Product information E-payment solution Saferpay
Table of Contents Saferpay The secure solution for payments on the Internet Saferpay advantages Saferpay security Saferpay 3-D Secure technology Saferpay means of payment Saferpay products Saferpay Mail-/Phone-Order Saferpay Secure PayGate Saferpay ecommerce Saferpay Business Saferpay add-ons Saferpay PDF Payment Saferpay Mobile Browser Support Saferpay Backoffice Saferpay Merchant Plug-In Saferpay Authorization Inferface Saferpay Batch Processing Saferpay Secure Card Data Saferpay Risk Management Saferpay X-Terminal 5 7 8 9 10 11 13 15 16 18 21 22 23 24 25 26 27 28 29 30
4
Saferpay The secure solution for payments on the Internet Saferpay is a comprehensive e-payment platform that was specially developed for e-commerce and mail/phone-order business. This e-payment solution is a product from SIX Payment Services, the leading provider of cashless electronic payment transactions in Europe. All current and promising payment means can be processed through a single interface. Saferpay modular software guarantees rapid payment transactions on the Internet flexibly, simply and securely, both for the merchant and the cardholder. Flexible Would you like to be able to react flexibly to your customers needs? You can offer your customers new payment means, discontinue existing ones or switch card processors at any time through Saferpay, without having to make changes to your e-commerce application. Saferpay is multi-currency capable and supports all known credit, debit and customer cards. It s easy You can integrate Saferpay into your eshop application with little effort and effectively outsource the entire payment gateway infrastructure, maintenance and operation. The integration is easy because Saferpay supports all known programming languages and operating systems. Secure Saferpay supports all current security standards and offers you, as an online merchant, the procedures you need to process payments in your shop as securely as possible. The Saferpay e-payment solution is certified according to the Payment Card Industry standard (PCI DSS) and internationally approved for the 3-D Secure procedure by Visa (Verified by Visa) and MasterCard (MasterCard Secure Code). Saferpay customers around the world are accustomed to and appreciate paying securely through Saferpay. Saferpay has become synonymous with secure paying on the Internet by relieving merchants and cardholders of the burdensome security aspects of payments. Are you looking for the right e-payment solution for your online shop? We offer you professional e-payment products to meet your every need! It makes no difference whether you receive orders over the telephone, or in writing, or if you wish to accept card payments in your online shop. Saferpay the easy way to pay! 5
6
Saferpay advantages For online merchants: Acceptance of all known credit, debit and customer cards Easy integration in existing solutions New payment methods can be set up without modifications to the e-shop Change of transaction processor without changes to the e-shop Cost-effective Multi-currency and multi-client capable Online authorization of Internet payments worldwide Functionality for partial debits, cancellations and credits Automatic logging of all transactions Sophisticated reporting functionality Reduction of administrative tasks No administration of SSL certificates required IT cost savings (outsourcing of payment server) Use of Backoffice from any workplace via an Internet browser Certified as compliant with the Payment Card Industry Data Security Standard (PCI DSS) For software houses and ISPs: Self-explanatory Application Programming Interface (API). The modular architecture and functionality facilitates the mapping and support of any e-commerce process. Shop systems and platforms can be offered internationally without having to invest in country-specific payment gateways. Independent of operating systems. Support in setting up proprietary payment services. For cardholders: Highest level of technical payment security through the use of the latest encryption technologies. Highest level of data protection, since a person s data is used only for the purchase process and need not be stored in the e-shop s database. Rapid handling of payments thanks to the high performance and availability of the Saferpay service. Use of Verified by Visa and Master-Card SecureCode for secure payment via the Internet. 7
