Archive for the ‘Accepting Checks Safely’ Category

High Risk Offshore Merchant Account FAQ’s

Monday, March 15th, 2010

What are High Risk Merchants?

High Risk Merchants are specific types of businesses that typically have a higher than normal chargeback ratio and higher than normal risk of returns or customer sales disputes. Chargebacks of more than 1% of total monthly sales are usually considered excessive chargebacks by most processors.  Also, the merchant acquiring banks consider an account a High Risk Merchant Account based on the potential for possible legal violations for selling particular types of services or products, financial liability that the bank or processor will incur for processing for the merchant or bad publicity towards the bank for accepting certain types of businesses.

How long will it take me to get a High Risk Merchant Account established and begin processing?

The length of time varies, depending on how quickly the paperwork and the supporting documents are received. Once all required documentation is submitted, approval may ake as little as  24 – 48 hours . Larger or higher risk accounts may require longer periods of time.

What is the High Risk Merchant Reserve, how much is it and how long is it held?

The reserve is a cash amount held back from your available post-clearing funds. The high risk merchant reserve generally ranges between 5% and 10% of each merchant’s approved volume or monthly sales volume. Reserve amounts are held by the merchant processor to ensure against losses due to uncollected fees, merchant fines, excessive chargebacks, etc.

Can a start-up business get approved for an offshore merchant account?

High-risk acquirers approve companies on an individual basis. If you are a start-up business, what’s important is the strength of your business plan, how you expect to generate sales, supply and service your customers and the history of the principals in your business.

If our company (and ourselves) has been placed on the MATCH list, can we still be approved for a new merchant account?

Very often, but not always.  We will say this with confidence:  Due to our vast network of international offshore and high risk procesors, if we at AMS can’t get you underwritten, you may rest assured nobody can.

We know that individual merchants using a shared merchant account do not have individual descriptors. What does it take to obtain approval for our own merchant account and our own descriptor?

Depending on size, category and risk, merchants can obtain their own custom descriptors once their individual merchant account has been approved to accept credit cards.

Can our merchant account settle transactions in more than one currency?

Yes, multiple currency settlements are available for approved merchants.

Which merchant businesses are considered High Risk?

Businesses or industries that are included in the High Risk Merchant category include  (but are not limited to)  the following:

  • Adult Service Providers
  • Pharmaceutical Merchants
  • MO/TO Accounts (mail order, telephone order)
  • Collections Agencies
  • Telemarketers
  • Adult Oriented Businesses
  • Travel & Cruise Industries
  • Door-to-Door selling
  • High Ticket Sales
  • Furniture Stores
  • Internet Auctions
  • Club Memberships
  • MLM (Multi-Level Marketing)
  • Tobacco Sellers
  • Time Share sales

How much does it cost to apply for an Offshore Merchant Account?

Costs vary by offshore acquirer, and are also a factor of the specifics of each merchant.  Generally, however, we charge no up-front fees, so there is no risk to the applicant.  How the process works is:  After submitted the prospective applicant’s paperwork to various possible underwriters and hopefully receiving at least one (often multiple) offers, we present the best offer to the merchant, who is free to either accept or walk away from the offered program.

QUESTIONS? Please email us at amspcs@juno.com or go to our Home Page at www.MerchantServices-help.com and click the CONTACT US button.

  • Share/Bookmark

PCI FAQ’s

Thursday, March 11th, 2010

PCI Security is a very hot topic in the credit card processing industry these  days  .  Merchants don’t understand or accept PCI, and are frustrated by the new PCI compliance fees they are seeing on their merchant statements (if you haven’t seen yours yet–look harder).  Even worse, several processors and shady merchant services sales people are distorting facts and downright lying in the never-ending quest to steal a merchant account from a competitor in order to make an extra dollar. pcilogo

Let’s set the record straight once and for all.  If you are a merchant of any kind, any size, any industry, here is a concise listing of everything you MUST know about PCI Security compliance:

 

What is PCI DSS?

