E-commerce merchant fully or partially presents the payment page to customers. Payments sent from customer browser direct to PCI DSS compliant third-party service provider.

Risk Profile: Higher
10a-p-1600

Where is your card data at risk?

10b-p-1600

How do criminals get your card data?

10c-p-1600

How do you start to protect card data today?

Click on the icons below for the Guide to Safe Payments and information about these security basics.  For simple definitions of payment and security terms, see our Glossary.

ico-strong-passwords2x-p-130x130q80

Change default passwords, use strong passwords, Multi-factor Authentication (MFA)

ico-ask-vendor2x-p-130x130q80

Ask your PCI Qualified Integrator & Reseller (QIR) or your hardware/software vendor for help

ico-secure-payment2x-p-130x130q80

Use secure payment systems

ico-protect-card-data2x-p-130x130q80

Protect card data and only keep what you need

ico-protect-in-house-access2x-p-130x130q80

Protect in-house access to your card data

ico-protect-internet2x-p-130x130q80

Protect all systems from the Internet

ico-limit-remote2x-p-130x130q80

Limit remote access for your vendor partners – don’t give hackers easy access

ico-antivirus2x-p-130x130q80

Use anti-virus or “application allow” software

ico-install-patches2x-p-130x130q80

Install patches from your payment terminal vendor

ico-scanning2x-p-130x130q80

Get regular vulnerability scanning

ico-make-card-data-useless2x-p-130x130q80

Make your card data useless to criminals