Saferpay security Security builds trust Offer your customers the greatest possible security. And at the same time, we provide you with protection from nonpayments, because in the end it is a matter of your success and your company s sales. Risk Management Use Saferpay Risk Management as a free upgrade to the Saferpay payment solutions. The security mechanisms verify abnormalities in the customer s payment behavior and sustainably reduce your chargeback rate. Data center security The Swiss data center of SIX Group Ltd fulfills all the security-related requirements of the credit card organizations. Only the latest security and encryption technologies are used. The data center is monitored 24 hours a day, 7 days a week, and guarantees the highest availability. Card verification number (CVV2/CVC2) Visa s Card Verification Value (CVV2) and MasterCard s Card Verification Code (CVC2) are encrypted verification numbers to prevent improper use of credit cards on the internet. The card verification numbers provide online merchants with a security feature that authenticates the physical presence of the card. The three-digit number is located on the back of the credit card at the end of the signature stripe. In contrast, the verification number from American Express is a 4-digit code printed on the front of the card; situated after the credit card number. These numbers are not stored in the credit card s magnetic stripe and are not printed on sales slips. PCI DSS All credit card data can be processed securely through Saferpay according to PCI (Payment Card Industry Data Security Standard). PCI is the global security standard established by the international credit card organizations. The greatest data security and protection from nonpayments is guaranteed for you and your customers through encryption of the data. 8
Saferpay 3-D Secure technology What is 3-D Secure? Saferpay supports the 3-D Secure technology used by Visa and MasterCard for safe and secure online credit card payments. 3-D Secure has been internationally approved and certified for Saferpay. The 3-D Secure technology is offered by Visa under the brand name Verified by Visa and by MasterCard under the label MasterCard SecureCode. How does 3-D Secure work? First, cardholders enter their Visa or MasterCard credit card number. Saferpay then establishes a connection to the cardissuing bank so that cardholders can confirm their identity by submitting the code they created during card registration. The credit card payment is made upon successful authentification. What advantages does 3-D Secure offer? 3-D Secure significantly reduces the risk of fraud and non-payment as a result of card misuse. Offer Saferpay 3-D Secure to your customers and profit from greater payment security and an enhanced liability shift (exceptions vary according to the card organizations rules)! 9
Saferpay means of payment Offer payment with all popular payment means in your online shop including credit, debit and customers cards, as well as online credit transfers. Increase your turnover by offering a comprehensive range of payment means. International Visa Verified by Visa MasterCard MasterCard SecureCode American Express Diners Club Discover JCB Maestro V PAY PayPal ClickandBuy DCC Dynamic Currency Conversion Switzerland Valartis Bonus Card PostFinance E-Finance PostFinance Card myone Germany ELV giropay mpass billpay Netherlands ideal Austria eps Ireland Lasercard 10 Saferpay is multi-currency capable and supports many different international payment means. The following payment means can be handled via Saferpay:
Saferpay products Choose the right e-payment solution for your e-commerce business flexibily, easily and securely from the four service packages: Saferpay Mail-/Phone-Order For the secure payment processing of orders placed by phone and in writing. Saferpay Secure PayGate The enhanced Mail-/Phone-Order solution with encrypted e-commerce transactions. Saferpay ecommerce For secure payment processing of Internet orders directly through your online shop. Saferpay Business For secure payment processing with complex business applications involved with your online shop. 11
12
Saferpay Mail-/Phone-Order Saferpay Mail-/Phone-Order enables you to handle mail and phone payments just as easily and securely as payments made via the Internet from any Windows PC. You have access to the payment page via the Saferpay Backoffice. There you enter the card number, expiry date, card verification number and the amount. Within a few seconds you receive the answer to your authorization request. It is easy to do: You will need to sign acceptance contracts with the various credit card companies (e.g. Visa, MasterCard, American Express, JCB, Diners Club). After ordering the Saferpay Mail-/ Phone-Order package, you immediately receive your personal registration data (username and password). Use this data to log in at www.saferpay.com and start processing payments online. Mail-Order Phone-Order Advantages: No SSL certificates for you to administer (Saferpay takes care of this) No time-consuming programming of interfaces (API) Platform independent Automatic logging of all transactions Administrator access via Web interface TIPP: The Saferpay X-Terminals are available as free extension modules with Saferpay Mail-/PhoneOrder. They can be installed on Windows XP or Windows Vista. Means of payment Speziell geeignet für: Processing of payments for orders placed in writing or over the phone Generating credits Handling of subsequent charges Modules included: Saferpay Mail-/Phone-Order Terminal Module for the handling of payments placed in writing or over the phone. Saferpay Backoffice Interface for the administration of completed payments. 13
14
