an introduction to how payment gateway works, with some security issues.

1. Payment Gateway

7. PayPal (As an example) All-in-One Solution Customer’s issuing bank Merchant’s acquiring bank Customer Merchant Processor Payment Processing Service

11. Common Fraud-Related Risks Using stolen information to open new credit cards Issuing unauthorized credits or payments Identity theft Cash theft Accessing a payment network to complete fraud Accessing payment networks Using a stolen credit card to purchase goods and services Product theft Chargebacks A cardholder disputes a credit card purchase

12. How to Protect Your Business Against Fraud Transaction Level Ensure each transaction you accept and process is valid, and be careful in reviewing suspicious transactions because some may be valid. Account Level Make sure only authorized users have access to your payment gateway account, and be alert for suspicious account access patterns. Network Level Ensure your perimeter is defended against unauthorized access. 1 2 3

15. Payment Gateway Implementation over SSL Refer to the attached PDF “ Payment Gateway Implementation.pdf”

17. An example of applying to a payment gateway (WorldPay) Refer to the attached PPS “ worldpay application.pps”

18. Most famous Payment Gateways

19. Questions Confidential and Proprietary