Blog

Over the past couple of weeks I have run into many merchants that feel ripped off by their merchant sales representative. Time and time again I hear “I just didn’t know what to ask for.” Like with any other purchase for your business, it is important to learn about your product.

Here is a list of common terms you should know when talking to credit card processing companies:

• Qualified Rate – This is typically the rate you are quoted when you sign up for a merchant account. This rate only applies to swiped regular retail cards. Be sure to ask what your Mid-Qualified and non-Qualified rate will be.
• You may also be charged an Authorization fee. This is the amount charged to a merchant account each time communication happens between the software or point of sale terminal and the authorizing network. Make sure you are not charged an additional transaction fee because the two are the same.
• Your sales agent may refer to Basis Points. Basis points are the percentage that you are charged on a credit card transaction. One basis point is equal to 1/100th of 1 percent. Thus a rate of 1.85% is equivalent to 185 basis points. For some merchants, a basis point mark above Interchange is advantageous. Continue reading "Terms to Know When Shopping for a Merchant Account"

We all frequently read about various types of scams to look out for, warnings of Packet Sniffing, and stolen card numbers. The real scams to look for are the ones that are directly on your merchant account application. Fees seem to suddenly pop up after you have signed your agreement.

One of the most interesting scams that has come up frequently is related to hidden merchant fees. This scam entices merchants to apply for accounts at low rates with a brief quote. They conceal fees, rates, and many various extra charges. When applying for a merchant account, is important to stay away from advertisements that claim to have the lowest rates around. Some key fees to ask for are: discount rates, mid qualified rates (keyed rates), non qualified rates (rewards card and purchase card rates), transaction fees, setup fees, annual fees, statement fees, services fees, PCI Compliance fees, merchant club fees, and early termination fees.

Continue reading "What Hidden Merchant Account Fees Should You Watch Out For?"

WEP (Wired Equivalent Privacy) is an algorithm used to secure wireless networks. Many major retailers, such as TJ Maxx, use WEP and have recently been hacked into. Many weaknesses have been identified when using a WEP connection and it has been known to be easily hacked.

In the PCI DSS 1.2 Summary of Changes, the PCI Security Standards Council announced several adjustments to the wireless network security requirements:

• Wireless must be implemented using strong encryption for authentication and transmission. The Council cites IEEE 802.11i as an appropriate example.
• Merchants are no longer permitted to deploy any new Wired Equivalent Privacy (WEP) networks as of March 31^st, 2009.
• Merchants using WEP networks must transition to Wi-Fi Protected Access (WPA) security no later than June 30, 2010.

Converting to WPA should be a fairly easy process. Most technical websites show that all wireless equipment manufactured since late 2003 comes standard with WPA (Wireless Application Protocol), which is an open standard for application layer network communications in a wireless environment. It is mainly used to enable mobile phones.

Continue reading "Is Your Company’s Wi-Fi Network Secure?"

Many merchants ask me this question and want to know how it will affect their business.  The Payment Card Industry Data Security Standard (PCI DSS) is a set of requirements developed by the major credit card companies to enhance credit card data security. These requirements only apply to e-commerce merchants or merchants that are using an online payment gateway. In recent years there have been many card industry security breaches. It became apparent that there needed to be specific guidelines for all merchant services providers that store card holder data and all merchants that pass data through their terminal.

According to the bank card associations, in October 2008 any merchant that applies for a new merchant ID from any credit card processing company must be PCI DSS compliant. In some cases this may mean the merchant will have to download a new application into their terminal. By October of 2009, all merchants must be PCI DSS compliant.

If you are using a POS terminal at a retail location, you are still passing data through the system. The application running on your terminal must be an up-to-date version. Most card processors call you to do a download or an upgrade similar to when truncation laws were put into effect. If you have not received a call yet, be proactive and call your card processor to get compliant.

Continue reading "What is PCI DSS?"