Saferpay Secure PayGate With Saferpay Secure PayGate you can securely and conveniently process payments on the Internet for orders placed by phone, fax or mail even without your own online shop. Secure PayGate is an upgrade of Saferpay Mail-/Phone-Order, combined with full protection of encrypted e-commerce transactions through 3-D Secure. In comparison to Mail-/ Phone-Order payments, your customers benefit from enhanced payment security and preferential conditions. Here s how it works: You need to sign a Secure E-Commerce contract with SIX Payment Services. Then sign a purchase and service contract for Secure PayGate. You also need a Merchant Plug-In (MPI), which verifies the cardholder s identity before payment is made. Once an order is received, you send your customer an e-mail containing an SSL-encrypted link to a payment window. The customer then securely conducts the card payment there. Your advantages: No investment in your own webshop necessary More preferential conditions than with a Mail-/Phone-Order payment Greater security with PCI and 3-D Secure Automatic logging of all transactions Attractive added-value services such as automatic foreign exchange with Dynamic Currency Conversion (DCC), or foreign currency crediting. Especially suited for merchants who: Receive orders by phone, fax or mail Do not have their own online shop Offer individual products or services Mail-Order Means of payment Phone-Order 3-D Secure 15
Saferpay ecommerce Saferpay ecommerce is the secure epayment system for all online shops. This module allows you to offer electronic payments to your customers even without special programming skills. No databases or encryption technologies are required. The only prerequisite for the use of Saferpay ecommerce is a valid credit card contract. Saferpay ecommerce functions: Reservations (authorization) and payments (booking) Subsequent charges, cancellations and credits Booking of partial amounts Automatic logging Automated daily statement Research and payment searches Payments reporting Risk management It is so easy: Develop your shop using entirely your own design. (TIP: Saferpay is already pre-installed in all popular shop systems.) Conclude contracts with the credit card organizations (e.g. Visa, MasterCard, American Express, JCB, Diners Club). Download the Saferpay components from the download center on our website. Incorporate the components in your shop. Test Saferpay for as long as you like, free of charge. Order Saferpay ecommerce, and you will be issued a personal username and password. Register your username and password on your server and your customers can already start ordering online. Means of payment 16
Advantages: No SSL or 3-D Secure certificates for you to administer (Saferpay takes care of this) No complicated programming of interfaces (API) Platform independent Automatic logging of all transactions Administrator access via Web interface Free evaluation Modules included: Saferpay Payment Page Basic module for processing credit cards via SSL and 3-D Secure. Saferpay Backoffice Interface for the administration of completed payments. Particularly suitable for: Integration in existing e-commerce solutions and static websites. To immediately process all orders, you can have a confirmation sent to you with the authorization information after each transaction. Up-to-the-minute information about your payments is available at all times via the user interface. This keeps you permanently informed about sales activities in your online shop. A manual or automatic day-end closing enables you to submit your completed transactions for pay-out. 17
Saferpay Business The Saferpay Business package contains all the modules you need for your professional and demanding e-commerce environment, and also enables the seamless connection to merchandise management systems, ERP and CRM solutions. In addition to the individual design possibilities and the pre-selection of payment methods, this package also contains the Saferpay Authorization Interface with which payments can be handled directly or in the background. he combination of the Saferpay Authorization Interface with the Payment Pageallows credit cards to be directly authorized from the Web application, without having to do without new security standards such as Verified by Visa or MasterCard SecureCode. Saferpay Business functions: Reservations (authorization) and payments (booking) Subsequent charges, cancellations and credits Booking of partial amounts Automatic logging Automated daily statement Research and payment searches Payments reporting Risk management Parallel processing of multiple workstations (multi-client capability) e-shop Means of payment mobile LIB for WaWi and ERP systems 18
Your advantages: Platform independent Automatic logging of all transactions Administrator access via Web interface Feedback to merchandise management systems, ERP and CRM solutions via the CAI Multi-client capable Payment processing in the background Free evaluation. Especially suitable for: Extensive e-commerce and shop systems Seamless integration in ERP and merchandise management systems, e.g. SAP, J.D. Edwards, MOS Tangram Call center solutions Ticketing systems and vending machines Modules included: Saferpay ecommerce Payment Page Basic module for processing credit cards via SSL and 3-D Secure Saferpay Mail-/Phone-Order Terminal Module for handling of payments placed in writing or over the phone Saferpay Authorization Interface Interface for the automatic background processing of credit cards Saferpay Backoffice Interface for the administration of completed payments 19
