News

Today, Procard LTD successfully completed the implementation project for its partner Kazeuromobile LLC (Astana, Kazaqstan) in the International Payment System Visa. Beginning from this date the project went live into production and a flow of both issuing and acquiring transactions of our partner started to be processed by Procard processor.

The complex and challenging implementation began several months ago. Our team carried out all the necessary tests, resulting in the Procard processor infrastructure meeting the strict IPS Visa requirements.

Thus, our partner received the opportunity to use a modern service for its business.

More detals about our partner

Kazeuromobile LLC in cooperation with KAR-TEL LLC (Mobile operator Beeline KZ) have built a payment service of digital wallets on the base of the mobile number of clients. The Simp!y service is a fast-growing fintech in Kazaqstan that attracts customers with its simplicity, convenience and security. 

In 2020 our partner received the status of Associated Member of IPS Visa. After that Kazeuromobile LLC and Procard LTD signed an agreement according to which all issuing and acquiring operations will be processed by Procard's processor.

Today, Procard LTD finished its annual PCI 3DS audit. The independent auditing company Avantio Ltd. (Dublin, Ireland) confirms the compliance of Procard information infrastructure to requirements of  PCI 3DS version 2.1.

This is a very important step in building an independent third party processor on the base of our data center and allows Procard LTD to successfully implement itself in the IPS Visa and MasterCard.

A few words about PCI 3DS.

Created by Visa and MasterCard, 3D Secure, also called 3DS, is a technical standard that adds a layer of security to online credit and debit card transactions. The PCI 3DS (or Three Domain Secure, 3-D Secure) is a modern messaging protocol that enables consumer authentication with their card issuer when making online purchases. PCI 3DS and PCI DSS are separate standards. 

The 3DS standard applies to 3DS environments (3DE) where 3DSS, ACS, and/or DS functions are performed. The DSS standard applies to the cardholder data environment (CDE), where payment card data is stored, processed, or transmitted.The Strong Customer Authentication regulation, as part of PSD2 in Europe and similar regulations in the UK, India and Australia, might require using 3DS for card payments. 3DS is optional in other regions but you can still use it as a tool to reduce fraud. Integrate 3D Secure (3DS) into your checkout flow. 

3DS can be very effective at stopping third-party fraud. However, it does nothing to prevent first-party fraud, which makes up the bulk of the average merchant's chargebacks.

Today, Procard LTD finished its first PCI PIN Security audit. The independent auditing company Advantio Ltd. (Dublin, Ireland) confirms the compliance of Procard information infrastructure to requirements of PCI PIN Security version 3.0.

This is a very important step in building an independent third party processor on the base of our data center and allows Procard LTD to successfully implement itself in the IPS Visa and MasterCard.

A few words about PCI  PIN Security.

The Payment Card Industry (PCI) PIN Security Requirements are essential guidelines for ensuring the secure management, processing, and transmission of Personal Identification Number (PIN) data. Let’s explore the key aspects:

1. Overview:
• These requirements focus on safeguarding PINs used in transactions governed by the PCI standards.
• The document is organized into seven logically related groups called Control Objectives.
2. Control Objectives:
• Control Objective 1: Ensures that PINs used in transactions are processed using equipment and methodologies that keep them secure.
• Control Objective 2: Ensures that cryptographic keys used for PIN encryption/decryption and related key management are created in a way that prevents predictability or favoring certain keys over others.
3. Technical Reference:
• The requirements are based on industry standards such as ANSI, EMV, ISO, FIPS, NIST, and PCI.
• They cover topics like symmetric key distribution, key management, and secure PIN processing.
4. Symmetric Key Distribution:
• Normative Annex A provides details on symmetric key distribution using asymmetric techniques.
• It outlines secure methods for distributing keys to ensure confidentiality and integrity.

In summary, PCI PIN Security Requirements play a critical role in maintaining the integrity and confidentiality of PIN data, contributing to safer electronic transactions worldwide. 

