How To Collect and Store Credit Card Data Securely
When merchants accept credit card payments, they also must consider what happens after the transaction is authorized. Can they store the card data? Should they?
Insights and updates from the Basis Theory team
When merchants accept credit card payments, they also must consider what happens after the transaction is authorized. Can they store the card data? Should they?
In an increasingly competitive marketplace, it is vital to remove every little bit of friction that can cause a consumer not to complete a purchase. Friction can inc...
Going live with a PCI-compliant product or service can become cumbersome for merchants. On top of understanding and adhering to the Payment Card Industry Data Securi...
For centuries, payments have been “bundled”. Large multinational institutions have led the way in banking, money, payments, investments, and more, becoming large fin...
In our thoroughly networked world, many are constantly glued to their mobile devices, devouring the musings, postings, and comments that are the lifeblood of social ...
The Payment Card Industry Data Security Standard (PCI DSS) is the global standard for ensuring the secure handling of credit card data. It’s designed to protect card...
In February, the engineering team spent our time working on big picture items as well as granular bug fixes to improve platform performance. Read on for details of h...
In today’s digital, virtual world, there are vanishingly few businesses remaining who can operate on a cash basis - everyone has to accept digital payments, like cre...
In a digital and connected world, data is the most valuable virtual commodity. Access to, and control of, data is a fiercely competitive and much-debated area of mod...
Payment processing in higher risk industries often comes with the fear that the processor could halt payouts at any point - potentially without warning. For two high...
Any time a credit card transaction occurs, the payment carries detailed data along with it to better classify and analyze the purchase. The amount and type of data i...
Merchants use batch payment processing to submit multiple transactions at once, rather than in real-time as the payment details come in, generally to reduce fees and...
When planning to accept payments, integrating and going live quickly can ensure a smooth and swift road to generating revenue. Hosted payment pages can offer merchan...
Today’s economy is increasingly driven by complex purchases: beyond the exchange of cash for an item in a retail store, we have become accustomed to making digital o...
E-commerce, by its very nature, is international, which opens the door for a global customer base. Opting to accept global payments can ensure that merchants can off...
In the world of payments, selecting partners to help transact business is one of the most complex, but critical, processes any business can complete. Choosing the ri...
Total processing volume (also known as total payment volume, or TPV) is the sum of all payments passed through a specific payment processor over a given period of ti...
Payments for cannabis and hemp companies, whether dispensaries, growers, or other merchants, can be quite complex.
10x+ Performance Enhancement on Token Searching January came with a huge performance enhancement on our Token Search and Token List endpoints, these are now returnin...
As businesses grow, the complexities of keeping up with the money that flows in and out of their accounts start to pile up. The solution is to optimize payment opera...
Online dating and related services are booming globally, with demand increasing at a rapid pace. The market for online dating and apps was valued at $7.94 billion in...
According to the industry group PYMNTS, failed payments cost subscription merchants as much as 9% - 11% of their revenue. While some of that revenue loss represents ...
Companies that fall under the MCC category of “digital games” include the merchants that sell and distribute digital games or game-related products. More specificall...
A token requestor ID (TRID) is a unique identifier that allows merchants to request network tokens from token providers and is a prerequisite for enabling network to...
As 2022 came to a close, we knew we wanted to spend time on 4 key components of our product: Global expansion, developer integration experience, enhancing tokenizati...
Negative option merchants are merchants that offer an enticing option for customers, like a free trial, that requires a credit card to sign up. The customer, in turn...
Like so many full-service payment providers, Stripe offers an apparently very simple proposition: run all your payment transactions through their system and pay a si...
Triangulation fraud is a complicated fraud scheme that occurs, predominantly in ecommerce, between three parties: an unsuspecting customer, a fraudulent seller, and ...
What is P2PE? P2PE stands for point to point encryption, and is used to refer to a method of payment security in which all data is encrypted, stored, and controlled ...
Merchants that want to integrate payments directly into their website or application have several options for doing so, but will often eventually look to iframe (inl...
Tokens: What is a Token Vault? A token is a non-exploitable identifier that references sensitive data. Tokens can take any shape, are safe to expose, and are easy to...
Payments become delinquent when they are not made according to a pre-agreed schedule. Almost by definition, then, they are almost always associated with recurring pa...
What is Payments Vaulting? Merchants are said to be ‘vaulting payments’ when they contract with a partner, which stores sensitive cardholder data securely and provid...
What are Payment Orchestration Platforms (POPs)? Payment orchestration providers, also known as payment orchestration platforms (POPs), offer a range of payment and ...
What is Vendor Lock-in? Vendor lock-in describes a situation where a customer becomes entirely dependent on a specific vendor for products or services, and switching...
The Payments Card Industry Data Security Standard (PCI DSS) outlines hundreds of requirements for storing, processing, and transmitting cardholder data. Any business...
The terms “payment tokens” and “network tokens” can be found trending as far back as early 2004, but conversation around them has become inescapable in the last few ...
What is a Universal Payment Vault? A payment vault is a storage facility where merchants securely manage customer payment details, and transmit them to payment partn...
Estimates suggest that somewhere between 36% and 50% of all transactions worldwide are now completed digitally. While this may not come as a surprise to many, what m...
Merchants strive to have a seamlessly integrated payment flow for customers. From the outside looking in, many may assume that this is achievable through a light and...
Frictionless payments offer the least amount of effort to get a transaction closed. There is no universally accepted definition of a frictionless payment, it is more...
Why Does 3D-Secure Matter? 3D Secure (3DS) provides an additional layer of security for online transactions, adding an identity confirmation partner to the standard ...
This November, Basis Theory introduced several enhancements geared toward expanding our Payment Stack capabilities. With a focus on providing adaptable payment solut...
3D Secure (3DS) is an extra layer of protection for consumers when paying by credit card online. The “3D” stands for “3 domains”, because this extra step involves ad...
Merchants, especially online, have no choice but to contract with at least one payment service provider (PSP) to ensure they can execute transactions with credit car...
In any subscription business, there is inevitably churn - subscribers who end their contract and move on. There is, however, a difference between those who choose to...
In the first four posts of this five-part series, we covered the rules of payment processing for high risk merchants, what causes processors to shut down merchants, ...
Sophisticated high-risk merchants understand that de-risking their payments operations can truly be a game changer for their business. They see that not only is it i...
As a high-risk merchant, you know that hedging your risks can make it easier for your business to remain operational. One important way to achieve this when using a ...
Why it’s Crucial to Constantly Improve Payments Performance For any business, revenue growth is key to continued development and opportunity. And revenue growth can ...