20
Saferpay add-ons You can expand your existing Saferpay packages with these add-ons and services: Saferpay PDF Payment The application for direct payment from a PDF bill with an integrated payment link. Saferpay Mobile Browser Support The application for paying on the Internet on all mobile devices. Saferpay Backoffice The administration interface for managing Saferpay accounts and payment transactions. Saferpay Merchant Plug-In Enhanced payment security through Verified by Visa and MasterCard SecureCode. Saferpay Authorization Interface The interface for background payment handling for shop, ERP and merchandise management systems. Saferpay Batch Processing The module for processing credit cards and direct debit payments via file submission (batch processing). Saferpay Secure Card Data The expansion module for the secure handling and storage of credit card data in a PCI-compliant manner. Saferpay Risk Management Expanded services for fraud prevention. Saferpay X-Terminal The online credit card terminal for the handling of Mail and Phone-Order-transactions. 21
Saferpay PDF Payment With Saferpay PDF Payment, your customers can pay their bill easily and conveniently directly from the PDF through an integrated payment link. Saferpay PDF Payment enables you to conduct many electronic business transactions directly and quickly, including reservations, down payments, bills and payment reminders. How PDF Payment works: Saferpay PDF Payment automatically equips your PDF bill or payment reminder with a corresponding payment link. Simply e-mail the document containing the payment function to your customer. The payment transaction can be conducted by the customer conveniently and quickly from home. The payment link in the document leads your customer directly to the payment window (Saferpay payment page). There, the customer can choose the preferred means of payment and pay directly from the PDF with just a single click. You profit from a new, more secure payment mode with fast payment receipt, at no added cost. And best of all: With Saferpay PDF Payment, you save on expensive paper-based payment reminders, tiresome collections and typing errors when entering the bank reference or payment amount. Saferpay PDF Payment functions smoothly with all Windows applications and commercial software (ERP, CRM, WAWI) without complicated integration. 22 Your advantages: Reliable payment processing through Saferpay Direct e-mail dispatch of your PDF documents with an integrated payment link Secure processing of your prepayments with instant payment confirmation Rapid receipt of payment after invoicing Acceptance of all popular payment means (as requested) Minimal adaptation of your system Reduction of manual postprocessing of payments received Increased customer satisfaction Especially suitable for: Merchants without their own online shop, especially craftsman, hotels, event organizers, call centers, ticket sales, B2C retail merchants E-commerce customers that send bills and payment reminders via the postal service Saferpay PDF Payment is an extension that can be added to: Saferpay ecommerce
Saferpay Mobile Browser Support Saferpay supports payments on the Internet on all mobile devices with Mobile Browser Support. Whether on net books or smart phones Saferpay customers receive an optimized payment display in all the required sizes. Your advantages: Automatic browser recognition Dynamic resizing for all mobile devices Processing of all Saferpay payment means Integrated 3-D Secure technology All the usual payment page functions 23
Saferpay Backoffice With the Saferpay Backoffice administration interface, you can control and manage all payment activities in your webshop easily and quickly online. Anyone who operates an e-shop and offers customer-friendly means of payment needs an Internet application that allows efficient controlling. With Saferpay Backoffice, the Saferpay accounts and payment transactions can be administered and monitored. No special software installation is required. Plus, you can access Saferpay Backoffice via an SSL-encrypted connection directly over the Internet. With Saferpay Backoffice, webshop operators can keep track of who has ordered or paid for what and when. Both individual transactions and day-end closings can be processed around the clock manually or automatically. And the detailed reporting always offers the best possible overview, keeping the merchant fully informed at all times. The most important Saferpay Backoffice functions: Entries (payments) Credits (chargebacks) Cancellations Reservations Entry of transactions authorized by phone (referrals) Administration: Journal of all transactions (entries, reservations, credits) Manual or automatic day-end closing Administration of Saferpay accounts and settings Status of payment method activations Reporting: Overview of all closed day periods Summary of all transactions 24