The Payment Card Industry Data Security Standards are requirements designed to minimize theft and misuse of sensitive credit card data at every level of credit card processing.

Who has to Comply?

Member Banks – Acquiring Bank and Card Issuing Banks.
MerchantsAny merchant who accepts any of the major card brands, including Visa, Mastercard, American Express and Discover.
Service Providers – Internet Gateways, Shopping Cart Vendors and Hosting Companies

What does PCI Compliance mean to my business?

The card associations require that cardholder information be handled and maintained in a secure fashion. ALL merchants are required to meet the PCI compliance guidelines.

What is the difference between compliance and validation?

Compliance is the process of implementing the security controls and policies required by the standard. Validation is the process of proving that you are compliant. PCI compliance requires both functions to be performed.

How often do I have to validate my compliance?

You are required to validate compliance every 12 months.

What if I change my merchant service provider in the next 12 months?

You will receive a Certificate of Compliance once you have completed the required SAQ and scan, if required, that you will be able to provide to your new merchant service provider to validate your compliance.

What happens if I am not in compliance?

Failure to comply with these requirements can result in significant fines and the possible cancellation of payment processing capability.

Am I liable if my service provider is breached?

It depends, but it is certainly possible. If you use a 3rd party service provider to process your credit card transactions it is your responsibility to ensure they are PCI compliant. If they aren’t and they are breached you can be held liable also. There are known cases of that happening currently.

Does PCI compliance apply to non-profit organizations?

Yes, the liability and risks still exist and need to be addressed. In fact, because you are a non-profit organization the effects of a data breach could be even more damaging to your business due to the fines and other possible penalties.

How do I determine the specific requirements that apply to my business?

Compliance requirements vary by method of processing, such as using a stand alone landline, wireless communications or the internet to process. Simply review the table provided, click on the letter next to the description that best describes your business, and you will be taken directly to the applicable requirements.

What is a Self-Assessment Questionnaire?

The Self-Assessment Questionnaire “SAQ” is a validation tool for merchants and service providers who are not required to do on-site assessments for PCI DSS compliance.

What is cardholder data?

Primary Account Number (PAN)
Cardholder Name
Expiration Date
Sensitive Authentication Data
Full magnetic stripe data
Card Validation Code/Value
Personal Identification Number (PIN)

What can never be stored, even if encrypted?

Full magnetic stripe
Card Validation Code/Value
Personal Identification Number (PIN/PIN block)

What are the 12 requirements?

  • Install and maintain a firewall configuration to protect cardholder data.
  • Do not use vendor-supplied defaults for system passwords and other security parameters.
  • Protect stored cardholder data.
  • Encrypt transmission of cardholder data across open, public networks.
  • Use and regularly update anti-virus software.
  • Develop and maintain secure systems and applications.
  • Restrict access to cardholder data by business need-to-know.
  • Assign a unique ID to each person with computer access.
  • Restrict physical access to cardholder data.
  • Track and monitor all access to network resources and cardholder data.
  • Regularly test security systems and processes.
  • Maintain a policy that addresses information security.
  •  

  • What’s the difference between a QSA and an ASV? A Qualified Security Assessor (QSA) is a firm certified by the PCI Security Standards Council to perform the annual audits required for Level 1 Merchants. An Approved Scanning Vendor (ASV) is certified to perform the quarterly scanning required by all levels. Level 4 Merchants do not require the services of a Qualified Security Assesor.Are there different ways to satisfy requirement 6.6?Possibly, depending on your situation one of the following may satisfy the requirement:
  • Perform a code review of all in-house developed web applications.
  • Run all web application code through automated code analysis tools.
  • Perform a manual penetration test on each web application.
  • Purchase and install an application layer firewall in front of each web server.How do I find my IP Address?Consult your network administrator.How do I know if my IP address is Static or Dynamic?Consult your network administrator. 

    What is the difference between a Static IP and a Dynamic IP address?

