of customer checks.

Encryption The ACH Network automatically encrypts messages using 128-bit encryption and a secure sockets layer (SSL).

 Public Key Cryptography is an Encryption/Decryption Security Method that uses one key to Encrypt a sent message and another to Decrypt it. With Electronic Check Conversion, the Private Key is a secret mathematical calculation used to create the digital signature on the Echeck, and the Public Key is the corresponding key given to anyone who needs to verify that the sender signed the echeck and that the electronic transfer has not been tampered with. Public Key Cryptography is another way to ensure authenticity of the Electronic Transfer of Funds.

 What is the (ACH) Automated Clearing House Network?

The Automated Clearing House (ACH) Network is a funds distribution system that moves funds electronically from one entity to another. This highly reliable and efficient nationwide electronic network is governed by the rules established by the National Automated Clearing House Association (NACHA) and the Federal Reserve (Fed). The ACH payment system also handles debit card transactions; direct deposits of payroll, Social Security, and other government benefits; direct debit payments; and business-to-business payments.

How to get started with Echeck:

Useful advice to help make the implementation of electronic check conversion at your business run smoothly:

Choose a processing company that is well established in the market. While a competitive pricing package may also be of importance, having a processor that is reliable with a good reputation is essential.

Look for a processor that enables you to easily align your current business processes with your new electronic processing system. Ensure that you can easily export customer data and smoothly integrate the electronic payment processing system with your business management software.

Notify your customers that your business will begin using electronic check conversion to process payments. Federal rules require you to post a notification about this change in practice as well as to give your customers a takeaway copy of the notification. You must also provide customers a telephone number to request more information about electronic check conversion.

 

 

Posted in Electronic Check Services, Electronic Payments, Financial Services Tagged with: ach, authentication, automated clearing house, bank, check, checks, conversion, deposited, digital, echeck, electronic, electronically, encryption, fees, in-store, market, merchant, merchant service provider, money, online, payments, process, Processing, reporting, scanner, Security, signature, submit, terminal, transactions, virtual

How A Typical Credit Card Transaction Works and How Credit Card Fees Work for Merchants

Here’s how typical credit card transaction works:
When a consumer pays with a credit card, the merchant sends the details of the transaction along with the credit card information to the merchant’s bank. The merchant’s bank forwards the information to the cardholder’s bank for approval. If approved, the cardholder’s bank sends the required amount to the merchant’s bank, minus the merchant discount rate. The credit card companies don’t receive any revenue directly from interchange rates. Instead they make their money by charging the banks fees for networks, transactions and other kinds of services.

Up until April 2008, interchange rates were simple and inflexible. At that point, the company decided to move to a more dynamic system.

Interchange rates now vary from card to card, depending on the types of services and incentives offered. Typically, premium cards, which come with rewards for things like travel, cost merchants more to process. The rates also vary by type of transaction, and even by type of retailer. At times, the card companies have, for example, set special rates for grocery and gas retailers in a bid to boost credit-card use in locations where cash and debit traditionally dominated. The card companies have also introduced a growing number of premium and even super-premium cards that cost merchants more to process. The cards appeal to consumers because they contain a number of attractive incentives, such as travel and other rewards. The changes in the rate structure followed a change in the credit card companies’ business model in the mid 2000s.

Visa and MasterCard evolved from private associations owned mainly by the banks they serviced to publicly traded, profit-driven entities beholden to a wide range of shareholders. Merchants say the fees they pay to accept credit cards are rising as a result and have become increasingly unpredictable. Critics of the credit card companies say the merchant is a powerless middleman in a system that entices consumers to use their cards and banks to reap the benefits.

The credit card companies say the system benefits everyone, including merchants, by providing a rapid, secure form of payment.

Every time you use your credit card to make a purchase, the merchant pays what is called the “merchant discount fee.” The merchant discount fee is calculated as a percentage of the good or service purchased. It can range from 1.5 per cent to 3 per cent. On a $100 item, for example, the merchant could pay a fee of between $1.50 and $3.The merchant discount fee covers a number of things, such as terminal rentals, fraud protection and transaction slips. But the biggest component of it is based on the interchange rate, which is set by the credit card companies.

In a complicated twist, the credit card companies don’t make any money from the interchange rate. The banks do. The interchange rate is what makes the credit card system work.  This rate ensures the banks have a financial incentive to issue and accept credit cards.

Posted in Credit card Processing, Electronic Payments, Merchant Services Account, Visa MasterCard American Express Tagged with: associations, bank, card, cardholder, charging, credit, credit-card, discount rate, dynamic, fees, financial, fraud, interchange, merchant, Merchant's, networks, payment, process, protection, Rates, rentals, secure, services, terminal, transaction, travel

How to Get the Lowest Credit Card Transaction Rates & Fees

1. Use newer POS systems to reduce credit card fees.

2. Find out what percentage of your gross sales go toward credit card rates.

3. Perform a statement review at least annually.

Any time a customer uses a credit card to purchase services and goods the merchant pays various rates and fees processing those transactions. Most of these fees go to the bank issuing the credit card as they take on the bulk of the risk in credit card transactions. Visa, American Express and Discover own the network on which these credit card transactions are processed on and they receive part of the fee and percentage rate as well as establish these rates and fees. Finally the bank that provides merchant account services gets part of these rates and fees.

To a small business 2, 3, or even 4% might not sound like much but when these fees are on the gross total of sales they can be significantly higher than originally thought. For this reason it’s a great idea to assess your merchant account statement to see if rates are in line and that your most frequently used cards and transaction types are getting the best rate possible. By going over your statement, you can see exactly what you pay per transaction and get details about your most common transaction types and credit card used to get the process going. Knowing how to untangle the various levels of pricing rates and fees can be daunting if you don’t know what they mean. If you are unfamiliar with what these rates and fees mean on your statement companies like National Transaction can perform the review for you. Free of charge.

Ultimately the best thing to have is a merchant account service provider that will take the time to go over your business with an eye lowering your rates and fees. The savings can be significant. As a business grows it changes and there should be an ongoing strategy at maintaining the best processing rates and fees possible. Today with so many different credit card types, like rewards cards, airline miles programs and more it can pay off to check once or twice a year.

Posted in Best Practices for Merchants, Credit card Processing, Electronic Payments, Merchant Services Account Tagged with: account, American Express, bank, card, credit, fees, MasterCard, merchant, process, Processing, Rates, services, Visa MasterCard American Express