Saferpay Merchant Plug-In Merchant Plug-In for Verified by Visa and MasterCard SecureCode The Saferpay Merchant Plug-In (MPI) identifies the cardholder before initiating the payment. This significantly reduces the risk of fraud and non-payment as a result of card misuse. The Merchant PlugIn is required for processing via Verified by Visa and MasterCard SecureCode. The 3-D Secure technology makes paying on the Internet even more secure. The risk of fraud and the non-payment as a result of credit card misuse is substantially reduced with the Saferpay Merchant PlugIn, which processes 3-D Secure. Through authentication of the cardholder with Verified by Visa and MasterCard SecureCode, merchants benefit from a broader liability shift and can effectively minimize the risk of nonpayment (exceptions vary depending on the card companies)! via the cardholder s Web browser. The code is checked directly by the card-issuing bank and not the online merchant. How does the Saferpay MPI work? First, cardholders enter their Visa or MasterCard credit card number. Saferpay then sets up a connection to the card-issuing bank, so that cardholders can confirm their identity by submitting the code they created during card registration. If the authentication is successful, the credit card payment is made. The function of MPI: Cardholders are protected from having their credit card number misused, because they must confirm their identity by submitting a code before a payment is made. Even before your webshop initiates the payment, the Saferpay Merchant Plug-In checks the identity of the cardholder online using the security programs Verified by Visa and MasterCard SecureCode and sends back a response. This authentication is carried out 25
Saferpay Authorization Interface The Saferpay Authorization Interface (AI) is a discrete and secure solution for the background processing of online payments. For example, Saferpay AI handles billing systems, call center solutions and the interface with merchandise management, ERP and CRM systems. The function of AI: Via the Saferpay Authorization Interface, payments are handled without calling up the Saferpay Payment Page. All information relevant to the payment is routed to the interface and the payment is carried out automatically in the background. Card number, expiry date and verification code must be entered via the merchant system or online shop. If the payment data is entered over the Internet, the input page must be SSL-protected. Merchants are also required to put suitable measures in place to ensure that the payment information is stored securely on their systems. 26 Saferpay Authorization Interface is suitable for: Payment systems that are linked to merchandise management systems, ERP and CRM solutions Billing systems that periodically make payments, such as telecommunications providers Call center solutions in which card verification is carried out directly from the call center application. Saferpay Authorization Interface is an extension that can be added to: Saferpay ecommerce Saferpay Business TIPP: Combine the Saferpay Payment Page with the Saferpay Authorization Interface. Special authentication and payment options, such as Verified by Visa or MasterCard SecureCode are handled via the Virtual Terminal window, and other card payments via the Saferpay AI.
Saferpay Batch Processing The Saferpay Batch Processing module allows you to process entries that do not require immediate authorization, such as subscriptions and monthly/annual fees. The function of Batch Processings: Entries that are not time-critical are made once a day in a so-called batch process. This means they are compiled in a single file and transmitted to Saferpay Batch Processing. A response file is generated for each processed file, so that you can verify the execution of the entries. The file transfer takes place using a userfriendly form in the Saferpay Backoffice. The transfer is SSL-encrypted to guarantee the security of the data. It is so easy: Contracts must be signed with the desired credit card organizations (e.g. Visa, MasterCard, American Express, JCB, Diners Club). Order Saferpay Batch Processing and you receive your personal username and password. List the transactions in a file according to the specifications. The file is transferred to the Saferpay server via the import form. You are informed online that the payments have been sent. The most important advantages of Saferpay Batch Processing: No SSL certificates for you to administer (Saferpay takes care of this) No installation required Platform independent Automatic logging of all transactions Administrator access via the Web interface Free evaluation Particularly suitable for: Subscription services, monthly payments and annual fees Payments that are not time-critical. Saferpay Batch Processing is an extension that can be added to: Saferpay Mail-/Phone-Order Saferpay ecommerce Saferpay Business 27