    A static IP address is the number assigned to a computer by an Internet service provider to be its permanent address on the Internet. If you have a static IP your IP address remains the same every time you log in. Once you have provided JDS with your IP address your scans will be performed without any action required on your part.

    A dynamic IP address is your IP address for only as long as you are logged in for a session on the Internet. Once you disconnect from the Internet, that dynamic IP address goes back into the IP address pool so it can be assigned to another user. Consequently you will rarely, if ever, have the same IP address twice.

     Who can I contact if I have any questions about PCI?   Call 1-877-689-1691 or email your questions to amspcs@juno.com.  You may also contact us at  http://www.merchantservices-help.com/contact.html  We will answer your quesetions and/or refer you to the proper source as quickly as possible. 

  • What other  links should I refer to for additional information and assistance regarding PCI?

    http://www.merchantservices-help.com/PCIcompliance.html contains more valauble information on PCI Data Security as well as a direct link to the PCI Security Standards Council page.

     

    Who

    • Share/Bookmark

    New Secure Payment Application for Google®’s Android™

    Friday, November 6th, 2009

    Announcing the first secure mobile payment application for Google®‘s Android™ smartphones.  This application, available through select distributors including Automated Merchant Solutions, Inc.(amsapcs@juno.com) enables Android™-powered mobile phones to become card payment acceptance devices.  With T-Mobile® offering G1™ and myTouch™ and Sprint® offering HTC Hero™ Android™ smart phones, and Verizon Wireless® entering the market, Android is reshaping the mobile phone industry.GoogleAndroid

    This state-of-the-art payment software and gateway solution is supported by all major credit card processors.  It allows merchants seamless integration with their existing merchant account provider, enabling back-office systems integration to accounting applications such as QuickBooks.  With it’s touch screen interface, this application enables merchants to quickly and easily securely accept credit and debit card transactions at the point-of-sale anytime, anywhere.  The software supports optional hardware such as a Bluetooth printer with integrated card reader, which results in merchants paying the lowest possible ‘swiped’ crdit card processing rates.  Receipts can also be printed on the spot, while electronic signature capture available on many processing networks eliminates the requirement for merchants to retain paper copies of signed receipts.

    For details and pricing, email amspcs@juno.com or call 1-877-689-1691.

    • Share/Bookmark

    QuickBooks® Merchant Services Announces Fee Increases

    Tuesday, September 22nd, 2009

    Most QuickBooks® Merchant Services customers will pay more to accept credit card payments as of October 1, 2009, it was announced today by agent relations for Intuit-owned Innovative Merchant Solutions.

    According to the release, fee increases to take effect October 1, 2009 are as follows:

    Existing IMS accounts and QuickBooks Merchant Service for PC accounts:

    • Transaction fee Increased by $.04

    New Intuit QuickBooks Merchant Service for PC Transaction Fee:

    • Qualified and Mid Qualified: $0.27
    • Non Qualified: $0.34
    • Share/Bookmark

    New Merchant Service Program for Blackberry©

    Monday, September 21st, 2009

    I response to increased demand for a low-price program to accept credit card payment on BlackBerry® devices, Automated Merchant Solutions (AMS) Inc., in partnership with CHARGE Anywhere®, a leading provider of secure Point-of-Sale (POS) solutions and electronic paymentBlackberryPOS services and a BlackBerry® ISV Alliance Partner, is proud to announce a new release of its industry leading mobile card payment software application for BlackBerry® Smartphones.

    Overall enhancements include a new user friendly graphical interface with large icons and a blue design theme.  This latest release provides end-to-end secure solutions that enable merchants to accept credit cards anywhere, any time.  With the downloadable Mobile Payments Application, merchants will be able to use a Bluetooth Receipt Printer/Card Reader that will allow them to qualify for swiped rates.

    For information and pricing, please contact AMS at 1-877-689-1691 or email amspcs@juno.com

    • Share/Bookmark

    Tell a friend!

    Know someone who would like to know about this page?

    Email this link!