E Commerista Launch Pad Step 4 To 7

Hong Kong . Thailand . Singapore . Philippines . China

Only Online Payment Provider in the Philippines to Achievethe Highest Security Compliance Certification in the World:

PCI-DSS Compliant Payment Provider by VISA

Only Online Payment Provider in the Philippines to Achievethe Highest Security Compliance Certification in the World:

PCI-DSS Compliant Payment Provider by VISA

eCommerista LaunchPadSteps 4 to 7

eCommerista LaunchPadSteps 4 to 7

AsiaPay- Your Online Gateway to SEAsia & China AsiaPay- Your Online Gateway to SEAsia & China

Who we areAsiaPay provides one of the most comprehensive, secure, cost-effective payment solutions and services to banks, merchants and individuals.

First in Asia• First leading electronic payment service provider and gateway

solutions provider in Asia

• Currently serving 11 leading banks in HK / Asia

• Serving over 3,000 leading merchants in HK / Asia

• Market leader in Hong Kong, now expanding to the rest of Asia.

First in the Philippines• The premier payment and eCommerce solutions provider affiliated with the leading bank & Philippine credit card acquirer: BDO

• PesoPay – the first eCommerce payment service to Merchants

• eBigay – the first to enable the non-profit organizations to receive online donations

• First to partner with four largest international credit cards: Visa, MasterCard, American Express, and JCB.

　

PesoPay and BDO direct merchantsPesoPay and BDO direct merchants

PesoPay an BDO direct merchants PesoPay an BDO direct merchants

Asian Bank and Merchant Reference (80% market share in HK)

Asian Bank and Merchant Reference(market share in HK 80%)

Financials eBusinesses

eCommerista LaunchPadStep 4: Choose Your Shopping Cart:

How will your customers shop?

eCommerista LaunchPadStep 4: Choose Your Shopping Cart:

How will your customers shop?



Possible　design　templates　for　eMallingPossible　design　templates　for　eMalling


Did you know?

Filipinos are the world's leading Internetconsumers of social networking, videowatching, photo sharing and blog reading.

Can they be the world's leading online shoppers?

Finally, the World's #1 Online Store Creator arrives in the Philippines via eMalling. eMalling is based on OSCommerce/ZenCart, which runs 193,000 stores worldwide.1 out 5 online stores runs on OSCommerce/ZenCart.

Ready to be connected with PesoPay ePayment to receive credit cardonline payments? Visit


Asiapay introduces it’s new service called eMalling that enables the Filipinos to have shopping experience taken to a next level. With this online store system, it minimizes the fear of Filipinos worrying about their cards being used by others.

eMalling has its cool feature called pre-authentication - a tool and an added process that makes it harder for fraudsters to purchase using stolen credit cards.

eMalling also allows the consumers to pay on a recurring mode, which, according to the Credit Card Association of the Philippines, 80% of the credit cards in the Philippines are on stretch payments. That said, eMalling becomes a prefect tool for companies who wants to target the Filipino market worldwide.

Can they be the world's leading online shoppers?

Finally, the World's #1 Online Store Creator arrives in the Philippines via eMalling. eMalling is based on OSCommerce/ZenCart, which runs 193,000 stores worldwide.1 out 5 online stores runs on OSCommerce-ZenCart.

Ready to be connected with PesoPay ePayment to receive credit cardonline payments? Visit


Be able to create your online store from the world leader in online store creation, OS Commerce-ZenCart.

Enjoy rich reporting tools to manage your eCommerce.

Most developers in the Philippines have knowledge in PHP/OpenSource, the development language of eMalling.




Online Shopping Purchase Process SummaryOnline Shopping Purchase Process Summary

Customer can easily choose on the products depending on the categories set by the store owner.

Simply add the item in the cart by clicking the “add this to my cart” button. You can even write a review on this product or tell the item to a friend.

When you click the “go to check out” button: you will be redirected to the store shipping information

* Shipping methods can be modified or remove in Zen Cart if the store owner does not want to display it.

If you are not logged in, the emall will ask you to log in first before making any purchase or register for the first time

The customer can simply input the credit card details inside the store

The final step is to click the confirm button if you are sure to purchase the item

The customer will be prompted that the payment is successful. He will also receive an e-mail that confirms his purchase.

After successful purchase, the customer returns to the emall




eCommerista LaunchPadStep 5: Decide How Your Customers Pay:

Show me the money!

eCommerista LaunchPadStep 5: Decide How Your Customers Pay:

Show me the money!

