Resources


Follow us on Twitter

View Ty Hardison's profile on LinkedIn

Blogroll


Tags


Special PCI Alert

Posted on July 24, 2010 04:18 by Ty Hardison

A Special PCI DSS (Payment Card Industry Data Security Standards) Alert for Vantage clients.

This week the number of reported solicitations by phone and fax to our merchant community, especially medical, dental and veterinary practices, has spiked.

The common scare tactic involves being subject to fines if immediate action is not taken. Merchants are told that they have no option but to follow the instructions provided, which typically involves providing contact information, setting an appointment, or paying a fee.

Many of the tactics used will try to make it sound as if they are calling on behalf of your service provider. Please be aware that these solicitations are NOT endorsed by Vantage. We do NOT release any information to any 3rd party.

The PCI scare game has also become the “lead story” for the acquisition of merchant accounts by many sales organizations. And PCI fees have also become a popular revenue source for these same sales groups.

While it’s important to recognize the above solicitation tactics, it is in every merchant’s best interest to understand and comply with the basic tenants of PCI to protect your business. While all the payment technology Vantage recommends for payment processing is PCI compliant, only you can ensure that your procedures and policies on how your employees handle card data are enforced at your business. If you have card data in a file drawer or stored on your PC, or if you have other software or systems in place that touch card data besides the actual payment application (payment terminal, payment gateway, payment software), let’s make sure these are secure.

For years, we have communicated the importance of securely handling card data. A PCI statement message runs every month on your merchant statement and a host of PCI information can be found on the Vantage Card Services web site at: http://www.vantagecard.com/resources/PCI_Data_Security.html. And as you know, Vantage does not charge our clients monthly or annual PCI fees.

We have established a PCI hotline. Email your PCI questions to pci@vantagecard.com. In addition to replying to your question directly we will also compile a FAQ&A on the Vantage web site as an additional reference tool.

As always, Thank You for entrusting your merchant services and payment processing to Vantage Card Services.

Share it!

If you like this article then share it with your friends and peers.

Special PCI AlertTweet This!Digg It!TechnoratiBizSugar!

While the payments industry is trying to improve security measures around the existing mag-stripe technology, its inevitable that an entirely new technology will be needed.  Right now the focus is on updating from one outdated mag-stripe terminal to a new, better, more secure, mag-stripe terminal.  However, as discussed in Smart Card Talk, there is almost unanimous agreement that the security model for payments in the U.S. is broken.

The main fundamental weakness of the industry: we have no way to prove identity between the consumer and the merchant.   Fraud rates in the U.S. are on the rise and the situation is only getting worse.  Law enforcement cannot keep up with growing and more sophisticated cross-jurisdiction investigations or prosecute offshore criminal gangs.

With the handwriting on the wall, the basic question is the timing for this eventual shift from today’s legacy magnetic stripe infrastructure to a new standard, be that a chip and PIN, contactless EMV, or something else.  The U.S. payments industry will be undergoing changes in infrastructure for years to come from all stakeholders including the card issuers, POS software and terminal vendors and the networks that process the transactions.

Share it!

If you like this article then share it with your friends and peers.

When will next generation payment technology arrive?Tweet This!Digg It!TechnoratiBizSugar!