Saferpay Secure Card Data With the Saferpay extension, Secure Card Data (SCD), you can securely process and store your customers card data without costly PCI certification, which would otherwise be necessary. Online merchants that process, transmit or store credit card numbers on their own systems are required to have their systems security certified in accordance with the Payment Card Industry Data Security Standard. With the Saferpay Secure Card Data (SCD) add-on, data can be securely processed and stored without this costly certification. The function of Saferpay SCD: Sensitive credit card data, such as the card number, is processed and stored in a certified Saferpay data center. This means it is kept completely separate from the merchant application and does not come into contact with it. For payments and subsequent charges with the merchant, optional substitute numbers are used instead of the original credit card numbers. All non-sensitive data, such as card expiry date and the cardholder s name, remain stored in the merchant database. 28 Saferpay Secure Card Data meets all merchant-side security requirements comprehensively, simply and cost-effectively. The cost of system security and certification can be reduced substantially at the same time. Saferpay Secure Card Data is an extension that can be added to: Saferpay Mail-/Phone-Order Saferpay ecommerce Saferpay Business Saferpay Authorization Interface
Saferpay Risk Management Saferpay Risk Management actively supports online merchants with their fraud prevention efforts and delivers enhanced credit card information. This provides merchants with reliable data for making a well-informed decision on whether to accept a payment. Saferpay Risk Management is available free of charge for our customers. Once the extension module is integrated in Saferpay Backoffice, each function can be activated, deactivated and suspended individually as well as independently from the others. Saferpay Risk Management includes the following services: IP-Geo-Location By tracking the IP address, Saferpay identifies the country in which the com-puter being used is registered and dis-plays this as a transaction detail in Safer-pay Backoffice. The country of origin can be passed on to the shop system. If the buyer s IP or e-mail address differs from the card s country of origin, this could be a sign of fraud. Restricted use of links and IP addresses If the number of transactions made from one of your links or from a certain IP address within a predefined period of time exceeds the limit you have set, Saferpay initiates a temporary suspension. This minimizes the risk of fraudu- lent users making fake purchases in your webshop, in order to obtain valid card numbers. Blacklist The blacklist enables you to manually enter card and account numbers with which purchases are no longer permitted in your webshop. You can bar individual card numbers or entire series of numbers. Saferpay declines trans-actions with these numbers before the card/account holder can initiate an authorization request. Whitelist Using the country in which the card was issued and the IP address, Saferpay obtains information on the geographic origin of the purchase. The whitelist enables you to determine the countries from which credit card payments are allowed. If this function is activated, Saferpay only permits transactions from countries that you have explicitly ap-proved for purchases. The other countries remain barred until you add this country to the whitelist. 29
Saferpay X-Terminal Saferpay X-Terminal is a virtual payment terminal that enable you to easily and securely process orders received over the mail or through the phone so-called Mail-/Phone-Order transactions. The Saferpay X-Terminal (Touch PC function) are free add-ons for the online processing of payments for Mail or Phone-Orders. You can use the Saferpay X-Terminal to process credit cards on any Windows PC. In addition to the amount for payment, you simply enter the card data in the Saferpay X-Terminal. You can also optionally enter a reference number or a sales description. Within seconds you are given feedback about the outgoing payment. All transactions performed are displayed and managed in Saferpay Backoffice. Your advantages: Ready to go immediately and easy to use No complicated programming of interfaces (API) Parallel processing from multiple workplaces Automatic logging of all transactions Credits and cancellations only possible after registration in Saferpay Backoffice It is so simple: You have an active Saferpay Mail-/ Phone-Order account with your personal username and password. Download the Saferpay X-Terminal add-on for your Windows workplace free of charge. Now run the installation program on your Windows PC. Provided you have an Internet connection, you can process payments via the X-Terminal or whenever you like. Particularly suitable for: Call center agents without Backoffice access. TIPP: Saferpay X-Terminal is available as free extension modules with Saferpay Mail-/Phone-Order. 30
110.0082.02 INT_EN/04.2013 Payment Services SIX Payment Services Ltd Hardturmstrasse 201 8005 Zurich Switzerland SIX Payment Services (Germany) GmbH Langenhorner Chaussee 92-94 22415 Hamburg Germany www.six-payment-services.com www.saferpay.com sales@saferpay.com