Flow: From Check Out to Payment Page Flow: From Check Out to Payment Page

Upon Checkout There is a visible or invisible redirection to payment page

Flow: Payment Page Input Process & Approval Flow: Payment Page Input Process & Approval

Payment page appears Enter credit card no., expiry date, card verification no. (CVN)

Realtime Payment Success or Failure Leads to RedirectionRealtime Payment Success or Failure Leads to Redirection

Online Process: What happens to your online transaction Online Process: What happens to your online transaction

Internetwith SSL

Acquring Bank

FrameRelay

Bank InterfaceProgram

Firewall

WebServer

DatabaseServer

ApplicationServer Load

Balancer

Internetwith SSL

Merchant'sOnline Shop

SMS toMobilePhone

WirelessPOS

PDA withmCert

Notebook withWireless device

Telco

5. Transaction is approved/disapproved by the bank and credit

card company

1. Customer shops online

2. Transaction is encrypted with 128-bit

SSL secured

3. Transaction can be made thru various

channels

4. Transaction is received by online payment gateway

Most of the leading shopping cart platforms already have instant paymentIntegration modules set-up. Simply key in the payment account details and

start receiving online orders and payments

Most leading shopping carts allows the merchant to customize payment experience of customer and numbering of electronic customer receipt

The provisional invoice or temporary receipt number can easily merge with the payment report

eCommerista LaunchPadStep 6: Form Your Virtual Store Team:

Who will mind your store online?

eCommerista LaunchPadStep 6: Form Your Virtual Store Team:

Who will mind your store online?


The choice of Shopping & Payment Platforms Will Be the Most VitalDeterminant of Who & How Your Ecommerce Will Run

The choice of Shopping & Payment Platforms Will Be the Most VitalDeterminant of Who & How Your Ecommerce Will Run

A s i a P a y L i m i t e d

Most of the Leading Shopping PlatformsAre Open Source, Free & Supported by Active Communities

Most of the Leading Shopping PlatformsAre Open Source, Free & Supported by Active Communities

Most leading platform already have complete dashboardshandling practically every aspect of ecommerce management

Most leading platform already have complete dashboardshandling practically every aspect of ecommerce management

Managing store catalog and categories is also genericManaging store catalog and categories is also generic

CATALOG > Add new Astro Boy product/item

Adding product by one or by batch can be done in real timeAdding product by one or by batch can be done in real time

Backend

Shopping Page

Updating the store pages do not require programming sincethe shopping platform automatically handles it

Updating the store pages do not require programming sincethe shopping platform automatically handles it

CATALOG > Create special deals, featured products, reviewsReporting & Pricing Totals are Intuitive & Change FriendlyReporting & Pricing Totals are Intuitive & Change Friendly

MODULES > Payment Modules and Shipping ModulesAmending Payment & Shipping Only Need Setting ChangesAmending Payment & Shipping Only Need Setting Changes

CUSTOMERSRealtime Payment Success or Failure Leads to RedirectionRealtime Payment Success or Failure Leads to Redirection

REPORTSGenerating Sales, Customer & Inventory Data Tend to Be Much More Instant, Intuitive & On Demand than Retail

Generating Sales, Customer & Inventory Data Tend to Be Much More Instant, Intuitive & On Demand than Retail

eCommerista LaunchPadStep 7: Exercise Your Fraud & Risk Management Framework:

How do you secure your business online?

eCommerista LaunchPadStep 7: Exercise Your Fraud & Risk Management Framework:

How do you secure your business online?

Merchant

Education

Operations

Control

Payment

Monitoring Control

Fraud detection

and alertsRisky

Payment Filters

Payment

Authentication

Secure

Transaction

Processing

Industry

Market Update

Merchant

Acquisition

Control

PCIDSS Compliant

System and Security

Management

Risk & Fraud

Management

Data encryption, data masking and IP track

CVV2 / CVC2 validation

3D-secure authentication

Real-time payment behaviour analysis and alert on fraudulent potential payments

Exceptional sales, retrieval and chargeback tracking and analysis

Latest fraud trend, controls and technologies update with banks and card associations

Real-time payment filters on IP, card prefix, velocity, limits, countries…etc.

