Need a little credit card processing 101?
You’re not alone. It can be complicated. Un-complicate it by perusing our FAQs.
What is a payment gateway?
A Payment Gateway sits between the Merchant and the Processor, who passes transactions to the Network (MasterCard, Visa, American Express, Discover, etc). The role of the Payment Gateway is that of a secure information conduit that complies with credit card processing security rules and regulations. Once the card information is entered, the Payment Gateway transmits the card data to the Network who then passes it on to the card’s issuing bank for authorization.
What are interchange fees?
Interchange Fees are variable charges for processing transactions, first paid by the payment processor to the cardholder’s issuing bank and card company (Mastercard or Visa), and later charged back to the merchant by the payment processor. The variable nature of Interchange Fees depends upon the card type, information contained in the transaction, when it was processed, and how it was processed (swiped or manually keyed in). The Interchange Fee is different for every credit card transaction because of the many factors involved.
What is Cost Plus Pricing?
In its general sense, Cost Plus Pricing refers to how a company profits from items or services it sells, through a transparent markup of the base cost. In the payment card industry, it is also known as Interchange Plus Pricing because the Interchange Fee is the base, with the “plus” portion referring to the markup rate applied by the payment processor as payment for servicing the transaction. This “plus” rate is usually a percentage. The benefit of Cost Plus Pricing is the consistency and transparency of the markup rate, which is often less than tiered-pricing models that are oddly bundled.
What is Level 3 Processing?
Level 3 Processing retrieves detailed transactional information along with the sale to send to Visa and Mastercard, which, in turn, provides access to lower Interchange rates for those that participate.
At Payway, Level 3 Processing is automated for all clients —right from the start— to reduce as many interchange fees as possible for the duration of our partnership.
How does account updater work?
Payway’s automatic account updater ensures that the data vault contains the most up-to-date card data, including expired cards, closed accounts, and changed account numbers.
- Participating card issuers send account information to Visa/Mastercard and Discover.
- Payway routinely sends queries for updates from Visa/Mastercard and Discover.
- Visa/Mastercard and Discover return updated information.
- Account Updater applies new account information to the Payway vault.
What is tokenization?
Tokenization is a method of protecting cardholder data during transactions made with Internet protocols and later storage of the same data with the payment service provider. It involves replacing the data with a unique value, not decipherable by hackers. However, the cardholder’s issuing bank is able to recognize the token and approve or reject the transaction based on available funds. After an initial purchase and creation of a patron’s token, the same payment service provider can recall the patron’s token to process recurring payments in a secure manner, again and again.
Is Payway PCI compliant?
Yes, Payway adheres to the latest standards of the Payment Card Industry. Our payment gateway is certified with Visa and Mastercard. Cardholder data is encrypted at the point of entry with the hosted payment page, which eliminates all unencrypted data from the merchant environment. By moving away from premise-based credit card interfaces, merchants can improve data security and remove the local system from PCI certification scope.
What does Card-Not-Present mean?
A Card-Not-Present (CNP) transaction is one that neither requires the cardholder or the credit card to be physically present at that time of the payment transaction.
A transaction that is considered “card present” however, collects payment information at the time of sale with the cardholder physically present. This happens when a card is physically swiped through a point of sale device or credit card chip is processed.
What is a contactless payment?
A contactless payment is a secure method for consumers to purchase products or services using a debit, credit, or smartcard—also known as a chip card—by using RFID technology or near-field communication (NFC).
What is 3D Secure?
3D Secure is a globally accepted authentication solution designed to make eCommerce payment processing more secure in real-time by providing an additional layer of security.
It enables the exchange of date between the merchant, card issuer and when necessary, the cardholder to validate that the transaction is being initiated by the rightful owner of the account.
Unlike traditional fraud prevention tools or chargeback mitigation companies, 3D Secure provides merchants with a liability shift against fraudulent chargebacks. This means there are no disputes – the chargeback does not hit the merchant account.
How do I know my customers’ card data is secure?
Payway stores its data in one of two data centers hosted by Armor, a cloud-based facility that provides 24/7 security and support and exceeds PCI compliance requirements.
What is Point-to-Point Encryption (P2PE)?
P2PE (also referred to as End-to-End Encryption, or E2EE) is a methodology for securing credit card data by encrypting it from the time a card is input through a secure device (by card swipe or manual account entry) until it reaches the payment processor where it is decrypted. When implemented properly, these types of solutions make payment card transactions more secure by preventing the theft of credit card data while unencrypted on a POS device, or in transit.
By using P2PE, card data is unreadable until it reaches the secure decryption environment, which makes it less valuable if the data is stolen in a breach.
By encrypting cardholder data at the Point of Sale or Point of Entry, merchants can significantly reduce the risk of a data breach and the scope of PCI DSS compliance requirements. Can Payway provide a P2PE solution for my company? Yes, Payway offers P2PE as an add-on to Payway to help merchants reduce the scope and cost of PCI-DSS compliance, while further protecting cardholder data from potential hackers. See our Security page for more information.
Can Payway provide a P2PE solution for my company?
Yes, Payway offers P2PE as an add-on to Payway to help merchants reduce the scope and cost of PCI-DSS compliance, while further protecting cardholder data from potential hackers. See our Security page for more information.
Do I need to get a new merchant account if I convert to Payway?
Our “Complete” service does include merchant account services. However, we do understand that sometimes you just need certain pieces of our service, which is why we do not require you to get a new merchant account when you choose our payment gateway.
Do I need to use the Payway payment gateway if I only need a merchant account?
The same rings true for the payment gateway. If your need is only for merchants, we are happy to help out.
How is customer support handled for Payway?
Payway specializes in integrating the needs of different systems, credit card processors, and client banks. We are committed to providing our customers with fast and efficient payment management through one central source. Our trained engineers and customer support team respond quickly to all payment processing questions, regardless of where the question or problem originates — at the bank, at the credit network, or in the settlement process. Payway will work with you to reach a solution.
What is the process for converting from my current processor?
Payway has performed hundreds of conversions from various sources, e.g., Braintree, Authorize.net, IC Verify, etc. These conversions have included systems that have already been tokenized, as well as systems with only raw credit card data. The steps to tokenize include:
- Coordinate with the existing payment processor or system to provide an initial test file containing existing accounts and tokens (if applicable).
- Run the Payway task to import the accounts into the Payway payment gateway and generate a result file containing tokens.
- Update the core system with the resulting token file. If the old system was tokenized, the old tokens will be replaced at this time.
- Validate the token conversion by running a test transaction using the new tokens and checking proper routing of tokens to accounts.