Today, Procard LTD finished its annual PCI DSS audit. The independent auditing company Advantio Ltd. (Dublin, Ireland) confirms the compliance of Procard information infrastructure to requirements of  PCI DSS version 3.2.1.

This is a very important step in building an independent third party processor on the base of our data center and allows Procard LTD to successfully implement itself in the IPS Visa and MasterCard.

A few words about PCI DSS.

The Payment Card Industry Data Security Standard (PCI DSS) is a set of security requirements designed to protect cardholder data during payment card processing. Here are the key points to cover in your article:

• Understanding PCI DSS Audit:
• Definition: A PCI DSS audit is a comprehensive assessment of an organization’s adherence to the PCI security standards.
• Purpose: To verify that the organization has implemented necessary controls and security measures to protect sensitive cardholder data.
• Frequency: Typically conducted annually, but the frequency may vary based on the organization’s level and risk profile.
• Audit Steps:
• Pre-engagement:
• Determine the scope of the audit.
• Engage with a Qualified Security Assessor (QSA) or an Internal Security Assessor (ISA).
• Pre-onsite:
• Conduct an initial gap assessment to ensure readiness.
• Clarify requirements and expectations.
• Onsite:
• Validate and document compliance during the audit.
• Address any identified gaps or issues.
• Post-onsite:
• Collaborate on remediation steps.
• Prepare the Report on Compliance (ROC).
• Ongoing Support:
• Continuously monitor compliance.
• Seek guidance from QSAs when needed.

Key considerations for Procard LTD after audit:

• Risk Assessment: The company creates and uses a real system for evaluating threats and vulnerabilities.
• Policies and Procedures: Procard develops a strong foundation for compliance - information security policies and procedures and strongly follows all these rules in everyday business processes.
• Latest Standard: All of the staff stays informed about updates.
• Documentation: All documentation of Procard is maintained with accurate records.
• Qualified Assessors: The company prefers to work with QSAs or ISAs.

Today, Procard received confirmation from IPS Visa about the successful launch of transaction flows in accordance with the VTS protocol - the special part for acquirers which called VTS For Merchants ..

The complex and challenging implementation began several months ago. Our team carried out all the necessary tests, resulting in the Procard processor infrastructure meeting the strict IPS Visa requirements.

Thus, our clients received the opportunity to use a modern service for their business.

A few words about VTS

Visa Token Service (VTS) plays a crucial role in enhancing digital commerce innovation. Let’s dive into the details:

1. What Is Visa Token Service (VTS)?
• VTS is a foundational platform for global tokenization provided by Visa.
• Its mission is to bring trust to digital payments by replacing sensitive account information (such as the 16-digit primary account number) with a unique digital identifier called a token.
• These tokens allow payments to be processed without exposing actual account details, significantly enhancing security.
2. Key Features and Benefits of VTS:
• Fraud Reduction: By using tokens, VTS helps reduce fraud and unauthorized transactions.
• Authorization Enhancement: It increases authorization rates, ensuring smoother payment experiences.
• Versatility: VTS supports online, in-store, and mobile in-app purchases.
• Flexible Deployment: VTS offers various deployment and management options.
• Consumer Convenience: It simplifies the purchasing experience for consumers.
3. Who Benefits from VTS?
• Issuers: VTS empowers issuer banks to provide secure and efficient payment solutions.
• Merchants: They benefit from increased authorization rates and reduced fraud risk.
• Independent Developers: VTS enables seamless integration into digital payment ecosystems.
4. How Does VTS Work?
• Tokenization: Sensitive account information is replaced with a unique token.
• Digitization: Tokens are provisioned to devices or platforms for secure transactions.
• Global Reach: VTS leverages Visa’s global network for seamless payments.

In summary, Visa Token Service ensures that digital payments are not only secure but also convenient, fostering trust in the evolving world of commerce.