Payment transaction monitoring and analysis

Know-your-customer (KYC)

Merchant company, products and website review

Reference resources, workshop training and advisory support

Risk and Fraud Management Framework for Risk and Fraud Management Framework for eCommerce eCommerce

10%

7%

13%

28%

18%

17%

7%

Payment Gateway

Gaming

Online Payments

Others

Airline

Travel Agent

CD/ DVD

Surveyed Industries based on respondents

(90 e-Commerce merchants and IPSPs from Hong Kong, China, India,

Malaysia. Philippines, Korea, Australia, Singapore, Japan, New

Zealand)

Extracted from e-Commerce Fraud Management Merchant Survey Visa Asia Pacific September 2007

Survey/ Analysis Checklist taken from e-Commerce Fraud Management Merchant Survey Visa Asia Pacific

Survey/ Analysis Checklist taken from e-Commerce Fraud Management Merchant Survey Visa Asia Pacific

28%

4%

2%

2%

2%

62%

0.01-0.10%

0.11-0.20%

0.21-0.30%

0.31-0.40%

0.41-0.50%

0.51+%

Fraud as a percentage of Sales


Checklist: What is Your Industry Fraud Rate? Checklist: What is Your Industry Fraud Rate?

19%

15%

37%

29%

Finance

Operation

Top Management

Others

Who is responsible for implementing fraud policies in your

organization?


Checklist: Who is the Fraud Master in Your Org? Checklist: Who is the Fraud Master in Your Org?

82%

18%

Yes

No

Do you accept International Order?


Checklist: Will I Serve Local or International Market? Checklist: Will I Serve Local or International Market?

60%

40%

Yes

No

Do you require customers to register to complete a purchase?


Checklist: Will I Require Customer Registration? Checklist: Will I Require Customer Registration?

44%

56%

Yes

No

Do you require registration, do you require activation?


Checklist: Will I require automatic or manual activation? Checklist: Will I require automatic or manual activation?

20%

17%

63% Yes

No

No Verificationbefore Delivery

Do you deliver goods to customers who fail to screen customer

verification process?


Checklist: What is Your Verification Process afterPayment Approval?

Checklist: What is Your Verification Process afterPayment Approval?

16%

10%

10%

39%

25%

Negative Tool

Rule Only

Multiple Tools

Rules + negative list

no tool

What Fraud Management Tools do you employ?


Checklist: Do You Deploy Anti-Fraud Tools? Checklist: Do You Deploy Anti-Fraud Tools?

30%

70%

Yes

No

Do you require customer to present their card upon delivery?


Checklist: Do I receive physical identity check? Checklist: Do I receive physical identity check?

Findings

• Most of the purchase is not required user name and password. Majority of

the failed attempt login us not blocked

• Majority of them have no Order Verification Process for Order Taking and

Delivery

• Majority of them have no CVC2 Implementation

• Majority of them have no VBV Implementation

• Majority of them are not paying alert on the IP address matching with card

number issued or place of delivery

• Majority of them would not call customer before delivery

• Majority of them are not required to show the credit card upon the delivery.

Survey/ Analysis Survey/ Analysis


Suggestion　and　Best　

Practices

Prevention

System

• Turn on VBV/ SECURECODE (AsiaPay PAYGATE)

• Turn on Card Verification Value (CVV2) (AsiaPay PAYGATE)

Business Practice

• Enhancement of proper comprehensive customer registration (mile

program)

• Insist upon “Sight Card” requirement during delivery of services

• Use of (Customer) User ID and Password with barred access if errors

occur with 3 times

• Use of “Positive List” as reference for third-party purchases

• Require third-party purchases to only be made by authorized party with

separate registration process for such authorized parties.

• Enforce shipping controls including a minimum period for the delivery of

goods or booking of flights

Suggestion / Best Practices Suggestion / Best Practices


Detection

System

• Employ Negative Fraud/ Charge-back Database Check

• Employ Velocity Checking for multiple purchases

• Employ Transaction Scoring based on amount, high risk country

• Employ IP address check – multiple purchase using different card account

numbers originating from the same IP address.

Business Practice

• Compile High Risk countries where high levels of fraud/ charge-back occur

and implement additional controls or limit

• Correlate the card issuing country to the address provided by the

customer. Extra control is implemented on those their countries are

mismatch.

• Check for incomplete or suspicious customers.



Hint of Suspicious Transaction/ Customer

Consider the following are worthy of further investigation. These are common

attributes of a fraudulent order, while any single point in this list is indicating that

the order is suspicious.

•Different Shipment addresses and Billing addresses

•Use of free/anonymous E-mail by the customer

•Foreign orders or shipments

•All lower case information

•Larger than normal orders, in term of amount or quantity.

•Rush orders High-ticket orders

• Multiples orders with same credit card

•Multiples of the same item.



Investigation and Response

• Contact the customer for suspicious transactions for supporting document

and personal identity verification

• Contact the card issuer via your IPSP/ Merchant Bank for suspicious

transactions.

