Security

Ecopaynet, certified under PCI DSS

PCI DSS stands for the Payment Card Industry Data Security Standard. This standard ensures that the data involved in every transaction is transmitted securely.

Ecopaynet adopts every security system that the payments industry puts in place to make the environment reliable, robust and secure. This gives you confidence and peace of mind, with a solution in which cardholder data is protected from the moment the card is read by the payment device and throughout its transmission to the card authorisation centres and the acquiring and issuing banks. Together with the payment platform, this creates an environment that eliminates the risk of intrusion, fraud and data theft.



Our commitment to compliance has been demonstrated once again by our continued listing as a service provider on the Visa Global Registry. For merchants, this means that Ecopaynet complies with both the Visa programme requirements and the Payment Card Industry Data Security Standard (PCI DSS) for storing, processing or transmitting Visa cardholder information.

Visa Global Registry of Service Providers:
The Visa Global Registry has been compiled to make it easier for clients to choose the merchant service provider best suited to their needs. It is worth noting that:

  • The Registry now distinguishes service providers that support secure technologies such as EMV, tokenization and point-to-point encryption.
  • Merchants can now check how long a provider has had a relationship with one of Visa's clients or partners, which can be useful for a technology partner looking for a new business rather than an established one.

Visit The Visa Global Registry of Service Providers and search for "Ecopaynet" to see our listing.

PUC/PRICE protocol. 3-D SECURE 2.0 & MasterCard SecureCode

3D Secure and MasterCard SecureCode, provided through the PUC environment, are secure card payment systems that verify the identity of the consumer/cardholder during an online purchase, protecting payment information throughout the eCommerce transaction. In other words, they are specifically designed to prevent card fraud in transactions where the card is not physically present.

The 3D Secure protocol is an anti-fraud encryption technology that uses Secure Socket Layer (SSL, an application for securely transmitting information back and forth). When the transaction is completed, it ensures that the user identifies themselves and proves that they are the holder of the card they are paying with.

It seeks maximum data protection by verifying that the payment card belongs to the user making the transaction.
In line with the security objectives of 3D Secure, when paying, the customer must enter the usual details for this type of transaction: card number, expiry date and CVV code (card verification value); and, in addition, an extra piece of information that only the cardholder should know.

This final check is carried out through a direct connection between the customer and their bank (the card issuer) via the payment gateway. The bank is responsible for authenticating the identity (legitimacy) of the buyer, which it does by asking the cardholder for this additional information, ultimately responsible for validating the purchase.

More information on PSD2 SCA >

VISA and MASTERCARD: Visa Secure, Mastercard Identity Check