BUY NOW PAY LATER

BNPL is Compliant with PCI standards, protect your future

The card brands receive in payments worldwide trillions of dollars (data from VISA 2021) and bear these figures in the confidence that the card holder has to put the data of your card for purchases of goods and services in channels of card present and not present

IQ Information Quality has fourteen years of experience in providing security services in digital payments for Latin America and the Caribbean, approved by the PCI SSC (PCI Security standards Council)to perform the evaluation of compliance with international standards (PCI DSS, PCI PIN, PCI 3DS) that protect payments made with credit cards (VISA, Amex, Master, Discovery) in environments of card present (POS) and card not present (e-Commerce and telephone).

PCI standards are best practices in the industry to protect any electronic transaction where you need to protect sensitive data and can be used to secure other ecosystems of payment such as:

  • Private cards
  • BNPL ( Buy Now Pay Later)
  • International Money Orders
  • Payments person-to-Person P2P
  • Payment of Tolls
  • Loyalty points
  • Criptoactivos.

In any payment you made to your customers, there is information sensitive card data that must be protected.

Alcance PCI DSS en pagos digitales

BNPL - BUY NOW PAY LATER

The use of the option of the BNPL grew so very important in the Pandemic of Covid as an option customers to purchase products and services with the possibility of obtaining the product immediately and pay in fees its value.

In this sense arose companies that provide services BNPL with direct sales and/or subscribe to shops that sell products and services supported in this model of acquisition.

In the model of BNPL with acquisition of Businesses should be integrated in the portal of the trade the mechanism of sending of the information necessary for the company of BNPL complete the transaction. Depending on the integration of trade with the company that provides the BNPL need to be present a series of requirements to mitigate the risk of:

  • Redirect the client to a portal fraudulent where you can capture personal data
  • Capture of sensitive information to protect the information in a manner appropriate for sending to the portal of the BNPL.

The BNPL used as a method of authentication the client's personal information (Cell, Names, date of issuance of id card, biometric information, and authentication dynamic by using a token sent to the cell), which requires to be protected to ensure that it is not compromised and you are able to perform fraudulent transactions that affect clients and mass escapes that affect the entity of BNPL your reputation affecting the confidence of the customers.

Services that support the protection of the BNPL are:

  • Identification and documentation of information flows in the processes where it is used the sensitive information of the customers
  • Identification and validation of reach
  • Identification of the controls that apply to the scope of according to the best practices of PCI standards.
  • Diagnosis with respect to PCI standards.
  • Validation and support for the action plan for the closure of the findings
  • Audit third-party to validate the compliance of the controls.
 
Contact us

Start NOW to protect your customers and your business.

Talking
1
Are you interested in this topic?
Scan the code
Hello! Thank you for write us are you interested in protecting your digital payments?