• Cancel or refund for confirmed/ high possible fraud

• Inform your Merchant Bank / IPSP and make a police report if it is

appropriate

• Share information within industry forums or fraud risk group

• Work with Merchant Bank/ IPSP in implementing fraud detection system

(FMS of AsiaPay)

• Use VBV/ SECURECODE for authentication all time

• Effective Monitoring System implemented by Merchant



AsiaPay　Fraud　Management　　　　　

Case　Study

1. Payment

Authentication

1. Payment

Authentication

2. Negative

and Control

Validation

2. Negative

and Control

Validation

Maintainable control and blocking parameters on - negative card, negative IP, high-risk country, processing limits, 3D status,…etc.

4. Fraud

Alerts

4. Fraud

Alerts

Real-time transaction analysis, fraud pattern mapping and blocking especially on transaction origination, invalid attempts, velocity check,…etc.

Real-time reporting and email alert (extendable to SMS) to banks and merchants

5. Payment

Authorisation

5. Payment

Authorisation

Lost and Stolen Card

Insufficient Fund

Others…

PayAlert System

Format Check: - Card length, MOD10, Name input ...etc

Authentication: - CVV2/CVC2, 3D-Secure …etc

3. Fraud

Pattern

Analysis

3. Fraud

Pattern

Analysis

PayAlert Controller

PayAlert Monitor

PayAlert Alarm

Fraud Management Framework Fraud Management Framework

PayAlert - Fraud detection system to alert merchants on fraud-potential payment

PayAlert ControllerMaintainable control and blocking parameters on negative card, negative IP, high-risk country, processing limits, 3D status,…etc.

PayAlert MonitorReal-time transaction analysis, fraud pattern mapping and blocking especially on transaction origination, invalid attempts, velocity check,…etc.

PayAlert AlarmReal-time reporting and email alert (extendable to SMS) to banks and merchants

Fraud Management Tool Fraud Management Tool

PesoPay Fraud Monitoring Pay Alert shows you alert warning in the transaction reportPesoPay Fraud Monitoring Pay Alert shows you alert warning in the transaction report

PesoPay Pay Alert shows you the reason for fraud suspicion on successful transactionPesoPay Pay Alert shows you the reason for fraud suspicion on successful transaction

Pay Alert will prompt merchant to decide whether to allow the transaction or askcustomer for Valid ID proof that matches credit card used

Pay Alert will prompt merchant to decide whether to allow the transaction or askcustomer for Valid ID proof that matches credit card used

Merchant can call the customer and ask for valid IDwith same name that matches the credit card for verification

If merchant wants to reject transaction, he can void or refund transaction amount to Customer; merchant should cancel transaction in their Store Control Admin

If merchant wants to reject transaction, he can void or refund transaction amount to Customer; merchant should cancel transaction in their Store Control Admin

Try to Resolve Issue Before Settlement DeadlineBEFORE settlement time = VOID buttonsAFTER settlement time = REFUND buttons

Real-time Alert Lookup

IP/Country Trace

3D Authentication

Status

CVV2/CVC2 Flag

Anti-Fraud: Dashboards to Monitor Transactions Anti-Fraud: Dashboards to Monitor Transactions

Anti-Fraud: Enable Fraud ControlsAnti-Fraud: Enable Fraud Controls

Enable of CVV2, High Risk Country Checking, Cardholder Name Checking, Decline transaction from same IP

Anti-Fraud: Block the High RiskAnti-Fraud: Block the High Risk

High Risk Country List

Anti-Fraud: Payment Limits Anti-Fraud: Payment Limits

Set the max purchase limit per transaction, per day, per month

Anti-Fraud: Know the State of Fraud Online Anti-Fraud: Know the State of Fraud Online

Fraud Management Information/ News

Anti-Fraud: Arm Yourself with Knowledge Anti-Fraud: Arm Yourself with Knowledge

Merchant

Education

Operations

Control

Payment

Monitoring Control

Fraud detection

and alertsRisky

Payment Filters

Payment

Authentication

Secure

Transaction

Processing

Industry

Market Update

Merchant

Acquisition

Control

PCIDSS Compliant

System and Security

Management

Risk & Fraud

Management

Data encryption, data masking and IP track

CVV2 / CVC2 validation

3D-secure authentication

Real-time payment behaviour analysis and alert on fraudulent potential payments

Exceptional sales, retrieval and chargeback tracking and analysis

Latest fraud trend, controls and technologies update with banks and card associations

Real-time payment filters on IP, card prefix, velocity, limits, countries…etc.

Payment transaction monitoring and analysis

Know-your-customer (KYC)

Merchant company, products and website review

Reference resources, workshop training and advisory support

Risk and Fraud Management Success =Risk and Fraud Management Success =Team Operations + Anti-Fraud Technology TogetherTeam Operations + Anti-Fraud Technology Together